DUID 00:04:b3:1a:42:bc:1a:c5:17:be:50:23:e2:c5:3e:34:6b:a8 forked to background, child pid 4644 [ 33.419288][ T4645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.454356][ T4645] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.185' (ECDSA) to the list of known hosts. 2023/01/19 15:30:05 fuzzer started 2023/01/19 15:30:05 dialing manager at 10.128.0.169:41879 syzkaller login: [ 51.060407][ T5076] cgroup: Unknown subsys name 'net' [ 51.167961][ T5076] cgroup: Unknown subsys name 'rlimit' 2023/01/19 15:30:06 syscalls: 129 2023/01/19 15:30:06 code coverage: enabled 2023/01/19 15:30:06 comparison tracing: enabled 2023/01/19 15:30:06 extra coverage: enabled 2023/01/19 15:30:06 delay kcov mmap: enabled 2023/01/19 15:30:06 setuid sandbox: enabled 2023/01/19 15:30:06 namespace sandbox: enabled 2023/01/19 15:30:06 Android sandbox: /sys/fs/selinux/policy does not exist 2023/01/19 15:30:06 fault injection: enabled 2023/01/19 15:30:06 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2023/01/19 15:30:06 net packet injection: enabled 2023/01/19 15:30:06 net device setup: enabled 2023/01/19 15:30:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/01/19 15:30:06 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/01/19 15:30:06 NIC VF setup: PCI device 0000:00:11.0 is not available 2023/01/19 15:30:06 USB emulation: enabled 2023/01/19 15:30:06 hci packet injection: enabled 2023/01/19 15:30:06 wifi device emulation: enabled 2023/01/19 15:30:06 802.15.4 emulation: enabled 2023/01/19 15:30:06 fetching corpus: 0, signal 0/2000 (executing program) 2023/01/19 15:30:06 fetching corpus: 50, signal 46196/49769 (executing program) 2023/01/19 15:30:06 fetching corpus: 100, signal 63069/68200 (executing program) 2023/01/19 15:30:07 fetching corpus: 150, signal 80593/87085 (executing program) 2023/01/19 15:30:07 fetching corpus: 200, signal 91225/99102 (executing program) 2023/01/19 15:30:07 fetching corpus: 250, signal 101869/110990 (executing program) 2023/01/19 15:30:08 fetching corpus: 300, signal 107219/117690 (executing program) 2023/01/19 15:30:08 fetching corpus: 350, signal 113766/125483 (executing program) 2023/01/19 15:30:09 fetching corpus: 400, signal 120045/132941 (executing program) 2023/01/19 15:30:09 fetching corpus: 450, signal 124274/138400 (executing program) 2023/01/19 15:30:10 fetching corpus: 500, signal 128820/144146 (executing program) 2023/01/19 15:30:10 fetching corpus: 550, signal 133446/149870 (executing program) 2023/01/19 15:30:10 fetching corpus: 600, signal 139686/157128 (executing program) 2023/01/19 15:30:11 fetching corpus: 649, signal 142837/161410 (executing program) 2023/01/19 15:30:11 fetching corpus: 697, signal 146222/165901 (executing program) 2023/01/19 15:30:11 fetching corpus: 746, signal 150158/170857 (executing program) 2023/01/19 15:30:12 fetching corpus: 795, signal 154878/176496 (executing program) 2023/01/19 15:30:12 fetching corpus: 845, signal 158826/181365 (executing program) 2023/01/19 15:30:13 fetching corpus: 895, signal 162398/185893 (executing program) 2023/01/19 15:30:13 fetching corpus: 944, signal 166005/190380 (executing program) 2023/01/19 15:30:13 fetching corpus: 994, signal 169030/194373 (executing program) 2023/01/19 15:30:14 fetching corpus: 1044, signal 172400/198610 (executing program) 2023/01/19 15:30:14 fetching corpus: 1094, signal 175693/202766 (executing program) 2023/01/19 15:30:14 fetching corpus: 1143, signal 179121/206955 (executing program) 2023/01/19 15:30:15 fetching corpus: 1193, signal 181925/210620 (executing program) 2023/01/19 15:30:15 fetching corpus: 1242, signal 185189/214570 (executing program) 2023/01/19 15:30:15 fetching corpus: 1292, signal 187341/217603 (executing program) 2023/01/19 15:30:16 fetching corpus: 1342, signal 189197/220303 (executing program) 2023/01/19 15:30:16 fetching corpus: 1392, signal 190806/222819 (executing program) 2023/01/19 15:30:17 fetching corpus: 1442, signal 193226/226038 (executing program) 2023/01/19 15:30:17 fetching corpus: 1491, signal 195715/229227 (executing program) 2023/01/19 15:30:17 fetching corpus: 1541, signal 198028/232328 (executing program) 2023/01/19 15:30:18 fetching corpus: 1590, signal 200623/235574 (executing program) 2023/01/19 15:30:18 fetching corpus: 1640, signal 202831/238474 (executing program) 2023/01/19 15:30:18 fetching corpus: 1690, signal 205498/241756 (executing program) 2023/01/19 15:30:19 fetching corpus: 1740, signal 208239/245050 (executing program) 2023/01/19 15:30:19 fetching corpus: 1788, signal 210842/248163 (executing program) 2023/01/19 15:30:19 fetching corpus: 1836, signal 212543/250508 (executing program) 2023/01/19 15:30:20 fetching corpus: 1886, signal 214669/253215 (executing program) 2023/01/19 15:30:20 fetching corpus: 1935, signal 217603/256576 (executing program) 2023/01/19 15:30:21 fetching corpus: 1984, signal 219016/258673 (executing program) 2023/01/19 15:30:21 fetching corpus: 2034, signal 221707/261794 (executing program) 2023/01/19 15:30:22 fetching corpus: 2084, signal 223128/263905 (executing program) 2023/01/19 15:30:22 fetching corpus: 2134, signal 225588/266773 (executing program) 2023/01/19 15:30:22 fetching corpus: 2183, signal 227221/269023 (executing program) 2023/01/19 15:30:22 fetching corpus: 2232, signal 228796/271190 (executing program) 2023/01/19 15:30:23 fetching corpus: 2282, signal 231511/274251 (executing program) 2023/01/19 15:30:23 fetching corpus: 2331, signal 232901/276254 (executing program) 2023/01/19 15:30:24 fetching corpus: 2380, signal 234538/278404 (executing program) 2023/01/19 15:30:24 fetching corpus: 2430, signal 236606/280901 (executing program) 2023/01/19 15:30:24 fetching corpus: 2480, signal 238790/283460 (executing program) 2023/01/19 15:30:25 fetching corpus: 2529, signal 240561/285596 (executing program) 2023/01/19 15:30:25 fetching corpus: 2579, signal 242297/287766 (executing program) [ 71.153247][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.160115][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 2023/01/19 15:30:26 fetching corpus: 2629, signal 244219/290071 (executing program) 2023/01/19 15:30:26 fetching corpus: 2678, signal 245691/292017 (executing program) 2023/01/19 15:30:26 fetching corpus: 2728, signal 247989/294541 (executing program) 2023/01/19 15:30:27 fetching corpus: 2778, signal 249430/296456 (executing program) 2023/01/19 15:30:27 fetching corpus: 2828, signal 251212/298569 (executing program) 2023/01/19 15:30:27 fetching corpus: 2878, signal 252449/300290 (executing program) 2023/01/19 15:30:28 fetching corpus: 2927, signal 253632/301945 (executing program) 2023/01/19 15:30:28 fetching corpus: 2976, signal 255338/303967 (executing program) 2023/01/19 15:30:28 fetching corpus: 3026, signal 256413/305548 (executing program) 2023/01/19 15:30:29 fetching corpus: 3075, signal 258033/307492 (executing program) 2023/01/19 15:30:29 fetching corpus: 3124, signal 259947/309674 (executing program) 2023/01/19 15:30:29 fetching corpus: 3174, signal 261316/311390 (executing program) 2023/01/19 15:30:30 fetching corpus: 3222, signal 262441/312940 (executing program) 2023/01/19 15:30:30 fetching corpus: 3270, signal 264396/315090 (executing program) [ 76.263604][ T14] cfg80211: failed to load regulatory.db 2023/01/19 15:30:31 fetching corpus: 3320, signal 266110/316995 (executing program) 2023/01/19 15:30:31 fetching corpus: 3369, signal 267072/318380 (executing program) 2023/01/19 15:30:31 fetching corpus: 3418, signal 268048/319774 (executing program) 2023/01/19 15:30:32 fetching corpus: 3468, signal 269030/321155 (executing program) 2023/01/19 15:30:32 fetching corpus: 3518, signal 270761/323067 (executing program) 2023/01/19 15:30:32 fetching corpus: 3568, signal 271892/324557 (executing program) 2023/01/19 15:30:33 fetching corpus: 3618, signal 273245/326171 (executing program) 2023/01/19 15:30:33 fetching corpus: 3668, signal 275021/327993 (executing program) 2023/01/19 15:30:34 fetching corpus: 3716, signal 276468/329660 (executing program) 2023/01/19 15:30:34 fetching corpus: 3766, signal 277572/331080 (executing program) 2023/01/19 15:30:35 fetching corpus: 3815, signal 278756/332485 (executing program) 2023/01/19 15:30:35 fetching corpus: 3865, signal 279689/333772 (executing program) 2023/01/19 15:30:35 fetching corpus: 3915, signal 280911/335224 (executing program) 2023/01/19 15:30:36 fetching corpus: 3965, signal 282010/336632 (executing program) 2023/01/19 15:30:36 fetching corpus: 4015, signal 282983/337901 (executing program) 2023/01/19 15:30:37 fetching corpus: 4064, signal 283889/339163 (executing program) 2023/01/19 15:30:37 fetching corpus: 4113, signal 285387/340775 (executing program) 2023/01/19 15:30:37 fetching corpus: 4162, signal 286747/342245 (executing program) 2023/01/19 15:30:38 fetching corpus: 4212, signal 287767/343512 (executing program) 2023/01/19 15:30:38 fetching corpus: 4262, signal 288628/344657 (executing program) 2023/01/19 15:30:39 fetching corpus: 4311, signal 289621/345870 (executing program) 2023/01/19 15:30:39 fetching corpus: 4361, signal 290728/347126 (executing program) 2023/01/19 15:30:39 fetching corpus: 4411, signal 291531/348241 (executing program) 2023/01/19 15:30:40 fetching corpus: 4461, signal 292641/349511 (executing program) 2023/01/19 15:30:40 fetching corpus: 4511, signal 294078/350937 (executing program) 2023/01/19 15:30:40 fetching corpus: 4561, signal 295157/352139 (executing program) 2023/01/19 15:30:41 fetching corpus: 4611, signal 296170/353272 (executing program) 2023/01/19 15:30:41 fetching corpus: 4660, signal 297377/354571 (executing program) 2023/01/19 15:30:42 fetching corpus: 4710, signal 298493/355834 (executing program) 2023/01/19 15:30:42 fetching corpus: 4758, signal 299361/356912 (executing program) 2023/01/19 15:30:42 fetching corpus: 4808, signal 300163/357970 (executing program) 2023/01/19 15:30:43 fetching corpus: 4857, signal 301421/359251 (executing program) 2023/01/19 15:30:43 fetching corpus: 4904, signal 302863/360606 (executing program) 2023/01/19 15:30:44 fetching corpus: 4952, signal 303535/361516 (executing program) 2023/01/19 15:30:44 fetching corpus: 5002, signal 304528/362582 (executing program) 2023/01/19 15:30:44 fetching corpus: 5052, signal 305456/363661 (executing program) 2023/01/19 15:30:45 fetching corpus: 5101, signal 306489/364729 (executing program) 2023/01/19 15:30:45 fetching corpus: 5151, signal 307509/365826 (executing program) 2023/01/19 15:30:46 fetching corpus: 5201, signal 308537/366940 (executing program) 2023/01/19 15:30:46 fetching corpus: 5251, signal 309134/367753 (executing program) 2023/01/19 15:30:46 fetching corpus: 5301, signal 310124/368799 (executing program) 2023/01/19 15:30:47 fetching corpus: 5351, signal 311183/369845 (executing program) 2023/01/19 15:30:47 fetching corpus: 5400, signal 312020/370764 (executing program) 2023/01/19 15:30:48 fetching corpus: 5449, signal 313336/371922 (executing program) 2023/01/19 15:30:48 fetching corpus: 5498, signal 313822/372682 (executing program) 2023/01/19 15:30:48 fetching corpus: 5546, signal 315036/373788 (executing program) 2023/01/19 15:30:49 fetching corpus: 5596, signal 316057/374782 (executing program) 2023/01/19 15:30:49 fetching corpus: 5645, signal 317040/375778 (executing program) 2023/01/19 15:30:50 fetching corpus: 5694, signal 318021/376758 (executing program) 2023/01/19 15:30:51 fetching corpus: 5743, signal 318790/377642 (executing program) 2023/01/19 15:30:51 fetching corpus: 5793, signal 319706/378533 (executing program) 2023/01/19 15:30:51 fetching corpus: 5843, signal 320408/379323 (executing program) 2023/01/19 15:30:51 fetching corpus: 5892, signal 321269/380184 (executing program) 2023/01/19 15:30:52 fetching corpus: 5941, signal 321879/380960 (executing program) 2023/01/19 15:30:52 fetching corpus: 5991, signal 322740/381821 (executing program) 2023/01/19 15:30:53 fetching corpus: 6039, signal 323701/382690 (executing program) 2023/01/19 15:30:53 fetching corpus: 6089, signal 324406/383427 (executing program) 2023/01/19 15:30:53 fetching corpus: 6136, signal 325345/384300 (executing program) 2023/01/19 15:30:54 fetching corpus: 6184, signal 326246/385140 (executing program) 2023/01/19 15:30:54 fetching corpus: 6233, signal 327034/385929 (executing program) 2023/01/19 15:30:54 fetching corpus: 6282, signal 327779/386699 (executing program) 2023/01/19 15:30:55 fetching corpus: 6332, signal 328409/387375 (executing program) 2023/01/19 15:30:55 fetching corpus: 6381, signal 329423/388239 (executing program) 2023/01/19 15:30:55 fetching corpus: 6431, signal 329979/388923 (executing program) 2023/01/19 15:30:56 fetching corpus: 6480, signal 330702/389652 (executing program) 2023/01/19 15:30:56 fetching corpus: 6529, signal 331563/390453 (executing program) 2023/01/19 15:30:57 fetching corpus: 6578, signal 332392/391222 (executing program) 2023/01/19 15:30:57 fetching corpus: 6628, signal 333170/391946 (executing program) 2023/01/19 15:30:57 fetching corpus: 6678, signal 334020/392666 (executing program) 2023/01/19 15:30:57 fetching corpus: 6728, signal 334913/393458 (executing program) 2023/01/19 15:30:58 fetching corpus: 6778, signal 336007/394219 (executing program) 2023/01/19 15:30:58 fetching corpus: 6828, signal 336760/394869 (executing program) 2023/01/19 15:30:59 fetching corpus: 6878, signal 337396/395550 (executing program) 2023/01/19 15:30:59 fetching corpus: 6926, signal 338445/396299 (executing program) 2023/01/19 15:30:59 fetching corpus: 6976, signal 339324/396995 (executing program) 2023/01/19 15:31:00 fetching corpus: 7026, signal 339813/397530 (executing program) 2023/01/19 15:31:00 fetching corpus: 7074, signal 340393/398135 (executing program) 2023/01/19 15:31:00 fetching corpus: 7123, signal 341055/398806 (executing program) 2023/01/19 15:31:01 fetching corpus: 7173, signal 342064/399521 (executing program) 2023/01/19 15:31:01 fetching corpus: 7223, signal 342737/400142 (executing program) 2023/01/19 15:31:02 fetching corpus: 7273, signal 343587/400765 (executing program) 2023/01/19 15:31:02 fetching corpus: 7323, signal 344445/401384 (executing program) 2023/01/19 15:31:02 fetching corpus: 7372, signal 344914/401941 (executing program) 2023/01/19 15:31:03 fetching corpus: 7421, signal 345563/402521 (executing program) 2023/01/19 15:31:03 fetching corpus: 7471, signal 346156/403080 (executing program) 2023/01/19 15:31:03 fetching corpus: 7521, signal 346811/403663 (executing program) 2023/01/19 15:31:04 fetching corpus: 7571, signal 347414/404219 (executing program) 2023/01/19 15:31:04 fetching corpus: 7620, signal 347943/404714 (executing program) 2023/01/19 15:31:05 fetching corpus: 7670, signal 348780/405325 (executing program) 2023/01/19 15:31:05 fetching corpus: 7720, signal 349611/405900 (executing program) 2023/01/19 15:31:05 fetching corpus: 7769, signal 350532/406498 (executing program) 2023/01/19 15:31:06 fetching corpus: 7819, signal 351112/406987 (executing program) 2023/01/19 15:31:06 fetching corpus: 7868, signal 351681/407440 (executing program) 2023/01/19 15:31:06 fetching corpus: 7918, signal 352297/407962 (executing program) 2023/01/19 15:31:07 fetching corpus: 7967, signal 352737/408425 (executing program) 2023/01/19 15:31:07 fetching corpus: 8016, signal 353456/408921 (executing program) 2023/01/19 15:31:08 fetching corpus: 8066, signal 354107/409405 (executing program) 2023/01/19 15:31:08 fetching corpus: 8116, signal 354759/409884 (executing program) 2023/01/19 15:31:09 fetching corpus: 8165, signal 355318/410344 (executing program) 2023/01/19 15:31:09 fetching corpus: 8214, signal 356259/410844 (executing program) 2023/01/19 15:31:09 fetching corpus: 8264, signal 357146/411377 (executing program) 2023/01/19 15:31:10 fetching corpus: 8314, signal 357905/411860 (executing program) 2023/01/19 15:31:10 fetching corpus: 8363, signal 358595/412330 (executing program) 2023/01/19 15:31:10 fetching corpus: 8412, signal 359330/412816 (executing program) 2023/01/19 15:31:11 fetching corpus: 8462, signal 359967/413250 (executing program) 2023/01/19 15:31:12 fetching corpus: 8511, signal 360519/413668 (executing program) 2023/01/19 15:31:12 fetching corpus: 8561, signal 360907/414073 (executing program) 2023/01/19 15:31:12 fetching corpus: 8610, signal 361335/414447 (executing program) 2023/01/19 15:31:13 fetching corpus: 8659, signal 362017/414886 (executing program) 2023/01/19 15:31:13 fetching corpus: 8708, signal 362621/415296 (executing program) 2023/01/19 15:31:13 fetching corpus: 8758, signal 363161/415707 (executing program) 2023/01/19 15:31:14 fetching corpus: 8808, signal 363679/416130 (executing program) 2023/01/19 15:31:14 fetching corpus: 8857, signal 364328/416499 (executing program) 2023/01/19 15:31:14 fetching corpus: 8906, signal 364878/416831 (executing program) 2023/01/19 15:31:15 fetching corpus: 8954, signal 365304/417174 (executing program) 2023/01/19 15:31:16 fetching corpus: 9003, signal 365851/417535 (executing program) 2023/01/19 15:31:16 fetching corpus: 9051, signal 366355/417867 (executing program) 2023/01/19 15:31:16 fetching corpus: 9101, signal 366934/418215 (executing program) 2023/01/19 15:31:17 fetching corpus: 9151, signal 367363/418556 (executing program) 2023/01/19 15:31:17 fetching corpus: 9198, signal 367781/418902 (executing program) 2023/01/19 15:31:17 fetching corpus: 9248, signal 368405/419257 (executing program) 2023/01/19 15:31:18 fetching corpus: 9297, signal 368929/419606 (executing program) 2023/01/19 15:31:18 fetching corpus: 9346, signal 369615/419927 (executing program) 2023/01/19 15:31:19 fetching corpus: 9396, signal 370123/420273 (executing program) 2023/01/19 15:31:19 fetching corpus: 9445, signal 370646/420614 (executing program) 2023/01/19 15:31:20 fetching corpus: 9495, signal 371189/420906 (executing program) 2023/01/19 15:31:20 fetching corpus: 9545, signal 371711/421219 (executing program) 2023/01/19 15:31:20 fetching corpus: 9593, signal 372132/421501 (executing program) 2023/01/19 15:31:21 fetching corpus: 9643, signal 372761/421786 (executing program) 2023/01/19 15:31:21 fetching corpus: 9692, signal 373478/422090 (executing program) 2023/01/19 15:31:22 fetching corpus: 9742, signal 374041/422372 (executing program) 2023/01/19 15:31:22 fetching corpus: 9792, signal 374494/422628 (executing program) 2023/01/19 15:31:22 fetching corpus: 9842, signal 374968/422876 (executing program) 2023/01/19 15:31:22 fetching corpus: 9892, signal 375463/423146 (executing program) 2023/01/19 15:31:23 fetching corpus: 9942, signal 376025/423380 (executing program) 2023/01/19 15:31:23 fetching corpus: 9992, signal 376544/423655 (executing program) 2023/01/19 15:31:24 fetching corpus: 10041, signal 376984/423904 (executing program) 2023/01/19 15:31:24 fetching corpus: 10089, signal 377520/424173 (executing program) 2023/01/19 15:31:25 fetching corpus: 10137, signal 378170/424449 (executing program) 2023/01/19 15:31:25 fetching corpus: 10186, signal 378640/424703 (executing program) 2023/01/19 15:31:26 fetching corpus: 10236, signal 379247/424954 (executing program) 2023/01/19 15:31:26 fetching corpus: 10286, signal 379938/425178 (executing program) 2023/01/19 15:31:26 fetching corpus: 10335, signal 380286/425417 (executing program) 2023/01/19 15:31:27 fetching corpus: 10385, signal 380937/425631 (executing program) [ 132.583301][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.589646][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 2023/01/19 15:31:27 fetching corpus: 10434, signal 381316/425874 (executing program) 2023/01/19 15:31:27 fetching corpus: 10483, signal 381837/426109 (executing program) 2023/01/19 15:31:28 fetching corpus: 10533, signal 382346/426138 (executing program) 2023/01/19 15:31:28 fetching corpus: 10581, signal 382910/426138 (executing program) 2023/01/19 15:31:29 fetching corpus: 10631, signal 383430/426138 (executing program) 2023/01/19 15:31:29 fetching corpus: 10680, signal 383905/426138 (executing program) 2023/01/19 15:31:30 fetching corpus: 10730, signal 384453/426138 (executing program) 2023/01/19 15:31:30 fetching corpus: 10780, signal 384875/426140 (executing program) 2023/01/19 15:31:30 fetching corpus: 10829, signal 385376/426140 (executing program) 2023/01/19 15:31:31 fetching corpus: 10878, signal 386048/426140 (executing program) 2023/01/19 15:31:31 fetching corpus: 10928, signal 386492/426140 (executing program) 2023/01/19 15:31:32 fetching corpus: 10977, signal 387049/426140 (executing program) 2023/01/19 15:31:32 fetching corpus: 11027, signal 387536/426140 (executing program) 2023/01/19 15:31:33 fetching corpus: 11076, signal 388024/426146 (executing program) 2023/01/19 15:31:33 fetching corpus: 11126, signal 388468/426146 (executing program) 2023/01/19 15:31:33 fetching corpus: 11175, signal 389016/426148 (executing program) 2023/01/19 15:31:34 fetching corpus: 11225, signal 389480/426149 (executing program) 2023/01/19 15:31:34 fetching corpus: 11274, signal 389834/426164 (executing program) 2023/01/19 15:31:34 fetching corpus: 11322, signal 390492/426207 (executing program) 2023/01/19 15:31:35 fetching corpus: 11371, signal 390894/426207 (executing program) 2023/01/19 15:31:35 fetching corpus: 11420, signal 391283/426207 (executing program) 2023/01/19 15:31:36 fetching corpus: 11469, signal 391819/426207 (executing program) 2023/01/19 15:31:36 fetching corpus: 11518, signal 392484/426209 (executing program) 2023/01/19 15:31:36 fetching corpus: 11568, signal 392902/426209 (executing program) 2023/01/19 15:31:37 fetching corpus: 11618, signal 393389/426209 (executing program) 2023/01/19 15:31:37 fetching corpus: 11668, signal 393929/426209 (executing program) 2023/01/19 15:31:37 fetching corpus: 11718, signal 394443/426212 (executing program) 2023/01/19 15:31:38 fetching corpus: 11768, signal 394866/426212 (executing program) 2023/01/19 15:31:38 fetching corpus: 11818, signal 395334/426212 (executing program) 2023/01/19 15:31:38 fetching corpus: 11867, signal 395798/426212 (executing program) 2023/01/19 15:31:39 fetching corpus: 11917, signal 396331/426212 (executing program) 2023/01/19 15:31:39 fetching corpus: 11966, signal 396664/426212 (executing program) 2023/01/19 15:31:40 fetching corpus: 12015, signal 397264/426212 (executing program) 2023/01/19 15:31:40 fetching corpus: 12063, signal 397685/426212 (executing program) 2023/01/19 15:31:41 fetching corpus: 12113, signal 398222/426212 (executing program) 2023/01/19 15:31:41 fetching corpus: 12163, signal 398539/426212 (executing program) 2023/01/19 15:31:41 fetching corpus: 12213, signal 398973/426212 (executing program) 2023/01/19 15:31:41 fetching corpus: 12260, signal 399313/426212 (executing program) 2023/01/19 15:31:42 fetching corpus: 12307, signal 399714/426212 (executing program) 2023/01/19 15:31:42 fetching corpus: 12355, signal 400121/426212 (executing program) 2023/01/19 15:31:43 fetching corpus: 12403, signal 400557/426213 (executing program) 2023/01/19 15:31:43 fetching corpus: 12452, signal 401214/426249 (executing program) 2023/01/19 15:31:44 fetching corpus: 12499, signal 401627/426250 (executing program) 2023/01/19 15:31:44 fetching corpus: 12549, signal 401983/426250 (executing program) 2023/01/19 15:31:44 fetching corpus: 12597, signal 402384/426253 (executing program) 2023/01/19 15:31:45 fetching corpus: 12645, signal 402998/426255 (executing program) 2023/01/19 15:31:45 fetching corpus: 12694, signal 403312/426255 (executing program) 2023/01/19 15:31:45 fetching corpus: 12740, signal 403747/426255 (executing program) 2023/01/19 15:31:46 fetching corpus: 12790, signal 404174/426270 (executing program) 2023/01/19 15:31:46 fetching corpus: 12838, signal 404550/426300 (executing program) 2023/01/19 15:31:46 fetching corpus: 12885, signal 404986/426308 (executing program) 2023/01/19 15:31:47 fetching corpus: 12932, signal 405375/426311 (executing program) 2023/01/19 15:31:48 fetching corpus: 12981, signal 405727/426313 (executing program) 2023/01/19 15:31:48 fetching corpus: 13030, signal 406085/426313 (executing program) 2023/01/19 15:31:48 fetching corpus: 13078, signal 406430/426314 (executing program) 2023/01/19 15:31:49 fetching corpus: 13126, signal 406796/426314 (executing program) 2023/01/19 15:31:49 fetching corpus: 13173, signal 407335/426318 (executing program) 2023/01/19 15:31:50 fetching corpus: 13223, signal 407630/426336 (executing program) 2023/01/19 15:31:50 fetching corpus: 13268, signal 408004/426363 (executing program) 2023/01/19 15:31:50 fetching corpus: 13317, signal 408463/426364 (executing program) 2023/01/19 15:31:51 fetching corpus: 13362, signal 408857/426374 (executing program) 2023/01/19 15:31:51 fetching corpus: 13412, signal 409156/426374 (executing program) 2023/01/19 15:31:51 fetching corpus: 13461, signal 409537/426374 (executing program) 2023/01/19 15:31:52 fetching corpus: 13510, signal 409893/426393 (executing program) 2023/01/19 15:31:52 fetching corpus: 13558, signal 410247/426394 (executing program) 2023/01/19 15:31:52 fetching corpus: 13608, signal 410554/426413 (executing program) 2023/01/19 15:31:53 fetching corpus: 13658, signal 410895/426427 (executing program) 2023/01/19 15:31:53 fetching corpus: 13707, signal 411384/426429 (executing program) 2023/01/19 15:31:54 fetching corpus: 13756, signal 411845/426429 (executing program) 2023/01/19 15:31:54 fetching corpus: 13803, signal 412210/426429 (executing program) 2023/01/19 15:31:54 fetching corpus: 13851, signal 412592/426429 (executing program) 2023/01/19 15:31:55 fetching corpus: 13901, signal 412930/426429 (executing program) 2023/01/19 15:31:55 fetching corpus: 13950, signal 413446/426429 (executing program) 2023/01/19 15:31:56 fetching corpus: 13995, signal 413878/426431 (executing program) 2023/01/19 15:31:56 fetching corpus: 14044, signal 414315/426431 (executing program) 2023/01/19 15:31:56 fetching corpus: 14094, signal 414743/426431 (executing program) 2023/01/19 15:31:57 fetching corpus: 14142, signal 415172/426431 (executing program) 2023/01/19 15:31:57 fetching corpus: 14192, signal 415608/426431 (executing program) 2023/01/19 15:31:58 fetching corpus: 14242, signal 416021/426431 (executing program) 2023/01/19 15:31:58 fetching corpus: 14291, signal 416290/426452 (executing program) 2023/01/19 15:31:58 fetching corpus: 14341, signal 416586/426454 (executing program) 2023/01/19 15:31:59 fetching corpus: 14387, signal 416991/426454 (executing program) 2023/01/19 15:31:59 fetching corpus: 14387, signal 416991/426454 (executing program) 2023/01/19 15:32:01 starting 6 fuzzer processes 15:32:01 executing program 0: r0 = getpid() perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:32:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'\x00', 0x7132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) openat$cgroup_ro(r2, &(0x7f0000000140)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) r4 = perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext, 0x200}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(0x0, r1, 0x0, r4, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0xfffffffffffffffd, 0xffea) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.usage_sys\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0x2, &(0x7f0000000d00)=ANY=[@ANYBLOB="f1"], &(0x7f0000000480)='GPL\x00', 0x3ff, 0x68, &(0x7f0000000840)=""/104, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0x5, 0x10001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x660c, 0x0) 15:32:01 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000300), 0x20000000, 0x2}, 0x20) 15:32:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000021c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500d9000000000012cc19280a01380b4637eaa1b96dbb895c000000007e2e299e30a6fab9912b2b9c07ccb8feb0326f8af55453d720910c22f256"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0), 0x48) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0xd2, 0x5a, 0x0, 0x0, 0x40, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1803, 0x4, @perf_bp={&(0x7f0000000280), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x800}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x36, 0x8, 0x3, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x1, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ee1, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x7, 0xffffffffffffffff, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)={0x0, 0x2}, 0x10) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002600)={0x11, 0xb, &(0x7f0000002100)=ANY=[@ANYBLOB="180000000104000000000000018000009500002f00000000bd980001fcffffff852000000100000085000000a1000000de05e0ff00000000186b00000c00000000000000030000008520000005000000950000000000000037046fc5436206170e975c96e77981928b5f4a4f5d8e27a856f044ca949b7e4fb5c09ac14fb73cf2bfc805915edfe1fd574c70c9d859ec9243c35650c722e787dd79d3d61c3acc97258bc4f08916123462c904770ee6"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002580)={0x8, 0x1}, 0x8, 0x10, 0x0}, 0x80) bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x204d, &(0x7f00000005c0)=ANY=[@ANYRES16=r3], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x100002}, 0x8, 0x10, &(0x7f0000000740)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[0xffffffffffffffff]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)={&(0x7f0000000ac0)='./file1\x00', 0x0, 0x10}, 0x10) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1c, 0x7, &(0x7f0000001ec0)=ANY=[@ANYBLOB="ccc894d44c31621e9a18b25a477fe8000008b2000080000002000000182a00001d997c91a07b60cb0aad2bbe1731878512f37b79a1b51ac97a3dcb3b0e884786c12fc4cc6ebe52", @ANYRES32, @ANYBLOB], &(0x7f0000000900)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x0, 0x0, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)=[r4, 0xffffffffffffffff, r0, 0xffffffffffffffff, r5, r6, r2]}, 0x80) 15:32:01 executing program 3: syz_clone(0x180a1010, 0x0, 0x0, 0x0, 0x0, 0x0) 15:32:01 executing program 5: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00'}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffdef) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) [ 167.032979][ T5109] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 167.053989][ T5109] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 167.062040][ T5109] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.069603][ T5109] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 167.076619][ T5118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.077892][ T5109] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 167.084323][ T5118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.092096][ T5109] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.098867][ T5118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.104802][ T5109] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 167.112419][ T5118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.126457][ T5109] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 167.126525][ T5118] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 167.141316][ T5109] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 167.141509][ T5118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.163362][ T5115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 167.172585][ T4387] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 167.179893][ T5118] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 167.225963][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 167.235059][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 167.242733][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 167.255732][ T4387] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 167.262978][ T5115] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.270578][ T5115] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 167.278562][ T4387] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 167.287058][ T4387] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 167.294818][ T5115] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 167.296245][ T5109] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 167.307527][ T5127] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 167.308913][ T5115] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 167.324345][ T5127] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 167.324413][ T5109] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 167.324870][ T5127] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 167.365772][ T5127] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 167.373258][ T5127] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 167.726164][ T5106] chnl_net:caif_netlink_parms(): no params data found [ 167.769557][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 167.857944][ T5111] chnl_net:caif_netlink_parms(): no params data found [ 167.935829][ T5114] chnl_net:caif_netlink_parms(): no params data found [ 168.010518][ T5122] chnl_net:caif_netlink_parms(): no params data found [ 168.019791][ T5121] chnl_net:caif_netlink_parms(): no params data found [ 168.102068][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.109223][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.117818][ T5112] device bridge_slave_0 entered promiscuous mode [ 168.139541][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.146742][ T5106] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.155435][ T5106] device bridge_slave_0 entered promiscuous mode [ 168.184342][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.191721][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.199468][ T5112] device bridge_slave_1 entered promiscuous mode [ 168.233985][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.241084][ T5106] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.249143][ T5106] device bridge_slave_1 entered promiscuous mode [ 168.261123][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.268417][ T5111] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.281744][ T5111] device bridge_slave_0 entered promiscuous mode [ 168.307651][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.340743][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.348266][ T5111] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.356781][ T5111] device bridge_slave_1 entered promiscuous mode [ 168.371811][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.407469][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.414701][ T5122] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.423073][ T5122] device bridge_slave_0 entered promiscuous mode [ 168.448428][ T5106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.457659][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.466423][ T5121] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.474416][ T5121] device bridge_slave_0 entered promiscuous mode [ 168.490844][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.498084][ T5122] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.506130][ T5122] device bridge_slave_1 entered promiscuous mode [ 168.524974][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.532210][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.540238][ T5114] device bridge_slave_0 entered promiscuous mode [ 168.550169][ T5106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.559582][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.566881][ T5121] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.575032][ T5121] device bridge_slave_1 entered promiscuous mode [ 168.587337][ T5111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.608257][ T5112] team0: Port device team_slave_0 added [ 168.614514][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.621937][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.630111][ T5114] device bridge_slave_1 entered promiscuous mode [ 168.655682][ T5111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.674163][ T5112] team0: Port device team_slave_1 added [ 168.707971][ T5122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.728791][ T5106] team0: Port device team_slave_0 added [ 168.744791][ T5121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.761715][ T5122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.779607][ T5106] team0: Port device team_slave_1 added [ 168.787616][ T5114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.799658][ T5121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.811083][ T5111] team0: Port device team_slave_0 added [ 168.819051][ T5111] team0: Port device team_slave_1 added [ 168.834957][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.842029][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.868286][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.889687][ T5114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.923339][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.930321][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.956471][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.010405][ T5122] team0: Port device team_slave_0 added [ 169.020844][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.028087][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.054226][ T5106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.078278][ T5121] team0: Port device team_slave_0 added [ 169.085084][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.092345][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.118484][ T5111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.131464][ T5122] team0: Port device team_slave_1 added [ 169.147435][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.154498][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.181235][ T5106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.194951][ T5114] team0: Port device team_slave_0 added [ 169.202367][ T5121] team0: Port device team_slave_1 added [ 169.208659][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.215663][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.222540][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 169.241658][ T5111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.247802][ T5127] Bluetooth: hci2: command 0x0409 tx timeout [ 169.258282][ T5118] Bluetooth: hci0: command 0x0409 tx timeout [ 169.290508][ T5114] team0: Port device team_slave_1 added [ 169.315640][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.322805][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.348974][ T5122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.363876][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.370886][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.396983][ T5118] Bluetooth: hci3: command 0x0409 tx timeout [ 169.397081][ T5122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.403617][ T5118] Bluetooth: hci4: command 0x0409 tx timeout [ 169.445592][ T5112] device hsr_slave_0 entered promiscuous mode [ 169.452341][ T5112] device hsr_slave_1 entered promiscuous mode [ 169.469616][ T5118] Bluetooth: hci5: command 0x0409 tx timeout [ 169.477189][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.484239][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.510243][ T5121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.532021][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.539102][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.566011][ T5121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.592354][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.599329][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.625583][ T5114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.647908][ T5111] device hsr_slave_0 entered promiscuous mode [ 169.655646][ T5111] device hsr_slave_1 entered promiscuous mode [ 169.662743][ T5111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.670570][ T5111] Cannot create hsr debugfs directory [ 169.698948][ T5122] device hsr_slave_0 entered promiscuous mode [ 169.706121][ T5122] device hsr_slave_1 entered promiscuous mode [ 169.713708][ T5122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.721288][ T5122] Cannot create hsr debugfs directory [ 169.735675][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.742701][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.769240][ T5114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.812307][ T5106] device hsr_slave_0 entered promiscuous mode [ 169.819070][ T5106] device hsr_slave_1 entered promiscuous mode [ 169.827499][ T5106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.836699][ T5106] Cannot create hsr debugfs directory [ 169.896779][ T5121] device hsr_slave_0 entered promiscuous mode [ 169.904677][ T5121] device hsr_slave_1 entered promiscuous mode [ 169.911198][ T5121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.918817][ T5121] Cannot create hsr debugfs directory [ 170.037496][ T5114] device hsr_slave_0 entered promiscuous mode [ 170.044358][ T5114] device hsr_slave_1 entered promiscuous mode [ 170.050788][ T5114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.058954][ T5114] Cannot create hsr debugfs directory [ 170.356495][ T5112] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 170.372965][ T5112] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 170.383736][ T5112] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 170.393525][ T5112] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 170.456333][ T5111] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 170.486984][ T5111] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 170.503192][ T5111] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 170.513338][ T5111] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 170.526983][ T5114] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 170.549865][ T5114] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 170.579353][ T5114] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 170.606160][ T5114] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 170.667058][ T5106] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 170.678169][ T5106] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 170.690671][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.716316][ T5106] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 170.726352][ T5106] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 170.806969][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.816594][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.827968][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.879192][ T5111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.895078][ T5114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.902956][ T5122] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 170.912571][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.922738][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.931377][ T898] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.938697][ T898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.984116][ T5122] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 170.995231][ T5122] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 171.006700][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.017622][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.027290][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.036229][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.043367][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.050931][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.059817][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.069943][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.078036][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.085994][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.098780][ T5111] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.116093][ T5114] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.152024][ T5122] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 171.205140][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.215209][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.224759][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.233604][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.240669][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.249105][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.258310][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.266714][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.273842][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.281583][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.290112][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.298961][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.301560][ T5118] Bluetooth: hci2: command 0x041b tx timeout [ 171.308517][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.314233][ T5127] Bluetooth: hci1: command 0x041b tx timeout [ 171.321530][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.326897][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 171.335723][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.348951][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.405532][ T5112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.428638][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.440740][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.458100][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.466608][ T5118] Bluetooth: hci3: command 0x041b tx timeout [ 171.472884][ T5127] Bluetooth: hci4: command 0x041b tx timeout [ 171.480472][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.487679][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.495741][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.504797][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.513422][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.520527][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.528469][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.537606][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.547915][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.555802][ T5118] Bluetooth: hci5: command 0x041b tx timeout [ 171.620578][ T5106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.628501][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.637911][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.646931][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.656033][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.665646][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.674869][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.683666][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.693147][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.716179][ T5111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.728662][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.760427][ T5106] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.769016][ T5121] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 171.781740][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.800976][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.810601][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.819282][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.827307][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.836342][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.884071][ T5121] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 171.919448][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.928633][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.957017][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.964206][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.983017][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.994628][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.008293][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.015484][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.035660][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.048802][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.066611][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.075379][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.106340][ T5114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.127670][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.138287][ T5121] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.157320][ T5121] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.167157][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.189084][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.203554][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.220273][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.231636][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.240209][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.257426][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.266519][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.275404][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.283239][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.296381][ T5106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.309459][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.336960][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.355689][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.372198][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.380761][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.413630][ T5122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.464427][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.481934][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.494921][ T5111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.532935][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.552581][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.623424][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.658629][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.705788][ T5122] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.745729][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.765939][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.782959][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.790931][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.811754][ T5112] device veth0_vlan entered promiscuous mode [ 172.849438][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.859307][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.868904][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.876106][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.903702][ T5112] device veth1_vlan entered promiscuous mode [ 172.923060][ T5121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.934097][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.944149][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.953401][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.962238][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.969348][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.977625][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.986820][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.054234][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.064813][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.073095][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.080568][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.088550][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.096549][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.106020][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.115038][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.129076][ T5106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.163959][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.177298][ T5121] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.188038][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.196619][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.204656][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.213023][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.221765][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.230542][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.237670][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.245975][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.292233][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.300842][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.311518][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.320014][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.328668][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.337381][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.345970][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.353123][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.360715][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.369445][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.378238][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.386754][ T5118] Bluetooth: hci1: command 0x040f tx timeout [ 173.388592][ T5127] Bluetooth: hci2: command 0x040f tx timeout [ 173.392888][ T5118] Bluetooth: hci0: command 0x040f tx timeout [ 173.408270][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.420149][ T5112] device veth0_macvtap entered promiscuous mode [ 173.453065][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.463464][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.472588][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.483810][ T5112] device veth1_macvtap entered promiscuous mode [ 173.492026][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 173.500175][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 173.527333][ T5111] device veth0_vlan entered promiscuous mode [ 173.542860][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.551447][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 173.553029][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.557463][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 173.566692][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 173.580416][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.589780][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.599690][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 173.616334][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.624313][ T48] Bluetooth: hci5: command 0x040f tx timeout [ 173.656817][ T5111] device veth1_vlan entered promiscuous mode [ 173.703303][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.710941][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.719857][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 173.728150][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.736494][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.747417][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.755233][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.764991][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.773779][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.783162][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 173.791939][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.803334][ T5106] device veth0_vlan entered promiscuous mode [ 173.814863][ T5114] device veth0_vlan entered promiscuous mode [ 173.831240][ T5121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.851831][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.860389][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.869981][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.878315][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.887459][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.898748][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.925556][ T5106] device veth1_vlan entered promiscuous mode [ 173.937490][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.946864][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.959555][ T5114] device veth1_vlan entered promiscuous mode [ 173.999069][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.012262][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.046678][ T5122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.073297][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.085182][ T5106] device veth0_macvtap entered promiscuous mode [ 174.096220][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.112244][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.120937][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.130768][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.139722][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.148584][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.157886][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.166721][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.178301][ T5114] device veth0_macvtap entered promiscuous mode [ 174.198883][ T5114] device veth1_macvtap entered promiscuous mode [ 174.212615][ T5111] device veth0_macvtap entered promiscuous mode [ 174.224784][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.235734][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.249457][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.262898][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 174.281960][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 174.290244][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 174.299021][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 174.307630][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.317097][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.333944][ T5112] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.344502][ T5112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.356721][ T5112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.365614][ T5112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.378145][ T5106] device veth1_macvtap entered promiscuous mode [ 174.388434][ T5111] device veth1_macvtap entered promiscuous mode [ 174.399652][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.411243][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.423148][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.455111][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 174.463894][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 174.472261][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.480749][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.491459][ T5114] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.500197][ T5114] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.509593][ T5114] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.519017][ T5114] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.560223][ T5121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.611994][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.634521][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.649947][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.661650][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.674150][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.705395][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.713286][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.721868][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.730647][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.740851][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.749904][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.773291][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.796715][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.808605][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.825447][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.839545][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.855340][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.869715][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.887297][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.898841][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.909945][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.920617][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.932271][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.945430][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.954444][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.963383][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.973388][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.983531][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.001491][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.021524][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.032282][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.042509][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.053492][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.065949][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.086958][ T5106] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.097000][ T5106] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.106205][ T5106] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.116815][ T5106] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.142675][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 175.153101][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 175.165311][ T5111] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.174469][ T5111] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.183748][ T5111] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.192577][ T5111] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.236787][ T5122] device veth0_vlan entered promiscuous mode [ 175.253033][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 175.261764][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.270021][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 175.279287][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.288124][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 175.295949][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 175.312427][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.314992][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.321437][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.348838][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.357246][ T5122] device veth1_vlan entered promiscuous mode [ 175.385875][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 175.396654][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 175.404936][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 175.451229][ T5122] device veth0_macvtap entered promiscuous mode [ 175.461725][ T5127] Bluetooth: hci2: command 0x0419 tx timeout [ 175.467779][ T5127] Bluetooth: hci0: command 0x0419 tx timeout [ 175.468564][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.474578][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 175.498638][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.516372][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 175.525227][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 175.534799][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.543830][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 175.568664][ T5122] device veth1_macvtap entered promiscuous mode [ 175.606769][ T5121] device veth0_vlan entered promiscuous mode [ 175.622159][ T5127] Bluetooth: hci4: command 0x0419 tx timeout [ 175.628256][ T5127] Bluetooth: hci3: command 0x0419 tx timeout [ 175.634332][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 175.635012][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 175.650907][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 175.660213][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.691649][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.699636][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.707275][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 175.714696][ T5118] Bluetooth: hci5: command 0x0419 tx timeout [ 175.721295][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 175.750639][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.757004][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.758769][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.773143][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.790553][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.802360][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.812279][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.823308][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.833265][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.843805][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.854984][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.865554][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.876464][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.886674][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.898718][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.908983][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.920812][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.931116][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.943168][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.956265][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.979770][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 175.989968][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 175.998161][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.007164][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.032374][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.042597][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.058176][ T5121] device veth1_vlan entered promiscuous mode [ 176.111815][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.119833][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.143468][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.161289][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.186145][ T5122] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 15:32:11 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40200, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$ITER_CREATE(0x21, &(0x7f00000004c0)={r0}, 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000480)={'veth0_vlan\x00', 0x1}) r3 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x72, &(0x7f0000000700)=""/114, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_ro(r1, &(0x7f00000003c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000400)='memory.swap.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r3, &(0x7f0000000180), 0x12) [ 176.215023][ C1] hrtimer: interrupt took 56870 ns [ 176.224649][ T5122] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.279101][ T5122] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.300332][ T5122] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.322973][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 176.331008][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.384628][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.431467][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.445111][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.462210][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.508995][ T5121] device veth0_macvtap entered promiscuous mode [ 176.533838][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 176.552156][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.748411][ T5121] device veth1_macvtap entered promiscuous mode 15:32:11 executing program 0: r0 = getpid() perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 176.876751][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.928111][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.929731][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.977204][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 15:32:11 executing program 0: r0 = getpid() perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 177.038889][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.092330][ T5222] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 177.179280][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.215663][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.257293][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.272645][ T5222] CPU: 0 PID: 5222 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 177.283032][ T5222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 177.293112][ T5222] Call Trace: [ 177.296413][ T5222] [ 177.299364][ T5222] dump_stack_lvl+0xd1/0x138 [ 177.304009][ T5222] dump_header+0x10b/0x85f [ 177.308482][ T5222] oom_kill_process.cold+0x10/0x15 [ 177.313639][ T5222] out_of_memory+0x35c/0x14a0 [ 177.318373][ T5222] ? oom_killer_disable+0x280/0x280 [ 177.323613][ T5222] ? find_held_lock+0x2d/0x110 [ 177.328405][ T5222] mem_cgroup_out_of_memory+0x206/0x270 [ 177.333990][ T5222] ? mem_cgroup_margin+0x130/0x130 [ 177.339129][ T5222] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 177.344957][ T5222] memory_max_write+0x2f9/0x3c0 [ 177.349830][ T5222] ? mem_cgroup_force_empty_write+0x160/0x160 [ 177.355908][ T5222] ? lock_release+0x810/0x810 [ 177.360601][ T5222] cgroup_file_write+0x1e2/0x770 [ 177.365553][ T5222] ? mem_cgroup_force_empty_write+0x160/0x160 [ 177.371628][ T5222] ? kill_css+0x370/0x370 [ 177.375975][ T5222] ? __virt_addr_valid+0x61/0x2e0 [ 177.381381][ T5222] ? kill_css+0x370/0x370 [ 177.385735][ T5222] kernfs_fop_write_iter+0x3f1/0x600 [ 177.391068][ T5222] vfs_write+0x9ed/0xdd0 [ 177.395327][ T5222] ? kernel_write+0x630/0x630 [ 177.400016][ T5222] ? __fget_files+0x26a/0x440 [ 177.404716][ T5222] ksys_write+0x12b/0x250 [ 177.409055][ T5222] ? __ia32_sys_read+0xb0/0xb0 [ 177.413842][ T5222] ? syscall_enter_from_user_mode+0x26/0xb0 [ 177.419750][ T5222] do_syscall_64+0x39/0xb0 [ 177.424185][ T5222] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 177.430098][ T5222] RIP: 0033:0x7f6f8aa8c0c9 [ 177.434521][ T5222] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 177.454138][ T5222] RSP: 002b:00007f6f8b843168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 177.462558][ T5222] RAX: ffffffffffffffda RBX: 00007f6f8abac1f0 RCX: 00007f6f8aa8c0c9 [ 177.470551][ T5222] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 177.478528][ T5222] RBP: 00007f6f8aae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 177.486522][ T5222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.494498][ T5222] R13: 00007ffd36dfb3ff R14: 00007f6f8b843300 R15: 0000000000022000 [ 177.502526][ T5222] 15:32:12 executing program 0: r0 = getpid() perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 177.664124][ T5222] memory: usage 580kB, limit 0kB, failcnt 23 [ 177.677954][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.706612][ T5222] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 177.753734][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.776714][ T5222] Memory cgroup stats for /syz1: [ 177.777173][ T5222] anon 151552 [ 177.777173][ T5222] file 20480 [ 177.777173][ T5222] kernel 421888 [ 177.777173][ T5222] kernel_stack 163840 [ 177.777173][ T5222] pagetables 94208 [ 177.777173][ T5222] sec_pagetables 0 [ 177.777173][ T5222] percpu 64 [ 177.777173][ T5222] sock 0 [ 177.777173][ T5222] vmalloc 0 [ 177.777173][ T5222] shmem 12288 [ 177.777173][ T5222] zswap 0 [ 177.777173][ T5222] zswapped 0 [ 177.777173][ T5222] file_mapped 12288 [ 177.777173][ T5222] file_dirty 0 [ 177.777173][ T5222] file_writeback 0 [ 177.777173][ T5222] swapcached 0 [ 177.777173][ T5222] anon_thp 0 [ 177.777173][ T5222] file_thp 0 [ 177.777173][ T5222] shmem_thp 0 [ 177.777173][ T5222] inactive_anon 163840 [ 177.777173][ T5222] active_anon 0 [ 177.777173][ T5222] inactive_file 4096 15:32:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000403000000000000000000000105002000400000000000000000000003000000000400000002"], &(0x7f0000000340)=""/142, 0x4e, 0xffc3, 0x1}, 0x20) [ 177.777173][ T5222] active_file 4096 [ 177.777173][ T5222] unevictable 0 [ 177.777173][ T5222] slab_reclaimable 29232 [ 177.777173][ T5222] slab_unreclaimable 105456 [ 177.777173][ T5222] slab 134688 15:32:12 executing program 0: r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x76, &(0x7f0000000000), 0x8) [ 177.901435][ T5222] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5216,uid=0 [ 177.921034][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.984298][ T5222] Memory cgroup out of memory: Killed process 5216 (syz-executor.1) total-vm:56984kB, anon-rss:376kB, file-rss:11008kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 15:32:12 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x80, 0x3e0, 0x72}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x1000000}, 0x38) [ 178.028111][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.077989][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_0 15:32:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'\x00', 0x7132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) openat$cgroup_ro(r2, &(0x7f0000000140)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) r4 = perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext, 0x200}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(0x0, r1, 0x0, r4, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0xfffffffffffffffd, 0xffea) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.usage_sys\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0x2, &(0x7f0000000d00)=ANY=[@ANYBLOB="f1"], &(0x7f0000000480)='GPL\x00', 0x3ff, 0x68, &(0x7f0000000840)=""/104, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0x5, 0x10001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x660c, 0x0) [ 178.151088][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 178.164502][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 15:32:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'\x00', 0x7132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) openat$cgroup_ro(r2, &(0x7f0000000140)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) r4 = perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext, 0x200}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(0x0, r1, 0x0, r4, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0xfffffffffffffffd, 0xffea) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.usage_sys\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0x2, &(0x7f0000000d00)=ANY=[@ANYBLOB="f1"], &(0x7f0000000480)='GPL\x00', 0x3ff, 0x68, &(0x7f0000000840)=""/104, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0x5, 0x10001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x660c, 0x0) [ 178.193059][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.223151][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.251224][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.271106][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.282792][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.294291][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.304627][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.315641][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.326612][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.337600][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.361546][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.381220][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.409575][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.436818][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.445359][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.494229][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.521692][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.636168][ T5121] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.717545][ T5121] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.819478][ T5121] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.861178][ T5121] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.897070][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 179.015447][ T5114] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 179.029239][ T5114] CPU: 1 PID: 5114 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 179.039618][ T5114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 179.049702][ T5114] Call Trace: [ 179.053001][ T5114] [ 179.055954][ T5114] dump_stack_lvl+0xd1/0x138 [ 179.060587][ T5114] dump_header+0x10b/0x85f [ 179.065051][ T5114] oom_kill_process.cold+0x10/0x15 [ 179.070209][ T5114] out_of_memory+0x35c/0x14a0 [ 179.074934][ T5114] ? find_held_lock+0x2d/0x110 [ 179.079739][ T5114] ? oom_killer_disable+0x280/0x280 [ 179.084977][ T5114] ? find_held_lock+0x2d/0x110 [ 179.089765][ T5114] mem_cgroup_out_of_memory+0x206/0x270 [ 179.095330][ T5114] ? mem_cgroup_margin+0x130/0x130 [ 179.100455][ T5114] ? lock_downgrade+0x6e0/0x6e0 [ 179.105324][ T5114] try_charge_memcg+0xefb/0x12f0 [ 179.110274][ T5114] ? mem_cgroup_handle_over_high+0x520/0x520 [ 179.116258][ T5114] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 179.122006][ T5114] ? lock_downgrade+0x6e0/0x6e0 [ 179.127053][ T5114] obj_cgroup_charge+0x2af/0x5e0 [ 179.132006][ T5114] kmem_cache_alloc_lru+0x145/0x760 [ 179.137207][ T5114] ? __d_alloc+0x32/0x980 [ 179.141564][ T5114] __d_alloc+0x32/0x980 [ 179.145726][ T5114] ? __lock_acquire+0x166e/0x56d0 [ 179.150759][ T5114] d_alloc+0x4e/0x240 [ 179.154751][ T5114] d_alloc_parallel+0xe8/0x1410 [ 179.159709][ T5114] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 179.165702][ T5114] ? __d_lookup_rcu+0x4c0/0x4c0 [ 179.170570][ T5114] ? lockdep_init_map_type+0x21e/0x800 [ 179.176038][ T5114] ? lockdep_init_map_type+0x21e/0x800 [ 179.181514][ T5114] __lookup_slow+0x193/0x460 [ 179.186123][ T5114] ? __lookup_hash+0x180/0x180 [ 179.190905][ T5114] ? scarlett2_usb_get_mix+0x2f6/0x318 [ 179.196387][ T5114] ? scarlett2_usb_get_mix+0x2f6/0x318 [ 179.201866][ T5114] ? lookup_fast+0x14e/0x520 [ 179.206481][ T5114] walk_component+0x33f/0x5a0 [ 179.211174][ T5114] path_lookupat+0x1ba/0x840 [ 179.215782][ T5114] filename_lookup+0x1d2/0x590 [ 179.220559][ T5114] ? may_linkat+0x500/0x500 [ 179.225071][ T5114] ? __might_fault+0xd9/0x180 [ 179.229767][ T5114] ? __phys_addr_symbol+0x30/0x70 [ 179.234806][ T5114] ? __check_object_size+0x2e2/0x5a0 [ 179.240106][ T5114] ? strncpy_from_user+0x28b/0x3c0 [ 179.245235][ T5114] ? getname_flags.part.0+0x1dd/0x4f0 [ 179.250631][ T5114] user_path_at_empty+0x46/0x60 [ 179.255495][ T5114] __x64_sys_umount+0xfc/0x190 [ 179.260274][ T5114] ? path_umount+0x10b0/0x10b0 [ 179.265048][ T5114] ? syscall_enter_from_user_mode+0x26/0xb0 [ 179.270952][ T5114] do_syscall_64+0x39/0xb0 [ 179.275384][ T5114] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 179.281282][ T5114] RIP: 0033:0x7f6f8aa8d537 [ 179.285699][ T5114] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 179.305352][ T5114] RSP: 002b:00007ffd36dfa558 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 179.313809][ T5114] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6f8aa8d537 [ 179.321804][ T5114] RDX: 00007ffd36dfa62e RSI: 000000000000000a RDI: 00007ffd36dfa620 [ 179.329786][ T5114] RBP: 00007ffd36dfa620 R08: 00000000ffffffff R09: 00007ffd36dfa3f0 [ 179.337777][ T5114] R10: 000055555707d893 R11: 0000000000000246 R12: 00007f6f8aae6b24 [ 179.345766][ T5114] R13: 00007ffd36dfb6e0 R14: 000055555707d810 R15: 00007ffd36dfb720 [ 179.353767][ T5114] [ 179.365099][ T5114] memory: usage 144kB, limit 0kB, failcnt 54 [ 179.441618][ T5114] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 179.448542][ T5114] Memory cgroup stats for /syz1: [ 179.448878][ T5114] anon 45056 [ 179.448878][ T5114] file 20480 [ 179.448878][ T5114] kernel 81920 [ 179.448878][ T5114] kernel_stack 0 [ 179.448878][ T5114] pagetables 8192 [ 179.448878][ T5114] sec_pagetables 0 [ 179.448878][ T5114] percpu 64 [ 179.448878][ T5114] sock 0 [ 179.448878][ T5114] vmalloc 0 [ 179.448878][ T5114] shmem 16384 [ 179.448878][ T5114] zswap 0 [ 179.448878][ T5114] zswapped 0 [ 179.448878][ T5114] file_mapped 16384 [ 179.448878][ T5114] file_dirty 0 [ 179.448878][ T5114] file_writeback 0 [ 179.448878][ T5114] swapcached 0 [ 179.448878][ T5114] anon_thp 0 [ 179.448878][ T5114] file_thp 0 [ 179.448878][ T5114] shmem_thp 0 [ 179.448878][ T5114] inactive_anon 57344 [ 179.448878][ T5114] active_anon 4096 [ 179.448878][ T5114] inactive_file 4096 [ 179.448878][ T5114] active_file 0 [ 179.448878][ T5114] unevictable 0 [ 179.448878][ T5114] slab_reclaimable 12824 [ 179.448878][ T5114] slab_unreclaimable 44728 [ 179.448878][ T5114] slab 57552 [ 179.615798][ T5114] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5114,uid=0 [ 179.647667][ T5114] Memory cgroup out of memory: Killed process 5114 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:0 [ 179.855897][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.865732][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.888693][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 179.927838][ T5230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.936243][ T5230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.954636][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 15:32:15 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000021c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500d9000000000012cc19280a01380b4637eaa1b96dbb895c000000007e2e299e30a6fab9912b2b9c07ccb8feb0326f8af55453d720910c22f256"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0), 0x48) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0xd2, 0x5a, 0x0, 0x0, 0x40, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1803, 0x4, @perf_bp={&(0x7f0000000280), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x800}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x36, 0x8, 0x3, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x1, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ee1, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x7, 0xffffffffffffffff, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)={0x0, 0x2}, 0x10) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002600)={0x11, 0xb, &(0x7f0000002100)=ANY=[@ANYBLOB="180000000104000000000000018000009500002f00000000bd980001fcffffff852000000100000085000000a1000000de05e0ff00000000186b00000c00000000000000030000008520000005000000950000000000000037046fc5436206170e975c96e77981928b5f4a4f5d8e27a856f044ca949b7e4fb5c09ac14fb73cf2bfc805915edfe1fd574c70c9d859ec9243c35650c722e787dd79d3d61c3acc97258bc4f08916123462c904770ee6"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002580)={0x8, 0x1}, 0x8, 0x10, 0x0}, 0x80) bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x204d, &(0x7f00000005c0)=ANY=[@ANYRES16=r3], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x100002}, 0x8, 0x10, &(0x7f0000000740)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[0xffffffffffffffff]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)={&(0x7f0000000ac0)='./file1\x00', 0x0, 0x10}, 0x10) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1c, 0x7, &(0x7f0000001ec0)=ANY=[@ANYBLOB="ccc894d44c31621e9a18b25a477fe8000008b2000080000002000000182a00001d997c91a07b60cb0aad2bbe1731878512f37b79a1b51ac97a3dcb3b0e884786c12fc4cc6ebe52", @ANYRES32, @ANYBLOB], &(0x7f0000000900)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x0, 0x0, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)=[r4, 0xffffffffffffffff, r0, 0xffffffffffffffff, r5, r6, r2]}, 0x80) 15:32:15 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40200, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$ITER_CREATE(0x21, &(0x7f00000004c0)={r0}, 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000480)={'veth0_vlan\x00', 0x1}) r3 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x72, &(0x7f0000000700)=""/114, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_ro(r1, &(0x7f00000003c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000400)='memory.swap.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r3, &(0x7f0000000180), 0x12) [ 180.185317][ T75] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.462544][ T75] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.825526][ T75] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.984726][ T75] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.284465][ T75] device hsr_slave_0 left promiscuous mode [ 182.302338][ T75] device hsr_slave_1 left promiscuous mode [ 182.322044][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.329524][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.349682][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.361602][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.371300][ T75] device bridge_slave_1 left promiscuous mode [ 182.391867][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.413767][ T75] device bridge_slave_0 left promiscuous mode [ 182.420326][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.461740][ T75] device veth1_macvtap left promiscuous mode [ 182.468119][ T75] device veth0_macvtap left promiscuous mode [ 182.484838][ T75] device veth1_vlan left promiscuous mode [ 182.490932][ T75] device veth0_vlan left promiscuous mode [ 182.881206][ T75] team0 (unregistering): Port device team_slave_1 removed [ 182.896040][ T75] team0 (unregistering): Port device team_slave_0 removed [ 182.916085][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.929580][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.997903][ T75] bond0 (unregistering): Released all slaves 15:32:18 executing program 5: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00'}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffdef) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) 15:32:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'\x00', 0x7132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) openat$cgroup_ro(r2, &(0x7f0000000140)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) r4 = perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext, 0x200}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(0x0, r1, 0x0, r4, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0xfffffffffffffffd, 0xffea) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.usage_sys\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0x2, &(0x7f0000000d00)=ANY=[@ANYBLOB="f1"], &(0x7f0000000480)='GPL\x00', 0x3ff, 0x68, &(0x7f0000000840)=""/104, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0x5, 0x10001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x660c, 0x0) 15:32:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'\x00', 0x7132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) openat$cgroup_ro(r2, &(0x7f0000000140)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) r4 = perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext, 0x200}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(0x0, r1, 0x0, r4, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0xfffffffffffffffd, 0xffea) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.usage_sys\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0x2, &(0x7f0000000d00)=ANY=[@ANYBLOB="f1"], &(0x7f0000000480)='GPL\x00', 0x3ff, 0x68, &(0x7f0000000840)=""/104, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0x5, 0x10001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x660c, 0x0) 15:32:18 executing program 3: syz_clone(0x180a1010, 0x0, 0x0, 0x0, 0x0, 0x0) 15:32:18 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000021c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500d9000000000012cc19280a01380b4637eaa1b96dbb895c000000007e2e299e30a6fab9912b2b9c07ccb8feb0326f8af55453d720910c22f256"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0), 0x48) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0xd2, 0x5a, 0x0, 0x0, 0x40, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1803, 0x4, @perf_bp={&(0x7f0000000280), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x800}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x36, 0x8, 0x3, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x1, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ee1, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x7, 0xffffffffffffffff, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)={0x0, 0x2}, 0x10) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002600)={0x11, 0xb, &(0x7f0000002100)=ANY=[@ANYBLOB="180000000104000000000000018000009500002f00000000bd980001fcffffff852000000100000085000000a1000000de05e0ff00000000186b00000c00000000000000030000008520000005000000950000000000000037046fc5436206170e975c96e77981928b5f4a4f5d8e27a856f044ca949b7e4fb5c09ac14fb73cf2bfc805915edfe1fd574c70c9d859ec9243c35650c722e787dd79d3d61c3acc97258bc4f08916123462c904770ee6"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002580)={0x8, 0x1}, 0x8, 0x10, 0x0}, 0x80) bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x204d, &(0x7f00000005c0)=ANY=[@ANYRES16=r3], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x100002}, 0x8, 0x10, &(0x7f0000000740)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[0xffffffffffffffff]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)={&(0x7f0000000ac0)='./file1\x00', 0x0, 0x10}, 0x10) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1c, 0x7, &(0x7f0000001ec0)=ANY=[@ANYBLOB="ccc894d44c31621e9a18b25a477fe8000008b2000080000002000000182a00001d997c91a07b60cb0aad2bbe1731878512f37b79a1b51ac97a3dcb3b0e884786c12fc4cc6ebe52", @ANYRES32, @ANYBLOB], &(0x7f0000000900)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x0, 0x0, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)=[r4, 0xffffffffffffffff, r0, 0xffffffffffffffff, r5, r6, r2]}, 0x80) 15:32:18 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000021c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500d9000000000012cc19280a01380b4637eaa1b96dbb895c000000007e2e299e30a6fab9912b2b9c07ccb8feb0326f8af55453d720910c22f256"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0), 0x48) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0xd2, 0x5a, 0x0, 0x0, 0x40, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1803, 0x4, @perf_bp={&(0x7f0000000280), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x800}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x36, 0x8, 0x3, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x1, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ee1, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x7, 0xffffffffffffffff, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)={0x0, 0x2}, 0x10) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002600)={0x11, 0xb, &(0x7f0000002100)=ANY=[@ANYBLOB="180000000104000000000000018000009500002f00000000bd980001fcffffff852000000100000085000000a1000000de05e0ff00000000186b00000c00000000000000030000008520000005000000950000000000000037046fc5436206170e975c96e77981928b5f4a4f5d8e27a856f044ca949b7e4fb5c09ac14fb73cf2bfc805915edfe1fd574c70c9d859ec9243c35650c722e787dd79d3d61c3acc97258bc4f08916123462c904770ee6"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002580)={0x8, 0x1}, 0x8, 0x10, 0x0}, 0x80) bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x204d, &(0x7f00000005c0)=ANY=[@ANYRES16=r3], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x100002}, 0x8, 0x10, &(0x7f0000000740)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[0xffffffffffffffff]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)={&(0x7f0000000ac0)='./file1\x00', 0x0, 0x10}, 0x10) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1c, 0x7, &(0x7f0000001ec0)=ANY=[@ANYBLOB="ccc894d44c31621e9a18b25a477fe8000008b2000080000002000000182a00001d997c91a07b60cb0aad2bbe1731878512f37b79a1b51ac97a3dcb3b0e884786c12fc4cc6ebe52", @ANYRES32, @ANYBLOB], &(0x7f0000000900)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x0, 0x0, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)=[r4, 0xffffffffffffffff, r0, 0xffffffffffffffff, r5, r6, r2]}, 0x80) 15:32:18 executing program 3: syz_clone(0x180a1010, 0x0, 0x0, 0x0, 0x0, 0x0) 15:32:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000021c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500d9000000000012cc19280a01380b4637eaa1b96dbb895c000000007e2e299e30a6fab9912b2b9c07ccb8feb0326f8af55453d720910c22f256"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0), 0x48) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0xd2, 0x5a, 0x0, 0x0, 0x40, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1803, 0x4, @perf_bp={&(0x7f0000000280), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x800}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x36, 0x8, 0x3, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x1, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ee1, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x7, 0xffffffffffffffff, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)={0x0, 0x2}, 0x10) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002600)={0x11, 0xb, &(0x7f0000002100)=ANY=[@ANYBLOB="180000000104000000000000018000009500002f00000000bd980001fcffffff852000000100000085000000a1000000de05e0ff00000000186b00000c00000000000000030000008520000005000000950000000000000037046fc5436206170e975c96e77981928b5f4a4f5d8e27a856f044ca949b7e4fb5c09ac14fb73cf2bfc805915edfe1fd574c70c9d859ec9243c35650c722e787dd79d3d61c3acc97258bc4f08916123462c904770ee6"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002580)={0x8, 0x1}, 0x8, 0x10, 0x0}, 0x80) bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x204d, &(0x7f00000005c0)=ANY=[@ANYRES16=r3], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x100002}, 0x8, 0x10, &(0x7f0000000740)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[0xffffffffffffffff]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)={&(0x7f0000000ac0)='./file1\x00', 0x0, 0x10}, 0x10) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1c, 0x7, &(0x7f0000001ec0)=ANY=[@ANYBLOB="ccc894d44c31621e9a18b25a477fe8000008b2000080000002000000182a00001d997c91a07b60cb0aad2bbe1731878512f37b79a1b51ac97a3dcb3b0e884786c12fc4cc6ebe52", @ANYRES32, @ANYBLOB], &(0x7f0000000900)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x0, 0x0, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)=[r4, 0xffffffffffffffff, r0, 0xffffffffffffffff, r5, r6, r2]}, 0x80) 15:32:19 executing program 3: syz_clone(0x180a1010, 0x0, 0x0, 0x0, 0x0, 0x0) 15:32:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'\x00', 0x7132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) openat$cgroup_ro(r2, &(0x7f0000000140)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) r4 = perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext, 0x200}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(0x0, r1, 0x0, r4, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0xfffffffffffffffd, 0xffea) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.usage_sys\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0x2, &(0x7f0000000d00)=ANY=[@ANYBLOB="f1"], &(0x7f0000000480)='GPL\x00', 0x3ff, 0x68, &(0x7f0000000840)=""/104, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0x5, 0x10001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x660c, 0x0) 15:32:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000021c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500d9000000000012cc19280a01380b4637eaa1b96dbb895c000000007e2e299e30a6fab9912b2b9c07ccb8feb0326f8af55453d720910c22f256"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0), 0x48) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0xd2, 0x5a, 0x0, 0x0, 0x40, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1803, 0x4, @perf_bp={&(0x7f0000000280), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x800}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x36, 0x8, 0x3, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x1, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ee1, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x7, 0xffffffffffffffff, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)={0x0, 0x2}, 0x10) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002600)={0x11, 0xb, &(0x7f0000002100)=ANY=[@ANYBLOB="180000000104000000000000018000009500002f00000000bd980001fcffffff852000000100000085000000a1000000de05e0ff00000000186b00000c00000000000000030000008520000005000000950000000000000037046fc5436206170e975c96e77981928b5f4a4f5d8e27a856f044ca949b7e4fb5c09ac14fb73cf2bfc805915edfe1fd574c70c9d859ec9243c35650c722e787dd79d3d61c3acc97258bc4f08916123462c904770ee6"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002580)={0x8, 0x1}, 0x8, 0x10, 0x0}, 0x80) bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x204d, &(0x7f00000005c0)=ANY=[@ANYRES16=r3], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x100002}, 0x8, 0x10, &(0x7f0000000740)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[0xffffffffffffffff]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)={&(0x7f0000000ac0)='./file1\x00', 0x0, 0x10}, 0x10) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1c, 0x7, &(0x7f0000001ec0)=ANY=[@ANYBLOB="ccc894d44c31621e9a18b25a477fe8000008b2000080000002000000182a00001d997c91a07b60cb0aad2bbe1731878512f37b79a1b51ac97a3dcb3b0e884786c12fc4cc6ebe52", @ANYRES32, @ANYBLOB], &(0x7f0000000900)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x0, 0x0, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)=[r4, 0xffffffffffffffff, r0, 0xffffffffffffffff, r5, r6, r2]}, 0x80) [ 185.296117][ T5118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.311594][ T5118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.320286][ T5118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.328228][ T5118] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 185.335969][ T5118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 186.129765][ T5322] chnl_net:caif_netlink_parms(): no params data found [ 186.358759][ T5322] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.389191][ T5322] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.422928][ T5322] device bridge_slave_0 entered promiscuous mode [ 186.433343][ T5322] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.474186][ T5322] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.495303][ T5322] device bridge_slave_1 entered promiscuous mode [ 186.593645][ T5322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.614146][ T5322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.727013][ T5322] team0: Port device team_slave_0 added [ 186.753761][ T5322] team0: Port device team_slave_1 added [ 186.854638][ T5322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.872152][ T5322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.931444][ T5322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.953702][ T5322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.960702][ T5322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.061407][ T5322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.176208][ T5322] device hsr_slave_0 entered promiscuous mode [ 187.220159][ T5322] device hsr_slave_1 entered promiscuous mode [ 187.242076][ T5322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.249690][ T5322] Cannot create hsr debugfs directory [ 187.381560][ T5118] Bluetooth: hci2: command 0x0409 tx timeout [ 188.233950][ T5322] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 188.252444][ T5322] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 188.294731][ T5322] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 188.325848][ T5322] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 188.477996][ T5322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.513496][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.525800][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.537535][ T5322] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.550707][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.560356][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.569211][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.576459][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.609436][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.625490][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.640518][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.653346][ T898] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.660477][ T898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.676636][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.700769][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.717428][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.737756][ T5322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 188.750094][ T5322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.765539][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.774533][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.784686][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.794322][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.803331][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.812204][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.827676][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.119576][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.129142][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.147639][ T5322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.184824][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 189.203342][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 189.227635][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 189.236674][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.248051][ T5322] device veth0_vlan entered promiscuous mode [ 189.256225][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.265614][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.278844][ T5322] device veth1_vlan entered promiscuous mode [ 189.306503][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 189.315508][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 189.325199][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.334219][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.345603][ T5322] device veth0_macvtap entered promiscuous mode [ 189.360591][ T5322] device veth1_macvtap entered promiscuous mode [ 189.378294][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.391268][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.401631][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.415300][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.425501][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.436261][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.446455][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.459372][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.470752][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.472157][ T5118] Bluetooth: hci2: command 0x041b tx timeout [ 189.496183][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.518303][ T5322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.530106][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 189.550117][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 189.566762][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.578615][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.600080][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.616841][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.638176][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.650157][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.667992][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.678561][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.696381][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.710788][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.724092][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.734639][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.745920][ T5322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.757326][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.766263][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.779526][ T5322] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.789622][ T5322] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.798580][ T5322] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.807394][ T5322] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.884979][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.909498][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.931275][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 189.961847][ T5230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.969972][ T5230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.986711][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 190.300273][ T5400] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 190.338515][ T5400] CPU: 0 PID: 5400 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 190.348926][ T5400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 190.359017][ T5400] Call Trace: [ 190.362311][ T5400] [ 190.365251][ T5400] dump_stack_lvl+0xd1/0x138 [ 190.369956][ T5400] dump_header+0x10b/0x85f [ 190.374401][ T5400] oom_kill_process.cold+0x10/0x15 [ 190.379572][ T5400] out_of_memory+0x35c/0x14a0 [ 190.384284][ T5400] ? oom_killer_disable+0x280/0x280 [ 190.389518][ T5400] mem_cgroup_out_of_memory+0x206/0x270 [ 190.395090][ T5400] ? mem_cgroup_margin+0x130/0x130 [ 190.400240][ T5400] memory_max_write+0x2f9/0x3c0 [ 190.405111][ T5400] ? mem_cgroup_force_empty_write+0x160/0x160 [ 190.411198][ T5400] ? lock_release+0x810/0x810 [ 190.415891][ T5400] cgroup_file_write+0x1e2/0x770 [ 190.420848][ T5400] ? mem_cgroup_force_empty_write+0x160/0x160 [ 190.426953][ T5400] ? kill_css+0x370/0x370 [ 190.431324][ T5400] ? __virt_addr_valid+0x61/0x2e0 [ 190.436421][ T5400] ? kill_css+0x370/0x370 [ 190.440813][ T5400] kernfs_fop_write_iter+0x3f1/0x600 [ 190.446169][ T5400] vfs_write+0x9ed/0xdd0 [ 190.450462][ T5400] ? kernel_write+0x630/0x630 [ 190.455185][ T5400] ? __fget_files+0x26a/0x440 [ 190.459898][ T5400] ksys_write+0x12b/0x250 [ 190.464263][ T5400] ? __ia32_sys_read+0xb0/0xb0 [ 190.469083][ T5400] ? syscall_enter_from_user_mode+0x26/0xb0 [ 190.475013][ T5400] do_syscall_64+0x39/0xb0 [ 190.479561][ T5400] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 190.485486][ T5400] RIP: 0033:0x7fe4f1e8c0c9 [ 190.489929][ T5400] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 190.509570][ T5400] RSP: 002b:00007fe4f2b49168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 190.518023][ T5400] RAX: ffffffffffffffda RBX: 00007fe4f1fac050 RCX: 00007fe4f1e8c0c9 [ 190.526017][ T5400] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 190.534018][ T5400] RBP: 00007fe4f1ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 190.542047][ T5400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.550041][ T5400] R13: 00007ffcaea7d98f R14: 00007fe4f2b49300 R15: 0000000000022000 [ 190.558070][ T5400] [ 190.595382][ T5400] memory: usage 484kB, limit 0kB, failcnt 71 [ 190.604129][ T5400] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 190.611094][ T5400] Memory cgroup stats for /syz1: [ 190.616645][ T5400] anon 118784 [ 190.616645][ T5400] file 53248 [ 190.616645][ T5400] kernel 311296 [ 190.616645][ T5400] kernel_stack 98304 [ 190.616645][ T5400] pagetables 77824 [ 190.616645][ T5400] sec_pagetables 0 [ 190.616645][ T5400] percpu 64 [ 190.616645][ T5400] sock 0 [ 190.616645][ T5400] vmalloc 0 [ 190.616645][ T5400] shmem 49152 [ 190.616645][ T5400] zswap 0 [ 190.616645][ T5400] zswapped 0 [ 190.616645][ T5400] file_mapped 49152 [ 190.616645][ T5400] file_dirty 0 [ 190.616645][ T5400] file_writeback 0 [ 190.616645][ T5400] swapcached 0 [ 190.616645][ T5400] anon_thp 0 [ 190.616645][ T5400] file_thp 0 [ 190.616645][ T5400] shmem_thp 0 [ 190.616645][ T5400] inactive_anon 163840 [ 190.616645][ T5400] active_anon 4096 [ 190.616645][ T5400] inactive_file 0 [ 190.616645][ T5400] active_file 4096 [ 190.616645][ T5400] unevictable 0 [ 190.616645][ T5400] slab_reclaimable 25616 [ 190.616645][ T5400] slab_unreclaimable 88800 [ 190.616645][ T5400] slab 114416 [ 190.729802][ T5400] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5322,uid=0 [ 190.749911][ T5400] Memory cgroup out of memory: Killed process 5322 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 15:32:27 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40200, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$ITER_CREATE(0x21, &(0x7f00000004c0)={r0}, 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000480)={'veth0_vlan\x00', 0x1}) r3 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x72, &(0x7f0000000700)=""/114, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_ro(r1, &(0x7f00000003c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000400)='memory.swap.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r3, &(0x7f0000000180), 0x12) 15:32:27 executing program 5: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00'}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffdef) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) 15:32:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'\x00', 0x7132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) openat$cgroup_ro(r2, &(0x7f0000000140)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) r4 = perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext, 0x200}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(0x0, r1, 0x0, r4, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0xfffffffffffffffd, 0xffea) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.usage_sys\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0x2, &(0x7f0000000d00)=ANY=[@ANYBLOB="f1"], &(0x7f0000000480)='GPL\x00', 0x3ff, 0x68, &(0x7f0000000840)=""/104, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0x5, 0x10001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x660c, 0x0) 15:32:27 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40200, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$ITER_CREATE(0x21, &(0x7f00000004c0)={r0}, 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000480)={'veth0_vlan\x00', 0x1}) r3 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x72, &(0x7f0000000700)=""/114, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_ro(r1, &(0x7f00000003c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000400)='memory.swap.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r3, &(0x7f0000000180), 0x12) 15:32:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000021c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500d9000000000012cc19280a01380b4637eaa1b96dbb895c000000007e2e299e30a6fab9912b2b9c07ccb8feb0326f8af55453d720910c22f256"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0), 0x48) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0xd2, 0x5a, 0x0, 0x0, 0x40, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1803, 0x4, @perf_bp={&(0x7f0000000280), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x800}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x36, 0x8, 0x3, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x1, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ee1, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x7, 0xffffffffffffffff, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)={0x0, 0x2}, 0x10) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002600)={0x11, 0xb, &(0x7f0000002100)=ANY=[@ANYBLOB="180000000104000000000000018000009500002f00000000bd980001fcffffff852000000100000085000000a1000000de05e0ff00000000186b00000c00000000000000030000008520000005000000950000000000000037046fc5436206170e975c96e77981928b5f4a4f5d8e27a856f044ca949b7e4fb5c09ac14fb73cf2bfc805915edfe1fd574c70c9d859ec9243c35650c722e787dd79d3d61c3acc97258bc4f08916123462c904770ee6"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002580)={0x8, 0x1}, 0x8, 0x10, 0x0}, 0x80) bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x204d, &(0x7f00000005c0)=ANY=[@ANYRES16=r3], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x100002}, 0x8, 0x10, &(0x7f0000000740)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[0xffffffffffffffff]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)={&(0x7f0000000ac0)='./file1\x00', 0x0, 0x10}, 0x10) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1c, 0x7, &(0x7f0000001ec0)=ANY=[@ANYBLOB="ccc894d44c31621e9a18b25a477fe8000008b2000080000002000000182a00001d997c91a07b60cb0aad2bbe1731878512f37b79a1b51ac97a3dcb3b0e884786c12fc4cc6ebe52", @ANYRES32, @ANYBLOB], &(0x7f0000000900)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x0, 0x0, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)=[r4, 0xffffffffffffffff, r0, 0xffffffffffffffff, r5, r6, r2]}, 0x80) 15:32:27 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x161) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_clone(0x0, &(0x7f0000000280)="85381e113342e3764f1bdf6828", 0xd, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000500)="3e937bc9e994d8b1fb1e92c10027731e220e463162b27cd4b522aa2d9d7066174dc948080bc8ca622b578b557adbc39c591acc") r3 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x7, 0x9, 0x7, 0x0, 0x100000001, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x80000, 0x0, 0x7, 0x6, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x4) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x6) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000a00)={'macvlan0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5 [ 193.762753][ T5507] dump_stack_lvl+0xd1/0x138 [ 193.767386][ T5507] dump_header+0x10b/0x85f [ 193.771850][ T5507] oom_kill_process.cold+0x10/0x15 [ 193.777014][ T5507] out_of_memory+0x35c/0x14a0 [ 193.781732][ T5507] ? oom_killer_disable+0x280/0x280 [ 193.786974][ T5507] ? find_held_lock+0x2d/0x110 [ 193.791782][ T5507] mem_cgroup_out_of_memory+0x206/0x270 [ 193.797358][ T5507] ? mem_cgroup_margin+0x130/0x130 [ 193.802501][ T5507] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 193.808361][ T5507] memory_max_write+0x2f9/0x3c0 [ 193.813240][ T5507] ? mem_cgroup_force_empty_write+0x160/0x160 [ 193.819343][ T5507] ? lock_release+0x810/0x810 [ 193.824045][ T5507] cgroup_file_write+0x1e2/0x770 [ 193.829022][ T5507] ? mem_cgroup_force_empty_write+0x160/0x160 [ 193.835119][ T5507] ? kill_css+0x370/0x370 [ 193.839472][ T5507] ? __virt_addr_valid+0x61/0x2e0 [ 193.844539][ T5507] ? kill_css+0x370/0x370 [ 193.848898][ T5507] kernfs_fop_write_iter+0x3f1/0x600 [ 193.854219][ T5507] vfs_write+0x9ed/0xdd0 [ 193.858483][ T5507] ? kernel_write+0x630/0x630 [ 193.863188][ T5507] ? __fget_files+0x26a/0x440 [ 193.867900][ T5507] ksys_write+0x12b/0x250 [ 193.872248][ T5507] ? __ia32_sys_read+0xb0/0xb0 [ 193.877149][ T5507] ? syscall_enter_from_user_mode+0x26/0xb0 [ 193.883082][ T5507] do_syscall_64+0x39/0xb0 [ 193.887543][ T5507] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 193.893478][ T5507] RIP: 0033:0x7fd02348c0c9 [ 193.897906][ T5507] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 193.917539][ T5507] RSP: 002b:00007fd02417d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 193.926053][ T5507] RAX: ffffffffffffffda RBX: 00007fd0235ac050 RCX: 00007fd02348c0c9 [ 193.934031][ T5507] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 193.942031][ T5507] RBP: 00007fd0234e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 193.950008][ T5507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.957999][ T5507] R13: 00007ffd9f53e30f R14: 00007fd02417d300 R15: 0000000000022000 [ 193.965996][ T5507] [ 194.058738][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.065229][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 15:32:28 executing program 4: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@cgroup, r0, 0x25}, 0x14) 15:32:28 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40200, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x41029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$ITER_CREATE(0x21, &(0x7f00000004c0)={r0}, 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000480)={'veth0_vlan\x00', 0x1}) r3 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x72, &(0x7f0000000700)=""/114, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_ro(r1, &(0x7f00000003c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000400)='memory.swap.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r3, &(0x7f0000000180), 0x12) 15:32:28 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000080000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='f2fs_update_extent_tree_range\x00', r0}, 0x10) [ 194.303745][ T5507] memory: usage 496kB, limit 0kB, failcnt 19 [ 194.355456][ T5507] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 194.384601][ T5507] Memory cgroup stats for /syz3: [ 194.384862][ T5507] anon 143360 [ 194.384862][ T5507] file 53248 [ 194.384862][ T5507] kernel 311296 [ 194.384862][ T5507] kernel_stack 98304 [ 194.384862][ T5507] pagetables 77824 [ 194.384862][ T5507] sec_pagetables 0 [ 194.384862][ T5507] percpu 64 [ 194.384862][ T5507] sock 0 [ 194.384862][ T5507] vmalloc 0 [ 194.384862][ T5507] shmem 49152 [ 194.384862][ T5507] zswap 0 [ 194.384862][ T5507] zswapped 0 [ 194.384862][ T5507] file_mapped 49152 [ 194.384862][ T5507] file_dirty 4096 [ 194.384862][ T5507] file_writeback 0 [ 194.384862][ T5507] swapcached 0 [ 194.384862][ T5507] anon_thp 0 [ 194.384862][ T5507] file_thp 0 [ 194.384862][ T5507] shmem_thp 0 [ 194.384862][ T5507] inactive_anon 159744 [ 194.384862][ T5507] active_anon 32768 [ 194.384862][ T5507] inactive_file 0 [ 194.384862][ T5507] active_file 4096 [ 194.384862][ T5507] unevictable 0 [ 194.384862][ T5507] slab_reclaimable 22272 [ 194.384862][ T5507] slab_unreclaimable 88152 [ 194.384862][ T5507] slab 110424 [ 194.502607][ T5504] device lo entered promiscuous mode 15:32:29 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x161) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_clone(0x0, &(0x7f0000000280)="85381e113342e3764f1bdf6828", 0xd, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000500)="3e937bc9e994d8b1fb1e92c10027731e220e463162b27cd4b522aa2d9d7066174dc948080bc8ca622b578b557adbc39c591acc") r3 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x7, 0x9, 0x7, 0x0, 0x100000001, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x80000, 0x0, 0x7, 0x6, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x4) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x6) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000a00)={'macvlan0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x0, 0x0) write$cgroup_int(r6, 0x0, 0x7000000) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000e40)='lo\x00\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x0e\xa0\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8a\x87\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x72, &(0x7f0000000700)=""/114, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_ro(r1, &(0x7f00000003c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000400)='memory.swap.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r3, &(0x7f0000000180), 0x12) 15:32:30 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000080000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='f2fs_update_extent_tree_range\x00', r0}, 0x10) [ 196.228253][ T5122] syz-executor.3 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 196.269788][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.293925][ T5122] CPU: 0 PID: 5122 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 196.304367][ T5122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 196.314451][ T5122] Call Trace: [ 196.317754][ T5122] [ 196.320708][ T5122] dump_stack_lvl+0xd1/0x138 [ 196.325337][ T5122] dump_header+0x10b/0x85f [ 196.329801][ T5122] oom_kill_process.cold+0x10/0x15 [ 196.334959][ T5122] out_of_memory+0x35c/0x14a0 [ 196.339698][ T5122] ? find_held_lock+0x2d/0x110 [ 196.344501][ T5122] ? oom_killer_disable+0x280/0x280 [ 196.349744][ T5122] ? find_held_lock+0x2d/0x110 [ 196.354547][ T5122] mem_cgroup_out_of_memory+0x206/0x270 [ 196.360132][ T5122] ? mem_cgroup_margin+0x130/0x130 [ 196.365282][ T5122] ? lock_downgrade+0x6e0/0x6e0 [ 196.370178][ T5122] try_charge_memcg+0xefb/0x12f0 [ 196.375153][ T5122] ? mem_cgroup_handle_over_high+0x520/0x520 [ 196.381159][ T5122] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 196.386920][ T5122] ? lock_downgrade+0x6e0/0x6e0 [ 196.391830][ T5122] obj_cgroup_charge+0x2af/0x5e0 [ 196.396802][ T5122] kmem_cache_alloc_lru+0x145/0x760 [ 196.402020][ T5122] ? ext4_alloc_inode+0x28/0x680 [ 196.406993][ T5122] ? ext4_free_in_core_inode+0x70/0x70 [ 196.412482][ T5122] ext4_alloc_inode+0x28/0x680 [ 196.417280][ T5122] ? ext4_free_in_core_inode+0x70/0x70 [ 196.422767][ T5122] alloc_inode+0x61/0x230 [ 196.427133][ T5122] iget_locked+0x1bb/0x700 [ 196.431590][ T5122] __ext4_iget+0x3af/0x4230 [ 196.436147][ T5122] ? ext4_get_projid+0x190/0x190 [ 196.441111][ T5122] ? ext4_fname_prepare_lookup+0x163/0x200 [ 196.446950][ T5122] ? ext4_fname_setup_filename+0x110/0x110 [ 196.452804][ T5122] ? rcu_read_lock_sched_held+0x3e/0x70 [ 196.458396][ T5122] ext4_lookup+0x387/0x700 [ 196.462838][ T5122] ? ext4_resetent+0x2d0/0x2d0 [ 196.467654][ T5122] __lookup_slow+0x24c/0x460 [ 196.472275][ T5122] ? __lookup_hash+0x180/0x180 [ 196.477079][ T5122] ? scarlett2_usb_get_mix+0x2f6/0x318 [ 196.482592][ T5122] ? scarlett2_usb_get_mix+0x2f6/0x318 [ 196.488092][ T5122] ? lookup_fast+0x14e/0x520 [ 196.492721][ T5122] walk_component+0x33f/0x5a0 [ 196.497433][ T5122] path_lookupat+0x1ba/0x840 [ 196.502076][ T5122] filename_lookup+0x1d2/0x590 [ 196.506920][ T5122] ? may_linkat+0x500/0x500 [ 196.511470][ T5122] ? __might_fault+0xd9/0x180 [ 196.516200][ T5122] ? __phys_addr_symbol+0x30/0x70 [ 196.521264][ T5122] ? __check_object_size+0x2e2/0x5a0 [ 196.526590][ T5122] ? strncpy_from_user+0x28b/0x3c0 [ 196.531745][ T5122] ? getname_flags.part.0+0x1dd/0x4f0 [ 196.537167][ T5122] user_path_at_empty+0x46/0x60 [ 196.542057][ T5122] __x64_sys_umount+0xfc/0x190 [ 196.546862][ T5122] ? path_umount+0x10b0/0x10b0 [ 196.551667][ T5122] ? syscall_enter_from_user_mode+0x26/0xb0 [ 196.557600][ T5122] do_syscall_64+0x39/0xb0 [ 196.562057][ T5122] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 196.567989][ T5122] RIP: 0033:0x7fd02348d537 [ 196.572426][ T5122] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 196.592065][ T5122] RSP: 002b:00007ffd9f53d468 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 196.600504][ T5122] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 00007fd02348d537 [ 196.608502][ T5122] RDX: 00007ffd9f53d53c RSI: 000000000000000a RDI: 00007ffd9f53d530 [ 196.616505][ T5122] RBP: 00007ffd9f53d530 R08: 00000000ffffffff R09: 00007ffd9f53d300 [ 196.624505][ T5122] R10: 0000555555f54853 R11: 0000000000000246 R12: 00007fd0234e6b24 [ 196.632498][ T5122] R13: 00007ffd9f53e5f0 R14: 0000555555f54810 R15: 00007ffd9f53e630 [ 196.640509][ T5122] [ 196.797285][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.074358][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.197652][ T5122] memory: usage 176kB, limit 0kB, failcnt 55 [ 197.216366][ T5122] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 197.245319][ T5122] Memory cgroup stats for /syz3: [ 197.245538][ T5122] anon 45056 [ 197.245538][ T5122] file 53248 [ 197.245538][ T5122] kernel 81920 [ 197.245538][ T5122] kernel_stack 0 [ 197.245538][ T5122] pagetables 8192 [ 197.245538][ T5122] sec_pagetables 0 [ 197.245538][ T5122] percpu 64 [ 197.245538][ T5122] sock 0 [ 197.245538][ T5122] vmalloc 0 [ 197.245538][ T5122] shmem 49152 [ 197.245538][ T5122] zswap 0 [ 197.245538][ T5122] zswapped 0 [ 197.245538][ T5122] file_mapped 49152 [ 197.245538][ T5122] file_dirty 4096 [ 197.245538][ T5122] file_writeback 0 [ 197.245538][ T5122] swapcached 0 [ 197.245538][ T5122] anon_thp 0 [ 197.245538][ T5122] file_thp 0 [ 197.245538][ T5122] shmem_thp 0 [ 197.245538][ T5122] inactive_anon 61440 [ 197.245538][ T5122] active_anon 32768 [ 197.245538][ T5122] inactive_file 4096 [ 197.245538][ T5122] active_file 0 [ 197.245538][ T5122] unevictable 0 [ 197.245538][ T5122] slab_reclaimable 14896 [ 197.245538][ T5122] slab_unreclaimable 44728 [ 197.245538][ T5122] slab 59624 [ 197.350184][ T5122] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5122,uid=0 [ 197.366691][ T5127] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 197.377527][ T5122] Memory cgroup out of memory: Killed process 5122 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 197.395559][ T5127] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 197.409492][ T5127] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 197.417971][ T5127] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 197.432213][ T5127] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 197.439728][ T5127] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 198.471783][ T5549] chnl_net:caif_netlink_parms(): no params data found [ 198.893434][ T5549] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.900679][ T5549] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.932653][ T5549] device bridge_slave_0 entered promiscuous mode [ 198.997796][ T5549] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.011539][ T5549] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.019794][ T5549] device bridge_slave_1 entered promiscuous mode [ 199.444149][ T5549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.471967][ T5127] Bluetooth: hci2: command 0x0409 tx timeout [ 199.555702][ T5549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.667286][ T5549] team0: Port device team_slave_0 added [ 199.861694][ T9] device hsr_slave_0 left promiscuous mode [ 199.921607][ T9] device hsr_slave_1 left promiscuous mode [ 199.961765][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.969234][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.044503][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.071791][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.104632][ T9] device bridge_slave_1 left promiscuous mode [ 200.111283][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.152042][ T9] device bridge_slave_0 left promiscuous mode [ 200.159080][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.216616][ T9] device veth1_macvtap left promiscuous mode [ 200.232021][ T9] device veth0_macvtap left promiscuous mode [ 200.238579][ T9] device veth1_vlan left promiscuous mode [ 200.244919][ T9] device veth0_vlan left promiscuous mode [ 200.578001][ T9] team0 (unregistering): Port device team_slave_1 removed [ 200.590546][ T9] team0 (unregistering): Port device team_slave_0 removed [ 200.609002][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.625765][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.685715][ T9] bond0 (unregistering): Released all slaves [ 200.746268][ T5549] team0: Port device team_slave_1 added [ 200.838462][ T5549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.845667][ T5549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.872080][ T5549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 15:32:35 executing program 5: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00'}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffdef) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) 15:32:35 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x161) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_clone(0x0, &(0x7f0000000280)="85381e113342e3764f1bdf6828", 0xd, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000500)="3e937bc9e994d8b1fb1e92c10027731e220e463162b27cd4b522aa2d9d7066174dc948080bc8ca622b578b557adbc39c591acc") r3 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x7, 0x9, 0x7, 0x0, 0x100000001, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x80000, 0x0, 0x7, 0x6, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x4) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x6) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000a00)={'macvlan0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x0, 0x0) write$cgroup_int(r6, 0x0, 0x7000000) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000e40)='lo\x00\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x0e\xa0\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8a\x87\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x72, &(0x7f0000000700)=""/114, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_ro(r1, &(0x7f00000003c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000400)='memory.swap.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) write$cgroup_int(r3, &(0x7f0000000180), 0x12) [ 201.087846][ T5549] device hsr_slave_0 entered promiscuous mode [ 201.199273][ T5549] device hsr_slave_1 entered promiscuous mode [ 201.242653][ T5549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.313848][ T5549] Cannot create hsr debugfs directory [ 201.541423][ T5127] Bluetooth: hci2: command 0x041b tx timeout [ 203.060748][ T5549] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 203.121557][ T5549] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 203.183894][ T5549] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 203.224718][ T5549] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 203.522646][ T5549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.602809][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.610832][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.626286][ T5127] Bluetooth: hci2: command 0x040f tx timeout [ 203.646084][ T5549] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.704016][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.743249][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.772042][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.779185][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.831849][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.839919][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.912591][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.921148][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.928335][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.991931][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.019928][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.042937][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 204.061803][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 204.069895][ T5118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 204.082275][ T5118] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 204.089644][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.183821][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.204367][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.236176][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.267126][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.295901][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.332155][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.343185][ T5549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.450152][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.027315][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.041662][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 205.055082][ T5549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.122352][ T5619] chnl_net:caif_netlink_parms(): no params data found [ 205.285567][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 205.322420][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 205.451473][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.458611][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.492660][ T5619] device bridge_slave_0 entered promiscuous mode [ 205.522857][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.530014][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.555141][ T5619] device bridge_slave_1 entered promiscuous mode [ 205.612500][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 205.642186][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 205.653306][ T5549] device veth0_vlan entered promiscuous mode [ 205.683267][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 205.702331][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 205.711794][ T5127] Bluetooth: hci2: command 0x0419 tx timeout [ 205.754706][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.802556][ T5549] device veth1_vlan entered promiscuous mode [ 205.814155][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.913077][ T5549] device veth0_macvtap entered promiscuous mode [ 205.927356][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 205.936717][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 205.955014][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 205.972202][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 205.984119][ T5619] team0: Port device team_slave_0 added [ 205.993030][ T5549] device veth1_macvtap entered promiscuous mode [ 206.015410][ T5619] team0: Port device team_slave_1 added [ 206.050689][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.065770][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.151398][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.170766][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.182804][ T5127] Bluetooth: hci4: command 0x0409 tx timeout [ 206.194437][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.205415][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.216036][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.225934][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.236482][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.246524][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.257802][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.267876][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.278657][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.290710][ T5549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.301265][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 206.311728][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 206.319931][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 206.329348][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 206.344630][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.359320][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.394583][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.410440][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.421975][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.432732][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.443594][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.453786][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.464640][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.474686][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.485695][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.495731][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.507725][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.518919][ T5549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.535975][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 206.547026][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 206.588517][ T5549] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.606749][ T5549] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.626803][ T5549] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.638390][ T5549] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.717785][ T5619] device hsr_slave_0 entered promiscuous mode [ 206.735235][ T5619] device hsr_slave_1 entered promiscuous mode [ 206.767915][ T5619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.780391][ T5619] Cannot create hsr debugfs directory [ 206.878019][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.004771][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.081758][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.089837][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.182267][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.217360][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 207.273228][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.284177][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.343765][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.402315][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 207.730756][ T5674] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 207.753913][ T5674] CPU: 0 PID: 5674 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 207.764309][ T5674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 207.774397][ T5674] Call Trace: [ 207.777702][ T5674] [ 207.780668][ T5674] dump_stack_lvl+0xd1/0x138 [ 207.785307][ T5674] dump_header+0x10b/0x85f [ 207.789772][ T5674] oom_kill_process.cold+0x10/0x15 [ 207.794945][ T5674] out_of_memory+0x35c/0x14a0 [ 207.799689][ T5674] ? oom_killer_disable+0x280/0x280 [ 207.804998][ T5674] mem_cgroup_out_of_memory+0x206/0x270 [ 207.810584][ T5674] ? mem_cgroup_margin+0x130/0x130 [ 207.815762][ T5674] memory_max_write+0x2f9/0x3c0 [ 207.820655][ T5674] ? mem_cgroup_force_empty_write+0x160/0x160 [ 207.826771][ T5674] ? lock_release+0x810/0x810 [ 207.831485][ T5674] cgroup_file_write+0x1e2/0x770 [ 207.836462][ T5674] ? mem_cgroup_force_empty_write+0x160/0x160 [ 207.842572][ T5674] ? kill_css+0x370/0x370 [ 207.846939][ T5674] ? __virt_addr_valid+0x61/0x2e0 [ 207.852011][ T5674] ? kill_css+0x370/0x370 [ 207.856373][ T5674] kernfs_fop_write_iter+0x3f1/0x600 [ 207.861705][ T5674] vfs_write+0x9ed/0xdd0 [ 207.865983][ T5674] ? kernel_write+0x630/0x630 [ 207.870700][ T5674] ? __fget_files+0x26a/0x440 [ 207.875426][ T5674] ksys_write+0x12b/0x250 [ 207.879784][ T5674] ? __ia32_sys_read+0xb0/0xb0 [ 207.884579][ T5674] ? syscall_enter_from_user_mode+0x26/0xb0 [ 207.890516][ T5674] do_syscall_64+0x39/0xb0 [ 207.894969][ T5674] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 207.900949][ T5674] RIP: 0033:0x7f986aa8c0c9 [ 207.905389][ T5674] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 207.925031][ T5674] RSP: 002b:00007f986b7de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 207.933477][ T5674] RAX: ffffffffffffffda RBX: 00007f986abac050 RCX: 00007f986aa8c0c9 [ 207.941491][ T5674] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 207.949486][ T5674] RBP: 00007f986aae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 207.957491][ T5674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.965480][ T5674] R13: 00007ffee26e4f5f R14: 00007f986b7de300 R15: 0000000000022000 [ 207.973501][ T5674] [ 207.998101][ T5674] memory: usage 488kB, limit 0kB, failcnt 108 [ 208.014703][ T5674] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 208.024679][ T5674] Memory cgroup stats for /syz1: [ 208.024870][ T5674] anon 118784 [ 208.024870][ T5674] file 69632 [ 208.024870][ T5674] kernel 311296 [ 208.024870][ T5674] kernel_stack 98304 [ 208.024870][ T5674] pagetables 77824 [ 208.024870][ T5674] sec_pagetables 0 [ 208.024870][ T5674] percpu 64 [ 208.024870][ T5674] sock 0 [ 208.024870][ T5674] vmalloc 0 [ 208.024870][ T5674] shmem 65536 [ 208.024870][ T5674] zswap 0 [ 208.024870][ T5674] zswapped 0 [ 208.024870][ T5674] file_mapped 65536 [ 208.024870][ T5674] file_dirty 4096 [ 208.024870][ T5674] file_writeback 0 [ 208.024870][ T5674] swapcached 0 [ 208.024870][ T5674] anon_thp 0 [ 208.024870][ T5674] file_thp 0 [ 208.024870][ T5674] shmem_thp 0 [ 208.024870][ T5674] inactive_anon 167936 [ 208.024870][ T5674] active_anon 16384 [ 208.024870][ T5674] inactive_file 0 [ 208.024870][ T5674] active_file 4096 [ 208.024870][ T5674] unevictable 0 [ 208.024870][ T5674] slab_reclaimable 21888 [ 208.024870][ T5674] slab_unreclaimable 88152 [ 208.024870][ T5674] slab 110040 [ 208.136293][ T5674] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5549,uid=0 [ 208.154223][ T5674] Memory cgroup out of memory: Killed process 5549 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 208.251529][ T5674] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 208.261982][ T5118] Bluetooth: hci4: command 0x041b tx timeout [ 208.303769][ T5674] CPU: 1 PID: 5674 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 208.314173][ T5674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 208.324272][ T5674] Call Trace: [ 208.327579][ T5674] [ 208.330540][ T5674] dump_stack_lvl+0xd1/0x138 [ 208.335190][ T5674] dump_header+0x10b/0x85f [ 208.339666][ T5674] oom_kill_process.cold+0x10/0x15 [ 208.344840][ T5674] out_of_memory+0x35c/0x14a0 [ 208.349579][ T5674] ? oom_killer_disable+0x280/0x280 [ 208.354833][ T5674] ? find_held_lock+0x2d/0x110 [ 208.359649][ T5674] mem_cgroup_out_of_memory+0x206/0x270 [ 208.365237][ T5674] ? mem_cgroup_margin+0x130/0x130 [ 208.370395][ T5674] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 208.376243][ T5674] memory_max_write+0x2f9/0x3c0 [ 208.381128][ T5674] ? mem_cgroup_force_empty_write+0x160/0x160 [ 208.387231][ T5674] ? lock_release+0x810/0x810 [ 208.391931][ T5674] cgroup_file_write+0x1e2/0x770 [ 208.396898][ T5674] ? mem_cgroup_force_empty_write+0x160/0x160 [ 208.402993][ T5674] ? kill_css+0x370/0x370 [ 208.407347][ T5674] ? __virt_addr_valid+0x61/0x2e0 [ 208.412411][ T5674] ? kill_css+0x370/0x370 [ 208.416755][ T5674] kernfs_fop_write_iter+0x3f1/0x600 [ 208.422090][ T5674] vfs_write+0x9ed/0xdd0 [ 208.426348][ T5674] ? kernel_write+0x630/0x630 [ 208.431041][ T5674] ? __fget_files+0x26a/0x440 [ 208.435744][ T5674] ksys_write+0x12b/0x250 [ 208.440107][ T5674] ? __ia32_sys_read+0xb0/0xb0 [ 208.444887][ T5674] ? syscall_enter_from_user_mode+0x26/0xb0 [ 208.450801][ T5674] do_syscall_64+0x39/0xb0 [ 208.455240][ T5674] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 208.461144][ T5674] RIP: 0033:0x7f986aa8c0c9 [ 208.465619][ T5674] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 208.485255][ T5674] RSP: 002b:00007f986b7de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 208.493684][ T5674] RAX: ffffffffffffffda RBX: 00007f986abac050 RCX: 00007f986aa8c0c9 [ 208.501679][ T5674] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 208.509678][ T5674] RBP: 00007f986aae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 208.517690][ T5674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.525675][ T5674] R13: 00007ffee26e4f5f R14: 00007f986b7de300 R15: 0000000000022000 [ 208.533681][ T5674] [ 208.541974][ T5674] memory: usage 456kB, limit 0kB, failcnt 170 [ 208.548299][ T5674] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 208.556494][ T5674] Memory cgroup stats for /syz1: [ 208.556703][ T5674] anon 98304 [ 208.556703][ T5674] file 69632 [ 208.556703][ T5674] kernel 266240 [ 208.556703][ T5674] kernel_stack 65536 [ 208.556703][ T5674] pagetables 69632 [ 208.556703][ T5674] sec_pagetables 0 [ 208.556703][ T5674] percpu 64 [ 208.556703][ T5674] sock 0 [ 208.556703][ T5674] vmalloc 0 [ 208.556703][ T5674] shmem 65536 [ 208.556703][ T5674] zswap 0 [ 208.556703][ T5674] zswapped 0 [ 208.556703][ T5674] file_mapped 65536 [ 208.556703][ T5674] file_dirty 4096 [ 208.556703][ T5674] file_writeback 0 [ 208.556703][ T5674] swapcached 0 [ 208.556703][ T5674] anon_thp 0 [ 208.556703][ T5674] file_thp 0 [ 208.556703][ T5674] shmem_thp 0 [ 208.556703][ T5674] inactive_anon 110592 [ 208.556703][ T5674] active_anon 53248 [ 208.556703][ T5674] inactive_file 4096 [ 208.556703][ T5674] active_file 0 [ 208.556703][ T5674] unevictable 0 [ 208.556703][ T5674] slab_reclaimable 21888 [ 208.556703][ T5674] slab_unreclaimable 88152 [ 208.556703][ T5674] slab 110040 [ 208.736959][ T5674] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5671,uid=0 [ 208.762897][ T5674] Memory cgroup out of memory: Killed process 5674 (syz-executor.1) total-vm:56720kB, anon-rss:372kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 209.087658][ T5619] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 209.126777][ T5619] netdevsim netdevsim3 netdevsim1: renamed from eth1 15:32:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x801}) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x83, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0xb) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0), 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086607, &(0x7f0000000040)) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xe, r2, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e71, 0x24080, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfff, 0x0, @perf_config_ext={0x3, 0x4a}, 0x100, 0x400000, 0x0, 0x0, 0x1000000000004, 0x0, 0x7, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000300)='cpuset.memory_pressure_enabled\x00', 0x7a05, 0x1700) socketpair(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x0, 0x0) write$cgroup_int(r6, 0x0, 0x7000000) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000e40)='lo\x00\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x0e\xa0\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8a\x87\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x6) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000a00)={'macvlan0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x0, 0x0) write$cgroup_int(r6, 0x0, 0x7000000) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000e40)='lo\x00\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x0e\xa0\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8a\x87\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x10}) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000640)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000340)}, {&(0x7f0000002140)=""/240, 0xf0}, {&(0x7f0000001ac0)=""/165, 0xa5}, {&(0x7f0000001b80)=""/201, 0xc9}, {&(0x7f0000001c80)=""/215, 0xd7}], 0x5, &(0x7f0000000100)}, 0x40000163) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='!&\fv\xb9q\xd3\xac\xe7n \x83\xb3\x00\x00S\xa9\x87\xac\xb4\t\x04Uq\x86\xfe\xec\xa9o\xd7m\x80k\xda\xe2N\x15&%%\xf8\xae') ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f00000009c0)=""/4096) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='syz_tun\x00') write$cgroup_int(r2, &(0x7f00000002c0), 0x22) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f0000002240)=ANY=[@ANYBLOB="0772decd93ff153c7c82c808000800ff07950000000066cb70e5c0b8239a0000000085100000f8ff00036364b4b40000000000000000000000007f7d9d370485f1b9737ac371eec833bffa8e38f4b87bcad98231cf3de7b3954e632d32d1d7b441f895ebfa48633ff191e8349ccce08b91341a29a4e76d6a3529f8dce17da26a90e997402dd855ea44c59903b332f97884a5265335f8d7758ed671f8881c2a5d3f28211a67fd41c9102e7d64834ecf6f9577db22c5584e72ed8d03a87f82d20bd4d10aa3237707819e04915c751cbdfd9566f0afda3b5e36e983d48bfdecbd20e746c9e4781f2122d74387a44cb3c98e4f267e7c2804b7ff48ea61dbfb2e1cf0a2106a7804119f613c6ab43bae074b059b094316958c18123eee87c3b61bb525f9bea9ffc514476ceeb640b059cba97a111bd94a4e9c6e036f75437b292c084df939e3c5e94d6238146b383265b2875366f3ae3a10faf26483bfbb0d83e6182045f341f82fa054a60c21bf5d1922c2635dfc5e2d39d749423c679a7bc83f1b055e4cbbd5d307ab08bea57fe88587bcff40cf0af3b3f1e5781897e5c77b4e1cba79d3ae05b7b370"], &(0x7f0000000400)='syzkaller\x00', 0x1, 0xd2, &(0x7f00000006c0)=""/210, 0x40f00, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000440)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x5, 0x4, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r2, 0xffffffffffffffff, r2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x73dc0ac7e45cf5c5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x80, 0x3}, 0x4100a, 0x404, 0x206, 0x5, 0x8, 0x873, 0x3ff, 0x0, 0x6, 0x0, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x7) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000080)) 15:32:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x801}) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x83, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0xb) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0), 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086607, &(0x7f0000000040)) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xe, r2, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e71, 0x24080, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfff, 0x0, @perf_config_ext={0x3, 0x4a}, 0x100, 0x400000, 0x0, 0x0, 0x1000000000004, 0x0, 0x7, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000300)='cpuset.memory_pressure_enabled\x00', 0x7a05, 0x1700) socketpair(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x0, 0x0) write$cgroup_int(r6, 0x0, 0x7000000) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000e40)='lo\x00\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x0e\xa0\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8a\x87\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x0, 0x0) write$cgroup_int(r6, 0x0, 0x7000000) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000e40)='lo\x00\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x0e\xa0\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8a\x87\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x0, 0x0) write$cgroup_int(r6, 0x0, 0x7000000) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000e40)='lo\x00\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x0e\xa0\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8a\x87\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x0, 0x0) write$cgroup_int(r6, 0x0, 0x7000000) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000e40)='lo\x00\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x0e\xa0\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8a\x87\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x20001a78}, 0x0) [ 210.726649][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.931727][ T9] device hsr_slave_0 left promiscuous mode [ 210.940166][ T9] device hsr_slave_1 left promiscuous mode [ 211.061194][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.081948][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.184951][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.240528][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.290508][ T9] device bridge_slave_1 left promiscuous mode [ 211.318082][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.375011][ T9] device bridge_slave_0 left promiscuous mode [ 211.404181][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.577097][ T9] device veth1_macvtap left promiscuous mode [ 211.587010][ T9] device veth0_macvtap left promiscuous mode [ 211.605828][ T9] device veth1_vlan left promiscuous mode [ 211.612058][ T9] device veth0_vlan left promiscuous mode [ 212.160967][ T9] team0 (unregistering): Port device team_slave_1 removed [ 212.194692][ T9] team0 (unregistering): Port device team_slave_0 removed [ 212.248595][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.306250][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.408749][ T5127] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.420860][ T5127] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.428707][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 212.437326][ T5127] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.452199][ T5127] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.459743][ T5127] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.483840][ T9] bond0 (unregistering): Released all slaves [ 212.598709][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.627263][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.637539][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.694016][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.708535][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.789555][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.796773][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.815849][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.832169][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.840705][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.847870][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.939492][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.948404][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.970638][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.018493][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.051084][ T5619] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 213.110493][ T5619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.143353][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.161558][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.193690][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.209185][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.240344][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.249738][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.293605][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.623301][ T5752] chnl_net:caif_netlink_parms(): no params data found [ 213.843159][ T5752] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.850374][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.871701][ T5752] device bridge_slave_0 entered promiscuous mode [ 213.899720][ T5752] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.916689][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.929254][ T5752] device bridge_slave_1 entered promiscuous mode [ 213.996091][ T5752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.019518][ T5752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.112462][ T5752] team0: Port device team_slave_0 added [ 214.143492][ T5752] team0: Port device team_slave_1 added [ 214.154693][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.171658][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.224588][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.235845][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.252479][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.290102][ T5752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.319535][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.327638][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.355605][ T5752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.385979][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 214.396037][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.421995][ T5619] device veth0_vlan entered promiscuous mode [ 214.449606][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 214.458630][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 214.480689][ T5619] device veth1_vlan entered promiscuous mode [ 214.502339][ T5118] Bluetooth: hci2: command 0x0409 tx timeout [ 214.512696][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 214.533658][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 214.551291][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 214.604326][ T5752] device hsr_slave_0 entered promiscuous mode [ 214.619170][ T5752] device hsr_slave_1 entered promiscuous mode [ 214.628926][ T5752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.643251][ T5752] Cannot create hsr debugfs directory [ 214.652607][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 214.667404][ T5619] device veth0_macvtap entered promiscuous mode [ 214.687224][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 214.703939][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 214.755730][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 214.764858][ T5619] device veth1_macvtap entered promiscuous mode [ 214.857803][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.869099][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.879005][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.889591][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.899476][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.910507][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.920953][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.931769][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.944272][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.955115][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.967031][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.989761][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 215.014305][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 215.032200][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 215.044198][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.058810][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.068927][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.079582][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.089699][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.109776][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.121197][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.141192][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.153709][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.165767][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.177359][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.198634][ T5752] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.220480][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 215.244563][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 215.264836][ T5619] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.290825][ T5619] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.303973][ T5619] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.321807][ T5619] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.350404][ T5752] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.482470][ T5752] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.521461][ T5744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.529679][ T5744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.573222][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 215.587569][ T5752] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.629837][ T5736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.638525][ T5736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.679574][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 215.686920][ T9] ------------[ cut here ]------------ [ 215.692378][ T9] DEBUG_LOCKS_WARN_ON(1) [ 215.692428][ T9] WARNING: CPU: 1 PID: 9 at kernel/locking/lockdep.c:231 __lock_acquire+0xecf/0x56d0 [ 215.706251][ T9] Modules linked in: [ 215.710164][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 215.720049][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 215.730103][ T9] Workqueue: netns cleanup_net [ 215.734956][ T9] RIP: 0010:__lock_acquire+0xecf/0x56d0 [ 215.740577][ T9] Code: a8 13 73 8e e8 92 bb 6b 00 8b 05 54 79 0f 0d 85 c0 0f 85 79 f8 ff ff 48 c7 c6 40 51 4c 8a 48 c7 c7 a0 4a 4c 8a e8 91 d7 5b 08 <0f> 0b 31 c0 e9 73 f7 ff ff 48 63 5c 24 18 be 08 00 00 00 48 89 d8 [ 215.760172][ T9] RSP: 0018:ffffc900000e75e0 EFLAGS: 00010086 [ 215.766228][ T9] RAX: 0000000000000000 RBX: 0000000000000768 RCX: 0000000000000000 [ 215.774271][ T9] RDX: ffff88813fe48000 RSI: ffffffff8166710c RDI: fffff5200001ceae [ 215.782224][ T9] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 215.790177][ T9] R10: 0000000080000002 R11: 0000000000000001 R12: 0000000000000003 [ 215.798153][ T9] R13: ffff88813fe48000 R14: ffff88813fe48a38 R15: dffffc0000000000 [ 215.806214][ T9] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 215.815129][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.821698][ T9] CR2: 00007f221d7af180 CR3: 000000004ea37000 CR4: 00000000003506e0 [ 215.829655][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 215.837607][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 215.845567][ T9] Call Trace: [ 215.848828][ T9] [ 215.851772][ T9] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 215.857826][ T9] ? find_held_lock+0x2d/0x110 [ 215.862581][ T9] lock_acquire+0x1e3/0x630 [ 215.867095][ T9] ? finish_task_switch.isra.0+0x130/0xc80 [ 215.872900][ T9] ? lock_release+0x810/0x810 [ 215.877583][ T9] ? find_held_lock+0x2d/0x110 [ 215.882367][ T9] ? __schedule+0xb02/0x5450 [ 215.886951][ T9] ? lock_downgrade+0x6e0/0x6e0 [ 215.891800][ T9] finish_task_switch.isra.0+0x192/0xc80 [ 215.897431][ T9] ? finish_task_switch.isra.0+0x130/0xc80 [ 215.903323][ T9] ? __switch_to+0x5d0/0x10a0 [ 215.907988][ T9] ? __switch_to_asm+0x3e/0x60 [ 215.912744][ T9] __schedule+0xb92/0x5450 [ 215.917155][ T9] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 215.923125][ T9] ? static_obj+0x22/0xc0 [ 215.927444][ T9] ? io_schedule_timeout+0x150/0x150 [ 215.932721][ T9] ? __mutex_lock+0xa43/0x1360 [ 215.937469][ T9] schedule+0xde/0x1b0 [ 215.941531][ T9] schedule_preempt_disabled+0x13/0x20 [ 215.946979][ T9] __mutex_lock+0xa48/0x1360 [ 215.951552][ T9] ? devlink_pernet_pre_exit+0x10a/0x220 [ 215.957210][ T9] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 215.962742][ T9] ? lock_downgrade+0x6e0/0x6e0 [ 215.967577][ T9] ? devlink_try_get+0x15d/0x1e0 [ 215.972522][ T9] devlink_pernet_pre_exit+0x10a/0x220 [ 215.977971][ T9] ? devlinks_xa_find_get+0x220/0x220 [ 215.983331][ T9] ? cttimeout_net_pre_exit+0x10d/0x500 [ 215.988867][ T9] ? devlinks_xa_find_get+0x220/0x220 [ 215.994227][ T9] cleanup_net+0x455/0xb10 [ 215.998636][ T9] ? unregister_pernet_device+0x80/0x80 [ 216.004173][ T9] process_one_work+0x9bf/0x1710 [ 216.009103][ T9] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 216.014465][ T9] ? rwlock_bug.part.0+0x90/0x90 [ 216.019388][ T9] ? _raw_spin_lock_irq+0x45/0x50 [ 216.024420][ T9] worker_thread+0x669/0x1090 [ 216.029086][ T9] ? process_one_work+0x1710/0x1710 [ 216.034275][ T9] kthread+0x2e8/0x3a0 [ 216.038345][ T9] ? kthread_complete_and_exit+0x40/0x40 [ 216.043968][ T9] ret_from_fork+0x1f/0x30 [ 216.048380][ T9] [ 216.051387][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 216.058660][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted 6.2.0-rc2-syzkaller-00347-g92afc5329a5b #0 [ 216.068553][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 216.078611][ T9] Workqueue: netns cleanup_net [ 216.083377][ T9] Call Trace: [ 216.086646][ T9] [ 216.089569][ T9] dump_stack_lvl+0xd1/0x138 [ 216.094160][ T9] panic+0x2cc/0x626 [ 216.098047][ T9] ? panic_print_sys_info.part.0+0x110/0x110 [ 216.104036][ T9] ? __lock_acquire+0xecf/0x56d0 [ 216.108958][ T9] check_panic_on_warn.cold+0x19/0x35 [ 216.114339][ T9] __warn+0xf2/0x1a0 [ 216.118228][ T9] ? __wake_up_klogd.part.0+0x99/0xf0 [ 216.123590][ T9] ? __lock_acquire+0xecf/0x56d0 [ 216.128517][ T9] report_bug+0x1c0/0x210 [ 216.132836][ T9] handle_bug+0x3c/0x70 [ 216.137093][ T9] exc_invalid_op+0x18/0x50 [ 216.141592][ T9] asm_exc_invalid_op+0x1a/0x20 [ 216.146437][ T9] RIP: 0010:__lock_acquire+0xecf/0x56d0 [ 216.151972][ T9] Code: a8 13 73 8e e8 92 bb 6b 00 8b 05 54 79 0f 0d 85 c0 0f 85 79 f8 ff ff 48 c7 c6 40 51 4c 8a 48 c7 c7 a0 4a 4c 8a e8 91 d7 5b 08 <0f> 0b 31 c0 e9 73 f7 ff ff 48 63 5c 24 18 be 08 00 00 00 48 89 d8 [ 216.171565][ T9] RSP: 0018:ffffc900000e75e0 EFLAGS: 00010086 [ 216.177617][ T9] RAX: 0000000000000000 RBX: 0000000000000768 RCX: 0000000000000000 [ 216.185579][ T9] RDX: ffff88813fe48000 RSI: ffffffff8166710c RDI: fffff5200001ceae [ 216.193625][ T9] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 216.201580][ T9] R10: 0000000080000002 R11: 0000000000000001 R12: 0000000000000003 [ 216.209535][ T9] R13: ffff88813fe48000 R14: ffff88813fe48a38 R15: dffffc0000000000 [ 216.217514][ T9] ? vprintk+0x8c/0xa0 [ 216.221596][ T9] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 216.227576][ T9] ? find_held_lock+0x2d/0x110 [ 216.232405][ T9] lock_acquire+0x1e3/0x630 [ 216.236925][ T9] ? finish_task_switch.isra.0+0x130/0xc80 [ 216.242746][ T9] ? lock_release+0x810/0x810 [ 216.247422][ T9] ? find_held_lock+0x2d/0x110 [ 216.252194][ T9] ? __schedule+0xb02/0x5450 [ 216.256784][ T9] ? lock_downgrade+0x6e0/0x6e0 [ 216.261621][ T9] finish_task_switch.isra.0+0x192/0xc80 [ 216.267266][ T9] ? finish_task_switch.isra.0+0x130/0xc80 [ 216.273062][ T9] ? __switch_to+0x5d0/0x10a0 [ 216.277722][ T9] ? __switch_to_asm+0x3e/0x60 [ 216.282667][ T9] __schedule+0xb92/0x5450 [ 216.287076][ T9] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 216.293052][ T9] ? static_obj+0x22/0xc0 [ 216.297457][ T9] ? io_schedule_timeout+0x150/0x150 [ 216.302751][ T9] ? __mutex_lock+0xa43/0x1360 [ 216.307500][ T9] schedule+0xde/0x1b0 [ 216.311560][ T9] schedule_preempt_disabled+0x13/0x20 [ 216.317026][ T9] __mutex_lock+0xa48/0x1360 [ 216.321623][ T9] ? devlink_pernet_pre_exit+0x10a/0x220 [ 216.327260][ T9] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 216.332823][ T9] ? lock_downgrade+0x6e0/0x6e0 [ 216.337698][ T9] ? devlink_try_get+0x15d/0x1e0 [ 216.342652][ T9] devlink_pernet_pre_exit+0x10a/0x220 [ 216.348206][ T9] ? devlinks_xa_find_get+0x220/0x220 [ 216.353581][ T9] ? cttimeout_net_pre_exit+0x10d/0x500 [ 216.359139][ T9] ? devlinks_xa_find_get+0x220/0x220 [ 216.364530][ T9] cleanup_net+0x455/0xb10 [ 216.369119][ T9] ? unregister_pernet_device+0x80/0x80 [ 216.374666][ T9] process_one_work+0x9bf/0x1710 [ 216.379605][ T9] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 216.384970][ T9] ? rwlock_bug.part.0+0x90/0x90 [ 216.390154][ T9] ? _raw_spin_lock_irq+0x45/0x50 [ 216.395169][ T9] worker_thread+0x669/0x1090 [ 216.399845][ T9] ? process_one_work+0x1710/0x1710 [ 216.405037][ T9] kthread+0x2e8/0x3a0 [ 216.409090][ T9] ? kthread_complete_and_exit+0x40/0x40 [ 216.414748][ T9] ret_from_fork+0x1f/0x30 [ 216.419176][ T9] [ 217.488430][ T9] Shutting down cpus with NMI [ 217.493347][ T9] Kernel Offset: disabled [ 217.497679][ T9] Rebooting in 86400 seconds..