797.674387][ T4978] RDX: 000055555706d930 RSI: 0000555557075970 RDI: 0000000000000003 [ 1797.691968][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1797.697086][ T4978] RBP: 0000000000008041 R08: 0000000000000001 R09: 000055555706c940 [ 1797.697095][ T4978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 1797.697102][ T4978] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 1797.704191][ T4978] memory: usage 4664kB, limit 0kB, failcnt 363 [ 1797.712250][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1797.713274][ T4978] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1797.719971][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1797.729760][ T4978] Memory cgroup stats for /syz2: [ 1797.729855][ T4978] anon 57344 [ 1797.729855][ T4978] file 151552 [ 1797.729855][ T4978] kernel_stack 0 [ 1797.729855][ T4978] slab 4907008 [ 1797.729855][ T4978] sock 0 [ 1797.729855][ T4978] shmem 0 [ 1797.729855][ T4978] file_mapped 0 [ 1797.729855][ T4978] file_dirty 0 [ 1797.729855][ T4978] file_writeback 0 [ 1797.729855][ T4978] anon_thp 0 [ 1797.729855][ T4978] inactive_anon 0 [ 1797.729855][ T4978] active_anon 69632 [ 1797.729855][ T4978] inactive_file 135168 [ 1797.729855][ T4978] active_file 0 [ 1797.729855][ T4978] unevictable 0 [ 1797.729855][ T4978] slab_reclaimable 1081344 [ 1797.729855][ T4978] slab_unreclaimable 3825664 [ 1797.729855][ T4978] pgfault 66528 [ 1797.729855][ T4978] pgmajfault 0 [ 1797.729855][ T4978] workingset_refault 0 [ 1797.729855][ T4978] workingset_activate 0 [ 1797.729855][ T4978] workingset_nodereclaim 0 [ 1797.729855][ T4978] pgrefill 277 [ 1797.729855][ T4978] pgscan 272 [ 1797.729855][ T4978] pgsteal 33 [ 1797.729855][ T4978] pgactivate 231 [ 1797.729874][ T4978] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=4978,uid=0 [ 1797.729954][ T4978] Memory cgroup out of memory: Killed process 4978 (syz-executor.2) total-vm:72448kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:0 [ 1797.739220][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1797.744320][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1797.746516][ T1065] oom_reaper: reaped process 4978 (syz-executor.2), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 1797.752228][ T6660] bridge0: port 2(bridge_slave_1) entered blocking state [ 1797.771998][ T5024] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1797.772723][ T6660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1797.782454][ T5024] CPU: 0 PID: 5024 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1797.785584][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1797.789231][ T5024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1797.789238][ T5024] Call Trace: [ 1797.789264][ T5024] dump_stack+0x172/0x1f0 [ 1797.789283][ T5024] dump_header+0x177/0x1152 [ 1797.789300][ T5024] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1797.789311][ T5024] ? ___ratelimit+0x2c8/0x595 [ 1797.789325][ T5024] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1797.789342][ T5024] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1797.789355][ T5024] ? trace_hardirqs_on+0x67/0x240 [ 1797.789368][ T5024] ? pagefault_out_of_memory+0x11c/0x11c [ 1797.789383][ T5024] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1797.789395][ T5024] ? ___ratelimit+0x60/0x595 [ 1797.789412][ T5024] ? do_raw_spin_unlock+0x57/0x270 [ 1797.795263][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1797.798408][ T5024] oom_kill_process.cold+0x10/0x15 [ 1797.798425][ T5024] out_of_memory+0x334/0x1340 [ 1797.798438][ T5024] ? trace_hardirqs_on_caller+0x6a/0x240 [ 1797.798453][ T5024] ? cgroup_file_notify+0x140/0x1b0 [ 1797.798470][ T5024] ? oom_killer_disable+0x280/0x280 [ 1797.798493][ T5024] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1797.804141][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1797.808084][ T5024] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1797.808108][ T5024] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1797.808128][ T5024] ? cgroup_file_notify+0x140/0x1b0 [ 1797.808146][ T5024] memory_max_write+0x262/0x3a0 [ 1797.808164][ T5024] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1797.808182][ T5024] ? lock_acquire+0x190/0x410 [ 1797.814276][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1797.818327][ T5024] ? kernfs_fop_write+0x227/0x480 [ 1797.818350][ T5024] cgroup_file_write+0x241/0x790 [ 1797.818368][ T5024] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1797.818382][ T5024] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1797.818402][ T5024] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1797.818415][ T5024] kernfs_fop_write+0x2b8/0x480 [ 1797.818429][ T5024] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1797.818447][ T5024] __vfs_write+0x8a/0x110 [ 1797.823887][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1797.828301][ T5024] ? kernfs_fop_open+0xd80/0xd80 [ 1797.828319][ T5024] vfs_write+0x268/0x5d0 [ 1797.828335][ T5024] ksys_write+0x14f/0x290 [ 1797.828349][ T5024] ? __ia32_sys_read+0xb0/0xb0 [ 1797.828365][ T5024] ? do_syscall_64+0x26/0x760 [ 1797.828381][ T5024] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1797.828393][ T5024] ? do_syscall_64+0x26/0x760 [ 1797.828410][ T5024] __x64_sys_write+0x73/0xb0 [ 1797.836692][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1797.839064][ T5024] do_syscall_64+0xfa/0x760 [ 1797.853618][ T5024] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1797.870047][ T5024] RIP: 0033:0x459879 [ 1797.893535][ T5024] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1797.893542][ T5024] RSP: 002b:00007fdbcce63c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1797.893555][ T5024] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1797.893566][ T5024] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1797.893572][ T5024] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1797.893580][ T5024] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdbcce646d4 [ 1797.893587][ T5024] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1797.911152][ T5024] memory: usage 11188kB, limit 0kB, failcnt 219 [ 1798.000811][ T5009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1798.421857][ T5024] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1798.464840][ T4996] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1798.547658][ T5024] Memory cgroup stats for /syz0: [ 1798.547790][ T5024] anon 4304896 [ 1798.547790][ T5024] file 155648 [ 1798.547790][ T5024] kernel_stack 65536 [ 1798.547790][ T5024] slab 7131136 [ 1798.547790][ T5024] sock 0 [ 1798.547790][ T5024] shmem 110592 [ 1798.547790][ T5024] file_mapped 0 [ 1798.547790][ T5024] file_dirty 0 [ 1798.547790][ T5024] file_writeback 0 [ 1798.547790][ T5024] anon_thp 4194304 [ 1798.547790][ T5024] inactive_anon 0 [ 1798.547790][ T5024] active_anon 4304896 [ 1798.547790][ T5024] inactive_file 135168 [ 1798.547790][ T5024] active_file 0 [ 1798.547790][ T5024] unevictable 12288 [ 1798.547790][ T5024] slab_reclaimable 1081344 [ 1798.547790][ T5024] slab_unreclaimable 6049792 [ 1798.547790][ T5024] pgfault 60192 [ 1798.547790][ T5024] pgmajfault 0 [ 1798.547790][ T5024] workingset_refault 0 [ 1798.547790][ T5024] workingset_activate 0 [ 1798.547790][ T5024] workingset_nodereclaim 0 [ 1798.547790][ T5024] pgrefill 225 [ 1798.547790][ T5024] pgscan 223 [ 1798.547790][ T5024] pgsteal 79 [ 1798.547790][ T5024] pgactivate 132 [ 1798.550396][ T4996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1798.573011][ T5024] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=5023,uid=0 [ 1798.670837][ T5024] Memory cgroup out of memory: Killed process 5023 (syz-executor.0) total-vm:72580kB, anon-rss:4188kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1798.689705][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1798.698802][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1798.701650][ T1065] oom_reaper: reaped process 5023 (syz-executor.0), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB [ 1798.708051][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1798.728645][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1798.737782][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1798.747074][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1798.756130][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1798.765219][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1798.774056][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1798.786888][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1798.795987][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1798.796573][ T4981] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1798.805017][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1798.831815][ T4981] CPU: 0 PID: 4981 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1798.834200][ T4982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1798.840910][ T4981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1798.840919][ T4981] Call Trace: [ 1798.840960][ T4981] dump_stack+0x172/0x1f0 [ 1798.840980][ T4981] dump_header+0x177/0x1152 [ 1798.840998][ T4981] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1798.841007][ T4981] ? ___ratelimit+0x2c8/0x595 [ 1798.841018][ T4981] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1798.841033][ T4981] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1798.841053][ T4981] ? trace_hardirqs_on+0x67/0x240 [ 1798.858412][ T4981] ? pagefault_out_of_memory+0x11c/0x11c [ 1798.858433][ T4981] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1798.858445][ T4981] ? ___ratelimit+0x60/0x595 [ 1798.858457][ T4981] ? do_raw_spin_unlock+0x57/0x270 [ 1798.858470][ T4981] oom_kill_process.cold+0x10/0x15 [ 1798.858485][ T4981] out_of_memory+0x334/0x1340 [ 1798.858499][ T4981] ? lock_downgrade+0x920/0x920 [ 1798.858519][ T4981] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1798.858532][ T4981] ? oom_killer_disable+0x280/0x280 [ 1798.858552][ T4981] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1798.858573][ T4981] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1798.870740][ T4981] ? do_raw_spin_unlock+0x57/0x270 [ 1798.887087][ T4981] ? _raw_spin_unlock+0x2d/0x50 [ 1798.897429][ T4981] try_charge+0xf4b/0x1440 [ 1798.897454][ T4981] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1798.897466][ T4981] ? percpu_ref_tryget_live+0x111/0x290 [ 1798.897486][ T4981] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1798.897502][ T4981] ? __kasan_check_read+0x11/0x20 [ 1798.897517][ T4981] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1798.897538][ T4981] mem_cgroup_try_charge+0x136/0x590 [ 1798.897550][ T4981] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1798.897565][ T4981] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1798.897582][ T4981] wp_page_copy+0x41e/0x1590 [ 1798.897600][ T4981] ? find_held_lock+0x35/0x130 [ 1798.897619][ T4981] ? pmd_pfn+0x1d0/0x1d0 [ 1798.897632][ T4981] ? lock_downgrade+0x920/0x920 [ 1798.897655][ T4981] ? swp_swapcount+0x540/0x540 [ 1799.039718][ T4981] ? __kasan_check_read+0x11/0x20 [ 1799.044774][ T4981] ? do_raw_spin_unlock+0x57/0x270 [ 1799.049987][ T4981] do_wp_page+0x499/0x14d0 [ 1799.054433][ T4981] ? finish_mkwrite_fault+0x570/0x570 [ 1799.059844][ T4981] __handle_mm_fault+0x22f1/0x3f20 [ 1799.065029][ T4981] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1799.070608][ T4981] ? __kasan_check_read+0x11/0x20 [ 1799.075665][ T4981] handle_mm_fault+0x1b5/0x6c0 [ 1799.080459][ T4981] __do_page_fault+0x536/0xdd0 [ 1799.085263][ T4981] do_page_fault+0x38/0x590 [ 1799.089794][ T4981] page_fault+0x39/0x40 [ 1799.093959][ T4981] RIP: 0033:0x430956 [ 1799.097850][ T4981] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 46 64 00 85 c0 0f 84 [ 1799.117458][ T4981] RSP: 002b:00007fffa9b13050 EFLAGS: 00010206 [ 1799.123563][ T4981] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 1799.131565][ T4981] RDX: 00005555557f9930 RSI: 0000555555801970 RDI: 0000000000000003 [ 1799.139547][ T4981] RBP: 0000000000008041 R08: 0000000000000001 R09: 00005555557f8940 [ 1799.147537][ T4981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 1799.155543][ T4981] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 1799.168730][ T4981] memory: usage 6804kB, limit 0kB, failcnt 231 [ 1799.174963][ T4981] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1799.181970][ T4981] Memory cgroup stats for /syz0: [ 1799.182060][ T4981] anon 57344 [ 1799.182060][ T4981] file 155648 [ 1799.182060][ T4981] kernel_stack 0 [ 1799.182060][ T4981] slab 7131136 [ 1799.182060][ T4981] sock 0 [ 1799.182060][ T4981] shmem 110592 [ 1799.182060][ T4981] file_mapped 0 [ 1799.182060][ T4981] file_dirty 0 [ 1799.182060][ T4981] file_writeback 0 [ 1799.182060][ T4981] anon_thp 0 [ 1799.182060][ T4981] inactive_anon 0 [ 1799.182060][ T4981] active_anon 57344 [ 1799.182060][ T4981] inactive_file 135168 [ 1799.182060][ T4981] active_file 0 [ 1799.182060][ T4981] unevictable 12288 [ 1799.182060][ T4981] slab_reclaimable 1081344 [ 1799.182060][ T4981] slab_unreclaimable 6049792 [ 1799.182060][ T4981] pgfault 60192 [ 1799.182060][ T4981] pgmajfault 0 [ 1799.182060][ T4981] workingset_refault 0 [ 1799.182060][ T4981] workingset_activate 0 [ 1799.182060][ T4981] workingset_nodereclaim 0 [ 1799.182060][ T4981] pgrefill 225 [ 1799.182060][ T4981] pgscan 223 [ 1799.182060][ T4981] pgsteal 79 [ 1799.182060][ T4981] pgactivate 132 [ 1799.277909][ T4981] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=4981,uid=0 [ 1799.293605][ T4981] Memory cgroup out of memory: Killed process 4981 (syz-executor.0) total-vm:72448kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:0 [ 1799.313416][ T1065] oom_reaper: reaped process 4981 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 1799.459517][ T4996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1799.467293][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1799.475583][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1799.484748][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1799.494189][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1799.503169][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1799.511504][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1799.522465][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1799.536100][ T5009] 8021q: adding VLAN 0 to HW filter on device team0 [ 1799.771009][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1799.794558][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1799.803529][ T6660] bridge0: port 1(bridge_slave_0) entered blocking state [ 1799.810608][ T6660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1799.819471][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1799.828377][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1799.837458][ T6660] bridge0: port 2(bridge_slave_1) entered blocking state [ 1799.844589][ T6660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1799.859304][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1799.878660][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1799.921756][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1799.938287][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1799.951326][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1800.002362][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1800.038495][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1800.074161][ T5006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1800.118738][ T5009] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1800.164556][ T5009] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1800.184958][ T5039] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1800.213970][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1800.222716][ T5039] CPU: 0 PID: 5039 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1800.222727][ T5039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1800.222734][ T5039] Call Trace: [ 1800.222762][ T5039] dump_stack+0x172/0x1f0 [ 1800.222784][ T5039] dump_header+0x177/0x1152 [ 1800.222803][ T5039] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1800.222817][ T5039] ? ___ratelimit+0x2c8/0x595 [ 1800.222833][ T5039] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1800.222848][ T5039] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1800.222870][ T5039] ? trace_hardirqs_on+0x67/0x240 [ 1800.244249][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1800.245486][ T5039] ? pagefault_out_of_memory+0x11c/0x11c [ 1800.250779][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1800.254326][ T5039] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1800.268170][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1800.270622][ T5039] ? ___ratelimit+0x60/0x595 [ 1800.283464][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1800.288750][ T5039] ? do_raw_spin_unlock+0x57/0x270 [ 1800.288775][ T5039] oom_kill_process.cold+0x10/0x15 [ 1800.288791][ T5039] out_of_memory+0x334/0x1340 [ 1800.288807][ T5039] ? __sched_text_start+0x8/0x8 [ 1800.288821][ T5039] ? oom_killer_disable+0x280/0x280 [ 1800.288846][ T5039] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1800.288861][ T5039] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1800.288892][ T5039] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1800.302269][ T5039] ? cgroup_file_notify+0x140/0x1b0 [ 1800.302290][ T5039] memory_max_write+0x262/0x3a0 [ 1800.302308][ T5039] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1800.302323][ T5039] ? lock_acquire+0x190/0x410 [ 1800.302337][ T5039] ? kernfs_fop_write+0x227/0x480 [ 1800.302356][ T5039] cgroup_file_write+0x241/0x790 [ 1800.302380][ T5039] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1800.302394][ T5039] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1800.302413][ T5039] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1800.302427][ T5039] kernfs_fop_write+0x2b8/0x480 [ 1800.302443][ T5039] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1800.302460][ T5039] __vfs_write+0x8a/0x110 [ 1800.302473][ T5039] ? kernfs_fop_open+0xd80/0xd80 [ 1800.302487][ T5039] vfs_write+0x268/0x5d0 [ 1800.302502][ T5039] ksys_write+0x14f/0x290 [ 1800.302515][ T5039] ? __ia32_sys_read+0xb0/0xb0 [ 1800.302532][ T5039] ? do_syscall_64+0x26/0x760 [ 1800.302547][ T5039] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1800.302558][ T5039] ? do_syscall_64+0x26/0x760 [ 1800.302575][ T5039] __x64_sys_write+0x73/0xb0 [ 1800.302591][ T5039] do_syscall_64+0xfa/0x760 [ 1800.302608][ T5039] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1800.302620][ T5039] RIP: 0033:0x459879 [ 1800.302637][ T5039] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1800.302645][ T5039] RSP: 002b:00007fb94c815c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1800.302659][ T5039] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1800.302666][ T5039] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1800.302674][ T5039] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1800.302683][ T5039] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb94c8166d4 [ 1800.302691][ T5039] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1800.434107][ T5039] memory: usage 5032kB, limit 0kB, failcnt 1603 [ 1800.478744][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1800.480694][ T5039] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1800.511694][ T5009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1800.518580][ T5039] Memory cgroup stats for /syz1: [ 1800.518683][ T5039] anon 4308992 [ 1800.518683][ T5039] file 0 [ 1800.518683][ T5039] kernel_stack 65536 [ 1800.518683][ T5039] slab 565248 [ 1800.518683][ T5039] sock 0 [ 1800.518683][ T5039] shmem 0 [ 1800.518683][ T5039] file_mapped 0 [ 1800.518683][ T5039] file_dirty 0 [ 1800.518683][ T5039] file_writeback 0 [ 1800.518683][ T5039] anon_thp 4194304 [ 1800.518683][ T5039] inactive_anon 131072 [ 1800.518683][ T5039] active_anon 4308992 [ 1800.518683][ T5039] inactive_file 0 [ 1800.518683][ T5039] active_file 0 [ 1800.518683][ T5039] unevictable 0 [ 1800.518683][ T5039] slab_reclaimable 135168 [ 1800.518683][ T5039] slab_unreclaimable 430080 [ 1800.518683][ T5039] pgfault 90222 [ 1800.518683][ T5039] pgmajfault 0 [ 1800.518683][ T5039] workingset_refault 0 [ 1800.518683][ T5039] workingset_activate 0 [ 1800.518683][ T5039] workingset_nodereclaim 0 [ 1800.518683][ T5039] pgrefill 240 [ 1800.518683][ T5039] pgscan 242 [ 1800.518683][ T5039] pgsteal 35 [ 1800.518683][ T5039] pgactivate 198 [ 1800.563116][ T5039] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5033,uid=0 [ 1800.585909][ T5039] Memory cgroup out of memory: Killed process 5033 (syz-executor.1) total-vm:72712kB, anon-rss:4188kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1800.684087][ T1065] oom_reaper: reaped process 5033 (syz-executor.1), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB [ 1800.717627][ T5041] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1800.775026][ T5041] CPU: 0 PID: 5041 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1800.784103][ T5041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1800.794167][ T5041] Call Trace: [ 1800.797467][ T5041] dump_stack+0x172/0x1f0 [ 1800.801821][ T5041] dump_header+0x177/0x1152 [ 1800.806341][ T5041] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1800.812134][ T5041] ? ___ratelimit+0x2c8/0x595 [ 1800.816794][ T5041] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1800.822586][ T5041] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1800.827853][ T5041] ? trace_hardirqs_on+0x67/0x240 [ 1800.832866][ T5041] ? pagefault_out_of_memory+0x11c/0x11c [ 1800.838499][ T5041] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1800.845092][ T5041] ? ___ratelimit+0x60/0x595 [ 1800.849671][ T5041] ? do_raw_spin_unlock+0x57/0x270 [ 1800.854783][ T5041] oom_kill_process.cold+0x10/0x15 [ 1800.859907][ T5041] out_of_memory+0x334/0x1340 [ 1800.864578][ T5041] ? oom_killer_disable+0x280/0x280 [ 1800.869773][ T5041] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1800.875303][ T5041] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1800.880936][ T5041] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1800.886736][ T5041] ? cgroup_file_notify+0x140/0x1b0 [ 1800.891922][ T5041] memory_max_write+0x262/0x3a0 [ 1800.896765][ T5041] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1800.903509][ T5041] ? lock_acquire+0x190/0x410 [ 1800.908174][ T5041] ? kernfs_fop_write+0x227/0x480 [ 1800.913203][ T5041] cgroup_file_write+0x241/0x790 [ 1800.918125][ T5041] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1800.924898][ T5041] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1800.930536][ T5041] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1800.936155][ T5041] kernfs_fop_write+0x2b8/0x480 [ 1800.941146][ T5041] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1800.947391][ T5041] __vfs_write+0x8a/0x110 [ 1800.951720][ T5041] ? kernfs_fop_open+0xd80/0xd80 [ 1800.956647][ T5041] vfs_write+0x268/0x5d0 [ 1800.960879][ T5041] ksys_write+0x14f/0x290 [ 1800.965218][ T5041] ? __ia32_sys_read+0xb0/0xb0 [ 1800.969990][ T5041] ? do_syscall_64+0x26/0x760 [ 1800.974670][ T5041] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1800.980730][ T5041] ? do_syscall_64+0x26/0x760 [ 1800.985397][ T5041] __x64_sys_write+0x73/0xb0 [ 1800.989973][ T5041] do_syscall_64+0xfa/0x760 [ 1800.994465][ T5041] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1801.000339][ T5041] RIP: 0033:0x459879 [ 1801.004231][ T5041] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1801.023819][ T5041] RSP: 002b:00007f19659a0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1801.032214][ T5041] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1801.040190][ T5041] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1801.048147][ T5041] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1801.056130][ T5041] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f19659a16d4 [ 1801.064100][ T5041] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1801.092074][ T5041] memory: usage 4920kB, limit 0kB, failcnt 679 [ 1801.120330][ T5041] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1801.127395][ T5041] Memory cgroup stats for /syz3: [ 1801.127503][ T5041] anon 4272128 [ 1801.127503][ T5041] file 0 [ 1801.127503][ T5041] kernel_stack 65536 [ 1801.127503][ T5041] slab 405504 [ 1801.127503][ T5041] sock 0 [ 1801.127503][ T5041] shmem 0 [ 1801.127503][ T5041] file_mapped 0 [ 1801.127503][ T5041] file_dirty 0 [ 1801.127503][ T5041] file_writeback 0 [ 1801.127503][ T5041] anon_thp 4194304 [ 1801.127503][ T5041] inactive_anon 0 [ 1801.127503][ T5041] active_anon 4272128 [ 1801.127503][ T5041] inactive_file 0 [ 1801.127503][ T5041] active_file 0 [ 1801.127503][ T5041] unevictable 0 [ 1801.127503][ T5041] slab_reclaimable 135168 [ 1801.127503][ T5041] slab_unreclaimable 270336 [ 1801.127503][ T5041] pgfault 34914 [ 1801.127503][ T5041] pgmajfault 0 [ 1801.127503][ T5041] workingset_refault 0 [ 1801.127503][ T5041] workingset_activate 0 [ 1801.127503][ T5041] workingset_nodereclaim 0 [ 1801.127503][ T5041] pgrefill 33 [ 1801.127503][ T5041] pgscan 66 [ 1801.127503][ T5041] pgsteal 0 [ 1801.127503][ T5041] pgactivate 0 [ 1801.246037][ T5041] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5037,uid=0 [ 1801.261813][ T5041] Memory cgroup out of memory: Killed process 5041 (syz-executor.3) total-vm:72712kB, anon-rss:4236kB, file-rss:35812kB, shmem-rss:0kB, UID:0 pgtables:147456kB oom_score_adj:1000 [ 1801.282166][ T1065] oom_reaper: reaped process 5041 (syz-executor.3), now anon-rss:0kB, file-rss:34852kB, shmem-rss:0kB [ 1801.293306][ T4996] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1801.304775][ T4996] CPU: 1 PID: 4996 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1801.313812][ T4996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1801.323857][ T4996] Call Trace: [ 1801.327137][ T4996] dump_stack+0x172/0x1f0 [ 1801.331451][ T4996] dump_header+0x177/0x1152 [ 1801.335937][ T4996] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1801.341721][ T4996] ? ___ratelimit+0x2c8/0x595 [ 1801.346400][ T4996] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1801.352202][ T4996] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1801.357471][ T4996] ? trace_hardirqs_on+0x67/0x240 [ 1801.362512][ T4996] ? pagefault_out_of_memory+0x11c/0x11c [ 1801.368134][ T4996] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1801.373936][ T4996] ? ___ratelimit+0x60/0x595 [ 1801.378533][ T4996] ? do_raw_spin_unlock+0x57/0x270 [ 1801.383642][ T4996] oom_kill_process.cold+0x10/0x15 [ 1801.388748][ T4996] out_of_memory+0x334/0x1340 [ 1801.393416][ T4996] ? lock_downgrade+0x920/0x920 [ 1801.398259][ T4996] ? oom_killer_disable+0x280/0x280 [ 1801.403463][ T4996] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1801.409003][ T4996] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1801.414621][ T4996] ? do_raw_spin_unlock+0x57/0x270 [ 1801.420063][ T4996] ? _raw_spin_unlock+0x2d/0x50 [ 1801.424897][ T4996] try_charge+0xf4b/0x1440 [ 1801.429308][ T4996] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1801.434838][ T4996] ? percpu_ref_tryget_live+0x111/0x290 [ 1801.440377][ T4996] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1801.446620][ T4996] ? __kasan_check_read+0x11/0x20 [ 1801.451633][ T4996] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1801.457161][ T4996] mem_cgroup_try_charge+0x136/0x590 [ 1801.462445][ T4996] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1801.468683][ T4996] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1801.474329][ T4996] wp_page_copy+0x41e/0x1590 [ 1801.478907][ T4996] ? find_held_lock+0x35/0x130 [ 1801.483661][ T4996] ? pmd_pfn+0x1d0/0x1d0 [ 1801.487888][ T4996] ? lock_downgrade+0x920/0x920 [ 1801.492729][ T4996] ? swp_swapcount+0x540/0x540 [ 1801.497488][ T4996] ? __kasan_check_read+0x11/0x20 [ 1801.502503][ T4996] ? do_raw_spin_unlock+0x57/0x270 [ 1801.507597][ T4996] do_wp_page+0x499/0x14d0 [ 1801.511997][ T4996] ? finish_mkwrite_fault+0x570/0x570 [ 1801.517357][ T4996] __handle_mm_fault+0x22f1/0x3f20 [ 1801.522473][ T4996] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1801.528010][ T4996] ? __kasan_check_read+0x11/0x20 [ 1801.533035][ T4996] handle_mm_fault+0x1b5/0x6c0 [ 1801.537800][ T4996] __do_page_fault+0x536/0xdd0 [ 1801.542553][ T4996] do_page_fault+0x38/0x590 [ 1801.547042][ T4996] page_fault+0x39/0x40 [ 1801.551178][ T4996] RIP: 0033:0x430956 [ 1801.555058][ T4996] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 46 64 00 85 c0 0f 84 [ 1801.574658][ T4996] RSP: 002b:00007fffffb280e0 EFLAGS: 00010206 [ 1801.580711][ T4996] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 1801.588664][ T4996] RDX: 0000555555c85930 RSI: 0000555555c8d970 RDI: 0000000000000003 [ 1801.596621][ T4996] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000555555c84940 [ 1801.604575][ T4996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 1801.612531][ T4996] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 1801.630213][ T4996] memory: usage 604kB, limit 0kB, failcnt 1619 [ 1801.636393][ T4996] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1801.644111][ T4996] Memory cgroup stats for /syz1: [ 1801.644212][ T4996] anon 45056 [ 1801.644212][ T4996] file 0 [ 1801.644212][ T4996] kernel_stack 65536 [ 1801.644212][ T4996] slab 565248 [ 1801.644212][ T4996] sock 0 [ 1801.644212][ T4996] shmem 0 [ 1801.644212][ T4996] file_mapped 0 [ 1801.644212][ T4996] file_dirty 0 [ 1801.644212][ T4996] file_writeback 0 [ 1801.644212][ T4996] anon_thp 0 [ 1801.644212][ T4996] inactive_anon 131072 [ 1801.644212][ T4996] active_anon 45056 [ 1801.644212][ T4996] inactive_file 0 [ 1801.644212][ T4996] active_file 0 [ 1801.644212][ T4996] unevictable 0 [ 1801.644212][ T4996] slab_reclaimable 135168 [ 1801.644212][ T4996] slab_unreclaimable 430080 [ 1801.644212][ T4996] pgfault 90222 [ 1801.644212][ T4996] pgmajfault 0 [ 1801.644212][ T4996] workingset_refault 0 [ 1801.644212][ T4996] workingset_activate 0 [ 1801.644212][ T4996] workingset_nodereclaim 0 [ 1801.644212][ T4996] pgrefill 240 [ 1801.644212][ T4996] pgscan 242 [ 1801.644212][ T4996] pgsteal 35 [ 1801.644212][ T4996] pgactivate 198 15:19:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r5, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=""/31, 0x1f}}, 0x10) write$cgroup_int(r7, 0x0, 0x0) 15:19:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_int(r4, 0x0, 0x0) 15:19:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:19:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:19:22 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[]) sendmsg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r4, 0x0, 0x0) [ 1801.746006][ T4996] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=4996,uid=0 [ 1801.821138][ T4996] Memory cgroup out of memory: Killed process 4996 (syz-executor.1) total-vm:72448kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:0 15:19:23 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[]) sendmsg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r4, 0x0, 0x0) [ 1801.949068][ T1065] oom_reaper: reaped process 4996 (syz-executor.1), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 1801.960300][ T4982] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1801.989375][ T4982] CPU: 0 PID: 4982 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1801.998437][ T4982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1802.008499][ T4982] Call Trace: [ 1802.011792][ T4982] dump_stack+0x172/0x1f0 [ 1802.016133][ T4982] dump_header+0x177/0x1152 [ 1802.020649][ T4982] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1802.026461][ T4982] ? ___ratelimit+0x2c8/0x595 [ 1802.031145][ T4982] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1802.036953][ T4982] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1802.042257][ T4982] ? trace_hardirqs_on+0x67/0x240 [ 1802.047296][ T4982] ? pagefault_out_of_memory+0x11c/0x11c [ 1802.052949][ T4982] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1802.058756][ T4982] ? ___ratelimit+0x60/0x595 [ 1802.063355][ T4982] ? do_raw_spin_unlock+0x57/0x270 [ 1802.068473][ T4982] oom_kill_process.cold+0x10/0x15 [ 1802.073593][ T4982] out_of_memory+0x334/0x1340 [ 1802.078277][ T4982] ? lock_downgrade+0x920/0x920 [ 1802.083136][ T4982] ? oom_killer_disable+0x280/0x280 [ 1802.088350][ T4982] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1802.093898][ T4982] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1802.099532][ T4982] ? do_raw_spin_unlock+0x57/0x270 [ 1802.104642][ T4982] ? _raw_spin_unlock+0x2d/0x50 [ 1802.109496][ T4982] try_charge+0xf4b/0x1440 [ 1802.113919][ T4982] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1802.119463][ T4982] ? percpu_ref_tryget_live+0x111/0x290 [ 1802.125014][ T4982] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1802.131257][ T4982] ? __kasan_check_read+0x11/0x20 [ 1802.136293][ T4982] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1802.141843][ T4982] mem_cgroup_try_charge+0x136/0x590 [ 1802.147129][ T4982] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1802.153378][ T4982] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1802.159011][ T4982] wp_page_copy+0x41e/0x1590 [ 1802.163604][ T4982] ? find_held_lock+0x35/0x130 [ 1802.168373][ T4982] ? pmd_pfn+0x1d0/0x1d0 [ 1802.172617][ T4982] ? lock_downgrade+0x920/0x920 [ 1802.177468][ T4982] ? swp_swapcount+0x540/0x540 [ 1802.182233][ T4982] ? __kasan_check_read+0x11/0x20 [ 1802.187255][ T4982] ? do_raw_spin_unlock+0x57/0x270 [ 1802.192372][ T4982] do_wp_page+0x499/0x14d0 [ 1802.196794][ T4982] ? finish_mkwrite_fault+0x570/0x570 [ 1802.202175][ T4982] __handle_mm_fault+0x22f1/0x3f20 [ 1802.207300][ T4982] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1802.212862][ T4982] ? __kasan_check_read+0x11/0x20 [ 1802.217895][ T4982] handle_mm_fault+0x1b5/0x6c0 [ 1802.222663][ T4982] __do_page_fault+0x536/0xdd0 [ 1802.227436][ T4982] do_page_fault+0x38/0x590 [ 1802.231941][ T4982] page_fault+0x39/0x40 [ 1802.236090][ T4982] RIP: 0033:0x430956 [ 1802.239984][ T4982] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 46 64 00 85 c0 0f 84 [ 1802.259591][ T4982] RSP: 002b:00007ffd7ea62670 EFLAGS: 00010206 [ 1802.265663][ T4982] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 1802.273642][ T4982] RDX: 0000555557154930 RSI: 000055555715c970 RDI: 0000000000000003 [ 1802.281617][ T4982] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000555557153940 [ 1802.289611][ T4982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 1802.298552][ T4982] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 1802.313344][ T4982] memory: usage 492kB, limit 0kB, failcnt 688 [ 1802.319621][ T4982] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1802.334973][ T4982] Memory cgroup stats for /syz3: [ 1802.335077][ T4982] anon 8192 [ 1802.335077][ T4982] file 0 [ 1802.335077][ T4982] kernel_stack 0 [ 1802.335077][ T4982] slab 405504 [ 1802.335077][ T4982] sock 0 [ 1802.335077][ T4982] shmem 0 [ 1802.335077][ T4982] file_mapped 0 [ 1802.335077][ T4982] file_dirty 0 [ 1802.335077][ T4982] file_writeback 0 [ 1802.335077][ T4982] anon_thp 0 [ 1802.335077][ T4982] inactive_anon 0 [ 1802.335077][ T4982] active_anon 8192 [ 1802.335077][ T4982] inactive_file 0 [ 1802.335077][ T4982] active_file 0 [ 1802.335077][ T4982] unevictable 0 [ 1802.335077][ T4982] slab_reclaimable 135168 [ 1802.335077][ T4982] slab_unreclaimable 270336 [ 1802.335077][ T4982] pgfault 34914 [ 1802.335077][ T4982] pgmajfault 0 [ 1802.335077][ T4982] workingset_refault 0 [ 1802.335077][ T4982] workingset_activate 0 [ 1802.335077][ T4982] workingset_nodereclaim 0 [ 1802.335077][ T4982] pgrefill 33 [ 1802.335077][ T4982] pgscan 66 [ 1802.335077][ T4982] pgsteal 0 [ 1802.335077][ T4982] pgactivate 0 [ 1802.335077][ T4982] pgdeactivate 33 15:19:23 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[]) sendmsg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r4, 0x0, 0x0) 15:19:23 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[]) sendmsg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r4, 0x0, 0x0) 15:19:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 1802.757608][ T4982] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=4982,uid=0 [ 1802.832508][ T4982] Memory cgroup out of memory: Killed process 4982 (syz-executor.3) total-vm:72448kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:0 [ 1802.907259][ T1065] oom_reaper: reaped process 4982 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 1802.918471][ T5009] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1802.933841][ T5009] CPU: 0 PID: 5009 Comm: syz-executor.5 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1802.942896][ T5009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1802.952951][ T5009] Call Trace: [ 1802.956253][ T5009] dump_stack+0x172/0x1f0 [ 1802.960661][ T5009] dump_header+0x177/0x1152 [ 1802.965186][ T5009] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1802.971007][ T5009] ? ___ratelimit+0x2c8/0x595 [ 1802.975690][ T5009] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1802.981509][ T5009] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1802.986795][ T5009] ? trace_hardirqs_on+0x67/0x240 [ 1802.991827][ T5009] ? pagefault_out_of_memory+0x11c/0x11c [ 1802.997474][ T5009] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1803.003294][ T5009] ? ___ratelimit+0x60/0x595 [ 1803.007880][ T5009] ? do_raw_spin_unlock+0x57/0x270 [ 1803.013006][ T5009] oom_kill_process.cold+0x10/0x15 [ 1803.018131][ T5009] out_of_memory+0x334/0x1340 [ 1803.022841][ T5009] ? lock_downgrade+0x920/0x920 [ 1803.027718][ T5009] ? oom_killer_disable+0x280/0x280 [ 1803.032953][ T5009] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1803.038508][ T5009] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1803.044147][ T5009] ? do_raw_spin_unlock+0x57/0x270 [ 1803.049271][ T5009] ? _raw_spin_unlock+0x2d/0x50 [ 1803.054144][ T5009] try_charge+0xf4b/0x1440 [ 1803.058587][ T5009] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1803.064148][ T5009] ? percpu_ref_tryget_live+0x111/0x290 [ 1803.069721][ T5009] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1803.075972][ T5009] ? __kasan_check_read+0x11/0x20 [ 1803.081004][ T5009] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1803.086551][ T5009] mem_cgroup_try_charge+0x136/0x590 [ 1803.091853][ T5009] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1803.098111][ T5009] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1803.103771][ T5009] wp_page_copy+0x41e/0x1590 [ 1803.108384][ T5009] ? find_held_lock+0x35/0x130 [ 1803.113162][ T5009] ? pmd_pfn+0x1d0/0x1d0 [ 1803.117408][ T5009] ? lock_downgrade+0x920/0x920 [ 1803.122264][ T5009] ? swp_swapcount+0x540/0x540 [ 1803.127061][ T5009] ? __kasan_check_read+0x11/0x20 [ 1803.132097][ T5009] ? do_raw_spin_unlock+0x57/0x270 [ 1803.137222][ T5009] do_wp_page+0x499/0x14d0 [ 1803.141648][ T5009] ? finish_mkwrite_fault+0x570/0x570 [ 1803.147065][ T5009] __handle_mm_fault+0x22f1/0x3f20 [ 1803.152210][ T5009] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1803.157777][ T5009] ? __kasan_check_read+0x11/0x20 [ 1803.162849][ T5009] handle_mm_fault+0x1b5/0x6c0 [ 1803.167624][ T5009] __do_page_fault+0x536/0xdd0 [ 1803.172412][ T5009] do_page_fault+0x38/0x590 [ 1803.176923][ T5009] page_fault+0x39/0x40 [ 1803.181087][ T5009] RIP: 0033:0x430956 [ 1803.184993][ T5009] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 46 64 00 85 c0 0f 84 15:19:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[]) sendmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) [ 1803.204604][ T5009] RSP: 002b:00007fffa802b0f0 EFLAGS: 00010206 [ 1803.210676][ T5009] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 1803.218656][ T5009] RDX: 0000555555c6f930 RSI: 0000555555c77970 RDI: 0000000000000003 [ 1803.226663][ T5009] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000555555c6e940 [ 1803.234652][ T5009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 1803.242642][ T5009] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 1803.291977][ T5009] memory: usage 808kB, limit 0kB, failcnt 462 [ 1803.302054][ T5009] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1803.338350][ T5009] Memory cgroup stats for /syz5: [ 1803.338448][ T5009] anon 221184 [ 1803.338448][ T5009] file 176128 [ 1803.338448][ T5009] kernel_stack 0 [ 1803.338448][ T5009] slab 962560 [ 1803.338448][ T5009] sock 0 [ 1803.338448][ T5009] shmem 172032 [ 1803.338448][ T5009] file_mapped 0 [ 1803.338448][ T5009] file_dirty 0 [ 1803.338448][ T5009] file_writeback 0 [ 1803.338448][ T5009] anon_thp 0 [ 1803.338448][ T5009] inactive_anon 143360 [ 1803.338448][ T5009] active_anon 155648 [ 1803.338448][ T5009] inactive_file 0 15:19:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[]) sendmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) [ 1803.338448][ T5009] active_file 135168 [ 1803.338448][ T5009] unevictable 131072 [ 1803.338448][ T5009] slab_reclaimable 540672 [ 1803.338448][ T5009] slab_unreclaimable 421888 [ 1803.338448][ T5009] pgfault 59466 [ 1803.338448][ T5009] pgmajfault 0 [ 1803.338448][ T5009] workingset_refault 0 [ 1803.338448][ T5009] workingset_activate 0 [ 1803.338448][ T5009] workingset_nodereclaim 0 [ 1803.338448][ T5009] pgrefill 734 [ 1803.338448][ T5009] pgscan 711 [ 1803.338448][ T5009] pgsteal 35 [ 1803.338448][ T5009] pgactivate 660 15:19:24 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 1803.770079][ T5009] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=5009,uid=0 [ 1803.825775][ T5009] Memory cgroup out of memory: Killed process 5009 (syz-executor.5) total-vm:72448kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:0 [ 1803.878469][ T1065] oom_reaper: reaped process 5009 (syz-executor.5), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 1804.165600][ T5078] IPVS: ftp: loaded support on port[0] = 21 15:19:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r5, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=""/31, 0x1f}}, 0x10) write$cgroup_int(r7, 0x0, 0x0) [ 1804.540486][ T5078] chnl_net:caif_netlink_parms(): no params data found [ 1804.606901][ T5078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1804.621918][ T5078] bridge0: port 1(bridge_slave_0) entered disabled state [ 1804.631503][ T5078] device bridge_slave_0 entered promiscuous mode [ 1804.649135][ T5078] bridge0: port 2(bridge_slave_1) entered blocking state [ 1804.661010][ T5078] bridge0: port 2(bridge_slave_1) entered disabled state [ 1804.678417][ T5078] device bridge_slave_1 entered promiscuous mode [ 1804.722294][ T5078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1804.745996][ T5078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1804.803290][ T5078] team0: Port device team_slave_0 added [ 1804.812013][ T5078] team0: Port device team_slave_1 added [ 1804.890124][ T5078] device hsr_slave_0 entered promiscuous mode [ 1804.968320][ T5078] device hsr_slave_1 entered promiscuous mode [ 1805.029530][ T5078] debugfs: Directory 'hsr0' with parent '/' already present! [ 1805.070773][ T5081] IPVS: ftp: loaded support on port[0] = 21 [ 1805.083066][ T5078] bridge0: port 2(bridge_slave_1) entered blocking state [ 1805.090199][ T5078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1805.097665][ T5078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1805.104735][ T5078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1805.240497][ T5078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1805.270939][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1805.279697][ T2231] bridge0: port 1(bridge_slave_0) entered disabled state [ 1805.287720][ T2231] bridge0: port 2(bridge_slave_1) entered disabled state [ 1805.297333][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1805.315535][ T5081] chnl_net:caif_netlink_parms(): no params data found [ 1805.331594][ T5078] 8021q: adding VLAN 0 to HW filter on device team0 [ 1805.363304][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1805.374152][ T2581] bridge0: port 1(bridge_slave_0) entered blocking state [ 1805.381323][ T2581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1805.435828][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1805.456432][T11525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1805.463603][T11525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1805.490874][ T5081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1805.497982][ T5081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1805.506948][ T5081] device bridge_slave_0 entered promiscuous mode [ 1805.517444][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1805.527203][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1805.560058][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1805.567898][ T5081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1805.576719][ T5081] device bridge_slave_1 entered promiscuous mode [ 1805.587257][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1805.596244][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1805.615835][ T5078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1805.629106][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1805.646011][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1805.656071][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1805.674645][ T5081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1805.699542][ T5081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1805.718063][ T5078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1805.740362][ T5081] team0: Port device team_slave_0 added [ 1805.749068][ T5081] team0: Port device team_slave_1 added [ 1805.796905][ T5081] device hsr_slave_0 entered promiscuous mode [ 1805.873759][ T5081] device hsr_slave_1 entered promiscuous mode [ 1805.914742][ T5081] debugfs: Directory 'hsr0' with parent '/' already present! [ 1805.964801][ T5081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1805.985161][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1806.006335][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1806.014019][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1806.026638][ T5081] 8021q: adding VLAN 0 to HW filter on device team0 [ 1806.038078][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1806.047972][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1806.056434][ T2581] bridge0: port 1(bridge_slave_0) entered blocking state [ 1806.063492][ T2581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1806.072011][ T2581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1806.084347][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1806.094569][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1806.104885][T11525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1806.112066][T11525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1806.141130][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1806.151412][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1806.179506][ T5081] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1806.198868][ T5081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1806.221713][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1806.235558][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1806.266408][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1806.298087][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1806.307685][ T5088] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1806.323929][ T5088] CPU: 1 PID: 5088 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1806.333018][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1806.338113][ T5081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1806.343104][ T5088] Call Trace: [ 1806.353151][ T5088] dump_stack+0x172/0x1f0 [ 1806.357489][ T5088] dump_header+0x177/0x1152 [ 1806.361999][ T5088] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1806.367806][ T5088] ? ___ratelimit+0x2c8/0x595 [ 1806.372495][ T5088] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1806.378320][ T5088] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1806.378336][ T5088] ? trace_hardirqs_on+0x67/0x240 [ 1806.378352][ T5088] ? pagefault_out_of_memory+0x11c/0x11c [ 1806.378368][ T5088] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1806.378383][ T5088] ? ___ratelimit+0x60/0x595 [ 1806.378393][ T5088] ? do_raw_spin_unlock+0x57/0x270 [ 1806.378406][ T5088] oom_kill_process.cold+0x10/0x15 [ 1806.378421][ T5088] out_of_memory+0x334/0x1340 [ 1806.378437][ T5088] ? __sched_text_start+0x8/0x8 [ 1806.378452][ T5088] ? oom_killer_disable+0x280/0x280 [ 1806.378483][ T5088] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1806.378495][ T5088] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1806.378514][ T5088] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1806.378542][ T5088] ? cgroup_file_notify+0x140/0x1b0 [ 1806.378561][ T5088] memory_max_write+0x262/0x3a0 [ 1806.378581][ T5088] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1806.378593][ T5088] ? lock_acquire+0x190/0x410 [ 1806.378612][ T5088] ? kernfs_fop_write+0x227/0x480 [ 1806.378631][ T5088] cgroup_file_write+0x241/0x790 [ 1806.378649][ T5088] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1806.378662][ T5088] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1806.378679][ T5088] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1806.378691][ T5088] kernfs_fop_write+0x2b8/0x480 [ 1806.378708][ T5088] __vfs_write+0x8a/0x110 [ 1806.378719][ T5088] ? kernfs_fop_open+0xd80/0xd80 [ 1806.378732][ T5088] vfs_write+0x268/0x5d0 [ 1806.378748][ T5088] ksys_write+0x14f/0x290 [ 1806.378760][ T5088] ? __ia32_sys_read+0xb0/0xb0 [ 1806.378780][ T5088] ? do_syscall_64+0x26/0x760 [ 1806.378793][ T5088] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1806.378803][ T5088] ? do_syscall_64+0x26/0x760 [ 1806.378821][ T5088] __x64_sys_write+0x73/0xb0 [ 1806.543412][ T5088] do_syscall_64+0xfa/0x760 [ 1806.547906][ T5088] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1806.553780][ T5088] RIP: 0033:0x459879 [ 1806.557661][ T5088] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1806.577246][ T5088] RSP: 002b:00007f36019fec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1806.585639][ T5088] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1806.593603][ T5088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1806.601572][ T5088] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1806.609531][ T5088] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f36019ff6d4 [ 1806.617487][ T5088] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1806.646388][ T5088] memory: usage 7092kB, limit 0kB, failcnt 232 [ 1806.653617][ T5088] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1806.661255][ T5088] Memory cgroup stats for /syz0: [ 1806.663359][ T5088] anon 4255744 [ 1806.663359][ T5088] file 155648 [ 1806.663359][ T5088] kernel_stack 65536 [ 1806.663359][ T5088] slab 2830336 [ 1806.663359][ T5088] sock 0 [ 1806.663359][ T5088] shmem 110592 [ 1806.663359][ T5088] file_mapped 0 [ 1806.663359][ T5088] file_dirty 0 [ 1806.663359][ T5088] file_writeback 0 [ 1806.663359][ T5088] anon_thp 4194304 [ 1806.663359][ T5088] inactive_anon 0 [ 1806.663359][ T5088] active_anon 4255744 [ 1806.663359][ T5088] inactive_file 135168 [ 1806.663359][ T5088] active_file 0 [ 1806.663359][ T5088] unevictable 12288 [ 1806.663359][ T5088] slab_reclaimable 946176 [ 1806.663359][ T5088] slab_unreclaimable 1884160 [ 1806.663359][ T5088] pgfault 60258 [ 1806.663359][ T5088] pgmajfault 0 [ 1806.663359][ T5088] workingset_refault 0 [ 1806.663359][ T5088] workingset_activate 0 [ 1806.663359][ T5088] workingset_nodereclaim 0 [ 1806.663359][ T5088] pgrefill 225 [ 1806.663359][ T5088] pgscan 223 [ 1806.663359][ T5088] pgsteal 79 [ 1806.663359][ T5088] pgactivate 132 [ 1806.766229][ T5088] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=5087,uid=0 [ 1806.788384][ T5088] Memory cgroup out of memory: Killed process 5087 (syz-executor.0) total-vm:72580kB, anon-rss:4188kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:147456kB oom_score_adj:1000 [ 1806.823021][ T1065] oom_reaper: reaped process 5087 (syz-executor.0), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB [ 1806.987068][ T5095] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1806.997801][ T5095] CPU: 1 PID: 5095 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1807.006835][ T5095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1807.016902][ T5095] Call Trace: [ 1807.020200][ T5095] dump_stack+0x172/0x1f0 [ 1807.024534][ T5095] dump_header+0x177/0x1152 [ 1807.029053][ T5095] ? pagefault_out_of_memory+0x11c/0x11c [ 1807.034693][ T5095] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1807.040534][ T5095] ? ___ratelimit+0x60/0x595 [ 1807.045145][ T5095] ? do_raw_spin_unlock+0x57/0x270 [ 1807.050266][ T5095] oom_kill_process.cold+0x10/0x15 [ 1807.055386][ T5095] out_of_memory+0x334/0x1340 [ 1807.060081][ T5095] ? __sched_text_start+0x8/0x8 [ 1807.064939][ T5095] ? oom_killer_disable+0x280/0x280 [ 1807.070150][ T5095] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1807.075699][ T5095] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1807.081346][ T5095] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1807.087154][ T5095] ? cgroup_file_notify+0x140/0x1b0 [ 1807.092355][ T5095] memory_max_write+0x262/0x3a0 [ 1807.097217][ T5095] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1807.103978][ T5095] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1807.110745][ T5095] ? cgroup_file_write+0x1e2/0x790 [ 1807.115871][ T5095] cgroup_file_write+0x241/0x790 [ 1807.120814][ T5095] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1807.127577][ T5095] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1807.133221][ T5095] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1807.138855][ T5095] kernfs_fop_write+0x2b8/0x480 [ 1807.143735][ T5095] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1807.149979][ T5095] __vfs_write+0x8a/0x110 [ 1807.154309][ T5095] ? kernfs_fop_open+0xd80/0xd80 [ 1807.159248][ T5095] vfs_write+0x268/0x5d0 [ 1807.163501][ T5095] ksys_write+0x14f/0x290 [ 1807.167837][ T5095] ? __ia32_sys_read+0xb0/0xb0 [ 1807.172605][ T5095] ? do_syscall_64+0x26/0x760 [ 1807.177282][ T5095] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1807.183356][ T5095] ? do_syscall_64+0x26/0x760 [ 1807.188043][ T5095] __x64_sys_write+0x73/0xb0 [ 1807.192634][ T5095] do_syscall_64+0xfa/0x760 [ 1807.197144][ T5095] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1807.203035][ T5095] RIP: 0033:0x459879 [ 1807.206932][ T5095] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1807.226546][ T5095] RSP: 002b:00007fefcd266c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1807.234956][ T5095] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1807.242931][ T5095] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 1807.250897][ T5095] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1807.258862][ T5095] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fefcd2676d4 [ 1807.266817][ T5095] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1807.299781][ T5095] memory: usage 5848kB, limit 0kB, failcnt 364 [ 1807.306533][ T5095] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1807.323145][ T5095] Memory cgroup stats for /syz2: [ 1807.324690][ T5095] anon 2211840 [ 1807.324690][ T5095] file 151552 [ 1807.324690][ T5095] kernel_stack 65536 [ 1807.324690][ T5095] slab 3809280 [ 1807.324690][ T5095] sock 0 [ 1807.324690][ T5095] shmem 0 [ 1807.324690][ T5095] file_mapped 0 [ 1807.324690][ T5095] file_dirty 0 [ 1807.324690][ T5095] file_writeback 0 [ 1807.324690][ T5095] anon_thp 2097152 [ 1807.324690][ T5095] inactive_anon 0 [ 1807.324690][ T5095] active_anon 2211840 [ 1807.324690][ T5095] inactive_file 135168 [ 1807.324690][ T5095] active_file 0 [ 1807.324690][ T5095] unevictable 0 [ 1807.324690][ T5095] slab_reclaimable 946176 [ 1807.324690][ T5095] slab_unreclaimable 2863104 [ 1807.324690][ T5095] pgfault 66594 [ 1807.324690][ T5095] pgmajfault 0 [ 1807.324690][ T5095] workingset_refault 0 [ 1807.324690][ T5095] workingset_activate 0 [ 1807.324690][ T5095] workingset_nodereclaim 0 [ 1807.324690][ T5095] pgrefill 277 [ 1807.324690][ T5095] pgscan 272 [ 1807.324690][ T5095] pgsteal 33 [ 1807.324690][ T5095] pgactivate 231 [ 1807.433256][ T5095] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=5093,uid=0 [ 1807.468142][ T5095] Memory cgroup out of memory: Killed process 5093 (syz-executor.2) total-vm:72580kB, anon-rss:2144kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000 [ 1807.499881][ T1065] oom_reaper: reaped process 5093 (syz-executor.2), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 1807.604807][ T5078] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1807.626047][ T5078] CPU: 1 PID: 5078 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1807.635121][ T5078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1807.645190][ T5078] Call Trace: [ 1807.648507][ T5078] dump_stack+0x172/0x1f0 [ 1807.652849][ T5078] dump_header+0x177/0x1152 [ 1807.657362][ T5078] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1807.663170][ T5078] ? ___ratelimit+0x2c8/0x595 [ 1807.667904][ T5078] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1807.673745][ T5078] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1807.679036][ T5078] ? trace_hardirqs_on+0x67/0x240 [ 1807.684063][ T5078] ? pagefault_out_of_memory+0x11c/0x11c [ 1807.689700][ T5078] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1807.695621][ T5078] ? ___ratelimit+0x60/0x595 [ 1807.700257][ T5078] ? do_raw_spin_unlock+0x57/0x270 [ 1807.705386][ T5078] oom_kill_process.cold+0x10/0x15 [ 1807.710510][ T5078] out_of_memory+0x334/0x1340 [ 1807.715187][ T5078] ? lock_downgrade+0x920/0x920 [ 1807.720044][ T5078] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1807.725860][ T5078] ? oom_killer_disable+0x280/0x280 [ 1807.731093][ T5078] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1807.736675][ T5078] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1807.742343][ T5078] ? do_raw_spin_unlock+0x57/0x270 [ 1807.747491][ T5078] ? _raw_spin_unlock+0x2d/0x50 [ 1807.752367][ T5078] try_charge+0xf4b/0x1440 [ 1807.756812][ T5078] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1807.762378][ T5078] ? percpu_ref_tryget_live+0x111/0x290 [ 1807.767938][ T5078] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1807.774197][ T5078] ? __kasan_check_read+0x11/0x20 [ 1807.779248][ T5078] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1807.784800][ T5078] mem_cgroup_try_charge+0x136/0x590 [ 1807.790122][ T5078] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1807.796388][ T5078] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1807.802058][ T5078] __handle_mm_fault+0x1e34/0x3f20 [ 1807.807200][ T5078] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1807.812895][ T5078] ? __kasan_check_read+0x11/0x20 [ 1807.817957][ T5078] handle_mm_fault+0x1b5/0x6c0 [ 1807.822738][ T5078] __do_page_fault+0x536/0xdd0 [ 1807.827527][ T5078] do_page_fault+0x38/0x590 [ 1807.832040][ T5078] page_fault+0x39/0x40 [ 1807.836198][ T5078] RIP: 0033:0x457811 [ 1807.840093][ T5078] Code: 48 81 ec 98 00 00 00 0f 05 48 3d 00 f0 ff ff 48 89 c3 0f 87 e9 00 00 00 85 db 0f 88 2f 01 00 00 48 89 e2 89 de bf 01 00 00 00 ba 13 00 00 85 c0 0f 88 98 00 00 00 8b 44 24 18 25 00 f0 00 00 [ 1807.859707][ T5078] RSP: 002b:00007fff5b160f70 EFLAGS: 00010206 [ 1807.865780][ T5078] RAX: 0000000000000003 RBX: 0000000000000003 RCX: 00000000004577f0 [ 1807.873761][ T5078] RDX: 00007fff5b160f70 RSI: 0000000000000003 RDI: 0000000000000001 [ 1807.881744][ T5078] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000555556b9e940 [ 1807.889716][ T5078] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff5b162150 [ 1807.897691][ T5078] R13: 00007fff5b162140 R14: 0000000000000000 R15: 00007fff5b162150 [ 1807.925467][ T5078] memory: usage 2496kB, limit 0kB, failcnt 244 [ 1807.940095][ T5078] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1807.954298][ T5078] Memory cgroup stats for /syz0: [ 1807.954401][ T5078] anon 0 [ 1807.954401][ T5078] file 155648 [ 1807.954401][ T5078] kernel_stack 0 [ 1807.954401][ T5078] slab 2695168 [ 1807.954401][ T5078] sock 0 [ 1807.954401][ T5078] shmem 110592 [ 1807.954401][ T5078] file_mapped 0 [ 1807.954401][ T5078] file_dirty 0 [ 1807.954401][ T5078] file_writeback 0 [ 1807.954401][ T5078] anon_thp 0 [ 1807.954401][ T5078] inactive_anon 0 [ 1807.954401][ T5078] active_anon 0 [ 1807.954401][ T5078] inactive_file 135168 [ 1807.954401][ T5078] active_file 0 [ 1807.954401][ T5078] unevictable 12288 [ 1807.954401][ T5078] slab_reclaimable 811008 [ 1807.954401][ T5078] slab_unreclaimable 1884160 [ 1807.954401][ T5078] pgfault 60258 [ 1807.954401][ T5078] pgmajfault 0 15:19:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_int(r4, 0x0, 0x0) 15:19:29 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[]) sendmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 15:19:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:19:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r5, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=""/31, 0x1f}}, 0x10) write$cgroup_int(r7, 0x0, 0x0) 15:19:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:19:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 1807.954401][ T5078] workingset_refault 0 [ 1807.954401][ T5078] workingset_activate 0 [ 1807.954401][ T5078] workingset_nodereclaim 0 [ 1807.954401][ T5078] pgrefill 225 [ 1807.954401][ T5078] pgscan 223 [ 1807.954401][ T5078] pgsteal 79 [ 1807.954401][ T5078] pgactivate 132 [ 1808.058614][ T5078] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=5078,uid=0 [ 1808.085981][ T5078] Memory cgroup out of memory: Killed process 5078 (syz-executor.0) total-vm:72448kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:0 [ 1808.118300][ T5081] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1808.118789][ T1065] oom_reaper: reaped process 5078 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 1808.138156][ T5081] CPU: 0 PID: 5081 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1808.149851][ T5081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1808.159923][ T5081] Call Trace: [ 1808.163225][ T5081] dump_stack+0x172/0x1f0 [ 1808.167564][ T5081] dump_header+0x177/0x1152 [ 1808.172121][ T5081] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1808.177950][ T5081] ? ___ratelimit+0x2c8/0x595 [ 1808.182648][ T5081] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1808.188484][ T5081] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1808.193789][ T5081] ? trace_hardirqs_on+0x67/0x240 [ 1808.198828][ T5081] ? pagefault_out_of_memory+0x11c/0x11c [ 1808.204486][ T5081] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1808.210315][ T5081] ? ___ratelimit+0x60/0x595 [ 1808.214919][ T5081] ? do_raw_spin_unlock+0x57/0x270 [ 1808.220044][ T5081] oom_kill_process.cold+0x10/0x15 [ 1808.225182][ T5081] out_of_memory+0x334/0x1340 [ 1808.229880][ T5081] ? lock_downgrade+0x920/0x920 [ 1808.234762][ T5081] ? oom_killer_disable+0x280/0x280 [ 1808.239999][ T5081] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1808.245574][ T5081] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1808.251231][ T5081] ? do_raw_spin_unlock+0x57/0x270 [ 1808.256375][ T5081] ? _raw_spin_unlock+0x2d/0x50 [ 1808.261261][ T5081] try_charge+0xf4b/0x1440 [ 1808.265703][ T5081] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1808.271255][ T5081] ? percpu_ref_tryget_live+0x111/0x290 [ 1808.276831][ T5081] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1808.283097][ T5081] ? __kasan_check_read+0x11/0x20 [ 1808.288151][ T5081] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1808.293719][ T5081] mem_cgroup_try_charge+0x136/0x590 [ 1808.299026][ T5081] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1808.305289][ T5081] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1808.310952][ T5081] wp_page_copy+0x41e/0x1590 [ 1808.315562][ T5081] ? find_held_lock+0x35/0x130 [ 1808.320344][ T5081] ? pmd_pfn+0x1d0/0x1d0 [ 1808.324606][ T5081] ? lock_downgrade+0x920/0x920 [ 1808.329479][ T5081] ? swp_swapcount+0x540/0x540 [ 1808.334259][ T5081] ? __kasan_check_read+0x11/0x20 [ 1808.339292][ T5081] ? do_raw_spin_unlock+0x57/0x270 [ 1808.344427][ T5081] do_wp_page+0x499/0x14d0 [ 1808.348879][ T5081] ? finish_mkwrite_fault+0x570/0x570 [ 1808.354302][ T5081] __handle_mm_fault+0x22f1/0x3f20 [ 1808.359455][ T5081] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1808.365035][ T5081] ? __kasan_check_read+0x11/0x20 [ 1808.370087][ T5081] handle_mm_fault+0x1b5/0x6c0 [ 1808.374866][ T5081] __do_page_fault+0x536/0xdd0 [ 1808.379665][ T5081] do_page_fault+0x38/0x590 [ 1808.384186][ T5081] page_fault+0x39/0x40 [ 1808.388368][ T5081] RIP: 0033:0x4034f2 [ 1808.392264][ T5081] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 a9 8d 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 c9 42 05 00 48 [ 1808.411882][ T5081] RSP: 002b:00007ffce2678d50 EFLAGS: 00010246 [ 1808.417967][ T5081] RAX: 0000000000000000 RBX: 00000000001b71fe RCX: 0000000000413480 [ 1808.425950][ T5081] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffce2679e80 [ 1808.433939][ T5081] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000555555672940 [ 1808.441930][ T5081] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffce2679e80 [ 1808.449927][ T5081] R13: 00007ffce2679e70 R14: 0000000000000000 R15: 00007ffce2679e80 [ 1808.474910][ T5081] memory: usage 3500kB, limit 0kB, failcnt 372 [ 1808.495145][ T5081] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1808.509332][ T5081] Memory cgroup stats for /syz2: [ 1808.509433][ T5081] anon 110592 [ 1808.509433][ T5081] file 151552 [ 1808.509433][ T5081] kernel_stack 65536 [ 1808.509433][ T5081] slab 3809280 [ 1808.509433][ T5081] sock 0 [ 1808.509433][ T5081] shmem 0 [ 1808.509433][ T5081] file_mapped 0 [ 1808.509433][ T5081] file_dirty 0 [ 1808.509433][ T5081] file_writeback 0 15:19:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a", 0x20}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 1808.509433][ T5081] anon_thp 0 [ 1808.509433][ T5081] inactive_anon 0 [ 1808.509433][ T5081] active_anon 110592 [ 1808.509433][ T5081] inactive_file 135168 [ 1808.509433][ T5081] active_file 0 [ 1808.509433][ T5081] unevictable 0 [ 1808.509433][ T5081] slab_reclaimable 946176 [ 1808.509433][ T5081] slab_unreclaimable 2863104 [ 1808.509433][ T5081] pgfault 66627 [ 1808.509433][ T5081] pgmajfault 0 [ 1808.509433][ T5081] workingset_refault 0 [ 1808.509433][ T5081] workingset_activate 0 [ 1808.509433][ T5081] workingset_nodereclaim 0 [ 1808.509433][ T5081] pgrefill 310 [ 1808.509433][ T5081] pgscan 305 [ 1808.509433][ T5081] pgsteal 33 [ 1808.509433][ T5081] pgactivate 264 [ 1808.619746][ T5081] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=5081,uid=0 [ 1808.635370][ T5081] Memory cgroup out of memory: Killed process 5081 (syz-executor.2) total-vm:72448kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:0 [ 1808.653440][ T1065] oom_reaper: reaped process 5081 (syz-executor.2), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 15:19:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:19:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r4, 0x0, 0x0) [ 1810.275812][ T5106] IPVS: ftp: loaded support on port[0] = 21 [ 1810.297533][ T5110] IPVS: ftp: loaded support on port[0] = 21 [ 1810.304482][ T5109] IPVS: ftp: loaded support on port[0] = 21 15:19:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r4, 0x0, 0x0) 15:19:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:19:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x207, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r2 = dup2(r0, r1) clone(0x43102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) write$P9_RLERRORu(r2, 0x0, 0xfffffe19) open$dir(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00\x00') lseek(0xffffffffffffffff, 0xfffffffffffff80c, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) recvfrom$unix(r2, &(0x7f00000002c0)=""/254, 0xfe, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 15:19:32 executing program 4: clone(0x802102201fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000003060ddeff048818feffff57ffccad000c000100060d00007d0000ff002201f6f000"], 0x2c}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) exit_group(0x0) [ 1811.811713][ T5122] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1811.820222][ T5122] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 15:19:32 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x3c}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) [ 1812.743030][ T5130] IPVS: ftp: loaded support on port[0] = 21 [ 1812.865688][ T5109] chnl_net:caif_netlink_parms(): no params data found [ 1812.904679][ T5133] IPVS: ftp: loaded support on port[0] = 21 [ 1812.944856][ T5106] chnl_net:caif_netlink_parms(): no params data found [ 1813.419050][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 1813.426817][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state [ 1813.434855][ T5109] device bridge_slave_0 entered promiscuous mode [ 1813.445135][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 1813.453047][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1813.461492][ T5109] device bridge_slave_1 entered promiscuous mode [ 1813.491195][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1813.503413][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1813.519671][ T5110] chnl_net:caif_netlink_parms(): no params data found [ 1814.045722][ T5109] team0: Port device team_slave_0 added [ 1814.086609][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1814.096344][ T5106] bridge0: port 1(bridge_slave_0) entered disabled state [ 1814.104652][ T5106] device bridge_slave_0 entered promiscuous mode [ 1814.114252][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1814.121308][ T5106] bridge0: port 2(bridge_slave_1) entered disabled state [ 1814.130381][ T5106] device bridge_slave_1 entered promiscuous mode [ 1814.138301][ T5109] team0: Port device team_slave_1 added [ 1814.215663][ T5109] device hsr_slave_0 entered promiscuous mode [ 1814.253344][ T5109] device hsr_slave_1 entered promiscuous mode [ 1814.303336][ T5109] debugfs: Directory 'hsr0' with parent '/' already present! [ 1814.822304][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1814.829600][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1814.838377][ T5110] device bridge_slave_0 entered promiscuous mode [ 1814.863696][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1814.873436][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 1814.881999][ T5110] device bridge_slave_1 entered promiscuous mode [ 1814.907303][ T5106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1814.941415][ T5130] chnl_net:caif_netlink_parms(): no params data found [ 1814.959704][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1815.465390][ T5106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1815.498911][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1815.537984][ T5133] chnl_net:caif_netlink_parms(): no params data found [ 1815.561651][ T5110] team0: Port device team_slave_0 added [ 1815.576540][ T5110] team0: Port device team_slave_1 added [ 1816.111075][ T5106] team0: Port device team_slave_0 added [ 1816.138332][ T5106] team0: Port device team_slave_1 added [ 1816.145344][ T5130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1816.152797][ T5130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1816.161086][ T5130] device bridge_slave_0 entered promiscuous mode [ 1816.202167][ T5110] device hsr_slave_0 entered promiscuous mode [ 1816.239964][ T5110] device hsr_slave_1 entered promiscuous mode [ 1816.289972][ T5110] debugfs: Directory 'hsr0' with parent '/' already present! [ 1816.314158][ T125] device bridge_slave_1 left promiscuous mode [ 1816.321813][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1816.371788][ T125] device bridge_slave_0 left promiscuous mode [ 1816.378051][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1816.443256][ T125] device bridge_slave_1 left promiscuous mode [ 1816.449534][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1816.502822][ T125] device bridge_slave_0 left promiscuous mode [ 1816.509073][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1816.565193][ T125] device bridge_slave_1 left promiscuous mode [ 1816.571416][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1816.630713][ T125] device bridge_slave_0 left promiscuous mode [ 1816.637038][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1816.685100][ T125] device bridge_slave_1 left promiscuous mode [ 1816.691327][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1816.744660][ T125] device bridge_slave_0 left promiscuous mode [ 1816.750883][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1816.786077][ T125] device bridge_slave_1 left promiscuous mode [ 1816.792311][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1816.835616][ T125] device bridge_slave_0 left promiscuous mode [ 1816.842182][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1816.888483][ T125] device bridge_slave_1 left promiscuous mode [ 1816.897051][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1816.946527][ T125] device bridge_slave_0 left promiscuous mode [ 1816.952840][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1831.002814][ T125] device hsr_slave_0 left promiscuous mode [ 1831.042340][ T125] device hsr_slave_1 left promiscuous mode [ 1831.097219][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1831.110215][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1831.125454][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1831.173082][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1831.242725][ T125] bond0 (unregistering): Released all slaves [ 1831.396314][ T125] device hsr_slave_0 left promiscuous mode [ 1831.445808][ T125] device hsr_slave_1 left promiscuous mode [ 1831.501309][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1831.515412][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1831.529366][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1831.561385][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1831.665582][ T125] bond0 (unregistering): Released all slaves [ 1831.809486][ T125] device hsr_slave_0 left promiscuous mode [ 1831.849358][ T125] device hsr_slave_1 left promiscuous mode [ 1831.904780][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1831.919334][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1831.932436][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1831.997977][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1832.087598][ T125] bond0 (unregistering): Released all slaves [ 1832.222729][ T125] device hsr_slave_0 left promiscuous mode [ 1832.262660][ T125] device hsr_slave_1 left promiscuous mode [ 1832.317134][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1832.332956][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1832.349496][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1832.392081][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1832.501335][ T125] bond0 (unregistering): Released all slaves [ 1832.636369][ T125] device hsr_slave_0 left promiscuous mode [ 1832.686045][ T125] device hsr_slave_1 left promiscuous mode [ 1832.733969][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1832.747757][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1832.761292][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1832.821062][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1832.919625][ T125] bond0 (unregistering): Released all slaves [ 1833.039895][ T125] device hsr_slave_0 left promiscuous mode [ 1833.079422][ T125] device hsr_slave_1 left promiscuous mode [ 1833.138844][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1833.155446][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1833.173101][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1833.236261][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1833.310203][ T125] bond0 (unregistering): Released all slaves [ 1833.467280][ T5130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1833.474523][ T5130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1833.482303][ T5130] device bridge_slave_1 entered promiscuous mode [ 1833.575239][ T5106] device hsr_slave_0 entered promiscuous mode [ 1833.613950][ T5106] device hsr_slave_1 entered promiscuous mode [ 1833.653961][ T5106] debugfs: Directory 'hsr0' with parent '/' already present! [ 1833.680415][ T5130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1833.691383][ T5133] bridge0: port 1(bridge_slave_0) entered blocking state [ 1833.698802][ T5133] bridge0: port 1(bridge_slave_0) entered disabled state [ 1833.707393][ T5133] device bridge_slave_0 entered promiscuous mode [ 1833.715348][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state [ 1833.722444][ T5133] bridge0: port 2(bridge_slave_1) entered disabled state [ 1833.730996][ T5133] device bridge_slave_1 entered promiscuous mode [ 1833.759222][ T5130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1833.791842][ T5133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1833.824951][ T5133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1833.838335][ T5130] team0: Port device team_slave_0 added [ 1833.864361][ T5130] team0: Port device team_slave_1 added [ 1833.885242][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1833.918127][ T5133] team0: Port device team_slave_0 added [ 1833.925585][ T5133] team0: Port device team_slave_1 added [ 1833.989826][ T5130] device hsr_slave_0 entered promiscuous mode [ 1834.027586][ T5130] device hsr_slave_1 entered promiscuous mode [ 1834.067565][ T5130] debugfs: Directory 'hsr0' with parent '/' already present! [ 1834.114778][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 1834.130878][T32502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1834.139049][T32502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1834.153859][ T5106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1834.202776][ T5133] device hsr_slave_0 entered promiscuous mode [ 1834.239265][ T5133] device hsr_slave_1 entered promiscuous mode [ 1834.289375][ T5133] debugfs: Directory 'hsr0' with parent '/' already present! [ 1834.313522][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1834.323026][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1834.332117][ T6660] bridge0: port 1(bridge_slave_0) entered blocking state [ 1834.339157][ T6660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1834.384352][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1834.393387][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1834.403853][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1834.412371][ T6660] bridge0: port 2(bridge_slave_1) entered blocking state [ 1834.419515][ T6660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1834.427821][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1834.436549][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1834.445490][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1834.454436][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1834.463432][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1834.472525][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1834.481487][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1834.490280][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1834.499488][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1834.525640][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1834.544410][ T5106] 8021q: adding VLAN 0 to HW filter on device team0 [ 1834.556198][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1834.564981][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1834.573887][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1834.583396][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1834.593822][ T5109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1834.621843][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1834.630768][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1834.640038][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1834.647222][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1834.655151][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1834.664058][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1834.672590][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1834.679665][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1834.687749][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1834.698301][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1834.712298][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 1834.739385][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1834.747472][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1834.755846][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1834.769752][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1834.778883][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1834.787731][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1834.796887][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1834.805966][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1834.822970][ T5130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1834.860538][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1834.869952][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1834.878569][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1834.888227][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1834.897737][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1834.907515][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1834.916698][ T6660] bridge0: port 1(bridge_slave_0) entered blocking state [ 1834.923753][ T6660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1834.931642][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1834.940631][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1834.949216][ T6660] bridge0: port 2(bridge_slave_1) entered blocking state [ 1834.956460][ T6660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1834.964077][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1834.972121][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1834.981011][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1834.998896][ T5130] 8021q: adding VLAN 0 to HW filter on device team0 [ 1835.012145][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1835.027234][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1835.049014][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1835.060196][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1835.070752][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1835.088405][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1835.095543][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1835.110398][ T5133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1835.148489][T32502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1835.157735][T32502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1835.177947][T32502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1835.187553][T32502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1835.196186][T32502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1835.205850][T32502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1835.214585][T32502] bridge0: port 2(bridge_slave_1) entered blocking state [ 1835.221708][T32502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1835.230522][T32502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1835.253508][ T5106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1835.269702][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1835.278855][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1835.287362][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1835.296438][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1835.304892][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1835.313127][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1835.325072][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1835.342422][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1835.354575][ T5133] 8021q: adding VLAN 0 to HW filter on device team0 [ 1835.411762][ T5110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1835.428259][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1835.447819][T28821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1835.458448][T28821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1835.477753][T28821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1835.498099][T28821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1835.508678][T28821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1835.530497][T28821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1835.552554][ T5147] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1835.564427][ T5147] CPU: 1 PID: 5147 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1835.573513][ T5147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1835.579352][ T5130] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1835.583586][ T5147] Call Trace: [ 1835.583618][ T5147] dump_stack+0x172/0x1f0 [ 1835.583638][ T5147] dump_header+0x177/0x1152 [ 1835.583657][ T5147] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1835.583668][ T5147] ? ___ratelimit+0x2c8/0x595 [ 1835.583682][ T5147] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1835.583698][ T5147] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1835.583713][ T5147] ? trace_hardirqs_on+0x67/0x240 [ 1835.583729][ T5147] ? pagefault_out_of_memory+0x11c/0x11c [ 1835.583744][ T5147] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1835.583756][ T5147] ? ___ratelimit+0x60/0x595 [ 1835.583766][ T5147] ? do_raw_spin_unlock+0x57/0x270 [ 1835.583780][ T5147] oom_kill_process.cold+0x10/0x15 [ 1835.583799][ T5147] out_of_memory+0x334/0x1340 [ 1835.618135][ T5130] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1835.622598][ T5147] ? __sched_text_start+0x8/0x8 [ 1835.622621][ T5147] ? oom_killer_disable+0x280/0x280 [ 1835.622648][ T5147] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1835.622661][ T5147] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1835.622683][ T5147] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1835.622702][ T5147] ? cgroup_file_notify+0x140/0x1b0 [ 1835.622717][ T5147] memory_max_write+0x262/0x3a0 [ 1835.622734][ T5147] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1835.622751][ T5147] ? lock_acquire+0x190/0x410 [ 1835.622776][ T5147] ? kernfs_fop_write+0x227/0x480 [ 1835.654467][ T5147] cgroup_file_write+0x241/0x790 [ 1835.664285][ T5147] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1835.664306][ T5147] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1835.664323][ T5147] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1835.664341][ T5147] kernfs_fop_write+0x2b8/0x480 [ 1835.664359][ T5147] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1835.664375][ T5147] __vfs_write+0x8a/0x110 [ 1835.664386][ T5147] ? kernfs_fop_open+0xd80/0xd80 [ 1835.664400][ T5147] vfs_write+0x268/0x5d0 [ 1835.664415][ T5147] ksys_write+0x14f/0x290 [ 1835.664427][ T5147] ? __ia32_sys_read+0xb0/0xb0 [ 1835.664444][ T5147] ? do_syscall_64+0x26/0x760 [ 1835.664463][ T5147] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1835.664489][ T5147] ? do_syscall_64+0x26/0x760 [ 1835.709950][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1835.712223][ T5147] __x64_sys_write+0x73/0xb0 [ 1835.712248][ T5147] do_syscall_64+0xfa/0x760 [ 1835.712270][ T5147] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1835.712281][ T5147] RIP: 0033:0x459879 [ 1835.712297][ T5147] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1835.712303][ T5147] RSP: 002b:00007f44cf723c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1835.712316][ T5147] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1835.712323][ T5147] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1835.712332][ T5147] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1835.712340][ T5147] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f44cf7246d4 [ 1835.712348][ T5147] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1835.898783][ T5147] memory: usage 4932kB, limit 0kB, failcnt 1620 [ 1835.906839][T28821] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1835.914498][ T5147] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1835.921585][ T5147] Memory cgroup stats for /syz1: [ 1835.921734][ T5147] anon 4259840 [ 1835.921734][ T5147] file 0 [ 1835.921734][ T5147] kernel_stack 65536 [ 1835.921734][ T5147] slab 565248 [ 1835.921734][ T5147] sock 0 [ 1835.921734][ T5147] shmem 0 [ 1835.921734][ T5147] file_mapped 0 [ 1835.921734][ T5147] file_dirty 0 [ 1835.921734][ T5147] file_writeback 0 [ 1835.921734][ T5147] anon_thp 4194304 [ 1835.921734][ T5147] inactive_anon 131072 [ 1835.921734][ T5147] active_anon 4259840 [ 1835.921734][ T5147] inactive_file 0 [ 1835.921734][ T5147] active_file 0 [ 1835.921734][ T5147] unevictable 0 [ 1835.921734][ T5147] slab_reclaimable 135168 [ 1835.921734][ T5147] slab_unreclaimable 430080 [ 1835.921734][ T5147] pgfault 90321 [ 1835.921734][ T5147] pgmajfault 0 [ 1835.921734][ T5147] workingset_refault 0 [ 1835.921734][ T5147] workingset_activate 0 [ 1835.921734][ T5147] workingset_nodereclaim 0 [ 1835.921734][ T5147] pgrefill 240 [ 1835.921734][ T5147] pgscan 242 [ 1835.921734][ T5147] pgsteal 35 [ 1835.921734][ T5147] pgactivate 198 [ 1835.922122][T28821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1835.937731][ T5147] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5144,uid=0 [ 1836.041957][ T5147] Memory cgroup out of memory: Killed process 5144 (syz-executor.1) total-vm:72712kB, anon-rss:4184kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:147456kB oom_score_adj:1000 [ 1836.047252][T28821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1836.073412][ T1065] oom_reaper: reaped process 5144 (syz-executor.1), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 1836.078682][T28821] bridge0: port 1(bridge_slave_0) entered blocking state [ 1836.091708][T28821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1836.110798][T28821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1836.120252][T28821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1836.128998][T28821] bridge0: port 2(bridge_slave_1) entered blocking state [ 1836.136140][T28821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1836.143923][T28821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1836.153404][T28821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1836.162262][T28821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1836.171569][T28821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1836.202914][ T5130] 8021q: adding VLAN 0 to HW filter on device batadv0 15:19:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 1836.214555][T32502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1836.221210][ T5109] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1836.223862][T32502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1836.232914][ T5109] CPU: 1 PID: 5109 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1836.248522][ T5109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1836.249774][T32502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1836.258646][ T5109] Call Trace: [ 1836.258691][ T5109] dump_stack+0x172/0x1f0 [ 1836.258714][ T5109] dump_header+0x177/0x1152 [ 1836.258731][ T5109] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1836.258740][ T5109] ? ___ratelimit+0x2c8/0x595 [ 1836.258750][ T5109] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1836.258768][ T5109] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1836.258784][ T5109] ? trace_hardirqs_on+0x67/0x240 [ 1836.258796][ T5109] ? pagefault_out_of_memory+0x11c/0x11c [ 1836.258808][ T5109] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1836.258818][ T5109] ? ___ratelimit+0x60/0x595 [ 1836.258829][ T5109] ? do_raw_spin_unlock+0x57/0x270 [ 1836.258845][ T5109] oom_kill_process.cold+0x10/0x15 [ 1836.258860][ T5109] out_of_memory+0x334/0x1340 [ 1836.258873][ T5109] ? lock_downgrade+0x920/0x920 [ 1836.258891][ T5109] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1836.258905][ T5109] ? oom_killer_disable+0x280/0x280 [ 1836.258926][ T5109] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1836.258938][ T5109] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1836.258953][ T5109] ? do_raw_spin_unlock+0x57/0x270 [ 1836.258973][ T5109] ? _raw_spin_unlock+0x2d/0x50 [ 1836.278454][T32502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1836.280042][ T5109] try_charge+0xf4b/0x1440 [ 1836.387368][ T5109] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1836.392943][ T5109] ? percpu_ref_tryget_live+0x111/0x290 [ 1836.398521][ T5109] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1836.404784][ T5109] ? __kasan_check_read+0x11/0x20 [ 1836.409832][ T5109] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1836.415390][ T5109] mem_cgroup_try_charge+0x136/0x590 [ 1836.420682][ T5109] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1836.426965][ T5109] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1836.432631][ T5109] wp_page_copy+0x41e/0x1590 [ 1836.437253][ T5109] ? find_held_lock+0x35/0x130 [ 1836.442041][ T5109] ? pmd_pfn+0x1d0/0x1d0 [ 1836.446298][ T5109] ? lock_downgrade+0x920/0x920 [ 1836.451174][ T5109] ? swp_swapcount+0x540/0x540 [ 1836.455963][ T5109] ? __kasan_check_read+0x11/0x20 [ 1836.461001][ T5109] ? do_raw_spin_unlock+0x57/0x270 [ 1836.466132][ T5109] do_wp_page+0x499/0x14d0 [ 1836.470572][ T5109] ? finish_mkwrite_fault+0x570/0x570 [ 1836.475974][ T5109] __handle_mm_fault+0x22f1/0x3f20 [ 1836.481105][ T5109] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1836.486692][ T5109] ? __kasan_check_read+0x11/0x20 [ 1836.491763][ T5109] handle_mm_fault+0x1b5/0x6c0 [ 1836.496572][ T5109] __do_page_fault+0x536/0xdd0 [ 1836.501360][ T5109] do_page_fault+0x38/0x590 [ 1836.505869][ T5109] page_fault+0x39/0x40 [ 1836.510032][ T5109] RIP: 0033:0x430956 [ 1836.513946][ T5109] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 46 64 00 85 c0 0f 84 [ 1836.533558][ T5109] RSP: 002b:00007ffdefe8b4b0 EFLAGS: 00010206 [ 1836.539636][ T5109] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 1836.547619][ T5109] RDX: 0000555555cb4930 RSI: 0000555555cbc970 RDI: 0000000000000003 [ 1836.555611][ T5109] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000555555cb3940 [ 1836.563588][ T5109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 1836.571564][ T5109] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 1836.580917][ T5109] memory: usage 500kB, limit 0kB, failcnt 1628 [ 1836.587132][ T5109] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1836.619739][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1836.638610][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1836.639505][ T5109] Memory cgroup stats for /syz1: [ 1836.639608][ T5109] anon 0 [ 1836.639608][ T5109] file 0 [ 1836.639608][ T5109] kernel_stack 0 [ 1836.639608][ T5109] slab 565248 [ 1836.639608][ T5109] sock 0 [ 1836.639608][ T5109] shmem 0 [ 1836.639608][ T5109] file_mapped 0 [ 1836.639608][ T5109] file_dirty 0 [ 1836.639608][ T5109] file_writeback 0 [ 1836.639608][ T5109] anon_thp 0 [ 1836.639608][ T5109] inactive_anon 131072 [ 1836.639608][ T5109] active_anon 0 [ 1836.639608][ T5109] inactive_file 0 [ 1836.639608][ T5109] active_file 0 [ 1836.639608][ T5109] unevictable 0 [ 1836.639608][ T5109] slab_reclaimable 135168 [ 1836.639608][ T5109] slab_unreclaimable 430080 [ 1836.639608][ T5109] pgfault 90321 [ 1836.639608][ T5109] pgmajfault 0 [ 1836.639608][ T5109] workingset_refault 0 [ 1836.639608][ T5109] workingset_activate 0 [ 1836.639608][ T5109] workingset_nodereclaim 0 [ 1836.639608][ T5109] pgrefill 240 [ 1836.639608][ T5109] pgscan 242 [ 1836.639608][ T5109] pgsteal 35 [ 1836.639608][ T5109] pgactivate 198 [ 1836.639608][ T5109] pgdeactivate 240 [ 1836.748033][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1836.774352][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1836.788898][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1836.806354][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1836.849584][ T5109] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5109,uid=0 [ 1836.873949][ T5109] Memory cgroup out of memory: Killed process 5109 (syz-executor.1) total-vm:72448kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:0 [ 1836.942339][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1836.957260][ T1065] oom_reaper: reaped process 5109 (syz-executor.1), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 1836.965431][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1836.969209][ T5156] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1837.002241][ T5156] CPU: 1 PID: 5156 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1837.011338][ T5156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1837.018585][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1837.021418][ T5156] Call Trace: [ 1837.021449][ T5156] dump_stack+0x172/0x1f0 [ 1837.021468][ T5156] dump_header+0x177/0x1152 [ 1837.021495][ T5156] ? pagefault_out_of_memory+0x11c/0x11c [ 1837.047015][ T5156] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1837.052856][ T5156] ? ___ratelimit+0x60/0x595 [ 1837.057475][ T5156] ? do_raw_spin_unlock+0x57/0x270 [ 1837.062621][ T5156] oom_kill_process.cold+0x10/0x15 [ 1837.067766][ T5156] out_of_memory+0x334/0x1340 [ 1837.072484][ T5156] ? trace_hardirqs_on_caller+0x6a/0x240 [ 1837.078146][ T5156] ? cgroup_file_notify+0x140/0x1b0 [ 1837.083389][ T5156] ? oom_killer_disable+0x280/0x280 [ 1837.088634][ T5156] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1837.094222][ T5156] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1837.099996][ T5156] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1837.105844][ T5156] ? cgroup_file_notify+0x140/0x1b0 [ 1837.111095][ T5156] memory_max_write+0x262/0x3a0 [ 1837.115993][ T5156] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1837.122802][ T5156] ? lock_acquire+0x190/0x410 [ 1837.127527][ T5156] ? kernfs_fop_write+0x227/0x480 [ 1837.132599][ T5156] cgroup_file_write+0x241/0x790 [ 1837.137592][ T5156] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1837.144397][ T5156] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1837.150066][ T5156] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1837.155736][ T5156] kernfs_fop_write+0x2b8/0x480 [ 1837.160633][ T5156] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1837.166919][ T5156] __vfs_write+0x8a/0x110 [ 1837.171278][ T5156] ? kernfs_fop_open+0xd80/0xd80 [ 1837.176253][ T5156] vfs_write+0x268/0x5d0 [ 1837.180549][ T5156] ksys_write+0x14f/0x290 [ 1837.184906][ T5156] ? __ia32_sys_read+0xb0/0xb0 [ 1837.189700][ T5156] ? do_syscall_64+0x26/0x760 [ 1837.194416][ T5156] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1837.200506][ T5156] ? do_syscall_64+0x26/0x760 [ 1837.205218][ T5156] __x64_sys_write+0x73/0xb0 [ 1837.209853][ T5156] do_syscall_64+0xfa/0x760 [ 1837.214407][ T5156] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1837.220322][ T5156] RIP: 0033:0x459879 [ 1837.224251][ T5156] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1837.243879][ T5156] RSP: 002b:00007f13577afc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1837.252417][ T5156] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1837.260416][ T5156] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1837.268402][ T5156] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1837.276381][ T5156] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f13577b06d4 [ 1837.284367][ T5156] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1837.335521][ T5156] memory: usage 4888kB, limit 0kB, failcnt 689 [ 1837.359327][ T5156] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1837.387114][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1837.387811][ T5156] Memory cgroup stats for /syz3: [ 1837.389513][ T5156] anon 4354048 [ 1837.389513][ T5156] file 0 [ 1837.389513][ T5156] kernel_stack 65536 [ 1837.389513][ T5156] slab 405504 [ 1837.389513][ T5156] sock 0 [ 1837.389513][ T5156] shmem 0 [ 1837.389513][ T5156] file_mapped 0 [ 1837.389513][ T5156] file_dirty 0 [ 1837.389513][ T5156] file_writeback 0 [ 1837.389513][ T5156] anon_thp 4194304 [ 1837.389513][ T5156] inactive_anon 0 [ 1837.389513][ T5156] active_anon 4354048 [ 1837.389513][ T5156] inactive_file 0 [ 1837.389513][ T5156] active_file 0 [ 1837.389513][ T5156] unevictable 0 [ 1837.389513][ T5156] slab_reclaimable 135168 [ 1837.389513][ T5156] slab_unreclaimable 270336 [ 1837.389513][ T5156] pgfault 34980 [ 1837.389513][ T5156] pgmajfault 0 [ 1837.389513][ T5156] workingset_refault 0 [ 1837.389513][ T5156] workingset_activate 0 [ 1837.389513][ T5156] workingset_nodereclaim 0 [ 1837.389513][ T5156] pgrefill 33 [ 1837.389513][ T5156] pgscan 66 [ 1837.389513][ T5156] pgsteal 0 [ 1837.389513][ T5156] pgactivate 0 [ 1837.476147][ T5133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1837.511484][ T5156] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5155,uid=0 [ 1837.527691][ T5156] Memory cgroup out of memory: Killed process 5156 (syz-executor.3) total-vm:72712kB, anon-rss:4244kB, file-rss:35812kB, shmem-rss:0kB, UID:0 pgtables:151552kB oom_score_adj:1000 15:19:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r5, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=""/31, 0x1f}}, 0x10) write$cgroup_int(r7, 0x0, 0x0) [ 1837.578606][ T1065] oom_reaper: reaped process 5156 (syz-executor.3), now anon-rss:0kB, file-rss:34852kB, shmem-rss:0kB [ 1837.596934][ T5165] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1837.627235][ T5165] CPU: 1 PID: 5165 Comm: syz-executor.5 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1837.636432][ T5165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1837.646525][ T5165] Call Trace: [ 1837.649838][ T5165] dump_stack+0x172/0x1f0 [ 1837.654182][ T5165] dump_header+0x177/0x1152 [ 1837.658695][ T5165] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1837.664499][ T5165] ? ___ratelimit+0x2c8/0x595 [ 1837.669181][ T5165] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 15:19:58 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000040)="330eed794852cc4368a757f743a5b139", 0x10) [ 1837.674989][ T5165] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1837.680287][ T5165] ? trace_hardirqs_on+0x67/0x240 [ 1837.685318][ T5165] ? pagefault_out_of_memory+0x11c/0x11c [ 1837.690956][ T5165] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1837.696763][ T5165] ? ___ratelimit+0x60/0x595 [ 1837.701361][ T5165] ? do_raw_spin_unlock+0x57/0x270 [ 1837.706624][ T5165] oom_kill_process.cold+0x10/0x15 [ 1837.711755][ T5165] out_of_memory+0x334/0x1340 [ 1837.716446][ T5165] ? cgroup_file_notify+0x140/0x1b0 [ 1837.721660][ T5165] ? oom_killer_disable+0x280/0x280 [ 1837.726897][ T5165] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1837.732450][ T5165] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1837.738093][ T5165] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1837.743907][ T5165] ? cgroup_file_notify+0x140/0x1b0 [ 1837.749113][ T5165] memory_max_write+0x262/0x3a0 [ 1837.753968][ T5165] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1837.760732][ T5165] ? lock_acquire+0x190/0x410 [ 1837.765414][ T5165] ? kernfs_fop_write+0x227/0x480 [ 1837.770457][ T5165] cgroup_file_write+0x241/0x790 [ 1837.775409][ T5165] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1837.782196][ T5165] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1837.787848][ T5165] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1837.793626][ T5165] kernfs_fop_write+0x2b8/0x480 [ 1837.798487][ T5165] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1837.804742][ T5165] __vfs_write+0x8a/0x110 [ 1837.809216][ T5165] ? kernfs_fop_open+0xd80/0xd80 [ 1837.814168][ T5165] vfs_write+0x268/0x5d0 [ 1837.818433][ T5165] ksys_write+0x14f/0x290 [ 1837.822770][ T5165] ? __ia32_sys_read+0xb0/0xb0 [ 1837.827544][ T5165] ? do_syscall_64+0x26/0x760 [ 1837.832233][ T5165] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1837.838305][ T5165] ? do_syscall_64+0x26/0x760 [ 1837.843001][ T5165] __x64_sys_write+0x73/0xb0 [ 1837.847599][ T5165] do_syscall_64+0xfa/0x760 [ 1837.852123][ T5165] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1837.858027][ T5165] RIP: 0033:0x459879 [ 1837.861935][ T5165] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1837.881541][ T5165] RSP: 002b:00007f06070f7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1837.889941][ T5165] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1837.897915][ T5165] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1837.905883][ T5165] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1837.913845][ T5165] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f06070f86d4 [ 1837.921805][ T5165] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1837.939531][ T5165] memory: usage 5120kB, limit 0kB, failcnt 463 [ 1837.953193][ T5165] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1837.960568][ T5165] Memory cgroup stats for /syz5: [ 1837.960694][ T5165] anon 4268032 [ 1837.960694][ T5165] file 176128 [ 1837.960694][ T5165] kernel_stack 65536 [ 1837.960694][ T5165] slab 827392 [ 1837.960694][ T5165] sock 0 [ 1837.960694][ T5165] shmem 172032 [ 1837.960694][ T5165] file_mapped 0 [ 1837.960694][ T5165] file_dirty 0 [ 1837.960694][ T5165] file_writeback 0 [ 1837.960694][ T5165] anon_thp 4194304 [ 1837.960694][ T5165] inactive_anon 143360 [ 1837.960694][ T5165] active_anon 4268032 [ 1837.960694][ T5165] inactive_file 0 [ 1837.960694][ T5165] active_file 135168 [ 1837.960694][ T5165] unevictable 131072 [ 1837.960694][ T5165] slab_reclaimable 405504 [ 1837.960694][ T5165] slab_unreclaimable 421888 [ 1837.960694][ T5165] pgfault 59532 [ 1837.960694][ T5165] pgmajfault 0 [ 1837.960694][ T5165] workingset_refault 0 [ 1837.960694][ T5165] workingset_activate 0 [ 1837.960694][ T5165] workingset_nodereclaim 0 [ 1837.960694][ T5165] pgrefill 734 [ 1837.960694][ T5165] pgscan 744 [ 1837.960694][ T5165] pgsteal 35 [ 1838.054547][ T5165] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=5162,uid=0 [ 1838.054680][ T5165] Memory cgroup out of memory: Killed process 5162 (syz-executor.5) total-vm:72712kB, anon-rss:4184kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:147456kB oom_score_adj:1000 [ 1838.056989][ T1065] oom_reaper: reaped process 5162 (syz-executor.5), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB [ 1838.090091][ T5168] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1838.121454][ T5168] CPU: 0 PID: 5168 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1838.130542][ T5168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1838.140627][ T5168] Call Trace: [ 1838.143961][ T5168] dump_stack+0x172/0x1f0 [ 1838.148310][ T5168] dump_header+0x177/0x1152 [ 1838.152833][ T5168] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1838.158635][ T5168] ? ___ratelimit+0x2c8/0x595 [ 1838.163297][ T5168] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1838.169119][ T5168] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1838.174394][ T5168] ? trace_hardirqs_on+0x67/0x240 [ 1838.179411][ T5168] ? pagefault_out_of_memory+0x11c/0x11c [ 1838.185030][ T5168] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1838.190834][ T5168] ? ___ratelimit+0x60/0x595 [ 1838.195404][ T5168] ? do_raw_spin_unlock+0x57/0x270 [ 1838.200517][ T5168] oom_kill_process.cold+0x10/0x15 [ 1838.205641][ T5168] out_of_memory+0x334/0x1340 [ 1838.210341][ T5168] ? oom_killer_disable+0x280/0x280 [ 1838.215570][ T5168] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1838.221115][ T5168] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1838.226765][ T5168] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1838.232586][ T5168] ? cgroup_file_notify+0x140/0x1b0 [ 1838.237801][ T5168] memory_max_write+0x262/0x3a0 [ 1838.242671][ T5168] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1838.249437][ T5168] ? lock_acquire+0x190/0x410 [ 1838.254133][ T5168] ? kernfs_fop_write+0x227/0x480 [ 1838.259167][ T5168] cgroup_file_write+0x241/0x790 [ 1838.264090][ T5168] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1838.270840][ T5168] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1838.276457][ T5168] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1838.282073][ T5168] kernfs_fop_write+0x2b8/0x480 [ 1838.286926][ T5168] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1838.293170][ T5168] __vfs_write+0x8a/0x110 [ 1838.297489][ T5168] ? kernfs_fop_open+0xd80/0xd80 [ 1838.302685][ T5168] vfs_write+0x268/0x5d0 [ 1838.307033][ T5168] ksys_write+0x14f/0x290 [ 1838.311356][ T5168] ? __ia32_sys_read+0xb0/0xb0 [ 1838.316125][ T5168] ? do_syscall_64+0x26/0x760 [ 1838.320800][ T5168] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1838.326855][ T5168] ? do_syscall_64+0x26/0x760 [ 1838.331539][ T5168] __x64_sys_write+0x73/0xb0 [ 1838.336119][ T5168] do_syscall_64+0xfa/0x760 [ 1838.340619][ T5168] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1838.346502][ T5168] RIP: 0033:0x459879 [ 1838.350400][ T5168] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1838.369991][ T5168] RSP: 002b:00007faa3ecf8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1838.378405][ T5168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 15:19:59 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:19:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4003ff) fallocate(r1, 0x3, 0x7ffe, 0x8001) [ 1838.386375][ T5168] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1838.394423][ T5168] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1838.402393][ T5168] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faa3ecf96d4 [ 1838.410355][ T5168] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1838.432915][ T5168] memory: usage 3144kB, limit 0kB, failcnt 245 [ 1838.449574][ T5168] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1838.456918][ T5168] Memory cgroup stats for /syz0: [ 1838.457006][ T5168] anon 2211840 [ 1838.457006][ T5168] file 155648 [ 1838.457006][ T5168] kernel_stack 65536 [ 1838.457006][ T5168] slab 929792 [ 1838.457006][ T5168] sock 0 [ 1838.457006][ T5168] shmem 110592 [ 1838.457006][ T5168] file_mapped 0 [ 1838.457006][ T5168] file_dirty 0 [ 1838.457006][ T5168] file_writeback 0 [ 1838.457006][ T5168] anon_thp 2097152 [ 1838.457006][ T5168] inactive_anon 0 [ 1838.457006][ T5168] active_anon 2211840 [ 1838.457006][ T5168] inactive_file 135168 [ 1838.457006][ T5168] active_file 0 [ 1838.457006][ T5168] unevictable 12288 [ 1838.457006][ T5168] slab_reclaimable 405504 [ 1838.457006][ T5168] slab_unreclaimable 524288 [ 1838.457006][ T5168] pgfault 60324 [ 1838.457006][ T5168] pgmajfault 0 [ 1838.457006][ T5168] workingset_refault 0 [ 1838.457006][ T5168] workingset_activate 0 [ 1838.457006][ T5168] workingset_nodereclaim 0 [ 1838.457006][ T5168] pgrefill 225 [ 1838.457006][ T5168] pgscan 223 [ 1838.457006][ T5168] pgsteal 79 15:19:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 1838.457006][ T5168] pgactivate 132 [ 1838.565099][ T5168] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=5166,uid=0 [ 1838.580979][ T5168] Memory cgroup out of memory: Killed process 5168 (syz-executor.0) total-vm:72712kB, anon-rss:2192kB, file-rss:35808kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1838.609605][ T5106] syz-executor.3 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=0, oom_score_adj=0 [ 1838.648961][ T5106] CPU: 0 PID: 5106 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1838.658122][ T5106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1838.668275][ T5106] Call Trace: [ 1838.671577][ T5106] dump_stack+0x172/0x1f0 [ 1838.675923][ T5106] dump_header+0x177/0x1152 [ 1838.680436][ T5106] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1838.686336][ T5106] ? ___ratelimit+0x2c8/0x595 [ 1838.691232][ T5106] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1838.697310][ T5106] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1838.702604][ T5106] ? trace_hardirqs_on+0x67/0x240 [ 1838.712680][ T5106] ? pagefault_out_of_memory+0x11c/0x11c [ 1838.720140][ T5106] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1838.725939][ T5106] ? ___ratelimit+0x60/0x595 [ 1838.730524][ T5106] ? do_raw_spin_unlock+0x57/0x270 [ 1838.735641][ T5106] oom_kill_process.cold+0x10/0x15 [ 1838.742833][ T5106] out_of_memory+0x334/0x1340 [ 1838.747514][ T5106] ? lock_downgrade+0x920/0x920 [ 1838.752383][ T5106] ? oom_killer_disable+0x280/0x280 [ 1838.757596][ T5106] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1838.763150][ T5106] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1838.768778][ T5106] ? do_raw_spin_unlock+0x57/0x270 [ 1838.773884][ T5106] ? _raw_spin_unlock+0x2d/0x50 [ 1838.778765][ T5106] try_charge+0xf4b/0x1440 [ 1838.783193][ T5106] ? __lock_acquire+0x800/0x4a00 [ 1838.788135][ T5106] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1838.793676][ T5106] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1838.799651][ T5106] ? cache_grow_begin+0x122/0xd20 [ 1838.804931][ T5106] ? find_held_lock+0x35/0x130 [ 1838.809710][ T5106] ? cache_grow_begin+0x122/0xd20 [ 1838.814747][ T5106] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1838.820207][ T5106] ? memcg_kmem_put_cache+0x50/0x50 [ 1838.825410][ T5106] ? __kasan_check_read+0x11/0x20 [ 1838.830462][ T5106] cache_grow_begin+0x629/0xd20 [ 1838.835312][ T5106] ? __sanitizer_cov_trace_cmp2+0x11/0x20 [ 1838.841027][ T5106] ? mempolicy_slab_node+0x139/0x390 [ 1838.846305][ T5106] fallback_alloc+0x1fd/0x2d0 [ 1838.851003][ T5106] ____cache_alloc_node+0x1bc/0x1d0 [ 1838.856341][ T5106] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1838.862701][ T5106] kmem_cache_alloc+0x1ef/0x710 [ 1838.867646][ T5106] ? stack_trace_save+0xac/0xe0 [ 1838.872518][ T5106] __alloc_file+0x27/0x340 [ 1838.876942][ T5106] alloc_empty_file+0x72/0x170 [ 1838.882157][ T5106] path_openat+0xef/0x46d0 [ 1838.886572][ T5106] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1838.892376][ T5106] ? kasan_slab_alloc+0xf/0x20 [ 1838.897132][ T5106] ? kmem_cache_alloc+0x121/0x710 [ 1838.902152][ T5106] ? getname_flags+0xd6/0x5b0 [ 1838.906819][ T5106] ? getname+0x1a/0x20 [ 1838.910881][ T5106] ? do_sys_open+0x2c9/0x5d0 [ 1838.915464][ T5106] ? __x64_sys_open+0x7e/0xc0 [ 1838.920138][ T5106] ? __kasan_check_read+0x11/0x20 [ 1838.925163][ T5106] ? mark_lock+0xc2/0x1220 [ 1838.929572][ T5106] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1838.935239][ T5106] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 1838.940634][ T5106] ? __alloc_fd+0x487/0x620 [ 1838.945144][ T5106] do_filp_open+0x1a1/0x280 [ 1838.949653][ T5106] ? may_open_dev+0x100/0x100 [ 1838.954332][ T5106] ? lock_downgrade+0x920/0x920 [ 1838.959182][ T5106] ? rwlock_bug.part.0+0x90/0x90 [ 1838.964126][ T5106] ? __kasan_check_read+0x11/0x20 [ 1838.969147][ T5106] ? do_raw_spin_unlock+0x57/0x270 [ 1838.974256][ T5106] ? _raw_spin_unlock+0x2d/0x50 [ 1838.979625][ T5106] ? __alloc_fd+0x487/0x620 [ 1838.984923][ T5106] do_sys_open+0x3fe/0x5d0 [ 1838.989515][ T5106] ? filp_open+0x80/0x80 [ 1838.994198][ T5106] ? __detach_mounts+0x2a0/0x2a0 [ 1838.999142][ T5106] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1839.004598][ T5106] ? do_syscall_64+0x26/0x760 [ 1839.009282][ T5106] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1839.015348][ T5106] ? do_syscall_64+0x26/0x760 [ 1839.020055][ T5106] __x64_sys_open+0x7e/0xc0 [ 1839.024560][ T5106] do_syscall_64+0xfa/0x760 [ 1839.029066][ T5106] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1839.034948][ T5106] RIP: 0033:0x4577f0 [ 1839.038839][ T5106] Code: 31 c0 e9 45 ff ff ff 0f 1f 00 80 3f 00 0f 84 f7 00 00 00 55 53 b9 02 00 00 00 be 00 08 09 00 89 c8 48 81 ec 98 00 00 00 0f 05 <48> 3d 00 f0 ff ff 48 89 c3 0f 87 e9 00 00 00 85 db 0f 88 2f 01 00 15:19:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 1839.060306][ T5106] RSP: 002b:00007ffc80dfe950 EFLAGS: 00000206 ORIG_RAX: 0000000000000002 [ 1839.069847][ T5106] RAX: ffffffffffffffda RBX: 00000000001be86c RCX: 00000000004577f0 [ 1839.077814][ T5106] RDX: 000000000000000c RSI: 0000000000090800 RDI: 00007ffc80dffb30 [ 1839.085780][ T5106] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000555555929940 [ 1839.094011][ T5106] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffc80dffb30 [ 1839.101984][ T5106] R13: 00007ffc80dffb20 R14: 0000000000000000 R15: 00007ffc80dffb30 [ 1839.124193][ T5106] memory: usage 452kB, limit 0kB, failcnt 701 [ 1839.130410][ T5106] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1839.138457][ T5106] Memory cgroup stats for /syz3: [ 1839.138561][ T5106] anon 90112 [ 1839.138561][ T5106] file 0 [ 1839.138561][ T5106] kernel_stack 0 [ 1839.138561][ T5106] slab 405504 [ 1839.138561][ T5106] sock 0 [ 1839.138561][ T5106] shmem 0 [ 1839.138561][ T5106] file_mapped 0 [ 1839.138561][ T5106] file_dirty 0 [ 1839.138561][ T5106] file_writeback 0 [ 1839.138561][ T5106] anon_thp 0 [ 1839.138561][ T5106] inactive_anon 0 [ 1839.138561][ T5106] active_anon 90112 [ 1839.138561][ T5106] inactive_file 0 [ 1839.138561][ T5106] active_file 0 [ 1839.138561][ T5106] unevictable 0 [ 1839.138561][ T5106] slab_reclaimable 135168 [ 1839.138561][ T5106] slab_unreclaimable 270336 [ 1839.138561][ T5106] pgfault 35013 [ 1839.138561][ T5106] pgmajfault 0 [ 1839.138561][ T5106] workingset_refault 0 [ 1839.138561][ T5106] workingset_activate 0 [ 1839.138561][ T5106] workingset_nodereclaim 0 [ 1839.138561][ T5106] pgrefill 33 [ 1839.138561][ T5106] pgscan 66 [ 1839.138561][ T5106] pgsteal 0 [ 1839.138561][ T5106] pgactivate 0 [ 1839.138561][ T5106] pgdeactivate 33 [ 1839.236765][ T5106] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5106,uid=0 [ 1839.258705][ T5106] Memory cgroup out of memory: Killed process 5106 (syz-executor.3) total-vm:72448kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:0 [ 1839.290607][ T1065] oom_reaper: reaped process 5106 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 1839.301759][ T5110] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1839.321152][ T5110] CPU: 0 PID: 5110 Comm: syz-executor.5 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1839.331231][ T5110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1839.341292][ T5110] Call Trace: [ 1839.344616][ T5110] dump_stack+0x172/0x1f0 [ 1839.348962][ T5110] dump_header+0x177/0x1152 [ 1839.353478][ T5110] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1839.359291][ T5110] ? ___ratelimit+0x2c8/0x595 [ 1839.363983][ T5110] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1839.369798][ T5110] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1839.375148][ T5110] ? trace_hardirqs_on+0x67/0x240 [ 1839.380297][ T5110] ? pagefault_out_of_memory+0x11c/0x11c [ 1839.385955][ T5110] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1839.392129][ T5110] ? ___ratelimit+0x60/0x595 [ 1839.396888][ T5110] ? do_raw_spin_unlock+0x57/0x270 [ 1839.402039][ T5110] oom_kill_process.cold+0x10/0x15 [ 1839.407164][ T5110] out_of_memory+0x334/0x1340 [ 1839.411862][ T5110] ? lock_downgrade+0x920/0x920 [ 1839.416744][ T5110] ? oom_killer_disable+0x280/0x280 [ 1839.421962][ T5110] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1839.427521][ T5110] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1839.433308][ T5110] ? do_raw_spin_unlock+0x57/0x270 [ 1839.438442][ T5110] ? _raw_spin_unlock+0x2d/0x50 [ 1839.443693][ T5110] try_charge+0xf4b/0x1440 [ 1839.449365][ T5110] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1839.455108][ T5110] ? percpu_ref_tryget_live+0x111/0x290 [ 1839.461653][ T5110] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1839.467926][ T5110] ? __kasan_check_read+0x11/0x20 [ 1839.472982][ T5110] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1839.478557][ T5110] mem_cgroup_try_charge+0x136/0x590 [ 1839.484239][ T5110] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1839.490510][ T5110] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1839.496259][ T5110] wp_page_copy+0x41e/0x1590 [ 1839.501003][ T5110] ? find_held_lock+0x35/0x130 [ 1839.505882][ T5110] ? pmd_pfn+0x1d0/0x1d0 [ 1839.510148][ T5110] ? lock_downgrade+0x920/0x920 [ 1839.515151][ T5110] ? swp_swapcount+0x540/0x540 [ 1839.519953][ T5110] ? __kasan_check_read+0x11/0x20 [ 1839.525129][ T5110] ? do_raw_spin_unlock+0x57/0x270 [ 1839.530265][ T5110] do_wp_page+0x499/0x14d0 [ 1839.534923][ T5110] ? finish_mkwrite_fault+0x570/0x570 [ 1839.540461][ T5110] __handle_mm_fault+0x22f1/0x3f20 [ 1839.546215][ T5110] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1839.552556][ T5110] ? __kasan_check_read+0x11/0x20 [ 1839.557880][ T5110] handle_mm_fault+0x1b5/0x6c0 [ 1839.563123][ T5110] __do_page_fault+0x536/0xdd0 [ 1839.568240][ T5110] do_page_fault+0x38/0x590 [ 1839.572758][ T5110] page_fault+0x39/0x40 [ 1839.576924][ T5110] RIP: 0033:0x430956 [ 1839.580837][ T5110] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 46 64 00 85 c0 0f 84 [ 1839.600567][ T5110] RSP: 002b:00007ffccebf3120 EFLAGS: 00010206 [ 1839.606648][ T5110] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 1839.614893][ T5110] RDX: 0000555557170930 RSI: 0000555557178970 RDI: 0000000000000003 [ 1839.622990][ T5110] RBP: 0000000000008041 R08: 0000000000000001 R09: 000055555716f940 [ 1839.630972][ T5110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 1839.639070][ T5110] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 1839.688524][ T5110] memory: usage 680kB, limit 0kB, failcnt 479 [ 1839.698090][ T5110] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1839.727015][ T5110] Memory cgroup stats for /syz5: [ 1839.727152][ T5110] anon 65536 [ 1839.727152][ T5110] file 176128 [ 1839.727152][ T5110] kernel_stack 0 [ 1839.727152][ T5110] slab 827392 [ 1839.727152][ T5110] sock 0 [ 1839.727152][ T5110] shmem 172032 [ 1839.727152][ T5110] file_mapped 0 [ 1839.727152][ T5110] file_dirty 0 [ 1839.727152][ T5110] file_writeback 0 [ 1839.727152][ T5110] anon_thp 0 [ 1839.727152][ T5110] inactive_anon 143360 [ 1839.727152][ T5110] active_anon 65536 [ 1839.727152][ T5110] inactive_file 0 [ 1839.727152][ T5110] active_file 135168 [ 1839.727152][ T5110] unevictable 131072 [ 1839.727152][ T5110] slab_reclaimable 405504 [ 1839.727152][ T5110] slab_unreclaimable 421888 [ 1839.727152][ T5110] pgfault 59532 [ 1839.727152][ T5110] pgmajfault 0 [ 1839.727152][ T5110] workingset_refault 0 [ 1839.727152][ T5110] workingset_activate 0 [ 1839.727152][ T5110] workingset_nodereclaim 0 [ 1839.727152][ T5110] pgrefill 734 [ 1839.727152][ T5110] pgscan 744 [ 1839.727152][ T5110] pgsteal 35 [ 1839.727152][ T5110] pgactivate 660 [ 1839.986556][ T5110] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=5110,uid=0 [ 1840.013657][ T5110] Memory cgroup out of memory: Killed process 5110 (syz-executor.5) total-vm:72448kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:0 [ 1840.050154][ T5130] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1840.050698][ T1065] oom_reaper: reaped process 5110 (syz-executor.5), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 1840.070331][ T5130] CPU: 1 PID: 5130 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1840.080548][ T5130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1840.090625][ T5130] Call Trace: [ 1840.093960][ T5130] dump_stack+0x172/0x1f0 [ 1840.098325][ T5130] dump_header+0x177/0x1152 [ 1840.102968][ T5130] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1840.108797][ T5130] ? ___ratelimit+0x2c8/0x595 [ 1840.113634][ T5130] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1840.119466][ T5130] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1840.124781][ T5130] ? trace_hardirqs_on+0x67/0x240 [ 1840.129842][ T5130] ? pagefault_out_of_memory+0x11c/0x11c [ 1840.135507][ T5130] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1840.141486][ T5130] ? ___ratelimit+0x60/0x595 [ 1840.146104][ T5130] ? do_raw_spin_unlock+0x57/0x270 [ 1840.151378][ T5130] oom_kill_process.cold+0x10/0x15 [ 1840.156519][ T5130] out_of_memory+0x334/0x1340 [ 1840.161230][ T5130] ? lock_downgrade+0x920/0x920 [ 1840.166243][ T5130] ? oom_killer_disable+0x280/0x280 [ 1840.171491][ T5130] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1840.177078][ T5130] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1840.182754][ T5130] ? do_raw_spin_unlock+0x57/0x270 [ 1840.187887][ T5130] ? _raw_spin_unlock+0x2d/0x50 [ 1840.192757][ T5130] try_charge+0xf4b/0x1440 [ 1840.197202][ T5130] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1840.202875][ T5130] ? percpu_ref_tryget_live+0x111/0x290 [ 1840.208439][ T5130] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1840.214697][ T5130] ? __kasan_check_read+0x11/0x20 [ 1840.219749][ T5130] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1840.225317][ T5130] mem_cgroup_try_charge+0x136/0x590 [ 1840.230624][ T5130] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1840.237052][ T5130] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1840.242710][ T5130] wp_page_copy+0x41e/0x1590 [ 1840.247319][ T5130] ? find_held_lock+0x35/0x130 [ 1840.252114][ T5130] ? pmd_pfn+0x1d0/0x1d0 [ 1840.256369][ T5130] ? lock_downgrade+0x920/0x920 [ 1840.261245][ T5130] ? swp_swapcount+0x540/0x540 [ 1840.266073][ T5130] ? __kasan_check_read+0x11/0x20 [ 1840.271116][ T5130] ? do_raw_spin_unlock+0x57/0x270 [ 1840.276250][ T5130] do_wp_page+0x499/0x14d0 [ 1840.280823][ T5130] ? finish_mkwrite_fault+0x570/0x570 [ 1840.286313][ T5130] __handle_mm_fault+0x22f1/0x3f20 [ 1840.291454][ T5130] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1840.297030][ T5130] ? __kasan_check_read+0x11/0x20 [ 1840.302091][ T5130] handle_mm_fault+0x1b5/0x6c0 [ 1840.306879][ T5130] __do_page_fault+0x536/0xdd0 [ 1840.311792][ T5130] do_page_fault+0x38/0x590 [ 1840.316440][ T5130] page_fault+0x39/0x40 [ 1840.320625][ T5130] RIP: 0033:0x4034f2 [ 1840.324545][ T5130] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 a9 8d 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 c9 42 05 00 48 [ 1840.344307][ T5130] RSP: 002b:00007ffe6da0dc60 EFLAGS: 00010246 [ 1840.350385][ T5130] RAX: 0000000000000000 RBX: 00000000001bebfc RCX: 0000000000413480 [ 1840.358370][ T5130] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffe6da0ed90 [ 1840.366374][ T5130] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000555555c15940 [ 1840.374362][ T5130] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe6da0ed90 [ 1840.382632][ T5130] R13: 00007ffe6da0ed80 R14: 0000000000000000 R15: 00007ffe6da0ed90 [ 1840.391850][ T5130] memory: usage 828kB, limit 0kB, failcnt 254 [ 1840.398092][ T5130] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1840.405079][ T5130] Memory cgroup stats for /syz0: [ 1840.405179][ T5130] anon 65536 [ 1840.405179][ T5130] file 155648 [ 1840.405179][ T5130] kernel_stack 0 [ 1840.405179][ T5130] slab 929792 [ 1840.405179][ T5130] sock 0 [ 1840.405179][ T5130] shmem 110592 [ 1840.405179][ T5130] file_mapped 0 [ 1840.405179][ T5130] file_dirty 0 [ 1840.405179][ T5130] file_writeback 0 [ 1840.405179][ T5130] anon_thp 0 [ 1840.405179][ T5130] inactive_anon 0 [ 1840.405179][ T5130] active_anon 65536 [ 1840.405179][ T5130] inactive_file 135168 [ 1840.405179][ T5130] active_file 0 [ 1840.405179][ T5130] unevictable 12288 [ 1840.405179][ T5130] slab_reclaimable 405504 [ 1840.405179][ T5130] slab_unreclaimable 524288 [ 1840.405179][ T5130] pgfault 60324 [ 1840.405179][ T5130] pgmajfault 0 [ 1840.405179][ T5130] workingset_refault 0 [ 1840.405179][ T5130] workingset_activate 0 [ 1840.405179][ T5130] workingset_nodereclaim 0 [ 1840.405179][ T5130] pgrefill 225 [ 1840.405179][ T5130] pgscan 223 [ 1840.405179][ T5130] pgsteal 79 [ 1840.405179][ T5130] pgactivate 132 [ 1840.501129][ T5130] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=5130,uid=0 [ 1840.517265][ T5130] Memory cgroup out of memory: Killed process 5130 (syz-executor.0) total-vm:72448kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:0 15:20:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:20:01 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r4, 0x0, 0x0) 15:20:01 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) [ 1840.598347][ T5133] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1840.620363][ T5133] CPU: 1 PID: 5133 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1840.629572][ T5133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1840.639656][ T5133] Call Trace: [ 1840.643270][ T5133] dump_stack+0x172/0x1f0 [ 1840.647624][ T5133] dump_header+0x177/0x1152 [ 1840.652345][ T5133] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1840.658179][ T5133] ? ___ratelimit+0x2c8/0x595 [ 1840.663023][ T5133] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1840.668861][ T5133] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1840.674168][ T5133] ? trace_hardirqs_on+0x67/0x240 [ 1840.679226][ T5133] ? pagefault_out_of_memory+0x11c/0x11c [ 1840.685110][ T5133] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1840.691106][ T5133] ? ___ratelimit+0x60/0x595 [ 1840.695705][ T5133] ? do_raw_spin_unlock+0x57/0x270 [ 1840.700841][ T5133] oom_kill_process.cold+0x10/0x15 [ 1840.705972][ T5133] out_of_memory+0x334/0x1340 [ 1840.710669][ T5133] ? lock_downgrade+0x920/0x920 [ 1840.715658][ T5133] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1840.721832][ T5133] ? oom_killer_disable+0x280/0x280 [ 1840.727065][ T5133] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1840.732747][ T5133] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1840.738400][ T5133] ? do_raw_spin_unlock+0x57/0x270 [ 1840.743744][ T5133] ? _raw_spin_unlock+0x2d/0x50 [ 1840.748626][ T5133] try_charge+0xf4b/0x1440 [ 1840.753191][ T5133] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1840.758751][ T5133] ? percpu_ref_tryget_live+0x111/0x290 [ 1840.764316][ T5133] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1840.770578][ T5133] ? __kasan_check_read+0x11/0x20 [ 1840.775772][ T5133] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1840.781335][ T5133] mem_cgroup_try_charge+0x136/0x590 [ 1840.786630][ T5133] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1840.792896][ T5133] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1840.798683][ T5133] __handle_mm_fault+0x1e34/0x3f20 [ 1840.803818][ T5133] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1840.809484][ T5133] ? __kasan_check_read+0x11/0x20 [ 1840.815188][ T5133] handle_mm_fault+0x1b5/0x6c0 [ 1840.819977][ T5133] __do_page_fault+0x536/0xdd0 [ 1840.824766][ T5133] do_page_fault+0x38/0x590 [ 1840.829287][ T5133] page_fault+0x39/0x40 [ 1840.833457][ T5133] RIP: 0033:0x4034f2 [ 1840.837449][ T5133] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 a9 8d 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 c9 42 05 00 48 [ 1840.857191][ T5133] RSP: 002b:00007ffe65265e50 EFLAGS: 00010246 [ 1840.863275][ T5133] RAX: 0000000000000000 RBX: 00000000001bf423 RCX: 0000000000413480 [ 1840.871270][ T5133] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffe65266f80 [ 1840.879496][ T5133] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000555556df3940 [ 1840.887487][ T5133] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe65266f80 [ 1840.895473][ T5133] R13: 00007ffe65266f70 R14: 0000000000000000 R15: 00007ffe65266f80 [ 1840.907202][ T5133] memory: usage 768kB, limit 0kB, failcnt 381 [ 1840.913425][ T5133] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1840.921061][ T5133] Memory cgroup stats for /syz2: [ 1840.921162][ T5133] anon 180224 [ 1840.921162][ T5133] file 151552 [ 1840.921162][ T5133] kernel_stack 65536 [ 1840.921162][ T5133] slab 864256 [ 1840.921162][ T5133] sock 0 [ 1840.921162][ T5133] shmem 0 [ 1840.921162][ T5133] file_mapped 0 [ 1840.921162][ T5133] file_dirty 0 [ 1840.921162][ T5133] file_writeback 0 [ 1840.921162][ T5133] anon_thp 0 [ 1840.921162][ T5133] inactive_anon 0 [ 1840.921162][ T5133] active_anon 110592 [ 1840.921162][ T5133] inactive_file 135168 [ 1840.921162][ T5133] active_file 0 [ 1840.921162][ T5133] unevictable 0 [ 1840.921162][ T5133] slab_reclaimable 405504 [ 1840.921162][ T5133] slab_unreclaimable 458752 [ 1840.921162][ T5133] pgfault 66693 [ 1840.921162][ T5133] pgmajfault 0 [ 1840.921162][ T5133] workingset_refault 0 [ 1840.921162][ T5133] workingset_activate 0 15:20:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b47888318b04aeb1747555", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 1840.921162][ T5133] workingset_nodereclaim 0 [ 1840.921162][ T5133] pgrefill 310 [ 1840.921162][ T5133] pgscan 305 [ 1840.921162][ T5133] pgsteal 33 [ 1840.921162][ T5133] pgactivate 264 [ 1841.017259][ T5133] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=5133,uid=0 [ 1841.033889][ T5133] Memory cgroup out of memory: Killed process 5133 (syz-executor.2) total-vm:72448kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:0 15:20:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r5, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=""/31, 0x1f}}, 0x10) write$cgroup_int(r7, 0x0, 0x0) 15:20:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r5, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=""/31, 0x1f}}, 0x10) write$cgroup_int(r7, 0x0, 0x0) 15:20:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:20:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:20:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r4, 0x0, 0x0) [ 1841.771080][ T5194] IPVS: ftp: loaded support on port[0] = 21 15:20:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:20:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 1842.089363][ T5194] chnl_net:caif_netlink_parms(): no params data found [ 1842.187378][ T5194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1842.215269][ T5194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1842.235257][ T5194] device bridge_slave_0 entered promiscuous mode [ 1842.247281][ T5194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1842.264915][ T5194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1842.285280][ T5194] device bridge_slave_1 entered promiscuous mode [ 1842.331088][ T5194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1842.358022][ T5194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1842.409584][ T5194] team0: Port device team_slave_0 added [ 1842.427540][ T5194] team0: Port device team_slave_1 added [ 1842.509961][ T5194] device hsr_slave_0 entered promiscuous mode [ 1842.569017][ T5194] device hsr_slave_1 entered promiscuous mode [ 1842.608266][ T5194] debugfs: Directory 'hsr0' with parent '/' already present! [ 1842.656443][ T5194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1842.664295][ T5194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1842.671870][ T5194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1842.679130][ T5194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1842.731197][ T5194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1842.748607][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1842.758873][ T642] bridge0: port 1(bridge_slave_0) entered disabled state [ 1842.767307][ T642] bridge0: port 2(bridge_slave_1) entered disabled state [ 1842.787459][ T5194] 8021q: adding VLAN 0 to HW filter on device team0 [ 1842.804256][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1842.819263][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1842.828403][ T642] bridge0: port 1(bridge_slave_0) entered blocking state [ 1842.835556][ T642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1842.854637][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1842.875552][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1842.884896][ T6660] bridge0: port 2(bridge_slave_1) entered blocking state [ 1842.892158][ T6660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1842.900126][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1842.930265][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1842.939534][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1842.959429][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1842.970226][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1842.988794][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1842.999948][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1843.018084][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1843.033700][ T5194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1843.045658][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1843.055141][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1843.072937][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1843.081427][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1843.128209][ T5194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1843.442390][ T5208] IPVS: ftp: loaded support on port[0] = 21 [ 1843.581023][ T5206] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1843.593401][ T5208] chnl_net:caif_netlink_parms(): no params data found [ 1843.600699][ T5206] CPU: 1 PID: 5206 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1843.609766][ T5206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1843.609771][ T5206] Call Trace: [ 1843.609793][ T5206] dump_stack+0x172/0x1f0 [ 1843.609813][ T5206] dump_header+0x177/0x1152 [ 1843.609831][ T5206] ? __this_cpu_preempt_check+0x3a/0x210 [ 1843.609847][ T5206] ? retint_kernel+0x2b/0x2b [ 1843.609863][ T5206] ? pagefault_out_of_memory+0x11c/0x11c [ 1843.609878][ T5206] ? oom_kill_process+0x94/0x3f0 [ 1843.609895][ T5206] oom_kill_process.cold+0x10/0x15 [ 1843.609913][ T5206] out_of_memory+0x334/0x1340 [ 1843.623549][ T5206] ? __sched_text_start+0x8/0x8 [ 1843.623568][ T5206] ? oom_killer_disable+0x280/0x280 [ 1843.623598][ T5206] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1843.632512][ T5206] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1843.632536][ T5206] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1843.632553][ T5206] ? cgroup_file_notify+0x140/0x1b0 [ 1843.632572][ T5206] memory_max_write+0x262/0x3a0 [ 1843.642942][ T5206] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1843.642959][ T5206] ? lock_acquire+0x20b/0x410 [ 1843.642982][ T5206] cgroup_file_write+0x241/0x790 [ 1843.643003][ T5206] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1843.653734][ T5206] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1843.653758][ T5206] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1843.653773][ T5206] kernfs_fop_write+0x2b8/0x480 [ 1843.653793][ T5206] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1843.663731][ T5206] __vfs_write+0x8a/0x110 [ 1843.663748][ T5206] ? kernfs_fop_open+0xd80/0xd80 [ 1843.663763][ T5206] vfs_write+0x268/0x5d0 [ 1843.663781][ T5206] ksys_write+0x14f/0x290 [ 1843.673826][ T5206] ? __ia32_sys_read+0xb0/0xb0 [ 1843.673846][ T5206] ? do_syscall_64+0x26/0x760 [ 1843.673860][ T5206] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1843.673878][ T5206] ? do_syscall_64+0x26/0x760 [ 1843.685225][ T5206] __x64_sys_write+0x73/0xb0 [ 1843.685245][ T5206] do_syscall_64+0xfa/0x760 [ 1843.685269][ T5206] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1843.696274][ T5206] RIP: 0033:0x459879 [ 1843.696288][ T5206] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1843.696296][ T5206] RSP: 002b:00007fe1b753ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1843.696314][ T5206] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1843.696327][ T5206] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 1843.708167][ T5206] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1843.708176][ T5206] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe1b753f6d4 [ 1843.708184][ T5206] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1843.732717][ T5206] memory: usage 5032kB, limit 0kB, failcnt 1629 [ 1843.885165][ T5206] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1843.894599][ T5206] Memory cgroup stats for /syz1: [ 1843.895980][ T5206] anon 4255744 [ 1843.895980][ T5206] file 0 [ 1843.895980][ T5206] kernel_stack 65536 [ 1843.895980][ T5206] slab 565248 [ 1843.895980][ T5206] sock 0 [ 1843.895980][ T5206] shmem 0 [ 1843.895980][ T5206] file_mapped 0 [ 1843.895980][ T5206] file_dirty 0 [ 1843.895980][ T5206] file_writeback 0 [ 1843.895980][ T5206] anon_thp 4194304 [ 1843.895980][ T5206] inactive_anon 131072 [ 1843.895980][ T5206] active_anon 4255744 [ 1843.895980][ T5206] inactive_file 0 [ 1843.895980][ T5206] active_file 0 [ 1843.895980][ T5206] unevictable 0 [ 1843.895980][ T5206] slab_reclaimable 135168 [ 1843.895980][ T5206] slab_unreclaimable 430080 [ 1843.895980][ T5206] pgfault 90387 [ 1843.895980][ T5206] pgmajfault 0 [ 1843.895980][ T5206] workingset_refault 0 [ 1843.895980][ T5206] workingset_activate 0 [ 1843.895980][ T5206] workingset_nodereclaim 0 [ 1843.895980][ T5206] pgrefill 240 [ 1843.895980][ T5206] pgscan 242 [ 1843.895980][ T5206] pgsteal 35 [ 1843.895980][ T5206] pgactivate 198 [ 1844.001526][ T5206] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5205,uid=0 [ 1844.022293][ T5212] IPVS: ftp: loaded support on port[0] = 21 [ 1844.036732][ T5213] IPVS: ftp: loaded support on port[0] = 21 [ 1844.043945][ T5206] Memory cgroup out of memory: Killed process 5205 (syz-executor.1) total-vm:72712kB, anon-rss:4184kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1844.079218][ T1065] oom_reaper: reaped process 5205 (syz-executor.1), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB [ 1844.209218][ T5208] bridge0: port 1(bridge_slave_0) entered blocking state [ 1844.225587][ T5208] bridge0: port 1(bridge_slave_0) entered disabled state [ 1844.242101][ T5208] device bridge_slave_0 entered promiscuous mode [ 1844.259845][ T5208] bridge0: port 2(bridge_slave_1) entered blocking state [ 1844.271725][ T5208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1844.287855][ T5208] device bridge_slave_1 entered promiscuous mode [ 1844.406784][ T5208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1844.435329][ T5208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1844.463317][ T5208] team0: Port device team_slave_0 added 15:20:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:20:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r4, 0x0, 0x0) 15:20:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000200)) [ 1844.504852][ T5208] team0: Port device team_slave_1 added [ 1844.531747][ T5194] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1844.564892][ T5194] CPU: 0 PID: 5194 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1844.573986][ T5194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1844.584220][ T5194] Call Trace: [ 1844.587533][ T5194] dump_stack+0x172/0x1f0 [ 1844.592020][ T5194] dump_header+0x177/0x1152 [ 1844.596552][ T5194] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1844.602381][ T5194] ? ___ratelimit+0x2c8/0x595 [ 1844.607208][ T5194] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1844.613154][ T5194] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1844.618630][ T5194] ? trace_hardirqs_on+0x67/0x240 [ 1844.623690][ T5194] ? pagefault_out_of_memory+0x11c/0x11c [ 1844.629794][ T5194] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1844.635974][ T5194] ? ___ratelimit+0x60/0x595 [ 1844.640596][ T5194] ? do_raw_spin_unlock+0x57/0x270 [ 1844.645731][ T5194] oom_kill_process.cold+0x10/0x15 [ 1844.650866][ T5194] out_of_memory+0x334/0x1340 [ 1844.655565][ T5194] ? lock_downgrade+0x920/0x920 [ 1844.660442][ T5194] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1844.666274][ T5194] ? oom_killer_disable+0x280/0x280 [ 1844.671497][ T5194] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1844.677068][ T5194] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1844.682789][ T5194] ? do_raw_spin_unlock+0x57/0x270 [ 1844.687942][ T5194] ? _raw_spin_unlock+0x2d/0x50 [ 1844.692830][ T5194] try_charge+0xf4b/0x1440 [ 1844.697280][ T5194] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1844.702869][ T5194] ? percpu_ref_tryget_live+0x111/0x290 [ 1844.708446][ T5194] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1844.714723][ T5194] ? __kasan_check_read+0x11/0x20 [ 1844.719781][ T5194] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1844.725361][ T5194] mem_cgroup_try_charge+0x136/0x590 [ 1844.730678][ T5194] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1844.736951][ T5194] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1844.742614][ T5194] __handle_mm_fault+0x1e34/0x3f20 [ 1844.747779][ T5194] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1844.753361][ T5194] ? __kasan_check_read+0x11/0x20 [ 1844.758468][ T5194] handle_mm_fault+0x1b5/0x6c0 [ 1844.763318][ T5194] __do_page_fault+0x536/0xdd0 [ 1844.768130][ T5194] do_page_fault+0x38/0x590 [ 1844.772649][ T5194] page_fault+0x39/0x40 [ 1844.776843][ T5194] RIP: 0033:0x42fdcc [ 1844.780755][ T5194] Code: 83 c0 17 41 55 41 54 55 53 48 89 c5 48 83 e5 f0 48 89 fb 48 81 ec 98 00 00 00 48 83 f8 20 b8 20 00 00 00 48 0f 42 e8 48 85 ff <48> 89 74 24 08 0f 84 3a 08 00 00 48 3b 2d 9a 51 64 00 77 70 89 ef [ 1844.800474][ T5194] RSP: 002b:00007ffd21c08f70 EFLAGS: 00010202 [ 1844.806566][ T5194] RAX: 0000000000000020 RBX: 0000000000715640 RCX: 0000000000458be4 [ 1844.814557][ T5194] RDX: 00007ffd21c09060 RSI: 0000000000008030 RDI: 0000000000715640 [ 1844.822634][ T5194] RBP: 0000000000008040 R08: 0000000000000001 R09: 000055555749a940 [ 1844.830621][ T5194] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd21c0a240 [ 1844.838613][ T5194] R13: 00007ffd21c0a230 R14: 0000000000000000 R15: 00007ffd21c0a240 [ 1844.856739][ T5194] memory: usage 604kB, limit 0kB, failcnt 1641 [ 1844.863130][ T5194] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1844.871003][ T5194] Memory cgroup stats for /syz1: [ 1844.871101][ T5194] anon 0 [ 1844.871101][ T5194] file 0 [ 1844.871101][ T5194] kernel_stack 0 [ 1844.871101][ T5194] slab 565248 [ 1844.871101][ T5194] sock 0 [ 1844.871101][ T5194] shmem 0 [ 1844.871101][ T5194] file_mapped 0 [ 1844.871101][ T5194] file_dirty 0 [ 1844.871101][ T5194] file_writeback 0 [ 1844.871101][ T5194] anon_thp 0 [ 1844.871101][ T5194] inactive_anon 131072 [ 1844.871101][ T5194] active_anon 0 [ 1844.871101][ T5194] inactive_file 0 [ 1844.871101][ T5194] active_file 0 [ 1844.871101][ T5194] unevictable 0 [ 1844.871101][ T5194] slab_reclaimable 135168 [ 1844.871101][ T5194] slab_unreclaimable 430080 [ 1844.871101][ T5194] pgfault 90387 [ 1844.871101][ T5194] pgmajfault 0 [ 1844.871101][ T5194] workingset_refault 0 [ 1844.871101][ T5194] workingset_activate 0 [ 1844.871101][ T5194] workingset_nodereclaim 0 [ 1844.871101][ T5194] pgrefill 240 [ 1844.871101][ T5194] pgscan 242 [ 1844.871101][ T5194] pgsteal 35 [ 1844.871101][ T5194] pgactivate 198 [ 1844.871101][ T5194] pgdeactivate 240 [ 1844.969101][ T5194] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5194,uid=0 [ 1844.989634][ T5194] Memory cgroup out of memory: Killed process 5194 (syz-executor.1) total-vm:72448kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:0 [ 1845.017653][ T1065] oom_reaper: reaped process 5194 (syz-executor.1), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 15:20:05 executing program 4: openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x110, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x208) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000400)='./file0\x00', 0x0) [ 1845.467133][ T5227] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 1845.482604][ T5227] FAT-fs (loop4): Filesystem has been set read-only [ 1845.498343][ T5227] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 17) 15:20:06 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b47888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3d026ef9d3f316f9fb6e05b4eb24d9694ae311c93f10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa662beb127a3d751e96e4985731f95d987c418943811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78c156ff1d5631ebe5bbd35735802805b734f09339bd23f2affe80b22b91a50a00184bbbc9b1c78c470adb55381f9936d299fd", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:20:06 executing program 4: socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") syz_open_dev$evdev(0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() select(0xf4, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100090e00000000000a00090000000000000000000000000000000021000300000001000000000000020001ffff0000000000000200fd000005"], 0x3b}}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) [ 1845.641864][ T5208] device hsr_slave_0 entered promiscuous mode [ 1845.667266][ T5239] ptrace attach of "/root/syz-executor.4"[5237] was attempted by "/root/syz-executor.4"[5239] [ 1845.694391][ T5208] device hsr_slave_1 entered promiscuous mode [ 1845.725938][ T5208] debugfs: Directory 'hsr0' with parent '/' already present! [ 1845.736365][ T5213] chnl_net:caif_netlink_parms(): no params data found [ 1845.817024][ T5212] chnl_net:caif_netlink_parms(): no params data found [ 1845.870806][ T5213] bridge0: port 1(bridge_slave_0) entered blocking state [ 1845.885997][ T5213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1845.904738][ T5213] device bridge_slave_0 entered promiscuous mode [ 1845.929672][ T5213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1845.938117][ T5213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1845.946685][ T5213] device bridge_slave_1 entered promiscuous mode [ 1845.969406][ T5212] bridge0: port 1(bridge_slave_0) entered blocking state [ 1845.976973][ T5212] bridge0: port 1(bridge_slave_0) entered disabled state [ 1845.985046][ T5212] device bridge_slave_0 entered promiscuous mode [ 1846.005513][ T5212] bridge0: port 2(bridge_slave_1) entered blocking state [ 1846.013506][ T5212] bridge0: port 2(bridge_slave_1) entered disabled state [ 1846.022065][ T5212] device bridge_slave_1 entered promiscuous mode [ 1846.046040][ T5213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1846.058175][ T5213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1846.091801][ T5212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1846.104024][ T5212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1846.115031][ T5213] team0: Port device team_slave_0 added [ 1846.124296][ T5213] team0: Port device team_slave_1 added [ 1846.151734][ T5212] team0: Port device team_slave_0 added [ 1846.182539][ T5212] team0: Port device team_slave_1 added [ 1847.574316][ T5213] device hsr_slave_0 entered promiscuous mode [ 1847.641009][ T5213] device hsr_slave_1 entered promiscuous mode [ 1847.680766][ T5213] debugfs: Directory 'hsr0' with parent '/' already present! [ 1847.720424][ T5249] IPVS: ftp: loaded support on port[0] = 21 [ 1848.420920][ T5212] device hsr_slave_0 entered promiscuous mode [ 1848.478022][ T5212] device hsr_slave_1 entered promiscuous mode [ 1848.558022][ T5212] debugfs: Directory 'hsr0' with parent '/' already present! [ 1849.248124][ T5208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1849.319113][ T5208] 8021q: adding VLAN 0 to HW filter on device team0 [ 1849.972807][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1849.986908][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1850.661396][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1850.670530][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1850.680685][T28820] bridge0: port 1(bridge_slave_0) entered blocking state [ 1850.687826][T28820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1850.698422][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1850.707289][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1850.715863][T28820] bridge0: port 2(bridge_slave_1) entered blocking state [ 1850.722932][T28820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1850.730902][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1850.739947][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1850.748792][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1850.757553][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1850.780500][ T5208] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1850.791882][ T5208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1850.809413][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1850.818552][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1850.826549][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1850.835494][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1850.844100][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1850.853007][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1850.861627][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1850.870427][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1850.879747][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1851.601464][ T5213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1852.263787][ T5249] chnl_net:caif_netlink_parms(): no params data found [ 1852.309854][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1852.317890][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1852.331005][ T5213] 8021q: adding VLAN 0 to HW filter on device team0 [ 1852.341034][ T5208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1852.374196][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1852.397610][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1852.406628][ T6660] bridge0: port 1(bridge_slave_0) entered blocking state [ 1852.413740][ T6660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1853.092193][ T5249] bridge0: port 1(bridge_slave_0) entered blocking state [ 1853.099622][ T5249] bridge0: port 1(bridge_slave_0) entered disabled state [ 1853.108193][ T5249] device bridge_slave_0 entered promiscuous mode [ 1853.785215][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1853.793514][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1853.802667][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1853.811109][ T1996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1853.818240][ T1996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1853.827982][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1853.837536][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1853.861324][ T5212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1853.868527][ T5249] bridge0: port 2(bridge_slave_1) entered blocking state [ 1853.876032][ T5249] bridge0: port 2(bridge_slave_1) entered disabled state [ 1853.885745][ T5249] device bridge_slave_1 entered promiscuous mode [ 1853.911618][ T5249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1853.921544][ T2583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1853.938008][ T2583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1853.960467][ T2583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1853.973918][ T2583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1854.000037][ T5212] 8021q: adding VLAN 0 to HW filter on device team0 [ 1854.009645][ T5249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1854.022224][ T5213] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1854.034017][ T5213] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1854.060238][ T2583] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1854.069289][ T2583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1854.078365][ T2583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1854.087749][ T2583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1854.096097][ T2583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1854.104337][ T2583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1854.112744][ T2583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1854.122273][ T125] device bridge_slave_1 left promiscuous mode [ 1854.129832][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1854.186071][ T125] device bridge_slave_0 left promiscuous mode [ 1854.192303][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1854.216077][ T5257] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1854.226611][ T5257] CPU: 1 PID: 5257 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1854.235638][ T5257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1854.245704][ T5257] Call Trace: [ 1854.249011][ T5257] dump_stack+0x172/0x1f0 [ 1854.253360][ T5257] dump_header+0x177/0x1152 [ 1854.257890][ T5257] ? pagefault_out_of_memory+0x11c/0x11c [ 1854.263534][ T5257] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1854.269354][ T5257] ? ___ratelimit+0x60/0x595 [ 1854.273941][ T5257] ? do_raw_spin_unlock+0x57/0x270 [ 1854.279140][ T5257] oom_kill_process.cold+0x10/0x15 [ 1854.284371][ T5257] out_of_memory+0x334/0x1340 [ 1854.289052][ T5257] ? retint_kernel+0x2b/0x2b [ 1854.293654][ T5257] ? oom_killer_disable+0x280/0x280 [ 1854.298873][ T5257] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1854.304605][ T5257] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1854.310249][ T5257] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1854.316066][ T5257] ? cgroup_file_notify+0x140/0x1b0 [ 1854.321299][ T5257] memory_max_write+0x262/0x3a0 [ 1854.326175][ T5257] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1854.332937][ T5257] ? cgroup_file_write+0x86/0x790 [ 1854.337968][ T5257] cgroup_file_write+0x241/0x790 [ 1854.342909][ T5257] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1854.349682][ T5257] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1854.355321][ T5257] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1854.360963][ T5257] kernfs_fop_write+0x2b8/0x480 [ 1854.365820][ T5257] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1854.372068][ T5257] __vfs_write+0x8a/0x110 [ 1854.376401][ T5257] ? kernfs_fop_open+0xd80/0xd80 [ 1854.381362][ T5257] vfs_write+0x268/0x5d0 [ 1854.385598][ T5257] ksys_write+0x14f/0x290 [ 1854.389921][ T5257] ? __ia32_sys_read+0xb0/0xb0 [ 1854.394681][ T5257] ? do_syscall_64+0x26/0x760 [ 1854.399355][ T5257] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1854.405431][ T5257] ? do_syscall_64+0x26/0x760 [ 1854.410103][ T5257] __x64_sys_write+0x73/0xb0 [ 1854.414687][ T5257] do_syscall_64+0xfa/0x760 [ 1854.419193][ T5257] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1854.425086][ T5257] RIP: 0033:0x459879 [ 1854.428973][ T5257] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1854.448586][ T5257] RSP: 002b:00007fc8d327ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1854.457007][ T5257] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1854.464974][ T5257] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 1854.472936][ T5257] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1854.480916][ T5257] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc8d327b6d4 [ 1854.488904][ T5257] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1854.505605][ T5257] memory: usage 4896kB, limit 0kB, failcnt 704 [ 1854.513901][ T5257] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1854.520952][ T5257] Memory cgroup stats for /syz3: [ 1854.522580][ T5257] anon 4268032 [ 1854.522580][ T5257] file 0 [ 1854.522580][ T5257] kernel_stack 65536 [ 1854.522580][ T5257] slab 405504 [ 1854.522580][ T5257] sock 0 [ 1854.522580][ T5257] shmem 0 [ 1854.522580][ T5257] file_mapped 0 [ 1854.522580][ T5257] file_dirty 0 [ 1854.522580][ T5257] file_writeback 0 [ 1854.522580][ T5257] anon_thp 4194304 [ 1854.522580][ T5257] inactive_anon 0 [ 1854.522580][ T5257] active_anon 4268032 [ 1854.522580][ T5257] inactive_file 0 [ 1854.522580][ T5257] active_file 0 [ 1854.522580][ T5257] unevictable 0 [ 1854.522580][ T5257] slab_reclaimable 135168 [ 1854.522580][ T5257] slab_unreclaimable 270336 [ 1854.522580][ T5257] pgfault 35046 [ 1854.522580][ T5257] pgmajfault 0 [ 1854.522580][ T5257] workingset_refault 0 [ 1854.522580][ T5257] workingset_activate 0 [ 1854.522580][ T5257] workingset_nodereclaim 0 [ 1854.522580][ T5257] pgrefill 33 [ 1854.522580][ T5257] pgscan 66 [ 1854.522580][ T5257] pgsteal 0 [ 1854.522580][ T5257] pgactivate 0 [ 1854.529105][ T125] device bridge_slave_1 left promiscuous mode [ 1854.616697][ T5257] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5255,uid=0 [ 1854.617307][ T5257] Memory cgroup out of memory: Killed process 5255 (syz-executor.3) total-vm:72712kB, anon-rss:4184kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1854.660761][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1854.676075][ T1065] oom_reaper: reaped process 5255 (syz-executor.3), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 1854.759429][ T125] device bridge_slave_0 left promiscuous mode [ 1854.766905][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1854.821894][ T125] device bridge_slave_1 left promiscuous mode [ 1854.828137][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1854.871094][ T125] device bridge_slave_0 left promiscuous mode [ 1854.878510][ T125] bridge0: port 1(bridge_slave_0) entered disabled state 15:20:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=""/245, 0x0, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r5, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=""/31, 0x1f}}, 0x10) write$cgroup_int(r7, 0x0, 0x0) 15:20:15 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:20:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r4, 0x0, 0x0) [ 1854.932505][ T125] device bridge_slave_1 left promiscuous mode [ 1854.938735][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1854.969086][ T5208] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1854.982645][ T125] device bridge_slave_0 left promiscuous mode [ 1854.985012][ T5208] CPU: 0 PID: 5208 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1854.997754][ T5208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1855.004767][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1855.007804][ T5208] Call Trace: [ 1855.007825][ T5208] dump_stack+0x172/0x1f0 [ 1855.007844][ T5208] dump_header+0x177/0x1152 [ 1855.007863][ T5208] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1855.032784][ T5208] ? ___ratelimit+0x2c8/0x595 [ 1855.037464][ T5208] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1855.043289][ T5208] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1855.048578][ T5208] ? trace_hardirqs_on+0x67/0x240 [ 1855.053612][ T5208] ? pagefault_out_of_memory+0x11c/0x11c [ 1855.059258][ T5208] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1855.065077][ T5208] ? ___ratelimit+0x60/0x595 [ 1855.069693][ T5208] ? do_raw_spin_unlock+0x57/0x270 [ 1855.074814][ T5208] oom_kill_process.cold+0x10/0x15 [ 1855.079937][ T5208] out_of_memory+0x334/0x1340 [ 1855.084622][ T5208] ? lock_downgrade+0x920/0x920 [ 1855.089476][ T5208] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1855.095282][ T5208] ? oom_killer_disable+0x280/0x280 [ 1855.100525][ T5208] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1855.106084][ T5208] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1855.111730][ T5208] ? do_raw_spin_unlock+0x57/0x270 [ 1855.116853][ T5208] ? _raw_spin_unlock+0x2d/0x50 [ 1855.121719][ T5208] try_charge+0xf4b/0x1440 [ 1855.126193][ T5208] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1855.131788][ T5208] ? percpu_ref_tryget_live+0x111/0x290 [ 1855.137392][ T5208] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1855.143651][ T5208] ? __kasan_check_read+0x11/0x20 [ 1855.148690][ T5208] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1855.154244][ T5208] mem_cgroup_try_charge+0x136/0x590 [ 1855.159536][ T5208] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1855.165796][ T5208] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1855.171450][ T5208] wp_page_copy+0x41e/0x1590 [ 1855.176052][ T5208] ? find_held_lock+0x35/0x130 [ 1855.180829][ T5208] ? pmd_pfn+0x1d0/0x1d0 [ 1855.185088][ T5208] ? lock_downgrade+0x920/0x920 [ 1855.189984][ T5208] ? swp_swapcount+0x540/0x540 [ 1855.194798][ T5208] ? __kasan_check_read+0x11/0x20 [ 1855.199847][ T5208] ? do_raw_spin_unlock+0x57/0x270 [ 1855.204985][ T5208] do_wp_page+0x499/0x14d0 [ 1855.209430][ T5208] ? finish_mkwrite_fault+0x570/0x570 [ 1855.214825][ T5208] __handle_mm_fault+0x22f1/0x3f20 [ 1855.219963][ T5208] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1855.225536][ T5208] ? __kasan_check_read+0x11/0x20 [ 1855.230584][ T5208] handle_mm_fault+0x1b5/0x6c0 [ 1855.235366][ T5208] __do_page_fault+0x536/0xdd0 [ 1855.240166][ T5208] do_page_fault+0x38/0x590 [ 1855.244691][ T5208] page_fault+0x39/0x40 [ 1855.248858][ T5208] RIP: 0033:0x430956 [ 1855.252769][ T5208] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 46 64 00 85 c0 0f 84 [ 1855.272390][ T5208] RSP: 002b:00007ffc2829f590 EFLAGS: 00010206 [ 1855.278471][ T5208] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 1855.286457][ T5208] RDX: 0000555556f2f930 RSI: 0000555556f37970 RDI: 0000000000000003 [ 1855.294439][ T5208] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000555556f2e940 [ 1855.302415][ T5208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 1855.310401][ T5208] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 1855.335509][ T5208] memory: usage 468kB, limit 0kB, failcnt 716 [ 1855.345279][ T5208] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1855.364328][ T5208] Memory cgroup stats for /syz3: [ 1855.364486][ T5208] anon 65536 [ 1855.364486][ T5208] file 0 [ 1855.364486][ T5208] kernel_stack 65536 [ 1855.364486][ T5208] slab 405504 [ 1855.364486][ T5208] sock 0 [ 1855.364486][ T5208] shmem 0 [ 1855.364486][ T5208] file_mapped 0 [ 1855.364486][ T5208] file_dirty 0 [ 1855.364486][ T5208] file_writeback 0 [ 1855.364486][ T5208] anon_thp 0 [ 1855.364486][ T5208] inactive_anon 0 [ 1855.364486][ T5208] active_anon 65536 [ 1855.364486][ T5208] inactive_file 0 [ 1855.364486][ T5208] active_file 0 [ 1855.364486][ T5208] unevictable 0 [ 1855.364486][ T5208] slab_reclaimable 135168 [ 1855.364486][ T5208] slab_unreclaimable 270336 [ 1855.364486][ T5208] pgfault 35046 [ 1855.364486][ T5208] pgmajfault 0 [ 1855.364486][ T5208] workingset_refault 0 [ 1855.364486][ T5208] workingset_activate 0 [ 1855.364486][ T5208] workingset_nodereclaim 0 [ 1855.364486][ T5208] pgrefill 33 [ 1855.364486][ T5208] pgscan 66 [ 1855.364486][ T5208] pgsteal 0 [ 1855.364486][ T5208] pgactivate 0 [ 1855.462101][ T125] device bridge_slave_1 left promiscuous mode [ 1855.473013][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1855.542099][ T5208] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5208,uid=0 [ 1855.558914][ T125] device bridge_slave_0 left promiscuous mode [ 1855.565131][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1855.570178][ T5208] Memory cgroup out of memory: Killed process 5208 (syz-executor.3) total-vm:72448kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:0 [ 1855.591517][ T1065] oom_reaper: reaped process 5208 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 1855.603361][ T5260] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1855.614105][ T5260] CPU: 0 PID: 5260 Comm: syz-executor.4 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1855.623136][ T5260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1855.633196][ T5260] Call Trace: [ 1855.636496][ T5260] dump_stack+0x172/0x1f0 [ 1855.640838][ T5260] dump_header+0x177/0x1152 [ 1855.645356][ T5260] ? __this_cpu_preempt_check+0x3a/0x210 [ 1855.650993][ T5260] ? retint_kernel+0x2b/0x2b [ 1855.655626][ T5260] ? pagefault_out_of_memory+0x11c/0x11c [ 1855.661262][ T5260] ? oom_kill_process+0x94/0x3f0 [ 1855.666184][ T5260] oom_kill_process.cold+0x10/0x15 [ 1855.671292][ T5260] out_of_memory+0x334/0x1340 [ 1855.675977][ T5260] ? oom_killer_disable+0x280/0x280 [ 1855.681184][ T5260] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1855.686764][ T5260] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1855.692440][ T5260] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1855.698232][ T5260] ? cgroup_file_notify+0x140/0x1b0 [ 1855.703417][ T5260] memory_max_write+0x262/0x3a0 [ 1855.708254][ T5260] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1855.714999][ T5260] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1855.721744][ T5260] ? cgroup_file_write+0x1e2/0x790 [ 1855.726838][ T5260] cgroup_file_write+0x241/0x790 [ 1855.731758][ T5260] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1855.738504][ T5260] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1855.744124][ T5260] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1855.749747][ T5260] kernfs_fop_write+0x2b8/0x480 [ 1855.754611][ T5260] __vfs_write+0x8a/0x110 [ 1855.758923][ T5260] ? kernfs_fop_open+0xd80/0xd80 [ 1855.763845][ T5260] vfs_write+0x268/0x5d0 [ 1855.768072][ T5260] ksys_write+0x14f/0x290 [ 1855.772381][ T5260] ? __ia32_sys_read+0xb0/0xb0 [ 1855.777130][ T5260] ? do_syscall_64+0x26/0x760 [ 1855.781801][ T5260] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1855.787866][ T5260] ? do_syscall_64+0x26/0x760 [ 1855.792547][ T5260] __x64_sys_write+0x73/0xb0 [ 1855.797154][ T5260] do_syscall_64+0xfa/0x760 [ 1855.801673][ T5260] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1855.807564][ T5260] RIP: 0033:0x459879 [ 1855.811552][ T5260] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1855.831144][ T5260] RSP: 002b:00007f1ee25f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1855.839659][ T5260] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1855.847634][ T5260] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 1855.855615][ T5260] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1855.863573][ T5260] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1ee25f26d4 [ 1855.871535][ T5260] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1855.883078][ T5260] memory: usage 7020kB, limit 0kB, failcnt 942 [ 1855.890510][ T125] device bridge_slave_1 left promiscuous mode [ 1855.896730][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1855.905500][ T5260] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1855.913406][ T5260] Memory cgroup stats for /syz4: [ 1855.913537][ T5260] anon 4624384 [ 1855.913537][ T5260] file 0 [ 1855.913537][ T5260] kernel_stack 65536 [ 1855.913537][ T5260] slab 2060288 [ 1855.913537][ T5260] sock 12288 [ 1855.913537][ T5260] shmem 0 [ 1855.913537][ T5260] file_mapped 0 [ 1855.913537][ T5260] file_dirty 0 [ 1855.913537][ T5260] file_writeback 0 [ 1855.913537][ T5260] anon_thp 4194304 [ 1855.913537][ T5260] inactive_anon 0 [ 1855.913537][ T5260] active_anon 4546560 [ 1855.913537][ T5260] inactive_file 0 [ 1855.913537][ T5260] active_file 0 [ 1855.913537][ T5260] unevictable 0 [ 1855.913537][ T5260] slab_reclaimable 675840 [ 1855.913537][ T5260] slab_unreclaimable 1384448 [ 1855.913537][ T5260] pgfault 46167 [ 1855.913537][ T5260] pgmajfault 0 [ 1855.913537][ T5260] workingset_refault 0 [ 1855.913537][ T5260] workingset_activate 0 [ 1855.913537][ T5260] workingset_nodereclaim 0 [ 1855.913537][ T5260] pgrefill 85 [ 1855.913537][ T5260] pgscan 70 [ 1855.913537][ T5260] pgsteal 33 [ 1855.913537][ T5260] pgactivate 33 [ 1856.008849][ T5260] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=5239,uid=0 [ 1856.025657][ T5260] Memory cgroup out of memory: Killed process 5239 (syz-executor.4) total-vm:72708kB, anon-rss:2204kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 15:20:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 1856.044505][ T125] device bridge_slave_0 left promiscuous mode [ 1856.050795][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1856.059479][ T1065] oom_reaper: reaped process 5239 (syz-executor.4), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 1856.102185][ T125] device bridge_slave_1 left promiscuous mode [ 1856.108422][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1856.131476][ T5006] syz-executor.4 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 1856.142763][ T5006] CPU: 1 PID: 5006 Comm: syz-executor.4 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1856.151933][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1856.161988][ T5006] Call Trace: [ 1856.165280][ T5006] dump_stack+0x172/0x1f0 [ 1856.169595][ T5006] dump_header+0x177/0x1152 [ 1856.174098][ T5006] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1856.179911][ T5006] ? ___ratelimit+0x2c8/0x595 [ 1856.184616][ T5006] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1856.190412][ T5006] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1856.195696][ T5006] ? trace_hardirqs_on+0x67/0x240 [ 1856.200745][ T5006] ? pagefault_out_of_memory+0x11c/0x11c [ 1856.206372][ T5006] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1856.212172][ T5006] ? ___ratelimit+0x60/0x595 [ 1856.216779][ T5006] ? do_raw_spin_unlock+0x57/0x270 [ 1856.221898][ T5006] oom_kill_process.cold+0x10/0x15 [ 1856.227006][ T5006] out_of_memory+0x334/0x1340 [ 1856.231674][ T5006] ? lock_downgrade+0x920/0x920 [ 1856.236526][ T5006] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1856.242351][ T5006] ? oom_killer_disable+0x280/0x280 [ 1856.247642][ T5006] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1856.253184][ T5006] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1856.258823][ T5006] ? do_raw_spin_unlock+0x57/0x270 [ 1856.263938][ T5006] ? _raw_spin_unlock+0x2d/0x50 [ 1856.268785][ T5006] try_charge+0xf4b/0x1440 [ 1856.273199][ T5006] ? __lock_acquire+0x800/0x4a00 [ 1856.278138][ T5006] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1856.283685][ T5006] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1856.289676][ T5006] ? cache_grow_begin+0x122/0xd20 [ 1856.294695][ T5006] ? find_held_lock+0x35/0x130 [ 1856.299450][ T5006] ? cache_grow_begin+0x122/0xd20 [ 1856.304480][ T5006] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1856.309933][ T5006] ? memcg_kmem_put_cache+0x50/0x50 [ 1856.315125][ T5006] ? __kasan_check_read+0x11/0x20 [ 1856.320147][ T5006] cache_grow_begin+0x629/0xd20 [ 1856.324991][ T5006] ? __sanitizer_cov_trace_cmp2+0x11/0x20 [ 1856.330703][ T5006] ? mempolicy_slab_node+0x139/0x390 [ 1856.335987][ T5006] fallback_alloc+0x1fd/0x2d0 [ 1856.340667][ T5006] ____cache_alloc_node+0x1bc/0x1d0 [ 1856.345869][ T5006] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1856.352122][ T5006] kmem_cache_alloc+0x1ef/0x710 [ 1856.356989][ T5006] sk_prot_alloc+0x67/0x310 [ 1856.361491][ T5006] sk_alloc+0x39/0xf70 [ 1856.365559][ T5006] inet_create+0x368/0xe00 [ 1856.369972][ T5006] __sock_create+0x3d8/0x730 [ 1856.374646][ T5006] ? _raw_spin_unlock_irq+0x28/0x90 [ 1856.379841][ T5006] __sys_socket+0x103/0x220 [ 1856.384350][ T5006] ? move_addr_to_kernel+0x80/0x80 [ 1856.389459][ T5006] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1856.395175][ T5006] ? do_syscall_64+0x26/0x760 [ 1856.399852][ T5006] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1856.405907][ T5006] ? do_syscall_64+0x26/0x760 [ 1856.410575][ T5006] __x64_sys_socket+0x73/0xb0 [ 1856.415247][ T5006] do_syscall_64+0xfa/0x760 [ 1856.419751][ T5006] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1856.425638][ T5006] RIP: 0033:0x45c3c7 [ 1856.429521][ T5006] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9a 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1856.449129][ T5006] RSP: 002b:00007ffe917debd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1856.457536][ T5006] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045c3c7 [ 1856.465515][ T5006] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 1856.473484][ T5006] RBP: 0000000000000048 R08: 0000000000000000 R09: 000000000000000a [ 1856.481445][ T5006] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 1856.489395][ T5006] R13: 00007ffe917df2f0 R14: 00000000001c2c14 R15: 00007ffe917df300 [ 1856.498199][ T5006] memory: usage 2356kB, limit 0kB, failcnt 954 [ 1856.505762][ T125] device bridge_slave_0 left promiscuous mode [ 1856.511951][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1856.512721][ T5006] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1856.526153][ T5006] Memory cgroup stats for /syz4: [ 1856.526269][ T5006] anon 327680 [ 1856.526269][ T5006] file 0 [ 1856.526269][ T5006] kernel_stack 0 [ 1856.526269][ T5006] slab 2060288 [ 1856.526269][ T5006] sock 12288 [ 1856.526269][ T5006] shmem 0 [ 1856.526269][ T5006] file_mapped 0 [ 1856.526269][ T5006] file_dirty 0 [ 1856.526269][ T5006] file_writeback 0 [ 1856.526269][ T5006] anon_thp 0 [ 1856.526269][ T5006] inactive_anon 0 [ 1856.526269][ T5006] active_anon 253952 [ 1856.526269][ T5006] inactive_file 0 [ 1856.526269][ T5006] active_file 0 [ 1856.526269][ T5006] unevictable 0 [ 1856.526269][ T5006] slab_reclaimable 675840 [ 1856.526269][ T5006] slab_unreclaimable 1384448 [ 1856.526269][ T5006] pgfault 46167 [ 1856.526269][ T5006] pgmajfault 0 [ 1856.526269][ T5006] workingset_refault 0 [ 1856.526269][ T5006] workingset_activate 0 [ 1856.526269][ T5006] workingset_nodereclaim 0 [ 1856.526269][ T5006] pgrefill 85 [ 1856.526269][ T5006] pgscan 70 [ 1856.526269][ T5006] pgsteal 33 [ 1856.526269][ T5006] pgactivate 33 [ 1856.621248][ T5006] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=5006,uid=0 [ 1856.638110][ T5006] Memory cgroup out of memory: Killed process 5006 (syz-executor.4) total-vm:72444kB, anon-rss:104kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:0 [ 1856.657005][ T1065] oom_reaper: reaped process 5006 (syz-executor.4), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 1856.669275][ T125] device bridge_slave_1 left promiscuous mode [ 1856.685270][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1856.726413][ T125] device bridge_slave_0 left promiscuous mode [ 1856.732700][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1874.897021][ T125] device hsr_slave_0 left promiscuous mode [ 1874.936801][ T125] device hsr_slave_1 left promiscuous mode [ 1874.996252][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1875.012316][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1875.025435][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1875.064177][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1875.164210][ T125] bond0 (unregistering): Released all slaves [ 1875.330706][ T125] device hsr_slave_0 left promiscuous mode [ 1875.370502][ T125] device hsr_slave_1 left promiscuous mode [ 1875.433978][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1875.447339][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1875.460248][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1875.502866][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1875.589181][ T125] bond0 (unregistering): Released all slaves [ 1875.723928][ T125] device hsr_slave_0 left promiscuous mode [ 1875.764555][ T125] device hsr_slave_1 left promiscuous mode [ 1875.818922][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1875.837051][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1875.852326][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1875.891410][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1875.981471][ T125] bond0 (unregistering): Released all slaves [ 1876.137464][ T125] device hsr_slave_0 left promiscuous mode [ 1876.177115][ T125] device hsr_slave_1 left promiscuous mode [ 1876.226843][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1876.240649][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1876.253189][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1876.295402][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1876.378083][ T125] bond0 (unregistering): Released all slaves [ 1876.500713][ T125] device hsr_slave_0 left promiscuous mode [ 1876.540037][ T125] device hsr_slave_1 left promiscuous mode [ 1876.596106][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1876.607652][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1876.623280][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1876.668127][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1876.775775][ T125] bond0 (unregistering): Released all slaves [ 1876.913709][ T125] device hsr_slave_0 left promiscuous mode [ 1876.973816][ T125] device hsr_slave_1 left promiscuous mode [ 1877.024319][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1877.038392][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1877.050373][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1877.079836][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1877.160692][ T125] bond0 (unregistering): Released all slaves [ 1877.297093][ T125] device hsr_slave_0 left promiscuous mode [ 1877.336775][ T125] device hsr_slave_1 left promiscuous mode [ 1877.392897][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1877.407169][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1877.420453][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1877.465073][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1877.545085][ T125] bond0 (unregistering): Released all slaves [ 1877.671072][ T125] device hsr_slave_0 left promiscuous mode [ 1877.709729][ T125] device hsr_slave_1 left promiscuous mode [ 1877.759741][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1877.783876][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1877.800809][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1877.879321][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1877.999227][ T125] bond0 (unregistering): Released all slaves [ 1878.146886][ T2583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1878.557235][ T5249] team0: Port device team_slave_0 added [ 1878.573922][ T5249] team0: Port device team_slave_1 added [ 1878.585173][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1878.600671][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1878.611185][T28820] bridge0: port 1(bridge_slave_0) entered blocking state [ 1878.618597][T28820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1878.628782][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1878.638315][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1878.646825][T28820] bridge0: port 2(bridge_slave_1) entered blocking state [ 1878.654231][T28820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1878.664003][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1878.673492][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1878.693394][ T5264] IPVS: ftp: loaded support on port[0] = 21 [ 1878.703037][ T5213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1878.756058][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1878.766311][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1878.776261][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1878.788191][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1878.799504][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1878.809376][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1878.820130][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1878.836279][ T5212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1878.852222][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1878.902009][ T5249] device hsr_slave_0 entered promiscuous mode [ 1878.940260][ T5249] device hsr_slave_1 entered promiscuous mode [ 1878.981293][ T5249] debugfs: Directory 'hsr0' with parent '/' already present! [ 1878.992804][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1879.002942][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1879.012347][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1879.065047][ T5212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1879.278006][ T5272] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1879.288924][ T5272] CPU: 1 PID: 5272 Comm: syz-executor.5 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1879.298314][ T5272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1879.309350][ T5272] Call Trace: [ 1879.313323][ T5272] dump_stack+0x172/0x1f0 [ 1879.320533][ T5272] dump_header+0x177/0x1152 [ 1879.320560][ T5272] ? pagefault_out_of_memory+0x11c/0x11c [ 1879.320589][ T5272] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1879.320618][ T5272] ? ___ratelimit+0x60/0x595 [ 1879.341740][ T5272] ? do_raw_spin_unlock+0x57/0x270 [ 1879.346878][ T5272] oom_kill_process.cold+0x10/0x15 [ 1879.352016][ T5272] out_of_memory+0x334/0x1340 [ 1879.357772][ T5272] ? __sched_text_start+0x8/0x8 [ 1879.357792][ T5272] ? oom_killer_disable+0x280/0x280 [ 1879.357818][ T5272] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1879.377190][ T5272] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1879.384520][ T5272] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1879.384539][ T5272] ? cgroup_file_notify+0x140/0x1b0 [ 1879.384559][ T5272] memory_max_write+0x262/0x3a0 [ 1879.384580][ T5272] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1879.384597][ T5272] ? cgroup_file_write+0x86/0x790 [ 1879.384615][ T5272] cgroup_file_write+0x241/0x790 [ 1879.384630][ T5272] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1879.384650][ T5272] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1879.397258][ T5272] ? kernfs_ops+0x9f/0x120 [ 1879.397279][ T5272] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1879.397293][ T5272] kernfs_fop_write+0x2b8/0x480 [ 1879.397314][ T5272] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1879.397331][ T5272] __vfs_write+0x8a/0x110 [ 1879.397348][ T5272] ? kernfs_fop_open+0xd80/0xd80 [ 1879.410012][ T5272] vfs_write+0x268/0x5d0 [ 1879.410031][ T5272] ksys_write+0x14f/0x290 [ 1879.410045][ T5272] ? __ia32_sys_read+0xb0/0xb0 [ 1879.410068][ T5272] __x64_sys_write+0x73/0xb0 [ 1879.410088][ T5272] do_syscall_64+0xfa/0x760 [ 1879.410109][ T5272] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1879.410125][ T5272] RIP: 0033:0x459879 [ 1879.438417][ T5272] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1879.438425][ T5272] RSP: 002b:00007fe7a0f44c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1879.438439][ T5272] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1879.438446][ T5272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1879.438459][ T5272] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1879.465318][ T5272] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe7a0f456d4 [ 1879.465327][ T5272] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1879.504634][ T5272] memory: usage 5080kB, limit 0kB, failcnt 480 [ 1879.595950][ T5272] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1879.616501][ T5272] Memory cgroup stats for /syz5: [ 1879.618704][ T5272] anon 4313088 [ 1879.618704][ T5272] file 176128 [ 1879.618704][ T5272] kernel_stack 65536 [ 1879.618704][ T5272] slab 692224 [ 1879.618704][ T5272] sock 0 [ 1879.618704][ T5272] shmem 172032 [ 1879.618704][ T5272] file_mapped 0 [ 1879.618704][ T5272] file_dirty 0 [ 1879.618704][ T5272] file_writeback 0 [ 1879.618704][ T5272] anon_thp 4194304 [ 1879.618704][ T5272] inactive_anon 143360 [ 1879.618704][ T5272] active_anon 4313088 [ 1879.618704][ T5272] inactive_file 0 [ 1879.618704][ T5272] active_file 135168 [ 1879.618704][ T5272] unevictable 131072 [ 1879.618704][ T5272] slab_reclaimable 405504 [ 1879.618704][ T5272] slab_unreclaimable 286720 [ 1879.618704][ T5272] pgfault 59631 [ 1879.618704][ T5272] pgmajfault 0 [ 1879.618704][ T5272] workingset_refault 0 [ 1879.618704][ T5272] workingset_activate 0 [ 1879.618704][ T5272] workingset_nodereclaim 0 [ 1879.618704][ T5272] pgrefill 734 [ 1879.618704][ T5272] pgscan 744 [ 1879.618704][ T5272] pgsteal 35 [ 1879.737329][ T5272] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=5271,uid=0 [ 1879.757616][ T5249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1879.757838][ T5272] Memory cgroup out of memory: Killed process 5271 (syz-executor.5) total-vm:72712kB, anon-rss:4192kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1879.806321][ T1065] oom_reaper: reaped process 5271 (syz-executor.5), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 1879.824988][ T5264] chnl_net:caif_netlink_parms(): no params data found [ 1879.846613][ T5249] 8021q: adding VLAN 0 to HW filter on device team0 [ 1879.864439][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1879.883170][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1879.903055][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1879.912414][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1879.921305][ T642] bridge0: port 1(bridge_slave_0) entered blocking state [ 1879.928436][ T642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1879.936211][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1879.945742][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1879.949771][ T5213] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 15:20:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:20:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=""/245, 0x0, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r5, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=""/31, 0x1f}}, 0x10) write$cgroup_int(r7, 0x0, 0x0) 15:20:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 1879.954998][ T642] bridge0: port 2(bridge_slave_1) entered blocking state [ 1879.971924][ T642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1879.982242][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1879.991437][ T5213] CPU: 1 PID: 5213 Comm: syz-executor.5 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1880.000797][ T5213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1880.011683][ T5213] Call Trace: [ 1880.015181][ T5213] dump_stack+0x172/0x1f0 [ 1880.019656][ T5213] dump_header+0x177/0x1152 [ 1880.025426][ T5213] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1880.031806][ T5213] ? ___ratelimit+0x2c8/0x595 [ 1880.031819][ T5213] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1880.031838][ T5213] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1880.031859][ T5213] ? trace_hardirqs_on+0x67/0x240 [ 1880.053461][ T5213] ? pagefault_out_of_memory+0x11c/0x11c [ 1880.059973][ T5213] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1880.065916][ T5213] ? ___ratelimit+0x60/0x595 [ 1880.073302][ T5213] ? do_raw_spin_unlock+0x57/0x270 [ 1880.080383][ T5213] oom_kill_process.cold+0x10/0x15 [ 1880.086127][ T5213] out_of_memory+0x334/0x1340 [ 1880.090930][ T5213] ? lock_downgrade+0x920/0x920 [ 1880.090949][ T5213] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1880.090968][ T5213] ? oom_killer_disable+0x280/0x280 [ 1880.107761][ T5213] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1880.113387][ T5213] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1880.119425][ T5213] ? do_raw_spin_unlock+0x57/0x270 [ 1880.125902][ T5213] ? _raw_spin_unlock+0x2d/0x50 [ 1880.130918][ T5213] try_charge+0xf4b/0x1440 [ 1880.130942][ T5213] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1880.141325][ T5213] ? percpu_ref_tryget_live+0x111/0x290 [ 1880.147237][ T5213] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1880.153608][ T5213] ? __kasan_check_read+0x11/0x20 [ 1880.153628][ T5213] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1880.153650][ T5213] mem_cgroup_try_charge+0x136/0x590 [ 1880.170207][ T5213] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1880.176574][ T5213] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1880.182386][ T5213] wp_page_copy+0x41e/0x1590 [ 1880.187090][ T5213] ? find_held_lock+0x35/0x130 [ 1880.191873][ T5213] ? pmd_pfn+0x1d0/0x1d0 [ 1880.191891][ T5213] ? lock_downgrade+0x920/0x920 [ 1880.191910][ T5213] ? swp_swapcount+0x540/0x540 [ 1880.201293][ T5213] ? __kasan_check_read+0x11/0x20 [ 1880.201305][ T5213] ? do_raw_spin_unlock+0x57/0x270 [ 1880.201322][ T5213] do_wp_page+0x499/0x14d0 [ 1880.201346][ T5213] ? finish_mkwrite_fault+0x570/0x570 [ 1880.226247][ T5213] __handle_mm_fault+0x22f1/0x3f20 [ 1880.231486][ T5213] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1880.231513][ T5213] ? __kasan_check_read+0x11/0x20 [ 1880.242506][ T5213] handle_mm_fault+0x1b5/0x6c0 [ 1880.247295][ T5213] __do_page_fault+0x536/0xdd0 [ 1880.252221][ T5213] do_page_fault+0x38/0x590 [ 1880.256746][ T5213] page_fault+0x39/0x40 [ 1880.261035][ T5213] RIP: 0033:0x430956 [ 1880.265073][ T5213] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 46 64 00 85 c0 0f 84 [ 1880.284902][ T5213] RSP: 002b:00007ffcdb5c8930 EFLAGS: 00010206 [ 1880.284913][ T5213] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 1880.284920][ T5213] RDX: 000055555569d930 RSI: 00005555556a5970 RDI: 0000000000000003 [ 1880.284927][ T5213] RBP: 0000000000008041 R08: 0000000000000001 R09: 000055555569c940 [ 1880.284934][ T5213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 1880.284941][ T5213] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 1880.470930][ T2583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1880.478521][ T5213] memory: usage 652kB, limit 0kB, failcnt 488 [ 1880.485744][ T5213] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1880.490735][ T2583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1880.492924][ T5213] Memory cgroup stats for /syz5: [ 1880.493023][ T5213] anon 49152 [ 1880.493023][ T5213] file 176128 [ 1880.493023][ T5213] kernel_stack 65536 [ 1880.493023][ T5213] slab 692224 [ 1880.493023][ T5213] sock 0 [ 1880.493023][ T5213] shmem 172032 [ 1880.493023][ T5213] file_mapped 0 [ 1880.493023][ T5213] file_dirty 0 [ 1880.493023][ T5213] file_writeback 0 [ 1880.493023][ T5213] anon_thp 0 [ 1880.493023][ T5213] inactive_anon 143360 [ 1880.493023][ T5213] active_anon 49152 [ 1880.493023][ T5213] inactive_file 0 [ 1880.493023][ T5213] active_file 135168 [ 1880.493023][ T5213] unevictable 131072 [ 1880.493023][ T5213] slab_reclaimable 405504 [ 1880.493023][ T5213] slab_unreclaimable 286720 [ 1880.493023][ T5213] pgfault 59631 [ 1880.493023][ T5213] pgmajfault 0 [ 1880.493023][ T5213] workingset_refault 0 [ 1880.493023][ T5213] workingset_activate 0 [ 1880.493023][ T5213] workingset_nodereclaim 0 [ 1880.493023][ T5213] pgrefill 734 [ 1880.493023][ T5213] pgscan 744 [ 1880.493023][ T5213] pgsteal 35 [ 1880.493023][ T5213] pgactivate 660 [ 1880.493040][ T5213] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=5213,uid=0 [ 1880.493137][ T5213] Memory cgroup out of memory: Killed process 5213 (syz-executor.5) total-vm:72448kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:0 [ 1880.636567][ T2583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1880.646591][ T2583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1880.976888][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1880.985264][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1880.994117][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1881.003808][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1881.012895][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1881.022075][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1881.030587][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1881.045132][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1881.058054][ T5264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1881.065263][ T5264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1881.074211][ T5264] device bridge_slave_0 entered promiscuous mode [ 1881.114619][ T5264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1881.126870][ T5264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1881.135398][ T5264] device bridge_slave_1 entered promiscuous mode [ 1881.150678][ T5249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1881.301259][ T5264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1881.313093][ T5264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1881.528145][ T5264] team0: Port device team_slave_0 added [ 1881.557792][ T5264] team0: Port device team_slave_1 added [ 1881.603691][ T5288] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1881.627102][ T5288] CPU: 0 PID: 5288 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1881.636299][ T5288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1881.647127][ T5288] Call Trace: [ 1881.650445][ T5288] dump_stack+0x172/0x1f0 [ 1881.654807][ T5288] dump_header+0x177/0x1152 [ 1881.659487][ T5288] ? pagefault_out_of_memory+0x11c/0x11c [ 1881.665777][ T5288] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1881.682640][ T5288] ? ___ratelimit+0x60/0x595 [ 1881.687248][ T5288] ? do_raw_spin_unlock+0x57/0x270 [ 1881.692477][ T5288] oom_kill_process.cold+0x10/0x15 [ 1881.697807][ T5288] out_of_memory+0x334/0x1340 [ 1881.707494][ T5288] ? __sched_text_start+0x8/0x8 [ 1881.712490][ T5288] ? oom_killer_disable+0x280/0x280 [ 1881.717714][ T5288] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1881.723410][ T5288] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1881.729330][ T5288] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1881.735460][ T5288] ? cgroup_file_notify+0x140/0x1b0 [ 1881.740945][ T5288] memory_max_write+0x262/0x3a0 [ 1881.746078][ T5288] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1881.753199][ T5288] ? lock_acquire+0x190/0x410 [ 1881.759034][ T5288] ? kernfs_fop_write+0x227/0x480 [ 1881.764167][ T5288] cgroup_file_write+0x241/0x790 [ 1881.769123][ T5288] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1881.782764][ T5288] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1881.788416][ T5288] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1881.794509][ T5288] kernfs_fop_write+0x2b8/0x480 [ 1881.799531][ T5288] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1881.806491][ T5288] __vfs_write+0x8a/0x110 [ 1881.810843][ T5288] ? kernfs_fop_open+0xd80/0xd80 [ 1881.816108][ T5288] vfs_write+0x268/0x5d0 [ 1881.820376][ T5288] ksys_write+0x14f/0x290 [ 1881.824720][ T5288] ? __ia32_sys_read+0xb0/0xb0 [ 1881.829508][ T5288] ? do_syscall_64+0x26/0x760 [ 1881.834288][ T5288] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1881.840480][ T5288] ? do_syscall_64+0x26/0x760 [ 1881.845714][ T5288] __x64_sys_write+0x73/0xb0 [ 1881.850620][ T5288] do_syscall_64+0xfa/0x760 [ 1881.855352][ T5288] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1881.861395][ T5288] RIP: 0033:0x459879 [ 1881.865362][ T5288] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1881.885446][ T5288] RSP: 002b:00007fb2fd03ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1881.894077][ T5288] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1881.902053][ T5288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 1881.910031][ T5288] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1881.918180][ T5288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2fd03f6d4 [ 1881.926601][ T5288] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1881.989111][ T5264] device hsr_slave_0 entered promiscuous mode [ 1882.015490][ T5288] memory: usage 2804kB, limit 0kB, failcnt 382 [ 1882.022024][ T5288] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1882.045764][ T5288] Memory cgroup stats for /syz2: [ 1882.047725][ T5288] anon 2224128 [ 1882.047725][ T5288] file 151552 [ 1882.047725][ T5288] kernel_stack 65536 [ 1882.047725][ T5288] slab 458752 [ 1882.047725][ T5288] sock 0 [ 1882.047725][ T5288] shmem 0 [ 1882.047725][ T5288] file_mapped 0 [ 1882.047725][ T5288] file_dirty 0 [ 1882.047725][ T5288] file_writeback 0 [ 1882.047725][ T5288] anon_thp 2097152 [ 1882.047725][ T5288] inactive_anon 0 [ 1882.047725][ T5288] active_anon 2224128 [ 1882.047725][ T5288] inactive_file 135168 [ 1882.047725][ T5288] active_file 0 [ 1882.047725][ T5288] unevictable 0 [ 1882.047725][ T5288] slab_reclaimable 135168 [ 1882.047725][ T5288] slab_unreclaimable 323584 [ 1882.047725][ T5288] pgfault 66726 [ 1882.047725][ T5288] pgmajfault 0 [ 1882.047725][ T5288] workingset_refault 0 [ 1882.047725][ T5288] workingset_activate 0 [ 1882.047725][ T5288] workingset_nodereclaim 0 [ 1882.047725][ T5288] pgrefill 310 [ 1882.047725][ T5288] pgscan 305 [ 1882.047725][ T5288] pgsteal 33 [ 1882.047725][ T5288] pgactivate 264 [ 1882.050560][ T5264] device hsr_slave_1 entered promiscuous mode [ 1882.053095][ T5288] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=5287,uid=0 [ 1882.181277][ T5288] Memory cgroup out of memory: Killed process 5287 (syz-executor.2) total-vm:72580kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000 [ 1882.209359][ T1065] oom_reaper: reaped process 5287 (syz-executor.2), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 15:20:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r4, 0x0, 0x0) 15:20:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:20:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 1882.405399][ T5264] debugfs: Directory 'hsr0' with parent '/' already present! [ 1882.436164][ T5249] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1882.458216][ T5290] IPVS: ftp: loaded support on port[0] = 21 [ 1882.463202][ T5249] CPU: 1 PID: 5249 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1882.466548][ T5292] IPVS: ftp: loaded support on port[0] = 21 [ 1882.473175][ T5249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1882.473180][ T5249] Call Trace: [ 1882.473208][ T5249] dump_stack+0x172/0x1f0 [ 1882.473228][ T5249] dump_header+0x177/0x1152 [ 1882.473244][ T5249] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1882.473255][ T5249] ? ___ratelimit+0x2c8/0x595 [ 1882.473268][ T5249] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1882.473284][ T5249] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1882.473298][ T5249] ? trace_hardirqs_on+0x67/0x240 [ 1882.473314][ T5249] ? pagefault_out_of_memory+0x11c/0x11c [ 1882.473328][ T5249] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1882.473339][ T5249] ? ___ratelimit+0x60/0x595 [ 1882.473350][ T5249] ? do_raw_spin_unlock+0x57/0x270 [ 1882.473365][ T5249] oom_kill_process.cold+0x10/0x15 [ 1882.473380][ T5249] out_of_memory+0x334/0x1340 [ 1882.473394][ T5249] ? lock_downgrade+0x920/0x920 [ 1882.473412][ T5249] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1882.473428][ T5249] ? oom_killer_disable+0x280/0x280 [ 1882.473454][ T5249] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1882.473469][ T5249] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1882.473487][ T5249] ? do_raw_spin_unlock+0x57/0x270 [ 1882.473504][ T5249] ? _raw_spin_unlock+0x2d/0x50 [ 1882.473522][ T5249] try_charge+0xf4b/0x1440 [ 1882.473544][ T5249] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1882.605943][ T5249] ? percpu_ref_tryget_live+0x111/0x290 [ 1882.611506][ T5249] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1882.617756][ T5249] ? __kasan_check_read+0x11/0x20 [ 1882.622800][ T5249] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1882.628356][ T5249] mem_cgroup_try_charge+0x136/0x590 [ 1882.633653][ T5249] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1882.639907][ T5249] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1882.645547][ T5249] wp_page_copy+0x41e/0x1590 [ 1882.650159][ T5249] ? find_held_lock+0x35/0x130 [ 1882.654940][ T5249] ? pmd_pfn+0x1d0/0x1d0 [ 1882.659189][ T5249] ? lock_downgrade+0x920/0x920 [ 1882.664050][ T5249] ? swp_swapcount+0x540/0x540 [ 1882.668824][ T5249] ? __kasan_check_read+0x11/0x20 [ 1882.673876][ T5249] ? do_raw_spin_unlock+0x57/0x270 [ 1882.678990][ T5249] do_wp_page+0x499/0x14d0 [ 1882.683418][ T5249] ? finish_mkwrite_fault+0x570/0x570 [ 1882.688820][ T5249] __handle_mm_fault+0x22f1/0x3f20 [ 1882.693954][ T5249] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1882.699514][ T5249] ? __kasan_check_read+0x11/0x20 [ 1882.704573][ T5249] handle_mm_fault+0x1b5/0x6c0 [ 1882.709356][ T5249] __do_page_fault+0x536/0xdd0 [ 1882.714135][ T5249] do_page_fault+0x38/0x590 [ 1882.718656][ T5249] page_fault+0x39/0x40 [ 1882.722838][ T5249] RIP: 0033:0x430956 [ 1882.726723][ T5249] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 46 64 00 85 c0 0f 84 [ 1882.746332][ T5249] RSP: 002b:00007ffdfb273850 EFLAGS: 00010206 [ 1882.752387][ T5249] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 1882.760351][ T5249] RDX: 00005555556c9930 RSI: 00005555556d1970 RDI: 0000000000000003 [ 1882.768319][ T5249] RBP: 0000000000008041 R08: 0000000000000001 R09: 00005555556c8940 [ 1882.776292][ T5249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 1882.784261][ T5249] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 1882.941585][ T5264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1883.002598][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1883.011824][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1883.037802][ T5264] 8021q: adding VLAN 0 to HW filter on device team0 [ 1883.095106][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1883.104228][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1883.123718][ T5249] memory: usage 472kB, limit 0kB, failcnt 390 [ 1883.130717][T28820] bridge0: port 1(bridge_slave_0) entered blocking state [ 1883.137875][T28820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1883.154831][ T5249] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1883.172022][ T5249] Memory cgroup stats for /syz2: [ 1883.172141][ T5249] anon 122880 [ 1883.172141][ T5249] file 151552 [ 1883.172141][ T5249] kernel_stack 0 [ 1883.172141][ T5249] slab 458752 [ 1883.172141][ T5249] sock 0 [ 1883.172141][ T5249] shmem 0 [ 1883.172141][ T5249] file_mapped 0 [ 1883.172141][ T5249] file_dirty 0 [ 1883.172141][ T5249] file_writeback 0 [ 1883.172141][ T5249] anon_thp 0 [ 1883.172141][ T5249] inactive_anon 0 [ 1883.172141][ T5249] active_anon 122880 [ 1883.172141][ T5249] inactive_file 135168 [ 1883.172141][ T5249] active_file 0 [ 1883.172141][ T5249] unevictable 0 [ 1883.172141][ T5249] slab_reclaimable 135168 [ 1883.172141][ T5249] slab_unreclaimable 323584 [ 1883.172141][ T5249] pgfault 66759 [ 1883.172141][ T5249] pgmajfault 0 [ 1883.172141][ T5249] workingset_refault 0 [ 1883.172141][ T5249] workingset_activate 0 [ 1883.172141][ T5249] workingset_nodereclaim 0 [ 1883.172141][ T5249] pgrefill 310 [ 1883.172141][ T5249] pgscan 305 [ 1883.172141][ T5249] pgsteal 33 [ 1883.172141][ T5249] pgactivate 264 [ 1883.276397][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1883.295535][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1883.315686][T28820] bridge0: port 2(bridge_slave_1) entered blocking state [ 1883.322825][T28820] bridge0: port 2(bridge_slave_1) entered forwarding state 15:20:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 1883.351341][ T5249] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=5249,uid=0 [ 1883.374429][ T5249] Memory cgroup out of memory: Killed process 5249 (syz-executor.2) total-vm:72448kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:0 [ 1883.399549][ T1065] oom_reaper: reaped process 5249 (syz-executor.2), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 1883.447618][ T6659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1883.455936][ T6659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1883.461371][ T5212] syz-executor.0 invoked oom-killer: gfp_mask=0x40c50(GFP_NOFS|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 1883.473580][ T6659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1883.493027][ T6659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1883.497648][ T5212] CPU: 1 PID: 5212 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1883.504405][ T6659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1883.509996][ T5212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1883.510002][ T5212] Call Trace: [ 1883.510024][ T5212] dump_stack+0x172/0x1f0 [ 1883.510043][ T5212] dump_header+0x177/0x1152 [ 1883.510058][ T5212] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1883.510068][ T5212] ? ___ratelimit+0x2c8/0x595 [ 1883.510080][ T5212] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1883.510096][ T5212] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1883.510111][ T5212] ? trace_hardirqs_on+0x67/0x240 [ 1883.510133][ T5212] ? pagefault_out_of_memory+0x11c/0x11c [ 1883.510147][ T5212] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1883.510159][ T5212] ? ___ratelimit+0x60/0x595 [ 1883.510169][ T5212] ? do_raw_spin_unlock+0x57/0x270 [ 1883.510187][ T5212] oom_kill_process.cold+0x10/0x15 [ 1883.540112][ T5212] out_of_memory+0x334/0x1340 [ 1883.540133][ T5212] ? lock_downgrade+0x920/0x920 [ 1883.540150][ T5212] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1883.540166][ T5212] ? oom_killer_disable+0x280/0x280 [ 1883.540191][ T5212] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1883.540205][ T5212] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1883.540222][ T5212] ? do_raw_spin_unlock+0x57/0x270 [ 1883.540239][ T5212] ? _raw_spin_unlock+0x2d/0x50 [ 1883.540256][ T5212] try_charge+0xf4b/0x1440 [ 1883.540275][ T5212] ? __lock_acquire+0x800/0x4a00 [ 1883.540291][ T5212] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1883.540306][ T5212] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1883.540321][ T5212] ? cache_grow_begin+0x122/0xd20 [ 1883.540334][ T5212] ? find_held_lock+0x35/0x130 [ 1883.540345][ T5212] ? cache_grow_begin+0x122/0xd20 [ 1883.540366][ T5212] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1883.540379][ T5212] ? memcg_kmem_put_cache+0x50/0x50 [ 1883.540394][ T5212] ? __kasan_check_read+0x11/0x20 [ 1883.540411][ T5212] cache_grow_begin+0x629/0xd20 [ 1883.540427][ T5212] ? __sanitizer_cov_trace_cmp2+0x11/0x20 [ 1883.540442][ T5212] ? mempolicy_slab_node+0x139/0x390 [ 1883.540458][ T5212] fallback_alloc+0x1fd/0x2d0 [ 1883.550920][ T5212] ____cache_alloc_node+0x1bc/0x1d0 [ 1883.561974][ T5212] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1883.561989][ T5212] kmem_cache_alloc+0x1ef/0x710 [ 1883.562010][ T5212] ? ratelimit_state_init+0xb0/0xb0 [ 1883.562024][ T5212] ext4_alloc_inode+0x1f/0x640 [ 1883.562038][ T5212] ? ratelimit_state_init+0xb0/0xb0 [ 1883.562050][ T5212] alloc_inode+0x68/0x1e0 [ 1883.562068][ T5212] new_inode_pseudo+0x19/0xf0 [ 1883.593243][ T5212] new_inode+0x1f/0x40 [ 1883.602839][ T5212] __ext4_new_inode+0x3d5/0x4e50 [ 1883.602867][ T5212] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1883.602882][ T5212] ? __dquot_initialize+0x525/0xd80 [ 1883.602896][ T5212] ? ext4_free_inode+0x1490/0x1490 [ 1883.602911][ T5212] ? dqget+0x10d0/0x10d0 [ 1883.602933][ T5212] ? putname+0xef/0x130 [ 1883.602950][ T5212] ext4_mkdir+0x3df/0xe20 [ 1883.602974][ T5212] ? ext4_init_dot_dotdot+0x520/0x520 [ 1883.602990][ T5212] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1883.603002][ T5212] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1883.603019][ T5212] ? security_inode_permission+0xcb/0x100 [ 1883.603035][ T5212] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1883.603047][ T5212] ? security_inode_mkdir+0xe4/0x120 [ 1883.603062][ T5212] vfs_mkdir+0x42e/0x670 [ 1883.603079][ T5212] do_mkdirat+0x234/0x2a0 [ 1883.603097][ T5212] ? __ia32_sys_mknod+0xb0/0xb0 [ 1883.603111][ T5212] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1883.603135][ T5212] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1883.603148][ T5212] ? do_syscall_64+0x26/0x760 [ 1883.603164][ T5212] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1883.603183][ T5212] __x64_sys_mkdir+0x5c/0x80 [ 1883.603197][ T5212] do_syscall_64+0xfa/0x760 [ 1883.603214][ T5212] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1883.603226][ T5212] RIP: 0033:0x458c97 [ 1883.603240][ T5212] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1883.603248][ T5212] RSP: 002b:00007ffc084b9a18 EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 1883.603261][ T5212] RAX: ffffffffffffffda RBX: 00000000001c99da RCX: 0000000000458c97 [ 1883.603270][ T5212] RDX: 00007ffc084b9a63 RSI: 00000000000001ff RDI: 00007ffc084b9a60 [ 1883.603277][ T5212] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000003 [ 1883.603285][ T5212] R10: 0000000000000064 R11: 0000000000000206 R12: 000000000000001b [ 1883.603292][ T5212] R13: 00007ffc084b9a50 R14: 00000000001c9670 R15: 00007ffc084b9a60 [ 1883.611276][ T5212] memory: usage 696kB, limit 0kB, failcnt 267 [ 1883.656208][ T5212] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1883.661782][ T5212] Memory cgroup stats for /syz0: [ 1883.661894][ T5212] anon 229376 [ 1883.661894][ T5212] file 155648 [ 1883.661894][ T5212] kernel_stack 65536 [ 1883.661894][ T5212] slab 524288 [ 1883.661894][ T5212] sock 0 [ 1883.661894][ T5212] shmem 110592 [ 1883.661894][ T5212] file_mapped 0 [ 1883.661894][ T5212] file_dirty 0 [ 1883.661894][ T5212] file_writeback 0 [ 1883.661894][ T5212] anon_thp 0 [ 1883.661894][ T5212] inactive_anon 0 [ 1883.661894][ T5212] active_anon 86016 [ 1883.661894][ T5212] inactive_file 135168 [ 1883.661894][ T5212] active_file 0 [ 1883.661894][ T5212] unevictable 12288 [ 1883.661894][ T5212] slab_reclaimable 135168 [ 1883.661894][ T5212] slab_unreclaimable 389120 [ 1883.661894][ T5212] pgfault 60489 [ 1883.661894][ T5212] pgmajfault 0 [ 1883.661894][ T5212] workingset_refault 0 [ 1883.661894][ T5212] workingset_activate 0 [ 1883.661894][ T5212] workingset_nodereclaim 0 [ 1883.661894][ T5212] pgrefill 225 [ 1883.661894][ T5212] pgscan 223 [ 1883.661894][ T5212] pgsteal 79 [ 1883.661894][ T5212] pgactivate 132 [ 1883.724921][ T5212] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=5212,uid=0 [ 1883.739251][ T5212] Memory cgroup out of memory: Killed process 5212 (syz-executor.0) total-vm:72444kB, anon-rss:96kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:0 [ 1883.745136][ T1065] oom_reaper: reaped process 5212 (syz-executor.0), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 1884.283315][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1884.303493][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1884.312470][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1884.330238][ T5292] chnl_net:caif_netlink_parms(): no params data found 15:20:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) [ 1884.549268][ T5290] chnl_net:caif_netlink_parms(): no params data found [ 1884.573482][ T5300] IPVS: ftp: loaded support on port[0] = 21 [ 1884.588542][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 15:20:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) [ 1884.606318][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1884.628847][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1884.648513][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1884.684528][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1884.789649][ T5264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1884.796922][ T5292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1884.809319][ T5292] bridge0: port 1(bridge_slave_0) entered disabled state [ 1884.817533][ T5292] device bridge_slave_0 entered promiscuous mode [ 1884.885966][ T5292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1884.906419][ T5292] bridge0: port 2(bridge_slave_1) entered disabled state [ 1884.914963][ T5292] device bridge_slave_1 entered promiscuous mode [ 1884.943976][ T5290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1884.952447][ T5290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1884.971727][ T5290] device bridge_slave_0 entered promiscuous mode [ 1885.028176][ T5290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1885.040799][ T5290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1885.049158][ T5290] device bridge_slave_1 entered promiscuous mode [ 1885.130491][ T5292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1885.181286][ T5290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1885.276768][ T5292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1885.302047][ T5290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1885.332733][ T5300] chnl_net:caif_netlink_parms(): no params data found [ 1885.468936][ T5310] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1885.481611][ T5310] CPU: 0 PID: 5310 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1885.490698][ T5310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1885.500791][ T5310] Call Trace: [ 1885.504182][ T5310] dump_stack+0x172/0x1f0 [ 1885.508540][ T5310] dump_header+0x177/0x1152 [ 1885.508567][ T5310] ? pagefault_out_of_memory+0x11c/0x11c [ 1885.518792][ T5310] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1885.524658][ T5310] ? ___ratelimit+0x60/0x595 [ 1885.529296][ T5310] ? do_raw_spin_unlock+0x57/0x270 [ 1885.534475][ T5310] oom_kill_process.cold+0x10/0x15 [ 1885.536123][ T5290] team0: Port device team_slave_0 added [ 1885.539624][ T5310] out_of_memory+0x334/0x1340 [ 1885.549858][ T5310] ? __sched_text_start+0x8/0x8 [ 1885.551502][ T5290] team0: Port device team_slave_1 added [ 1885.554753][ T5310] ? oom_killer_disable+0x280/0x280 [ 1885.554782][ T5310] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1885.554799][ T5310] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1885.554822][ T5310] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1885.554844][ T5310] ? cgroup_file_notify+0x140/0x1b0 [ 1885.582608][ T5310] memory_max_write+0x262/0x3a0 [ 1885.592693][ T5310] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1885.599491][ T5310] ? cgroup_file_write+0x86/0x790 [ 1885.599511][ T5310] cgroup_file_write+0x241/0x790 [ 1885.609525][ T5310] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1885.616322][ T5310] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1885.616347][ T5310] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1885.627661][ T5310] kernfs_fop_write+0x2b8/0x480 [ 1885.627683][ T5310] __vfs_write+0x8a/0x110 [ 1885.627694][ T5310] ? kernfs_fop_open+0xd80/0xd80 [ 1885.627706][ T5310] vfs_write+0x268/0x5d0 [ 1885.627721][ T5310] ksys_write+0x14f/0x290 [ 1885.627734][ T5310] ? __ia32_sys_read+0xb0/0xb0 [ 1885.627752][ T5310] ? do_syscall_64+0x26/0x760 [ 1885.627773][ T5310] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1885.627792][ T5310] ? do_syscall_64+0x26/0x760 [ 1885.641985][ T5310] __x64_sys_write+0x73/0xb0 [ 1885.642011][ T5310] do_syscall_64+0xfa/0x760 [ 1885.642047][ T5310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1885.655394][ T5310] RIP: 0033:0x459879 [ 1885.655413][ T5310] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1885.655429][ T5310] RSP: 002b:00007f8e2e474c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1885.670879][ T5310] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1885.670888][ T5310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 1885.670894][ T5310] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1885.670902][ T5310] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8e2e4756d4 [ 1885.670908][ T5310] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1885.759244][ T5310] memory: usage 5016kB, limit 0kB, failcnt 1642 [ 1885.777767][ T5310] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1885.785201][ T5310] Memory cgroup stats for /syz1: [ 1885.787564][ T5310] anon 4255744 [ 1885.787564][ T5310] file 0 [ 1885.787564][ T5310] kernel_stack 131072 [ 1885.787564][ T5310] slab 565248 [ 1885.787564][ T5310] sock 0 [ 1885.787564][ T5310] shmem 0 [ 1885.787564][ T5310] file_mapped 0 [ 1885.787564][ T5310] file_dirty 0 [ 1885.787564][ T5310] file_writeback 0 [ 1885.787564][ T5310] anon_thp 4194304 [ 1885.787564][ T5310] inactive_anon 131072 [ 1885.787564][ T5310] active_anon 4255744 [ 1885.787564][ T5310] inactive_file 0 [ 1885.787564][ T5310] active_file 0 [ 1885.787564][ T5310] unevictable 0 [ 1885.787564][ T5310] slab_reclaimable 135168 [ 1885.787564][ T5310] slab_unreclaimable 430080 [ 1885.787564][ T5310] pgfault 90486 [ 1885.787564][ T5310] pgmajfault 0 [ 1885.787564][ T5310] workingset_refault 0 [ 1885.787564][ T5310] workingset_activate 0 [ 1885.787564][ T5310] workingset_nodereclaim 0 [ 1885.787564][ T5310] pgrefill 240 [ 1885.787564][ T5310] pgscan 242 [ 1885.787564][ T5310] pgsteal 35 [ 1885.787564][ T5310] pgactivate 198 [ 1885.882342][ T5310] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5309,uid=0 [ 1885.901388][ T5310] Memory cgroup out of memory: Killed process 5309 (syz-executor.1) total-vm:72712kB, anon-rss:4188kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1885.921990][ T5292] team0: Port device team_slave_0 added [ 1885.934595][ T1065] oom_reaper: reaped process 5309 (syz-executor.1), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 1886.061536][ T5290] device hsr_slave_0 entered promiscuous mode [ 1886.100174][ T5290] device hsr_slave_1 entered promiscuous mode [ 1886.139727][ T5290] debugfs: Directory 'hsr0' with parent '/' already present! [ 1886.155632][ T5292] team0: Port device team_slave_1 added [ 1886.245510][ T5300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1886.257458][ T5300] bridge0: port 1(bridge_slave_0) entered disabled state 15:20:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=""/245, 0x0, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:20:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 1886.286626][ T5300] device bridge_slave_0 entered promiscuous mode [ 1886.351729][ T5264] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1886.371637][ T5264] CPU: 1 PID: 5264 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1886.380733][ T5264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1886.390819][ T5264] Call Trace: [ 1886.394164][ T5264] dump_stack+0x172/0x1f0 [ 1886.398532][ T5264] dump_header+0x177/0x1152 [ 1886.403060][ T5264] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1886.408902][ T5264] ? ___ratelimit+0x2c8/0x595 [ 1886.413617][ T5264] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1886.419497][ T5264] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1886.424813][ T5264] ? trace_hardirqs_on+0x67/0x240 [ 1886.429870][ T5264] ? pagefault_out_of_memory+0x11c/0x11c [ 1886.435549][ T5264] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1886.441399][ T5264] ? ___ratelimit+0x60/0x595 [ 1886.446027][ T5264] ? do_raw_spin_unlock+0x57/0x270 [ 1886.451187][ T5264] oom_kill_process.cold+0x10/0x15 [ 1886.456347][ T5264] out_of_memory+0x334/0x1340 [ 1886.461076][ T5264] ? lock_downgrade+0x920/0x920 [ 1886.465983][ T5264] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1886.471826][ T5264] ? oom_killer_disable+0x280/0x280 [ 1886.471852][ T5264] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1886.471867][ T5264] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1886.471888][ T5264] ? do_raw_spin_unlock+0x57/0x270 [ 1886.493433][ T5264] ? _raw_spin_unlock+0x2d/0x50 [ 1886.498335][ T5264] try_charge+0xf4b/0x1440 [ 1886.502796][ T5264] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1886.508380][ T5264] ? percpu_ref_tryget_live+0x111/0x290 [ 1886.513956][ T5264] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1886.513972][ T5264] ? __kasan_check_read+0x11/0x20 [ 1886.513989][ T5264] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1886.514004][ T5264] mem_cgroup_try_charge+0x136/0x590 [ 1886.514017][ T5264] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1886.514032][ T5264] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1886.514049][ T5264] wp_page_copy+0x41e/0x1590 [ 1886.514064][ T5264] ? find_held_lock+0x35/0x130 [ 1886.514084][ T5264] ? pmd_pfn+0x1d0/0x1d0 [ 1886.542465][ T5264] ? lock_downgrade+0x920/0x920 [ 1886.566541][ T5264] ? swp_swapcount+0x540/0x540 [ 1886.571319][ T5264] ? __kasan_check_read+0x11/0x20 [ 1886.571333][ T5264] ? do_raw_spin_unlock+0x57/0x270 [ 1886.571350][ T5264] do_wp_page+0x499/0x14d0 [ 1886.571369][ T5264] ? finish_mkwrite_fault+0x570/0x570 [ 1886.591302][ T5264] __handle_mm_fault+0x22f1/0x3f20 [ 1886.596455][ T5264] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1886.602029][ T5264] ? __kasan_check_read+0x11/0x20 [ 1886.607058][ T5264] handle_mm_fault+0x1b5/0x6c0 [ 1886.607076][ T5264] __do_page_fault+0x536/0xdd0 [ 1886.607097][ T5264] do_page_fault+0x38/0x590 [ 1886.607112][ T5264] page_fault+0x39/0x40 [ 1886.607124][ T5264] RIP: 0033:0x430956 [ 1886.607137][ T5264] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 46 64 00 85 c0 0f 84 [ 1886.607143][ T5264] RSP: 002b:00007fff3ac47460 EFLAGS: 00010206 [ 1886.607154][ T5264] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 1886.607161][ T5264] RDX: 0000555556720930 RSI: 0000555556728970 RDI: 0000000000000003 [ 1886.607169][ T5264] RBP: 0000000000008041 R08: 0000000000000001 R09: 000055555671f940 [ 1886.607178][ T5264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 1886.607185][ T5264] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 1886.735694][ T5292] device hsr_slave_0 entered promiscuous mode [ 1886.742022][ T5264] memory: usage 588kB, limit 0kB, failcnt 1650 [ 1886.774867][ T5264] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1886.781785][ T5264] Memory cgroup stats for /syz1: [ 1886.781923][ T5264] anon 65536 [ 1886.781923][ T5264] file 0 [ 1886.781923][ T5264] kernel_stack 0 [ 1886.781923][ T5264] slab 565248 [ 1886.781923][ T5264] sock 0 [ 1886.781923][ T5264] shmem 0 [ 1886.781923][ T5264] file_mapped 0 [ 1886.781923][ T5264] file_dirty 0 [ 1886.781923][ T5264] file_writeback 0 [ 1886.781923][ T5264] anon_thp 0 [ 1886.781923][ T5264] inactive_anon 131072 [ 1886.781923][ T5264] active_anon 65536 [ 1886.781923][ T5264] inactive_file 0 [ 1886.781923][ T5264] active_file 0 [ 1886.781923][ T5264] unevictable 0 [ 1886.781923][ T5264] slab_reclaimable 135168 [ 1886.781923][ T5264] slab_unreclaimable 430080 [ 1886.781923][ T5264] pgfault 90486 [ 1886.781923][ T5264] pgmajfault 0 [ 1886.781923][ T5264] workingset_refault 0 [ 1886.781923][ T5264] workingset_activate 0 [ 1886.781923][ T5264] workingset_nodereclaim 0 [ 1886.781923][ T5264] pgrefill 240 [ 1886.781923][ T5264] pgscan 242 [ 1886.781923][ T5264] pgsteal 35 [ 1886.781923][ T5264] pgactivate 198 [ 1886.879116][ T5292] device hsr_slave_1 entered promiscuous mode [ 1886.926240][ T5292] debugfs: Directory 'hsr0' with parent '/' already present! [ 1886.960812][ T5300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1886.970300][ T5300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1886.999473][ T5264] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5264,uid=0 [ 1887.027832][ T5300] device bridge_slave_1 entered promiscuous mode [ 1887.080871][ T5264] Memory cgroup out of memory: Killed process 5264 (syz-executor.1) total-vm:72448kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:0 [ 1887.102957][ T5313] IPVS: ftp: loaded support on port[0] = 21 [ 1887.113013][ T5300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1887.140603][ T5300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 15:20:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=""/245, 0x0, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 1887.764406][ T5290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1887.786650][ T5300] team0: Port device team_slave_0 added [ 1887.832030][ T5290] 8021q: adding VLAN 0 to HW filter on device team0 [ 1887.847472][ T5300] team0: Port device team_slave_1 added [ 1887.869342][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 15:20:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=""/245, 0x0, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 1887.889414][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1887.997932][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1888.027386][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1888.036104][ T2231] bridge0: port 1(bridge_slave_0) entered blocking state [ 1888.043175][ T2231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1888.060867][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1888.073335][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1888.110391][ T2231] bridge0: port 2(bridge_slave_1) entered blocking state [ 1888.117617][ T2231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1888.154240][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1888.184220][ T5292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1888.250033][ T5300] device hsr_slave_0 entered promiscuous mode [ 1888.287864][ T5300] device hsr_slave_1 entered promiscuous mode [ 1888.327773][ T5300] debugfs: Directory 'hsr0' with parent '/' already present! [ 1888.363179][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1888.371578][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1888.390708][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1888.416206][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1888.450741][ T5292] 8021q: adding VLAN 0 to HW filter on device team0 [ 1888.485664][ T5313] chnl_net:caif_netlink_parms(): no params data found [ 1888.504701][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1888.513535][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1888.522948][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1888.533867][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1888.542573][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1888.551838][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1888.559460][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1888.572131][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1888.581312][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1888.589779][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1888.596917][ T5246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1888.604670][ T2583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1888.633111][ T5315] IPVS: ftp: loaded support on port[0] = 21 [ 1888.646812][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1888.664977][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1888.674304][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1888.683129][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1888.692664][ T5301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1888.699714][ T5301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1888.707415][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1888.716133][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1888.727278][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1888.767343][ T5313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1888.776295][ T5313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1888.785937][ T5313] device bridge_slave_0 entered promiscuous mode [ 1888.794613][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1888.804042][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1888.831626][ T5313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1888.841243][ T5313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1888.849731][ T5313] device bridge_slave_1 entered promiscuous mode [ 1888.865907][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1888.873899][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1888.882716][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1888.891282][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1888.899749][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1888.908307][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1888.916821][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1888.956357][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1888.987648][ T5313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1889.000666][ T5313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1889.031980][ T5290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1889.051709][ T5292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1889.100326][ T5313] team0: Port device team_slave_0 added [ 1889.120889][ T5300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1889.139275][ T5313] team0: Port device team_slave_1 added [ 1889.309373][ T5313] device hsr_slave_0 entered promiscuous mode [ 1889.356943][ T5313] device hsr_slave_1 entered promiscuous mode [ 1889.396670][ T5313] debugfs: Directory 'hsr0' with parent '/' already present! [ 1889.407349][ T5315] chnl_net:caif_netlink_parms(): no params data found [ 1889.458364][ T5300] 8021q: adding VLAN 0 to HW filter on device team0 [ 1889.494188][ T5332] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1889.512395][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1889.520625][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1889.528830][ T5332] CPU: 0 PID: 5332 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1889.537865][ T5332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1889.547922][ T5332] Call Trace: [ 1889.551227][ T5332] dump_stack+0x172/0x1f0 [ 1889.555570][ T5332] dump_header+0x177/0x1152 [ 1889.560089][ T5332] ? pagefault_out_of_memory+0x11c/0x11c [ 1889.565909][ T5332] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1889.571721][ T5332] ? ___ratelimit+0x60/0x595 [ 1889.576313][ T5332] ? do_raw_spin_unlock+0x57/0x270 [ 1889.581437][ T5332] oom_kill_process.cold+0x10/0x15 [ 1889.586555][ T5332] out_of_memory+0x334/0x1340 [ 1889.591243][ T5332] ? __sched_text_start+0x8/0x8 [ 1889.596096][ T5332] ? oom_killer_disable+0x280/0x280 [ 1889.601311][ T5332] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1889.606861][ T5332] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1889.612507][ T5332] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1889.618308][ T5332] ? cgroup_file_notify+0x140/0x1b0 [ 1889.623498][ T5332] memory_max_write+0x262/0x3a0 [ 1889.628339][ T5332] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1889.635089][ T5332] ? cgroup_file_write+0x86/0x790 [ 1889.640111][ T5332] cgroup_file_write+0x241/0x790 [ 1889.645044][ T5332] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1889.651795][ T5332] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1889.657416][ T5332] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1889.663047][ T5332] kernfs_fop_write+0x2b8/0x480 [ 1889.667883][ T5332] __vfs_write+0x8a/0x110 [ 1889.672205][ T5332] ? kernfs_fop_open+0xd80/0xd80 [ 1889.677140][ T5332] vfs_write+0x268/0x5d0 [ 1889.681422][ T5332] ksys_write+0x14f/0x290 [ 1889.685738][ T5332] ? __ia32_sys_read+0xb0/0xb0 [ 1889.690515][ T5332] ? do_syscall_64+0x26/0x760 [ 1889.695178][ T5332] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1889.701242][ T5332] ? do_syscall_64+0x26/0x760 [ 1889.705912][ T5332] __x64_sys_write+0x73/0xb0 [ 1889.710491][ T5332] do_syscall_64+0xfa/0x760 [ 1889.714978][ T5332] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1889.720882][ T5332] RIP: 0033:0x459879 [ 1889.724758][ T5332] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1889.744345][ T5332] RSP: 002b:00007efe810ddc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1889.752737][ T5332] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1889.760691][ T5332] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 1889.768643][ T5332] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1889.776597][ T5332] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efe810de6d4 [ 1889.784562][ T5332] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1889.840644][ T5332] memory: usage 4900kB, limit 0kB, failcnt 717 [ 1889.847085][ T5332] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1889.866212][ T5332] Memory cgroup stats for /syz3: [ 1889.868313][ T5332] anon 4370432 [ 1889.868313][ T5332] file 0 [ 1889.868313][ T5332] kernel_stack 65536 [ 1889.868313][ T5332] slab 405504 [ 1889.868313][ T5332] sock 0 [ 1889.868313][ T5332] shmem 0 [ 1889.868313][ T5332] file_mapped 0 [ 1889.868313][ T5332] file_dirty 0 [ 1889.868313][ T5332] file_writeback 0 [ 1889.868313][ T5332] anon_thp 4194304 [ 1889.868313][ T5332] inactive_anon 0 [ 1889.868313][ T5332] active_anon 4370432 [ 1889.868313][ T5332] inactive_file 0 [ 1889.868313][ T5332] active_file 0 [ 1889.868313][ T5332] unevictable 0 [ 1889.868313][ T5332] slab_reclaimable 135168 [ 1889.868313][ T5332] slab_unreclaimable 270336 [ 1889.868313][ T5332] pgfault 35145 [ 1889.868313][ T5332] pgmajfault 0 [ 1889.868313][ T5332] workingset_refault 0 [ 1889.868313][ T5332] workingset_activate 0 [ 1889.868313][ T5332] workingset_nodereclaim 0 [ 1889.868313][ T5332] pgrefill 33 [ 1889.868313][ T5332] pgscan 66 [ 1889.868313][ T5332] pgsteal 0 [ 1889.868313][ T5332] pgactivate 0 [ 1889.967267][ T5332] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5331,uid=0 [ 1890.002262][ T5332] Memory cgroup out of memory: Killed process 5331 (syz-executor.3) total-vm:72580kB, anon-rss:4188kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:147456kB oom_score_adj:1000 [ 1890.026696][ T1065] oom_reaper: reaped process 5331 (syz-executor.3), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 1890.038513][ T5328] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1890.054903][ T5328] CPU: 1 PID: 5328 Comm: syz-executor.4 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1890.063982][ T5328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1890.074038][ T5328] Call Trace: [ 1890.077368][ T5328] dump_stack+0x172/0x1f0 [ 1890.081713][ T5328] dump_header+0x177/0x1152 [ 1890.086262][ T5328] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1890.092079][ T5328] ? ___ratelimit+0x2c8/0x595 [ 1890.096809][ T5328] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1890.102638][ T5328] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1890.107974][ T5328] ? trace_hardirqs_on+0x67/0x240 [ 1890.113026][ T5328] ? pagefault_out_of_memory+0x11c/0x11c [ 1890.118671][ T5328] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1890.124497][ T5328] ? ___ratelimit+0x60/0x595 [ 1890.129096][ T5328] ? do_raw_spin_unlock+0x57/0x270 [ 1890.134216][ T5328] oom_kill_process.cold+0x10/0x15 [ 1890.139342][ T5328] out_of_memory+0x334/0x1340 [ 1890.144028][ T5328] ? oom_killer_disable+0x280/0x280 [ 1890.149239][ T5328] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1890.154793][ T5328] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1890.160438][ T5328] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1890.166270][ T5328] ? cgroup_file_notify+0x140/0x1b0 [ 1890.171495][ T5328] memory_max_write+0x262/0x3a0 [ 1890.176439][ T5328] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1890.183223][ T5328] ? cgroup_file_write+0x86/0x790 [ 1890.188252][ T5328] cgroup_file_write+0x241/0x790 [ 1890.193279][ T5328] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1890.200042][ T5328] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1890.205690][ T5328] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1890.211326][ T5328] kernfs_fop_write+0x2b8/0x480 [ 1890.216187][ T5328] __vfs_write+0x8a/0x110 [ 1890.220519][ T5328] ? kernfs_fop_open+0xd80/0xd80 [ 1890.225464][ T5328] vfs_write+0x268/0x5d0 [ 1890.229709][ T5328] ksys_write+0x14f/0x290 [ 1890.234041][ T5328] ? __ia32_sys_read+0xb0/0xb0 [ 1890.238820][ T5328] ? do_syscall_64+0x26/0x760 [ 1890.243504][ T5328] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1890.249568][ T5328] ? do_syscall_64+0x26/0x760 [ 1890.254263][ T5328] __x64_sys_write+0x73/0xb0 [ 1890.258874][ T5328] do_syscall_64+0xfa/0x760 [ 1890.263408][ T5328] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1890.269317][ T5328] RIP: 0033:0x459879 [ 1890.273238][ T5328] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1890.292858][ T5328] RSP: 002b:00007f3f51d49c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1890.301277][ T5328] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1890.309252][ T5328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1890.317246][ T5328] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1890.325224][ T5328] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3f51d4a6d4 [ 1890.333195][ T5328] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1890.566771][ T5328] memory: usage 3824kB, limit 0kB, failcnt 955 [ 1890.573105][ T5328] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1890.580540][ T5328] Memory cgroup stats for /syz4: [ 1890.581706][ T5328] anon 2179072 [ 1890.581706][ T5328] file 0 [ 1890.581706][ T5328] kernel_stack 0 [ 1890.581706][ T5328] slab 1646592 [ 1890.581706][ T5328] sock 12288 [ 1890.581706][ T5328] shmem 0 [ 1890.581706][ T5328] file_mapped 0 [ 1890.581706][ T5328] file_dirty 0 [ 1890.581706][ T5328] file_writeback 0 [ 1890.581706][ T5328] anon_thp 2097152 [ 1890.581706][ T5328] inactive_anon 0 [ 1890.581706][ T5328] active_anon 2179072 [ 1890.581706][ T5328] inactive_file 0 [ 1890.581706][ T5328] active_file 0 [ 1890.581706][ T5328] unevictable 0 [ 1890.581706][ T5328] slab_reclaimable 540672 [ 1890.581706][ T5328] slab_unreclaimable 1105920 [ 1890.581706][ T5328] pgfault 46233 [ 1890.581706][ T5328] pgmajfault 0 [ 1890.581706][ T5328] workingset_refault 0 [ 1890.581706][ T5328] workingset_activate 0 [ 1890.581706][ T5328] workingset_nodereclaim 0 15:20:51 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=""/245, 0x0, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r5, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=""/31, 0x1f}}, 0x10) write$cgroup_int(r7, 0x0, 0x0) [ 1890.581706][ T5328] pgrefill 85 [ 1890.581706][ T5328] pgscan 70 [ 1890.581706][ T5328] pgsteal 33 [ 1890.581706][ T5328] pgactivate 33 [ 1890.693369][ T5328] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=5327,uid=0 [ 1890.731003][ T5328] Memory cgroup out of memory: Killed process 5327 (syz-executor.4) total-vm:72580kB, anon-rss:2184kB, file-rss:35848kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1890.753010][ T1065] oom_reaper: reaped process 5327 (syz-executor.4), now anon-rss:0kB, file-rss:34888kB, shmem-rss:0kB [ 1890.764484][ T5292] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1890.775737][ T5292] CPU: 0 PID: 5292 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1890.784777][ T5292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1890.794853][ T5292] Call Trace: [ 1890.798158][ T5292] dump_stack+0x172/0x1f0 [ 1890.802492][ T5292] dump_header+0x177/0x1152 [ 1890.807150][ T5292] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1890.812985][ T5292] ? ___ratelimit+0x2c8/0x595 [ 1890.817690][ T5292] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1890.823505][ T5292] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1890.828795][ T5292] ? trace_hardirqs_on+0x67/0x240 [ 1890.834171][ T5292] ? pagefault_out_of_memory+0x11c/0x11c [ 1890.839808][ T5292] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1890.845625][ T5292] ? ___ratelimit+0x60/0x595 [ 1890.850218][ T5292] ? do_raw_spin_unlock+0x57/0x270 [ 1890.855336][ T5292] oom_kill_process.cold+0x10/0x15 [ 1890.860454][ T5292] out_of_memory+0x334/0x1340 [ 1890.865129][ T5292] ? lock_downgrade+0x920/0x920 [ 1890.869991][ T5292] ? oom_killer_disable+0x280/0x280 [ 1890.875213][ T5292] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1890.880771][ T5292] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1890.886415][ T5292] ? do_raw_spin_unlock+0x57/0x270 [ 1890.891532][ T5292] ? _raw_spin_unlock+0x2d/0x50 [ 1890.896394][ T5292] try_charge+0xf4b/0x1440 [ 1890.900819][ T5292] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1890.906372][ T5292] ? percpu_ref_tryget_live+0x111/0x290 [ 1890.911925][ T5292] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1890.918178][ T5292] ? __kasan_check_read+0x11/0x20 [ 1890.923208][ T5292] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1890.928759][ T5292] mem_cgroup_try_charge+0x136/0x590 [ 1890.934067][ T5292] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1890.940318][ T5292] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1890.945950][ T5292] __handle_mm_fault+0x1e34/0x3f20 [ 1890.951081][ T5292] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1890.956659][ T5292] ? __kasan_check_read+0x11/0x20 [ 1890.961718][ T5292] handle_mm_fault+0x1b5/0x6c0 [ 1890.966499][ T5292] __do_page_fault+0x536/0xdd0 [ 1890.971274][ T5292] do_page_fault+0x38/0x590 [ 1890.975788][ T5292] page_fault+0x39/0x40 [ 1890.979940][ T5292] RIP: 0033:0x42fdaa [ 1890.983833][ T5292] Code: 36 4e 00 bf 30 3e 4e 00 e8 e3 b8 ff ff 0f 1f 00 48 83 fe bf 0f 87 63 08 00 00 48 89 f0 41 57 41 56 48 83 c0 17 41 55 41 54 55 <53> 48 89 c5 48 83 e5 f0 48 89 fb 48 81 ec 98 00 00 00 48 83 f8 20 [ 1891.003435][ T5292] RSP: 002b:00007ffdc530e000 EFLAGS: 00010206 [ 1891.009505][ T5292] RAX: 0000000000008047 RBX: 0000000000715640 RCX: 0000000000458be4 [ 1891.017485][ T5292] RDX: 00007ffdc530e050 RSI: 0000000000008030 RDI: 0000000000715640 [ 1891.025457][ T5292] RBP: 0000000000008030 R08: 0000000000000001 R09: 0000555557072940 [ 1891.033428][ T5292] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdc530f230 [ 1891.041408][ T5292] R13: 00007ffdc530f220 R14: 0000000000000000 R15: 00007ffdc530f230 [ 1891.052176][ T5292] memory: usage 512kB, limit 0kB, failcnt 725 [ 1891.058394][ T5292] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1891.066502][ T5292] Memory cgroup stats for /syz3: [ 1891.066612][ T5292] anon 110592 [ 1891.066612][ T5292] file 0 [ 1891.066612][ T5292] kernel_stack 0 [ 1891.066612][ T5292] slab 405504 [ 1891.066612][ T5292] sock 0 [ 1891.066612][ T5292] shmem 0 [ 1891.066612][ T5292] file_mapped 0 [ 1891.066612][ T5292] file_dirty 0 [ 1891.066612][ T5292] file_writeback 0 [ 1891.066612][ T5292] anon_thp 0 [ 1891.066612][ T5292] inactive_anon 0 [ 1891.066612][ T5292] active_anon 110592 [ 1891.066612][ T5292] inactive_file 0 [ 1891.066612][ T5292] active_file 0 [ 1891.066612][ T5292] unevictable 0 [ 1891.066612][ T5292] slab_reclaimable 135168 [ 1891.066612][ T5292] slab_unreclaimable 270336 [ 1891.066612][ T5292] pgfault 35145 [ 1891.066612][ T5292] pgmajfault 0 [ 1891.066612][ T5292] workingset_refault 0 [ 1891.066612][ T5292] workingset_activate 0 [ 1891.066612][ T5292] workingset_nodereclaim 0 [ 1891.066612][ T5292] pgrefill 33 [ 1891.066612][ T5292] pgscan 66 [ 1891.066612][ T5292] pgsteal 0 [ 1891.066612][ T5292] pgactivate 0 [ 1891.066612][ T5292] pgdeactivate 33 [ 1891.181579][ T5292] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5292,uid=0 [ 1891.210273][ T5292] Memory cgroup out of memory: Killed process 5292 (syz-executor.3) total-vm:72448kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:0 [ 1891.239708][ T1065] oom_reaper: reaped process 5292 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 15:20:51 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a000000c2b80c000000000000000000000000000000000000000000000000000000000016000000000000000000203f00000000000000003b38e967ac8206eaae86b97eec0b2bed1ee23364b10d6aad5102000000e2a1db3c6a31e30dee4afc66d2442805201c39389a804c41c2993fc67e8a146045e14a8a0800550e6a25c0ef65f6ec71f0088f5aba2f00000000a1ee6ece53c67385b883a36ad24a7dce0873c362bd726a8ab11b0a0b00e77e6c16189cfa16cbe01a4ce411378eaab7372dab5eef84c31b3cad868a53e6f5e69746a7a0beda0686d2a239b10986e5c81eae45e3a25b942b8da11edb578b453acac03a9d344880c2b3ab5db1d57f25833d4d4c13eef0e0e62be2050000003c32984c6c4b2b9c33d8a624cea95c3b3c6dd873569cf4776fc5161e34cf97c9c841cb2e962007a9a96549e3d267ec17e29ed64bd6120813f9f0344e139506701e8fdedb60a69b5e4d0c67bda000000400000000000000000000000095689ab0049f220751a14ac65b1e535973781eb34c01e477220accf5eec7a3eece62d3ab636ce33c58a3cb118a6068794a8d334f9bb49926440714540bf60fdf36f3e90ee64b300f4628c3b67108e662b8c5e61d9c04013795b5708103b7f9d19411bfa5e9580a93b8c2462fbbb5ee0d67d69471a7bd22d59ec9eb3a13"], 0x1) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) open(0x0, 0x0, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x110, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x208) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x20, 0x2, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffff8b, 0x0, 0x801, 0x0, 0x0, 0x4fd9, 0xf0, 0x400, 0x3b, 0x0, 0x5, 0xf799, 0x4, 0x6, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x10000, 0x0, 0x5, 0x6, 0x6}) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000400)='./file0\x00', 0x0) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) accept$alg(0xffffffffffffffff, 0x0, 0x0) [ 1891.420272][ T5290] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1891.430867][ T5290] CPU: 0 PID: 5290 Comm: syz-executor.4 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1891.439904][ T5290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1891.449964][ T5290] Call Trace: [ 1891.453267][ T5290] dump_stack+0x172/0x1f0 [ 1891.457607][ T5290] dump_header+0x177/0x1152 [ 1891.462117][ T5290] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1891.467927][ T5290] ? ___ratelimit+0x2c8/0x595 [ 1891.472602][ T5290] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1891.478407][ T5290] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1891.483692][ T5290] ? trace_hardirqs_on+0x67/0x240 [ 1891.488717][ T5290] ? pagefault_out_of_memory+0x11c/0x11c [ 1891.494349][ T5290] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1891.500152][ T5290] ? ___ratelimit+0x60/0x595 [ 1891.504776][ T5290] ? do_raw_spin_unlock+0x57/0x270 [ 1891.509927][ T5290] oom_kill_process.cold+0x10/0x15 [ 1891.515022][ T5290] out_of_memory+0x334/0x1340 [ 1891.519678][ T5290] ? lock_downgrade+0x920/0x920 [ 1891.524577][ T5290] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1891.530440][ T5290] ? oom_killer_disable+0x280/0x280 [ 1891.535628][ T5290] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1891.541157][ T5290] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1891.546774][ T5290] ? do_raw_spin_unlock+0x57/0x270 [ 1891.551866][ T5290] ? _raw_spin_unlock+0x2d/0x50 [ 1891.556714][ T5290] try_charge+0xf4b/0x1440 [ 1891.561116][ T5290] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1891.566639][ T5290] ? percpu_ref_tryget_live+0x111/0x290 [ 1891.572182][ T5290] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1891.578403][ T5290] ? __kasan_check_read+0x11/0x20 [ 1891.583411][ T5290] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1891.588939][ T5290] mem_cgroup_try_charge+0x136/0x590 [ 1891.594204][ T5290] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1891.600426][ T5290] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1891.606053][ T5290] wp_page_copy+0x41e/0x1590 [ 1891.610624][ T5290] ? find_held_lock+0x35/0x130 [ 1891.615369][ T5290] ? pmd_pfn+0x1d0/0x1d0 [ 1891.619614][ T5290] ? lock_downgrade+0x920/0x920 [ 1891.624445][ T5290] ? swp_swapcount+0x540/0x540 [ 1891.629189][ T5290] ? __kasan_check_read+0x11/0x20 [ 1891.634195][ T5290] ? do_raw_spin_unlock+0x57/0x270 [ 1891.639285][ T5290] do_wp_page+0x499/0x14d0 [ 1891.643690][ T5290] ? finish_mkwrite_fault+0x570/0x570 [ 1891.649045][ T5290] __handle_mm_fault+0x22f1/0x3f20 [ 1891.654136][ T5290] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1891.659668][ T5290] ? __kasan_check_read+0x11/0x20 [ 1891.664675][ T5290] handle_mm_fault+0x1b5/0x6c0 [ 1891.669416][ T5290] __do_page_fault+0x536/0xdd0 [ 1891.674183][ T5290] do_page_fault+0x38/0x590 [ 1891.678666][ T5290] page_fault+0x39/0x40 [ 1891.682796][ T5290] RIP: 0033:0x430956 [ 1891.686684][ T5290] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 46 64 00 85 c0 0f 84 [ 1891.706261][ T5290] RSP: 002b:00007ffd4efd1420 EFLAGS: 00010206 [ 1891.712302][ T5290] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 1891.720249][ T5290] RDX: 00005555572eb930 RSI: 00005555572f3970 RDI: 0000000000000003 [ 1891.728200][ T5290] RBP: 0000000000008041 R08: 0000000000000001 R09: 00005555572ea940 [ 1891.736161][ T5290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 1891.744111][ T5290] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 1891.753980][ T5290] memory: usage 1492kB, limit 0kB, failcnt 967 [ 1891.760269][ T5290] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1891.774506][ T5290] Memory cgroup stats for /syz4: [ 1891.774607][ T5290] anon 77824 [ 1891.774607][ T5290] file 0 [ 1891.774607][ T5290] kernel_stack 0 [ 1891.774607][ T5290] slab 1646592 [ 1891.774607][ T5290] sock 12288 [ 1891.774607][ T5290] shmem 0 [ 1891.774607][ T5290] file_mapped 0 [ 1891.774607][ T5290] file_dirty 0 [ 1891.774607][ T5290] file_writeback 0 [ 1891.774607][ T5290] anon_thp 0 [ 1891.774607][ T5290] inactive_anon 0 [ 1891.774607][ T5290] active_anon 77824 [ 1891.774607][ T5290] inactive_file 0 [ 1891.774607][ T5290] active_file 0 [ 1891.774607][ T5290] unevictable 0 [ 1891.774607][ T5290] slab_reclaimable 540672 [ 1891.774607][ T5290] slab_unreclaimable 1105920 [ 1891.774607][ T5290] pgfault 46233 [ 1891.774607][ T5290] pgmajfault 0 [ 1891.774607][ T5290] workingset_refault 0 [ 1891.774607][ T5290] workingset_activate 0 [ 1891.774607][ T5290] workingset_nodereclaim 0 [ 1891.774607][ T5290] pgrefill 85 [ 1891.774607][ T5290] pgscan 70 [ 1891.774607][ T5290] pgsteal 33 [ 1891.774607][ T5290] pgactivate 33 [ 1891.869072][ T5290] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=5290,uid=0 [ 1891.884564][ T5290] Memory cgroup out of memory: Killed process 5290 (syz-executor.4) total-vm:72448kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:0 [ 1891.903354][ T1065] oom_reaper: reaped process 5290 (syz-executor.4), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 1891.955231][ T5334] IPVS: ftp: loaded support on port[0] = 21 [ 1891.960876][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1891.971072][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1891.980059][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1891.987117][ T5246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1891.996254][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1892.005036][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1892.013802][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1892.020948][ T5246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1892.028871][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1892.044609][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 15:20:53 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f00000002c0)=""/245, 0x26, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r5, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=""/31, 0x1f}}, 0x10) write$cgroup_int(r7, 0x0, 0x0) 15:20:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000000)) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1892.922476][ T5315] bridge0: port 1(bridge_slave_0) entered blocking state [ 1892.930974][ T5315] bridge0: port 1(bridge_slave_0) entered disabled state [ 1892.940118][ T5315] device bridge_slave_0 entered promiscuous mode [ 1892.948373][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1893.514042][ T5315] bridge0: port 2(bridge_slave_1) entered blocking state [ 1893.521410][ T5315] bridge0: port 2(bridge_slave_1) entered disabled state [ 1893.529165][ T5315] device bridge_slave_1 entered promiscuous mode [ 1893.557178][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1893.565859][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1893.574392][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1893.586151][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1893.595031][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1893.603587][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1893.621063][ T5315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1893.640180][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1893.649251][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1893.657983][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1893.668329][ T5315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1894.153168][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1894.201102][ T5315] team0: Port device team_slave_0 added [ 1894.213126][ T5315] team0: Port device team_slave_1 added [ 1894.233799][ T5300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1894.743051][ T5313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1894.814717][ T5315] device hsr_slave_0 entered promiscuous mode [ 1894.857615][ T5315] device hsr_slave_1 entered promiscuous mode [ 1894.912468][ T5315] debugfs: Directory 'hsr0' with parent '/' already present! [ 1895.417791][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1895.425696][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1895.435678][ T5313] 8021q: adding VLAN 0 to HW filter on device team0 [ 1895.696679][ T5342] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1895.707947][ T5342] CPU: 1 PID: 5342 Comm: syz-executor.5 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1895.716981][ T5342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1895.727048][ T5342] Call Trace: [ 1895.730352][ T5342] dump_stack+0x172/0x1f0 [ 1895.734694][ T5342] dump_header+0x177/0x1152 [ 1895.739211][ T5342] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1895.745013][ T5342] ? ___ratelimit+0x2c8/0x595 [ 1895.749690][ T5342] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1895.755509][ T5342] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1895.760803][ T5342] ? trace_hardirqs_on+0x67/0x240 [ 1895.765827][ T5342] ? pagefault_out_of_memory+0x11c/0x11c [ 1895.771474][ T5342] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1895.777282][ T5342] ? ___ratelimit+0x60/0x595 [ 1895.781917][ T5342] ? do_raw_spin_unlock+0x57/0x270 [ 1895.787044][ T5342] oom_kill_process.cold+0x10/0x15 [ 1895.792169][ T5342] out_of_memory+0x334/0x1340 [ 1895.796852][ T5342] ? __sched_text_start+0x8/0x8 [ 1895.801724][ T5342] ? oom_killer_disable+0x280/0x280 [ 1895.806959][ T5342] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1895.812518][ T5342] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1895.818176][ T5342] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1895.824003][ T5342] ? cgroup_file_notify+0x140/0x1b0 [ 1895.829214][ T5342] memory_max_write+0x262/0x3a0 [ 1895.834073][ T5342] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1895.840844][ T5342] ? lock_acquire+0x190/0x410 [ 1895.845527][ T5342] ? kernfs_fop_write+0x227/0x480 [ 1895.850572][ T5342] cgroup_file_write+0x241/0x790 [ 1895.855528][ T5342] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1895.862311][ T5342] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1895.867956][ T5342] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1895.873640][ T5342] kernfs_fop_write+0x2b8/0x480 [ 1895.878511][ T5342] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1895.884766][ T5342] __vfs_write+0x8a/0x110 [ 1895.889107][ T5342] ? kernfs_fop_open+0xd80/0xd80 [ 1895.894059][ T5342] vfs_write+0x268/0x5d0 [ 1895.898310][ T5342] ksys_write+0x14f/0x290 [ 1895.902641][ T5342] ? __ia32_sys_read+0xb0/0xb0 [ 1895.907410][ T5342] ? do_syscall_64+0x26/0x760 [ 1895.912102][ T5342] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1895.918198][ T5342] ? do_syscall_64+0x26/0x760 [ 1895.922888][ T5342] __x64_sys_write+0x73/0xb0 [ 1895.927493][ T5342] do_syscall_64+0xfa/0x760 [ 1895.932131][ T5342] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1895.938038][ T5342] RIP: 0033:0x459879 [ 1895.941951][ T5342] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1895.961568][ T5342] RSP: 002b:00007f1d15350c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1895.969985][ T5342] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1895.977965][ T5342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1895.985940][ T5342] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1895.993918][ T5342] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d153516d4 [ 1896.001896][ T5342] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1896.018791][ T5342] memory: usage 5096kB, limit 0kB, failcnt 489 [ 1896.041959][ T5342] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1896.048937][ T5342] Memory cgroup stats for /syz5: [ 1896.050355][ T5342] anon 4255744 [ 1896.050355][ T5342] file 176128 [ 1896.050355][ T5342] kernel_stack 65536 [ 1896.050355][ T5342] slab 692224 [ 1896.050355][ T5342] sock 0 [ 1896.050355][ T5342] shmem 172032 [ 1896.050355][ T5342] file_mapped 0 [ 1896.050355][ T5342] file_dirty 0 [ 1896.050355][ T5342] file_writeback 0 [ 1896.050355][ T5342] anon_thp 4194304 [ 1896.050355][ T5342] inactive_anon 143360 [ 1896.050355][ T5342] active_anon 4255744 [ 1896.050355][ T5342] inactive_file 0 [ 1896.050355][ T5342] active_file 135168 [ 1896.050355][ T5342] unevictable 131072 [ 1896.050355][ T5342] slab_reclaimable 405504 [ 1896.050355][ T5342] slab_unreclaimable 286720 [ 1896.050355][ T5342] pgfault 59697 [ 1896.050355][ T5342] pgmajfault 0 [ 1896.050355][ T5342] workingset_refault 0 [ 1896.050355][ T5342] workingset_activate 0 [ 1896.050355][ T5342] workingset_nodereclaim 0 [ 1896.050355][ T5342] pgrefill 734 [ 1896.050355][ T5342] pgscan 744 [ 1896.050355][ T5342] pgsteal 35 [ 1896.153316][ T5342] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=5341,uid=0 [ 1896.170475][ T5342] Memory cgroup out of memory: Killed process 5341 (syz-executor.5) total-vm:72580kB, anon-rss:4188kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:147456kB oom_score_adj:1000 [ 1896.193341][ T1065] oom_reaper: reaped process 5341 (syz-executor.5), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 1896.456336][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1896.465017][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1896.491897][ T1996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1896.499046][ T1996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1896.507338][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1896.516137][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1896.524540][ T1996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1896.531648][ T1996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1896.539868][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1896.548739][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1896.559870][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 15:20:56 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:20:56 executing program 4: openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x110, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x208) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffff8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x400, 0x3b, 0x0, 0x5, 0xf799, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x10000, 0x0, 0x5, 0x6}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000400)='./file0\x00', 0x0) 15:20:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f00000002c0)=""/245, 0x26, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r5, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=""/31, 0x1f}}, 0x10) write$cgroup_int(r7, 0x0, 0x0) [ 1896.626952][ T5300] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1896.653589][ T5300] CPU: 0 PID: 5300 Comm: syz-executor.5 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1896.662665][ T5300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1896.672742][ T5300] Call Trace: [ 1896.676046][ T5300] dump_stack+0x172/0x1f0 [ 1896.680396][ T5300] dump_header+0x177/0x1152 [ 1896.684910][ T5300] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1896.690728][ T5300] ? ___ratelimit+0x2c8/0x595 [ 1896.695415][ T5300] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1896.701228][ T5300] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1896.706528][ T5300] ? trace_hardirqs_on+0x67/0x240 [ 1896.711578][ T5300] ? pagefault_out_of_memory+0x11c/0x11c [ 1896.717229][ T5300] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1896.723050][ T5300] ? ___ratelimit+0x60/0x595 [ 1896.727641][ T5300] ? do_raw_spin_unlock+0x57/0x270 [ 1896.732766][ T5300] oom_kill_process.cold+0x10/0x15 [ 1896.737892][ T5300] out_of_memory+0x334/0x1340 [ 1896.742571][ T5300] ? lock_downgrade+0x920/0x920 [ 1896.747427][ T5300] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1896.753252][ T5300] ? oom_killer_disable+0x280/0x280 [ 1896.758500][ T5300] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1896.764100][ T5300] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1896.769807][ T5300] ? do_raw_spin_unlock+0x57/0x270 [ 1896.774990][ T5300] ? _raw_spin_unlock+0x2d/0x50 [ 1896.779853][ T5300] try_charge+0xf4b/0x1440 [ 1896.784286][ T5300] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1896.789834][ T5300] ? percpu_ref_tryget_live+0x111/0x290 [ 1896.795390][ T5300] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1896.801655][ T5300] ? __kasan_check_read+0x11/0x20 [ 1896.806709][ T5300] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1896.812353][ T5300] mem_cgroup_try_charge+0x136/0x590 [ 1896.817773][ T5300] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1896.824054][ T5300] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1896.829702][ T5300] wp_page_copy+0x41e/0x1590 [ 1896.834314][ T5300] ? find_held_lock+0x35/0x130 [ 1896.839099][ T5300] ? pmd_pfn+0x1d0/0x1d0 [ 1896.843349][ T5300] ? lock_downgrade+0x920/0x920 [ 1896.848214][ T5300] ? swp_swapcount+0x540/0x540 [ 1896.852999][ T5300] ? __kasan_check_read+0x11/0x20 [ 1896.858043][ T5300] ? do_raw_spin_unlock+0x57/0x270 [ 1896.863175][ T5300] do_wp_page+0x499/0x14d0 [ 1896.867619][ T5300] ? finish_mkwrite_fault+0x570/0x570 [ 1896.873031][ T5300] __handle_mm_fault+0x22f1/0x3f20 [ 1896.878781][ T5300] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1896.884348][ T5300] ? __kasan_check_read+0x11/0x20 [ 1896.889382][ T5300] handle_mm_fault+0x1b5/0x6c0 [ 1896.894160][ T5300] __do_page_fault+0x536/0xdd0 [ 1896.898951][ T5300] do_page_fault+0x38/0x590 [ 1896.903455][ T5300] page_fault+0x39/0x40 [ 1896.907605][ T5300] RIP: 0033:0x430956 [ 1896.911504][ T5300] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 46 64 00 85 c0 0f 84 [ 1896.931205][ T5300] RSP: 002b:00007ffebda7c5b0 EFLAGS: 00010206 [ 1896.937288][ T5300] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 1896.945280][ T5300] RDX: 0000555556974930 RSI: 000055555697c970 RDI: 0000000000000003 [ 1896.953270][ T5300] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000555556973940 [ 1896.961263][ T5300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 1896.969239][ T5300] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 1897.312732][ T5300] memory: usage 680kB, limit 0kB, failcnt 497 [ 1897.318864][ T5300] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1897.346226][ T5300] Memory cgroup stats for /syz5: [ 1897.346333][ T5300] anon 0 [ 1897.346333][ T5300] file 176128 [ 1897.346333][ T5300] kernel_stack 65536 [ 1897.346333][ T5300] slab 692224 [ 1897.346333][ T5300] sock 0 [ 1897.346333][ T5300] shmem 172032 [ 1897.346333][ T5300] file_mapped 0 [ 1897.346333][ T5300] file_dirty 0 [ 1897.346333][ T5300] file_writeback 0 [ 1897.346333][ T5300] anon_thp 0 [ 1897.346333][ T5300] inactive_anon 143360 [ 1897.346333][ T5300] active_anon 0 [ 1897.346333][ T5300] inactive_file 0 [ 1897.346333][ T5300] active_file 135168 [ 1897.346333][ T5300] unevictable 131072 [ 1897.346333][ T5300] slab_reclaimable 405504 [ 1897.346333][ T5300] slab_unreclaimable 286720 [ 1897.346333][ T5300] pgfault 59697 [ 1897.346333][ T5300] pgmajfault 0 [ 1897.346333][ T5300] workingset_refault 0 [ 1897.346333][ T5300] workingset_activate 0 [ 1897.346333][ T5300] workingset_nodereclaim 0 [ 1897.346333][ T5300] pgrefill 734 [ 1897.346333][ T5300] pgscan 744 [ 1897.346333][ T5300] pgsteal 35 [ 1897.346333][ T5300] pgactivate 660 [ 1897.454219][ T5300] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=5300,uid=0 [ 1897.494027][ T5300] Memory cgroup out of memory: Killed process 5300 (syz-executor.5) total-vm:72448kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:0 [ 1897.554979][ T1065] oom_reaper: reaped process 5300 (syz-executor.5), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 1897.680501][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1897.689864][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1897.699058][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1897.708380][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1897.718694][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1897.727569][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1897.736419][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1897.745469][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1897.754669][ T5334] chnl_net:caif_netlink_parms(): no params data found [ 1897.768798][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1898.521764][T28820] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1898.571519][ T5344] IPVS: ftp: loaded support on port[0] = 21 [ 1898.607274][ T125] device bridge_slave_1 left promiscuous mode [ 1898.614734][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1898.665174][ T125] device bridge_slave_0 left promiscuous mode [ 1898.671605][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1898.716721][ T125] device bridge_slave_1 left promiscuous mode [ 1898.723011][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1898.765557][ T125] device bridge_slave_0 left promiscuous mode [ 1898.771818][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1898.827347][ T125] device bridge_slave_1 left promiscuous mode [ 1898.833661][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1898.886520][ T125] device bridge_slave_0 left promiscuous mode [ 1898.892975][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1898.948308][ T125] device bridge_slave_1 left promiscuous mode [ 1898.954615][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1899.008640][ T125] device bridge_slave_0 left promiscuous mode [ 1899.014883][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1899.068473][ T125] device bridge_slave_1 left promiscuous mode [ 1899.074690][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1899.128324][ T125] device bridge_slave_0 left promiscuous mode [ 1899.134509][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1899.200023][ T125] device bridge_slave_1 left promiscuous mode [ 1899.206310][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1899.261237][ T125] device bridge_slave_0 left promiscuous mode [ 1899.267525][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1912.347685][ T125] device hsr_slave_0 left promiscuous mode [ 1912.387562][ T125] device hsr_slave_1 left promiscuous mode [ 1912.462392][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1912.476219][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1912.489874][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1912.536958][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1912.630845][ T125] bond0 (unregistering): Released all slaves [ 1912.782696][ T125] device hsr_slave_0 left promiscuous mode [ 1912.821263][ T125] device hsr_slave_1 left promiscuous mode [ 1912.871149][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1912.886384][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1912.899775][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1912.939324][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1913.024940][ T125] bond0 (unregistering): Released all slaves [ 1913.174896][ T125] device hsr_slave_0 left promiscuous mode [ 1913.224532][ T125] device hsr_slave_1 left promiscuous mode [ 1913.295527][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1913.309856][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1913.324156][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1913.370056][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1913.448007][ T125] bond0 (unregistering): Released all slaves [ 1913.598159][ T125] device hsr_slave_0 left promiscuous mode [ 1913.648091][ T125] device hsr_slave_1 left promiscuous mode [ 1913.696832][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1913.712986][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1913.731416][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1913.793282][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1913.888646][ T125] bond0 (unregistering): Released all slaves [ 1914.063425][ T125] device hsr_slave_0 left promiscuous mode [ 1914.101860][ T125] device hsr_slave_1 left promiscuous mode [ 1914.157626][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1914.172482][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1914.185621][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1914.227878][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1914.306498][ T125] bond0 (unregistering): Released all slaves [ 1914.445210][ T125] device hsr_slave_0 left promiscuous mode [ 1914.484954][ T125] device hsr_slave_1 left promiscuous mode [ 1914.551092][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1914.564584][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1914.578099][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1914.612700][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1914.710240][ T125] bond0 (unregistering): Released all slaves [ 1914.844751][ T5315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1914.874248][ T5334] bridge0: port 1(bridge_slave_0) entered blocking state [ 1914.882653][ T5346] IPVS: ftp: loaded support on port[0] = 21 [ 1914.883515][ T5334] bridge0: port 1(bridge_slave_0) entered disabled state [ 1914.897186][ T5334] device bridge_slave_0 entered promiscuous mode [ 1914.906361][ T5334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1914.914658][ T5334] bridge0: port 2(bridge_slave_1) entered disabled state [ 1914.923133][ T5334] device bridge_slave_1 entered promiscuous mode [ 1914.950797][ T5334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1914.966793][ T5313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1914.991615][ T5334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1915.021106][ T5334] team0: Port device team_slave_0 added [ 1915.028270][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1915.037884][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1915.049955][ T5315] 8021q: adding VLAN 0 to HW filter on device team0 [ 1915.068729][ T5334] team0: Port device team_slave_1 added [ 1915.133288][ T5334] device hsr_slave_0 entered promiscuous mode [ 1915.181241][ T5334] device hsr_slave_1 entered promiscuous mode [ 1915.255698][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1915.264889][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1915.273517][ T1996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1915.280597][ T1996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1915.316125][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1915.332691][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1915.341440][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1915.349936][ T1996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1915.357069][ T1996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1915.366087][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1915.375469][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1915.405827][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 15:21:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 15:21:15 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 1915.424174][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1915.530150][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1915.544548][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1915.563368][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1915.584084][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1915.592660][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1915.621639][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1915.641877][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1915.669841][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1915.847075][ T5344] chnl_net:caif_netlink_parms(): no params data found [ 1915.883862][ T5346] chnl_net:caif_netlink_parms(): no params data found [ 1915.971623][ T5315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1916.045280][ T5344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1916.062499][ T5344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1916.085698][ T5344] device bridge_slave_0 entered promiscuous mode [ 1916.094865][ T5344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1916.102279][ T5344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1916.110438][ T5344] device bridge_slave_1 entered promiscuous mode [ 1916.119203][ T5346] bridge0: port 1(bridge_slave_0) entered blocking state [ 1916.126297][ T5346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1916.137086][ T5346] device bridge_slave_0 entered promiscuous mode [ 1916.145526][ T5346] bridge0: port 2(bridge_slave_1) entered blocking state [ 1916.153037][ T5346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1916.161205][ T5346] device bridge_slave_1 entered promiscuous mode [ 1916.196895][ T5334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1916.212222][ T5344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1916.228506][ T5344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1916.260033][ T5346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1916.270798][ T5344] team0: Port device team_slave_0 added [ 1916.287602][ T5344] team0: Port device team_slave_1 added [ 1916.298833][ T5346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1916.366963][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1916.374969][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1916.384949][ T5346] team0: Port device team_slave_0 added [ 1916.397837][ T5346] team0: Port device team_slave_1 added [ 1916.454047][ T5344] device hsr_slave_0 entered promiscuous mode [ 1916.475425][ T5365] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1916.486307][ T5365] CPU: 1 PID: 5365 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1916.495334][ T5365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1916.505387][ T5365] Call Trace: [ 1916.508667][ T5365] dump_stack+0x172/0x1f0 [ 1916.512983][ T5365] dump_header+0x177/0x1152 [ 1916.517477][ T5365] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1916.523265][ T5365] ? ___ratelimit+0x2c8/0x595 [ 1916.527984][ T5365] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1916.533790][ T5365] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1916.539069][ T5365] ? trace_hardirqs_on+0x67/0x240 [ 1916.544077][ T5365] ? pagefault_out_of_memory+0x11c/0x11c [ 1916.549694][ T5365] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1916.555482][ T5365] ? ___ratelimit+0x60/0x595 [ 1916.560054][ T5365] ? do_raw_spin_unlock+0x57/0x270 [ 1916.565158][ T5365] oom_kill_process.cold+0x10/0x15 [ 1916.570253][ T5365] out_of_memory+0x334/0x1340 [ 1916.574924][ T5365] ? __sched_text_start+0x8/0x8 [ 1916.579768][ T5365] ? oom_killer_disable+0x280/0x280 [ 1916.584971][ T5365] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1916.590510][ T5365] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1916.596131][ T5365] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1916.601932][ T5365] ? cgroup_file_notify+0x140/0x1b0 [ 1916.607124][ T5365] memory_max_write+0x262/0x3a0 [ 1916.611981][ T5365] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1916.618724][ T5365] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1916.625467][ T5365] cgroup_file_write+0x241/0x790 [ 1916.630395][ T5365] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1916.637171][ T5365] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1916.642905][ T5365] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1916.648527][ T5365] kernfs_fop_write+0x2b8/0x480 [ 1916.653365][ T5365] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1916.659593][ T5365] __vfs_write+0x8a/0x110 [ 1916.663921][ T5365] ? kernfs_fop_open+0xd80/0xd80 [ 1916.668872][ T5365] vfs_write+0x268/0x5d0 [ 1916.673107][ T5365] ksys_write+0x14f/0x290 [ 1916.677419][ T5365] ? __ia32_sys_read+0xb0/0xb0 [ 1916.682178][ T5365] ? do_syscall_64+0x26/0x760 [ 1916.686850][ T5365] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1916.692923][ T5365] ? do_syscall_64+0x26/0x760 [ 1916.697586][ T5365] __x64_sys_write+0x73/0xb0 [ 1916.702158][ T5365] do_syscall_64+0xfa/0x760 [ 1916.706648][ T5365] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1916.712516][ T5365] RIP: 0033:0x459879 [ 1916.716395][ T5365] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1916.736011][ T5365] RSP: 002b:00007fa38caa1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1916.744430][ T5365] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1916.752383][ T5365] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1916.760353][ T5365] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1916.768312][ T5365] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa38caa26d4 [ 1916.776327][ T5365] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1916.797630][ T5344] device hsr_slave_1 entered promiscuous mode [ 1916.805215][ T5365] memory: usage 5024kB, limit 0kB, failcnt 268 [ 1916.812500][ T5365] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1916.824520][ T5365] Memory cgroup stats for /syz0: [ 1916.827577][ T5365] anon 4255744 [ 1916.827577][ T5365] file 155648 [ 1916.827577][ T5365] kernel_stack 65536 [ 1916.827577][ T5365] slab 524288 [ 1916.827577][ T5365] sock 0 [ 1916.827577][ T5365] shmem 110592 [ 1916.827577][ T5365] file_mapped 0 [ 1916.827577][ T5365] file_dirty 0 [ 1916.827577][ T5365] file_writeback 0 [ 1916.827577][ T5365] anon_thp 4194304 [ 1916.827577][ T5365] inactive_anon 0 [ 1916.827577][ T5365] active_anon 4255744 [ 1916.827577][ T5365] inactive_file 135168 [ 1916.827577][ T5365] active_file 0 [ 1916.827577][ T5365] unevictable 12288 [ 1916.827577][ T5365] slab_reclaimable 135168 [ 1916.827577][ T5365] slab_unreclaimable 389120 [ 1916.827577][ T5365] pgfault 60555 [ 1916.827577][ T5365] pgmajfault 0 [ 1916.827577][ T5365] workingset_refault 0 [ 1916.827577][ T5365] workingset_activate 0 [ 1916.827577][ T5365] workingset_nodereclaim 0 [ 1916.827577][ T5365] pgrefill 225 [ 1916.827577][ T5365] pgscan 223 [ 1916.827577][ T5365] pgsteal 79 [ 1916.827577][ T5365] pgactivate 132 [ 1916.835401][ T5344] debugfs: Directory 'hsr0' with parent '/' already present! [ 1916.939405][ T5334] 8021q: adding VLAN 0 to HW filter on device team0 [ 1916.944003][ T5365] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=5364,uid=0 [ 1916.972319][ T5365] Memory cgroup out of memory: Killed process 5364 (syz-executor.0) total-vm:72580kB, anon-rss:4184kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1916.994105][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1916.994831][ T1065] oom_reaper: reaped process 5364 (syz-executor.0), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 1917.010440][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1917.022439][T11525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1917.029612][T11525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1917.037520][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1917.046459][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1917.055235][T11525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1917.062382][T11525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1917.070620][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1917.079546][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1917.088459][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1917.098231][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1917.113842][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1917.138724][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 15:21:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:21:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r4, 0x0, 0x0) [ 1917.362465][ T5346] device hsr_slave_0 entered promiscuous mode [ 1917.376321][ T5315] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1917.389420][ T5315] CPU: 1 PID: 5315 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1917.398474][ T5315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1917.408530][ T5315] Call Trace: [ 1917.411821][ T5315] dump_stack+0x172/0x1f0 [ 1917.416157][ T5315] dump_header+0x177/0x1152 [ 1917.420664][ T5315] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1917.426464][ T5315] ? ___ratelimit+0x2c8/0x595 [ 1917.431138][ T5315] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1917.436945][ T5315] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1917.442228][ T5315] ? trace_hardirqs_on+0x67/0x240 [ 1917.447252][ T5315] ? pagefault_out_of_memory+0x11c/0x11c [ 1917.452888][ T5315] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1917.458722][ T5315] ? ___ratelimit+0x60/0x595 [ 1917.463305][ T5315] ? do_raw_spin_unlock+0x57/0x270 [ 1917.468417][ T5315] oom_kill_process.cold+0x10/0x15 [ 1917.473528][ T5315] out_of_memory+0x334/0x1340 [ 1917.478201][ T5315] ? lock_downgrade+0x920/0x920 [ 1917.483060][ T5315] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1917.488871][ T5315] ? oom_killer_disable+0x280/0x280 [ 1917.494085][ T5315] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1917.499648][ T5315] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1917.505293][ T5315] ? do_raw_spin_unlock+0x57/0x270 [ 1917.510408][ T5315] ? _raw_spin_unlock+0x2d/0x50 [ 1917.515264][ T5315] try_charge+0xf4b/0x1440 [ 1917.519701][ T5315] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1917.525258][ T5315] ? percpu_ref_tryget_live+0x111/0x290 [ 1917.530814][ T5315] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1917.537069][ T5315] ? __kasan_check_read+0x11/0x20 [ 1917.542104][ T5315] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1917.547671][ T5315] mem_cgroup_try_charge+0x136/0x590 [ 1917.553177][ T5315] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1917.559669][ T5315] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1917.565364][ T5315] wp_page_copy+0x41e/0x1590 [ 1917.569941][ T5315] ? find_held_lock+0x35/0x130 [ 1917.574693][ T5315] ? pmd_pfn+0x1d0/0x1d0 [ 1917.578917][ T5315] ? lock_downgrade+0x920/0x920 [ 1917.583807][ T5315] ? swp_swapcount+0x540/0x540 [ 1917.588560][ T5315] ? __kasan_check_read+0x11/0x20 [ 1917.593659][ T5315] ? do_raw_spin_unlock+0x57/0x270 [ 1917.598810][ T5315] do_wp_page+0x499/0x14d0 [ 1917.603262][ T5315] ? finish_mkwrite_fault+0x570/0x570 [ 1917.608819][ T5315] __handle_mm_fault+0x22f1/0x3f20 [ 1917.613927][ T5315] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1917.619471][ T5315] ? __kasan_check_read+0x11/0x20 [ 1917.624486][ T5315] handle_mm_fault+0x1b5/0x6c0 [ 1917.629593][ T5315] __do_page_fault+0x536/0xdd0 [ 1917.634348][ T5315] do_page_fault+0x38/0x590 [ 1917.638853][ T5315] page_fault+0x39/0x40 [ 1917.643001][ T5315] RIP: 0033:0x430956 [ 1917.646904][ T5315] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 46 64 00 85 c0 0f 84 [ 1917.666499][ T5315] RSP: 002b:00007ffd04743430 EFLAGS: 00010206 [ 1917.672638][ T5315] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 1917.680849][ T5315] RDX: 00005555563e4930 RSI: 00005555563ec970 RDI: 0000000000000003 [ 1917.688802][ T5315] RBP: 0000000000008041 R08: 0000000000000001 R09: 00005555563e3940 [ 1917.696754][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 1917.704721][ T5315] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 1917.713309][ T5315] memory: usage 644kB, limit 0kB, failcnt 276 [ 1917.719405][ T5315] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1917.723293][ T5346] device hsr_slave_1 entered promiscuous mode [ 1917.726542][ T5315] Memory cgroup stats for /syz0: [ 1917.726643][ T5315] anon 0 [ 1917.726643][ T5315] file 155648 [ 1917.726643][ T5315] kernel_stack 65536 [ 1917.726643][ T5315] slab 524288 [ 1917.726643][ T5315] sock 0 [ 1917.726643][ T5315] shmem 110592 [ 1917.726643][ T5315] file_mapped 0 [ 1917.726643][ T5315] file_dirty 0 [ 1917.726643][ T5315] file_writeback 0 [ 1917.726643][ T5315] anon_thp 0 [ 1917.726643][ T5315] inactive_anon 0 [ 1917.726643][ T5315] active_anon 0 [ 1917.726643][ T5315] inactive_file 135168 [ 1917.726643][ T5315] active_file 0 [ 1917.726643][ T5315] unevictable 12288 [ 1917.726643][ T5315] slab_reclaimable 135168 [ 1917.726643][ T5315] slab_unreclaimable 389120 [ 1917.726643][ T5315] pgfault 60555 [ 1917.726643][ T5315] pgmajfault 0 [ 1917.726643][ T5315] workingset_refault 0 [ 1917.726643][ T5315] workingset_activate 0 [ 1917.726643][ T5315] workingset_nodereclaim 0 [ 1917.726643][ T5315] pgrefill 225 [ 1917.726643][ T5315] pgscan 223 [ 1917.726643][ T5315] pgsteal 79 [ 1917.726643][ T5315] pgactivate 132 [ 1917.828036][ T5315] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=5315,uid=0 [ 1917.843513][ T5315] Memory cgroup out of memory: Killed process 5315 (syz-executor.0) total-vm:72448kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:0 [ 1917.853860][ T5346] debugfs: Directory 'hsr0' with parent '/' already present! [ 1917.861474][ T1065] oom_reaper: reaped process 5315 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 1917.883913][ T5369] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1917.907170][ T5369] CPU: 0 PID: 5369 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1917.916311][ T5369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1917.926374][ T5369] Call Trace: [ 1917.929670][ T5369] dump_stack+0x172/0x1f0 [ 1917.933994][ T5369] dump_header+0x177/0x1152 [ 1917.938490][ T5369] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1917.944284][ T5369] ? ___ratelimit+0x2c8/0x595 [ 1917.948964][ T5369] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1917.954779][ T5369] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1917.960054][ T5369] ? trace_hardirqs_on+0x67/0x240 [ 1917.965060][ T5369] ? pagefault_out_of_memory+0x11c/0x11c [ 1917.970673][ T5369] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1917.976461][ T5369] ? ___ratelimit+0x60/0x595 [ 1917.981033][ T5369] oom_kill_process.cold+0x10/0x15 [ 1917.986142][ T5369] out_of_memory+0x334/0x1340 [ 1917.990802][ T5369] ? oom_killer_disable+0x280/0x280 [ 1917.995999][ T5369] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1918.001525][ T5369] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1918.007158][ T5369] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1918.012949][ T5369] ? cgroup_file_notify+0x140/0x1b0 [ 1918.018132][ T5369] memory_max_write+0x262/0x3a0 [ 1918.022968][ T5369] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1918.029713][ T5369] ? lock_acquire+0x190/0x410 [ 1918.034369][ T5369] ? kernfs_fop_write+0x227/0x480 [ 1918.039378][ T5369] cgroup_file_write+0x241/0x790 [ 1918.044307][ T5369] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1918.051049][ T5369] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1918.056665][ T5369] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1918.062278][ T5369] kernfs_fop_write+0x2b8/0x480 [ 1918.067108][ T5369] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1918.073328][ T5369] __vfs_write+0x8a/0x110 [ 1918.077638][ T5369] ? kernfs_fop_open+0xd80/0xd80 [ 1918.082571][ T5369] vfs_write+0x268/0x5d0 [ 1918.086807][ T5369] ksys_write+0x14f/0x290 [ 1918.091118][ T5369] ? __ia32_sys_read+0xb0/0xb0 [ 1918.095877][ T5369] ? do_syscall_64+0x26/0x760 [ 1918.100533][ T5369] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1918.106577][ T5369] ? do_syscall_64+0x26/0x760 [ 1918.111240][ T5369] __x64_sys_write+0x73/0xb0 [ 1918.115812][ T5369] do_syscall_64+0xfa/0x760 [ 1918.120294][ T5369] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1918.126162][ T5369] RIP: 0033:0x459879 [ 1918.130036][ T5369] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1918.149618][ T5369] RSP: 002b:00007efc5b8d9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1918.158282][ T5369] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1918.166231][ T5369] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 1918.174180][ T5369] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1918.182132][ T5369] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc5b8da6d4 [ 1918.190090][ T5369] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1918.204328][ T5369] memory: usage 2976kB, limit 0kB, failcnt 391 [ 1918.210791][ T5369] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1918.217739][ T5369] Memory cgroup stats for /syz2: [ 1918.217835][ T5369] anon 2154496 [ 1918.217835][ T5369] file 151552 [ 1918.217835][ T5369] kernel_stack 65536 [ 1918.217835][ T5369] slab 458752 [ 1918.217835][ T5369] sock 0 [ 1918.217835][ T5369] shmem 0 [ 1918.217835][ T5369] file_mapped 0 [ 1918.217835][ T5369] file_dirty 0 [ 1918.217835][ T5369] file_writeback 0 [ 1918.217835][ T5369] anon_thp 2097152 [ 1918.217835][ T5369] inactive_anon 0 [ 1918.217835][ T5369] active_anon 2154496 [ 1918.217835][ T5369] inactive_file 135168 [ 1918.217835][ T5369] active_file 0 [ 1918.217835][ T5369] unevictable 0 [ 1918.217835][ T5369] slab_reclaimable 135168 [ 1918.217835][ T5369] slab_unreclaimable 323584 [ 1918.217835][ T5369] pgfault 66924 [ 1918.217835][ T5369] pgmajfault 0 [ 1918.217835][ T5369] workingset_refault 0 [ 1918.217835][ T5369] workingset_activate 0 [ 1918.217835][ T5369] workingset_nodereclaim 0 [ 1918.217835][ T5369] pgrefill 310 [ 1918.217835][ T5369] pgscan 305 [ 1918.217835][ T5369] pgsteal 33 [ 1918.217835][ T5369] pgactivate 264 [ 1918.314269][ T5369] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=5368,uid=0 [ 1918.330456][ T5369] Memory cgroup out of memory: Killed process 5369 (syz-executor.2) total-vm:72708kB, anon-rss:2200kB, file-rss:35804kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1918.348436][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1918.357341][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1918.365874][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1918.374533][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1918.383392][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1918.392165][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1918.398075][ T5313] syz-executor.2 invoked oom-killer: gfp_mask=0x40c50(GFP_NOFS|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 1918.419951][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1918.447900][ T5313] CPU: 0 PID: 5313 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1918.457109][ T5313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1918.467156][ T5313] Call Trace: [ 1918.467181][ T5313] dump_stack+0x172/0x1f0 [ 1918.467199][ T5313] dump_header+0x177/0x1152 [ 1918.467215][ T5313] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1918.467225][ T5313] ? ___ratelimit+0x2c8/0x595 [ 1918.467237][ T5313] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1918.467252][ T5313] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1918.467267][ T5313] ? trace_hardirqs_on+0x67/0x240 [ 1918.467282][ T5313] ? pagefault_out_of_memory+0x11c/0x11c [ 1918.467294][ T5313] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1918.467309][ T5313] ? ___ratelimit+0x60/0x595 [ 1918.490361][ T5367] IPVS: ftp: loaded support on port[0] = 21 [ 1918.495745][ T5313] ? do_raw_spin_unlock+0x57/0x270 [ 1918.533517][ T5313] oom_kill_process.cold+0x10/0x15 [ 1918.538644][ T5313] out_of_memory+0x334/0x1340 [ 1918.543324][ T5313] ? lock_downgrade+0x920/0x920 [ 1918.548179][ T5313] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1918.553994][ T5313] ? oom_killer_disable+0x280/0x280 [ 1918.559212][ T5313] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1918.564757][ T5313] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1918.570392][ T5313] ? do_raw_spin_unlock+0x57/0x270 [ 1918.575505][ T5313] ? _raw_spin_unlock+0x2d/0x50 [ 1918.580358][ T5313] try_charge+0xf4b/0x1440 [ 1918.584776][ T5313] ? __lock_acquire+0x800/0x4a00 [ 1918.589716][ T5313] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1918.595257][ T5313] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1918.601235][ T5313] ? cache_grow_begin+0x122/0xd20 [ 1918.606257][ T5313] ? find_held_lock+0x35/0x130 [ 1918.611017][ T5313] ? cache_grow_begin+0x122/0xd20 [ 1918.616052][ T5313] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1918.621510][ T5313] ? memcg_kmem_put_cache+0x50/0x50 [ 1918.626709][ T5313] ? __kasan_check_read+0x11/0x20 [ 1918.631736][ T5313] cache_grow_begin+0x629/0xd20 [ 1918.636604][ T5313] ? __sanitizer_cov_trace_cmp2+0x11/0x20 [ 1918.642330][ T5313] ? mempolicy_slab_node+0x139/0x390 [ 1918.647657][ T5313] fallback_alloc+0x1fd/0x2d0 [ 1918.652360][ T5313] ____cache_alloc_node+0x1bc/0x1d0 [ 1918.657572][ T5313] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1918.663831][ T5313] kmem_cache_alloc+0x1ef/0x710 [ 1918.668686][ T5313] ? lock_downgrade+0x920/0x920 [ 1918.673535][ T5313] ? rwlock_bug.part.0+0x90/0x90 [ 1918.678476][ T5313] ? ratelimit_state_init+0xb0/0xb0 [ 1918.683672][ T5313] ext4_alloc_inode+0x1f/0x640 [ 1918.688427][ T5313] ? ratelimit_state_init+0xb0/0xb0 [ 1918.693757][ T5313] alloc_inode+0x68/0x1e0 [ 1918.698071][ T5313] iget_locked+0x1a6/0x4b0 [ 1918.702471][ T5313] __ext4_iget+0x265/0x3bb0 [ 1918.707011][ T5313] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1918.713240][ T5313] ? ext4_get_projid+0x190/0x190 [ 1918.718159][ T5313] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1918.723681][ T5313] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1918.729639][ T5313] ? d_alloc_parallel+0xa78/0x1c30 [ 1918.734745][ T5313] ext4_lookup+0x3b1/0x7a0 [ 1918.739141][ T5313] ? ext4_cross_rename+0x1430/0x1430 [ 1918.744408][ T5313] ? __lock_acquire+0x16f2/0x4a00 [ 1918.749429][ T5313] ? __kasan_check_read+0x11/0x20 [ 1918.754497][ T5313] ? lockdep_init_map+0x1be/0x6d0 [ 1918.759514][ T5313] __lookup_slow+0x279/0x500 [ 1918.764095][ T5313] ? vfs_unlink+0x620/0x620 [ 1918.768594][ T5313] lookup_slow+0x58/0x80 [ 1918.772817][ T5313] path_mountpoint+0x5d2/0x1e60 [ 1918.777648][ T5313] ? __kasan_check_read+0x11/0x20 [ 1918.782653][ T5313] ? __lock_acquire+0x16f2/0x4a00 [ 1918.787673][ T5313] ? path_openat+0x46d0/0x46d0 [ 1918.792503][ T5313] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 1918.798138][ T5313] ? find_held_lock+0x35/0x130 [ 1918.802896][ T5313] filename_mountpoint+0x190/0x3c0 [ 1918.807999][ T5313] ? filename_parentat.isra.0+0x410/0x410 [ 1918.813822][ T5313] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1918.819978][ T5313] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1918.826219][ T5313] ? __phys_addr_symbol+0x30/0x70 [ 1918.831229][ T5313] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1918.836943][ T5313] ? __check_object_size+0x3d/0x437 [ 1918.842127][ T5313] ? strncpy_from_user+0x2b4/0x400 [ 1918.847235][ T5313] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1918.853452][ T5313] ? getname_flags+0x277/0x5b0 [ 1918.858216][ T5313] user_path_mountpoint_at+0x3a/0x50 [ 1918.863488][ T5313] ksys_umount+0x167/0xf00 [ 1918.867989][ T5313] ? down_read_non_owner+0x490/0x490 [ 1918.873272][ T5313] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1918.879505][ T5313] ? __detach_mounts+0x2a0/0x2a0 [ 1918.884484][ T5313] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1918.889947][ T5313] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1918.895415][ T5313] ? do_syscall_64+0x26/0x760 [ 1918.900083][ T5313] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1918.906183][ T5313] ? do_syscall_64+0x26/0x760 [ 1918.911012][ T5313] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1918.916342][ T5313] __x64_sys_umount+0x54/0x80 [ 1918.921028][ T5313] do_syscall_64+0xfa/0x760 [ 1918.925523][ T5313] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1918.931393][ T5313] RIP: 0033:0x45c2a7 [ 1918.935266][ T5313] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1918.954908][ T5313] RSP: 002b:00007ffe952dc768 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 1918.963365][ T5313] RAX: ffffffffffffffda RBX: 00000000001d2101 RCX: 000000000045c2a7 [ 1918.971419][ T5313] RDX: 0000000000403520 RSI: 0000000000000002 RDI: 00007ffe952dc810 [ 1918.979377][ T5313] RBP: 0000000000000006 R08: 0000000000000000 R09: 000000000000000e [ 1918.987334][ T5313] R10: 000000000000000a R11: 0000000000000202 R12: 00007ffe952dd8a0 [ 1918.995292][ T5313] R13: 00005555556ad940 R14: 0000000000000000 R15: 00007ffe952dd8a0 [ 1919.009375][ T5313] memory: usage 648kB, limit 0kB, failcnt 403 [ 1919.016266][ T5313] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1919.023214][ T5313] Memory cgroup stats for /syz2: [ 1919.023327][ T5313] anon 40960 [ 1919.023327][ T5313] file 151552 [ 1919.023327][ T5313] kernel_stack 65536 [ 1919.023327][ T5313] slab 458752 [ 1919.023327][ T5313] sock 0 [ 1919.023327][ T5313] shmem 0 [ 1919.023327][ T5313] file_mapped 0 [ 1919.023327][ T5313] file_dirty 0 [ 1919.023327][ T5313] file_writeback 0 [ 1919.023327][ T5313] anon_thp 0 [ 1919.023327][ T5313] inactive_anon 0 [ 1919.023327][ T5313] active_anon 40960 [ 1919.023327][ T5313] inactive_file 135168 [ 1919.023327][ T5313] active_file 0 [ 1919.023327][ T5313] unevictable 0 [ 1919.023327][ T5313] slab_reclaimable 135168 [ 1919.023327][ T5313] slab_unreclaimable 323584 [ 1919.023327][ T5313] pgfault 66924 [ 1919.023327][ T5313] pgmajfault 0 [ 1919.023327][ T5313] workingset_refault 0 [ 1919.023327][ T5313] workingset_activate 0 [ 1919.023327][ T5313] workingset_nodereclaim 0 [ 1919.023327][ T5313] pgrefill 310 [ 1919.023327][ T5313] pgscan 305 [ 1919.023327][ T5313] pgsteal 33 [ 1919.023327][ T5313] pgactivate 264 [ 1919.028272][ T5313] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=5313,uid=0 [ 1919.134371][ T5313] Memory cgroup out of memory: Killed process 5313 (syz-executor.2) total-vm:72444kB, anon-rss:100kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:0 [ 1919.152534][ T1065] oom_reaper: reaped process 5313 (syz-executor.2), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 1919.553210][ T5334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1919.679778][ T5344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1919.760431][ T5346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1919.867672][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1919.876463][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1919.886846][ T5344] 8021q: adding VLAN 0 to HW filter on device team0 [ 1919.936948][ T5367] chnl_net:caif_netlink_parms(): no params data found [ 1919.972700][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1920.003009][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1920.031910][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1920.040804][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1920.112579][ T5378] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1920.124672][T11525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1920.131900][T11525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1920.139535][ T5378] CPU: 0 PID: 5378 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1920.148574][ T5378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1920.158855][ T5378] Call Trace: [ 1920.162163][ T5378] dump_stack+0x172/0x1f0 [ 1920.166517][ T5378] dump_header+0x177/0x1152 [ 1920.171117][ T5378] ? pagefault_out_of_memory+0x11c/0x11c [ 1920.176784][ T5378] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1920.182605][ T5378] ? ___ratelimit+0x60/0x595 [ 1920.187290][ T5378] ? do_raw_spin_unlock+0x57/0x270 [ 1920.192502][ T5378] oom_kill_process.cold+0x10/0x15 [ 1920.197639][ T5378] out_of_memory+0x334/0x1340 [ 1920.202326][ T5378] ? trace_hardirqs_on_caller+0x6a/0x240 [ 1920.208076][ T5378] ? cgroup_file_notify+0x140/0x1b0 [ 1920.213298][ T5378] ? oom_killer_disable+0x280/0x280 [ 1920.218525][ T5378] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1920.224102][ T5378] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1920.229764][ T5378] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1920.235707][ T5378] ? cgroup_file_notify+0x140/0x1b0 [ 1920.240920][ T5378] memory_max_write+0x262/0x3a0 [ 1920.245793][ T5378] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1920.252588][ T5378] ? lock_acquire+0x190/0x410 [ 1920.257368][ T5378] ? kernfs_fop_write+0x227/0x480 [ 1920.262408][ T5378] cgroup_file_write+0x241/0x790 [ 1920.267378][ T5378] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1920.274154][ T5378] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1920.279998][ T5378] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1920.285662][ T5378] kernfs_fop_write+0x2b8/0x480 [ 1920.290530][ T5378] __vfs_write+0x8a/0x110 [ 1920.294871][ T5378] ? kernfs_fop_open+0xd80/0xd80 [ 1920.299925][ T5378] vfs_write+0x268/0x5d0 [ 1920.304409][ T5378] ksys_write+0x14f/0x290 [ 1920.308769][ T5378] ? __ia32_sys_read+0xb0/0xb0 [ 1920.313559][ T5378] ? do_syscall_64+0x26/0x760 [ 1920.318531][ T5378] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1920.324944][ T5378] ? do_syscall_64+0x26/0x760 [ 1920.329644][ T5378] __x64_sys_write+0x73/0xb0 [ 1920.334258][ T5378] do_syscall_64+0xfa/0x760 [ 1920.338915][ T5378] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1920.344816][ T5378] RIP: 0033:0x459879 [ 1920.348719][ T5378] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1920.368449][ T5378] RSP: 002b:00007f3a6462ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1920.377003][ T5378] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1920.384994][ T5378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 1920.392978][ T5378] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1920.400967][ T5378] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3a6462b6d4 [ 1920.409181][ T5378] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1920.452611][ T5378] memory: usage 4936kB, limit 0kB, failcnt 1651 [ 1920.456464][ T5346] 8021q: adding VLAN 0 to HW filter on device team0 [ 1920.479500][ T5378] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1920.485429][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1920.495168][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1920.503923][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1920.512702][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1920.519839][ T5246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1920.520200][ T5378] Memory cgroup stats for /syz1: [ 1920.521604][ T5378] anon 4259840 [ 1920.521604][ T5378] file 0 [ 1920.521604][ T5378] kernel_stack 65536 [ 1920.521604][ T5378] slab 430080 [ 1920.521604][ T5378] sock 0 [ 1920.521604][ T5378] shmem 0 [ 1920.521604][ T5378] file_mapped 0 [ 1920.521604][ T5378] file_dirty 0 [ 1920.521604][ T5378] file_writeback 0 [ 1920.521604][ T5378] anon_thp 4194304 [ 1920.521604][ T5378] inactive_anon 131072 [ 1920.521604][ T5378] active_anon 4259840 [ 1920.521604][ T5378] inactive_file 0 [ 1920.521604][ T5378] active_file 0 [ 1920.521604][ T5378] unevictable 0 [ 1920.521604][ T5378] slab_reclaimable 135168 [ 1920.521604][ T5378] slab_unreclaimable 294912 [ 1920.521604][ T5378] pgfault 90519 [ 1920.521604][ T5378] pgmajfault 0 [ 1920.521604][ T5378] workingset_refault 0 [ 1920.521604][ T5378] workingset_activate 0 [ 1920.521604][ T5378] workingset_nodereclaim 0 [ 1920.521604][ T5378] pgrefill 240 [ 1920.521604][ T5378] pgscan 242 [ 1920.521604][ T5378] pgsteal 35 [ 1920.521604][ T5378] pgactivate 198 [ 1920.528601][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1920.537132][ T5378] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5376,uid=0 [ 1920.629179][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1920.629949][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1920.630695][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1920.706997][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1920.715267][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1920.724760][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1920.733941][ T5245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1920.741214][ T5245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1920.749264][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1920.758137][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1920.766566][ T5245] bridge0: port 2(bridge_slave_1) entered blocking state [ 1920.774010][ T5245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1920.781938][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1920.792177][ T5378] Memory cgroup out of memory: Killed process 5376 (syz-executor.1) total-vm:72712kB, anon-rss:4184kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:147456kB oom_score_adj:1000 [ 1920.811254][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1920.820243][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1920.828976][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1920.837320][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1920.848264][ T1065] oom_reaper: reaped process 5376 (syz-executor.1), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB [ 1920.860717][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1920.869820][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1920.878909][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1920.896640][ T5344] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1920.919667][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1920.966935][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1920.977864][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1920.986921][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1920.995808][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1921.005772][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1921.015005][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1921.025030][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1921.035358][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1921.044153][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1921.062594][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 15:21:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f00000002c0)=""/245, 0x26, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 1921.092525][ T5346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1921.101343][ T5367] bridge0: port 1(bridge_slave_0) entered blocking state [ 1921.109014][ T5367] bridge0: port 1(bridge_slave_0) entered disabled state 15:21:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r4, 0x0, 0x0) 15:21:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 1921.133754][ T5334] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1921.145489][ T5367] device bridge_slave_0 entered promiscuous mode [ 1921.160274][ T5334] CPU: 0 PID: 5334 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1921.169352][ T5334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1921.179701][ T5334] Call Trace: [ 1921.183147][ T5334] dump_stack+0x172/0x1f0 [ 1921.187514][ T5334] dump_header+0x177/0x1152 [ 1921.192103][ T5334] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1921.198208][ T5334] ? ___ratelimit+0x2c8/0x595 [ 1921.202913][ T5334] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1921.208757][ T5334] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1921.214075][ T5334] ? trace_hardirqs_on+0x67/0x240 [ 1921.219122][ T5334] ? pagefault_out_of_memory+0x11c/0x11c [ 1921.224853][ T5334] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1921.230688][ T5334] ? ___ratelimit+0x60/0x595 [ 1921.235295][ T5334] ? do_raw_spin_unlock+0x57/0x270 [ 1921.240439][ T5334] oom_kill_process.cold+0x10/0x15 [ 1921.245583][ T5334] out_of_memory+0x334/0x1340 [ 1921.250290][ T5334] ? lock_downgrade+0x920/0x920 [ 1921.255304][ T5334] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1921.261160][ T5334] ? oom_killer_disable+0x280/0x280 [ 1921.266397][ T5334] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1921.271992][ T5334] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1921.277665][ T5334] ? do_raw_spin_unlock+0x57/0x270 [ 1921.282810][ T5334] ? _raw_spin_unlock+0x2d/0x50 [ 1921.287827][ T5334] try_charge+0xf4b/0x1440 [ 1921.292514][ T5334] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1921.292528][ T5334] ? percpu_ref_tryget_live+0x111/0x290 [ 1921.292546][ T5334] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1921.292562][ T5334] ? __kasan_check_read+0x11/0x20 [ 1921.292580][ T5334] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1921.292598][ T5334] mem_cgroup_try_charge+0x136/0x590 [ 1921.303783][ T5334] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1921.303802][ T5334] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1921.303818][ T5334] wp_page_copy+0x41e/0x1590 [ 1921.303832][ T5334] ? find_held_lock+0x35/0x130 [ 1921.303854][ T5334] ? pmd_pfn+0x1d0/0x1d0 [ 1921.320851][ T5367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1921.326251][ T5334] ? lock_downgrade+0x920/0x920 [ 1921.326269][ T5334] ? swp_swapcount+0x540/0x540 [ 1921.326283][ T5334] ? __kasan_check_read+0x11/0x20 [ 1921.326295][ T5334] ? do_raw_spin_unlock+0x57/0x270 [ 1921.326313][ T5334] do_wp_page+0x499/0x14d0 [ 1921.341760][ T5367] bridge0: port 2(bridge_slave_1) entered disabled state [ 1921.342903][ T5334] ? finish_mkwrite_fault+0x570/0x570 [ 1921.359059][ T5334] __handle_mm_fault+0x22f1/0x3f20 [ 1921.359087][ T5334] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1921.383927][ T5367] device bridge_slave_1 entered promiscuous mode [ 1921.390487][ T5334] ? __kasan_check_read+0x11/0x20 [ 1921.390517][ T5334] handle_mm_fault+0x1b5/0x6c0 [ 1921.413150][ T5334] __do_page_fault+0x536/0xdd0 [ 1921.413171][ T5334] do_page_fault+0x38/0x590 [ 1921.413188][ T5334] page_fault+0x39/0x40 [ 1921.413201][ T5334] RIP: 0033:0x430956 [ 1921.413219][ T5334] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 46 64 00 85 c0 0f 84 [ 1921.413224][ T5334] RSP: 002b:00007ffcb6e2b380 EFLAGS: 00010206 [ 1921.413235][ T5334] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 1921.413242][ T5334] RDX: 000055555632e930 RSI: 0000555556336970 RDI: 0000000000000003 [ 1921.413249][ T5334] RBP: 0000000000008041 R08: 0000000000000001 R09: 000055555632d940 [ 1921.413255][ T5334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 1921.413269][ T5334] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 1921.508580][ T5334] memory: usage 504kB, limit 0kB, failcnt 1663 [ 1921.515526][ T5334] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1921.522386][ T5334] Memory cgroup stats for /syz1: [ 1921.522502][ T5334] anon 0 [ 1921.522502][ T5334] file 0 [ 1921.522502][ T5334] kernel_stack 0 [ 1921.522502][ T5334] slab 430080 [ 1921.522502][ T5334] sock 0 [ 1921.522502][ T5334] shmem 0 [ 1921.522502][ T5334] file_mapped 0 [ 1921.522502][ T5334] file_dirty 0 [ 1921.522502][ T5334] file_writeback 0 [ 1921.522502][ T5334] anon_thp 0 [ 1921.522502][ T5334] inactive_anon 131072 [ 1921.522502][ T5334] active_anon 0 [ 1921.522502][ T5334] inactive_file 0 [ 1921.522502][ T5334] active_file 0 [ 1921.522502][ T5334] unevictable 0 [ 1921.522502][ T5334] slab_reclaimable 135168 [ 1921.522502][ T5334] slab_unreclaimable 294912 [ 1921.522502][ T5334] pgfault 90552 [ 1921.522502][ T5334] pgmajfault 0 [ 1921.522502][ T5334] workingset_refault 0 [ 1921.522502][ T5334] workingset_activate 0 [ 1921.522502][ T5334] workingset_nodereclaim 0 [ 1921.522502][ T5334] pgrefill 240 [ 1921.522502][ T5334] pgscan 242 [ 1921.522502][ T5334] pgsteal 35 [ 1921.522502][ T5334] pgactivate 198 [ 1921.522502][ T5334] pgdeactivate 240 [ 1921.620118][ T5334] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5334,uid=0 [ 1921.637466][ T5334] Memory cgroup out of memory: Killed process 5334 (syz-executor.1) total-vm:72448kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:0 [ 1921.656610][ T1065] oom_reaper: reaped process 5334 (syz-executor.1), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 1921.687776][ T5344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1921.733296][ T5367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1921.772984][ T5367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1921.845391][ T5346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1922.222634][ T5367] team0: Port device team_slave_0 added [ 1922.238494][ T5367] team0: Port device team_slave_1 added 15:21:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f00000002c0)=""/245, 0x26, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 1922.383751][ T5367] device hsr_slave_0 entered promiscuous mode [ 1922.461728][ T5367] device hsr_slave_1 entered promiscuous mode [ 1922.511610][ T5367] debugfs: Directory 'hsr0' with parent '/' already present! 15:21:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f00000002c0)=""/245, 0x26, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:21:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f00000002c0)=""/245, 0x26, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r5, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=""/31, 0x1f}}, 0x10) write$cgroup_int(r7, 0x0, 0x0) [ 1922.846240][ T5367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1923.047360][ T5367] 8021q: adding VLAN 0 to HW filter on device team0 [ 1923.080819][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1923.099121][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1923.157089][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1923.202808][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1923.241977][ T5303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1923.249380][ T5303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1923.301643][ T5400] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1923.323886][ T5400] CPU: 0 PID: 5400 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1923.332965][ T5400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1923.337199][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1923.343179][ T5400] Call Trace: [ 1923.343201][ T5400] dump_stack+0x172/0x1f0 [ 1923.343220][ T5400] dump_header+0x177/0x1152 [ 1923.343243][ T5400] ? pagefault_out_of_memory+0x11c/0x11c [ 1923.343260][ T5400] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1923.343274][ T5400] ? ___ratelimit+0x60/0x595 [ 1923.343287][ T5400] ? do_raw_spin_unlock+0x57/0x270 [ 1923.343303][ T5400] oom_kill_process.cold+0x10/0x15 [ 1923.343324][ T5400] out_of_memory+0x334/0x1340 [ 1923.343343][ T5400] ? __sched_text_start+0x8/0x8 [ 1923.399938][ T5400] ? oom_killer_disable+0x280/0x280 [ 1923.405210][ T5400] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1923.410809][ T5400] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1923.413533][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1923.416500][ T5400] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1923.430333][ T5400] ? cgroup_file_notify+0x140/0x1b0 [ 1923.435647][ T5400] memory_max_write+0x262/0x3a0 [ 1923.440551][ T5400] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1923.447379][ T5400] ? __this_cpu_preempt_check+0x3a/0x210 [ 1923.453064][ T5400] ? retint_kernel+0x2b/0x2b [ 1923.457722][ T5400] cgroup_file_write+0x241/0x790 [ 1923.462295][ T5303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1923.462709][ T5400] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1923.470079][ T5303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1923.476833][ T5400] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1923.489834][ T5400] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1923.495524][ T5400] kernfs_fop_write+0x2b8/0x480 [ 1923.500414][ T5400] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1923.506696][ T5400] __vfs_write+0x8a/0x110 [ 1923.511063][ T5400] ? kernfs_fop_open+0xd80/0xd80 [ 1923.516044][ T5400] vfs_write+0x268/0x5d0 [ 1923.520347][ T5400] ksys_write+0x14f/0x290 [ 1923.524850][ T5400] ? __ia32_sys_read+0xb0/0xb0 [ 1923.529678][ T5400] ? do_syscall_64+0x26/0x760 [ 1923.534495][ T5400] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1923.540612][ T5400] ? do_syscall_64+0x26/0x760 [ 1923.545479][ T5400] __x64_sys_write+0x73/0xb0 [ 1923.550124][ T5400] do_syscall_64+0xfa/0x760 [ 1923.554669][ T5400] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1923.560582][ T5400] RIP: 0033:0x459879 [ 1923.564526][ T5400] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1923.584157][ T5400] RSP: 002b:00007fad78627c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1923.592603][ T5400] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1923.600607][ T5400] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 1923.608615][ T5400] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1923.616629][ T5400] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fad786286d4 [ 1923.624744][ T5400] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1923.667273][ T5367] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1923.695814][ T5400] memory: usage 5016kB, limit 0kB, failcnt 726 [ 1923.717132][ T5400] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1923.731793][ T5400] Memory cgroup stats for /syz3: [ 1923.733488][ T5400] anon 4288512 [ 1923.733488][ T5400] file 0 [ 1923.733488][ T5400] kernel_stack 65536 [ 1923.733488][ T5400] slab 405504 [ 1923.733488][ T5400] sock 0 [ 1923.733488][ T5400] shmem 0 [ 1923.733488][ T5400] file_mapped 0 [ 1923.733488][ T5400] file_dirty 0 [ 1923.733488][ T5400] file_writeback 0 [ 1923.733488][ T5400] anon_thp 4194304 [ 1923.733488][ T5400] inactive_anon 0 [ 1923.733488][ T5400] active_anon 4288512 [ 1923.733488][ T5400] inactive_file 0 [ 1923.733488][ T5400] active_file 0 [ 1923.733488][ T5400] unevictable 0 [ 1923.733488][ T5400] slab_reclaimable 135168 [ 1923.733488][ T5400] slab_unreclaimable 270336 [ 1923.733488][ T5400] pgfault 35244 [ 1923.733488][ T5400] pgmajfault 0 [ 1923.733488][ T5400] workingset_refault 0 [ 1923.733488][ T5400] workingset_activate 0 [ 1923.733488][ T5400] workingset_nodereclaim 0 15:21:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FITRIM(r1, 0xc0185879, 0x0) [ 1923.733488][ T5400] pgrefill 33 [ 1923.733488][ T5400] pgscan 66 [ 1923.733488][ T5400] pgsteal 0 [ 1923.733488][ T5400] pgactivate 0 [ 1923.761931][ T5367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1923.904099][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1923.912526][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1923.961366][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1923.989542][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1924.032559][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1924.074158][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1924.086459][ T5400] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5399,uid=0 15:21:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FITRIM(r1, 0xc0185879, 0x0) [ 1924.125848][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1924.134694][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1924.155246][ T5400] Memory cgroup out of memory: Killed process 5399 (syz-executor.3) total-vm:72708kB, anon-rss:4192kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1924.178540][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1924.198837][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1924.212790][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1924.218125][ T1065] oom_reaper: reaped process 5399 (syz-executor.3), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB [ 1924.224819][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1924.248383][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1924.280159][ T5403] IPVS: ftp: loaded support on port[0] = 21 [ 1924.336727][ T5367] 8021q: adding VLAN 0 to HW filter on device batadv0 15:21:24 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x26, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r5, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=""/31, 0x1f}}, 0x10) write$cgroup_int(r7, 0x0, 0x0) [ 1924.461261][ T5344] syz-executor.3 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=0, oom_score_adj=0 [ 1924.530474][ T5344] CPU: 0 PID: 5344 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1924.539556][ T5344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1924.549636][ T5344] Call Trace: [ 1924.552962][ T5344] dump_stack+0x172/0x1f0 [ 1924.557325][ T5344] dump_header+0x177/0x1152 [ 1924.561859][ T5344] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1924.567894][ T5344] ? ___ratelimit+0x2c8/0x595 [ 1924.572609][ T5344] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1924.578549][ T5344] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1924.583867][ T5344] ? trace_hardirqs_on+0x67/0x240 [ 1924.588924][ T5344] ? pagefault_out_of_memory+0x11c/0x11c [ 1924.594720][ T5344] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1924.600635][ T5344] ? ___ratelimit+0x60/0x595 [ 1924.605232][ T5344] ? do_raw_spin_unlock+0x57/0x270 [ 1924.610360][ T5344] oom_kill_process.cold+0x10/0x15 [ 1924.615620][ T5344] out_of_memory+0x334/0x1340 [ 1924.620302][ T5344] ? lock_downgrade+0x920/0x920 [ 1924.620319][ T5344] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1924.620332][ T5344] ? oom_killer_disable+0x280/0x280 [ 1924.620354][ T5344] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1924.620367][ T5344] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1924.620384][ T5344] ? do_raw_spin_unlock+0x57/0x270 [ 1924.620401][ T5344] ? _raw_spin_unlock+0x2d/0x50 [ 1924.620419][ T5344] try_charge+0xf4b/0x1440 [ 1924.620437][ T5344] ? __lock_acquire+0x800/0x4a00 [ 1924.620455][ T5344] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1924.620469][ T5344] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1924.620481][ T5344] ? cache_grow_begin+0x122/0xd20 [ 1924.620494][ T5344] ? find_held_lock+0x35/0x130 [ 1924.620506][ T5344] ? cache_grow_begin+0x122/0xd20 [ 1924.620528][ T5344] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1924.620546][ T5344] ? memcg_kmem_put_cache+0x50/0x50 [ 1924.642207][ T5344] ? __kasan_check_read+0x11/0x20 [ 1924.653449][ T5344] cache_grow_begin+0x629/0xd20 [ 1924.653475][ T5344] ? __sanitizer_cov_trace_cmp2+0x11/0x20 [ 1924.653489][ T5344] ? mempolicy_slab_node+0x139/0x390 [ 1924.653502][ T5344] fallback_alloc+0x1fd/0x2d0 [ 1924.653517][ T5344] ____cache_alloc_node+0x1bc/0x1d0 [ 1924.653530][ T5344] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1924.653544][ T5344] kmem_cache_alloc+0x1ef/0x710 [ 1924.653561][ T5344] ? stack_trace_save+0xac/0xe0 [ 1924.653583][ T5344] __alloc_file+0x27/0x340 [ 1924.653598][ T5344] alloc_empty_file+0x72/0x170 [ 1924.653618][ T5344] path_openat+0xef/0x46d0 [ 1924.653634][ T5344] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1924.653656][ T5344] ? kasan_slab_alloc+0xf/0x20 [ 1924.731458][ T5344] ? kmem_cache_alloc+0x121/0x710 [ 1924.731472][ T5344] ? getname_flags+0xd6/0x5b0 [ 1924.731482][ T5344] ? getname+0x1a/0x20 [ 1924.731501][ T5344] ? do_sys_open+0x2c9/0x5d0 [ 1924.731513][ T5344] ? __x64_sys_open+0x7e/0xc0 [ 1924.731528][ T5344] ? __kasan_check_read+0x11/0x20 [ 1924.731545][ T5344] ? mark_lock+0xc2/0x1220 [ 1924.731560][ T5344] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1924.731581][ T5344] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 1924.731605][ T5344] ? __alloc_fd+0x487/0x620 [ 1924.731624][ T5344] do_filp_open+0x1a1/0x280 [ 1924.731637][ T5344] ? may_open_dev+0x100/0x100 [ 1924.731649][ T5344] ? lock_downgrade+0x920/0x920 [ 1924.731665][ T5344] ? rwlock_bug.part.0+0x90/0x90 [ 1924.731681][ T5344] ? __kasan_check_read+0x11/0x20 [ 1924.731691][ T5344] ? do_raw_spin_unlock+0x57/0x270 [ 1924.731708][ T5344] ? _raw_spin_unlock+0x2d/0x50 [ 1924.731719][ T5344] ? __alloc_fd+0x487/0x620 [ 1924.731745][ T5344] do_sys_open+0x3fe/0x5d0 [ 1924.743365][ T5344] ? filp_open+0x80/0x80 [ 1924.753147][ T5344] ? __detach_mounts+0x2a0/0x2a0 [ 1924.753165][ T5344] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1924.753177][ T5344] ? do_syscall_64+0x26/0x760 [ 1924.753192][ T5344] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1924.753203][ T5344] ? do_syscall_64+0x26/0x760 [ 1924.753224][ T5344] __x64_sys_open+0x7e/0xc0 [ 1924.753240][ T5344] do_syscall_64+0xfa/0x760 [ 1924.753259][ T5344] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1924.753269][ T5344] RIP: 0033:0x4577f0 [ 1924.753285][ T5344] Code: 31 c0 e9 45 ff ff ff 0f 1f 00 80 3f 00 0f 84 f7 00 00 00 55 53 b9 02 00 00 00 be 00 08 09 00 89 c8 48 81 ec 98 00 00 00 0f 05 <48> 3d 00 f0 ff ff 48 89 c3 0f 87 e9 00 00 00 85 db 0f 88 2f 01 00 [ 1924.787374][ T5344] RSP: 002b:00007fff6a14bd00 EFLAGS: 00000206 ORIG_RAX: 0000000000000002 [ 1924.800915][ T5344] RAX: ffffffffffffffda RBX: 00000000001d37ed RCX: 00000000004577f0 [ 1924.800924][ T5344] RDX: 000000000000000c RSI: 0000000000090800 RDI: 00007fff6a14cee0 [ 1924.800930][ T5344] RBP: 0000000000000005 R08: 0000000000000001 R09: 0000555555736940 [ 1924.800936][ T5344] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff6a14cee0 [ 1924.800942][ T5344] R13: 00007fff6a14ced0 R14: 0000000000000000 R15: 00007fff6a14cee0 [ 1924.831739][ T5344] memory: usage 580kB, limit 0kB, failcnt 742 [ 1924.907204][ T5344] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1925.006511][ T5344] Memory cgroup stats for /syz3: [ 1925.006620][ T5344] anon 20480 [ 1925.006620][ T5344] file 0 [ 1925.006620][ T5344] kernel_stack 65536 [ 1925.006620][ T5344] slab 405504 [ 1925.006620][ T5344] sock 0 [ 1925.006620][ T5344] shmem 0 [ 1925.006620][ T5344] file_mapped 0 [ 1925.006620][ T5344] file_dirty 0 [ 1925.006620][ T5344] file_writeback 0 [ 1925.006620][ T5344] anon_thp 0 [ 1925.006620][ T5344] inactive_anon 0 [ 1925.006620][ T5344] active_anon 20480 [ 1925.006620][ T5344] inactive_file 0 [ 1925.006620][ T5344] active_file 0 [ 1925.006620][ T5344] unevictable 0 [ 1925.006620][ T5344] slab_reclaimable 135168 [ 1925.006620][ T5344] slab_unreclaimable 270336 [ 1925.006620][ T5344] pgfault 35277 [ 1925.006620][ T5344] pgmajfault 0 [ 1925.006620][ T5344] workingset_refault 0 [ 1925.006620][ T5344] workingset_activate 0 [ 1925.006620][ T5344] workingset_nodereclaim 0 [ 1925.006620][ T5344] pgrefill 33 [ 1925.006620][ T5344] pgscan 66 [ 1925.006620][ T5344] pgsteal 0 [ 1925.006620][ T5344] pgactivate 0 [ 1925.119202][ T5423] IPVS: ftp: loaded support on port[0] = 21 [ 1925.137343][ T5344] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5344,uid=0 [ 1925.222609][ T5344] Memory cgroup out of memory: Killed process 5344 (syz-executor.3) total-vm:72444kB, anon-rss:96kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:0 [ 1925.278587][ T5403] chnl_net:caif_netlink_parms(): no params data found [ 1925.318716][ T5429] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1925.362625][ T5429] CPU: 1 PID: 5429 Comm: syz-executor.5 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1925.372811][ T5429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1925.372818][ T5429] Call Trace: [ 1925.372842][ T5429] dump_stack+0x172/0x1f0 [ 1925.372865][ T5429] dump_header+0x177/0x1152 [ 1925.372881][ T5429] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1925.372898][ T5429] ? ___ratelimit+0x2c8/0x595 [ 1925.390546][ T5429] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1925.400807][ T5429] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1925.400823][ T5429] ? trace_hardirqs_on+0x67/0x240 [ 1925.400843][ T5429] ? pagefault_out_of_memory+0x11c/0x11c [ 1925.411284][ T5429] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1925.411302][ T5429] ? ___ratelimit+0x60/0x595 [ 1925.421568][ T5429] ? do_raw_spin_unlock+0x57/0x270 [ 1925.421587][ T5429] oom_kill_process.cold+0x10/0x15 [ 1925.421604][ T5429] out_of_memory+0x334/0x1340 [ 1925.432993][ T5429] ? cgroup_file_notify+0x140/0x1b0 [ 1925.433017][ T5429] ? oom_killer_disable+0x280/0x280 [ 1925.442766][ T5429] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1925.442784][ T5429] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1925.452530][ T5429] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1925.452549][ T5429] ? cgroup_file_notify+0x140/0x1b0 [ 1925.462898][ T5429] memory_max_write+0x262/0x3a0 [ 1925.462921][ T5429] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1925.474054][ T5429] ? lock_acquire+0x190/0x410 [ 1925.474068][ T5429] ? kernfs_fop_write+0x227/0x480 [ 1925.474090][ T5429] cgroup_file_write+0x241/0x790 [ 1925.485053][ T5429] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1925.485067][ T5429] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1925.485090][ T5429] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1925.496662][ T5429] kernfs_fop_write+0x2b8/0x480 [ 1925.496678][ T5429] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1925.496700][ T5429] __vfs_write+0x8a/0x110 [ 1925.506364][ T5429] ? kernfs_fop_open+0xd80/0xd80 [ 1925.506382][ T5429] vfs_write+0x268/0x5d0 [ 1925.506403][ T5429] ksys_write+0x14f/0x290 [ 1925.518060][ T5429] ? __ia32_sys_read+0xb0/0xb0 [ 1925.518079][ T5429] ? do_syscall_64+0x26/0x760 [ 1925.518093][ T5429] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1925.518110][ T5429] ? do_syscall_64+0x26/0x760 [ 1925.529502][ T5429] __x64_sys_write+0x73/0xb0 [ 1925.529520][ T5429] do_syscall_64+0xfa/0x760 [ 1925.529543][ T5429] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1925.540576][ T5429] RIP: 0033:0x459879 [ 1925.540592][ T5429] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1925.540600][ T5429] RSP: 002b:00007f4ca8b27c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1925.540617][ T5429] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1925.549844][ T5429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1925.549853][ T5429] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1925.549862][ T5429] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4ca8b286d4 [ 1925.549870][ T5429] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1925.637728][ T5429] memory: usage 5168kB, limit 0kB, failcnt 498 [ 1925.673408][ T5429] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1925.680925][ T5429] Memory cgroup stats for /syz5: [ 1925.681030][ T5429] anon 4255744 [ 1925.681030][ T5429] file 176128 [ 1925.681030][ T5429] kernel_stack 65536 [ 1925.681030][ T5429] slab 692224 [ 1925.681030][ T5429] sock 0 [ 1925.681030][ T5429] shmem 172032 [ 1925.681030][ T5429] file_mapped 0 [ 1925.681030][ T5429] file_dirty 0 [ 1925.681030][ T5429] file_writeback 0 [ 1925.681030][ T5429] anon_thp 4194304 [ 1925.681030][ T5429] inactive_anon 143360 [ 1925.681030][ T5429] active_anon 4255744 [ 1925.681030][ T5429] inactive_file 0 [ 1925.681030][ T5429] active_file 135168 [ 1925.681030][ T5429] unevictable 131072 [ 1925.681030][ T5429] slab_reclaimable 405504 [ 1925.681030][ T5429] slab_unreclaimable 286720 [ 1925.681030][ T5429] pgfault 59763 [ 1925.681030][ T5429] pgmajfault 0 [ 1925.681030][ T5429] workingset_refault 0 [ 1925.681030][ T5429] workingset_activate 0 [ 1925.681030][ T5429] workingset_nodereclaim 0 [ 1925.681030][ T5429] pgrefill 734 [ 1925.681030][ T5429] pgscan 744 [ 1925.681030][ T5429] pgsteal 35 [ 1925.783693][ T5403] bridge0: port 1(bridge_slave_0) entered blocking state [ 1925.789400][ T5429] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=5427,uid=0 [ 1925.792031][ T5403] bridge0: port 1(bridge_slave_0) entered disabled state [ 1925.814852][ T5403] device bridge_slave_0 entered promiscuous mode [ 1925.899587][ T5429] Memory cgroup out of memory: Killed process 5427 (syz-executor.5) total-vm:72712kB, anon-rss:4192kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:147456kB oom_score_adj:1000 [ 1925.931824][ T1065] oom_reaper: reaped process 5427 (syz-executor.5), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 15:21:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:21:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000000)) [ 1926.152335][ T5367] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1926.171848][ T5367] CPU: 0 PID: 5367 Comm: syz-executor.5 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1926.174009][ T5431] IPVS: ftp: loaded support on port[0] = 21 [ 1926.180922][ T5367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1926.196853][ T5367] Call Trace: [ 1926.200158][ T5367] dump_stack+0x172/0x1f0 [ 1926.204501][ T5367] dump_header+0x177/0x1152 [ 1926.209005][ T5367] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1926.209017][ T5367] ? ___ratelimit+0x2c8/0x595 [ 1926.209035][ T5367] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1926.225278][ T5367] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1926.225293][ T5367] ? trace_hardirqs_on+0x67/0x240 [ 1926.225309][ T5367] ? pagefault_out_of_memory+0x11c/0x11c [ 1926.225326][ T5367] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1926.225339][ T5367] ? ___ratelimit+0x60/0x595 [ 1926.225350][ T5367] ? do_raw_spin_unlock+0x57/0x270 [ 1926.225368][ T5367] oom_kill_process.cold+0x10/0x15 [ 1926.225384][ T5367] out_of_memory+0x334/0x1340 [ 1926.225397][ T5367] ? lock_downgrade+0x920/0x920 [ 1926.225414][ T5367] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1926.225431][ T5367] ? oom_killer_disable+0x280/0x280 [ 1926.241345][ T5367] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1926.251712][ T5367] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1926.251737][ T5367] ? do_raw_spin_unlock+0x57/0x270 [ 1926.271433][ T5367] ? _raw_spin_unlock+0x2d/0x50 [ 1926.271455][ T5367] try_charge+0xf4b/0x1440 [ 1926.271477][ T5367] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1926.282459][ T5367] ? percpu_ref_tryget_live+0x111/0x290 [ 1926.298720][ T5367] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1926.298736][ T5367] ? __kasan_check_read+0x11/0x20 [ 1926.298756][ T5367] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1926.313787][ T5367] mem_cgroup_try_charge+0x136/0x590 [ 1926.313805][ T5367] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1926.313819][ T5367] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1926.313838][ T5367] wp_page_copy+0x41e/0x1590 [ 1926.313854][ T5367] ? find_held_lock+0x35/0x130 [ 1926.313870][ T5367] ? pmd_pfn+0x1d0/0x1d0 [ 1926.313885][ T5367] ? lock_downgrade+0x920/0x920 [ 1926.313905][ T5367] ? swp_swapcount+0x540/0x540 [ 1926.313923][ T5367] ? __kasan_check_read+0x11/0x20 [ 1926.313933][ T5367] ? do_raw_spin_unlock+0x57/0x270 [ 1926.313947][ T5367] do_wp_page+0x499/0x14d0 [ 1926.313964][ T5367] ? finish_mkwrite_fault+0x570/0x570 [ 1926.313990][ T5367] __handle_mm_fault+0x22f1/0x3f20 [ 1926.331714][ T5367] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1926.348812][ T5367] ? __kasan_check_read+0x11/0x20 [ 1926.372884][ T5367] handle_mm_fault+0x1b5/0x6c0 [ 1926.372906][ T5367] __do_page_fault+0x536/0xdd0 [ 1926.372927][ T5367] do_page_fault+0x38/0x590 [ 1926.397568][ T5367] page_fault+0x39/0x40 [ 1926.397580][ T5367] RIP: 0033:0x4034f2 [ 1926.397595][ T5367] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 a9 8d 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 c9 42 05 00 48 [ 1926.397602][ T5367] RSP: 002b:00007ffdd3336e00 EFLAGS: 00010246 [ 1926.397614][ T5367] RAX: 0000000000000000 RBX: 00000000001d3dce RCX: 0000000000413480 [ 1926.397622][ T5367] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffdd3337f30 [ 1926.397630][ T5367] RBP: 0000000000000002 R08: 0000000000000001 R09: 000055555579d940 [ 1926.397638][ T5367] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd3337f30 [ 1926.397645][ T5367] R13: 00007ffdd3337f20 R14: 0000000000000000 R15: 00007ffdd3337f30 [ 1926.504168][ T5367] memory: usage 740kB, limit 0kB, failcnt 510 [ 1926.510820][ T5367] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1926.518127][ T5367] Memory cgroup stats for /syz5: [ 1926.518240][ T5367] anon 65536 [ 1926.518240][ T5367] file 176128 [ 1926.518240][ T5367] kernel_stack 0 [ 1926.518240][ T5367] slab 692224 [ 1926.518240][ T5367] sock 0 [ 1926.518240][ T5367] shmem 172032 [ 1926.518240][ T5367] file_mapped 0 [ 1926.518240][ T5367] file_dirty 0 [ 1926.518240][ T5367] file_writeback 0 [ 1926.518240][ T5367] anon_thp 0 [ 1926.518240][ T5367] inactive_anon 143360 [ 1926.518240][ T5367] active_anon 65536 [ 1926.518240][ T5367] inactive_file 0 [ 1926.518240][ T5367] active_file 135168 [ 1926.518240][ T5367] unevictable 131072 [ 1926.518240][ T5367] slab_reclaimable 405504 [ 1926.518240][ T5367] slab_unreclaimable 286720 [ 1926.518240][ T5367] pgfault 59763 [ 1926.518240][ T5367] pgmajfault 0 [ 1926.518240][ T5367] workingset_refault 0 [ 1926.518240][ T5367] workingset_activate 0 [ 1926.518240][ T5367] workingset_nodereclaim 0 [ 1926.518240][ T5367] pgrefill 734 [ 1926.518240][ T5367] pgscan 744 [ 1926.518240][ T5367] pgsteal 35 [ 1926.518240][ T5367] pgactivate 660 [ 1926.614988][ T5367] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=5367,uid=0 [ 1926.630500][ T5367] Memory cgroup out of memory: Killed process 5367 (syz-executor.5) total-vm:72448kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:0 [ 1926.648576][ T1065] oom_reaper: reaped process 5367 (syz-executor.5), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 15:21:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x26, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r5, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=""/31, 0x1f}}, 0x10) write$cgroup_int(r7, 0x0, 0x0) [ 1926.678700][ T5403] bridge0: port 2(bridge_slave_1) entered blocking state [ 1926.690667][ T5403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1926.707488][ T5403] device bridge_slave_1 entered promiscuous mode 15:21:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x26, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r5, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=""/31, 0x1f}}, 0x10) write$cgroup_int(r7, 0x0, 0x0) [ 1927.219193][ T5403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1927.267190][ T5403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1927.361541][ T5403] team0: Port device team_slave_0 added [ 1927.369341][ T5403] team0: Port device team_slave_1 added [ 1927.387973][ T5423] chnl_net:caif_netlink_parms(): no params data found [ 1927.444975][ T5403] device hsr_slave_0 entered promiscuous mode [ 1927.503400][ T5403] device hsr_slave_1 entered promiscuous mode [ 1927.543315][ T5403] debugfs: Directory 'hsr0' with parent '/' already present! [ 1927.629562][ T5423] bridge0: port 1(bridge_slave_0) entered blocking state [ 1927.648906][ T5423] bridge0: port 1(bridge_slave_0) entered disabled state [ 1927.663345][ T5423] device bridge_slave_0 entered promiscuous mode [ 1927.683786][ T5423] bridge0: port 2(bridge_slave_1) entered blocking state [ 1927.701785][ T5423] bridge0: port 2(bridge_slave_1) entered disabled state [ 1927.709771][ T5423] device bridge_slave_1 entered promiscuous mode [ 1927.727323][ T5431] chnl_net:caif_netlink_parms(): no params data found [ 1927.772244][ T5423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1927.790511][ T5423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1927.816206][ T5423] team0: Port device team_slave_0 added [ 1927.837341][ T5431] bridge0: port 1(bridge_slave_0) entered blocking state [ 1927.844562][ T5431] bridge0: port 1(bridge_slave_0) entered disabled state [ 1927.852970][ T5431] device bridge_slave_0 entered promiscuous mode [ 1927.861697][ T5423] team0: Port device team_slave_1 added [ 1927.887776][ T5431] bridge0: port 2(bridge_slave_1) entered blocking state [ 1927.894890][ T5431] bridge0: port 2(bridge_slave_1) entered disabled state [ 1927.915901][ T5431] device bridge_slave_1 entered promiscuous mode [ 1927.966545][ T5431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1927.979801][ T5431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1928.029107][ T5423] device hsr_slave_0 entered promiscuous mode [ 1928.067874][ T5423] device hsr_slave_1 entered promiscuous mode [ 1928.118206][ T5423] debugfs: Directory 'hsr0' with parent '/' already present! [ 1929.490081][ T5403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1929.505576][ T5440] IPVS: ftp: loaded support on port[0] = 21 [ 1929.518437][ T5431] team0: Port device team_slave_0 added [ 1930.184161][ T5403] 8021q: adding VLAN 0 to HW filter on device team0 [ 1930.196555][ T5431] team0: Port device team_slave_1 added [ 1930.203672][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1930.211724][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1930.902078][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1930.910691][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1930.919748][ T4288] bridge0: port 1(bridge_slave_0) entered blocking state [ 1930.926954][ T4288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1930.934733][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1930.943749][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1930.953098][ T4288] bridge0: port 2(bridge_slave_1) entered blocking state [ 1930.960258][ T4288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1930.967992][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1930.977225][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1931.648660][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1932.324404][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1932.333728][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1932.342210][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1932.352939][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1932.362004][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1932.370439][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1932.379211][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1932.387767][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1932.436765][ T5431] device hsr_slave_0 entered promiscuous mode [ 1932.474445][ T5431] device hsr_slave_1 entered promiscuous mode [ 1932.524728][ T5431] debugfs: Directory 'hsr0' with parent '/' already present! [ 1932.537635][ T5403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1932.550203][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1933.232157][ T5423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1933.908703][ T5403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1933.942632][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1933.951598][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1933.963008][ T5423] 8021q: adding VLAN 0 to HW filter on device team0 [ 1934.671834][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1934.684136][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1934.693786][ T4288] bridge0: port 1(bridge_slave_0) entered blocking state [ 1934.700906][ T4288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1934.948149][ T5448] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1934.959430][ T5448] CPU: 1 PID: 5448 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1934.968487][ T5448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1934.978560][ T5448] Call Trace: [ 1934.981894][ T5448] dump_stack+0x172/0x1f0 [ 1934.986264][ T5448] dump_header+0x177/0x1152 [ 1934.990835][ T5448] ? __this_cpu_preempt_check+0x3a/0x210 [ 1934.996529][ T5448] ? retint_kernel+0x2b/0x2b [ 1935.001170][ T5448] ? pagefault_out_of_memory+0x11c/0x11c [ 1935.006864][ T5448] ? oom_kill_process+0x94/0x3f0 [ 1935.011844][ T5448] oom_kill_process.cold+0x10/0x15 [ 1935.017016][ T5448] out_of_memory+0x334/0x1340 [ 1935.021755][ T5448] ? __sched_text_start+0x8/0x8 [ 1935.026649][ T5448] ? oom_killer_disable+0x280/0x280 [ 1935.031921][ T5448] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1935.037530][ T5448] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1935.043221][ T5448] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1935.049079][ T5448] ? cgroup_file_notify+0x140/0x1b0 [ 1935.054325][ T5448] memory_max_write+0x262/0x3a0 [ 1935.059224][ T5448] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1935.066021][ T5448] ? lock_acquire+0x190/0x410 [ 1935.070725][ T5448] ? kernfs_fop_write+0x227/0x480 [ 1935.075787][ T5448] cgroup_file_write+0x241/0x790 [ 1935.080756][ T5448] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1935.087571][ T5448] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1935.093251][ T5448] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1935.098937][ T5448] kernfs_fop_write+0x2b8/0x480 [ 1935.103852][ T5448] __vfs_write+0x8a/0x110 [ 1935.108228][ T5448] ? kernfs_fop_open+0xd80/0xd80 [ 1935.113218][ T5448] vfs_write+0x268/0x5d0 [ 1935.117517][ T5448] ksys_write+0x14f/0x290 [ 1935.121909][ T5448] ? __ia32_sys_read+0xb0/0xb0 [ 1935.126737][ T5448] ? do_syscall_64+0x26/0x760 [ 1935.131482][ T5448] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1935.137611][ T5448] ? do_syscall_64+0x26/0x760 [ 1935.142354][ T5448] __x64_sys_write+0x73/0xb0 [ 1935.147012][ T5448] do_syscall_64+0xfa/0x760 [ 1935.151576][ T5448] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1935.157517][ T5448] RIP: 0033:0x459879 [ 1935.161459][ T5448] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1935.181109][ T5448] RSP: 002b:00007f8b3a543c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1935.189581][ T5448] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1935.197581][ T5448] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 1935.205571][ T5448] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1935.213566][ T5448] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8b3a5446d4 [ 1935.221558][ T5448] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1935.244854][ T5448] memory: usage 2952kB, limit 0kB, failcnt 404 [ 1935.251588][ T5448] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1935.259642][ T5448] Memory cgroup stats for /syz2: [ 1935.261611][ T5448] anon 2162688 [ 1935.261611][ T5448] file 151552 [ 1935.261611][ T5448] kernel_stack 65536 [ 1935.261611][ T5448] slab 458752 [ 1935.261611][ T5448] sock 0 [ 1935.261611][ T5448] shmem 0 [ 1935.261611][ T5448] file_mapped 0 [ 1935.261611][ T5448] file_dirty 0 [ 1935.261611][ T5448] file_writeback 0 [ 1935.261611][ T5448] anon_thp 2097152 [ 1935.261611][ T5448] inactive_anon 0 [ 1935.261611][ T5448] active_anon 2162688 [ 1935.261611][ T5448] inactive_file 135168 [ 1935.261611][ T5448] active_file 0 [ 1935.261611][ T5448] unevictable 0 [ 1935.261611][ T5448] slab_reclaimable 135168 [ 1935.261611][ T5448] slab_unreclaimable 323584 [ 1935.261611][ T5448] pgfault 66990 [ 1935.261611][ T5448] pgmajfault 0 [ 1935.261611][ T5448] workingset_refault 0 [ 1935.261611][ T5448] workingset_activate 0 [ 1935.261611][ T5448] workingset_nodereclaim 0 [ 1935.261611][ T5448] pgrefill 310 [ 1935.261611][ T5448] pgscan 305 [ 1935.261611][ T5448] pgsteal 33 [ 1935.261611][ T5448] pgactivate 264 [ 1935.367453][ T5448] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=5447,uid=0 [ 1935.384679][ T5448] Memory cgroup out of memory: Killed process 5447 (syz-executor.2) total-vm:72580kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000 [ 1935.410328][ T1065] oom_reaper: reaped process 5447 (syz-executor.2), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 15:21:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 1935.784917][ T5403] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1935.822342][ T5403] CPU: 1 PID: 5403 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1935.831476][ T5403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1935.841581][ T5403] Call Trace: [ 1935.844920][ T5403] dump_stack+0x172/0x1f0 [ 1935.849290][ T5403] dump_header+0x177/0x1152 [ 1935.853839][ T5403] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1935.859668][ T5403] ? ___ratelimit+0x2c8/0x595 [ 1935.864388][ T5403] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1935.870241][ T5403] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1935.875581][ T5403] ? trace_hardirqs_on+0x67/0x240 [ 1935.880642][ T5403] ? pagefault_out_of_memory+0x11c/0x11c [ 1935.886322][ T5403] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1935.892173][ T5403] ? ___ratelimit+0x60/0x595 [ 1935.896805][ T5403] ? do_raw_spin_unlock+0x57/0x270 [ 1935.901965][ T5403] oom_kill_process.cold+0x10/0x15 [ 1935.907133][ T5403] out_of_memory+0x334/0x1340 [ 1935.911851][ T5403] ? lock_downgrade+0x920/0x920 [ 1935.916798][ T5403] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1935.922657][ T5403] ? oom_killer_disable+0x280/0x280 [ 1935.927901][ T5403] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1935.933484][ T5403] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1935.939165][ T5403] ? do_raw_spin_unlock+0x57/0x270 [ 1935.944298][ T5403] ? _raw_spin_unlock+0x2d/0x50 [ 1935.949203][ T5403] try_charge+0xf4b/0x1440 [ 1935.953672][ T5403] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1935.959247][ T5403] ? percpu_ref_tryget_live+0x111/0x290 [ 1935.964823][ T5403] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1935.971102][ T5403] ? __kasan_check_read+0x11/0x20 [ 1935.976165][ T5403] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1935.981818][ T5403] mem_cgroup_try_charge+0x136/0x590 [ 1935.987144][ T5403] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1935.993424][ T5403] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1935.999089][ T5403] __handle_mm_fault+0x1e34/0x3f20 [ 1936.004234][ T5403] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1936.009835][ T5403] ? __kasan_check_read+0x11/0x20 [ 1936.015607][ T5403] handle_mm_fault+0x1b5/0x6c0 [ 1936.020396][ T5403] __do_page_fault+0x536/0xdd0 [ 1936.025192][ T5403] do_page_fault+0x38/0x590 [ 1936.029729][ T5403] page_fault+0x39/0x40 [ 1936.033899][ T5403] RIP: 0033:0x4034f2 [ 1936.037811][ T5403] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 a9 8d 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 c9 42 05 00 48 [ 1936.057445][ T5403] RSP: 002b:00007fffba108ed0 EFLAGS: 00010246 [ 1936.063543][ T5403] RAX: 0000000000000000 RBX: 00000000001d61b2 RCX: 0000000000413480 [ 1936.071535][ T5403] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007fffba10a000 [ 1936.079549][ T5403] RBP: 0000000000000002 R08: 0000000000000001 R09: 00005555565f5940 [ 1936.087568][ T5403] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffba10a000 [ 1936.095582][ T5403] R13: 00007fffba109ff0 R14: 0000000000000000 R15: 00007fffba10a000 [ 1936.285789][ T5403] memory: usage 620kB, limit 0kB, failcnt 412 [ 1936.291930][ T5403] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1936.326122][ T5403] Memory cgroup stats for /syz2: [ 1936.326263][ T5403] anon 0 [ 1936.326263][ T5403] file 151552 [ 1936.326263][ T5403] kernel_stack 65536 [ 1936.326263][ T5403] slab 458752 [ 1936.326263][ T5403] sock 0 [ 1936.326263][ T5403] shmem 0 [ 1936.326263][ T5403] file_mapped 0 [ 1936.326263][ T5403] file_dirty 0 [ 1936.326263][ T5403] file_writeback 0 [ 1936.326263][ T5403] anon_thp 0 [ 1936.326263][ T5403] inactive_anon 0 [ 1936.326263][ T5403] active_anon 0 [ 1936.326263][ T5403] inactive_file 135168 [ 1936.326263][ T5403] active_file 0 [ 1936.326263][ T5403] unevictable 0 [ 1936.326263][ T5403] slab_reclaimable 135168 [ 1936.326263][ T5403] slab_unreclaimable 323584 [ 1936.326263][ T5403] pgfault 67023 [ 1936.326263][ T5403] pgmajfault 0 [ 1936.326263][ T5403] workingset_refault 0 [ 1936.326263][ T5403] workingset_activate 0 [ 1936.326263][ T5403] workingset_nodereclaim 0 [ 1936.326263][ T5403] pgrefill 310 [ 1936.326263][ T5403] pgscan 305 [ 1936.326263][ T5403] pgsteal 33 [ 1936.326263][ T5403] pgactivate 264 [ 1936.421490][ T5403] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=5403,uid=0 [ 1936.448629][ T5403] Memory cgroup out of memory: Killed process 5403 (syz-executor.2) total-vm:72448kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:0 [ 1936.479235][ T1065] oom_reaper: reaped process 5403 (syz-executor.2), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 1936.496489][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1936.516200][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1936.525678][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1936.534938][ T5301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1936.542126][ T5301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1936.559393][ T5440] chnl_net:caif_netlink_parms(): no params data found [ 1936.768968][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1936.784453][ T125] device bridge_slave_1 left promiscuous mode [ 1936.792034][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1936.848982][ T125] device bridge_slave_0 left promiscuous mode [ 1936.856516][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1936.904302][ T125] device bridge_slave_1 left promiscuous mode [ 1936.910754][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1936.942593][ T125] device bridge_slave_0 left promiscuous mode [ 1936.948884][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1937.004535][ T125] device bridge_slave_1 left promiscuous mode [ 1937.010824][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1937.053485][ T125] device bridge_slave_0 left promiscuous mode [ 1937.059749][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1937.104698][ T125] device bridge_slave_1 left promiscuous mode [ 1937.110936][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1937.174589][ T125] device bridge_slave_0 left promiscuous mode [ 1937.180805][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1937.225621][ T125] device bridge_slave_1 left promiscuous mode [ 1937.231873][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1937.295247][ T125] device bridge_slave_0 left promiscuous mode [ 1937.301467][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1937.337014][ T125] device bridge_slave_1 left promiscuous mode [ 1937.343251][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1937.375933][ T125] device bridge_slave_0 left promiscuous mode [ 1937.382158][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1937.427374][ T125] device bridge_slave_1 left promiscuous mode [ 1937.436115][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1937.477030][ T125] device bridge_slave_0 left promiscuous mode [ 1937.483271][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1937.548420][ T125] device bridge_slave_1 left promiscuous mode [ 1937.554675][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1937.588038][ T125] device bridge_slave_0 left promiscuous mode [ 1937.594310][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1955.556158][ T125] device hsr_slave_0 left promiscuous mode [ 1955.606789][ T125] device hsr_slave_1 left promiscuous mode [ 1955.676012][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1955.691226][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1955.703540][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1955.744979][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1955.848347][ T125] bond0 (unregistering): Released all slaves [ 1956.020177][ T125] device hsr_slave_0 left promiscuous mode [ 1956.090291][ T125] device hsr_slave_1 left promiscuous mode [ 1956.156491][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1956.169680][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1956.181527][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1956.228014][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1956.321680][ T125] bond0 (unregistering): Released all slaves [ 1956.484587][ T125] device hsr_slave_0 left promiscuous mode [ 1956.525907][ T125] device hsr_slave_1 left promiscuous mode [ 1956.577366][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1956.588849][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1956.601976][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1956.662061][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1956.743510][ T125] bond0 (unregistering): Released all slaves [ 1956.877397][ T125] device hsr_slave_0 left promiscuous mode [ 1956.917093][ T125] device hsr_slave_1 left promiscuous mode [ 1956.982975][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1956.997260][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1957.010661][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1957.065600][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1957.148404][ T125] bond0 (unregistering): Released all slaves [ 1957.270853][ T125] device hsr_slave_0 left promiscuous mode [ 1957.320676][ T125] device hsr_slave_1 left promiscuous mode [ 1957.368635][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1957.385891][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1957.398076][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1957.445788][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1957.522845][ T125] bond0 (unregistering): Released all slaves [ 1957.643809][ T125] device hsr_slave_0 left promiscuous mode [ 1957.683547][ T125] device hsr_slave_1 left promiscuous mode [ 1957.738858][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1957.752749][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1957.765218][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1957.800454][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1957.904463][ T125] bond0 (unregistering): Released all slaves [ 1958.047140][ T125] device hsr_slave_0 left promiscuous mode [ 1958.086902][ T125] device hsr_slave_1 left promiscuous mode [ 1958.162947][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1958.176897][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1958.190728][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1958.234122][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1958.322730][ T125] bond0 (unregistering): Released all slaves [ 1958.450494][ T125] device hsr_slave_0 left promiscuous mode [ 1958.490204][ T125] device hsr_slave_1 left promiscuous mode [ 1958.555912][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1958.570277][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1958.583076][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1958.628380][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1958.704927][ T125] bond0 (unregistering): Released all slaves [ 1958.811586][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1958.820872][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1958.829783][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1958.838536][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1958.867954][ T5450] IPVS: ftp: loaded support on port[0] = 21 [ 1958.899749][ T5431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1958.914385][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1958.931396][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1958.940031][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1958.949313][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1958.957786][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1958.966419][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1958.998804][ T5423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1959.009771][ T5440] bridge0: port 1(bridge_slave_0) entered blocking state [ 1959.018386][ T5440] bridge0: port 1(bridge_slave_0) entered disabled state [ 1959.026439][ T5440] device bridge_slave_0 entered promiscuous mode [ 1959.035587][ T5440] bridge0: port 2(bridge_slave_1) entered blocking state [ 1959.042672][ T5440] bridge0: port 2(bridge_slave_1) entered disabled state [ 1959.050451][ T5440] device bridge_slave_1 entered promiscuous mode [ 1959.086694][ T5431] 8021q: adding VLAN 0 to HW filter on device team0 [ 1959.101520][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1959.110372][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1959.121091][ T5440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1959.148527][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1959.158553][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1959.167962][ T1996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1959.175064][ T1996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1959.183350][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1959.193405][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1959.203051][ T1996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1959.210204][ T1996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1959.217949][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1959.230221][ T5440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1959.245314][ T5423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1959.258875][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1959.267747][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1959.277225][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1959.286199][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1959.296127][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1959.316586][ T5440] team0: Port device team_slave_0 added [ 1959.329370][ T5440] team0: Port device team_slave_1 added [ 1959.340854][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1959.358192][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1959.431971][ T5440] device hsr_slave_0 entered promiscuous mode [ 1959.479415][ T5440] device hsr_slave_1 entered promiscuous mode [ 1959.604151][ T5431] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1959.628106][ T5431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1959.645665][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1959.666122][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1959.685814][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1959.686985][ T5456] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1959.703039][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1959.705019][ T5456] CPU: 0 PID: 5456 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1959.721448][ T5456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1959.721457][ T5456] Call Trace: [ 1959.721493][ T5456] dump_stack+0x172/0x1f0 [ 1959.721516][ T5456] dump_header+0x177/0x1152 [ 1959.721539][ T5456] ? pagefault_out_of_memory+0x11c/0x11c [ 1959.721559][ T5456] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1959.721572][ T5456] ? ___ratelimit+0x60/0x595 [ 1959.721594][ T5456] ? do_raw_spin_unlock+0x57/0x270 [ 1959.749464][ T5456] oom_kill_process.cold+0x10/0x15 [ 1959.765008][ T5456] out_of_memory+0x334/0x1340 [ 1959.774890][ T5456] ? __sched_text_start+0x8/0x8 [ 1959.779798][ T5456] ? oom_killer_disable+0x280/0x280 [ 1959.785058][ T5456] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1959.790645][ T5456] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1959.796343][ T5456] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1959.802566][ T5456] ? cgroup_file_notify+0x140/0x1b0 [ 1959.804150][ T5440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1959.807807][ T5456] memory_max_write+0x262/0x3a0 [ 1959.807829][ T5456] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1959.807848][ T5456] ? lock_acquire+0x20b/0x410 [ 1959.807875][ T5456] ? retint_kernel+0x2b/0x2b [ 1959.831779][ T5440] 8021q: adding VLAN 0 to HW filter on device team0 [ 1959.835719][ T5456] cgroup_file_write+0x241/0x790 [ 1959.835743][ T5456] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1959.835765][ T5456] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1959.859884][ T5456] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1959.865567][ T5456] kernfs_fop_write+0x2b8/0x480 [ 1959.870569][ T5456] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1959.876863][ T5456] __vfs_write+0x8a/0x110 [ 1959.881239][ T5456] ? kernfs_fop_open+0xd80/0xd80 [ 1959.885855][ T5440] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1959.886421][ T5456] vfs_write+0x268/0x5d0 [ 1959.897017][ T5440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1959.901506][ T5456] ksys_write+0x14f/0x290 [ 1959.901523][ T5456] ? __ia32_sys_read+0xb0/0xb0 [ 1959.901542][ T5456] ? do_syscall_64+0x26/0x760 [ 1959.901571][ T5456] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1959.931846][ T5456] ? do_syscall_64+0x26/0x760 [ 1959.935350][ T5440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1959.936564][ T5456] __x64_sys_write+0x73/0xb0 [ 1959.936587][ T5456] do_syscall_64+0xfa/0x760 [ 1959.948123][ T5456] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1959.948138][ T5456] RIP: 0033:0x459879 [ 1959.948154][ T5456] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1959.948169][ T5456] RSP: 002b:00007f2c132eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1959.991437][ T5456] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1959.999444][ T5456] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1960.007449][ T5456] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1960.015435][ T5456] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2c132ef6d4 [ 1960.024504][ T5456] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1960.053668][ T5456] memory: usage 4812kB, limit 0kB, failcnt 277 [ 1960.061279][ T5456] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1960.068600][ T5456] Memory cgroup stats for /syz0: [ 1960.070431][ T5456] anon 4374528 [ 1960.070431][ T5456] file 155648 [ 1960.070431][ T5456] kernel_stack 65536 [ 1960.070431][ T5456] slab 389120 [ 1960.070431][ T5456] sock 0 [ 1960.070431][ T5456] shmem 110592 [ 1960.070431][ T5456] file_mapped 0 [ 1960.070431][ T5456] file_dirty 0 [ 1960.070431][ T5456] file_writeback 0 [ 1960.070431][ T5456] anon_thp 4194304 [ 1960.070431][ T5456] inactive_anon 0 [ 1960.070431][ T5456] active_anon 4374528 [ 1960.070431][ T5456] inactive_file 135168 [ 1960.070431][ T5456] active_file 0 [ 1960.070431][ T5456] unevictable 12288 [ 1960.070431][ T5456] slab_reclaimable 135168 [ 1960.070431][ T5456] slab_unreclaimable 253952 [ 1960.070431][ T5456] pgfault 60621 [ 1960.070431][ T5456] pgmajfault 0 [ 1960.070431][ T5456] workingset_refault 0 [ 1960.070431][ T5456] workingset_activate 0 [ 1960.070431][ T5456] workingset_nodereclaim 0 [ 1960.070431][ T5456] pgrefill 225 [ 1960.070431][ T5456] pgscan 223 [ 1960.070431][ T5456] pgsteal 79 [ 1960.070431][ T5456] pgactivate 132 [ 1960.076822][ T5456] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=5455,uid=0 [ 1960.185980][ T5456] Memory cgroup out of memory: Killed process 5455 (syz-executor.0) total-vm:72580kB, anon-rss:4228kB, file-rss:35804kB, shmem-rss:0kB, UID:0 pgtables:147456kB oom_score_adj:1000 [ 1960.211205][ T1065] oom_reaper: reaped process 5455 (syz-executor.0), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 1960.255898][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1960.276345][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 15:22:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:22:00 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r4, 0x0, 0x0) [ 1960.302563][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1960.311486][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1960.321144][ T1996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1960.324505][ T5423] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1960.328367][ T1996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1960.360590][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1960.378643][ T1996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1960.385893][ T1996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1960.405341][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1960.418196][ T5423] CPU: 0 PID: 5423 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1960.427277][ T5423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1960.436871][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1960.437342][ T5423] Call Trace: [ 1960.448673][ T5423] dump_stack+0x172/0x1f0 [ 1960.453037][ T5423] dump_header+0x177/0x1152 [ 1960.453065][ T5423] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1960.459615][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1960.463373][ T5423] ? ___ratelimit+0x2c8/0x595 [ 1960.463391][ T5423] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1960.463410][ T5423] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1960.463431][ T5423] ? trace_hardirqs_on+0x67/0x240 [ 1960.475865][ T5423] ? pagefault_out_of_memory+0x11c/0x11c [ 1960.475882][ T5423] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1960.475896][ T5423] ? ___ratelimit+0x60/0x595 [ 1960.475907][ T5423] ? do_raw_spin_unlock+0x57/0x270 [ 1960.475926][ T5423] oom_kill_process.cold+0x10/0x15 [ 1960.497716][ T5423] out_of_memory+0x334/0x1340 [ 1960.497740][ T5423] ? lock_downgrade+0x920/0x920 [ 1960.497760][ T5423] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1960.497774][ T5423] ? oom_killer_disable+0x280/0x280 [ 1960.497796][ T5423] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1960.497809][ T5423] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1960.497828][ T5423] ? do_raw_spin_unlock+0x57/0x270 [ 1960.507624][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1960.508276][ T5423] ? _raw_spin_unlock+0x2d/0x50 [ 1960.508298][ T5423] try_charge+0xf4b/0x1440 [ 1960.508322][ T5423] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1960.525497][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1960.529201][ T5423] ? percpu_ref_tryget_live+0x111/0x290 [ 1960.529228][ T5423] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1960.529244][ T5423] ? __kasan_check_read+0x11/0x20 [ 1960.529262][ T5423] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1960.529276][ T5423] mem_cgroup_try_charge+0x136/0x590 [ 1960.529295][ T5423] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1960.539209][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1960.540342][ T5423] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1960.540363][ T5423] wp_page_copy+0x41e/0x1590 [ 1960.540385][ T5423] ? find_held_lock+0x35/0x130 [ 1960.557352][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1960.564558][ T5423] ? pmd_pfn+0x1d0/0x1d0 [ 1960.564580][ T5423] ? lock_downgrade+0x920/0x920 [ 1960.564597][ T5423] ? swp_swapcount+0x540/0x540 [ 1960.564614][ T5423] ? __kasan_check_read+0x11/0x20 [ 1960.564624][ T5423] ? do_raw_spin_unlock+0x57/0x270 [ 1960.564644][ T5423] do_wp_page+0x499/0x14d0 [ 1960.678565][ T5423] ? finish_mkwrite_fault+0x570/0x570 [ 1960.683975][ T5423] __handle_mm_fault+0x22f1/0x3f20 [ 1960.689128][ T5423] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1960.694713][ T5423] ? __kasan_check_read+0x11/0x20 [ 1960.699780][ T5423] handle_mm_fault+0x1b5/0x6c0 [ 1960.704572][ T5423] __do_page_fault+0x536/0xdd0 [ 1960.709370][ T5423] do_page_fault+0x38/0x590 [ 1960.713904][ T5423] page_fault+0x39/0x40 [ 1960.718079][ T5423] RIP: 0033:0x430956 [ 1960.721994][ T5423] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 46 64 00 85 c0 0f 84 [ 1960.741610][ T5423] RSP: 002b:00007fff48bd3370 EFLAGS: 00010206 [ 1960.747689][ T5423] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 1960.755680][ T5423] RDX: 00005555566de930 RSI: 00005555566e6970 RDI: 0000000000000003 [ 1960.763671][ T5423] RBP: 0000000000008041 R08: 0000000000000001 R09: 00005555566dd940 [ 1960.771659][ T5423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 1960.779645][ T5423] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 1960.801670][ T5431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1960.818621][ T5450] chnl_net:caif_netlink_parms(): no params data found [ 1960.839127][ T5423] memory: usage 424kB, limit 0kB, failcnt 289 [ 1960.845705][ T5423] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1960.870060][ T5423] Memory cgroup stats for /syz0: [ 1960.870168][ T5423] anon 114688 [ 1960.870168][ T5423] file 155648 [ 1960.870168][ T5423] kernel_stack 65536 [ 1960.870168][ T5423] slab 389120 [ 1960.870168][ T5423] sock 0 [ 1960.870168][ T5423] shmem 110592 [ 1960.870168][ T5423] file_mapped 0 [ 1960.870168][ T5423] file_dirty 0 [ 1960.870168][ T5423] file_writeback 0 [ 1960.870168][ T5423] anon_thp 0 [ 1960.870168][ T5423] inactive_anon 0 [ 1960.870168][ T5423] active_anon 114688 [ 1960.870168][ T5423] inactive_file 135168 [ 1960.870168][ T5423] active_file 0 [ 1960.870168][ T5423] unevictable 12288 [ 1960.870168][ T5423] slab_reclaimable 135168 [ 1960.870168][ T5423] slab_unreclaimable 253952 [ 1960.870168][ T5423] pgfault 60621 [ 1960.870168][ T5423] pgmajfault 0 [ 1960.870168][ T5423] workingset_refault 0 [ 1960.870168][ T5423] workingset_activate 0 [ 1960.870168][ T5423] workingset_nodereclaim 0 [ 1960.870168][ T5423] pgrefill 225 [ 1960.870168][ T5423] pgscan 223 [ 1960.870168][ T5423] pgsteal 79 [ 1960.870168][ T5423] pgactivate 132 [ 1960.993874][ T5450] bridge0: port 1(bridge_slave_0) entered blocking state [ 1961.001235][ T5450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1961.009373][ T5450] device bridge_slave_0 entered promiscuous mode [ 1961.028122][ T5450] bridge0: port 2(bridge_slave_1) entered blocking state [ 1961.035841][ T5450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1961.052535][ T5450] device bridge_slave_1 entered promiscuous mode [ 1961.082749][ T5450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1961.095312][ T5450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1961.104676][ T5423] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=5423,uid=0 [ 1961.163065][ T5423] Memory cgroup out of memory: Killed process 5423 (syz-executor.0) total-vm:72448kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:0 [ 1961.181798][ T5450] team0: Port device team_slave_0 added [ 1961.233764][ T5450] team0: Port device team_slave_1 added [ 1961.266411][ T1065] oom_reaper: reaped process 5423 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 1961.300755][ T5440] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1961.331523][ T5440] CPU: 1 PID: 5440 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1961.340599][ T5440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1961.340613][ T5440] Call Trace: [ 1961.353994][ T5440] dump_stack+0x172/0x1f0 [ 1961.358351][ T5440] dump_header+0x177/0x1152 [ 1961.362882][ T5440] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1961.368715][ T5440] ? ___ratelimit+0x2c8/0x595 [ 1961.373414][ T5440] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1961.379240][ T5440] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1961.384545][ T5440] ? trace_hardirqs_on+0x67/0x240 [ 1961.384565][ T5440] ? pagefault_out_of_memory+0x11c/0x11c [ 1961.395242][ T5440] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1961.401068][ T5440] ? ___ratelimit+0x60/0x595 [ 1961.405671][ T5440] ? do_raw_spin_unlock+0x57/0x270 [ 1961.405691][ T5440] oom_kill_process.cold+0x10/0x15 [ 1961.405706][ T5440] out_of_memory+0x334/0x1340 [ 1961.405719][ T5440] ? lock_downgrade+0x920/0x920 [ 1961.405736][ T5440] ? oom_killer_disable+0x280/0x280 [ 1961.405761][ T5440] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1961.405774][ T5440] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1961.405789][ T5440] ? do_raw_spin_unlock+0x57/0x270 [ 1961.405810][ T5440] ? _raw_spin_unlock+0x2d/0x50 [ 1961.416055][ T5440] try_charge+0xf4b/0x1440 [ 1961.416078][ T5440] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1961.416090][ T5440] ? percpu_ref_tryget_live+0x111/0x290 [ 1961.416107][ T5440] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1961.416122][ T5440] ? __kasan_check_read+0x11/0x20 [ 1961.416138][ T5440] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1961.416156][ T5440] mem_cgroup_try_charge+0x136/0x590 [ 1961.425706][ T5440] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1961.425726][ T5440] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1961.425743][ T5440] wp_page_copy+0x41e/0x1590 [ 1961.425759][ T5440] ? find_held_lock+0x35/0x130 [ 1961.425775][ T5440] ? pmd_pfn+0x1d0/0x1d0 [ 1961.425790][ T5440] ? lock_downgrade+0x920/0x920 [ 1961.425807][ T5440] ? swp_swapcount+0x540/0x540 [ 1961.425823][ T5440] ? __kasan_check_read+0x11/0x20 [ 1961.425835][ T5440] ? do_raw_spin_unlock+0x57/0x270 [ 1961.425849][ T5440] do_wp_page+0x499/0x14d0 [ 1961.425865][ T5440] ? finish_mkwrite_fault+0x570/0x570 [ 1961.425887][ T5440] __handle_mm_fault+0x22f1/0x3f20 [ 1961.436635][ T5440] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1961.447385][ T5440] ? __kasan_check_read+0x11/0x20 [ 1961.447408][ T5440] handle_mm_fault+0x1b5/0x6c0 [ 1961.447427][ T5440] __do_page_fault+0x536/0xdd0 [ 1961.447447][ T5440] do_page_fault+0x38/0x590 [ 1961.447462][ T5440] page_fault+0x39/0x40 [ 1961.447474][ T5440] RIP: 0033:0x430956 [ 1961.447488][ T5440] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 46 64 00 85 c0 0f 84 [ 1961.447494][ T5440] RSP: 002b:00007ffea24625d0 EFLAGS: 00010206 [ 1961.447504][ T5440] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 1961.447510][ T5440] RDX: 0000555556588930 RSI: 0000555556590970 RDI: 0000000000000003 [ 1961.447517][ T5440] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000555556587940 [ 1961.447524][ T5440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 1961.447530][ T5440] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 1961.471943][ T5440] memory: usage 596kB, limit 0kB, failcnt 751 [ 1961.565596][ T5440] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1961.572866][ T5440] Memory cgroup stats for /syz3: [ 1961.572959][ T5440] anon 65536 [ 1961.572959][ T5440] file 0 [ 1961.572959][ T5440] kernel_stack 0 [ 1961.572959][ T5440] slab 405504 [ 1961.572959][ T5440] sock 0 [ 1961.572959][ T5440] shmem 0 [ 1961.572959][ T5440] file_mapped 0 [ 1961.572959][ T5440] file_dirty 0 [ 1961.572959][ T5440] file_writeback 0 [ 1961.572959][ T5440] anon_thp 0 [ 1961.572959][ T5440] inactive_anon 0 [ 1961.572959][ T5440] active_anon 0 [ 1961.572959][ T5440] inactive_file 0 [ 1961.572959][ T5440] active_file 0 [ 1961.572959][ T5440] unevictable 0 [ 1961.572959][ T5440] slab_reclaimable 135168 [ 1961.572959][ T5440] slab_unreclaimable 270336 [ 1961.572959][ T5440] pgfault 35343 [ 1961.572959][ T5440] pgmajfault 0 [ 1961.572959][ T5440] workingset_refault 0 [ 1961.572959][ T5440] workingset_activate 0 [ 1961.572959][ T5440] workingset_nodereclaim 0 [ 1961.572959][ T5440] pgrefill 33 [ 1961.572959][ T5440] pgscan 66 [ 1961.572959][ T5440] pgsteal 0 [ 1961.572959][ T5440] pgactivate 0 [ 1961.572959][ T5440] pgdeactivate 33 [ 1961.759980][ T5440] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5440,uid=0 [ 1961.775908][ T5440] Memory cgroup out of memory: Killed process 5440 (syz-executor.3) total-vm:72448kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:0 [ 1961.793974][ T1065] oom_reaper: reaped process 5440 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 1961.796174][ T5471] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1961.818373][ T5471] CPU: 0 PID: 5471 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1961.827405][ T5471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1961.837464][ T5471] Call Trace: [ 1961.840758][ T5471] dump_stack+0x172/0x1f0 [ 1961.845092][ T5471] dump_header+0x177/0x1152 [ 1961.849758][ T5471] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1961.855544][ T5471] ? ___ratelimit+0x2c8/0x595 [ 1961.860206][ T5471] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1961.866000][ T5471] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1961.871267][ T5471] ? trace_hardirqs_on+0x67/0x240 [ 1961.876272][ T5471] ? pagefault_out_of_memory+0x11c/0x11c [ 1961.881888][ T5471] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1961.887697][ T5471] ? ___ratelimit+0x60/0x595 [ 1961.892272][ T5471] oom_kill_process.cold+0x10/0x15 [ 1961.897363][ T5471] out_of_memory+0x334/0x1340 [ 1961.902113][ T5471] ? oom_killer_disable+0x280/0x280 [ 1961.907307][ T5471] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1961.912872][ T5471] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1961.918508][ T5471] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1961.924296][ T5471] ? cgroup_file_notify+0x140/0x1b0 [ 1961.929476][ T5471] memory_max_write+0x262/0x3a0 [ 1961.934307][ T5471] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1961.941047][ T5471] ? lock_acquire+0x20b/0x410 [ 1961.945704][ T5471] cgroup_file_write+0x241/0x790 [ 1961.950624][ T5471] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1961.957367][ T5471] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1961.962981][ T5471] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1961.969114][ T5471] kernfs_fop_write+0x2b8/0x480 [ 1961.974130][ T5471] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1961.980358][ T5471] __vfs_write+0x8a/0x110 [ 1961.984671][ T5471] ? kernfs_fop_open+0xd80/0xd80 [ 1961.989585][ T5471] vfs_write+0x268/0x5d0 [ 1961.994081][ T5471] ksys_write+0x14f/0x290 [ 1961.998390][ T5471] ? __ia32_sys_read+0xb0/0xb0 [ 1962.003151][ T5471] ? do_syscall_64+0x26/0x760 [ 1962.007809][ T5471] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1962.013856][ T5471] ? do_syscall_64+0x26/0x760 [ 1962.018510][ T5471] __x64_sys_write+0x73/0xb0 [ 1962.023114][ T5471] do_syscall_64+0xfa/0x760 [ 1962.027616][ T5471] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1962.033495][ T5471] RIP: 0033:0x459879 [ 1962.037374][ T5471] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1962.056960][ T5471] RSP: 002b:00007f7c770a5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1962.065369][ T5471] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1962.073334][ T5471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 1962.081293][ T5471] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1962.089243][ T5471] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7c770a66d4 [ 1962.097191][ T5471] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1962.111193][ T5450] device hsr_slave_0 entered promiscuous mode [ 1962.117529][ T5471] memory: usage 4896kB, limit 0kB, failcnt 1664 [ 1962.123972][ T5471] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1962.130996][ T5471] Memory cgroup stats for /syz1: [ 1962.131111][ T5471] anon 4255744 [ 1962.131111][ T5471] file 0 [ 1962.131111][ T5471] kernel_stack 65536 [ 1962.131111][ T5471] slab 430080 [ 1962.131111][ T5471] sock 0 [ 1962.131111][ T5471] shmem 0 [ 1962.131111][ T5471] file_mapped 0 [ 1962.131111][ T5471] file_dirty 0 [ 1962.131111][ T5471] file_writeback 0 [ 1962.131111][ T5471] anon_thp 4194304 [ 1962.131111][ T5471] inactive_anon 131072 [ 1962.131111][ T5471] active_anon 4255744 [ 1962.131111][ T5471] inactive_file 0 [ 1962.131111][ T5471] active_file 0 [ 1962.131111][ T5471] unevictable 0 [ 1962.131111][ T5471] slab_reclaimable 135168 [ 1962.131111][ T5471] slab_unreclaimable 294912 [ 1962.131111][ T5471] pgfault 90618 [ 1962.131111][ T5471] pgmajfault 0 [ 1962.131111][ T5471] workingset_refault 0 [ 1962.131111][ T5471] workingset_activate 0 [ 1962.131111][ T5471] workingset_nodereclaim 0 [ 1962.131111][ T5471] pgrefill 240 [ 1962.131111][ T5471] pgscan 242 [ 1962.131111][ T5471] pgsteal 35 [ 1962.131111][ T5471] pgactivate 198 [ 1962.226702][ T5471] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5470,uid=0 [ 1962.242934][ T5471] Memory cgroup out of memory: Killed process 5470 (syz-executor.1) total-vm:72712kB, anon-rss:4188kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:147456kB oom_score_adj:1000 [ 1962.261232][ T5450] device hsr_slave_1 entered promiscuous mode [ 1962.263854][ T1065] oom_reaper: reaped process 5470 (syz-executor.1), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB 15:22:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/exec\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0) 15:22:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r5, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=""/31, 0x1f}}, 0x10) write$cgroup_int(r7, 0x0, 0x0) 15:22:02 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x26, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 1962.301885][ T5450] debugfs: Directory 'hsr0' with parent '/' already present! [ 1962.341843][ T5431] syz-executor.1 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=0, oom_score_adj=0 [ 1962.365153][ T5431] CPU: 0 PID: 5431 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1962.374214][ T5431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1962.384268][ T5431] Call Trace: [ 1962.387561][ T5431] dump_stack+0x172/0x1f0 [ 1962.391892][ T5431] dump_header+0x177/0x1152 [ 1962.396397][ T5431] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1962.402208][ T5431] ? ___ratelimit+0x2c8/0x595 [ 1962.406895][ T5431] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1962.412716][ T5431] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1962.418015][ T5431] ? trace_hardirqs_on+0x67/0x240 [ 1962.423057][ T5431] ? pagefault_out_of_memory+0x11c/0x11c [ 1962.428703][ T5431] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1962.434520][ T5431] ? ___ratelimit+0x60/0x595 [ 1962.439124][ T5431] ? do_raw_spin_unlock+0x57/0x270 [ 1962.444246][ T5431] oom_kill_process.cold+0x10/0x15 [ 1962.449355][ T5431] out_of_memory+0x334/0x1340 [ 1962.454030][ T5431] ? lock_downgrade+0x920/0x920 [ 1962.458895][ T5431] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1962.464711][ T5431] ? oom_killer_disable+0x280/0x280 [ 1962.469922][ T5431] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1962.475477][ T5431] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1962.481118][ T5431] ? do_raw_spin_unlock+0x57/0x270 [ 1962.486242][ T5431] ? _raw_spin_unlock+0x2d/0x50 [ 1962.491112][ T5431] try_charge+0xf4b/0x1440 [ 1962.495540][ T5431] ? __lock_acquire+0x800/0x4a00 [ 1962.500485][ T5431] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1962.506035][ T5431] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1962.512019][ T5431] ? cache_grow_begin+0x122/0xd20 [ 1962.517065][ T5431] ? find_held_lock+0x35/0x130 [ 1962.521827][ T5431] ? cache_grow_begin+0x122/0xd20 [ 1962.526857][ T5431] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1962.532317][ T5431] ? memcg_kmem_put_cache+0x50/0x50 [ 1962.537516][ T5431] ? __kasan_check_read+0x11/0x20 [ 1962.542541][ T5431] cache_grow_begin+0x629/0xd20 [ 1962.547396][ T5431] ? __sanitizer_cov_trace_cmp2+0x11/0x20 [ 1962.553129][ T5431] ? mempolicy_slab_node+0x139/0x390 [ 1962.558421][ T5431] fallback_alloc+0x1fd/0x2d0 [ 1962.563108][ T5431] ____cache_alloc_node+0x1bc/0x1d0 [ 1962.568304][ T5431] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1962.574545][ T5431] kmem_cache_alloc+0x1ef/0x710 [ 1962.579397][ T5431] ? stack_trace_save+0xac/0xe0 [ 1962.584252][ T5431] __alloc_file+0x27/0x340 [ 1962.588680][ T5431] alloc_empty_file+0x72/0x170 [ 1962.593459][ T5431] path_openat+0xef/0x46d0 [ 1962.597878][ T5431] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1962.603690][ T5431] ? kasan_slab_alloc+0xf/0x20 [ 1962.608443][ T5431] ? kmem_cache_alloc+0x121/0x710 [ 1962.613464][ T5431] ? getname_flags+0xd6/0x5b0 [ 1962.618139][ T5431] ? getname+0x1a/0x20 [ 1962.622211][ T5431] ? do_sys_open+0x2c9/0x5d0 [ 1962.626822][ T5431] ? __x64_sys_open+0x7e/0xc0 [ 1962.631497][ T5431] ? __kasan_check_read+0x11/0x20 [ 1962.636508][ T5431] ? mark_lock+0xc2/0x1220 [ 1962.640910][ T5431] ? __kasan_check_read+0x11/0x20 [ 1962.645942][ T5431] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 1962.651304][ T5431] ? __alloc_fd+0x487/0x620 [ 1962.655800][ T5431] do_filp_open+0x1a1/0x280 [ 1962.660290][ T5431] ? may_open_dev+0x100/0x100 [ 1962.664950][ T5431] ? lock_downgrade+0x920/0x920 [ 1962.669781][ T5431] ? rwlock_bug.part.0+0x90/0x90 [ 1962.674724][ T5431] ? __kasan_check_read+0x11/0x20 [ 1962.679737][ T5431] ? do_raw_spin_unlock+0x57/0x270 [ 1962.684846][ T5431] ? _raw_spin_unlock+0x2d/0x50 [ 1962.689691][ T5431] ? __alloc_fd+0x487/0x620 [ 1962.694180][ T5431] do_sys_open+0x3fe/0x5d0 [ 1962.698577][ T5431] ? filp_open+0x80/0x80 [ 1962.702797][ T5431] ? __detach_mounts+0x2a0/0x2a0 [ 1962.707714][ T5431] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1962.713149][ T5431] ? do_syscall_64+0x26/0x760 [ 1962.717808][ T5431] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1962.723938][ T5431] ? do_syscall_64+0x26/0x760 [ 1962.728599][ T5431] __x64_sys_open+0x7e/0xc0 [ 1962.733105][ T5431] do_syscall_64+0xfa/0x760 [ 1962.737594][ T5431] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1962.743509][ T5431] RIP: 0033:0x4577f0 [ 1962.747392][ T5431] Code: 31 c0 e9 45 ff ff ff 0f 1f 00 80 3f 00 0f 84 f7 00 00 00 55 53 b9 02 00 00 00 be 00 08 09 00 89 c8 48 81 ec 98 00 00 00 0f 05 <48> 3d 00 f0 ff ff 48 89 c3 0f 87 e9 00 00 00 85 db 0f 88 2f 01 00 [ 1962.766993][ T5431] RSP: 002b:00007ffffb0eaa00 EFLAGS: 00000206 ORIG_RAX: 0000000000000002 [ 1962.775402][ T5431] RAX: ffffffffffffffda RBX: 00000000001dcb1f RCX: 00000000004577f0 [ 1962.783378][ T5431] RDX: 000000000000000c RSI: 0000000000090800 RDI: 00007ffffb0ebbe0 [ 1962.791334][ T5431] RBP: 0000000000000002 R08: 0000000000000001 R09: 00005555564af940 [ 1962.799300][ T5431] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffffb0ebbe0 [ 1962.807250][ T5431] R13: 00007ffffb0ebbd0 R14: 0000000000000000 R15: 00007ffffb0ebbe0 [ 1962.817250][ T5431] memory: usage 468kB, limit 0kB, failcnt 1680 [ 1962.823448][ T5431] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1962.830583][ T5431] Memory cgroup stats for /syz1: [ 1962.830671][ T5431] anon 0 [ 1962.830671][ T5431] file 0 [ 1962.830671][ T5431] kernel_stack 65536 [ 1962.830671][ T5431] slab 430080 [ 1962.830671][ T5431] sock 0 [ 1962.830671][ T5431] shmem 0 [ 1962.830671][ T5431] file_mapped 0 [ 1962.830671][ T5431] file_dirty 0 [ 1962.830671][ T5431] file_writeback 0 [ 1962.830671][ T5431] anon_thp 0 [ 1962.830671][ T5431] inactive_anon 131072 [ 1962.830671][ T5431] active_anon 0 [ 1962.830671][ T5431] inactive_file 0 [ 1962.830671][ T5431] active_file 0 [ 1962.830671][ T5431] unevictable 0 [ 1962.830671][ T5431] slab_reclaimable 135168 [ 1962.830671][ T5431] slab_unreclaimable 294912 [ 1962.830671][ T5431] pgfault 90618 [ 1962.830671][ T5431] pgmajfault 0 [ 1962.830671][ T5431] workingset_refault 0 [ 1962.830671][ T5431] workingset_activate 0 [ 1962.830671][ T5431] workingset_nodereclaim 0 [ 1962.830671][ T5431] pgrefill 240 [ 1962.830671][ T5431] pgscan 242 [ 1962.830671][ T5431] pgsteal 35 [ 1962.830671][ T5431] pgactivate 198 [ 1962.835623][ T5431] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5431,uid=0 [ 1962.943024][ T5431] Memory cgroup out of memory: Killed process 5431 (syz-executor.1) total-vm:72448kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:0 [ 1962.961372][ T1065] oom_reaper: reaped process 5431 (syz-executor.1), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 15:22:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:22:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x80000000000003, 0x4800000000c) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00z\x00\x00\x00\xff\xff\xfd', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x80}}) 15:22:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 1963.503993][ T5479] IPVS: ftp: loaded support on port[0] = 21 15:22:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x26, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:22:03 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r5, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=""/31, 0x1f}}, 0x10) write$cgroup_int(r7, 0x0, 0x0) 15:22:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x26, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 1963.979810][ T5450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1964.029935][ T5450] 8021q: adding VLAN 0 to HW filter on device team0 [ 1964.047959][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1964.056005][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1964.156822][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1964.166710][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1964.186750][ T1996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1964.193894][ T1996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1964.212994][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1964.233977][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1964.243148][ T1996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1964.250288][ T1996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1964.312921][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1964.329307][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1964.338076][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1964.351216][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1964.360875][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1964.376647][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1964.385831][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1964.408470][ T5450] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1964.426337][ T5450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1964.452661][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1964.467796][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1964.478258][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1964.496050][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1964.507428][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1964.517339][ T5479] chnl_net:caif_netlink_parms(): no params data found [ 1964.532940][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1964.549719][ T5450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1964.606107][ T5479] bridge0: port 1(bridge_slave_0) entered blocking state [ 1964.613739][ T5479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1964.632231][ T5479] device bridge_slave_0 entered promiscuous mode [ 1964.642454][ T5479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1964.649657][ T5479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1964.668192][ T5479] device bridge_slave_1 entered promiscuous mode [ 1964.707298][ T5479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1964.727992][ T5479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1964.795454][ T5479] team0: Port device team_slave_0 added [ 1964.803812][ T5479] team0: Port device team_slave_1 added [ 1964.926608][ T5479] device hsr_slave_0 entered promiscuous mode [ 1964.971102][ T5479] device hsr_slave_1 entered promiscuous mode [ 1965.002216][ T5494] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1965.016934][ T5494] CPU: 1 PID: 5494 Comm: syz-executor.5 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1965.025997][ T5494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1965.036059][ T5494] Call Trace: [ 1965.039368][ T5494] dump_stack+0x172/0x1f0 [ 1965.043708][ T5494] dump_header+0x177/0x1152 [ 1965.048221][ T5494] ? __this_cpu_preempt_check+0x3a/0x210 [ 1965.053869][ T5494] ? retint_kernel+0x2b/0x2b [ 1965.058469][ T5494] ? pagefault_out_of_memory+0x11c/0x11c [ 1965.064110][ T5494] ? oom_kill_process+0x94/0x3f0 [ 1965.069064][ T5494] oom_kill_process.cold+0x10/0x15 [ 1965.074182][ T5494] out_of_memory+0x334/0x1340 [ 1965.078876][ T5494] ? __sched_text_start+0x8/0x8 [ 1965.083729][ T5494] ? oom_killer_disable+0x280/0x280 [ 1965.088953][ T5494] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1965.094510][ T5494] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1965.100161][ T5494] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1965.105979][ T5494] ? cgroup_file_notify+0x140/0x1b0 [ 1965.111185][ T5494] memory_max_write+0x262/0x3a0 [ 1965.116055][ T5494] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1965.122823][ T5494] ? lock_acquire+0x190/0x410 [ 1965.127506][ T5494] ? kernfs_fop_write+0x227/0x480 [ 1965.132544][ T5494] cgroup_file_write+0x241/0x790 [ 1965.137497][ T5494] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1965.144269][ T5494] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1965.149921][ T5494] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1965.155566][ T5494] kernfs_fop_write+0x2b8/0x480 [ 1965.160434][ T5494] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1965.166679][ T5494] __vfs_write+0x8a/0x110 [ 1965.171013][ T5494] ? kernfs_fop_open+0xd80/0xd80 [ 1965.175962][ T5494] vfs_write+0x268/0x5d0 [ 1965.180211][ T5494] ksys_write+0x14f/0x290 [ 1965.184550][ T5494] ? __ia32_sys_read+0xb0/0xb0 [ 1965.189323][ T5494] ? do_syscall_64+0x26/0x760 [ 1965.194003][ T5494] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1965.200075][ T5494] ? do_syscall_64+0x26/0x760 [ 1965.204757][ T5494] __x64_sys_write+0x73/0xb0 [ 1965.209360][ T5494] do_syscall_64+0xfa/0x760 [ 1965.213883][ T5494] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1965.219777][ T5494] RIP: 0033:0x459879 [ 1965.223685][ T5494] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1965.243296][ T5494] RSP: 002b:00007fdbdffb4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1965.251725][ T5494] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1965.259703][ T5494] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1965.267692][ T5494] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1965.275672][ T5494] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdbdffb56d4 [ 1965.283655][ T5494] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1965.312852][ T5479] debugfs: Directory 'hsr0' with parent '/' already present! [ 1965.316301][ T5494] memory: usage 5116kB, limit 0kB, failcnt 511 [ 1965.342403][ T5494] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1965.346652][ T5496] IPVS: ftp: loaded support on port[0] = 21 [ 1965.355655][ T5494] Memory cgroup stats for /syz5: [ 1965.374476][ T5494] anon 4395008 [ 1965.374476][ T5494] file 176128 [ 1965.374476][ T5494] kernel_stack 65536 [ 1965.374476][ T5494] slab 827392 [ 1965.374476][ T5494] sock 0 [ 1965.374476][ T5494] shmem 172032 [ 1965.374476][ T5494] file_mapped 0 [ 1965.374476][ T5494] file_dirty 0 [ 1965.374476][ T5494] file_writeback 0 [ 1965.374476][ T5494] anon_thp 4194304 [ 1965.374476][ T5494] inactive_anon 143360 [ 1965.374476][ T5494] active_anon 4395008 [ 1965.374476][ T5494] inactive_file 0 [ 1965.374476][ T5494] active_file 135168 [ 1965.374476][ T5494] unevictable 131072 [ 1965.374476][ T5494] slab_reclaimable 405504 [ 1965.374476][ T5494] slab_unreclaimable 421888 [ 1965.374476][ T5494] pgfault 59829 [ 1965.374476][ T5494] pgmajfault 0 [ 1965.374476][ T5494] workingset_refault 0 [ 1965.374476][ T5494] workingset_activate 0 [ 1965.374476][ T5494] workingset_nodereclaim 0 [ 1965.374476][ T5494] pgrefill 734 [ 1965.374476][ T5494] pgscan 744 [ 1965.374476][ T5494] pgsteal 35 [ 1965.538812][ T5494] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=5493,uid=0 [ 1965.615123][ T5498] IPVS: ftp: loaded support on port[0] = 21 [ 1965.625890][ T5494] Memory cgroup out of memory: Killed process 5493 (syz-executor.5) total-vm:72712kB, anon-rss:4192kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1965.697428][ T5479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1965.708537][ T1065] oom_reaper: reaped process 5493 (syz-executor.5), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB 15:22:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:22:05 executing program 4: r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x66, 0x810, 0xffffffffffffffff, 0x0) [ 1965.775846][ T5450] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1965.810967][ T5450] CPU: 1 PID: 5450 Comm: syz-executor.5 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1965.813509][ T5479] 8021q: adding VLAN 0 to HW filter on device team0 [ 1965.820045][ T5450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1965.836661][ T5450] Call Trace: [ 1965.836683][ T5450] dump_stack+0x172/0x1f0 [ 1965.836702][ T5450] dump_header+0x177/0x1152 [ 1965.836719][ T5450] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1965.836729][ T5450] ? ___ratelimit+0x2c8/0x595 [ 1965.836747][ T5450] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1965.836762][ T5450] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1965.836782][ T5450] ? trace_hardirqs_on+0x67/0x240 [ 1965.859437][ T5450] ? pagefault_out_of_memory+0x11c/0x11c [ 1965.875516][ T5450] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1965.886902][ T5450] ? ___ratelimit+0x60/0x595 [ 1965.886914][ T5450] ? do_raw_spin_unlock+0x57/0x270 [ 1965.886930][ T5450] oom_kill_process.cold+0x10/0x15 [ 1965.886946][ T5450] out_of_memory+0x334/0x1340 [ 1965.886960][ T5450] ? lock_downgrade+0x920/0x920 [ 1965.886977][ T5450] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1965.886993][ T5450] ? oom_killer_disable+0x280/0x280 [ 1965.887015][ T5450] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1965.887028][ T5450] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1965.887044][ T5450] ? do_raw_spin_unlock+0x57/0x270 [ 1965.887060][ T5450] ? _raw_spin_unlock+0x2d/0x50 [ 1965.887077][ T5450] try_charge+0xf4b/0x1440 [ 1965.887100][ T5450] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1965.887116][ T5450] ? percpu_ref_tryget_live+0x111/0x290 [ 1965.901888][ T5450] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1965.901905][ T5450] ? __kasan_check_read+0x11/0x20 [ 1965.901926][ T5450] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1965.901947][ T5450] mem_cgroup_try_charge+0x136/0x590 [ 1965.911469][ T5450] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1965.922442][ T5450] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1965.922462][ T5450] wp_page_copy+0x41e/0x1590 [ 1965.922477][ T5450] ? find_held_lock+0x35/0x130 [ 1965.922495][ T5450] ? pmd_pfn+0x1d0/0x1d0 [ 1965.933635][ T5450] ? lock_downgrade+0x920/0x920 [ 1965.933659][ T5450] ? swp_swapcount+0x540/0x540 [ 1965.933675][ T5450] ? __kasan_check_read+0x11/0x20 [ 1965.933686][ T5450] ? do_raw_spin_unlock+0x57/0x270 [ 1965.933703][ T5450] do_wp_page+0x499/0x14d0 [ 1965.933727][ T5450] ? finish_mkwrite_fault+0x570/0x570 [ 1965.943656][ T5450] __handle_mm_fault+0x22f1/0x3f20 [ 1965.943676][ T5450] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1965.943703][ T5450] ? __kasan_check_read+0x11/0x20 [ 1965.953638][ T5450] handle_mm_fault+0x1b5/0x6c0 [ 1965.953663][ T5450] __do_page_fault+0x536/0xdd0 [ 1965.953685][ T5450] do_page_fault+0x38/0x590 [ 1965.953701][ T5450] page_fault+0x39/0x40 [ 1965.965441][ T5450] RIP: 0033:0x430956 [ 1965.975963][ T5450] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 46 64 00 85 c0 0f 84 [ 1965.975970][ T5450] RSP: 002b:00007ffc6ccd7890 EFLAGS: 00010206 [ 1965.975981][ T5450] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 1965.975990][ T5450] RDX: 00005555561f9930 RSI: 0000555556201970 RDI: 0000000000000003 [ 1965.975998][ T5450] RBP: 0000000000008041 R08: 0000000000000001 R09: 00005555561f8940 [ 1965.976006][ T5450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 1965.976014][ T5450] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 1966.159314][ T5450] memory: usage 688kB, limit 0kB, failcnt 519 [ 1966.183585][ T5450] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1966.207022][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1966.215798][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1966.216297][ T5450] Memory cgroup stats for /syz5: [ 1966.216398][ T5450] anon 65536 [ 1966.216398][ T5450] file 176128 [ 1966.216398][ T5450] kernel_stack 65536 [ 1966.216398][ T5450] slab 827392 [ 1966.216398][ T5450] sock 0 [ 1966.216398][ T5450] shmem 172032 [ 1966.216398][ T5450] file_mapped 0 [ 1966.216398][ T5450] file_dirty 0 [ 1966.216398][ T5450] file_writeback 0 [ 1966.216398][ T5450] anon_thp 0 [ 1966.216398][ T5450] inactive_anon 143360 [ 1966.216398][ T5450] active_anon 65536 [ 1966.216398][ T5450] inactive_file 0 [ 1966.216398][ T5450] active_file 135168 [ 1966.216398][ T5450] unevictable 131072 [ 1966.216398][ T5450] slab_reclaimable 405504 [ 1966.216398][ T5450] slab_unreclaimable 421888 [ 1966.216398][ T5450] pgfault 59829 [ 1966.216398][ T5450] pgmajfault 0 [ 1966.216398][ T5450] workingset_refault 0 [ 1966.216398][ T5450] workingset_activate 0 [ 1966.216398][ T5450] workingset_nodereclaim 0 [ 1966.216398][ T5450] pgrefill 734 [ 1966.216398][ T5450] pgscan 744 [ 1966.216398][ T5450] pgsteal 35 [ 1966.216398][ T5450] pgactivate 660 [ 1966.373412][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1966.391252][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1966.403365][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1966.410517][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1966.427730][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1966.436261][ T5450] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=5450,uid=0 [ 1966.442389][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1966.452518][ T5450] Memory cgroup out of memory: Killed process 5450 (syz-executor.5) total-vm:72448kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:0 [ 1966.497131][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1966.504235][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1966.511986][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1966.520963][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1966.842834][ T5479] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1966.853690][ T5479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1966.873958][T27506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1966.882733][T27506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1966.899024][T27506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1966.918839][T27506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1966.928038][T27506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1966.944795][T27506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1966.956935][T27506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1966.969890][T27506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1966.986237][T27506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1967.031278][ T5496] chnl_net:caif_netlink_parms(): no params data found [ 1967.100739][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1967.122385][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1967.200250][ T5496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1967.218575][ T5496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1967.229955][ T5496] device bridge_slave_0 entered promiscuous mode [ 1967.248310][ T5479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1967.258782][ T5498] chnl_net:caif_netlink_parms(): no params data found [ 1967.282307][ T5496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1967.301159][ T5496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1967.311412][ T5496] device bridge_slave_1 entered promiscuous mode [ 1967.366601][ T5498] bridge0: port 1(bridge_slave_0) entered blocking state [ 1967.383564][ T5498] bridge0: port 1(bridge_slave_0) entered disabled state [ 1967.391809][ T5498] device bridge_slave_0 entered promiscuous mode [ 1967.431048][ T5498] bridge0: port 2(bridge_slave_1) entered blocking state [ 1967.443026][ T5498] bridge0: port 2(bridge_slave_1) entered disabled state [ 1967.451406][ T5498] device bridge_slave_1 entered promiscuous mode [ 1967.495537][ T5496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1967.528865][ T5498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1967.540166][ T5496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1967.551850][ T5498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1967.588363][ T5496] team0: Port device team_slave_0 added [ 1967.625229][ T5496] team0: Port device team_slave_1 added [ 1967.663073][ T5498] team0: Port device team_slave_0 added [ 1967.712246][ T5510] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1967.724029][ T5510] CPU: 1 PID: 5510 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1967.733064][ T5510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1967.733170][ T5498] team0: Port device team_slave_1 added [ 1967.743160][ T5510] Call Trace: [ 1967.743215][ T5510] dump_stack+0x172/0x1f0 [ 1967.743236][ T5510] dump_header+0x177/0x1152 [ 1967.743259][ T5510] ? pagefault_out_of_memory+0x11c/0x11c [ 1967.743280][ T5510] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1967.743293][ T5510] ? ___ratelimit+0x60/0x595 [ 1967.743309][ T5510] ? do_raw_spin_unlock+0x57/0x270 [ 1967.743323][ T5510] oom_kill_process.cold+0x10/0x15 [ 1967.743335][ T5510] out_of_memory+0x334/0x1340 [ 1967.743349][ T5510] ? __sched_text_start+0x8/0x8 [ 1967.743363][ T5510] ? oom_killer_disable+0x280/0x280 [ 1967.743391][ T5510] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1967.743404][ T5510] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1967.743423][ T5510] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1967.743449][ T5510] ? cgroup_file_notify+0x140/0x1b0 [ 1967.743465][ T5510] memory_max_write+0x262/0x3a0 [ 1967.743491][ T5510] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1967.782215][ T5510] ? lock_acquire+0x190/0x410 [ 1967.818956][ T5510] ? kernfs_fop_write+0x227/0x480 [ 1967.818979][ T5510] cgroup_file_write+0x241/0x790 [ 1967.818996][ T5510] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1967.819012][ T5510] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1967.819035][ T5510] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1967.819048][ T5510] kernfs_fop_write+0x2b8/0x480 [ 1967.819064][ T5510] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1967.819082][ T5510] __vfs_write+0x8a/0x110 [ 1967.819093][ T5510] ? kernfs_fop_open+0xd80/0xd80 [ 1967.819106][ T5510] vfs_write+0x268/0x5d0 [ 1967.819122][ T5510] ksys_write+0x14f/0x290 [ 1967.819136][ T5510] ? __ia32_sys_read+0xb0/0xb0 [ 1967.819152][ T5510] ? do_syscall_64+0x26/0x760 [ 1967.819167][ T5510] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1967.819180][ T5510] ? do_syscall_64+0x26/0x760 [ 1967.819197][ T5510] __x64_sys_write+0x73/0xb0 [ 1967.819213][ T5510] do_syscall_64+0xfa/0x760 [ 1967.819232][ T5510] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1967.819242][ T5510] RIP: 0033:0x459879 [ 1967.819257][ T5510] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1967.819264][ T5510] RSP: 002b:00007fb75572dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1967.819277][ T5510] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1967.819286][ T5510] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 1967.819293][ T5510] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1967.819301][ T5510] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb75572e6d4 [ 1967.819309][ T5510] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1967.960751][ T5510] memory: usage 2972kB, limit 0kB, failcnt 413 [ 1968.005559][ T5510] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1968.030070][ T5510] Memory cgroup stats for /syz2: [ 1968.031748][ T5510] anon 2134016 [ 1968.031748][ T5510] file 151552 [ 1968.031748][ T5510] kernel_stack 65536 [ 1968.031748][ T5510] slab 458752 [ 1968.031748][ T5510] sock 0 [ 1968.031748][ T5510] shmem 0 [ 1968.031748][ T5510] file_mapped 0 [ 1968.031748][ T5510] file_dirty 0 [ 1968.031748][ T5510] file_writeback 0 [ 1968.031748][ T5510] anon_thp 2097152 [ 1968.031748][ T5510] inactive_anon 0 [ 1968.031748][ T5510] active_anon 2134016 [ 1968.031748][ T5510] inactive_file 135168 [ 1968.031748][ T5510] active_file 0 [ 1968.031748][ T5510] unevictable 0 [ 1968.031748][ T5510] slab_reclaimable 135168 [ 1968.031748][ T5510] slab_unreclaimable 323584 [ 1968.031748][ T5510] pgfault 67089 [ 1968.031748][ T5510] pgmajfault 0 [ 1968.031748][ T5510] workingset_refault 0 [ 1968.031748][ T5510] workingset_activate 0 [ 1968.031748][ T5510] workingset_nodereclaim 0 [ 1968.031748][ T5510] pgrefill 310 [ 1968.031748][ T5510] pgscan 305 [ 1968.031748][ T5510] pgsteal 33 [ 1968.031748][ T5510] pgactivate 264 [ 1968.142297][ T5510] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=5509,uid=0 [ 1968.159116][ T5510] Memory cgroup out of memory: Killed process 5509 (syz-executor.2) total-vm:72580kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000 [ 1968.181040][ T1065] oom_reaper: reaped process 5509 (syz-executor.2), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 1968.205854][ T5496] device hsr_slave_0 entered promiscuous mode [ 1968.292729][ T5496] device hsr_slave_1 entered promiscuous mode [ 1968.332920][ T5496] debugfs: Directory 'hsr0' with parent '/' already present! [ 1968.375270][ T5498] device hsr_slave_0 entered promiscuous mode [ 1968.412904][ T5498] device hsr_slave_1 entered promiscuous mode 15:22:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r2, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r3, 0x0, 0x0) 15:22:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r5, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=""/31, 0x1f}}, 0x10) write$cgroup_int(r7, 0x0, 0x0) 15:22:08 executing program 4: read(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) flistxattr(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x10219) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) 15:22:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) [ 1968.439108][ T5479] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1968.453042][ T5479] CPU: 1 PID: 5479 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1968.458354][ T5498] debugfs: Directory 'hsr0' with parent '/' already present! [ 1968.462095][ T5479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1968.462102][ T5479] Call Trace: [ 1968.462127][ T5479] dump_stack+0x172/0x1f0 [ 1968.462149][ T5479] dump_header+0x177/0x1152 [ 1968.491669][ T5479] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1968.497504][ T5479] ? ___ratelimit+0x2c8/0x595 [ 1968.502201][ T5479] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1968.508029][ T5479] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1968.513338][ T5479] ? trace_hardirqs_on+0x67/0x240 [ 1968.518382][ T5479] ? pagefault_out_of_memory+0x11c/0x11c [ 1968.524034][ T5479] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1968.529852][ T5479] ? ___ratelimit+0x60/0x595 [ 1968.534447][ T5479] ? do_raw_spin_unlock+0x57/0x270 [ 1968.539571][ T5479] oom_kill_process.cold+0x10/0x15 [ 1968.544699][ T5479] out_of_memory+0x334/0x1340 [ 1968.549386][ T5479] ? lock_downgrade+0x920/0x920 [ 1968.554244][ T5479] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1968.560058][ T5479] ? oom_killer_disable+0x280/0x280 [ 1968.565280][ T5479] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1968.570841][ T5479] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1968.576493][ T5479] ? do_raw_spin_unlock+0x57/0x270 [ 1968.581612][ T5479] ? _raw_spin_unlock+0x2d/0x50 [ 1968.586454][ T5479] try_charge+0xf4b/0x1440 [ 1968.590863][ T5479] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1968.596396][ T5479] ? percpu_ref_tryget_live+0x111/0x290 [ 1968.602021][ T5479] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1968.608259][ T5479] ? __kasan_check_read+0x11/0x20 [ 1968.613276][ T5479] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1968.618811][ T5479] mem_cgroup_try_charge+0x136/0x590 [ 1968.624090][ T5479] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1968.630359][ T5479] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1968.636030][ T5479] __handle_mm_fault+0x1e34/0x3f20 [ 1968.641145][ T5479] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1968.646692][ T5479] ? __kasan_check_read+0x11/0x20 [ 1968.651714][ T5479] handle_mm_fault+0x1b5/0x6c0 [ 1968.656470][ T5479] __do_page_fault+0x536/0xdd0 [ 1968.661231][ T5479] do_page_fault+0x38/0x590 [ 1968.665729][ T5479] page_fault+0x39/0x40 [ 1968.669870][ T5479] RIP: 0033:0x4034f2 [ 1968.673769][ T5479] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 a9 8d 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 c9 42 05 00 48 [ 1968.693493][ T5479] RSP: 002b:00007ffd996c4fb0 EFLAGS: 00010246 [ 1968.699557][ T5479] RAX: 0000000000000000 RBX: 00000000001de07e RCX: 0000000000413480 [ 1968.707520][ T5479] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffd996c60e0 [ 1968.715478][ T5479] RBP: 0000000000000002 R08: 0000000000000001 R09: 00005555571e9940 [ 1968.723443][ T5479] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd996c60e0 [ 1968.731402][ T5479] R13: 00007ffd996c60d0 R14: 0000000000000000 R15: 00007ffd996c60e0 [ 1968.756369][ T5479] memory: usage 632kB, limit 0kB, failcnt 421 [ 1968.763428][ T5479] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1968.788480][ T5479] Memory cgroup stats for /syz2: [ 1968.788570][ T5479] anon 0 [ 1968.788570][ T5479] file 151552 [ 1968.788570][ T5479] kernel_stack 65536 [ 1968.788570][ T5479] slab 458752 [ 1968.788570][ T5479] sock 0 [ 1968.788570][ T5479] shmem 0 [ 1968.788570][ T5479] file_mapped 0 [ 1968.788570][ T5479] file_dirty 0 [ 1968.788570][ T5479] file_writeback 0 [ 1968.788570][ T5479] anon_thp 0 [ 1968.788570][ T5479] inactive_anon 0 [ 1968.788570][ T5479] active_anon 0 [ 1968.788570][ T5479] inactive_file 135168 [ 1968.788570][ T5479] active_file 0 [ 1968.788570][ T5479] unevictable 0 [ 1968.788570][ T5479] slab_reclaimable 135168 [ 1968.788570][ T5479] slab_unreclaimable 323584 [ 1968.788570][ T5479] pgfault 67089 [ 1968.788570][ T5479] pgmajfault 0 [ 1968.788570][ T5479] workingset_refault 0 [ 1968.788570][ T5479] workingset_activate 0 [ 1968.788570][ T5479] workingset_nodereclaim 0 [ 1968.788570][ T5479] pgrefill 310 [ 1968.788570][ T5479] pgscan 305 [ 1968.788570][ T5479] pgsteal 33 [ 1968.788570][ T5479] pgactivate 264 [ 1968.814165][ T5496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1968.935517][ T5496] 8021q: adding VLAN 0 to HW filter on device team0 [ 1968.956379][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1968.965329][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1969.026615][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1969.038723][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1969.071470][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1969.078648][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1969.106114][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1969.116722][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1969.135065][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1969.142432][ T2999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1969.161777][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1969.190698][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1969.209048][ T5479] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=5479,uid=0 [ 1969.220893][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 15:22:09 executing program 4: read(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) flistxattr(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x10219) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) [ 1969.245070][ T5479] Memory cgroup out of memory: Killed process 5479 (syz-executor.2) total-vm:72448kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:0 [ 1969.246995][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1969.309537][ T1065] oom_reaper: reaped process 5479 (syz-executor.2), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 1969.309634][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1969.388891][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1969.398567][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 15:22:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1969.686026][ T5520] binder: 5518:5520 ioctl c0306201 20000540 returned -14 [ 1970.040307][ T5496] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1970.055786][ T5496] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1970.075987][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1970.084348][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1970.092974][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1970.103157][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1970.111706][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1970.124214][ T5498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1970.157200][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1970.185602][T27506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1970.201419][T27506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1970.216847][ T5498] 8021q: adding VLAN 0 to HW filter on device team0 [ 1970.234392][ T5496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1970.262222][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1970.272033][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1970.281741][ T8780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1970.288886][ T8780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1970.296686][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1970.305667][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1970.314677][ T8780] bridge0: port 2(bridge_slave_1) entered blocking state [ 1970.321833][ T8780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1970.340943][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1970.357951][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1970.367209][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1970.377210][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1970.386336][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1970.395476][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1970.406695][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1970.418734][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1970.436870][ T5498] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1970.447917][ T5498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1970.461679][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1970.479065][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1970.488073][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1970.498853][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1970.508016][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1970.529567][ T5498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1970.723491][ T5529] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1970.751357][ T5529] CPU: 0 PID: 5529 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1970.760429][ T5529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1970.770491][ T5529] Call Trace: [ 1970.773792][ T5529] dump_stack+0x172/0x1f0 [ 1970.778133][ T5529] dump_header+0x177/0x1152 [ 1970.782661][ T5529] ? pagefault_out_of_memory+0x11c/0x11c [ 1970.788300][ T5529] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1970.794104][ T5529] ? ___ratelimit+0x60/0x595 [ 1970.798702][ T5529] ? do_raw_spin_unlock+0x57/0x270 [ 1970.803827][ T5529] oom_kill_process.cold+0x10/0x15 [ 1970.808949][ T5529] out_of_memory+0x334/0x1340 [ 1970.813640][ T5529] ? __sched_text_start+0x8/0x8 [ 1970.818517][ T5529] ? oom_killer_disable+0x280/0x280 [ 1970.823747][ T5529] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1970.829308][ T5529] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1970.834959][ T5529] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1970.840809][ T5529] ? cgroup_file_notify+0x140/0x1b0 [ 1970.846032][ T5529] memory_max_write+0x262/0x3a0 [ 1970.850899][ T5529] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1970.857668][ T5529] ? lock_acquire+0x20b/0x410 [ 1970.862362][ T5529] cgroup_file_write+0x241/0x790 [ 1970.867306][ T5529] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1970.874071][ T5529] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1970.879715][ T5529] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1970.885354][ T5529] kernfs_fop_write+0x2b8/0x480 [ 1970.890231][ T5529] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1970.896502][ T5529] __vfs_write+0x8a/0x110 [ 1970.900834][ T5529] ? kernfs_fop_open+0xd80/0xd80 [ 1970.905775][ T5529] vfs_write+0x268/0x5d0 [ 1970.910027][ T5529] ksys_write+0x14f/0x290 [ 1970.914361][ T5529] ? __ia32_sys_read+0xb0/0xb0 [ 1970.919127][ T5529] ? do_syscall_64+0x26/0x760 [ 1970.923805][ T5529] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1970.929868][ T5529] ? do_syscall_64+0x26/0x760 [ 1970.934550][ T5529] __x64_sys_write+0x73/0xb0 [ 1970.939145][ T5529] do_syscall_64+0xfa/0x760 [ 1970.943662][ T5529] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1970.949554][ T5529] RIP: 0033:0x459879 [ 1970.953449][ T5529] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1970.973055][ T5529] RSP: 002b:00007fe6139d7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1970.981469][ T5529] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1970.989453][ T5529] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1970.997426][ T5529] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1971.005393][ T5529] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe6139d86d4 [ 1971.013358][ T5529] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1971.094760][ T5529] memory: usage 4916kB, limit 0kB, failcnt 290 [ 1971.101209][ T5529] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1971.125703][ T5529] Memory cgroup stats for /syz0: [ 1971.127009][ T5529] anon 4251648 [ 1971.127009][ T5529] file 155648 [ 1971.127009][ T5529] kernel_stack 131072 [ 1971.127009][ T5529] slab 389120 [ 1971.127009][ T5529] sock 0 [ 1971.127009][ T5529] shmem 110592 [ 1971.127009][ T5529] file_mapped 0 [ 1971.127009][ T5529] file_dirty 0 [ 1971.127009][ T5529] file_writeback 0 [ 1971.127009][ T5529] anon_thp 4194304 [ 1971.127009][ T5529] inactive_anon 0 [ 1971.127009][ T5529] active_anon 4251648 [ 1971.127009][ T5529] inactive_file 135168 [ 1971.127009][ T5529] active_file 0 [ 1971.127009][ T5529] unevictable 12288 [ 1971.127009][ T5529] slab_reclaimable 135168 [ 1971.127009][ T5529] slab_unreclaimable 253952 [ 1971.127009][ T5529] pgfault 60687 [ 1971.127009][ T5529] pgmajfault 0 [ 1971.127009][ T5529] workingset_refault 0 [ 1971.127009][ T5529] workingset_activate 0 [ 1971.127009][ T5529] workingset_nodereclaim 0 [ 1971.127009][ T5529] pgrefill 225 [ 1971.127009][ T5529] pgscan 223 [ 1971.127009][ T5529] pgsteal 79 [ 1971.127009][ T5529] pgactivate 132 [ 1971.246318][ T5529] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=5528,uid=0 [ 1971.263250][ T5529] Memory cgroup out of memory: Killed process 5528 (syz-executor.0) total-vm:72712kB, anon-rss:4192kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1971.287416][ T1065] oom_reaper: reaped process 5528 (syz-executor.0), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 15:22:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:22:11 executing program 4: pipe2(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000040)='\\-cpusetsecurity\x00', 0x40, 0x0, &(0x7f0000000080)={0xff, 0x6, 0x0, 0x6, 0x80, 0x8001, 0x100000001, 0x4}) 15:22:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r2, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r3, 0x0, 0x0) [ 1971.616466][ T5496] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1971.640359][ T5496] CPU: 1 PID: 5496 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1971.649429][ T5496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1971.659497][ T5496] Call Trace: [ 1971.662810][ T5496] dump_stack+0x172/0x1f0 [ 1971.667901][ T5496] dump_header+0x177/0x1152 [ 1971.672432][ T5496] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1971.678251][ T5496] ? ___ratelimit+0x2c8/0x595 [ 1971.682949][ T5496] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1971.688789][ T5496] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1971.694093][ T5496] ? trace_hardirqs_on+0x67/0x240 [ 1971.699143][ T5496] ? pagefault_out_of_memory+0x11c/0x11c [ 1971.704792][ T5496] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1971.710612][ T5496] ? ___ratelimit+0x60/0x595 [ 1971.715209][ T5496] ? do_raw_spin_unlock+0x57/0x270 [ 1971.720342][ T5496] oom_kill_process.cold+0x10/0x15 [ 1971.725470][ T5496] out_of_memory+0x334/0x1340 [ 1971.730155][ T5496] ? lock_downgrade+0x920/0x920 [ 1971.735025][ T5496] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1971.740846][ T5496] ? oom_killer_disable+0x280/0x280 [ 1971.746065][ T5496] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1971.751620][ T5496] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1971.757266][ T5496] ? do_raw_spin_unlock+0x57/0x270 [ 1971.762391][ T5496] ? _raw_spin_unlock+0x2d/0x50 [ 1971.767256][ T5496] try_charge+0xf4b/0x1440 [ 1971.771692][ T5496] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1971.777246][ T5496] ? percpu_ref_tryget_live+0x111/0x290 [ 1971.782809][ T5496] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1971.789067][ T5496] ? __kasan_check_read+0x11/0x20 [ 1971.794115][ T5496] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1971.799678][ T5496] mem_cgroup_try_charge+0x136/0x590 [ 1971.804987][ T5496] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1971.811255][ T5496] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1971.816911][ T5496] wp_page_copy+0x41e/0x1590 [ 1971.821516][ T5496] ? find_held_lock+0x35/0x130 [ 1971.826298][ T5496] ? pmd_pfn+0x1d0/0x1d0 [ 1971.830553][ T5496] ? lock_downgrade+0x920/0x920 [ 1971.835449][ T5496] ? swp_swapcount+0x540/0x540 [ 1971.840249][ T5496] ? __kasan_check_read+0x11/0x20 [ 1971.845298][ T5496] ? do_raw_spin_unlock+0x57/0x270 [ 1971.850452][ T5496] do_wp_page+0x499/0x14d0 [ 1971.854905][ T5496] ? finish_mkwrite_fault+0x570/0x570 [ 1971.860314][ T5496] __handle_mm_fault+0x22f1/0x3f20 [ 1971.865473][ T5496] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1971.871060][ T5496] ? __kasan_check_read+0x11/0x20 [ 1971.876124][ T5496] handle_mm_fault+0x1b5/0x6c0 [ 1971.880924][ T5496] __do_page_fault+0x536/0xdd0 [ 1971.885734][ T5496] do_page_fault+0x38/0x590 [ 1971.890275][ T5496] page_fault+0x39/0x40 [ 1971.894457][ T5496] RIP: 0033:0x4034f2 [ 1971.898370][ T5496] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 a9 8d 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 c9 42 05 00 48 [ 1971.918000][ T5496] RSP: 002b:00007ffd09cfdcf0 EFLAGS: 00010246 [ 1971.924112][ T5496] RAX: 0000000000000000 RBX: 00000000001dec3a RCX: 0000000000413480 [ 1971.932114][ T5496] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffd09cfee20 [ 1971.940105][ T5496] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000555555e02940 [ 1971.948096][ T5496] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd09cfee20 [ 1971.956105][ T5496] R13: 00007ffd09cfee10 R14: 0000000000000000 R15: 00007ffd09cfee20 [ 1972.234205][ T5496] memory: usage 492kB, limit 0kB, failcnt 298 [ 1972.240377][ T5496] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1972.257772][ T5496] Memory cgroup stats for /syz0: [ 1972.257915][ T5496] anon 61440 [ 1972.257915][ T5496] file 155648 [ 1972.257915][ T5496] kernel_stack 0 [ 1972.257915][ T5496] slab 389120 [ 1972.257915][ T5496] sock 0 [ 1972.257915][ T5496] shmem 110592 [ 1972.257915][ T5496] file_mapped 0 [ 1972.257915][ T5496] file_dirty 0 [ 1972.257915][ T5496] file_writeback 0 [ 1972.257915][ T5496] anon_thp 0 [ 1972.257915][ T5496] inactive_anon 0 [ 1972.257915][ T5496] active_anon 61440 [ 1972.257915][ T5496] inactive_file 135168 [ 1972.257915][ T5496] active_file 0 [ 1972.257915][ T5496] unevictable 12288 [ 1972.257915][ T5496] slab_reclaimable 135168 [ 1972.257915][ T5496] slab_unreclaimable 253952 [ 1972.257915][ T5496] pgfault 60687 [ 1972.257915][ T5496] pgmajfault 0 [ 1972.257915][ T5496] workingset_refault 0 [ 1972.257915][ T5496] workingset_activate 0 [ 1972.257915][ T5496] workingset_nodereclaim 0 [ 1972.257915][ T5496] pgrefill 225 [ 1972.257915][ T5496] pgscan 223 [ 1972.257915][ T5496] pgsteal 79 [ 1972.257915][ T5496] pgactivate 132 [ 1972.385133][ T5496] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=5496,uid=0 [ 1972.401713][ T5496] Memory cgroup out of memory: Killed process 5496 (syz-executor.0) total-vm:72448kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:0 [ 1972.420872][ T1065] oom_reaper: reaped process 5496 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 1972.502308][ T5536] IPVS: ftp: loaded support on port[0] = 21 [ 1972.698309][ T5546] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1972.708890][ T5546] CPU: 0 PID: 5546 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1972.717943][ T5546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1972.728033][ T5546] Call Trace: [ 1972.731387][ T5546] dump_stack+0x172/0x1f0 [ 1972.735770][ T5546] dump_header+0x177/0x1152 [ 1972.740325][ T5546] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1972.746167][ T5546] ? ___ratelimit+0x2c8/0x595 [ 1972.750886][ T5546] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1972.756752][ T5546] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1972.762098][ T5546] ? trace_hardirqs_on+0x67/0x240 [ 1972.767166][ T5546] ? pagefault_out_of_memory+0x11c/0x11c [ 1972.772842][ T5546] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1972.778679][ T5546] ? ___ratelimit+0x60/0x595 [ 1972.783296][ T5546] ? do_raw_spin_unlock+0x57/0x270 [ 1972.788456][ T5546] oom_kill_process.cold+0x10/0x15 [ 1972.793617][ T5546] out_of_memory+0x334/0x1340 [ 1972.798340][ T5546] ? __sched_text_start+0x8/0x8 [ 1972.803289][ T5546] ? oom_killer_disable+0x280/0x280 [ 1972.808538][ T5546] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1972.814238][ T5546] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1972.819926][ T5546] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1972.825777][ T5546] ? cgroup_file_notify+0x140/0x1b0 [ 1972.831013][ T5546] memory_max_write+0x262/0x3a0 [ 1972.836150][ T5546] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1972.843032][ T5546] ? lock_acquire+0x190/0x410 [ 1972.847860][ T5546] ? kernfs_fop_write+0x227/0x480 [ 1972.852919][ T5546] cgroup_file_write+0x241/0x790 [ 1972.857883][ T5546] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1972.864789][ T5546] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1972.871162][ T5546] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1972.876816][ T5546] kernfs_fop_write+0x2b8/0x480 [ 1972.881677][ T5546] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1972.888050][ T5546] __vfs_write+0x8a/0x110 [ 1972.892395][ T5546] ? kernfs_fop_open+0xd80/0xd80 [ 1972.897349][ T5546] vfs_write+0x268/0x5d0 [ 1972.901615][ T5546] ksys_write+0x14f/0x290 [ 1972.905964][ T5546] ? __ia32_sys_read+0xb0/0xb0 [ 1972.910745][ T5546] ? do_syscall_64+0x26/0x760 [ 1972.915442][ T5546] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1972.921559][ T5546] ? do_syscall_64+0x26/0x760 [ 1972.926310][ T5546] __x64_sys_write+0x73/0xb0 [ 1972.930932][ T5546] do_syscall_64+0xfa/0x760 [ 1972.935460][ T5546] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1972.941365][ T5546] RIP: 0033:0x459879 [ 1972.945267][ T5546] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1972.964878][ T5546] RSP: 002b:00007f352bc7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1972.973303][ T5546] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1972.981282][ T5546] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1972.989278][ T5546] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1972.997263][ T5546] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f352bc7f6d4 [ 1973.005265][ T5546] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1973.017066][ T5546] memory: usage 4944kB, limit 0kB, failcnt 1681 [ 1973.023605][ T5546] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1973.023614][ T5546] Memory cgroup stats for /syz1: [ 1973.023752][ T5546] anon 4272128 [ 1973.023752][ T5546] file 0 [ 1973.023752][ T5546] kernel_stack 65536 [ 1973.023752][ T5546] slab 430080 [ 1973.023752][ T5546] sock 0 [ 1973.023752][ T5546] shmem 0 [ 1973.023752][ T5546] file_mapped 0 [ 1973.023752][ T5546] file_dirty 0 [ 1973.023752][ T5546] file_writeback 0 [ 1973.023752][ T5546] anon_thp 4194304 [ 1973.023752][ T5546] inactive_anon 131072 [ 1973.023752][ T5546] active_anon 4272128 [ 1973.023752][ T5546] inactive_file 0 [ 1973.023752][ T5546] active_file 0 [ 1973.023752][ T5546] unevictable 0 [ 1973.023752][ T5546] slab_reclaimable 135168 [ 1973.023752][ T5546] slab_unreclaimable 294912 [ 1973.023752][ T5546] pgfault 90717 [ 1973.023752][ T5546] pgmajfault 0 [ 1973.023752][ T5546] workingset_refault 0 [ 1973.023752][ T5546] workingset_activate 0 [ 1973.023752][ T5546] workingset_nodereclaim 0 [ 1973.023752][ T5546] pgrefill 240 [ 1973.023752][ T5546] pgscan 242 [ 1973.023752][ T5546] pgsteal 35 [ 1973.023752][ T5546] pgactivate 198 [ 1973.023772][ T5546] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5544,uid=0 [ 1973.023936][ T5546] Memory cgroup out of memory: Killed process 5544 (syz-executor.1) total-vm:72712kB, anon-rss:4184kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:147456kB oom_score_adj:1000 [ 1973.027570][ T1065] oom_reaper: reaped process 5544 (syz-executor.1), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB [ 1973.181666][ T5538] IPVS: ftp: loaded support on port[0] = 21 15:22:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:22:12 executing program 4: pipe2(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000040)='\\-cpusetsecurity\x00', 0x40, 0x0, &(0x7f0000000080)={0xff, 0x6, 0x0, 0x6, 0x80, 0x8001, 0x100000001, 0x4}) [ 1973.259478][ T5498] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1973.280362][ T5498] CPU: 0 PID: 5498 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1973.289464][ T5498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1973.299537][ T5498] Call Trace: [ 1973.302859][ T5498] dump_stack+0x172/0x1f0 [ 1973.307214][ T5498] dump_header+0x177/0x1152 [ 1973.311747][ T5498] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1973.317576][ T5498] ? ___ratelimit+0x2c8/0x595 [ 1973.322271][ T5498] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1973.328149][ T5498] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1973.333465][ T5498] ? trace_hardirqs_on+0x67/0x240 [ 1973.338516][ T5498] ? pagefault_out_of_memory+0x11c/0x11c [ 1973.344172][ T5498] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1973.349999][ T5498] ? ___ratelimit+0x60/0x595 [ 1973.354606][ T5498] ? do_raw_spin_unlock+0x57/0x270 [ 1973.359744][ T5498] oom_kill_process.cold+0x10/0x15 [ 1973.364877][ T5498] out_of_memory+0x334/0x1340 [ 1973.369573][ T5498] ? lock_downgrade+0x920/0x920 [ 1973.374443][ T5498] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1973.380267][ T5498] ? oom_killer_disable+0x280/0x280 [ 1973.385586][ T5498] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1973.391143][ T5498] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1973.396807][ T5498] ? do_raw_spin_unlock+0x57/0x270 [ 1973.401933][ T5498] ? _raw_spin_unlock+0x2d/0x50 [ 1973.406972][ T5498] try_charge+0xf4b/0x1440 [ 1973.411404][ T5498] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1973.417037][ T5498] ? percpu_ref_tryget_live+0x111/0x290 [ 1973.422586][ T5498] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1973.428857][ T5498] ? __kasan_check_read+0x11/0x20 [ 1973.433883][ T5498] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1973.439425][ T5498] mem_cgroup_try_charge+0x136/0x590 [ 1973.444711][ T5498] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1973.450951][ T5498] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1973.456582][ T5498] wp_page_copy+0x41e/0x1590 [ 1973.461166][ T5498] ? find_held_lock+0x35/0x130 [ 1973.465930][ T5498] ? pmd_pfn+0x1d0/0x1d0 [ 1973.470170][ T5498] ? lock_downgrade+0x920/0x920 [ 1973.475058][ T5498] ? swp_swapcount+0x540/0x540 [ 1973.479827][ T5498] ? __kasan_check_read+0x11/0x20 [ 1973.484863][ T5498] ? do_raw_spin_unlock+0x57/0x270 [ 1973.489977][ T5498] do_wp_page+0x499/0x14d0 [ 1973.494395][ T5498] ? finish_mkwrite_fault+0x570/0x570 [ 1973.499777][ T5498] __handle_mm_fault+0x22f1/0x3f20 [ 1973.504916][ T5498] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1973.510475][ T5498] ? __kasan_check_read+0x11/0x20 [ 1973.515507][ T5498] handle_mm_fault+0x1b5/0x6c0 [ 1973.520278][ T5498] __do_page_fault+0x536/0xdd0 [ 1973.525050][ T5498] do_page_fault+0x38/0x590 [ 1973.529548][ T5498] page_fault+0x39/0x40 [ 1973.533698][ T5498] RIP: 0033:0x430956 [ 1973.537607][ T5498] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 46 64 00 85 c0 0f 84 15:22:13 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000680)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0xba) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/232, 0xe8}], 0x1}, 0x0) [ 1973.557206][ T5498] RSP: 002b:00007fffdadf04a0 EFLAGS: 00010206 [ 1973.563282][ T5498] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 1973.571268][ T5498] RDX: 000055555664d930 RSI: 0000555556655970 RDI: 0000000000000003 [ 1973.579259][ T5498] RBP: 0000000000008041 R08: 0000000000000001 R09: 000055555664c940 [ 1973.587245][ T5498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 1973.595231][ T5498] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 1973.660521][ T5498] memory: usage 512kB, limit 0kB, failcnt 1697 [ 1973.686473][ T5498] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1973.693389][ T5498] Memory cgroup stats for /syz1: [ 1973.693503][ T5498] anon 8192 [ 1973.693503][ T5498] file 0 [ 1973.693503][ T5498] kernel_stack 0 [ 1973.693503][ T5498] slab 430080 [ 1973.693503][ T5498] sock 0 [ 1973.693503][ T5498] shmem 0 [ 1973.693503][ T5498] file_mapped 0 [ 1973.693503][ T5498] file_dirty 0 [ 1973.693503][ T5498] file_writeback 0 [ 1973.693503][ T5498] anon_thp 0 [ 1973.693503][ T5498] inactive_anon 131072 [ 1973.693503][ T5498] active_anon 8192 [ 1973.693503][ T5498] inactive_file 0 [ 1973.693503][ T5498] active_file 0 [ 1973.693503][ T5498] unevictable 0 [ 1973.693503][ T5498] slab_reclaimable 135168 [ 1973.693503][ T5498] slab_unreclaimable 294912 [ 1973.693503][ T5498] pgfault 90717 [ 1973.693503][ T5498] pgmajfault 0 [ 1973.693503][ T5498] workingset_refault 0 [ 1973.693503][ T5498] workingset_activate 0 [ 1973.693503][ T5498] workingset_nodereclaim 0 [ 1973.693503][ T5498] pgrefill 240 [ 1973.693503][ T5498] pgscan 242 [ 1973.693503][ T5498] pgsteal 35 [ 1973.693503][ T5498] pgactivate 198 [ 1973.804372][ T5498] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5498,uid=0 [ 1973.840252][ T5498] Memory cgroup out of memory: Killed process 5498 (syz-executor.1) total-vm:72448kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:0 15:22:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 1973.866636][ T1065] oom_reaper: reaped process 5498 (syz-executor.1), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 1973.917617][ T5551] IPVS: ftp: loaded support on port[0] = 21 [ 1975.290095][ T5536] chnl_net:caif_netlink_parms(): no params data found [ 1975.326260][ T5538] chnl_net:caif_netlink_parms(): no params data found [ 1976.304559][ T5551] chnl_net:caif_netlink_parms(): no params data found [ 1976.320570][ T5536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1976.327650][ T5536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1976.337725][ T5536] device bridge_slave_0 entered promiscuous mode [ 1976.349758][ T5538] bridge0: port 1(bridge_slave_0) entered blocking state [ 1976.356847][ T5538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1976.365223][ T5538] device bridge_slave_0 entered promiscuous mode [ 1976.374473][ T5538] bridge0: port 2(bridge_slave_1) entered blocking state [ 1976.382180][ T5538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1976.390996][ T5538] device bridge_slave_1 entered promiscuous mode [ 1976.397863][ T5536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1976.405136][ T5536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1976.413665][ T5536] device bridge_slave_1 entered promiscuous mode [ 1976.938616][ T5536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1976.958455][ T5538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1977.452412][ T5536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1977.470366][ T5538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1977.495295][ T5551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1977.504895][ T5551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1977.513404][ T5551] device bridge_slave_0 entered promiscuous mode [ 1977.533056][ T5538] team0: Port device team_slave_0 added [ 1977.540090][ T5551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1977.547184][ T5551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1977.556222][ T5551] device bridge_slave_1 entered promiscuous mode [ 1977.564944][ T5536] team0: Port device team_slave_0 added [ 1978.051062][ T5538] team0: Port device team_slave_1 added [ 1978.066198][ T5536] team0: Port device team_slave_1 added [ 1978.100584][ T5551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1978.117140][ T125] device bridge_slave_1 left promiscuous mode [ 1978.123824][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1978.154149][ T125] device bridge_slave_0 left promiscuous mode [ 1978.160354][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1978.205827][ T125] device bridge_slave_1 left promiscuous mode [ 1978.212075][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1978.245736][ T125] device bridge_slave_0 left promiscuous mode [ 1978.252441][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1978.296639][ T125] device bridge_slave_1 left promiscuous mode [ 1978.302858][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1978.356098][ T125] device bridge_slave_0 left promiscuous mode [ 1978.362363][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1978.427653][ T125] device bridge_slave_1 left promiscuous mode [ 1978.434149][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1978.497346][ T125] device bridge_slave_0 left promiscuous mode [ 1978.503567][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1978.558392][ T125] device bridge_slave_1 left promiscuous mode [ 1978.564590][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1978.629434][ T125] device bridge_slave_0 left promiscuous mode [ 1978.635706][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1978.679929][ T125] device bridge_slave_1 left promiscuous mode [ 1978.686426][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1978.719113][ T125] device bridge_slave_0 left promiscuous mode [ 1978.725349][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1991.665881][ T125] device hsr_slave_0 left promiscuous mode [ 1991.736293][ T125] device hsr_slave_1 left promiscuous mode [ 1991.794150][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1991.807400][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1991.820746][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1991.863684][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1991.956483][ T125] bond0 (unregistering): Released all slaves [ 1992.089542][ T125] device hsr_slave_0 left promiscuous mode [ 1992.129393][ T125] device hsr_slave_1 left promiscuous mode [ 1992.177916][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1992.193743][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1992.208664][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1992.255296][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1992.329750][ T125] bond0 (unregistering): Released all slaves [ 1992.472971][ T125] device hsr_slave_0 left promiscuous mode [ 1992.520122][ T125] device hsr_slave_1 left promiscuous mode [ 1992.588888][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1992.602663][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1992.615614][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1992.649534][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1992.751525][ T125] bond0 (unregistering): Released all slaves [ 1992.906401][ T125] device hsr_slave_0 left promiscuous mode [ 1992.946376][ T125] device hsr_slave_1 left promiscuous mode [ 1992.994037][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1993.010473][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1993.030330][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1993.093528][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1993.169752][ T125] bond0 (unregistering): Released all slaves [ 1993.319762][ T125] device hsr_slave_0 left promiscuous mode [ 1993.369889][ T125] device hsr_slave_1 left promiscuous mode [ 1993.424109][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1993.439043][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1993.451304][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1993.506536][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1993.602936][ T125] bond0 (unregistering): Released all slaves [ 1993.733259][ T125] device hsr_slave_0 left promiscuous mode [ 1993.773220][ T125] device hsr_slave_1 left promiscuous mode [ 1993.820890][ T125] team0 (unregistering): Port device team_slave_1 removed [ 1993.835107][ T125] team0 (unregistering): Port device team_slave_0 removed [ 1993.847832][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1993.891458][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1993.963331][ T125] bond0 (unregistering): Released all slaves [ 1994.097272][ T5536] device hsr_slave_0 entered promiscuous mode [ 1994.156401][ T5536] device hsr_slave_1 entered promiscuous mode [ 1994.208241][ T5551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1994.240584][ T5551] team0: Port device team_slave_0 added [ 1994.311164][ T5538] device hsr_slave_0 entered promiscuous mode [ 1994.368187][ T5538] device hsr_slave_1 entered promiscuous mode [ 1994.408279][ T5538] debugfs: Directory 'hsr0' with parent '/' already present! [ 1994.420266][ T5551] team0: Port device team_slave_1 added [ 1994.512151][ T5551] device hsr_slave_0 entered promiscuous mode [ 1994.559855][ T5551] device hsr_slave_1 entered promiscuous mode [ 1994.599820][ T5551] debugfs: Directory 'hsr0' with parent '/' already present! [ 1994.669364][ T5536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1994.706265][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1994.714691][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1994.740473][ T5536] 8021q: adding VLAN 0 to HW filter on device team0 [ 1994.758581][ T5538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1994.767459][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1994.776249][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1994.785157][ T5326] bridge0: port 1(bridge_slave_0) entered blocking state [ 1994.792283][ T5326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1994.800897][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1994.818904][ T5538] 8021q: adding VLAN 0 to HW filter on device team0 [ 1994.828426][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1994.837692][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1994.846686][T11525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1994.853875][T11525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1994.861683][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1994.870245][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1994.901457][ T5536] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1994.913044][ T5536] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1994.924778][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1994.933912][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1994.942469][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1994.951065][T11525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1994.958157][T11525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1994.966531][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1994.975330][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1994.983823][T11525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1994.990857][T11525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1994.998613][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1995.007166][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1995.015937][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1995.024296][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1995.032666][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1995.041111][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1995.049337][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1995.057918][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1995.066231][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1995.074773][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1995.082702][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1995.090714][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1995.113620][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1995.123563][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1995.132147][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1995.142140][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1995.215138][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1995.223394][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1995.232047][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1995.243941][ T5536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1995.261505][ T5551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1995.346884][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1995.355377][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1995.364168][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1995.375613][ T5538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1995.483089][ T5551] 8021q: adding VLAN 0 to HW filter on device team0 [ 1995.501912][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1995.516823][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1995.552483][ T5538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1995.561972][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1995.571976][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1995.607989][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1995.615146][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1995.647809][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1995.665831][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1995.687910][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1995.695056][ T2999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1995.710262][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1995.724776][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1995.758834][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1995.797359][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1995.816723][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1995.855261][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1995.886933][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1995.896606][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1995.905894][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1995.915190][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1995.924342][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1995.935354][ T5551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1995.946236][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1995.990636][ T5551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1996.267316][ T5578] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1996.285063][ T5578] CPU: 0 PID: 5578 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1996.294156][ T5578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1996.304270][ T5578] Call Trace: [ 1996.307568][ T5578] dump_stack+0x172/0x1f0 [ 1996.311920][ T5578] dump_header+0x177/0x1152 [ 1996.316449][ T5578] ? pagefault_out_of_memory+0x11c/0x11c [ 1996.322090][ T5578] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1996.329409][ T5578] ? ___ratelimit+0x60/0x595 [ 1996.334021][ T5578] ? do_raw_spin_unlock+0x57/0x270 [ 1996.339149][ T5578] oom_kill_process.cold+0x10/0x15 [ 1996.344273][ T5578] out_of_memory+0x334/0x1340 [ 1996.350448][ T5578] ? __sched_text_start+0x8/0x8 [ 1996.355307][ T5578] ? oom_killer_disable+0x280/0x280 [ 1996.360523][ T5578] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1996.366075][ T5578] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1996.371734][ T5578] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1996.377547][ T5578] ? cgroup_file_notify+0x140/0x1b0 [ 1996.382749][ T5578] memory_max_write+0x262/0x3a0 [ 1996.387606][ T5578] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1996.394383][ T5578] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1996.399853][ T5578] cgroup_file_write+0x241/0x790 [ 1996.404800][ T5578] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1996.411576][ T5578] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1996.417225][ T5578] ? kernfs_ops+0x9f/0x120 [ 1996.421646][ T5578] ? kernfs_ops+0x9f/0x120 [ 1996.426079][ T5578] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1996.431724][ T5578] kernfs_fop_write+0x2b8/0x480 [ 1996.436599][ T5578] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1996.442860][ T5578] __vfs_write+0x8a/0x110 [ 1996.447205][ T5578] ? kernfs_fop_open+0xd80/0xd80 [ 1996.452167][ T5578] vfs_write+0x268/0x5d0 [ 1996.456427][ T5578] ksys_write+0x14f/0x290 [ 1996.460766][ T5578] ? __ia32_sys_read+0xb0/0xb0 [ 1996.465544][ T5578] ? do_syscall_64+0x26/0x760 [ 1996.470226][ T5578] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1996.476306][ T5578] ? do_syscall_64+0x26/0x760 [ 1996.480995][ T5578] __x64_sys_write+0x73/0xb0 [ 1996.485620][ T5578] do_syscall_64+0xfa/0x760 [ 1996.490134][ T5578] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1996.496025][ T5578] RIP: 0033:0x459879 [ 1996.499927][ T5578] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1996.519537][ T5578] RSP: 002b:00007f2e34ef6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1996.527957][ T5578] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1996.535947][ T5578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1996.543932][ T5578] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1996.551912][ T5578] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e34ef76d4 [ 1996.559886][ T5578] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1996.579567][ T5578] memory: usage 4860kB, limit 0kB, failcnt 752 [ 1996.585982][ T5578] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1996.593819][ T5578] Memory cgroup stats for /syz3: [ 1996.595437][ T5578] anon 4255744 [ 1996.595437][ T5578] file 0 [ 1996.595437][ T5578] kernel_stack 0 [ 1996.595437][ T5578] slab 405504 [ 1996.595437][ T5578] sock 0 [ 1996.595437][ T5578] shmem 0 [ 1996.595437][ T5578] file_mapped 0 [ 1996.595437][ T5578] file_dirty 0 [ 1996.595437][ T5578] file_writeback 0 [ 1996.595437][ T5578] anon_thp 4194304 [ 1996.595437][ T5578] inactive_anon 0 [ 1996.595437][ T5578] active_anon 4255744 [ 1996.595437][ T5578] inactive_file 0 [ 1996.595437][ T5578] active_file 0 [ 1996.595437][ T5578] unevictable 0 [ 1996.595437][ T5578] slab_reclaimable 135168 [ 1996.595437][ T5578] slab_unreclaimable 270336 [ 1996.595437][ T5578] pgfault 35409 [ 1996.595437][ T5578] pgmajfault 0 [ 1996.595437][ T5578] workingset_refault 0 [ 1996.595437][ T5578] workingset_activate 0 [ 1996.595437][ T5578] workingset_nodereclaim 0 [ 1996.595437][ T5578] pgrefill 33 [ 1996.595437][ T5578] pgscan 66 [ 1996.595437][ T5578] pgsteal 0 [ 1996.595437][ T5578] pgactivate 0 [ 1996.690322][ T5578] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5576,uid=0 [ 1996.708465][ T5578] Memory cgroup out of memory: Killed process 5576 (syz-executor.3) total-vm:72580kB, anon-rss:4184kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:147456kB oom_score_adj:1000 [ 1996.732163][ T1065] oom_reaper: reaped process 5576 (syz-executor.3), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 1996.750616][ T5583] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1996.774987][ T5583] CPU: 1 PID: 5583 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1996.784066][ T5583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1996.794119][ T5583] Call Trace: [ 1996.797421][ T5583] dump_stack+0x172/0x1f0 [ 1996.801744][ T5583] dump_header+0x177/0x1152 [ 1996.806260][ T5583] ? pagefault_out_of_memory+0x11c/0x11c [ 1996.811901][ T5583] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1996.817720][ T5583] ? ___ratelimit+0x60/0x595 [ 1996.822303][ T5583] ? do_raw_spin_unlock+0x57/0x270 [ 1996.827404][ T5583] oom_kill_process.cold+0x10/0x15 [ 1996.832509][ T5583] out_of_memory+0x334/0x1340 [ 1996.837178][ T5583] ? oom_killer_disable+0x280/0x280 [ 1996.842385][ T5583] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1996.847921][ T5583] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1996.853694][ T5583] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1996.859498][ T5583] ? cgroup_file_notify+0x140/0x1b0 [ 1996.864683][ T5583] memory_max_write+0x262/0x3a0 [ 1996.869528][ T5583] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1996.876284][ T5583] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1996.881738][ T5583] cgroup_file_write+0x241/0x790 [ 1996.886670][ T5583] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1996.893598][ T5583] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1996.899222][ T5583] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1996.904849][ T5583] kernfs_fop_write+0x2b8/0x480 [ 1996.909694][ T5583] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1996.915925][ T5583] __vfs_write+0x8a/0x110 [ 1996.920267][ T5583] ? kernfs_fop_open+0xd80/0xd80 [ 1996.925215][ T5583] vfs_write+0x268/0x5d0 [ 1996.929473][ T5583] ksys_write+0x14f/0x290 [ 1996.933814][ T5583] ? __ia32_sys_read+0xb0/0xb0 [ 1996.938570][ T5583] ? do_syscall_64+0x26/0x760 [ 1996.943235][ T5583] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1996.949306][ T5583] ? do_syscall_64+0x26/0x760 [ 1996.953975][ T5583] __x64_sys_write+0x73/0xb0 [ 1996.958569][ T5583] do_syscall_64+0xfa/0x760 [ 1996.963075][ T5583] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1996.968954][ T5583] RIP: 0033:0x459879 [ 1996.972836][ T5583] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1996.992429][ T5583] RSP: 002b:00007f3400bd9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1997.000829][ T5583] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1997.008791][ T5583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 1997.016769][ T5583] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1997.024733][ T5583] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3400bda6d4 [ 1997.032692][ T5583] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1997.109557][ T5583] memory: usage 2860kB, limit 0kB, failcnt 422 [ 1997.116090][ T5583] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1997.124568][ T5583] Memory cgroup stats for /syz2: [ 1997.124674][ T5583] anon 2056192 [ 1997.124674][ T5583] file 151552 [ 1997.124674][ T5583] kernel_stack 65536 [ 1997.124674][ T5583] slab 458752 [ 1997.124674][ T5583] sock 0 [ 1997.124674][ T5583] shmem 0 [ 1997.124674][ T5583] file_mapped 0 [ 1997.124674][ T5583] file_dirty 0 [ 1997.124674][ T5583] file_writeback 0 [ 1997.124674][ T5583] anon_thp 2097152 [ 1997.124674][ T5583] inactive_anon 0 [ 1997.124674][ T5583] active_anon 2056192 [ 1997.124674][ T5583] inactive_file 135168 [ 1997.124674][ T5583] active_file 0 [ 1997.124674][ T5583] unevictable 0 [ 1997.124674][ T5583] slab_reclaimable 135168 [ 1997.124674][ T5583] slab_unreclaimable 323584 [ 1997.124674][ T5583] pgfault 67122 [ 1997.124674][ T5583] pgmajfault 0 [ 1997.124674][ T5583] workingset_refault 0 [ 1997.124674][ T5583] workingset_activate 0 [ 1997.124674][ T5583] workingset_nodereclaim 0 [ 1997.124674][ T5583] pgrefill 310 [ 1997.124674][ T5583] pgscan 305 [ 1997.124674][ T5583] pgsteal 33 [ 1997.124674][ T5583] pgactivate 264 [ 1997.238724][ T5583] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=5582,uid=0 [ 1997.255385][ T5583] Memory cgroup out of memory: Killed process 5583 (syz-executor.2) total-vm:72712kB, anon-rss:2188kB, file-rss:35804kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1997.275033][ T1065] oom_reaper: reaped process 5583 (syz-executor.2), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB 15:22:36 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r5, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=""/31, 0x1f}}, 0x10) write$cgroup_int(r7, 0x0, 0x0) 15:22:36 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000002680)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}], 0x4924924924922a7, 0x0) 15:22:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:22:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 15:22:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 1997.306871][ T5538] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 15:22:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r2, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r3, 0x0, 0x0) [ 1997.399419][ T5538] CPU: 1 PID: 5538 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1997.408532][ T5538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1997.418609][ T5538] Call Trace: [ 1997.421919][ T5538] dump_stack+0x172/0x1f0 [ 1997.426270][ T5538] dump_header+0x177/0x1152 [ 1997.430799][ T5538] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1997.436617][ T5538] ? ___ratelimit+0x2c8/0x595 [ 1997.441302][ T5538] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1997.447134][ T5538] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1997.452427][ T5538] ? trace_hardirqs_on+0x67/0x240 [ 1997.457464][ T5538] ? pagefault_out_of_memory+0x11c/0x11c [ 1997.463113][ T5538] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1997.468925][ T5538] ? ___ratelimit+0x60/0x595 [ 1997.473519][ T5538] ? do_raw_spin_unlock+0x57/0x270 [ 1997.478640][ T5538] oom_kill_process.cold+0x10/0x15 [ 1997.483783][ T5538] out_of_memory+0x334/0x1340 [ 1997.488492][ T5538] ? lock_downgrade+0x920/0x920 [ 1997.493362][ T5538] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1997.499173][ T5538] ? oom_killer_disable+0x280/0x280 [ 1997.504401][ T5538] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1997.509942][ T5538] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1997.515575][ T5538] ? do_raw_spin_unlock+0x57/0x270 [ 1997.520672][ T5538] ? _raw_spin_unlock+0x2d/0x50 [ 1997.525512][ T5538] try_charge+0xf4b/0x1440 [ 1997.529930][ T5538] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1997.535460][ T5538] ? percpu_ref_tryget_live+0x111/0x290 [ 1997.541000][ T5538] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1997.547234][ T5538] ? __kasan_check_read+0x11/0x20 [ 1997.552256][ T5538] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1997.557791][ T5538] mem_cgroup_try_charge+0x136/0x590 [ 1997.563062][ T5538] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1997.569301][ T5538] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1997.574922][ T5538] wp_page_copy+0x41e/0x1590 [ 1997.579499][ T5538] ? find_held_lock+0x35/0x130 [ 1997.584263][ T5538] ? pmd_pfn+0x1d0/0x1d0 [ 1997.588527][ T5538] ? lock_downgrade+0x920/0x920 [ 1997.593370][ T5538] ? swp_swapcount+0x540/0x540 [ 1997.598128][ T5538] ? __kasan_check_read+0x11/0x20 [ 1997.603140][ T5538] ? do_raw_spin_unlock+0x57/0x270 [ 1997.608245][ T5538] do_wp_page+0x499/0x14d0 [ 1997.612666][ T5538] ? finish_mkwrite_fault+0x570/0x570 [ 1997.618034][ T5538] __handle_mm_fault+0x22f1/0x3f20 [ 1997.623142][ T5538] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1997.628697][ T5538] ? __kasan_check_read+0x11/0x20 [ 1997.633949][ T5538] handle_mm_fault+0x1b5/0x6c0 [ 1997.638718][ T5538] __do_page_fault+0x536/0xdd0 [ 1997.643497][ T5538] do_page_fault+0x38/0x590 [ 1997.648004][ T5538] page_fault+0x39/0x40 [ 1997.652177][ T5538] RIP: 0033:0x430956 [ 1997.656074][ T5538] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 46 64 00 85 c0 0f 84 [ 1997.676324][ T5538] RSP: 002b:00007ffd055d15f0 EFLAGS: 00010206 [ 1997.682470][ T5538] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 1997.690435][ T5538] RDX: 00005555567b7930 RSI: 00005555567bf970 RDI: 0000000000000003 [ 1997.698392][ T5538] RBP: 0000000000008041 R08: 0000000000000001 R09: 00005555567b6940 [ 1997.706353][ T5538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 1997.714309][ T5538] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 1997.856879][ T5538] memory: usage 472kB, limit 0kB, failcnt 760 [ 1997.863446][ T5538] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1997.887024][ T5538] Memory cgroup stats for /syz3: [ 1997.887132][ T5538] anon 57344 [ 1997.887132][ T5538] file 0 [ 1997.887132][ T5538] kernel_stack 0 [ 1997.887132][ T5538] slab 405504 [ 1997.887132][ T5538] sock 0 [ 1997.887132][ T5538] shmem 0 [ 1997.887132][ T5538] file_mapped 0 [ 1997.887132][ T5538] file_dirty 0 [ 1997.887132][ T5538] file_writeback 0 [ 1997.887132][ T5538] anon_thp 0 [ 1997.887132][ T5538] inactive_anon 0 [ 1997.887132][ T5538] active_anon 57344 [ 1997.887132][ T5538] inactive_file 0 [ 1997.887132][ T5538] active_file 0 [ 1997.887132][ T5538] unevictable 0 [ 1997.887132][ T5538] slab_reclaimable 135168 [ 1997.887132][ T5538] slab_unreclaimable 270336 [ 1997.887132][ T5538] pgfault 35409 [ 1997.887132][ T5538] pgmajfault 0 [ 1997.887132][ T5538] workingset_refault 0 [ 1997.887132][ T5538] workingset_activate 0 [ 1997.887132][ T5538] workingset_nodereclaim 0 [ 1997.887132][ T5538] pgrefill 33 [ 1997.887132][ T5538] pgscan 66 [ 1997.887132][ T5538] pgsteal 0 [ 1997.887132][ T5538] pgactivate 0 [ 1997.887132][ T5538] pgdeactivate 33 15:22:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) socketpair$unix(0x1, 0x2000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) creat(&(0x7f0000000080)='./bus\x00', 0x0) [ 1998.026770][ T5538] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5538,uid=0 [ 1998.042805][ T5538] Memory cgroup out of memory: Killed process 5538 (syz-executor.3) total-vm:72448kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:0 [ 1998.128684][ T1065] oom_reaper: reaped process 5538 (syz-executor.3), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 1998.129245][ T5551] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1998.190984][ T5551] CPU: 0 PID: 5551 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1998.200062][ T5551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1998.210130][ T5551] Call Trace: [ 1998.213432][ T5551] dump_stack+0x172/0x1f0 [ 1998.217779][ T5551] dump_header+0x177/0x1152 [ 1998.222299][ T5551] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1998.228108][ T5551] ? ___ratelimit+0x2c8/0x595 [ 1998.232780][ T5551] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1998.238602][ T5551] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1998.243893][ T5551] ? trace_hardirqs_on+0x67/0x240 [ 1998.248924][ T5551] ? pagefault_out_of_memory+0x11c/0x11c [ 1998.254574][ T5551] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1998.260395][ T5551] ? ___ratelimit+0x60/0x595 [ 1998.265003][ T5551] ? do_raw_spin_unlock+0x57/0x270 [ 1998.270133][ T5551] oom_kill_process.cold+0x10/0x15 [ 1998.275246][ T5551] out_of_memory+0x334/0x1340 [ 1998.279934][ T5551] ? lock_downgrade+0x920/0x920 [ 1998.284795][ T5551] ? oom_killer_disable+0x280/0x280 [ 1998.290008][ T5551] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1998.295584][ T5551] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1998.301236][ T5551] ? do_raw_spin_unlock+0x57/0x270 [ 1998.306370][ T5551] ? _raw_spin_unlock+0x2d/0x50 [ 1998.311389][ T5551] try_charge+0xf4b/0x1440 [ 1998.316322][ T5551] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1998.321917][ T5551] ? percpu_ref_tryget_live+0x111/0x290 [ 1998.327506][ T5551] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1998.333767][ T5551] ? __kasan_check_read+0x11/0x20 [ 1998.338798][ T5551] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1998.344356][ T5551] mem_cgroup_try_charge+0x136/0x590 [ 1998.349659][ T5551] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1998.355931][ T5551] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1998.361588][ T5551] wp_page_copy+0x41e/0x1590 [ 1998.366193][ T5551] ? find_held_lock+0x35/0x130 [ 1998.371018][ T5551] ? pmd_pfn+0x1d0/0x1d0 [ 1998.375350][ T5551] ? lock_downgrade+0x920/0x920 [ 1998.380218][ T5551] ? swp_swapcount+0x540/0x540 [ 1998.384994][ T5551] ? __kasan_check_read+0x11/0x20 [ 1998.390038][ T5551] ? do_raw_spin_unlock+0x57/0x270 [ 1998.395193][ T5551] do_wp_page+0x499/0x14d0 [ 1998.399635][ T5551] ? finish_mkwrite_fault+0x570/0x570 [ 1998.405039][ T5551] __handle_mm_fault+0x22f1/0x3f20 [ 1998.410176][ T5551] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1998.415749][ T5551] ? __kasan_check_read+0x11/0x20 [ 1998.420791][ T5551] handle_mm_fault+0x1b5/0x6c0 [ 1998.425591][ T5551] __do_page_fault+0x536/0xdd0 [ 1998.430397][ T5551] do_page_fault+0x38/0x590 [ 1998.434926][ T5551] page_fault+0x39/0x40 [ 1998.439120][ T5551] RIP: 0033:0x430956 [ 1998.443036][ T5551] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 46 64 00 85 c0 0f 84 [ 1998.462650][ T5551] RSP: 002b:00007ffd9351e390 EFLAGS: 00010206 [ 1998.468727][ T5551] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 1998.476710][ T5551] RDX: 00005555573bb930 RSI: 00005555573c3970 RDI: 0000000000000003 [ 1998.484692][ T5551] RBP: 0000000000008041 R08: 0000000000000001 R09: 00005555573ba940 [ 1998.492671][ T5551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 1998.500653][ T5551] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 15:22:38 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 15:22:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) socketpair$unix(0x1, 0x2000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) creat(&(0x7f0000000080)='./bus\x00', 0x0) [ 1998.976227][ T5551] memory: usage 508kB, limit 0kB, failcnt 430 [ 1998.982482][ T5551] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1998.999231][ T5551] Memory cgroup stats for /syz2: [ 1998.999345][ T5551] anon 0 [ 1998.999345][ T5551] file 151552 [ 1998.999345][ T5551] kernel_stack 0 [ 1998.999345][ T5551] slab 458752 [ 1998.999345][ T5551] sock 0 [ 1998.999345][ T5551] shmem 0 [ 1998.999345][ T5551] file_mapped 0 [ 1998.999345][ T5551] file_dirty 0 [ 1998.999345][ T5551] file_writeback 0 [ 1998.999345][ T5551] anon_thp 0 [ 1998.999345][ T5551] inactive_anon 0 [ 1998.999345][ T5551] active_anon 0 [ 1998.999345][ T5551] inactive_file 135168 [ 1998.999345][ T5551] active_file 0 [ 1998.999345][ T5551] unevictable 0 [ 1998.999345][ T5551] slab_reclaimable 135168 [ 1998.999345][ T5551] slab_unreclaimable 323584 [ 1998.999345][ T5551] pgfault 67122 [ 1998.999345][ T5551] pgmajfault 0 [ 1998.999345][ T5551] workingset_refault 0 [ 1998.999345][ T5551] workingset_activate 0 [ 1998.999345][ T5551] workingset_nodereclaim 0 [ 1998.999345][ T5551] pgrefill 310 [ 1998.999345][ T5551] pgscan 305 [ 1998.999345][ T5551] pgsteal 33 [ 1998.999345][ T5551] pgactivate 264 [ 1999.094970][ T5551] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=5551,uid=0 [ 1999.111846][ T5551] Memory cgroup out of memory: Killed process 5551 (syz-executor.2) total-vm:72448kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:0 [ 1999.130317][ T1065] oom_reaper: reaped process 5551 (syz-executor.2), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 15:22:38 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) 15:22:38 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x20000000014) clone(0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000280), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) [ 1999.482427][ T5612] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1999.500608][ T5612] CPU: 1 PID: 5612 Comm: syz-executor.5 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1999.509667][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1999.519731][ T5612] Call Trace: [ 1999.523045][ T5612] dump_stack+0x172/0x1f0 [ 1999.527397][ T5612] dump_header+0x177/0x1152 [ 1999.531933][ T5612] ? pagefault_out_of_memory+0x11c/0x11c [ 1999.537593][ T5612] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1999.543422][ T5612] ? ___ratelimit+0x60/0x595 [ 1999.548040][ T5612] ? do_raw_spin_unlock+0x57/0x270 [ 1999.553164][ T5612] oom_kill_process.cold+0x10/0x15 [ 1999.558288][ T5612] out_of_memory+0x334/0x1340 [ 1999.562976][ T5612] ? __sched_text_start+0x8/0x8 [ 1999.567836][ T5612] ? oom_killer_disable+0x280/0x280 [ 1999.573051][ T5612] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1999.578600][ T5612] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1999.584255][ T5612] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1999.590069][ T5612] ? cgroup_file_notify+0x140/0x1b0 [ 1999.595276][ T5612] memory_max_write+0x262/0x3a0 [ 1999.600135][ T5612] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1999.606901][ T5612] ? lock_acquire+0x190/0x410 [ 1999.611580][ T5612] ? kernfs_fop_write+0x227/0x480 [ 1999.616616][ T5612] cgroup_file_write+0x241/0x790 [ 1999.621561][ T5612] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 1999.628338][ T5612] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1999.634104][ T5612] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1999.639761][ T5612] kernfs_fop_write+0x2b8/0x480 [ 1999.644635][ T5612] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1999.650897][ T5612] __vfs_write+0x8a/0x110 [ 1999.655260][ T5612] ? kernfs_fop_open+0xd80/0xd80 [ 1999.660213][ T5612] vfs_write+0x268/0x5d0 [ 1999.664470][ T5612] ksys_write+0x14f/0x290 [ 1999.668814][ T5612] ? __ia32_sys_read+0xb0/0xb0 [ 1999.673612][ T5612] ? do_syscall_64+0x26/0x760 [ 1999.678305][ T5612] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1999.684377][ T5612] ? do_syscall_64+0x26/0x760 [ 1999.689091][ T5612] __x64_sys_write+0x73/0xb0 [ 1999.693703][ T5612] do_syscall_64+0xfa/0x760 [ 1999.698228][ T5612] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1999.704121][ T5612] RIP: 0033:0x459879 [ 1999.708019][ T5612] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1999.727635][ T5612] RSP: 002b:00007fb1a5558c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1999.736059][ T5612] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1999.744034][ T5612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1999.752009][ T5612] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1999.759985][ T5612] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb1a55596d4 [ 1999.767969][ T5612] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 1999.787646][ T5612] memory: usage 5356kB, limit 0kB, failcnt 520 [ 1999.794260][ T5612] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1999.801321][ T5612] Memory cgroup stats for /syz5: [ 1999.802904][ T5612] anon 4411392 [ 1999.802904][ T5612] file 176128 [ 1999.802904][ T5612] kernel_stack 65536 [ 1999.802904][ T5612] slab 827392 [ 1999.802904][ T5612] sock 0 [ 1999.802904][ T5612] shmem 172032 [ 1999.802904][ T5612] file_mapped 0 [ 1999.802904][ T5612] file_dirty 0 [ 1999.802904][ T5612] file_writeback 0 [ 1999.802904][ T5612] anon_thp 4194304 [ 1999.802904][ T5612] inactive_anon 143360 [ 1999.802904][ T5612] active_anon 4341760 [ 1999.802904][ T5612] inactive_file 0 [ 1999.802904][ T5612] active_file 135168 [ 1999.802904][ T5612] unevictable 131072 [ 1999.802904][ T5612] slab_reclaimable 405504 [ 1999.802904][ T5612] slab_unreclaimable 421888 [ 1999.802904][ T5612] pgfault 60093 [ 1999.802904][ T5612] pgmajfault 0 [ 1999.802904][ T5612] workingset_refault 0 [ 1999.802904][ T5612] workingset_activate 0 [ 1999.802904][ T5612] workingset_nodereclaim 0 [ 1999.802904][ T5612] pgrefill 734 [ 1999.802904][ T5612] pgscan 744 [ 1999.802904][ T5612] pgsteal 35 [ 1999.899549][ T5612] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=5611,uid=0 [ 1999.924580][ T5612] Memory cgroup out of memory: Killed process 5611 (syz-executor.5) total-vm:72576kB, anon-rss:4196kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 15:22:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r5, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=""/31, 0x1f}}, 0x10) write$cgroup_int(r7, 0x0, 0x0) 15:22:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r4, 0x0, 0x0) [ 1999.968598][ T1065] oom_reaper: reaped process 5611 (syz-executor.5), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 1999.993471][ T5618] IPVS: ftp: loaded support on port[0] = 21 15:22:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r5, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=""/31, 0x1f}}, 0x10) write$cgroup_int(r7, 0x0, 0x0) [ 2000.408920][ T5618] chnl_net:caif_netlink_parms(): no params data found [ 2000.450018][ T5536] syz-executor.5 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=0, oom_score_adj=0 [ 2000.504507][ T5536] CPU: 1 PID: 5536 Comm: syz-executor.5 Not tainted 5.3.0-rc6-next-20190830 #75 [ 2000.513725][ T5536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2000.513732][ T5536] Call Trace: [ 2000.513759][ T5536] dump_stack+0x172/0x1f0 [ 2000.513779][ T5536] dump_header+0x177/0x1152 [ 2000.513794][ T5536] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2000.513804][ T5536] ? ___ratelimit+0x2c8/0x595 [ 2000.513817][ T5536] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2000.513831][ T5536] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2000.513849][ T5536] ? trace_hardirqs_on+0x67/0x240 [ 2000.552683][ T5536] ? pagefault_out_of_memory+0x11c/0x11c [ 2000.552701][ T5536] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2000.552717][ T5536] ? ___ratelimit+0x60/0x595 [ 2000.579198][ T5536] ? do_raw_spin_unlock+0x57/0x270 [ 2000.579220][ T5536] oom_kill_process.cold+0x10/0x15 [ 2000.579236][ T5536] out_of_memory+0x334/0x1340 [ 2000.594242][ T5536] ? lock_downgrade+0x920/0x920 [ 2000.599140][ T5536] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2000.604978][ T5536] ? oom_killer_disable+0x280/0x280 [ 2000.610221][ T5536] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2000.615829][ T5536] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 2000.615851][ T5536] ? do_raw_spin_unlock+0x57/0x270 [ 2000.615872][ T5536] ? _raw_spin_unlock+0x2d/0x50 [ 2000.631454][ T5536] try_charge+0xf4b/0x1440 [ 2000.635888][ T5536] ? __lock_acquire+0x800/0x4a00 [ 2000.640842][ T5536] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2000.646508][ T5536] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 2000.646527][ T5536] ? cache_grow_begin+0x122/0xd20 [ 2000.657527][ T5536] ? find_held_lock+0x35/0x130 [ 2000.662300][ T5536] ? cache_grow_begin+0x122/0xd20 [ 2000.667343][ T5536] __memcg_kmem_charge_memcg+0x71/0xf0 [ 2000.672929][ T5536] ? memcg_kmem_put_cache+0x50/0x50 [ 2000.678153][ T5536] ? __kasan_check_read+0x11/0x20 [ 2000.683404][ T5536] cache_grow_begin+0x629/0xd20 [ 2000.683422][ T5536] ? __sanitizer_cov_trace_cmp2+0x11/0x20 [ 2000.683437][ T5536] ? mempolicy_slab_node+0x139/0x390 [ 2000.683454][ T5536] fallback_alloc+0x1fd/0x2d0 [ 2000.704569][ T5536] ____cache_alloc_node+0x1bc/0x1d0 [ 2000.704587][ T5536] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2000.704604][ T5536] kmem_cache_alloc+0x1ef/0x710 [ 2000.721116][ T5536] ? stack_trace_save+0xac/0xe0 [ 2000.726096][ T5536] __alloc_file+0x27/0x340 [ 2000.730541][ T5536] alloc_empty_file+0x72/0x170 [ 2000.735331][ T5536] path_openat+0xef/0x46d0 [ 2000.739768][ T5536] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2000.745586][ T5536] ? kasan_slab_alloc+0xf/0x20 [ 2000.745605][ T5536] ? kmem_cache_alloc+0x121/0x710 [ 2000.755529][ T5536] ? getname_flags+0xd6/0x5b0 [ 2000.755540][ T5536] ? getname+0x1a/0x20 [ 2000.755554][ T5536] ? do_sys_open+0x2c9/0x5d0 [ 2000.755566][ T5536] ? __x64_sys_open+0x7e/0xc0 [ 2000.755582][ T5536] ? __kasan_check_read+0x11/0x20 [ 2000.755594][ T5536] ? mark_lock+0xc2/0x1220 [ 2000.755607][ T5536] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2000.755626][ T5536] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 2000.794315][ T5536] ? __alloc_fd+0x487/0x620 [ 2000.798842][ T5536] do_filp_open+0x1a1/0x280 [ 2000.803371][ T5536] ? may_open_dev+0x100/0x100 [ 2000.808059][ T5536] ? lock_downgrade+0x920/0x920 [ 2000.812926][ T5536] ? rwlock_bug.part.0+0x90/0x90 [ 2000.817896][ T5536] ? __kasan_check_read+0x11/0x20 [ 2000.822932][ T5536] ? do_raw_spin_unlock+0x57/0x270 [ 2000.822952][ T5536] ? _raw_spin_unlock+0x2d/0x50 [ 2000.833027][ T5536] ? __alloc_fd+0x487/0x620 [ 2000.833054][ T5536] do_sys_open+0x3fe/0x5d0 [ 2000.833073][ T5536] ? filp_open+0x80/0x80 [ 2000.833085][ T5536] ? __detach_mounts+0x2a0/0x2a0 [ 2000.833104][ T5536] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 2000.856955][ T5536] ? do_syscall_64+0x26/0x760 [ 2000.861653][ T5536] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2000.867727][ T5536] ? do_syscall_64+0x26/0x760 [ 2000.872421][ T5536] __x64_sys_open+0x7e/0xc0 [ 2000.876930][ T5536] do_syscall_64+0xfa/0x760 [ 2000.881702][ T5536] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2000.881712][ T5536] RIP: 0033:0x4577f0 [ 2000.881726][ T5536] Code: 31 c0 e9 45 ff ff ff 0f 1f 00 80 3f 00 0f 84 f7 00 00 00 55 53 b9 02 00 00 00 be 00 08 09 00 89 c8 48 81 ec 98 00 00 00 0f 05 <48> 3d 00 f0 ff ff 48 89 c3 0f 87 e9 00 00 00 85 db 0f 88 2f 01 00 [ 2000.881738][ T5536] RSP: 002b:00007ffe0b08c520 EFLAGS: 00000202 ORIG_RAX: 0000000000000002 [ 2000.911278][ T5536] RAX: ffffffffffffffda RBX: 00000000001e5b8c RCX: 00000000004577f0 [ 2000.911287][ T5536] RDX: 000000000000000c RSI: 0000000000090800 RDI: 00007ffe0b08d700 [ 2000.911294][ T5536] RBP: 000000000000000b R08: 0000000000000001 R09: 000055555585c940 [ 2000.911300][ T5536] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe0b08d700 [ 2000.911307][ T5536] R13: 00007ffe0b08d6f0 R14: 0000000000000000 R15: 00007ffe0b08d700 [ 2001.000211][ T5623] IPVS: ftp: loaded support on port[0] = 21 [ 2001.077277][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 2001.093705][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 2001.101873][ T5618] device bridge_slave_0 entered promiscuous mode [ 2001.134197][ T5536] memory: usage 960kB, limit 0kB, failcnt 532 [ 2001.140320][ T5536] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2001.156795][ T5536] Memory cgroup stats for /syz5: [ 2001.156900][ T5536] anon 147456 [ 2001.156900][ T5536] file 176128 [ 2001.156900][ T5536] kernel_stack 65536 [ 2001.156900][ T5536] slab 827392 [ 2001.156900][ T5536] sock 0 [ 2001.156900][ T5536] shmem 172032 [ 2001.156900][ T5536] file_mapped 0 [ 2001.156900][ T5536] file_dirty 0 [ 2001.156900][ T5536] file_writeback 0 [ 2001.156900][ T5536] anon_thp 0 [ 2001.156900][ T5536] inactive_anon 143360 [ 2001.156900][ T5536] active_anon 77824 [ 2001.156900][ T5536] inactive_file 0 [ 2001.156900][ T5536] active_file 135168 [ 2001.156900][ T5536] unevictable 131072 [ 2001.156900][ T5536] slab_reclaimable 405504 [ 2001.156900][ T5536] slab_unreclaimable 421888 [ 2001.156900][ T5536] pgfault 60126 [ 2001.156900][ T5536] pgmajfault 0 [ 2001.156900][ T5536] workingset_refault 0 [ 2001.156900][ T5536] workingset_activate 0 [ 2001.156900][ T5536] workingset_nodereclaim 0 [ 2001.156900][ T5536] pgrefill 734 [ 2001.156900][ T5536] pgscan 744 [ 2001.156900][ T5536] pgsteal 35 [ 2001.156900][ T5536] pgactivate 660 [ 2001.294932][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 2001.303766][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 2001.312197][ T5618] device bridge_slave_1 entered promiscuous mode [ 2001.337133][ T5536] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=5536,uid=0 [ 2001.353196][ T5536] Memory cgroup out of memory: Killed process 5536 (syz-executor.5) total-vm:72444kB, anon-rss:100kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:0 [ 2001.371603][ T1065] oom_reaper: reaped process 5536 (syz-executor.5), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 2001.414273][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2001.475649][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2001.676834][ T5623] chnl_net:caif_netlink_parms(): no params data found [ 2001.714722][ T5618] team0: Port device team_slave_0 added [ 2001.726799][ T5618] team0: Port device team_slave_1 added [ 2001.812606][ T5618] device hsr_slave_0 entered promiscuous mode [ 2001.872369][ T5618] device hsr_slave_1 entered promiscuous mode [ 2001.911093][ T5618] debugfs: Directory 'hsr0' with parent '/' already present! [ 2001.918789][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 2001.926157][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 2001.938511][ T5623] device bridge_slave_0 entered promiscuous mode [ 2001.948161][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 2001.955429][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 2001.963326][ T5623] device bridge_slave_1 entered promiscuous mode [ 2001.982731][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2002.012090][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2002.062186][ T5623] team0: Port device team_slave_0 added [ 2002.082924][ T5623] team0: Port device team_slave_1 added [ 2002.164385][ T5623] device hsr_slave_0 entered promiscuous mode [ 2002.213355][ T5623] device hsr_slave_1 entered promiscuous mode [ 2002.253344][ T5623] debugfs: Directory 'hsr0' with parent '/' already present! [ 2002.281731][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 2002.289044][ T5623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2002.296470][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 2002.303552][ T5623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2002.323533][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2002.353521][T32502] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2002.375067][T32502] bridge0: port 1(bridge_slave_0) entered disabled state [ 2002.383251][T32502] bridge0: port 2(bridge_slave_1) entered disabled state [ 2002.405295][T32585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2002.413080][T32585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2002.433226][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 2002.454253][ T5628] IPVS: ftp: loaded support on port[0] = 21 [ 2003.153391][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2003.162538][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2003.171487][ T5301] bridge0: port 1(bridge_slave_0) entered blocking state [ 2003.178561][ T5301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2003.197802][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2003.206791][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2003.216012][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2003.224912][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state [ 2003.232037][ T4287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2003.240430][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2003.617402][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2003.626261][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2003.635858][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2003.644531][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2003.655451][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2003.663969][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2003.673148][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2003.682256][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2003.693509][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2004.071417][ T5618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2004.083359][ T5618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2004.095524][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2004.104995][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2004.510890][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2004.519035][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2004.530405][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 2004.551917][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2004.943730][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2004.954154][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2004.967624][ T6660] bridge0: port 1(bridge_slave_0) entered blocking state [ 2004.974914][ T6660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2004.987459][ T5628] chnl_net:caif_netlink_parms(): no params data found [ 2005.369051][T32502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2005.378419][T32502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2005.396714][T32502] bridge0: port 2(bridge_slave_1) entered blocking state [ 2005.403998][T32502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2005.594536][ T5636] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2005.605070][ T5636] CPU: 1 PID: 5636 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 2005.614103][ T5636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2005.624170][ T5636] Call Trace: [ 2005.627475][ T5636] dump_stack+0x172/0x1f0 [ 2005.631814][ T5636] dump_header+0x177/0x1152 [ 2005.636327][ T5636] ? ___preempt_schedule+0x16/0x20 [ 2005.641473][ T5636] ? pagefault_out_of_memory+0x11c/0x11c [ 2005.647114][ T5636] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2005.652923][ T5636] ? ___ratelimit+0x60/0x595 [ 2005.657530][ T5636] ? do_raw_spin_unlock+0x57/0x270 [ 2005.662657][ T5636] oom_kill_process.cold+0x10/0x15 [ 2005.667779][ T5636] out_of_memory+0x334/0x1340 [ 2005.672469][ T5636] ? __sched_text_start+0x8/0x8 [ 2005.677327][ T5636] ? oom_killer_disable+0x280/0x280 [ 2005.682548][ T5636] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2005.688108][ T5636] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 2005.693754][ T5636] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2005.699569][ T5636] ? cgroup_file_notify+0x140/0x1b0 [ 2005.704778][ T5636] memory_max_write+0x262/0x3a0 [ 2005.709656][ T5636] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 2005.716435][ T5636] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 2005.721909][ T5636] cgroup_file_write+0x241/0x790 [ 2005.726858][ T5636] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 2005.733636][ T5636] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2005.739289][ T5636] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2005.744927][ T5636] kernfs_fop_write+0x2b8/0x480 [ 2005.749792][ T5636] __vfs_write+0x8a/0x110 [ 2005.754128][ T5636] ? kernfs_fop_open+0xd80/0xd80 [ 2005.759076][ T5636] vfs_write+0x268/0x5d0 [ 2005.763331][ T5636] ksys_write+0x14f/0x290 [ 2005.767825][ T5636] ? __ia32_sys_read+0xb0/0xb0 [ 2005.772608][ T5636] ? do_syscall_64+0x26/0x760 [ 2005.777292][ T5636] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2005.783364][ T5636] ? do_syscall_64+0x26/0x760 [ 2005.788049][ T5636] __x64_sys_write+0x73/0xb0 [ 2005.792642][ T5636] do_syscall_64+0xfa/0x760 [ 2005.797164][ T5636] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2005.803066][ T5636] RIP: 0033:0x459879 [ 2005.806960][ T5636] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2005.826588][ T5636] RSP: 002b:00007f928f8b2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2005.835024][ T5636] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 2005.842993][ T5636] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 2005.850966][ T5636] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2005.858936][ T5636] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f928f8b36d4 [ 2005.867040][ T5636] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 2005.887499][ T5636] memory: usage 4972kB, limit 0kB, failcnt 1698 [ 2005.902070][ T5636] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2005.919669][ T5636] Memory cgroup stats for /syz1: [ 2005.922123][ T5636] anon 4292608 [ 2005.922123][ T5636] file 0 [ 2005.922123][ T5636] kernel_stack 0 [ 2005.922123][ T5636] slab 430080 [ 2005.922123][ T5636] sock 0 [ 2005.922123][ T5636] shmem 0 [ 2005.922123][ T5636] file_mapped 0 [ 2005.922123][ T5636] file_dirty 0 [ 2005.922123][ T5636] file_writeback 0 [ 2005.922123][ T5636] anon_thp 4194304 [ 2005.922123][ T5636] inactive_anon 131072 [ 2005.922123][ T5636] active_anon 4292608 [ 2005.922123][ T5636] inactive_file 0 [ 2005.922123][ T5636] active_file 0 [ 2005.922123][ T5636] unevictable 0 [ 2005.922123][ T5636] slab_reclaimable 135168 [ 2005.922123][ T5636] slab_unreclaimable 294912 [ 2005.922123][ T5636] pgfault 90750 [ 2005.922123][ T5636] pgmajfault 0 [ 2005.922123][ T5636] workingset_refault 0 [ 2005.922123][ T5636] workingset_activate 0 [ 2005.922123][ T5636] workingset_nodereclaim 0 [ 2005.922123][ T5636] pgrefill 240 [ 2005.922123][ T5636] pgscan 242 [ 2005.922123][ T5636] pgsteal 35 [ 2005.922123][ T5636] pgactivate 198 [ 2006.026067][ T5636] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5635,uid=0 [ 2006.043010][ T5636] Memory cgroup out of memory: Killed process 5635 (syz-executor.1) total-vm:72580kB, anon-rss:4188kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 2006.070240][ T1065] oom_reaper: reaped process 5635 (syz-executor.1), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 2006.200284][T32502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2006.235520][ T5623] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2006.246178][ T5623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2006.260176][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 2006.268245][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 2006.276275][ T5628] device bridge_slave_0 entered promiscuous mode [ 2006.285751][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 2006.293690][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 2006.302828][ T5628] device bridge_slave_1 entered promiscuous mode [ 2006.338798][T32585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2006.349115][T32585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2006.359046][T32585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2006.369264][T32585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2006.381054][T32585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2006.389954][T32585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2006.399836][T32585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2006.409502][T32585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2006.419140][T32585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2006.481576][T32585] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2006.490811][T32585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 15:22:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:22:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r4, 0x0, 0x0) [ 2006.641665][ T5618] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2006.690323][ T5618] CPU: 1 PID: 5618 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 2006.699446][ T5618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2006.709647][ T5618] Call Trace: [ 2006.712992][ T5618] dump_stack+0x172/0x1f0 [ 2006.717370][ T5618] dump_header+0x177/0x1152 [ 2006.721925][ T5618] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2006.727767][ T5618] ? ___ratelimit+0x2c8/0x595 [ 2006.732492][ T5618] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2006.738513][ T5618] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2006.743875][ T5618] ? trace_hardirqs_on+0x67/0x240 [ 2006.748966][ T5618] ? pagefault_out_of_memory+0x11c/0x11c [ 2006.754675][ T5618] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2006.760533][ T5618] ? ___ratelimit+0x60/0x595 [ 2006.765157][ T5618] ? do_raw_spin_unlock+0x57/0x270 [ 2006.770303][ T5618] oom_kill_process.cold+0x10/0x15 [ 2006.775486][ T5618] out_of_memory+0x334/0x1340 [ 2006.780222][ T5618] ? lock_downgrade+0x920/0x920 [ 2006.785160][ T5618] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2006.791024][ T5618] ? oom_killer_disable+0x280/0x280 [ 2006.796288][ T5618] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2006.801898][ T5618] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 2006.807615][ T5618] ? do_raw_spin_unlock+0x57/0x270 [ 2006.812785][ T5618] ? _raw_spin_unlock+0x2d/0x50 [ 2006.817667][ T5618] try_charge+0xf4b/0x1440 [ 2006.822158][ T5618] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2006.827742][ T5618] ? percpu_ref_tryget_live+0x111/0x290 [ 2006.833327][ T5618] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2006.839794][ T5618] ? __kasan_check_read+0x11/0x20 [ 2006.844906][ T5618] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2006.850507][ T5618] mem_cgroup_try_charge+0x136/0x590 [ 2006.855843][ T5618] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2006.862124][ T5618] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2006.867802][ T5618] wp_page_copy+0x41e/0x1590 [ 2006.872425][ T5618] ? find_held_lock+0x35/0x130 [ 2006.877252][ T5618] ? pmd_pfn+0x1d0/0x1d0 [ 2006.881541][ T5618] ? lock_downgrade+0x920/0x920 [ 2006.886435][ T5618] ? swp_swapcount+0x540/0x540 [ 2006.891248][ T5618] ? __kasan_check_read+0x11/0x20 [ 2006.896310][ T5618] ? do_raw_spin_unlock+0x57/0x270 [ 2006.901477][ T5618] do_wp_page+0x499/0x14d0 [ 2006.905933][ T5618] ? finish_mkwrite_fault+0x570/0x570 [ 2006.911343][ T5618] __handle_mm_fault+0x22f1/0x3f20 [ 2006.916516][ T5618] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2006.922141][ T5618] ? __kasan_check_read+0x11/0x20 [ 2006.927231][ T5618] handle_mm_fault+0x1b5/0x6c0 [ 2006.932050][ T5618] __do_page_fault+0x536/0xdd0 [ 2006.936872][ T5618] do_page_fault+0x38/0x590 [ 2006.941417][ T5618] page_fault+0x39/0x40 [ 2006.945614][ T5618] RIP: 0033:0x4034f2 [ 2006.949545][ T5618] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 a9 8d 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 c9 42 05 00 48 [ 2006.969185][ T5618] RSP: 002b:00007fff00002ca0 EFLAGS: 00010246 [ 2006.975284][ T5618] RAX: 0000000000000000 RBX: 00000000001e735f RCX: 0000000000413480 [ 2006.983281][ T5618] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007fff00003dd0 [ 2006.991280][ T5618] RBP: 0000000000000002 R08: 0000000000000001 R09: 00005555558e9940 [ 2006.999287][ T5618] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff00003dd0 [ 2007.007285][ T5618] R13: 00007fff00003dc0 R14: 0000000000000000 R15: 00007fff00003dd0 [ 2007.033102][ T5618] memory: usage 592kB, limit 0kB, failcnt 1706 [ 2007.043277][ T5618] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2007.067890][ T5618] Memory cgroup stats for /syz1: [ 2007.068048][ T5618] anon 32768 [ 2007.068048][ T5618] file 0 [ 2007.068048][ T5618] kernel_stack 0 [ 2007.068048][ T5618] slab 430080 [ 2007.068048][ T5618] sock 0 [ 2007.068048][ T5618] shmem 0 [ 2007.068048][ T5618] file_mapped 0 [ 2007.068048][ T5618] file_dirty 0 [ 2007.068048][ T5618] file_writeback 0 [ 2007.068048][ T5618] anon_thp 0 [ 2007.068048][ T5618] inactive_anon 131072 [ 2007.068048][ T5618] active_anon 32768 [ 2007.068048][ T5618] inactive_file 0 [ 2007.068048][ T5618] active_file 0 [ 2007.068048][ T5618] unevictable 0 [ 2007.068048][ T5618] slab_reclaimable 135168 [ 2007.068048][ T5618] slab_unreclaimable 294912 [ 2007.068048][ T5618] pgfault 90750 [ 2007.068048][ T5618] pgmajfault 0 [ 2007.068048][ T5618] workingset_refault 0 [ 2007.068048][ T5618] workingset_activate 0 [ 2007.068048][ T5618] workingset_nodereclaim 0 [ 2007.068048][ T5618] pgrefill 240 [ 2007.068048][ T5618] pgscan 242 [ 2007.068048][ T5618] pgsteal 35 [ 2007.068048][ T5618] pgactivate 198 [ 2007.171396][ T5618] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5618,uid=0 [ 2007.194923][ T5618] Memory cgroup out of memory: Killed process 5618 (syz-executor.1) total-vm:72448kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:0 [ 2007.221913][ T1065] oom_reaper: reaped process 5618 (syz-executor.1), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 2007.498006][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2007.708232][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2007.717308][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2008.129125][ T5628] team0: Port device team_slave_0 added [ 2008.146480][ T5628] team0: Port device team_slave_1 added [ 2008.169316][ T125] device bridge_slave_1 left promiscuous mode [ 2008.181958][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 2008.235169][ T125] device bridge_slave_0 left promiscuous mode [ 2008.241489][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 2008.279481][ T125] device bridge_slave_1 left promiscuous mode [ 2008.285891][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 2008.335561][ T125] device bridge_slave_0 left promiscuous mode [ 2008.341822][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 2008.396332][ T125] device bridge_slave_1 left promiscuous mode [ 2008.402544][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 2008.445719][ T125] device bridge_slave_0 left promiscuous mode [ 2008.451978][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 2008.517154][ T125] device bridge_slave_1 left promiscuous mode [ 2008.523373][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 2008.569749][ T125] device bridge_slave_0 left promiscuous mode [ 2008.576201][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 2008.627618][ T125] device bridge_slave_1 left promiscuous mode [ 2008.633840][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 2008.697840][ T125] device bridge_slave_0 left promiscuous mode [ 2008.704032][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 2018.428201][ T125] device hsr_slave_0 left promiscuous mode [ 2018.468007][ T125] device hsr_slave_1 left promiscuous mode [ 2018.540796][ T125] team0 (unregistering): Port device team_slave_1 removed [ 2018.554967][ T125] team0 (unregistering): Port device team_slave_0 removed [ 2018.566563][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2018.612949][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2018.718873][ T125] bond0 (unregistering): Released all slaves [ 2018.851609][ T125] device hsr_slave_0 left promiscuous mode [ 2018.901897][ T125] device hsr_slave_1 left promiscuous mode [ 2018.954315][ T125] team0 (unregistering): Port device team_slave_1 removed [ 2018.967797][ T125] team0 (unregistering): Port device team_slave_0 removed [ 2018.979363][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2019.018341][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2019.092198][ T125] bond0 (unregistering): Released all slaves [ 2019.265484][ T125] device hsr_slave_0 left promiscuous mode [ 2019.315062][ T125] device hsr_slave_1 left promiscuous mode [ 2019.389961][ T125] team0 (unregistering): Port device team_slave_1 removed [ 2019.403537][ T125] team0 (unregistering): Port device team_slave_0 removed [ 2019.415204][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2019.473094][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2019.565575][ T125] bond0 (unregistering): Released all slaves [ 2019.708839][ T125] device hsr_slave_0 left promiscuous mode [ 2019.748719][ T125] device hsr_slave_1 left promiscuous mode [ 2019.797887][ T125] team0 (unregistering): Port device team_slave_1 removed [ 2019.811285][ T125] team0 (unregistering): Port device team_slave_0 removed [ 2019.822283][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2019.873994][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2019.947984][ T125] bond0 (unregistering): Released all slaves [ 2020.102294][ T125] device hsr_slave_0 left promiscuous mode [ 2020.162005][ T125] device hsr_slave_1 left promiscuous mode [ 2020.236239][ T125] team0 (unregistering): Port device team_slave_1 removed [ 2020.249842][ T125] team0 (unregistering): Port device team_slave_0 removed [ 2020.264646][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2020.311827][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2020.400404][ T125] bond0 (unregistering): Released all slaves [ 2020.520118][ T5642] IPVS: ftp: loaded support on port[0] = 21 [ 2020.568688][ T5628] device hsr_slave_0 entered promiscuous mode [ 2020.605907][ T5628] device hsr_slave_1 entered promiscuous mode [ 2020.781935][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2020.786308][ T5644] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2020.801285][ T5644] CPU: 0 PID: 5644 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 2020.810333][ T5644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2020.810339][ T5644] Call Trace: [ 2020.810363][ T5644] dump_stack+0x172/0x1f0 [ 2020.810383][ T5644] dump_header+0x177/0x1152 [ 2020.810407][ T5644] ? pagefault_out_of_memory+0x11c/0x11c [ 2020.810423][ T5644] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2020.810435][ T5644] ? ___ratelimit+0x60/0x595 [ 2020.810448][ T5644] ? do_raw_spin_unlock+0x57/0x270 [ 2020.810464][ T5644] oom_kill_process.cold+0x10/0x15 [ 2020.810477][ T5644] out_of_memory+0x334/0x1340 [ 2020.810496][ T5644] ? __sched_text_start+0x8/0x8 [ 2020.823867][ T5644] ? oom_killer_disable+0x280/0x280 [ 2020.832671][ T5644] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2020.832689][ T5644] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 2020.844092][ T5644] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2020.844110][ T5644] ? cgroup_file_notify+0x140/0x1b0 [ 2020.844129][ T5644] memory_max_write+0x262/0x3a0 [ 2020.853831][ T5644] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 2020.853857][ T5644] cgroup_file_write+0x241/0x790 [ 2020.853882][ T5644] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 2020.863654][ T5644] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2020.863680][ T5644] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2020.863700][ T5644] kernfs_fop_write+0x2b8/0x480 [ 2020.873740][ T5644] __vfs_write+0x8a/0x110 [ 2020.873756][ T5644] ? kernfs_fop_open+0xd80/0xd80 [ 2020.873773][ T5644] vfs_write+0x268/0x5d0 [ 2020.884919][ T5644] ksys_write+0x14f/0x290 [ 2020.884938][ T5644] ? __ia32_sys_read+0xb0/0xb0 [ 2020.895901][ T5644] __x64_sys_write+0x73/0xb0 [ 2020.895924][ T5644] do_syscall_64+0xfa/0x760 [ 2020.907492][ T5644] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2020.907508][ T5644] RIP: 0033:0x459879 [ 2020.919163][ T5644] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2020.919172][ T5644] RSP: 002b:00007efe7a79bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2020.919185][ T5644] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 2020.919192][ T5644] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 2020.919204][ T5644] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2020.930421][ T5644] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efe7a79c6d4 [ 2020.930430][ T5644] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 2020.940466][ T5644] memory: usage 4872kB, limit 0kB, failcnt 299 [ 2020.956819][ T5644] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2020.970080][ T5644] Memory cgroup stats for /syz0: [ 2020.971566][ T5644] anon 4259840 [ 2020.971566][ T5644] file 155648 [ 2020.971566][ T5644] kernel_stack 0 [ 2020.971566][ T5644] slab 389120 [ 2020.971566][ T5644] sock 0 [ 2020.971566][ T5644] shmem 110592 [ 2020.971566][ T5644] file_mapped 0 [ 2020.971566][ T5644] file_dirty 0 [ 2020.971566][ T5644] file_writeback 0 [ 2020.971566][ T5644] anon_thp 4194304 [ 2020.971566][ T5644] inactive_anon 0 [ 2020.971566][ T5644] active_anon 4259840 [ 2020.971566][ T5644] inactive_file 135168 [ 2020.971566][ T5644] active_file 0 [ 2020.971566][ T5644] unevictable 12288 [ 2020.971566][ T5644] slab_reclaimable 135168 [ 2020.971566][ T5644] slab_unreclaimable 253952 [ 2020.971566][ T5644] pgfault 60753 [ 2020.971566][ T5644] pgmajfault 0 [ 2020.971566][ T5644] workingset_refault 0 [ 2020.971566][ T5644] workingset_activate 0 [ 2020.971566][ T5644] workingset_nodereclaim 0 [ 2020.971566][ T5644] pgrefill 225 [ 2020.971566][ T5644] pgscan 223 [ 2020.971566][ T5644] pgsteal 79 [ 2020.971566][ T5644] pgactivate 132 [ 2020.980988][ T5644] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=5643,uid=0 [ 2021.004614][ T5644] Memory cgroup out of memory: Killed process 5643 (syz-executor.0) total-vm:72580kB, anon-rss:4184kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:147456kB oom_score_adj:1000 [ 2021.081187][ T1065] oom_reaper: reaped process 5643 (syz-executor.0), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 2021.238651][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2021.254846][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2021.280225][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 2021.297637][ T5642] chnl_net:caif_netlink_parms(): no params data found [ 2021.318136][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2021.329764][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2021.346648][ T6660] bridge0: port 1(bridge_slave_0) entered blocking state [ 2021.353773][ T6660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2021.426829][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2021.443022][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2021.452377][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2021.469625][ T8780] bridge0: port 2(bridge_slave_1) entered blocking state [ 2021.476923][ T8780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2021.492798][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2021.502268][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2021.597003][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2021.612836][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2021.622809][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2021.643126][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2021.652130][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2021.666315][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state [ 2021.673434][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state [ 2021.688552][ T5642] device bridge_slave_0 entered promiscuous mode [ 2021.710483][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2021.723778][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 15:23:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:23:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) 15:23:01 executing program 4: r0 = memfd_create(&(0x7f0000000480)='security.SMACK64TRANSMUTE\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r0, r1, 0x0, 0x7ffffffd) 15:23:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 2021.779313][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2021.788076][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state [ 2021.797091][ T5623] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2021.812816][ T5623] CPU: 0 PID: 5623 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 2021.821923][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2021.823051][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state [ 2021.832055][ T5623] Call Trace: [ 2021.832098][ T5623] dump_stack+0x172/0x1f0 [ 2021.832120][ T5623] dump_header+0x177/0x1152 [ 2021.832137][ T5623] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2021.832148][ T5623] ? ___ratelimit+0x2c8/0x595 [ 2021.832160][ T5623] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2021.832177][ T5623] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2021.832193][ T5623] ? trace_hardirqs_on+0x67/0x240 [ 2021.832207][ T5623] ? pagefault_out_of_memory+0x11c/0x11c [ 2021.832219][ T5623] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2021.832230][ T5623] ? ___ratelimit+0x60/0x595 [ 2021.832240][ T5623] ? do_raw_spin_unlock+0x57/0x270 [ 2021.832259][ T5623] oom_kill_process.cold+0x10/0x15 [ 2021.873172][ T5623] out_of_memory+0x334/0x1340 [ 2021.873195][ T5623] ? lock_downgrade+0x920/0x920 [ 2021.873216][ T5623] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2021.873236][ T5623] ? oom_killer_disable+0x280/0x280 [ 2021.900274][ T5642] device bridge_slave_1 entered promiscuous mode [ 2021.904630][ T5623] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2021.904647][ T5623] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 2021.904672][ T5623] ? do_raw_spin_unlock+0x57/0x270 [ 2021.931618][ T5623] ? _raw_spin_unlock+0x2d/0x50 [ 2021.952820][ T5623] try_charge+0xf4b/0x1440 [ 2021.952847][ T5623] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2021.952867][ T5623] ? percpu_ref_tryget_live+0x111/0x290 [ 2021.968419][ T5623] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2021.974708][ T5623] ? __kasan_check_read+0x11/0x20 [ 2021.979790][ T5623] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2021.985382][ T5623] mem_cgroup_try_charge+0x136/0x590 [ 2021.990713][ T5623] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2021.997012][ T5623] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2022.002694][ T5623] wp_page_copy+0x41e/0x1590 [ 2022.007326][ T5623] ? find_held_lock+0x35/0x130 [ 2022.012135][ T5623] ? pmd_pfn+0x1d0/0x1d0 [ 2022.016417][ T5623] ? lock_downgrade+0x920/0x920 [ 2022.021309][ T5623] ? swp_swapcount+0x540/0x540 [ 2022.026113][ T5623] ? __kasan_check_read+0x11/0x20 [ 2022.031204][ T5623] ? do_raw_spin_unlock+0x57/0x270 [ 2022.036358][ T5623] do_wp_page+0x499/0x14d0 [ 2022.040816][ T5623] ? finish_mkwrite_fault+0x570/0x570 [ 2022.046235][ T5623] __handle_mm_fault+0x22f1/0x3f20 [ 2022.051397][ T5623] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2022.057013][ T5623] ? __kasan_check_read+0x11/0x20 [ 2022.062089][ T5623] handle_mm_fault+0x1b5/0x6c0 [ 2022.066896][ T5623] __do_page_fault+0x536/0xdd0 [ 2022.071722][ T5623] do_page_fault+0x38/0x590 [ 2022.076253][ T5623] page_fault+0x39/0x40 [ 2022.080427][ T5623] RIP: 0033:0x430956 [ 2022.084343][ T5623] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 46 64 00 85 c0 0f 84 [ 2022.103983][ T5623] RSP: 002b:00007ffcca2404f0 EFLAGS: 00010206 [ 2022.110086][ T5623] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 2022.118099][ T5623] RDX: 00005555562e9930 RSI: 00005555562f1970 RDI: 0000000000000003 [ 2022.126105][ T5623] RBP: 0000000000008041 R08: 0000000000000001 R09: 00005555562e8940 [ 2022.134199][ T5623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 2022.142202][ T5623] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 2022.167479][ T5623] memory: usage 480kB, limit 0kB, failcnt 307 [ 2022.175531][ T5623] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2022.187361][ T5623] Memory cgroup stats for /syz0: [ 2022.187520][ T5623] anon 0 [ 2022.187520][ T5623] file 155648 [ 2022.187520][ T5623] kernel_stack 0 [ 2022.187520][ T5623] slab 389120 [ 2022.187520][ T5623] sock 0 [ 2022.187520][ T5623] shmem 110592 [ 2022.187520][ T5623] file_mapped 0 [ 2022.187520][ T5623] file_dirty 0 [ 2022.187520][ T5623] file_writeback 0 [ 2022.187520][ T5623] anon_thp 0 [ 2022.187520][ T5623] inactive_anon 0 [ 2022.187520][ T5623] active_anon 0 [ 2022.187520][ T5623] inactive_file 135168 [ 2022.187520][ T5623] active_file 0 [ 2022.187520][ T5623] unevictable 12288 [ 2022.187520][ T5623] slab_reclaimable 135168 [ 2022.187520][ T5623] slab_unreclaimable 253952 [ 2022.187520][ T5623] pgfault 60753 [ 2022.187520][ T5623] pgmajfault 0 [ 2022.187520][ T5623] workingset_refault 0 [ 2022.187520][ T5623] workingset_activate 0 [ 2022.187520][ T5623] workingset_nodereclaim 0 [ 2022.187520][ T5623] pgrefill 225 [ 2022.187520][ T5623] pgscan 223 [ 2022.187520][ T5623] pgsteal 79 [ 2022.187520][ T5623] pgactivate 132 [ 2022.291865][ T5623] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=5623,uid=0 [ 2022.312673][ T5623] Memory cgroup out of memory: Killed process 5623 (syz-executor.0) total-vm:72448kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:0 15:23:01 executing program 4: syz_mount_image$nfs4(&(0x7f0000000040)='nfs4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)='ven\x00') [ 2022.335714][ T1065] oom_reaper: reaped process 5623 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 2022.463408][ T5651] NFS: bad mount option value specified: ven [ 2022.524847][ T5651] NFS: bad mount option value specified: ven 15:23:01 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)={0x28}, 0x28) 15:23:02 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) get_mempolicy(0x0, &(0x7f0000000280), 0x80000001, &(0x7f00005ad000/0x1000)=nil, 0x3) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x10000, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00003ec000/0x400000)=nil, 0x400000, 0x1000000000004) [ 2023.038282][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 15:23:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 2023.078523][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2023.102761][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2023.141011][ T5642] team0: Port device team_slave_0 added [ 2023.165646][ T5642] team0: Port device team_slave_1 added 15:23:02 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x110, 0x0) socketpair$unix(0x1, 0x2000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x208) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(0x0, 0x0) [ 2023.264639][ T5642] device hsr_slave_0 entered promiscuous mode [ 2023.322635][ T5642] device hsr_slave_1 entered promiscuous mode [ 2023.382801][ T5642] debugfs: Directory 'hsr0' with parent '/' already present! [ 2023.470025][ T5670] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 2023.491059][ T5670] FAT-fs (loop4): Filesystem has been set read-only [ 2023.498847][ T5670] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 17) [ 2023.644765][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2023.715174][T32585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2023.749113][T32585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2023.797405][ T5642] 8021q: adding VLAN 0 to HW filter on device team0 [ 2023.848729][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2023.857688][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2023.879483][ T5681] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2023.883607][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 2023.895823][ T5681] CPU: 0 PID: 5681 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 2023.896855][ T4287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2023.905784][ T5681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2023.905790][ T5681] Call Trace: [ 2023.905812][ T5681] dump_stack+0x172/0x1f0 [ 2023.905831][ T5681] dump_header+0x177/0x1152 [ 2023.935164][ T5681] ? pagefault_out_of_memory+0x11c/0x11c [ 2023.940797][ T5681] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2023.943634][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2023.946603][ T5681] ? ___ratelimit+0x60/0x595 [ 2023.959224][ T5681] ? do_raw_spin_unlock+0x57/0x270 [ 2023.964072][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2023.964338][ T5681] oom_kill_process.cold+0x10/0x15 [ 2023.972707][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state [ 2023.977412][ T5681] out_of_memory+0x334/0x1340 [ 2023.977430][ T5681] ? retint_kernel+0x2b/0x2b [ 2023.977445][ T5681] ? oom_killer_disable+0x280/0x280 [ 2023.977462][ T5681] ? mem_cgroup_out_of_memory+0x16a/0x240 [ 2023.977482][ T5681] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2023.984523][ T4287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2023.989147][ T5681] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 2024.022939][ T5681] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2024.028762][ T5681] ? cgroup_file_notify+0x140/0x1b0 [ 2024.033983][ T5681] memory_max_write+0x262/0x3a0 [ 2024.038851][ T5681] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 2024.045625][ T5681] ? cgroup_file_write+0x86/0x790 [ 2024.050655][ T5681] cgroup_file_write+0x241/0x790 [ 2024.055615][ T5681] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 2024.055631][ T5681] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2024.055651][ T5681] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2024.055667][ T5681] kernfs_fop_write+0x2b8/0x480 [ 2024.055681][ T5681] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2024.055700][ T5681] __vfs_write+0x8a/0x110 [ 2024.063720][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2024.068102][ T5681] ? kernfs_fop_open+0xd80/0xd80 [ 2024.068121][ T5681] vfs_write+0x268/0x5d0 [ 2024.068137][ T5681] ksys_write+0x14f/0x290 [ 2024.068156][ T5681] ? __ia32_sys_read+0xb0/0xb0 [ 2024.077855][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2024.078634][ T5681] ? do_syscall_64+0x26/0x760 [ 2024.089169][ T5681] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2024.105480][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2024.105663][ T5681] ? do_syscall_64+0x26/0x760 [ 2024.110876][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2024.114726][ T5681] __x64_sys_write+0x73/0xb0 [ 2024.114744][ T5681] do_syscall_64+0xfa/0x760 [ 2024.114764][ T5681] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2024.114775][ T5681] RIP: 0033:0x459879 [ 2024.114792][ T5681] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2024.125228][ T5683] IPVS: ftp: loaded support on port[0] = 21 [ 2024.127354][ T5681] RSP: 002b:00007fdddd583c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2024.147761][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2024.153733][ T5681] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 2024.183451][ T5642] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2024.192159][ T5681] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2024.192168][ T5681] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2024.192175][ T5681] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdddd5846d4 [ 2024.192182][ T5681] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 2024.206885][ T5681] memory: usage 4852kB, limit 0kB, failcnt 761 [ 2024.235709][ T5642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2024.248271][ T5681] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2024.279428][ T5681] Memory cgroup stats for /syz3: [ 2024.280889][ T5681] anon 4345856 [ 2024.280889][ T5681] file 0 [ 2024.280889][ T5681] kernel_stack 65536 [ 2024.280889][ T5681] slab 405504 [ 2024.280889][ T5681] sock 0 [ 2024.280889][ T5681] shmem 0 [ 2024.280889][ T5681] file_mapped 0 [ 2024.280889][ T5681] file_dirty 0 [ 2024.280889][ T5681] file_writeback 0 [ 2024.280889][ T5681] anon_thp 4194304 [ 2024.280889][ T5681] inactive_anon 0 [ 2024.280889][ T5681] active_anon 4345856 [ 2024.280889][ T5681] inactive_file 0 [ 2024.280889][ T5681] active_file 0 [ 2024.280889][ T5681] unevictable 0 [ 2024.280889][ T5681] slab_reclaimable 135168 [ 2024.280889][ T5681] slab_unreclaimable 270336 [ 2024.280889][ T5681] pgfault 35475 [ 2024.280889][ T5681] pgmajfault 0 [ 2024.280889][ T5681] workingset_refault 0 [ 2024.280889][ T5681] workingset_activate 0 [ 2024.280889][ T5681] workingset_nodereclaim 0 [ 2024.280889][ T5681] pgrefill 33 [ 2024.280889][ T5681] pgscan 66 [ 2024.280889][ T5681] pgsteal 0 [ 2024.280889][ T5681] pgactivate 0 [ 2024.306910][ T5681] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5679,uid=0 [ 2024.408996][ T5681] Memory cgroup out of memory: Killed process 5679 (syz-executor.3) total-vm:72580kB, anon-rss:4228kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 2024.431346][ T1065] oom_reaper: reaped process 5679 (syz-executor.3), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 2024.458651][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2024.479607][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2024.513603][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2024.551255][ T5628] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 15:23:03 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r5, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=""/31, 0x1f}}, 0x10) write$cgroup_int(r7, 0x0, 0x0) 15:23:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 2024.558576][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2024.576835][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2024.588840][ T5628] CPU: 1 PID: 5628 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 2024.597901][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2024.607964][ T5628] Call Trace: [ 2024.611253][ T5628] dump_stack+0x172/0x1f0 [ 2024.611272][ T5628] dump_header+0x177/0x1152 [ 2024.611289][ T5628] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2024.611299][ T5628] ? ___ratelimit+0x2c8/0x595 [ 2024.611311][ T5628] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2024.611328][ T5628] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2024.611342][ T5628] ? trace_hardirqs_on+0x67/0x240 [ 2024.611357][ T5628] ? pagefault_out_of_memory+0x11c/0x11c [ 2024.611371][ T5628] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2024.611384][ T5628] ? ___ratelimit+0x60/0x595 [ 2024.611394][ T5628] ? do_raw_spin_unlock+0x57/0x270 [ 2024.611409][ T5628] oom_kill_process.cold+0x10/0x15 [ 2024.611423][ T5628] out_of_memory+0x334/0x1340 [ 2024.611435][ T5628] ? lock_downgrade+0x920/0x920 [ 2024.611453][ T5628] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2024.611468][ T5628] ? oom_killer_disable+0x280/0x280 [ 2024.611494][ T5628] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2024.611509][ T5628] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 2024.611528][ T5628] ? do_raw_spin_unlock+0x57/0x270 [ 2024.611544][ T5628] ? _raw_spin_unlock+0x2d/0x50 [ 2024.611560][ T5628] try_charge+0xf4b/0x1440 [ 2024.611583][ T5628] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2024.611596][ T5628] ? percpu_ref_tryget_live+0x111/0x290 [ 2024.611613][ T5628] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2024.611628][ T5628] ? __kasan_check_read+0x11/0x20 [ 2024.611649][ T5628] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2024.611664][ T5628] mem_cgroup_try_charge+0x136/0x590 [ 2024.611677][ T5628] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2024.611695][ T5628] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2024.611713][ T5628] wp_page_copy+0x41e/0x1590 [ 2024.611727][ T5628] ? find_held_lock+0x35/0x130 [ 2024.611747][ T5628] ? pmd_pfn+0x1d0/0x1d0 [ 2024.611762][ T5628] ? lock_downgrade+0x920/0x920 [ 2024.611785][ T5628] ? swp_swapcount+0x540/0x540 [ 2024.611798][ T5628] ? __kasan_check_read+0x11/0x20 [ 2024.611810][ T5628] ? do_raw_spin_unlock+0x57/0x270 [ 2024.611827][ T5628] do_wp_page+0x499/0x14d0 [ 2024.611845][ T5628] ? finish_mkwrite_fault+0x570/0x570 [ 2024.611870][ T5628] __handle_mm_fault+0x22f1/0x3f20 [ 2024.611889][ T5628] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2024.611915][ T5628] ? __kasan_check_read+0x11/0x20 [ 2024.611935][ T5628] handle_mm_fault+0x1b5/0x6c0 [ 2024.647423][ T5628] __do_page_fault+0x536/0xdd0 [ 2024.658844][ T5628] do_page_fault+0x38/0x590 [ 2024.668499][ T5628] page_fault+0x39/0x40 [ 2024.683105][ T5628] RIP: 0033:0x430956 [ 2024.712058][ T5628] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 46 64 00 85 c0 0f 84 [ 2024.712066][ T5628] RSP: 002b:00007ffda3f68750 EFLAGS: 00010206 [ 2024.712076][ T5628] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 2024.712084][ T5628] RDX: 00005555573cf930 RSI: 00005555573d7970 RDI: 0000000000000003 [ 2024.712092][ T5628] RBP: 0000000000008041 R08: 0000000000000001 R09: 00005555573ce940 [ 2024.712100][ T5628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 2024.712107][ T5628] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 2024.750079][ T5628] memory: usage 468kB, limit 0kB, failcnt 773 [ 2024.943735][ T5686] IPVS: ftp: loaded support on port[0] = 21 [ 2025.044465][ T5628] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2025.073826][ T5628] Memory cgroup stats for /syz3: [ 2025.073942][ T5628] anon 86016 [ 2025.073942][ T5628] file 0 [ 2025.073942][ T5628] kernel_stack 0 [ 2025.073942][ T5628] slab 405504 [ 2025.073942][ T5628] sock 0 [ 2025.073942][ T5628] shmem 0 [ 2025.073942][ T5628] file_mapped 0 [ 2025.073942][ T5628] file_dirty 0 [ 2025.073942][ T5628] file_writeback 0 [ 2025.073942][ T5628] anon_thp 0 [ 2025.073942][ T5628] inactive_anon 0 [ 2025.073942][ T5628] active_anon 86016 [ 2025.073942][ T5628] inactive_file 0 [ 2025.073942][ T5628] active_file 0 [ 2025.073942][ T5628] unevictable 0 [ 2025.073942][ T5628] slab_reclaimable 135168 [ 2025.073942][ T5628] slab_unreclaimable 270336 [ 2025.073942][ T5628] pgfault 35508 [ 2025.073942][ T5628] pgmajfault 0 [ 2025.073942][ T5628] workingset_refault 0 [ 2025.073942][ T5628] workingset_activate 0 [ 2025.073942][ T5628] workingset_nodereclaim 0 [ 2025.073942][ T5628] pgrefill 33 [ 2025.073942][ T5628] pgscan 66 [ 2025.073942][ T5628] pgsteal 0 [ 2025.073942][ T5628] pgactivate 0 [ 2025.073942][ T5628] pgdeactivate 33 [ 2025.211990][ T5628] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5628,uid=0 [ 2025.302298][ T5683] chnl_net:caif_netlink_parms(): no params data found [ 2025.325654][ T5628] Memory cgroup out of memory: Killed process 5628 (syz-executor.3) total-vm:72448kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:0 [ 2025.433745][ T5686] chnl_net:caif_netlink_parms(): no params data found [ 2025.482521][ T5694] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2025.482594][ T1065] oom_reaper: reaped process 5628 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 2025.539103][ T5694] CPU: 0 PID: 5694 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 2025.548162][ T5694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2025.548168][ T5694] Call Trace: [ 2025.548188][ T5694] dump_stack+0x172/0x1f0 [ 2025.548217][ T5694] dump_header+0x177/0x1152 [ 2025.570392][ T5694] ? pagefault_out_of_memory+0x11c/0x11c [ 2025.576025][ T5694] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2025.576040][ T5694] ? ___ratelimit+0x60/0x595 [ 2025.576059][ T5694] ? do_raw_spin_unlock+0x57/0x270 [ 2025.586425][ T5694] oom_kill_process.cold+0x10/0x15 [ 2025.586441][ T5694] out_of_memory+0x334/0x1340 [ 2025.586462][ T5694] ? oom_killer_disable+0x280/0x280 [ 2025.596645][ T5694] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2025.596664][ T5694] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 2025.606497][ T5694] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2025.606521][ T5694] ? cgroup_file_notify+0x140/0x1b0 [ 2025.617654][ T5694] memory_max_write+0x262/0x3a0 [ 2025.617676][ T5694] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 2025.617695][ T5694] ? lock_acquire+0x190/0x410 [ 2025.628685][ T5694] ? kernfs_fop_write+0x227/0x480 [ 2025.628707][ T5694] cgroup_file_write+0x241/0x790 [ 2025.628726][ T5694] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 2025.628746][ T5694] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2025.640332][ T5694] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2025.640347][ T5694] kernfs_fop_write+0x2b8/0x480 [ 2025.640369][ T5694] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2025.650022][ T5694] __vfs_write+0x8a/0x110 [ 2025.650037][ T5694] ? kernfs_fop_open+0xd80/0xd80 [ 2025.650052][ T5694] vfs_write+0x268/0x5d0 [ 2025.650070][ T5694] ksys_write+0x14f/0x290 [ 2025.661860][ T5694] ? __ia32_sys_read+0xb0/0xb0 [ 2025.661878][ T5694] ? do_syscall_64+0x26/0x760 [ 2025.661895][ T5694] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2025.661908][ T5694] ? do_syscall_64+0x26/0x760 [ 2025.661927][ T5694] __x64_sys_write+0x73/0xb0 [ 2025.673178][ T5694] do_syscall_64+0xfa/0x760 [ 2025.673199][ T5694] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2025.673214][ T5694] RIP: 0033:0x459879 [ 2025.684265][ T5694] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2025.684273][ T5694] RSP: 002b:00007f23c98c2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2025.684286][ T5694] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 2025.684299][ T5694] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2025.693514][ T5694] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2025.693523][ T5694] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f23c98c36d4 [ 2025.693531][ T5694] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 2025.717736][ T5694] memory: usage 2848kB, limit 0kB, failcnt 431 [ 2025.822509][ T5694] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2025.832463][ T5694] Memory cgroup stats for /syz2: [ 2025.834087][ T5694] anon 2125824 [ 2025.834087][ T5694] file 151552 [ 2025.834087][ T5694] kernel_stack 0 [ 2025.834087][ T5694] slab 458752 [ 2025.834087][ T5694] sock 0 [ 2025.834087][ T5694] shmem 0 [ 2025.834087][ T5694] file_mapped 0 [ 2025.834087][ T5694] file_dirty 0 [ 2025.834087][ T5694] file_writeback 0 [ 2025.834087][ T5694] anon_thp 2097152 [ 2025.834087][ T5694] inactive_anon 0 [ 2025.834087][ T5694] active_anon 2125824 [ 2025.834087][ T5694] inactive_file 135168 [ 2025.834087][ T5694] active_file 0 [ 2025.834087][ T5694] unevictable 0 [ 2025.834087][ T5694] slab_reclaimable 135168 [ 2025.834087][ T5694] slab_unreclaimable 323584 [ 2025.834087][ T5694] pgfault 67221 [ 2025.834087][ T5694] pgmajfault 0 [ 2025.834087][ T5694] workingset_refault 0 [ 2025.834087][ T5694] workingset_activate 0 [ 2025.834087][ T5694] workingset_nodereclaim 0 [ 2025.834087][ T5694] pgrefill 310 [ 2025.834087][ T5694] pgscan 305 [ 2025.834087][ T5694] pgsteal 33 [ 2025.834087][ T5694] pgactivate 264 [ 2025.835459][ T5683] bridge0: port 1(bridge_slave_0) entered blocking state [ 2025.850257][ T5694] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=5693,uid=0 [ 2025.937032][ T5683] bridge0: port 1(bridge_slave_0) entered disabled state [ 2025.938066][ T5683] device bridge_slave_0 entered promiscuous mode [ 2025.951001][ T5694] Memory cgroup out of memory: Killed process 5693 (syz-executor.2) total-vm:72580kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 2025.998376][ T1065] oom_reaper: reaped process 5693 (syz-executor.2), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 15:23:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r4, 0x0, 0x0) 15:23:05 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x110, 0x0) socketpair$unix(0x1, 0x2000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x208) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(0x0, 0x0) [ 2026.370599][ T5642] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2026.385945][ T5642] CPU: 0 PID: 5642 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 2026.395011][ T5642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2026.405077][ T5642] Call Trace: [ 2026.408374][ T5642] dump_stack+0x172/0x1f0 [ 2026.412705][ T5642] dump_header+0x177/0x1152 [ 2026.417203][ T5642] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2026.423003][ T5642] ? ___ratelimit+0x2c8/0x595 [ 2026.427679][ T5642] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2026.433492][ T5642] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2026.438789][ T5642] ? trace_hardirqs_on+0x67/0x240 [ 2026.438809][ T5642] ? pagefault_out_of_memory+0x11c/0x11c [ 2026.438828][ T5642] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2026.438840][ T5642] ? ___ratelimit+0x60/0x595 [ 2026.438853][ T5642] ? do_raw_spin_unlock+0x57/0x270 [ 2026.438869][ T5642] oom_kill_process.cold+0x10/0x15 [ 2026.438883][ T5642] out_of_memory+0x334/0x1340 [ 2026.438896][ T5642] ? lock_downgrade+0x920/0x920 [ 2026.438920][ T5642] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2026.470146][ T5642] ? oom_killer_disable+0x280/0x280 [ 2026.479682][ T5642] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2026.479699][ T5642] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 2026.479724][ T5642] ? do_raw_spin_unlock+0x57/0x270 [ 2026.506969][ T5642] ? _raw_spin_unlock+0x2d/0x50 [ 2026.511849][ T5642] try_charge+0xf4b/0x1440 [ 2026.516296][ T5642] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2026.521855][ T5642] ? percpu_ref_tryget_live+0x111/0x290 [ 2026.527418][ T5642] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2026.533714][ T5642] ? __kasan_check_read+0x11/0x20 [ 2026.538776][ T5642] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2026.544341][ T5642] mem_cgroup_try_charge+0x136/0x590 [ 2026.549644][ T5642] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2026.555903][ T5642] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2026.561215][ T5699] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 2026.561548][ T5642] __handle_mm_fault+0x1e34/0x3f20 [ 2026.561571][ T5642] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2026.580815][ T5642] ? __kasan_check_read+0x11/0x20 [ 2026.583071][ T5699] FAT-fs (loop4): Filesystem has been set read-only [ 2026.585856][ T5642] handle_mm_fault+0x1b5/0x6c0 [ 2026.585877][ T5642] __do_page_fault+0x536/0xdd0 [ 2026.585900][ T5642] do_page_fault+0x38/0x590 [ 2026.585915][ T5642] page_fault+0x39/0x40 [ 2026.585931][ T5642] RIP: 0033:0x4034f2 [ 2026.602136][ T5699] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 17) [ 2026.606504][ T5642] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 a9 8d 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 c9 42 05 00 48 [ 2026.606512][ T5642] RSP: 002b:00007ffee61a6e20 EFLAGS: 00010246 [ 2026.606524][ T5642] RAX: 0000000000000000 RBX: 00000000001ec035 RCX: 0000000000413480 [ 2026.606532][ T5642] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffee61a7f50 [ 2026.606540][ T5642] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000555555b70940 [ 2026.606547][ T5642] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffee61a7f50 [ 2026.606556][ T5642] R13: 00007ffee61a7f40 R14: 0000000000000000 R15: 00007ffee61a7f50 [ 2026.608786][ T5642] memory: usage 508kB, limit 0kB, failcnt 439 [ 2026.614624][ T5642] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2026.660502][ T5642] Memory cgroup stats for /syz2: [ 2026.660603][ T5642] anon 0 [ 2026.660603][ T5642] file 151552 [ 2026.660603][ T5642] kernel_stack 0 [ 2026.660603][ T5642] slab 458752 [ 2026.660603][ T5642] sock 0 [ 2026.660603][ T5642] shmem 0 [ 2026.660603][ T5642] file_mapped 0 [ 2026.660603][ T5642] file_dirty 0 [ 2026.660603][ T5642] file_writeback 0 [ 2026.660603][ T5642] anon_thp 0 [ 2026.660603][ T5642] inactive_anon 0 [ 2026.660603][ T5642] active_anon 0 [ 2026.660603][ T5642] inactive_file 135168 [ 2026.660603][ T5642] active_file 0 [ 2026.660603][ T5642] unevictable 0 [ 2026.660603][ T5642] slab_reclaimable 135168 [ 2026.660603][ T5642] slab_unreclaimable 323584 [ 2026.660603][ T5642] pgfault 67221 [ 2026.660603][ T5642] pgmajfault 0 [ 2026.660603][ T5642] workingset_refault 0 [ 2026.660603][ T5642] workingset_activate 0 [ 2026.660603][ T5642] workingset_nodereclaim 0 [ 2026.660603][ T5642] pgrefill 310 [ 2026.660603][ T5642] pgscan 305 [ 2026.660603][ T5642] pgsteal 33 [ 2026.660603][ T5642] pgactivate 264 [ 2026.693814][ T5642] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=5642,uid=0 [ 2026.712381][ T5642] Memory cgroup out of memory: Killed process 5642 (syz-executor.2) total-vm:72448kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:0 [ 2026.831097][ T1065] oom_reaper: reaped process 5642 (syz-executor.2), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 2026.860679][ T5683] bridge0: port 2(bridge_slave_1) entered blocking state [ 2026.872717][ T5683] bridge0: port 2(bridge_slave_1) entered disabled state [ 2026.898849][ T5683] device bridge_slave_1 entered promiscuous mode [ 2027.320331][ T5686] bridge0: port 1(bridge_slave_0) entered blocking state [ 2027.327656][ T5686] bridge0: port 1(bridge_slave_0) entered disabled state [ 2027.342542][ T5686] device bridge_slave_0 entered promiscuous mode [ 2027.366371][ T5704] IPVS: ftp: loaded support on port[0] = 21 [ 2027.375348][ T5683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2027.402338][ T5686] bridge0: port 2(bridge_slave_1) entered blocking state [ 2027.409442][ T5686] bridge0: port 2(bridge_slave_1) entered disabled state [ 2027.442786][ T5686] device bridge_slave_1 entered promiscuous mode [ 2027.474708][ T5683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2027.519379][ T5686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2027.556465][ T5686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2027.574471][ T5683] team0: Port device team_slave_0 added [ 2027.583137][ T5683] team0: Port device team_slave_1 added [ 2027.630365][ T5686] team0: Port device team_slave_0 added [ 2027.646619][ T5686] team0: Port device team_slave_1 added [ 2027.707394][ T5683] device hsr_slave_0 entered promiscuous mode [ 2027.745307][ T5683] device hsr_slave_1 entered promiscuous mode [ 2027.795467][ T5683] debugfs: Directory 'hsr0' with parent '/' already present! [ 2027.879344][ T5686] device hsr_slave_0 entered promiscuous mode [ 2027.916828][ T5686] device hsr_slave_1 entered promiscuous mode [ 2027.976995][ T5686] debugfs: Directory 'hsr0' with parent '/' already present! [ 2028.055088][ T5704] chnl_net:caif_netlink_parms(): no params data found [ 2028.098985][ T5704] bridge0: port 1(bridge_slave_0) entered blocking state [ 2028.106139][ T5704] bridge0: port 1(bridge_slave_0) entered disabled state [ 2028.115444][ T5704] device bridge_slave_0 entered promiscuous mode [ 2028.123276][ T5704] bridge0: port 2(bridge_slave_1) entered blocking state [ 2028.130458][ T5704] bridge0: port 2(bridge_slave_1) entered disabled state [ 2028.138333][ T5704] device bridge_slave_1 entered promiscuous mode [ 2028.172658][ T5704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2028.194272][ T5704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2028.207292][ T5683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2028.229814][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2028.237519][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2028.248732][ T5683] 8021q: adding VLAN 0 to HW filter on device team0 [ 2028.289686][ T5686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2028.296649][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2028.320477][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2028.328936][ T5301] bridge0: port 1(bridge_slave_0) entered blocking state [ 2028.336032][ T5301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2028.344004][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2028.355998][ T5704] team0: Port device team_slave_0 added [ 2028.377940][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2028.386539][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2028.395204][ T8780] bridge0: port 2(bridge_slave_1) entered blocking state [ 2028.402303][ T8780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2028.411520][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2028.420004][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2028.428191][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2028.436025][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2028.445603][ T5704] team0: Port device team_slave_1 added [ 2028.454683][ T5686] 8021q: adding VLAN 0 to HW filter on device team0 [ 2028.467703][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2028.477015][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2028.485555][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2028.502461][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2028.510956][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2028.523121][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2028.532355][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2028.540635][ T8780] bridge0: port 1(bridge_slave_0) entered blocking state [ 2028.547756][ T8780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2028.586438][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2028.600566][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2028.610199][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2028.619274][ T5303] bridge0: port 2(bridge_slave_1) entered blocking state [ 2028.626387][ T5303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2028.635242][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2028.644670][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2028.653359][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2028.661592][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2028.670557][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2028.716773][ T5704] device hsr_slave_0 entered promiscuous mode [ 2028.784162][ T5704] device hsr_slave_1 entered promiscuous mode [ 2028.824263][ T5704] debugfs: Directory 'hsr0' with parent '/' already present! [ 2028.832681][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2029.411728][T32585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2029.420340][T32585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2029.430809][T32585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2029.440321][T32585] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2029.460437][ T5683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2029.476685][ T5686] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2029.492989][ T5686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2029.811139][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2029.820961][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2029.830064][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2029.838970][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2029.847932][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2029.856437][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2029.874448][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2030.163606][ T5712] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2030.184227][ T5712] CPU: 0 PID: 5712 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 2030.193283][ T5712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2030.203336][ T5712] Call Trace: [ 2030.206631][ T5712] dump_stack+0x172/0x1f0 [ 2030.210967][ T5712] dump_header+0x177/0x1152 [ 2030.215469][ T5712] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2030.221281][ T5712] ? ___ratelimit+0x2c8/0x595 [ 2030.225969][ T5712] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2030.231776][ T5712] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2030.237577][ T5712] ? trace_hardirqs_on+0x67/0x240 [ 2030.242598][ T5712] ? pagefault_out_of_memory+0x11c/0x11c [ 2030.248227][ T5712] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2030.254027][ T5712] ? ___ratelimit+0x60/0x595 [ 2030.258638][ T5712] ? do_raw_spin_unlock+0x57/0x270 [ 2030.263747][ T5712] oom_kill_process.cold+0x10/0x15 [ 2030.268859][ T5712] out_of_memory+0x334/0x1340 [ 2030.273538][ T5712] ? __sched_text_start+0x8/0x8 [ 2030.278384][ T5712] ? oom_killer_disable+0x280/0x280 [ 2030.283586][ T5712] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2030.289136][ T5712] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 2030.294769][ T5712] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2030.300574][ T5712] ? cgroup_file_notify+0x140/0x1b0 [ 2030.305770][ T5712] memory_max_write+0x262/0x3a0 [ 2030.310622][ T5712] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 2030.317366][ T5712] ? lock_acquire+0x190/0x410 [ 2030.322029][ T5712] ? kernfs_fop_write+0x227/0x480 [ 2030.327036][ T5712] cgroup_file_write+0x241/0x790 [ 2030.331954][ T5712] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 2030.338694][ T5712] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2030.344308][ T5712] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2030.349918][ T5712] kernfs_fop_write+0x2b8/0x480 [ 2030.354764][ T5712] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2030.360985][ T5712] __vfs_write+0x8a/0x110 [ 2030.365310][ T5712] ? kernfs_fop_open+0xd80/0xd80 [ 2030.370248][ T5712] vfs_write+0x268/0x5d0 [ 2030.374491][ T5712] ksys_write+0x14f/0x290 [ 2030.378802][ T5712] ? __ia32_sys_read+0xb0/0xb0 [ 2030.383554][ T5712] ? do_syscall_64+0x26/0x760 [ 2030.388216][ T5712] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2030.394264][ T5712] ? do_syscall_64+0x26/0x760 [ 2030.398941][ T5712] __x64_sys_write+0x73/0xb0 [ 2030.403513][ T5712] do_syscall_64+0xfa/0x760 [ 2030.407996][ T5712] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2030.413862][ T5712] RIP: 0033:0x459879 [ 2030.417738][ T5712] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2030.437319][ T5712] RSP: 002b:00007f7c049ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2030.445706][ T5712] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 2030.453654][ T5712] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2030.461606][ T5712] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2030.469568][ T5712] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7c049ed6d4 [ 2030.477516][ T5712] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 2030.494878][ T5712] memory: usage 4920kB, limit 0kB, failcnt 1707 [ 2030.503965][ T5712] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2030.511241][ T5712] Memory cgroup stats for /syz1: [ 2030.512820][ T5712] anon 4259840 [ 2030.512820][ T5712] file 0 [ 2030.512820][ T5712] kernel_stack 65536 [ 2030.512820][ T5712] slab 430080 [ 2030.512820][ T5712] sock 0 [ 2030.512820][ T5712] shmem 0 [ 2030.512820][ T5712] file_mapped 0 [ 2030.512820][ T5712] file_dirty 0 [ 2030.512820][ T5712] file_writeback 0 [ 2030.512820][ T5712] anon_thp 4194304 [ 2030.512820][ T5712] inactive_anon 131072 [ 2030.512820][ T5712] active_anon 4259840 [ 2030.512820][ T5712] inactive_file 0 [ 2030.512820][ T5712] active_file 0 [ 2030.512820][ T5712] unevictable 0 [ 2030.512820][ T5712] slab_reclaimable 135168 [ 2030.512820][ T5712] slab_unreclaimable 294912 [ 2030.512820][ T5712] pgfault 90849 [ 2030.512820][ T5712] pgmajfault 0 [ 2030.512820][ T5712] workingset_refault 0 [ 2030.512820][ T5712] workingset_activate 0 [ 2030.512820][ T5712] workingset_nodereclaim 0 [ 2030.512820][ T5712] pgrefill 240 [ 2030.512820][ T5712] pgscan 242 [ 2030.512820][ T5712] pgsteal 35 [ 2030.512820][ T5712] pgactivate 198 [ 2030.610788][ T5712] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5711,uid=0 [ 2030.630481][ T5712] Memory cgroup out of memory: Killed process 5711 (syz-executor.1) total-vm:72580kB, anon-rss:4188kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:147456kB oom_score_adj:1000 [ 2030.652930][ T1065] oom_reaper: reaped process 5711 (syz-executor.1), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 2030.707994][ T5686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2030.754640][ T5683] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2030.763576][ T5704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2030.766934][ T5683] CPU: 0 PID: 5683 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 2030.780196][ T5683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2030.784230][ T5704] 8021q: adding VLAN 0 to HW filter on device team0 [ 2030.790253][ T5683] Call Trace: [ 2030.790275][ T5683] dump_stack+0x172/0x1f0 [ 2030.790294][ T5683] dump_header+0x177/0x1152 [ 2030.790317][ T5683] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2030.814778][ T5683] ? ___ratelimit+0x2c8/0x595 [ 2030.819467][ T5683] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2030.823354][ T5704] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2030.825284][ T5683] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2030.835654][ T5704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2030.840877][ T5683] ? trace_hardirqs_on+0x67/0x240 [ 2030.840894][ T5683] ? pagefault_out_of_memory+0x11c/0x11c [ 2030.840910][ T5683] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2030.840926][ T5683] ? ___ratelimit+0x60/0x595 [ 2030.867222][ T5704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2030.867670][ T5683] ? do_raw_spin_unlock+0x57/0x270 [ 2030.878993][ T5683] oom_kill_process.cold+0x10/0x15 [ 2030.889197][ T5683] out_of_memory+0x334/0x1340 [ 2030.893900][ T5683] ? lock_downgrade+0x920/0x920 [ 2030.898797][ T5683] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2030.904622][ T5683] ? oom_killer_disable+0x280/0x280 [ 2030.909853][ T5683] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2030.915422][ T5683] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 2030.921082][ T5683] ? do_raw_spin_unlock+0x57/0x270 [ 2030.926215][ T5683] ? _raw_spin_unlock+0x2d/0x50 [ 2030.931051][ T5683] try_charge+0xf4b/0x1440 [ 2030.935582][ T5683] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2030.941120][ T5683] ? percpu_ref_tryget_live+0x111/0x290 [ 2030.946657][ T5683] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2030.952880][ T5683] ? __kasan_check_read+0x11/0x20 [ 2030.957891][ T5683] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2030.963424][ T5683] mem_cgroup_try_charge+0x136/0x590 [ 2030.968700][ T5683] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2030.974929][ T5683] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2030.980633][ T5683] wp_page_copy+0x41e/0x1590 [ 2030.985205][ T5683] ? find_held_lock+0x35/0x130 [ 2030.989964][ T5683] ? pmd_pfn+0x1d0/0x1d0 [ 2030.994189][ T5683] ? lock_downgrade+0x920/0x920 [ 2030.999020][ T5683] ? swp_swapcount+0x540/0x540 [ 2031.003786][ T5683] ? __kasan_check_read+0x11/0x20 [ 2031.008794][ T5683] ? do_raw_spin_unlock+0x57/0x270 [ 2031.013891][ T5683] do_wp_page+0x499/0x14d0 [ 2031.018343][ T5683] ? finish_mkwrite_fault+0x570/0x570 [ 2031.023711][ T5683] __handle_mm_fault+0x22f1/0x3f20 [ 2031.028806][ T5683] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2031.034341][ T5683] ? __kasan_check_read+0x11/0x20 [ 2031.039352][ T5683] handle_mm_fault+0x1b5/0x6c0 [ 2031.044102][ T5683] __do_page_fault+0x536/0xdd0 [ 2031.048851][ T5683] do_page_fault+0x38/0x590 [ 2031.053336][ T5683] page_fault+0x39/0x40 [ 2031.057468][ T5683] RIP: 0033:0x430956 [ 2031.061340][ T5683] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 46 64 00 85 c0 0f 84 [ 2031.080925][ T5683] RSP: 002b:00007ffde3b21560 EFLAGS: 00010206 [ 2031.086970][ T5683] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 2031.094920][ T5683] RDX: 0000555556985930 RSI: 000055555698d970 RDI: 0000000000000003 [ 2031.102870][ T5683] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000555556984940 [ 2031.110819][ T5683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 2031.118783][ T5683] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 2031.135169][ T5683] memory: usage 528kB, limit 0kB, failcnt 1719 [ 2031.141361][ T5683] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2031.173767][ T5683] Memory cgroup stats for /syz1: [ 2031.173871][ T5683] anon 0 [ 2031.173871][ T5683] file 0 [ 2031.173871][ T5683] kernel_stack 0 [ 2031.173871][ T5683] slab 430080 [ 2031.173871][ T5683] sock 0 [ 2031.173871][ T5683] shmem 0 [ 2031.173871][ T5683] file_mapped 0 [ 2031.173871][ T5683] file_dirty 0 [ 2031.173871][ T5683] file_writeback 0 [ 2031.173871][ T5683] anon_thp 0 [ 2031.173871][ T5683] inactive_anon 131072 [ 2031.173871][ T5683] active_anon 0 [ 2031.173871][ T5683] inactive_file 0 [ 2031.173871][ T5683] active_file 0 [ 2031.173871][ T5683] unevictable 0 [ 2031.173871][ T5683] slab_reclaimable 135168 [ 2031.173871][ T5683] slab_unreclaimable 294912 [ 2031.173871][ T5683] pgfault 90849 [ 2031.173871][ T5683] pgmajfault 0 [ 2031.173871][ T5683] workingset_refault 0 [ 2031.173871][ T5683] workingset_activate 0 [ 2031.173871][ T5683] workingset_nodereclaim 0 [ 2031.173871][ T5683] pgrefill 240 [ 2031.173871][ T5683] pgscan 242 [ 2031.173871][ T5683] pgsteal 35 [ 2031.173871][ T5683] pgactivate 198 [ 2031.173871][ T5683] pgdeactivate 240 [ 2031.423465][ T5683] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5683,uid=0 [ 2031.439628][ T5683] Memory cgroup out of memory: Killed process 5683 (syz-executor.1) total-vm:72448kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:0 [ 2031.457940][ T5722] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2031.460784][ T1065] oom_reaper: reaped process 5683 (syz-executor.1), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 2031.468750][ T5722] CPU: 1 PID: 5722 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 2031.488560][ T5722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2031.498616][ T5722] Call Trace: [ 2031.501910][ T5722] dump_stack+0x172/0x1f0 [ 2031.506244][ T5722] dump_header+0x177/0x1152 [ 2031.510748][ T5722] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2031.516561][ T5722] ? ___ratelimit+0x2c8/0x595 [ 2031.521239][ T5722] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2031.527053][ T5722] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2031.532338][ T5722] ? trace_hardirqs_on+0x67/0x240 [ 2031.537370][ T5722] ? pagefault_out_of_memory+0x11c/0x11c [ 2031.543037][ T5722] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2031.548902][ T5722] ? ___ratelimit+0x60/0x595 [ 2031.553524][ T5722] ? do_raw_spin_unlock+0x57/0x270 [ 2031.558669][ T5722] oom_kill_process.cold+0x10/0x15 [ 2031.563793][ T5722] out_of_memory+0x334/0x1340 [ 2031.568481][ T5722] ? oom_killer_disable+0x280/0x280 [ 2031.573696][ T5722] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2031.579241][ T5722] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 2031.584893][ T5722] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2031.590715][ T5722] ? cgroup_file_notify+0x140/0x1b0 [ 2031.595921][ T5722] memory_max_write+0x262/0x3a0 [ 2031.600823][ T5722] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 2031.607643][ T5722] ? lock_acquire+0x190/0x410 [ 2031.612349][ T5722] ? kernfs_fop_write+0x227/0x480 [ 2031.617405][ T5722] cgroup_file_write+0x241/0x790 [ 2031.622377][ T5722] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 2031.629164][ T5722] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2031.634820][ T5722] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2031.640463][ T5722] kernfs_fop_write+0x2b8/0x480 [ 2031.645320][ T5722] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2031.651583][ T5722] __vfs_write+0x8a/0x110 [ 2031.655923][ T5722] ? kernfs_fop_open+0xd80/0xd80 [ 2031.660876][ T5722] vfs_write+0x268/0x5d0 [ 2031.665133][ T5722] ksys_write+0x14f/0x290 [ 2031.669496][ T5722] ? __ia32_sys_read+0xb0/0xb0 [ 2031.674282][ T5722] __x64_sys_write+0x73/0xb0 [ 2031.678880][ T5722] do_syscall_64+0xfa/0x760 [ 2031.683392][ T5722] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2031.689283][ T5722] RIP: 0033:0x459879 [ 2031.693176][ T5722] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2031.712783][ T5722] RSP: 002b:00007f3083196c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2031.721198][ T5722] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 2031.729169][ T5722] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 2031.737145][ T5722] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2031.745119][ T5722] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f30831976d4 [ 2031.753093][ T5722] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 2031.800922][ T5722] memory: usage 4860kB, limit 0kB, failcnt 308 [ 2031.807348][ T5722] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2031.814493][ T5722] Memory cgroup stats for /syz0: [ 2031.816094][ T5722] anon 4354048 [ 2031.816094][ T5722] file 155648 [ 2031.816094][ T5722] kernel_stack 65536 [ 2031.816094][ T5722] slab 389120 [ 2031.816094][ T5722] sock 0 [ 2031.816094][ T5722] shmem 110592 [ 2031.816094][ T5722] file_mapped 0 [ 2031.816094][ T5722] file_dirty 0 [ 2031.816094][ T5722] file_writeback 0 [ 2031.816094][ T5722] anon_thp 4194304 [ 2031.816094][ T5722] inactive_anon 0 [ 2031.816094][ T5722] active_anon 4354048 [ 2031.816094][ T5722] inactive_file 135168 [ 2031.816094][ T5722] active_file 0 [ 2031.816094][ T5722] unevictable 12288 [ 2031.816094][ T5722] slab_reclaimable 135168 [ 2031.816094][ T5722] slab_unreclaimable 253952 [ 2031.816094][ T5722] pgfault 60819 [ 2031.816094][ T5722] pgmajfault 0 [ 2031.816094][ T5722] workingset_refault 0 [ 2031.816094][ T5722] workingset_activate 0 [ 2031.816094][ T5722] workingset_nodereclaim 0 [ 2031.816094][ T5722] pgrefill 225 [ 2031.816094][ T5722] pgscan 223 [ 2031.816094][ T5722] pgsteal 79 [ 2031.816094][ T5722] pgactivate 132 [ 2031.914643][ T5722] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=5721,uid=0 [ 2031.934034][ T5722] Memory cgroup out of memory: Killed process 5721 (syz-executor.0) total-vm:72580kB, anon-rss:4188kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:147456kB oom_score_adj:1000 [ 2031.957114][ T1065] oom_reaper: reaped process 5721 (syz-executor.0), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 2031.999017][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2032.007072][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2032.015847][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2032.026498][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2032.036029][ T5303] bridge0: port 1(bridge_slave_0) entered blocking state [ 2032.043137][ T5303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2032.051852][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2032.060821][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2032.069464][ T5303] bridge0: port 2(bridge_slave_1) entered blocking state [ 2032.076614][ T5303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2032.085136][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2032.100672][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2032.117774][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2032.130242][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2032.147506][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2032.158710][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2032.173490][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2032.188895][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2032.211461][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2032.220099][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2032.239357][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2032.256343][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2032.269052][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2032.466592][ T5704] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2032.486718][ T5704] CPU: 0 PID: 5704 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 2032.495840][ T5704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2032.506067][ T5704] Call Trace: [ 2032.509390][ T5704] dump_stack+0x172/0x1f0 [ 2032.513729][ T5704] dump_header+0x177/0x1152 [ 2032.518231][ T5704] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2032.524031][ T5704] ? ___ratelimit+0x2c8/0x595 [ 2032.528710][ T5704] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2032.534513][ T5704] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2032.539811][ T5704] ? trace_hardirqs_on+0x67/0x240 [ 2032.544840][ T5704] ? pagefault_out_of_memory+0x11c/0x11c [ 2032.550518][ T5704] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2032.556388][ T5704] ? ___ratelimit+0x60/0x595 [ 2032.560989][ T5704] ? do_raw_spin_unlock+0x57/0x270 [ 2032.566113][ T5704] oom_kill_process.cold+0x10/0x15 [ 2032.571237][ T5704] out_of_memory+0x334/0x1340 [ 2032.575928][ T5704] ? lock_downgrade+0x920/0x920 [ 2032.580788][ T5704] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2032.586595][ T5704] ? oom_killer_disable+0x280/0x280 [ 2032.591810][ T5704] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2032.597363][ T5704] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 2032.603012][ T5704] ? do_raw_spin_unlock+0x57/0x270 [ 2032.608140][ T5704] ? _raw_spin_unlock+0x2d/0x50 [ 2032.613006][ T5704] try_charge+0xf4b/0x1440 [ 2032.617483][ T5704] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2032.623034][ T5704] ? percpu_ref_tryget_live+0x111/0x290 [ 2032.628599][ T5704] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2032.634850][ T5704] ? __kasan_check_read+0x11/0x20 [ 2032.639882][ T5704] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2032.645439][ T5704] mem_cgroup_try_charge+0x136/0x590 [ 2032.650735][ T5704] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2032.656995][ T5704] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2032.662634][ T5704] wp_page_copy+0x41e/0x1590 [ 2032.667230][ T5704] ? find_held_lock+0x35/0x130 [ 2032.672003][ T5704] ? pmd_pfn+0x1d0/0x1d0 [ 2032.676245][ T5704] ? lock_downgrade+0x920/0x920 [ 2032.681102][ T5704] ? swp_swapcount+0x540/0x540 [ 2032.685865][ T5704] ? __kasan_check_read+0x11/0x20 [ 2032.690885][ T5704] ? do_raw_spin_unlock+0x57/0x270 [ 2032.695988][ T5704] do_wp_page+0x499/0x14d0 [ 2032.700486][ T5704] ? finish_mkwrite_fault+0x570/0x570 [ 2032.705854][ T5704] __handle_mm_fault+0x22f1/0x3f20 [ 2032.710957][ T5704] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2032.716570][ T5704] ? __kasan_check_read+0x11/0x20 [ 2032.721600][ T5704] handle_mm_fault+0x1b5/0x6c0 [ 2032.726469][ T5704] __do_page_fault+0x536/0xdd0 [ 2032.731235][ T5704] do_page_fault+0x38/0x590 [ 2032.735727][ T5704] page_fault+0x39/0x40 [ 2032.739864][ T5704] RIP: 0033:0x4034f2 [ 2032.743760][ T5704] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 a9 8d 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 c9 42 05 00 48 [ 2032.763348][ T5704] RSP: 002b:00007ffc8d613c80 EFLAGS: 00010246 [ 2032.769416][ T5704] RAX: 0000000000000000 RBX: 00000000001ed76a RCX: 0000000000413480 [ 2032.777392][ T5704] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffc8d614db0 [ 2032.785358][ T5704] RBP: 0000000000000002 R08: 0000000000000001 R09: 000055555692d940 [ 2032.793340][ T5704] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc8d614db0 [ 2032.801314][ T5704] R13: 00007ffc8d614da0 R14: 0000000000000000 R15: 00007ffc8d614db0 [ 2032.812966][ T5704] memory: usage 476kB, limit 0kB, failcnt 316 [ 2032.819125][ T5704] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2032.819130][ T5704] Memory cgroup stats for /syz0: [ 2032.819240][ T5704] anon 53248 [ 2032.819240][ T5704] file 155648 [ 2032.819240][ T5704] kernel_stack 65536 [ 2032.819240][ T5704] slab 389120 [ 2032.819240][ T5704] sock 0 [ 2032.819240][ T5704] shmem 110592 [ 2032.819240][ T5704] file_mapped 0 [ 2032.819240][ T5704] file_dirty 0 [ 2032.819240][ T5704] file_writeback 0 [ 2032.819240][ T5704] anon_thp 0 [ 2032.819240][ T5704] inactive_anon 0 [ 2032.819240][ T5704] active_anon 53248 [ 2032.819240][ T5704] inactive_file 135168 [ 2032.819240][ T5704] active_file 0 [ 2032.819240][ T5704] unevictable 12288 [ 2032.819240][ T5704] slab_reclaimable 135168 [ 2032.819240][ T5704] slab_unreclaimable 253952 [ 2032.819240][ T5704] pgfault 60819 [ 2032.819240][ T5704] pgmajfault 0 [ 2032.819240][ T5704] workingset_refault 0 [ 2032.819240][ T5704] workingset_activate 0 [ 2032.819240][ T5704] workingset_nodereclaim 0 [ 2032.819240][ T5704] pgrefill 225 [ 2032.819240][ T5704] pgscan 223 [ 2032.819240][ T5704] pgsteal 79 [ 2032.819240][ T5704] pgactivate 132 [ 2032.819257][ T5704] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=5704,uid=0 [ 2032.819361][ T5704] Memory cgroup out of memory: Killed process 5704 (syz-executor.0) total-vm:72448kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:0 [ 2032.820195][ T1065] oom_reaper: reaped process 5704 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 2032.844746][ T5725] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2032.954227][ T5725] CPU: 0 PID: 5725 Comm: syz-executor.5 Not tainted 5.3.0-rc6-next-20190830 #75 [ 2032.968612][ T5725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2032.968625][ T5725] Call Trace: [ 2032.968647][ T5725] dump_stack+0x172/0x1f0 [ 2032.968668][ T5725] dump_header+0x177/0x1152 [ 2032.968690][ T5725] ? pagefault_out_of_memory+0x11c/0x11c [ 2032.968711][ T5725] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2032.987866][ T5725] ? ___ratelimit+0x60/0x595 [ 2033.001185][ T5725] ? do_raw_spin_unlock+0x57/0x270 [ 2033.001211][ T5725] oom_kill_process.cold+0x10/0x15 [ 2033.010005][ T5725] out_of_memory+0x334/0x1340 [ 2033.010026][ T5725] ? oom_killer_disable+0x280/0x280 [ 2033.010051][ T5725] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2033.051740][ T5725] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 2033.057370][ T5725] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2033.063174][ T5725] ? cgroup_file_notify+0x140/0x1b0 [ 2033.068354][ T5725] memory_max_write+0x262/0x3a0 [ 2033.073202][ T5725] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 2033.079952][ T5725] ? lock_acquire+0x190/0x410 [ 2033.084610][ T5725] ? kernfs_fop_write+0x227/0x480 [ 2033.089968][ T5725] cgroup_file_write+0x241/0x790 [ 2033.094900][ T5725] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 2033.101646][ T5725] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2033.107271][ T5725] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2033.112888][ T5725] kernfs_fop_write+0x2b8/0x480 [ 2033.117734][ T5725] __vfs_write+0x8a/0x110 [ 2033.122048][ T5725] ? kernfs_fop_open+0xd80/0xd80 [ 2033.126976][ T5725] vfs_write+0x268/0x5d0 [ 2033.131212][ T5725] ksys_write+0x14f/0x290 [ 2033.135530][ T5725] ? __ia32_sys_read+0xb0/0xb0 [ 2033.140283][ T5725] ? do_syscall_64+0x26/0x760 [ 2033.144940][ T5725] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2033.150999][ T5725] ? do_syscall_64+0x26/0x760 [ 2033.155684][ T5725] __x64_sys_write+0x73/0xb0 [ 2033.160283][ T5725] do_syscall_64+0xfa/0x760 [ 2033.164778][ T5725] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2033.170665][ T5725] RIP: 0033:0x459879 [ 2033.174539][ T5725] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2033.194126][ T5725] RSP: 002b:00007f9b6f637c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2033.202524][ T5725] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 2033.210476][ T5725] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 2033.218426][ T5725] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2033.226385][ T5725] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9b6f6386d4 [ 2033.234336][ T5725] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 2033.247536][ T5725] memory: usage 5296kB, limit 0kB, failcnt 533 [ 2033.253848][ T5725] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2033.260873][ T5725] Memory cgroup stats for /syz5: [ 2033.260970][ T5725] anon 4362240 [ 2033.260970][ T5725] file 176128 [ 2033.260970][ T5725] kernel_stack 65536 [ 2033.260970][ T5725] slab 827392 [ 2033.260970][ T5725] sock 0 [ 2033.260970][ T5725] shmem 172032 [ 2033.260970][ T5725] file_mapped 0 [ 2033.260970][ T5725] file_dirty 0 [ 2033.260970][ T5725] file_writeback 0 [ 2033.260970][ T5725] anon_thp 4194304 [ 2033.260970][ T5725] inactive_anon 143360 [ 2033.260970][ T5725] active_anon 4292608 [ 2033.260970][ T5725] inactive_file 0 [ 2033.260970][ T5725] active_file 135168 [ 2033.260970][ T5725] unevictable 131072 [ 2033.260970][ T5725] slab_reclaimable 405504 [ 2033.260970][ T5725] slab_unreclaimable 421888 [ 2033.260970][ T5725] pgfault 60192 [ 2033.260970][ T5725] pgmajfault 0 [ 2033.260970][ T5725] workingset_refault 0 [ 2033.260970][ T5725] workingset_activate 0 [ 2033.260970][ T5725] workingset_nodereclaim 0 [ 2033.260970][ T5725] pgrefill 734 [ 2033.260970][ T5725] pgscan 744 [ 2033.260970][ T5725] pgsteal 35 [ 2033.355597][ T5725] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=5724,uid=0 [ 2033.391908][ T5725] Memory cgroup out of memory: Killed process 5724 (syz-executor.5) total-vm:72580kB, anon-rss:4192kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 2033.412375][ T1065] oom_reaper: reaped process 5724 (syz-executor.5), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB 15:23:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) 15:23:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r5, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=""/31, 0x1f}}, 0x10) write$cgroup_int(r7, 0x0, 0x0) 15:23:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r4, 0x0, 0x0) 15:23:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:23:12 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:23:12 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x110, 0x0) socketpair$unix(0x1, 0x2000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x208) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(0x0, 0x0) [ 2033.465760][ T5686] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2033.502422][ T5686] CPU: 0 PID: 5686 Comm: syz-executor.5 Not tainted 5.3.0-rc6-next-20190830 #75 [ 2033.511492][ T5686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2033.521562][ T5686] Call Trace: [ 2033.524865][ T5686] dump_stack+0x172/0x1f0 [ 2033.529210][ T5686] dump_header+0x177/0x1152 [ 2033.533728][ T5686] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2033.539555][ T5686] ? ___ratelimit+0x2c8/0x595 [ 2033.544252][ T5686] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2033.550069][ T5686] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2033.555455][ T5686] ? trace_hardirqs_on+0x67/0x240 [ 2033.560510][ T5686] ? pagefault_out_of_memory+0x11c/0x11c [ 2033.566170][ T5686] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2033.571986][ T5686] ? ___ratelimit+0x60/0x595 [ 2033.576591][ T5686] ? do_raw_spin_unlock+0x57/0x270 [ 2033.581732][ T5686] oom_kill_process.cold+0x10/0x15 [ 2033.586866][ T5686] out_of_memory+0x334/0x1340 [ 2033.591556][ T5686] ? lock_downgrade+0x920/0x920 [ 2033.596421][ T5686] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2033.602257][ T5686] ? oom_killer_disable+0x280/0x280 [ 2033.607487][ T5686] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2033.613137][ T5686] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 2033.618796][ T5686] ? do_raw_spin_unlock+0x57/0x270 [ 2033.623932][ T5686] ? _raw_spin_unlock+0x2d/0x50 [ 2033.628807][ T5686] try_charge+0xf4b/0x1440 [ 2033.633245][ T5686] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2033.638800][ T5686] ? percpu_ref_tryget_live+0x111/0x290 [ 2033.644379][ T5686] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2033.650644][ T5686] ? __kasan_check_read+0x11/0x20 [ 2033.655696][ T5686] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2033.661254][ T5686] mem_cgroup_try_charge+0x136/0x590 [ 2033.666558][ T5686] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2033.672816][ T5686] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2033.678466][ T5686] wp_page_copy+0x41e/0x1590 [ 2033.683078][ T5686] ? find_held_lock+0x35/0x130 [ 2033.687878][ T5686] ? pmd_pfn+0x1d0/0x1d0 [ 2033.692143][ T5686] ? lock_downgrade+0x920/0x920 [ 2033.697011][ T5686] ? swp_swapcount+0x540/0x540 [ 2033.701788][ T5686] ? __kasan_check_read+0x11/0x20 [ 2033.706837][ T5686] ? do_raw_spin_unlock+0x57/0x270 [ 2033.711973][ T5686] do_wp_page+0x499/0x14d0 [ 2033.716410][ T5686] ? finish_mkwrite_fault+0x570/0x570 [ 2033.721802][ T5686] __handle_mm_fault+0x22f1/0x3f20 [ 2033.726946][ T5686] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2033.732528][ T5686] ? __kasan_check_read+0x11/0x20 [ 2033.737589][ T5686] handle_mm_fault+0x1b5/0x6c0 [ 2033.742368][ T5686] __do_page_fault+0x536/0xdd0 [ 2033.747168][ T5686] do_page_fault+0x38/0x590 [ 2033.751695][ T5686] page_fault+0x39/0x40 [ 2033.755858][ T5686] RIP: 0033:0x4034f2 [ 2033.759757][ T5686] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 a9 8d 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 c9 42 05 00 48 [ 2033.779373][ T5686] RSP: 002b:00007ffc1b0d4d50 EFLAGS: 00010246 [ 2033.785455][ T5686] RAX: 0000000000000000 RBX: 00000000001edeaa RCX: 0000000000413480 [ 2033.793450][ T5686] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffc1b0d5e80 [ 2033.801437][ T5686] RBP: 0000000000000002 R08: 0000000000000001 R09: 000055555578d940 [ 2033.809432][ T5686] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc1b0d5e80 [ 2033.817418][ T5686] R13: 00007ffc1b0d5e70 R14: 0000000000000000 R15: 00007ffc1b0d5e80 [ 2034.105828][ T5686] memory: usage 916kB, limit 0kB, failcnt 545 [ 2034.125928][ T5686] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2034.168190][ T5686] Memory cgroup stats for /syz5: [ 2034.168302][ T5686] anon 53248 [ 2034.168302][ T5686] file 176128 [ 2034.168302][ T5686] kernel_stack 65536 [ 2034.168302][ T5686] slab 827392 [ 2034.168302][ T5686] sock 0 [ 2034.168302][ T5686] shmem 172032 [ 2034.168302][ T5686] file_mapped 0 [ 2034.168302][ T5686] file_dirty 0 [ 2034.168302][ T5686] file_writeback 0 [ 2034.168302][ T5686] anon_thp 0 [ 2034.168302][ T5686] inactive_anon 143360 [ 2034.168302][ T5686] active_anon 53248 [ 2034.168302][ T5686] inactive_file 0 [ 2034.168302][ T5686] active_file 135168 [ 2034.168302][ T5686] unevictable 131072 [ 2034.168302][ T5686] slab_reclaimable 405504 [ 2034.168302][ T5686] slab_unreclaimable 421888 [ 2034.168302][ T5686] pgfault 60192 [ 2034.168302][ T5686] pgmajfault 0 [ 2034.168302][ T5686] workingset_refault 0 [ 2034.168302][ T5686] workingset_activate 0 [ 2034.168302][ T5686] workingset_nodereclaim 0 [ 2034.168302][ T5686] pgrefill 734 [ 2034.168302][ T5686] pgscan 744 [ 2034.168302][ T5686] pgsteal 35 [ 2034.168302][ T5686] pgactivate 660 [ 2034.419577][ T5686] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=5686,uid=0 [ 2034.457807][ T5686] Memory cgroup out of memory: Killed process 5686 (syz-executor.5) total-vm:72448kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:0 [ 2034.514739][ T1065] oom_reaper: reaped process 5686 (syz-executor.5), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 15:23:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:23:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x13}) 15:23:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 15:23:14 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = gettid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) finit_module(r1, &(0x7f0000000140)='/dev/kvm\x00', 0x2) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='#!!'], 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fallocate(r3, 0x2, 0x5, 0x3) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000000c0)=0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000000)=0x3) 15:23:14 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0xfd1, 0x1ce) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r0, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x7e9) recvmsg(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6c, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xfd2}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) sendmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="a6", 0x1}], 0x1}, 0x0) 15:23:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) [ 2035.794189][ T5746] IPVS: ftp: loaded support on port[0] = 21 15:23:15 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x2) r5 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg(r5, 0x0, 0x0) r6 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) [ 2036.169811][ T5748] IPVS: ftp: loaded support on port[0] = 21 [ 2036.590690][ T5752] IPVS: ftp: loaded support on port[0] = 21 [ 2037.000666][ T5748] chnl_net:caif_netlink_parms(): no params data found [ 2037.068657][ T125] device bridge_slave_1 left promiscuous mode [ 2037.076035][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 2037.124158][ T125] device bridge_slave_0 left promiscuous mode [ 2037.130590][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 2037.185940][ T125] device bridge_slave_1 left promiscuous mode [ 2037.192367][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 2037.226288][ T125] device bridge_slave_0 left promiscuous mode [ 2037.232635][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 2037.266982][ T125] device bridge_slave_1 left promiscuous mode [ 2037.273263][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 2037.305750][ T125] device bridge_slave_0 left promiscuous mode [ 2037.312066][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 2037.366500][ T125] device bridge_slave_1 left promiscuous mode [ 2037.372757][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 2037.426835][ T125] device bridge_slave_0 left promiscuous mode [ 2037.433312][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 2045.250562][ T125] device hsr_slave_0 left promiscuous mode [ 2045.300826][ T125] device hsr_slave_1 left promiscuous mode [ 2045.378854][ T125] team0 (unregistering): Port device team_slave_1 removed [ 2045.392390][ T125] team0 (unregistering): Port device team_slave_0 removed [ 2045.403959][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2045.468682][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2045.565571][ T125] bond0 (unregistering): Released all slaves [ 2045.715091][ T125] device hsr_slave_0 left promiscuous mode [ 2045.754717][ T125] device hsr_slave_1 left promiscuous mode [ 2045.824022][ T125] team0 (unregistering): Port device team_slave_1 removed [ 2045.840483][ T125] team0 (unregistering): Port device team_slave_0 removed [ 2045.853136][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2045.893247][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2045.984796][ T125] bond0 (unregistering): Released all slaves [ 2046.118509][ T125] device hsr_slave_0 left promiscuous mode [ 2046.157904][ T125] device hsr_slave_1 left promiscuous mode [ 2046.221458][ T125] team0 (unregistering): Port device team_slave_1 removed [ 2046.235218][ T125] team0 (unregistering): Port device team_slave_0 removed [ 2046.247097][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2046.305678][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2046.397736][ T125] bond0 (unregistering): Released all slaves [ 2046.542987][ T125] device hsr_slave_0 left promiscuous mode [ 2046.581456][ T125] device hsr_slave_1 left promiscuous mode [ 2046.631330][ T125] team0 (unregistering): Port device team_slave_1 removed [ 2046.645219][ T125] team0 (unregistering): Port device team_slave_0 removed [ 2046.656433][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2046.699821][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2046.791786][ T125] bond0 (unregistering): Released all slaves [ 2046.912688][ T5746] chnl_net:caif_netlink_parms(): no params data found [ 2046.947433][ T5748] bridge0: port 1(bridge_slave_0) entered blocking state [ 2046.957007][ T5748] bridge0: port 1(bridge_slave_0) entered disabled state [ 2046.969035][ T5748] device bridge_slave_0 entered promiscuous mode [ 2046.980070][ T5748] bridge0: port 2(bridge_slave_1) entered blocking state [ 2046.987484][ T5748] bridge0: port 2(bridge_slave_1) entered disabled state [ 2046.995496][ T5748] device bridge_slave_1 entered promiscuous mode [ 2047.077294][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 2047.084440][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 2047.092628][ T5746] device bridge_slave_0 entered promiscuous mode [ 2047.105382][ T5752] chnl_net:caif_netlink_parms(): no params data found [ 2047.119399][ T5748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2047.128688][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 2047.136273][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 2047.144246][ T5746] device bridge_slave_1 entered promiscuous mode [ 2047.161755][ T5748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2047.187296][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2047.209257][ T5748] team0: Port device team_slave_0 added [ 2047.229831][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2047.240164][ T5748] team0: Port device team_slave_1 added [ 2047.255613][ T5752] bridge0: port 1(bridge_slave_0) entered blocking state [ 2047.265254][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state [ 2047.273085][ T5752] device bridge_slave_0 entered promiscuous mode [ 2047.281334][ T5752] bridge0: port 2(bridge_slave_1) entered blocking state [ 2047.288812][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state [ 2047.296378][ T5752] device bridge_slave_1 entered promiscuous mode [ 2047.309891][ T5746] team0: Port device team_slave_0 added [ 2047.380838][ T5748] device hsr_slave_0 entered promiscuous mode [ 2047.438844][ T5748] device hsr_slave_1 entered promiscuous mode [ 2047.480155][ T5746] team0: Port device team_slave_1 added [ 2047.496222][ T5752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2047.507096][ T5752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2047.547380][ T5748] bridge0: port 2(bridge_slave_1) entered blocking state [ 2047.554568][ T5748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2047.561965][ T5748] bridge0: port 1(bridge_slave_0) entered blocking state [ 2047.569126][ T5748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2047.580201][ T5752] team0: Port device team_slave_0 added [ 2047.587451][ T5752] team0: Port device team_slave_1 added [ 2047.633208][ T5746] device hsr_slave_0 entered promiscuous mode [ 2047.670697][ T5746] device hsr_slave_1 entered promiscuous mode [ 2047.710715][ T5746] debugfs: Directory 'hsr0' with parent '/' already present! [ 2047.784138][ T5752] device hsr_slave_0 entered promiscuous mode [ 2047.821913][ T5752] device hsr_slave_1 entered promiscuous mode [ 2047.892216][ T5752] debugfs: Directory 'hsr0' with parent '/' already present! [ 2048.063762][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 2048.070913][ T5746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2048.078322][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 2048.085410][ T5746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2048.094894][ T5004] bridge0: port 1(bridge_slave_0) entered disabled state [ 2048.102743][ T5004] bridge0: port 2(bridge_slave_1) entered disabled state [ 2048.111309][ T5004] bridge0: port 1(bridge_slave_0) entered disabled state [ 2048.119972][ T5004] bridge0: port 2(bridge_slave_1) entered disabled state [ 2048.227393][ T5748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2048.278042][ T5748] 8021q: adding VLAN 0 to HW filter on device team0 [ 2048.300047][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2048.309311][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2048.328953][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2048.351009][ T5752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2048.360262][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2048.370128][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2048.387645][ T5303] bridge0: port 1(bridge_slave_0) entered blocking state [ 2048.394745][ T5303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2048.411043][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2048.423122][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2048.439739][ T5303] bridge0: port 2(bridge_slave_1) entered blocking state [ 2048.446861][ T5303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2048.463283][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2048.495015][ T5752] 8021q: adding VLAN 0 to HW filter on device team0 [ 2048.521347][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2048.531686][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2048.550574][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2048.566359][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2048.576847][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2048.595149][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2048.604679][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2048.620440][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2048.634943][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2048.658658][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 2048.683952][ T5748] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2048.694831][ T5748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2048.708695][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2048.717520][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2048.727104][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2048.738303][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2048.756004][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2048.767195][ T6660] bridge0: port 1(bridge_slave_0) entered blocking state [ 2048.774368][ T6660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2048.783281][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2048.792119][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2048.801071][ T6660] bridge0: port 2(bridge_slave_1) entered blocking state [ 2048.808165][ T6660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2048.817341][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2048.826374][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2048.835831][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2048.845039][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2048.878340][ T5748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2048.891791][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2048.899564][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2048.909267][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2048.919362][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2048.928402][ T6660] bridge0: port 1(bridge_slave_0) entered blocking state [ 2048.935533][ T6660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2048.944379][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2048.953591][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2048.962789][ T6660] bridge0: port 2(bridge_slave_1) entered blocking state [ 2048.969863][ T6660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2048.978064][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2048.987292][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2048.996323][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2049.005461][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2049.014716][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2049.023551][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2049.032389][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2049.045695][ T5752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2049.058147][ T5752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2049.073101][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2049.081080][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2049.091444][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2049.108512][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2049.133659][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2049.143196][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2049.176161][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2049.184472][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2049.201069][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2049.210921][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2049.240507][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2049.260826][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2049.277125][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2049.287139][ T5746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2049.297721][ T5752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2049.388025][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2049.448913][ T5762] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2049.475608][ T5762] CPU: 0 PID: 5762 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 2049.484676][ T5762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2049.494741][ T5762] Call Trace: [ 2049.498037][ T5762] dump_stack+0x172/0x1f0 [ 2049.502380][ T5762] dump_header+0x177/0x1152 [ 2049.506898][ T5762] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2049.512711][ T5762] ? ___ratelimit+0x2c8/0x595 [ 2049.517390][ T5762] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2049.523198][ T5762] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2049.528482][ T5762] ? trace_hardirqs_on+0x67/0x240 [ 2049.533501][ T5762] ? pagefault_out_of_memory+0x11c/0x11c [ 2049.539207][ T5762] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2049.544994][ T5762] ? ___ratelimit+0x60/0x595 [ 2049.549575][ T5762] oom_kill_process.cold+0x10/0x15 [ 2049.554685][ T5762] out_of_memory+0x334/0x1340 [ 2049.559348][ T5762] ? retint_kernel+0x2b/0x2b [ 2049.563926][ T5762] ? oom_killer_disable+0x280/0x280 [ 2049.569110][ T5762] ? mem_cgroup_out_of_memory+0x16a/0x240 [ 2049.574813][ T5762] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2049.580340][ T5762] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 2049.585961][ T5762] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2049.591752][ T5762] ? cgroup_file_notify+0x140/0x1b0 [ 2049.596935][ T5762] memory_max_write+0x262/0x3a0 [ 2049.601771][ T5762] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 2049.608519][ T5762] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 2049.615270][ T5762] cgroup_file_write+0x241/0x790 [ 2049.620216][ T5762] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 2049.626999][ T5762] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2049.632633][ T5762] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2049.638382][ T5762] kernfs_fop_write+0x2b8/0x480 [ 2049.643264][ T5762] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2049.649499][ T5762] __vfs_write+0x8a/0x110 [ 2049.653822][ T5762] ? kernfs_fop_open+0xd80/0xd80 [ 2049.658752][ T5762] vfs_write+0x268/0x5d0 [ 2049.662987][ T5762] ksys_write+0x14f/0x290 [ 2049.667306][ T5762] ? __ia32_sys_read+0xb0/0xb0 [ 2049.672056][ T5762] ? do_syscall_64+0x26/0x760 [ 2049.676823][ T5762] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2049.682879][ T5762] ? do_syscall_64+0x26/0x760 [ 2049.687538][ T5762] __x64_sys_write+0x73/0xb0 [ 2049.692113][ T5762] do_syscall_64+0xfa/0x760 [ 2049.696602][ T5762] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2049.702477][ T5762] RIP: 0033:0x459879 [ 2049.706356][ T5762] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2049.725940][ T5762] RSP: 002b:00007f560f9b2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2049.734333][ T5762] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 2049.742285][ T5762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2049.750236][ T5762] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2049.758192][ T5762] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f560f9b36d4 [ 2049.766146][ T5762] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 2049.777107][ T5762] memory: usage 4864kB, limit 0kB, failcnt 774 [ 2049.787480][ T5762] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2049.805792][ T5762] Memory cgroup stats for /syz3: [ 2049.807778][ T5762] anon 4321280 [ 2049.807778][ T5762] file 0 [ 2049.807778][ T5762] kernel_stack 65536 [ 2049.807778][ T5762] slab 405504 [ 2049.807778][ T5762] sock 0 [ 2049.807778][ T5762] shmem 0 [ 2049.807778][ T5762] file_mapped 0 [ 2049.807778][ T5762] file_dirty 0 [ 2049.807778][ T5762] file_writeback 0 [ 2049.807778][ T5762] anon_thp 4194304 [ 2049.807778][ T5762] inactive_anon 0 [ 2049.807778][ T5762] active_anon 4321280 [ 2049.807778][ T5762] inactive_file 0 [ 2049.807778][ T5762] active_file 0 [ 2049.807778][ T5762] unevictable 0 [ 2049.807778][ T5762] slab_reclaimable 135168 [ 2049.807778][ T5762] slab_unreclaimable 270336 [ 2049.807778][ T5762] pgfault 35541 [ 2049.807778][ T5762] pgmajfault 0 [ 2049.807778][ T5762] workingset_refault 0 [ 2049.807778][ T5762] workingset_activate 0 [ 2049.807778][ T5762] workingset_nodereclaim 0 [ 2049.807778][ T5762] pgrefill 33 [ 2049.807778][ T5762] pgscan 66 [ 2049.807778][ T5762] pgsteal 0 [ 2049.807778][ T5762] pgactivate 0 [ 2050.167329][ T5762] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5761,uid=0 [ 2050.194280][ T5762] Memory cgroup out of memory: Killed process 5762 (syz-executor.3) total-vm:72580kB, anon-rss:4232kB, file-rss:35808kB, shmem-rss:0kB, UID:0 pgtables:147456kB oom_score_adj:1000 [ 2050.240166][ T5773] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2050.242222][ T1065] oom_reaper: reaped process 5762 (syz-executor.3), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB [ 2050.276795][ T5773] CPU: 0 PID: 5773 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 2050.285871][ T5773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2050.295934][ T5773] Call Trace: [ 2050.299234][ T5773] dump_stack+0x172/0x1f0 [ 2050.303592][ T5773] dump_header+0x177/0x1152 [ 2050.308811][ T5773] ? pagefault_out_of_memory+0x11c/0x11c [ 2050.314457][ T5773] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2050.320277][ T5773] ? ___ratelimit+0x60/0x595 [ 2050.324865][ T5773] ? do_raw_spin_unlock+0x57/0x270 [ 2050.329979][ T5773] oom_kill_process.cold+0x10/0x15 [ 2050.335099][ T5773] out_of_memory+0x334/0x1340 [ 2050.339797][ T5773] ? oom_killer_disable+0x280/0x280 [ 2050.345017][ T5773] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2050.350581][ T5773] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 2050.356231][ T5773] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2050.362044][ T5773] ? cgroup_file_notify+0x140/0x1b0 [ 2050.367262][ T5773] memory_max_write+0x262/0x3a0 [ 2050.372117][ T5773] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 2050.378872][ T5773] ? cgroup_file_write+0x86/0x790 [ 2050.383905][ T5773] cgroup_file_write+0x241/0x790 [ 2050.388831][ T5773] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 2050.395581][ T5773] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2050.401206][ T5773] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2050.406827][ T5773] kernfs_fop_write+0x2b8/0x480 [ 2050.411662][ T5773] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2050.417895][ T5773] __vfs_write+0x8a/0x110 [ 2050.422212][ T5773] ? kernfs_fop_open+0xd80/0xd80 [ 2050.427155][ T5773] vfs_write+0x268/0x5d0 [ 2050.431406][ T5773] ksys_write+0x14f/0x290 [ 2050.435726][ T5773] ? __ia32_sys_read+0xb0/0xb0 [ 2050.440479][ T5773] ? do_syscall_64+0x26/0x760 [ 2050.445145][ T5773] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2050.451195][ T5773] ? do_syscall_64+0x26/0x760 [ 2050.455861][ T5773] __x64_sys_write+0x73/0xb0 [ 2050.460518][ T5773] do_syscall_64+0xfa/0x760 [ 2050.465033][ T5773] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2050.471011][ T5773] RIP: 0033:0x459879 [ 2050.474905][ T5773] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2050.494509][ T5773] RSP: 002b:00007f7f0cc82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2050.502982][ T5773] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 2050.510955][ T5773] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2050.518922][ T5773] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2050.526877][ T5773] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f0cc836d4 15:23:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r5, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=""/31, 0x1f}}, 0x10) write$cgroup_int(r7, 0x0, 0x0) [ 2050.534836][ T5773] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 2050.547225][ T5773] memory: usage 2848kB, limit 0kB, failcnt 440 [ 2050.553675][ T5773] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2050.561324][ T5773] Memory cgroup stats for /syz2: [ 2050.563719][ T5773] anon 2207744 [ 2050.563719][ T5773] file 151552 [ 2050.563719][ T5773] kernel_stack 65536 [ 2050.563719][ T5773] slab 458752 [ 2050.563719][ T5773] sock 0 [ 2050.563719][ T5773] shmem 0 [ 2050.563719][ T5773] file_mapped 0 [ 2050.563719][ T5773] file_dirty 0 [ 2050.563719][ T5773] file_writeback 0 [ 2050.563719][ T5773] anon_thp 2097152 [ 2050.563719][ T5773] inactive_anon 0 [ 2050.563719][ T5773] active_anon 2207744 [ 2050.563719][ T5773] inactive_file 135168 [ 2050.563719][ T5773] active_file 0 [ 2050.563719][ T5773] unevictable 0 [ 2050.563719][ T5773] slab_reclaimable 135168 [ 2050.563719][ T5773] slab_unreclaimable 323584 [ 2050.563719][ T5773] pgfault 67287 [ 2050.563719][ T5773] pgmajfault 0 [ 2050.563719][ T5773] workingset_refault 0 [ 2050.563719][ T5773] workingset_activate 0 [ 2050.563719][ T5773] workingset_nodereclaim 0 [ 2050.563719][ T5773] pgrefill 310 [ 2050.563719][ T5773] pgscan 305 [ 2050.563719][ T5773] pgsteal 33 [ 2050.563719][ T5773] pgactivate 264 [ 2050.659934][ T5773] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=5771,uid=0 [ 2050.677877][ T5773] Memory cgroup out of memory: Killed process 5771 (syz-executor.2) total-vm:72580kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 2050.699552][ T5774] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2050.700277][ T1065] oom_reaper: reaped process 5771 (syz-executor.2), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 2050.721367][ T5774] CPU: 0 PID: 5774 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 2050.730419][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2050.740508][ T5774] Call Trace: [ 2050.743849][ T5774] dump_stack+0x172/0x1f0 [ 2050.748223][ T5774] dump_header+0x177/0x1152 [ 2050.752774][ T5774] ? pagefault_out_of_memory+0x11c/0x11c [ 2050.758448][ T5774] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2050.764286][ T5774] ? ___ratelimit+0x60/0x595 [ 2050.768893][ T5774] ? do_raw_spin_unlock+0x57/0x270 [ 2050.774048][ T5774] oom_kill_process.cold+0x10/0x15 [ 2050.779213][ T5774] out_of_memory+0x334/0x1340 [ 2050.783938][ T5774] ? oom_killer_disable+0x280/0x280 15:23:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r4, 0x0, 0x0) 15:23:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 15:23:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408776f6}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x1f004}) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 15:23:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x2) r5 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg(r5, 0x0, 0x0) r6 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) [ 2050.789180][ T5774] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2050.794876][ T5774] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 2050.800568][ T5774] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2050.806686][ T5774] ? cgroup_file_notify+0x140/0x1b0 [ 2050.811953][ T5774] memory_max_write+0x262/0x3a0 [ 2050.816975][ T5774] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 2050.823781][ T5774] ? lock_acquire+0x190/0x410 [ 2050.828493][ T5774] ? kernfs_fop_write+0x227/0x480 [ 2050.833549][ T5774] cgroup_file_write+0x241/0x790 [ 2050.838515][ T5774] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 2050.845300][ T5774] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2050.850964][ T5774] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2050.856615][ T5774] kernfs_fop_write+0x2b8/0x480 [ 2050.861484][ T5774] __vfs_write+0x8a/0x110 [ 2050.865829][ T5774] ? kernfs_fop_open+0xd80/0xd80 [ 2050.870781][ T5774] vfs_write+0x268/0x5d0 [ 2050.875043][ T5774] ksys_write+0x14f/0x290 [ 2050.879381][ T5774] ? __ia32_sys_read+0xb0/0xb0 [ 2050.884156][ T5774] ? do_syscall_64+0x26/0x760 [ 2050.888848][ T5774] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2050.894928][ T5774] ? do_syscall_64+0x26/0x760 [ 2050.899617][ T5774] __x64_sys_write+0x73/0xb0 [ 2050.904219][ T5774] do_syscall_64+0xfa/0x760 [ 2050.908735][ T5774] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2050.914631][ T5774] RIP: 0033:0x459879 [ 2050.918531][ T5774] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2050.938144][ T5774] RSP: 002b:00007fc6f109fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2050.946563][ T5774] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 2050.954555][ T5774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2050.962540][ T5774] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2050.970519][ T5774] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc6f10a06d4 [ 2050.978502][ T5774] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 2051.204145][ T5774] memory: usage 4972kB, limit 0kB, failcnt 1720 [ 2051.224710][ T5774] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2051.260817][ T5774] Memory cgroup stats for /syz1: [ 2051.260973][ T5774] anon 4366336 [ 2051.260973][ T5774] file 0 [ 2051.260973][ T5774] kernel_stack 65536 [ 2051.260973][ T5774] slab 430080 [ 2051.260973][ T5774] sock 0 [ 2051.260973][ T5774] shmem 0 [ 2051.260973][ T5774] file_mapped 0 [ 2051.260973][ T5774] file_dirty 0 [ 2051.260973][ T5774] file_writeback 0 [ 2051.260973][ T5774] anon_thp 4194304 [ 2051.260973][ T5774] inactive_anon 131072 [ 2051.260973][ T5774] active_anon 4366336 [ 2051.260973][ T5774] inactive_file 0 [ 2051.260973][ T5774] active_file 0 [ 2051.260973][ T5774] unevictable 0 [ 2051.260973][ T5774] slab_reclaimable 135168 [ 2051.260973][ T5774] slab_unreclaimable 294912 [ 2051.260973][ T5774] pgfault 90915 [ 2051.260973][ T5774] pgmajfault 0 [ 2051.260973][ T5774] workingset_refault 0 [ 2051.260973][ T5774] workingset_activate 0 [ 2051.260973][ T5774] workingset_nodereclaim 0 [ 2051.260973][ T5774] pgrefill 240 [ 2051.260973][ T5774] pgscan 275 [ 2051.260973][ T5774] pgsteal 35 [ 2051.260973][ T5774] pgactivate 198 [ 2051.359436][ T5774] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5772,uid=0 [ 2051.375382][ T5774] Memory cgroup out of memory: Killed process 5772 (syz-executor.1) total-vm:72580kB, anon-rss:4188kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 2051.398628][ T1065] oom_reaper: reaped process 5772 (syz-executor.1), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB [ 2051.410782][ T5748] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2051.451861][ T5748] CPU: 0 PID: 5748 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 2051.460992][ T5748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2051.471106][ T5748] Call Trace: [ 2051.474431][ T5748] dump_stack+0x172/0x1f0 [ 2051.478786][ T5748] dump_header+0x177/0x1152 [ 2051.483344][ T5748] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2051.489173][ T5748] ? ___ratelimit+0x2c8/0x595 [ 2051.493874][ T5748] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2051.499724][ T5748] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2051.505048][ T5748] ? trace_hardirqs_on+0x67/0x240 [ 2051.510110][ T5748] ? pagefault_out_of_memory+0x11c/0x11c [ 2051.515779][ T5748] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2051.521643][ T5748] ? ___ratelimit+0x60/0x595 [ 2051.526257][ T5748] ? do_raw_spin_unlock+0x57/0x270 [ 2051.531427][ T5748] oom_kill_process.cold+0x10/0x15 [ 2051.536573][ T5748] out_of_memory+0x334/0x1340 [ 2051.541296][ T5748] ? lock_downgrade+0x920/0x920 [ 2051.546193][ T5748] ? oom_killer_disable+0x280/0x280 [ 2051.551439][ T5748] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2051.557060][ T5748] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 2051.562728][ T5748] ? do_raw_spin_unlock+0x57/0x270 [ 2051.567876][ T5748] ? _raw_spin_unlock+0x2d/0x50 [ 2051.572756][ T5748] try_charge+0xf4b/0x1440 [ 2051.577205][ T5748] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2051.582781][ T5748] ? percpu_ref_tryget_live+0x111/0x290 [ 2051.588375][ T5748] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2051.594650][ T5748] ? __kasan_check_read+0x11/0x20 [ 2051.599724][ T5748] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2051.605305][ T5748] mem_cgroup_try_charge+0x136/0x590 [ 2051.610626][ T5748] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2051.616938][ T5748] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2051.622618][ T5748] wp_page_copy+0x41e/0x1590 [ 2051.627419][ T5748] ? find_held_lock+0x35/0x130 [ 2051.632226][ T5748] ? pmd_pfn+0x1d0/0x1d0 [ 2051.636504][ T5748] ? lock_downgrade+0x920/0x920 [ 2051.641401][ T5748] ? swp_swapcount+0x540/0x540 [ 2051.646225][ T5748] ? __kasan_check_read+0x11/0x20 [ 2051.651280][ T5748] ? do_raw_spin_unlock+0x57/0x270 [ 2051.656427][ T5748] do_wp_page+0x499/0x14d0 [ 2051.660872][ T5748] ? finish_mkwrite_fault+0x570/0x570 [ 2051.666283][ T5748] __handle_mm_fault+0x22f1/0x3f20 [ 2051.671457][ T5748] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2051.677056][ T5748] ? __kasan_check_read+0x11/0x20 [ 2051.682134][ T5748] handle_mm_fault+0x1b5/0x6c0 [ 2051.686949][ T5748] __do_page_fault+0x536/0xdd0 [ 2051.691843][ T5748] do_page_fault+0x38/0x590 [ 2051.696398][ T5748] page_fault+0x39/0x40 [ 2051.700572][ T5748] RIP: 0033:0x4034f2 [ 2051.704502][ T5748] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 a9 8d 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 c9 42 05 00 48 [ 2051.724122][ T5748] RSP: 002b:00007ffd681bcda0 EFLAGS: 00010246 [ 2051.730206][ T5748] RAX: 0000000000000000 RBX: 00000000001f2036 RCX: 0000000000413480 [ 2051.738193][ T5748] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffd681bded0 [ 2051.746176][ T5748] RBP: 0000000000000002 R08: 0000000000000001 R09: 000055555559e940 [ 2051.754159][ T5748] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd681bded0 15:23:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 2051.762151][ T5748] R13: 00007ffd681bdec0 R14: 0000000000000000 R15: 00007ffd681bded0 [ 2052.419306][ T5748] memory: usage 476kB, limit 0kB, failcnt 782 [ 2052.432476][ T5748] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2052.439369][ T5748] Memory cgroup stats for /syz3: [ 2052.439474][ T5748] anon 53248 [ 2052.439474][ T5748] file 0 [ 2052.439474][ T5748] kernel_stack 0 [ 2052.439474][ T5748] slab 405504 [ 2052.439474][ T5748] sock 0 [ 2052.439474][ T5748] shmem 0 [ 2052.439474][ T5748] file_mapped 0 [ 2052.439474][ T5748] file_dirty 0 [ 2052.439474][ T5748] file_writeback 0 [ 2052.439474][ T5748] anon_thp 0 [ 2052.439474][ T5748] inactive_anon 0 [ 2052.439474][ T5748] active_anon 53248 [ 2052.439474][ T5748] inactive_file 0 [ 2052.439474][ T5748] active_file 0 [ 2052.439474][ T5748] unevictable 0 [ 2052.439474][ T5748] slab_reclaimable 135168 [ 2052.439474][ T5748] slab_unreclaimable 270336 [ 2052.439474][ T5748] pgfault 35541 [ 2052.439474][ T5748] pgmajfault 0 [ 2052.439474][ T5748] workingset_refault 0 [ 2052.439474][ T5748] workingset_activate 0 [ 2052.439474][ T5748] workingset_nodereclaim 0 [ 2052.439474][ T5748] pgrefill 33 [ 2052.439474][ T5748] pgscan 66 [ 2052.439474][ T5748] pgsteal 0 [ 2052.439474][ T5748] pgactivate 0 [ 2052.439474][ T5748] pgdeactivate 33 [ 2052.538058][ T5748] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5748,uid=0 [ 2052.554052][ T5748] Memory cgroup out of memory: Killed process 5748 (syz-executor.3) total-vm:72448kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:0 [ 2052.577678][ T5746] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2052.578176][ T1065] oom_reaper: reaped process 5748 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 2052.587870][ T5746] CPU: 0 PID: 5746 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 2052.607669][ T5746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2052.607676][ T5746] Call Trace: [ 2052.607698][ T5746] dump_stack+0x172/0x1f0 [ 2052.607719][ T5746] dump_header+0x177/0x1152 [ 2052.629884][ T5746] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2052.635721][ T5746] ? ___ratelimit+0x2c8/0x595 [ 2052.640440][ T5746] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2052.640458][ T5746] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2052.640471][ T5746] ? trace_hardirqs_on+0x67/0x240 [ 2052.640487][ T5746] ? pagefault_out_of_memory+0x11c/0x11c [ 2052.640508][ T5746] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2052.668057][ T5746] ? ___ratelimit+0x60/0x595 [ 2052.672653][ T5746] ? do_raw_spin_unlock+0x57/0x270 [ 2052.677781][ T5746] oom_kill_process.cold+0x10/0x15 [ 2052.682910][ T5746] out_of_memory+0x334/0x1340 [ 2052.687603][ T5746] ? lock_downgrade+0x920/0x920 [ 2052.692465][ T5746] ? oom_killer_disable+0x280/0x280 [ 2052.697684][ T5746] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2052.703243][ T5746] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 2052.708892][ T5746] ? do_raw_spin_unlock+0x57/0x270 [ 2052.714023][ T5746] ? _raw_spin_unlock+0x2d/0x50 [ 2052.718904][ T5746] try_charge+0xf4b/0x1440 [ 2052.723345][ T5746] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2052.728924][ T5746] ? percpu_ref_tryget_live+0x111/0x290 [ 2052.734492][ T5746] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2052.740771][ T5746] ? __kasan_check_read+0x11/0x20 [ 2052.745816][ T5746] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2052.751380][ T5746] mem_cgroup_try_charge+0x136/0x590 [ 2052.756679][ T5746] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2052.762931][ T5746] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2052.768599][ T5746] wp_page_copy+0x41e/0x1590 [ 2052.773203][ T5746] ? find_held_lock+0x35/0x130 [ 2052.777986][ T5746] ? pmd_pfn+0x1d0/0x1d0 [ 2052.782238][ T5746] ? lock_downgrade+0x920/0x920 [ 2052.787105][ T5746] ? swp_swapcount+0x540/0x540 [ 2052.791887][ T5746] ? __kasan_check_read+0x11/0x20 [ 2052.796924][ T5746] ? do_raw_spin_unlock+0x57/0x270 [ 2052.802083][ T5746] do_wp_page+0x499/0x14d0 [ 2052.807087][ T5746] ? finish_mkwrite_fault+0x570/0x570 [ 2052.812500][ T5746] __handle_mm_fault+0x22f1/0x3f20 [ 2052.817639][ T5746] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2052.823206][ T5746] ? __kasan_check_read+0x11/0x20 [ 2052.828266][ T5746] handle_mm_fault+0x1b5/0x6c0 [ 2052.833055][ T5746] __do_page_fault+0x536/0xdd0 [ 2052.837848][ T5746] do_page_fault+0x38/0x590 [ 2052.842372][ T5746] page_fault+0x39/0x40 [ 2052.846537][ T5746] RIP: 0033:0x430956 [ 2052.850446][ T5746] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 46 64 00 85 c0 0f 84 [ 2052.870066][ T5746] RSP: 002b:00007ffd1c3bb190 EFLAGS: 00010206 [ 2052.876142][ T5746] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 2052.884129][ T5746] RDX: 0000555556c5a930 RSI: 0000555556c62970 RDI: 0000000000000003 [ 2052.892114][ T5746] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000555556c59940 [ 2052.900101][ T5746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 2052.908081][ T5746] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 2052.971632][ T5746] memory: usage 472kB, limit 0kB, failcnt 452 [ 2052.978156][ T5746] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2052.992876][ T5746] Memory cgroup stats for /syz2: [ 2052.994234][ T5746] anon 102400 [ 2052.994234][ T5746] file 151552 [ 2052.994234][ T5746] kernel_stack 65536 [ 2052.994234][ T5746] slab 458752 [ 2052.994234][ T5746] sock 0 [ 2052.994234][ T5746] shmem 0 [ 2052.994234][ T5746] file_mapped 0 [ 2052.994234][ T5746] file_dirty 0 [ 2052.994234][ T5746] file_writeback 0 [ 2052.994234][ T5746] anon_thp 0 [ 2052.994234][ T5746] inactive_anon 0 [ 2052.994234][ T5746] active_anon 102400 [ 2052.994234][ T5746] inactive_file 135168 [ 2052.994234][ T5746] active_file 0 [ 2052.994234][ T5746] unevictable 0 [ 2052.994234][ T5746] slab_reclaimable 135168 [ 2052.994234][ T5746] slab_unreclaimable 323584 [ 2052.994234][ T5746] pgfault 67287 [ 2052.994234][ T5746] pgmajfault 0 [ 2052.994234][ T5746] workingset_refault 0 [ 2052.994234][ T5746] workingset_activate 0 15:23:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 2052.994234][ T5746] workingset_nodereclaim 0 [ 2052.994234][ T5746] pgrefill 310 [ 2052.994234][ T5746] pgscan 305 [ 2052.994234][ T5746] pgsteal 33 [ 2052.994234][ T5746] pgactivate 264 [ 2053.254605][ T5746] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=5746,uid=0 [ 2053.313990][ T5746] Memory cgroup out of memory: Killed process 5746 (syz-executor.2) total-vm:72448kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:0 [ 2053.354939][ T1065] oom_reaper: reaped process 5746 (syz-executor.2), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 2053.366113][ T5752] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2053.387719][ T5752] CPU: 1 PID: 5752 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 2053.396789][ T5752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2053.406848][ T5752] Call Trace: [ 2053.410151][ T5752] dump_stack+0x172/0x1f0 [ 2053.414490][ T5752] dump_header+0x177/0x1152 [ 2053.418995][ T5752] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2053.424804][ T5752] ? ___ratelimit+0x2c8/0x595 [ 2053.429485][ T5752] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2053.435296][ T5752] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2053.440593][ T5752] ? trace_hardirqs_on+0x67/0x240 [ 2053.445693][ T5752] ? pagefault_out_of_memory+0x11c/0x11c [ 2053.451318][ T5752] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2053.457115][ T5752] ? ___ratelimit+0x60/0x595 [ 2053.461688][ T5752] ? do_raw_spin_unlock+0x57/0x270 [ 2053.466783][ T5752] oom_kill_process.cold+0x10/0x15 [ 2053.471887][ T5752] out_of_memory+0x334/0x1340 [ 2053.476549][ T5752] ? lock_downgrade+0x920/0x920 [ 2053.481408][ T5752] ? oom_killer_disable+0x280/0x280 [ 2053.486599][ T5752] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2053.492127][ T5752] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 2053.497742][ T5752] ? do_raw_spin_unlock+0x57/0x270 [ 2053.502947][ T5752] ? _raw_spin_unlock+0x2d/0x50 [ 2053.507795][ T5752] try_charge+0xf4b/0x1440 [ 2053.512203][ T5752] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2053.517740][ T5752] ? percpu_ref_tryget_live+0x111/0x290 [ 2053.523274][ T5752] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2053.529551][ T5752] ? __kasan_check_read+0x11/0x20 [ 2053.534601][ T5752] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2053.540129][ T5752] mem_cgroup_try_charge+0x136/0x590 [ 2053.545396][ T5752] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2053.551621][ T5752] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2053.557250][ T5752] wp_page_copy+0x41e/0x1590 [ 2053.561825][ T5752] ? find_held_lock+0x35/0x130 [ 2053.566575][ T5752] ? pmd_pfn+0x1d0/0x1d0 [ 2053.570811][ T5752] ? lock_downgrade+0x920/0x920 [ 2053.575713][ T5752] ? swp_swapcount+0x540/0x540 [ 2053.580465][ T5752] ? __kasan_check_read+0x11/0x20 [ 2053.585511][ T5752] ? do_raw_spin_unlock+0x57/0x270 [ 2053.590606][ T5752] do_wp_page+0x499/0x14d0 [ 2053.595007][ T5752] ? finish_mkwrite_fault+0x570/0x570 [ 2053.600387][ T5752] __handle_mm_fault+0x22f1/0x3f20 [ 2053.605509][ T5752] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2053.611042][ T5752] ? __kasan_check_read+0x11/0x20 [ 2053.616051][ T5752] handle_mm_fault+0x1b5/0x6c0 [ 2053.620800][ T5752] __do_page_fault+0x536/0xdd0 [ 2053.625549][ T5752] do_page_fault+0x38/0x590 [ 2053.630051][ T5752] page_fault+0x39/0x40 [ 2053.634197][ T5752] RIP: 0033:0x430956 [ 2053.638089][ T5752] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 46 64 00 85 c0 0f 84 [ 2053.657859][ T5752] RSP: 002b:00007ffc21b14900 EFLAGS: 00010206 [ 2053.663911][ T5752] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 2053.671881][ T5752] RDX: 000055555752d930 RSI: 0000555557535970 RDI: 0000000000000003 [ 2053.679865][ T5752] RBP: 0000000000008041 R08: 0000000000000001 R09: 000055555752c940 [ 2053.687827][ T5752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 2053.695783][ T5752] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 2053.711404][ T5752] memory: usage 568kB, limit 0kB, failcnt 1732 [ 2053.717616][ T5752] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2053.735101][ T5752] Memory cgroup stats for /syz1: [ 2053.735247][ T5752] anon 106496 [ 2053.735247][ T5752] file 0 [ 2053.735247][ T5752] kernel_stack 0 [ 2053.735247][ T5752] slab 430080 [ 2053.735247][ T5752] sock 0 [ 2053.735247][ T5752] shmem 0 [ 2053.735247][ T5752] file_mapped 0 [ 2053.735247][ T5752] file_dirty 0 [ 2053.735247][ T5752] file_writeback 0 [ 2053.735247][ T5752] anon_thp 0 [ 2053.735247][ T5752] inactive_anon 131072 [ 2053.735247][ T5752] active_anon 106496 [ 2053.735247][ T5752] inactive_file 0 [ 2053.735247][ T5752] active_file 0 [ 2053.735247][ T5752] unevictable 0 [ 2053.735247][ T5752] slab_reclaimable 135168 [ 2053.735247][ T5752] slab_unreclaimable 294912 [ 2053.735247][ T5752] pgfault 90915 [ 2053.735247][ T5752] pgmajfault 0 [ 2053.735247][ T5752] workingset_refault 0 [ 2053.735247][ T5752] workingset_activate 0 [ 2053.735247][ T5752] workingset_nodereclaim 0 [ 2053.735247][ T5752] pgrefill 240 [ 2053.735247][ T5752] pgscan 275 [ 2053.735247][ T5752] pgsteal 35 [ 2053.735247][ T5752] pgactivate 198 [ 2053.839676][ T5752] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5752,uid=0 [ 2053.864048][ T5752] Memory cgroup out of memory: Killed process 5752 (syz-executor.1) total-vm:72448kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:0 [ 2053.899580][ T5786] IPVS: ftp: loaded support on port[0] = 21 15:23:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r5, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=""/31, 0x1f}}, 0x10) write$cgroup_int(r7, 0x0, 0x0) [ 2053.906349][ T5785] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2054.009117][ T5785] CPU: 0 PID: 5785 Comm: syz-executor.4 Not tainted 5.3.0-rc6-next-20190830 #75 [ 2054.018201][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2054.028261][ T5785] Call Trace: [ 2054.031557][ T5785] dump_stack+0x172/0x1f0 [ 2054.035895][ T5785] dump_header+0x177/0x1152 [ 2054.040415][ T5785] ? pagefault_out_of_memory+0x11c/0x11c [ 2054.046058][ T5785] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2054.051861][ T5785] ? ___ratelimit+0x60/0x595 [ 2054.056452][ T5785] ? do_raw_spin_unlock+0x57/0x270 [ 2054.061567][ T5785] oom_kill_process.cold+0x10/0x15 [ 2054.066681][ T5785] out_of_memory+0x334/0x1340 [ 2054.071372][ T5785] ? retint_kernel+0x2b/0x2b [ 2054.075969][ T5785] ? oom_killer_disable+0x280/0x280 [ 2054.081187][ T5785] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2054.086737][ T5785] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 2054.092562][ T5785] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2054.098370][ T5785] ? cgroup_file_notify+0x140/0x1b0 [ 2054.103567][ T5785] memory_max_write+0x262/0x3a0 [ 2054.108432][ T5785] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 2054.115198][ T5785] ? lock_acquire+0x190/0x410 [ 2054.119869][ T5785] ? kernfs_fop_write+0x227/0x480 [ 2054.124895][ T5785] cgroup_file_write+0x241/0x790 [ 2054.129831][ T5785] ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0 [ 2054.136595][ T5785] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2054.142234][ T5785] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2054.147878][ T5785] kernfs_fop_write+0x2b8/0x480 [ 2054.152747][ T5785] __vfs_write+0x8a/0x110 [ 2054.157084][ T5785] ? kernfs_fop_open+0xd80/0xd80 [ 2054.162022][ T5785] vfs_write+0x268/0x5d0 [ 2054.166266][ T5785] ksys_write+0x14f/0x290 [ 2054.170592][ T5785] ? __ia32_sys_read+0xb0/0xb0 [ 2054.175355][ T5785] ? do_syscall_64+0x26/0x760 [ 2054.180038][ T5785] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2054.186112][ T5785] ? do_syscall_64+0x26/0x760 [ 2054.190793][ T5785] __x64_sys_write+0x73/0xb0 [ 2054.195389][ T5785] do_syscall_64+0xfa/0x760 [ 2054.199893][ T5785] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2054.205777][ T5785] RIP: 0033:0x459879 15:23:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r5, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=""/31, 0x1f}}, 0x10) write$cgroup_int(r7, 0x0, 0x0) [ 2054.209666][ T5785] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2054.229274][ T5785] RSP: 002b:00007f36f2b86c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2054.237686][ T5785] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 2054.245662][ T5785] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2054.253640][ T5785] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2054.261620][ T5785] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f36f2b876d4 [ 2054.269605][ T5785] R13: 00000000004c9a03 R14: 00000000004e10c8 R15: 00000000ffffffff [ 2054.281914][ T5785] memory: usage 14916kB, limit 0kB, failcnt 968 [ 2054.288469][ T5785] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2054.295844][ T5785] Memory cgroup stats for /syz4: [ 2054.295946][ T5785] anon 10989568 [ 2054.295946][ T5785] file 57344 [ 2054.295946][ T5785] kernel_stack 65536 [ 2054.295946][ T5785] slab 3493888 [ 2054.295946][ T5785] sock 12288 [ 2054.295946][ T5785] shmem 81920 [ 2054.295946][ T5785] file_mapped 0 [ 2054.295946][ T5785] file_dirty 0 [ 2054.295946][ T5785] file_writeback 0 [ 2054.295946][ T5785] anon_thp 10485760 [ 2054.295946][ T5785] inactive_anon 0 [ 2054.295946][ T5785] active_anon 10969088 [ 2054.295946][ T5785] inactive_file 0 [ 2054.295946][ T5785] active_file 0 [ 2054.295946][ T5785] unevictable 0 [ 2054.295946][ T5785] slab_reclaimable 811008 [ 2054.295946][ T5785] slab_unreclaimable 2682880 [ 2054.295946][ T5785] pgfault 54153 [ 2054.295946][ T5785] pgmajfault 0 [ 2054.295946][ T5785] workingset_refault 0 [ 2054.295946][ T5785] workingset_activate 0 [ 2054.295946][ T5785] workingset_nodereclaim 0 [ 2054.295946][ T5785] pgrefill 85 [ 2054.295946][ T5785] pgscan 70 [ 2054.295946][ T5785] pgsteal 33 [ 2054.295946][ T5785] pgactivate 33 [ 2054.392322][ T5785] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=5784,uid=0 15:23:33 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 2054.422627][ T5788] IPVS: ftp: loaded support on port[0] = 21 [ 2054.429100][ T5785] Memory cgroup out of memory: Killed process 5785 (syz-executor.4) total-vm:72576kB, anon-rss:4248kB, file-rss:35864kB, shmem-rss:0kB, UID:0 pgtables:147456kB oom_score_adj:1000 [ 2054.454900][ T1065] oom_reaper: reaped process 5785 (syz-executor.4), now anon-rss:0kB, file-rss:34904kB, shmem-rss:0kB [ 2054.522631][ T5346] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2054.557566][ T5346] CPU: 0 PID: 5346 Comm: syz-executor.4 Not tainted 5.3.0-rc6-next-20190830 #75 [ 2054.566640][ T5346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2054.576703][ T5346] Call Trace: [ 2054.580004][ T5346] dump_stack+0x172/0x1f0 [ 2054.584350][ T5346] dump_header+0x177/0x1152 [ 2054.588866][ T5346] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2054.594680][ T5346] ? ___ratelimit+0x2c8/0x595 [ 2054.599368][ T5346] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2054.605204][ T5346] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2054.610499][ T5346] ? trace_hardirqs_on+0x67/0x240 [ 2054.615533][ T5346] ? pagefault_out_of_memory+0x11c/0x11c [ 2054.621176][ T5346] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2054.626998][ T5346] ? ___ratelimit+0x60/0x595 [ 2054.631591][ T5346] ? do_raw_spin_unlock+0x57/0x270 [ 2054.636726][ T5346] oom_kill_process.cold+0x10/0x15 [ 2054.641973][ T5346] out_of_memory+0x334/0x1340 [ 2054.646680][ T5346] ? lock_downgrade+0x920/0x920 [ 2054.651541][ T5346] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2054.657357][ T5346] ? oom_killer_disable+0x280/0x280 [ 2054.662575][ T5346] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2054.668140][ T5346] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 2054.673787][ T5346] ? do_raw_spin_unlock+0x57/0x270 [ 2054.678905][ T5346] ? _raw_spin_unlock+0x2d/0x50 [ 2054.683762][ T5346] try_charge+0xf4b/0x1440 [ 2054.688190][ T5346] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2054.693736][ T5346] ? find_held_lock+0x35/0x130 [ 2054.698502][ T5346] ? get_mem_cgroup_from_mm+0x139/0x320 [ 2054.704056][ T5346] ? lock_downgrade+0x920/0x920 [ 2054.708909][ T5346] ? percpu_ref_tryget_live+0x111/0x290 [ 2054.714461][ T5346] __memcg_kmem_charge_memcg+0x71/0xf0 [ 2054.719930][ T5346] ? memcg_kmem_put_cache+0x50/0x50 [ 2054.725140][ T5346] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2054.730709][ T5346] __memcg_kmem_charge+0x13a/0x3a0 [ 2054.735823][ T5346] __alloc_pages_nodemask+0x4f7/0x900 [ 2054.741197][ T5346] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2054.746747][ T5346] ? __alloc_pages_slowpath+0x2540/0x2540 [ 2054.752472][ T5346] ? percpu_ref_put_many+0xb6/0x190 [ 2054.757690][ T5346] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2054.762977][ T5346] ? trace_hardirqs_on+0x67/0x240 [ 2054.768003][ T5346] ? __kasan_check_read+0x11/0x20 [ 2054.773034][ T5346] copy_process+0x3f8/0x6830 [ 2054.777623][ T5346] ? __kasan_check_read+0x11/0x20 [ 2054.782651][ T5346] ? __kasan_check_read+0x11/0x20 [ 2054.787682][ T5346] ? __lock_acquire+0x16f2/0x4a00 [ 2054.792714][ T5346] ? __cleanup_sighand+0x60/0x60 [ 2054.797647][ T5346] ? __might_fault+0x12b/0x1e0 [ 2054.802535][ T5346] ? __might_fault+0x12b/0x1e0 [ 2054.807319][ T5346] _do_fork+0x146/0xfa0 [ 2054.811611][ T5346] ? copy_init_mm+0x20/0x20 [ 2054.816130][ T5346] ? __kasan_check_read+0x11/0x20 [ 2054.821161][ T5346] ? _copy_to_user+0x118/0x160 [ 2054.825941][ T5346] __x64_sys_clone+0x1ab/0x270 [ 2054.830716][ T5346] ? __ia32_sys_vfork+0xd0/0xd0 [ 2054.835577][ T5346] ? do_syscall_64+0x26/0x760 [ 2054.840354][ T5346] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2054.845644][ T5346] ? trace_hardirqs_on+0x67/0x240 [ 2054.850674][ T5346] do_syscall_64+0xfa/0x760 [ 2054.855183][ T5346] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2054.861074][ T5346] RIP: 0033:0x457e4a [ 2054.864973][ T5346] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2054.884578][ T5346] RSP: 002b:00007ffeb67a3c90 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2054.892993][ T5346] RAX: ffffffffffffffda RBX: 00007ffeb67a3c90 RCX: 0000000000457e4a [ 2054.900967][ T5346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2054.908939][ T5346] RBP: 00007ffeb67a3cd0 R08: 0000000000000001 R09: 0000555555f67940 [ 2054.916909][ T5346] R10: 0000555555f67c10 R11: 0000000000000246 R12: 0000000000000001 [ 2054.924879][ T5346] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffeb67a3d20 [ 2054.936414][ T5346] memory: usage 10520kB, limit 0kB, failcnt 976 [ 2054.942880][ T5346] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2054.949721][ T5346] Memory cgroup stats for /syz4: [ 2054.949828][ T5346] anon 6725632 [ 2054.949828][ T5346] file 57344 [ 2054.949828][ T5346] kernel_stack 65536 [ 2054.949828][ T5346] slab 3493888 [ 2054.949828][ T5346] sock 12288 [ 2054.949828][ T5346] shmem 81920 [ 2054.949828][ T5346] file_mapped 0 [ 2054.949828][ T5346] file_dirty 0 [ 2054.949828][ T5346] file_writeback 0 [ 2054.949828][ T5346] anon_thp 6291456 [ 2054.949828][ T5346] inactive_anon 0 [ 2054.949828][ T5346] active_anon 6705152 [ 2054.949828][ T5346] inactive_file 0 [ 2054.949828][ T5346] active_file 0 [ 2054.949828][ T5346] unevictable 0 [ 2054.949828][ T5346] slab_reclaimable 811008 [ 2054.949828][ T5346] slab_unreclaimable 2682880 [ 2054.949828][ T5346] pgfault 54186 [ 2054.949828][ T5346] pgmajfault 0 [ 2054.949828][ T5346] workingset_refault 0 [ 2054.949828][ T5346] workingset_activate 0 [ 2054.949828][ T5346] workingset_nodereclaim 0 [ 2054.949828][ T5346] pgrefill 85 [ 2054.949828][ T5346] pgscan 70 [ 2054.949828][ T5346] pgsteal 33 [ 2054.949828][ T5346] pgactivate 33 [ 2055.045877][ T5346] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=5622,uid=0 [ 2055.061765][ T5346] Memory cgroup out of memory: Killed process 5622 (syz-executor.4) total-vm:72840kB, anon-rss:4264kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000 [ 2055.084279][ T1065] oom_reaper: reaped process 5622 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2055.098313][ T5346] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2055.110230][ T5346] CPU: 0 PID: 5346 Comm: syz-executor.4 Not tainted 5.3.0-rc6-next-20190830 #75 [ 2055.119249][ T5346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2055.129304][ T5346] Call Trace: [ 2055.132603][ T5346] dump_stack+0x172/0x1f0 [ 2055.136939][ T5346] dump_header+0x177/0x1152 [ 2055.141447][ T5346] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2055.147247][ T5346] ? ___ratelimit+0x2c8/0x595 [ 2055.151918][ T5346] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2055.157725][ T5346] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2055.163011][ T5346] ? trace_hardirqs_on+0x67/0x240 [ 2055.168038][ T5346] ? pagefault_out_of_memory+0x11c/0x11c [ 2055.173662][ T5346] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2055.179453][ T5346] ? ___ratelimit+0x60/0x595 [ 2055.184025][ T5346] ? do_raw_spin_unlock+0x57/0x270 [ 2055.189136][ T5346] oom_kill_process.cold+0x10/0x15 [ 2055.194251][ T5346] out_of_memory+0x334/0x1340 [ 2055.198910][ T5346] ? lock_downgrade+0x920/0x920 [ 2055.203745][ T5346] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2055.209532][ T5346] ? oom_killer_disable+0x280/0x280 [ 2055.214735][ T5346] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2055.220271][ T5346] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 2055.225895][ T5346] ? do_raw_spin_unlock+0x57/0x270 [ 2055.231013][ T5346] ? _raw_spin_unlock+0x2d/0x50 [ 2055.235875][ T5346] try_charge+0xf4b/0x1440 [ 2055.240292][ T5346] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2055.245822][ T5346] ? find_held_lock+0x35/0x130 [ 2055.250570][ T5346] ? get_mem_cgroup_from_mm+0x139/0x320 [ 2055.256107][ T5346] ? lock_downgrade+0x920/0x920 [ 2055.260938][ T5346] ? percpu_ref_tryget_live+0x111/0x290 [ 2055.266483][ T5346] __memcg_kmem_charge_memcg+0x71/0xf0 [ 2055.271925][ T5346] ? memcg_kmem_put_cache+0x50/0x50 [ 2055.277124][ T5346] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2055.282655][ T5346] __memcg_kmem_charge+0x13a/0x3a0 [ 2055.287750][ T5346] __alloc_pages_nodemask+0x4f7/0x900 [ 2055.293102][ T5346] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2055.298631][ T5346] ? __alloc_pages_slowpath+0x2540/0x2540 [ 2055.304329][ T5346] ? percpu_ref_put_many+0xb6/0x190 [ 2055.309512][ T5346] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2055.314779][ T5346] ? trace_hardirqs_on+0x67/0x240 [ 2055.319793][ T5346] ? __kasan_check_read+0x11/0x20 [ 2055.324803][ T5346] copy_process+0x3f8/0x6830 [ 2055.329372][ T5346] ? __kasan_check_read+0x11/0x20 [ 2055.334378][ T5346] ? __kasan_check_read+0x11/0x20 [ 2055.339384][ T5346] ? __lock_acquire+0x16f2/0x4a00 [ 2055.344395][ T5346] ? __cleanup_sighand+0x60/0x60 [ 2055.349313][ T5346] ? __might_fault+0x12b/0x1e0 [ 2055.354060][ T5346] ? __might_fault+0x12b/0x1e0 [ 2055.358814][ T5346] _do_fork+0x146/0xfa0 [ 2055.362966][ T5346] ? copy_init_mm+0x20/0x20 [ 2055.367456][ T5346] ? __kasan_check_read+0x11/0x20 [ 2055.372459][ T5346] ? _copy_to_user+0x118/0x160 [ 2055.377211][ T5346] __x64_sys_clone+0x1ab/0x270 [ 2055.381956][ T5346] ? __ia32_sys_vfork+0xd0/0xd0 [ 2055.386793][ T5346] ? do_syscall_64+0x26/0x760 [ 2055.391449][ T5346] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2055.396715][ T5346] ? trace_hardirqs_on+0x67/0x240 [ 2055.401724][ T5346] do_syscall_64+0xfa/0x760 [ 2055.406215][ T5346] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2055.412085][ T5346] RIP: 0033:0x457e4a [ 2055.415962][ T5346] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2055.435545][ T5346] RSP: 002b:00007ffeb67a3c90 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2055.443934][ T5346] RAX: ffffffffffffffda RBX: 00007ffeb67a3c90 RCX: 0000000000457e4a [ 2055.451888][ T5346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2055.459842][ T5346] RBP: 00007ffeb67a3cd0 R08: 0000000000000001 R09: 0000555555f67940 [ 2055.467795][ T5346] R10: 0000555555f67c10 R11: 0000000000000246 R12: 0000000000000001 [ 2055.475747][ T5346] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffeb67a3d20 [ 2055.532104][ T5346] memory: usage 6148kB, limit 0kB, failcnt 982 [ 2055.532116][ T5346] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2055.551262][ T5346] Memory cgroup stats for /syz4: [ 2055.551365][ T5346] anon 2420736 [ 2055.551365][ T5346] file 57344 [ 2055.551365][ T5346] kernel_stack 65536 [ 2055.551365][ T5346] slab 3493888 [ 2055.551365][ T5346] sock 12288 [ 2055.551365][ T5346] shmem 81920 [ 2055.551365][ T5346] file_mapped 0 [ 2055.551365][ T5346] file_dirty 0 [ 2055.551365][ T5346] file_writeback 0 [ 2055.551365][ T5346] anon_thp 2097152 [ 2055.551365][ T5346] inactive_anon 0 [ 2055.551365][ T5346] active_anon 2400256 [ 2055.551365][ T5346] inactive_file 0 [ 2055.551365][ T5346] active_file 0 [ 2055.551365][ T5346] unevictable 0 [ 2055.551365][ T5346] slab_reclaimable 811008 [ 2055.551365][ T5346] slab_unreclaimable 2682880 [ 2055.551365][ T5346] pgfault 54186 [ 2055.551365][ T5346] pgmajfault 0 [ 2055.551365][ T5346] workingset_refault 0 [ 2055.551365][ T5346] workingset_activate 0 [ 2055.551365][ T5346] workingset_nodereclaim 0 [ 2055.551365][ T5346] pgrefill 85 [ 2055.551365][ T5346] pgscan 70 [ 2055.551365][ T5346] pgsteal 33 [ 2055.551365][ T5346] pgactivate 33 [ 2055.565754][ T5346] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=5740,uid=0 [ 2055.663202][ T5346] Memory cgroup out of memory: Killed process 5740 (syz-executor.4) total-vm:72576kB, anon-rss:2200kB, file-rss:35804kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 2055.682613][ T1065] [ 2055.684950][ T1065] ============================================ [ 2055.691087][ T1065] WARNING: possible recursive locking detected [ 2055.697228][ T1065] 5.3.0-rc6-next-20190830 #75 Not tainted [ 2055.702938][ T1065] -------------------------------------------- [ 2055.709088][ T1065] oom_reaper/1065 is trying to acquire lock: [ 2055.715057][ T1065] ffffffff8904ff60 (mmu_notifier_invalidate_range_start){+.+.}, at: __mmu_notifier_invalidate_range_end+0x0/0x360 [ 2055.727066][ T1065] [ 2055.727066][ T1065] but task is already holding lock: [ 2055.734412][ T1065] ffffffff8904ff60 (mmu_notifier_invalidate_range_start){+.+.}, at: __oom_reap_task_mm+0x196/0x490 [ 2055.745075][ T1065] [ 2055.745075][ T1065] other info that might help us debug this: [ 2055.753125][ T1065] Possible unsafe locking scenario: [ 2055.753125][ T1065] [ 2055.760551][ T1065] CPU0 [ 2055.763810][ T1065] ---- [ 2055.767072][ T1065] lock(mmu_notifier_invalidate_range_start); [ 2055.773199][ T1065] lock(mmu_notifier_invalidate_range_start); [ 2055.779326][ T1065] [ 2055.779326][ T1065] *** DEADLOCK *** [ 2055.779326][ T1065] [ 2055.787445][ T1065] May be due to missing lock nesting notation [ 2055.787445][ T1065] [ 2055.795756][ T1065] 2 locks held by oom_reaper/1065: [ 2055.800845][ T1065] #0: ffff88806f9b3290 (&mm->mmap_sem#2){++++}, at: oom_reaper+0x3a7/0x1320 [ 2055.809615][ T1065] #1: ffffffff8904ff60 (mmu_notifier_invalidate_range_start){+.+.}, at: __oom_reap_task_mm+0x196/0x490 [ 2055.820713][ T1065] [ 2055.820713][ T1065] stack backtrace: [ 2055.826590][ T1065] CPU: 1 PID: 1065 Comm: oom_reaper Not tainted 5.3.0-rc6-next-20190830 #75 [ 2055.835243][ T1065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2055.845277][ T1065] Call Trace: [ 2055.848551][ T1065] dump_stack+0x172/0x1f0 [ 2055.852880][ T1065] __lock_acquire.cold+0x15d/0x385 [ 2055.857972][ T1065] ? mark_held_locks+0xf0/0xf0 [ 2055.862728][ T1065] ? unmap_page_range+0x1df4/0x2380 [ 2055.867907][ T1065] lock_acquire+0x190/0x410 [ 2055.872391][ T1065] ? __mmu_notifier_invalidate_range_start+0x210/0x210 [ 2055.879220][ T1065] __mmu_notifier_invalidate_range_end+0x3c/0x360 [ 2055.885632][ T1065] ? __mmu_notifier_invalidate_range_start+0x210/0x210 [ 2055.892459][ T1065] ? __mmu_notifier_invalidate_range_start+0x1a5/0x210 [ 2055.899377][ T1065] __oom_reap_task_mm+0x3fa/0x490 [ 2055.904398][ T1065] ? process_shares_mm+0x130/0x130 [ 2055.909490][ T1065] ? oom_reaper+0x3a7/0x1320 [ 2055.914061][ T1065] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2055.920294][ T1065] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 2055.926267][ T1065] ? __kasan_check_read+0x11/0x20 [ 2055.931288][ T1065] ? do_raw_spin_unlock+0x57/0x270 [ 2055.936385][ T1065] oom_reaper+0x2b2/0x1320 [ 2055.940791][ T1065] ? __oom_reap_task_mm+0x490/0x490 [ 2055.945982][ T1065] ? trace_hardirqs_on+0x67/0x240 [ 2055.950993][ T1065] ? finish_wait+0x260/0x260 [ 2055.955568][ T1065] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2055.961786][ T1065] ? __kthread_parkme+0x108/0x1c0 [ 2055.966787][ T1065] ? __kasan_check_read+0x11/0x20 [ 2055.971791][ T1065] kthread+0x361/0x430 [ 2055.975850][ T1065] ? __oom_reap_task_mm+0x490/0x490 15:23:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r4, 0x0, 0x0) [ 2055.981026][ T1065] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 2055.987266][ T1065] ret_from_fork+0x24/0x30 [ 2055.994855][ T5346] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2055.995519][ T5788] kobject: 'lo' (000000005be7e64f): fill_kobj_path: path = '/devices/virtual/net/lo' [ 2056.006777][ T5346] CPU: 1 PID: 5346 Comm: syz-executor.4 Not tainted 5.3.0-rc6-next-20190830 #75 [ 2056.006784][ T5346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2056.006788][ T5346] Call Trace: [ 2056.006805][ T5346] dump_stack+0x172/0x1f0 [ 2056.006821][ T5346] dump_header+0x177/0x1152 [ 2056.006832][ T5346] ? ___ratelimit+0xf8/0x595 [ 2056.006846][ T5346] ? trace_hardirqs_on+0x67/0x240 [ 2056.006858][ T5346] ? pagefault_out_of_memory+0x11c/0x11c [ 2056.006872][ T5346] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2056.006882][ T5346] ? ___ratelimit+0x60/0x595 [ 2056.006892][ T5346] ? do_raw_spin_unlock+0x57/0x270 [ 2056.006906][ T5346] oom_kill_process.cold+0x10/0x15 [ 2056.006919][ T5346] out_of_memory+0x334/0x1340 [ 2056.006932][ T5346] ? lock_downgrade+0x920/0x920 [ 2056.006946][ T5346] ? oom_killer_disable+0x280/0x280 [ 2056.006964][ T5346] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2056.006976][ T5346] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 2056.006988][ T5346] ? do_raw_spin_unlock+0x57/0x270 [ 2056.007007][ T5346] ? _raw_spin_unlock+0x2d/0x50 [ 2056.023430][ T5788] kobject: 'queues' (000000006c33640e): kobject_add_internal: parent: 'lo', set: '' [ 2056.025527][ T5346] try_charge+0xf4b/0x1440 [ 2056.035936][ T5788] kobject: 'queues' (000000006c33640e): kobject_uevent_env [ 2056.038831][ T5346] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2056.043625][ T5788] kobject: 'queues' (000000006c33640e): kobject_uevent_env: filter function caused the event to drop! [ 2056.047686][ T5346] ? find_held_lock+0x35/0x130 [ 2056.052619][ T5788] kobject: 'rx-0' (000000003b741618): kobject_add_internal: parent: 'queues', set: 'queues' [ 2056.057260][ T5346] ? get_mem_cgroup_from_mm+0x139/0x320 [ 2056.063102][ T5788] kobject: 'rx-0' (000000003b741618): kobject_uevent_env [ 2056.068654][ T5346] ? lock_downgrade+0x920/0x920 [ 2056.073488][ T5788] kobject: 'rx-0' (000000003b741618): fill_kobj_path: path = '/devices/virtual/net/lo/queues/rx-0' [ 2056.078318][ T5346] ? percpu_ref_tryget_live+0x111/0x290 [ 2056.083722][ T5788] kobject: 'tx-0' (00000000a2fdc5ed): kobject_add_internal: parent: 'queues', set: 'queues' [ 2056.088071][ T5346] __memcg_kmem_charge_memcg+0x71/0xf0 [ 2056.093248][ T5788] kobject: 'tx-0' (00000000a2fdc5ed): kobject_uevent_env [ 2056.098081][ T5346] ? memcg_kmem_put_cache+0x50/0x50 [ 2056.103947][ T5788] kobject: 'tx-0' (00000000a2fdc5ed): fill_kobj_path: path = '/devices/virtual/net/lo/queues/tx-0' [ 2056.109220][ T5346] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2056.116312][ T5788] kobject: 'tunl0' (0000000097449749): kobject_add_internal: parent: 'net', set: 'devices' [ 2056.119148][ T5346] __memcg_kmem_charge+0x13a/0x3a0 [ 2056.129854][ T5788] kobject: 'tunl0' (0000000097449749): kobject_uevent_env [ 2056.133399][ T5346] __alloc_pages_nodemask+0x4f7/0x900 [ 2056.133413][ T5346] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2056.133428][ T5346] ? __alloc_pages_slowpath+0x2540/0x2540 [ 2056.140839][ T5788] kobject: 'tunl0' (0000000097449749): fill_kobj_path: path = '/devices/virtual/net/tunl0' [ 2056.146133][ T5346] ? percpu_ref_put_many+0xb6/0x190 [ 2056.157296][ T5788] kobject: 'queues' (00000000aa95a0ef): kobject_add_internal: parent: 'tunl0', set: '' [ 2056.161772][ T5346] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2056.161791][ T5346] ? trace_hardirqs_on+0x67/0x240 [ 2056.172075][ T5788] kobject: 'queues' (00000000aa95a0ef): kobject_uevent_env [ 2056.177358][ T5346] ? __kasan_check_read+0x11/0x20 [ 2056.184657][ T5788] kobject: 'queues' (00000000aa95a0ef): kobject_uevent_env: filter function caused the event to drop! [ 2056.189206][ T5346] copy_process+0x3f8/0x6830 [ 2056.200143][ T5788] kobject: 'rx-0' (0000000091648422): kobject_add_internal: parent: 'queues', set: 'queues' [ 2056.205397][ T5346] ? __kasan_check_read+0x11/0x20 [ 2056.205410][ T5346] ? __kasan_check_read+0x11/0x20 [ 2056.205428][ T5346] ? __lock_acquire+0x16f2/0x4a00 [ 2056.215739][ T5788] kobject: 'rx-0' (0000000091648422): kobject_uevent_env [ 2056.220911][ T5346] ? __cleanup_sighand+0x60/0x60 [ 2056.228173][ T5788] kobject: 'rx-0' (0000000091648422): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/rx-0' [ 2056.233073][ T5346] ? __might_fault+0x12b/0x1e0 [ 2056.233086][ T5346] ? __might_fault+0x12b/0x1e0 [ 2056.233105][ T5346] _do_fork+0x146/0xfa0 [ 2056.244103][ T5788] kobject: 'tx-0' (000000000cb667ec): kobject_add_internal: parent: 'queues', set: 'queues' [ 2056.249284][ T5346] ? copy_init_mm+0x20/0x20 [ 2056.259884][ T5788] kobject: 'tx-0' (000000000cb667ec): kobject_uevent_env [ 2056.264343][ T5346] ? __kasan_check_read+0x11/0x20 [ 2056.264354][ T5346] ? _copy_to_user+0x118/0x160 [ 2056.264373][ T5346] __x64_sys_clone+0x1ab/0x270 [ 2056.271626][ T5788] kobject: 'tx-0' (000000000cb667ec): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/tx-0' [ 2056.276837][ T5346] ? __ia32_sys_vfork+0xd0/0xd0 [ 2056.284401][ T5788] kobject: 'gre0' (000000001ed6e18d): kobject_add_internal: parent: 'net', set: 'devices' [ 2056.288082][ T5346] ? do_syscall_64+0x26/0x760 [ 2056.312535][ T5788] kobject: 'gre0' (000000001ed6e18d): kobject_uevent_env [ 2056.313385][ T5346] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2056.318662][ T5788] kobject: 'gre0' (000000001ed6e18d): fill_kobj_path: path = '/devices/virtual/net/gre0' [ 2056.323649][ T5346] ? trace_hardirqs_on+0x67/0x240 [ 2056.323664][ T5346] do_syscall_64+0xfa/0x760 [ 2056.323680][ T5346] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2056.323699][ T5346] RIP: 0033:0x457e4a [ 2056.331101][ T5788] kobject: 'queues' (00000000625f0ec8): kobject_add_internal: parent: 'gre0', set: '' [ 2056.335877][ T5346] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2056.335884][ T5346] RSP: 002b:00007ffeb67a3c90 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2056.335894][ T5346] RAX: ffffffffffffffda RBX: 00007ffeb67a3c90 RCX: 0000000000457e4a [ 2056.335908][ T5346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2056.349634][ T5788] kobject: 'queues' (00000000625f0ec8): kobject_uevent_env [ 2056.351400][ T5346] RBP: 00007ffeb67a3cd0 R08: 0000000000000001 R09: 0000555555f67940 [ 2056.361730][ T5788] kobject: 'queues' (00000000625f0ec8): kobject_uevent_env: filter function caused the event to drop! [ 2056.366451][ T5346] R10: 0000555555f67c10 R11: 0000000000000246 R12: 0000000000000001 [ 2056.366458][ T5346] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffeb67a3d20 [ 2056.621658][ T5788] kobject: 'rx-0' (000000003b9744a4): kobject_add_internal: parent: 'queues', set: 'queues' [ 2056.655118][ T5788] kobject: 'rx-0' (000000003b9744a4): kobject_uevent_env [ 2056.662234][ T5788] kobject: 'rx-0' (000000003b9744a4): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/rx-0' [ 2056.694307][ T5788] kobject: 'tx-0' (00000000199c9264): kobject_add_internal: parent: 'queues', set: 'queues' [ 2056.709461][ T5788] kobject: 'tx-0' (00000000199c9264): kobject_uevent_env [ 2056.716867][ T5788] kobject: 'tx-0' (00000000199c9264): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/tx-0' [ 2056.728801][ T5788] kobject: 'gretap0' (00000000ce20c9f0): kobject_add_internal: parent: 'net', set: 'devices' [ 2056.739917][ T5788] kobject: 'gretap0' (00000000ce20c9f0): kobject_uevent_env [ 2056.747852][ T5346] memory: usage 3924kB, limit 0kB, failcnt 988 [ 2056.754014][ T5346] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2056.761297][ T5788] kobject: 'gretap0' (00000000ce20c9f0): fill_kobj_path: path = '/devices/virtual/net/gretap0' [ 2056.771950][ T5346] Memory cgroup stats for /syz4: [ 2056.772045][ T5346] anon 180224 [ 2056.772045][ T5346] file 57344 [ 2056.772045][ T5346] kernel_stack 0 [ 2056.772045][ T5346] slab 3493888 [ 2056.772045][ T5346] sock 12288 [ 2056.772045][ T5346] shmem 81920 [ 2056.772045][ T5346] file_mapped 0 [ 2056.772045][ T5346] file_dirty 0 [ 2056.772045][ T5346] file_writeback 0 [ 2056.772045][ T5346] anon_thp 0 [ 2056.772045][ T5346] inactive_anon 0 [ 2056.772045][ T5346] active_anon 159744 [ 2056.772045][ T5346] inactive_file 0 [ 2056.772045][ T5346] active_file 0 [ 2056.772045][ T5346] unevictable 0 [ 2056.772045][ T5346] slab_reclaimable 811008 [ 2056.772045][ T5346] slab_unreclaimable 2682880 [ 2056.772045][ T5346] pgfault 54186 [ 2056.772045][ T5346] pgmajfault 0 [ 2056.772045][ T5346] workingset_refault 0 [ 2056.772045][ T5346] workingset_activate 0 [ 2056.772045][ T5346] workingset_nodereclaim 0 [ 2056.772045][ T5346] pgrefill 85 [ 2056.772045][ T5346] pgscan 70 [ 2056.772045][ T5346] pgsteal 33 [ 2056.772045][ T5346] pgactivate 33 [ 2056.866924][ T5788] kobject: 'queues' (000000007f306045): kobject_add_internal: parent: 'gretap0', set: '' [ 2056.877933][ T5788] kobject: 'queues' (000000007f306045): kobject_uevent_env [ 2056.885147][ T5788] kobject: 'queues' (000000007f306045): kobject_uevent_env: filter function caused the event to drop! [ 2056.896938][ T5788] kobject: 'rx-0' (00000000403d78fe): kobject_add_internal: parent: 'queues', set: 'queues' [ 2056.907126][ T5788] kobject: 'rx-0' (00000000403d78fe): kobject_uevent_env [ 2056.914184][ T5788] kobject: 'rx-0' (00000000403d78fe): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/rx-0' [ 2056.925870][ T5788] kobject: 'tx-0' (0000000060048dfc): kobject_add_internal: parent: 'queues', set: 'queues' [ 2056.936399][ T5788] kobject: 'tx-0' (0000000060048dfc): kobject_uevent_env [ 2056.943812][ T5788] kobject: 'tx-0' (0000000060048dfc): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/tx-0' [ 2056.956034][ T5788] kobject: 'batman_adv' (000000002abe9126): kobject_add_internal: parent: 'gretap0', set: '' [ 2056.967087][ T5346] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=5346,uid=0 [ 2056.983240][ T5786] kobject: 'erspan0' (0000000017ebb67a): kobject_add_internal: parent: 'net', set: 'devices' [ 2056.985495][ T1065] oom_reaper: reaped process 5740 (syz-executor.4), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 2056.994443][ T5786] kobject: 'erspan0' (0000000017ebb67a): kobject_uevent_env [ 2057.007196][ T5346] Memory cgroup out of memory: Killed process 5346 (syz-executor.4) total-vm:72444kB, anon-rss:108kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:0 [ 2057.022367][ T5740] kobject: 'kvm' (000000002631e1a6): kobject_uevent_env [ 2057.032506][ T1065] oom_reaper: reaped process 5346 (syz-executor.4), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 2057.036163][ T5786] kobject: 'erspan0' (0000000017ebb67a): fill_kobj_path: path = '/devices/virtual/net/erspan0' [ 2057.058005][ T5786] kobject: 'queues' (0000000045cfa6df): kobject_add_internal: parent: 'erspan0', set: '' [ 2057.060414][ T5740] kobject: 'kvm' (000000002631e1a6): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2057.068699][ T5786] kobject: 'queues' (0000000045cfa6df): kobject_uevent_env [ 2057.085650][ T5786] kobject: 'queues' (0000000045cfa6df): kobject_uevent_env: filter function caused the event to drop! [ 2057.096935][ T5786] kobject: 'rx-0' (00000000437d8ad6): kobject_add_internal: parent: 'queues', set: 'queues' [ 2057.107311][ T5786] kobject: 'rx-0' (00000000437d8ad6): kobject_uevent_env [ 2057.114646][ T5786] kobject: 'rx-0' (00000000437d8ad6): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/rx-0' [ 2057.125960][ T5786] kobject: 'tx-0' (00000000f15a7002): kobject_add_internal: parent: 'queues', set: 'queues' [ 2057.136142][ T5786] kobject: 'tx-0' (00000000f15a7002): kobject_uevent_env [ 2057.143482][ T5786] kobject: 'tx-0' (00000000f15a7002): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/tx-0' [ 2057.155255][ T5786] kobject: 'batman_adv' (00000000387bed13): kobject_add_internal: parent: 'erspan0', set: '' [ 2057.166412][ T5786] kobject: 'ip_vti0' (00000000a2ae9f79): kobject_add_internal: parent: 'net', set: 'devices' [ 2057.177127][ T5786] kobject: 'ip_vti0' (00000000a2ae9f79): kobject_uevent_env [ 2057.184467][ T5786] kobject: 'ip_vti0' (00000000a2ae9f79): fill_kobj_path: path = '/devices/virtual/net/ip_vti0' [ 2057.194912][ T5786] kobject: 'queues' (0000000012e4cc84): kobject_add_internal: parent: 'ip_vti0', set: '' [ 2057.205711][ T5786] kobject: 'queues' (0000000012e4cc84): kobject_uevent_env [ 2057.212956][ T5786] kobject: 'queues' (0000000012e4cc84): kobject_uevent_env: filter function caused the event to drop! [ 2057.223924][ T5786] kobject: 'rx-0' (0000000001e09088): kobject_add_internal: parent: 'queues', set: 'queues' [ 2057.234068][ T5786] kobject: 'rx-0' (0000000001e09088): kobject_uevent_env [ 2057.241145][ T5786] kobject: 'rx-0' (0000000001e09088): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/rx-0' [ 2057.252375][ T5786] kobject: 'tx-0' (00000000b87c41ed): kobject_add_internal: parent: 'queues', set: 'queues' [ 2057.262568][ T5786] kobject: 'tx-0' (00000000b87c41ed): kobject_uevent_env [ 2057.269608][ T5786] kobject: 'tx-0' (00000000b87c41ed): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/tx-0' [ 2057.282229][ T5752] kobject: 'syz_tun' (00000000901171e3): kobject_cleanup, parent 00000000e5fbc8a3 [ 2057.286552][ T5791] kobject: 'nfs_client' (000000001527ead5): kobject_add_internal: parent: 'net', set: 'nfs' [ 2057.291749][ T5752] kobject: 'syz_tun' (00000000901171e3): calling ktype release [ 2057.309606][ T5788] kobject: 'erspan0' (000000004df98c4e): kobject_add_internal: parent: 'net', set: 'devices' [ 2057.311796][ T5791] kobject: 'nfs_client' (000000001527ead5): kobject_uevent_env [ 2057.319817][ T5752] kobject: 'syz_tun': free name [ 2057.328098][ T5791] kobject: 'nfs_client' (000000001527ead5): fill_kobj_path: path = '/fs/nfs/net/nfs_client' [ 2057.333649][ T5788] kobject: 'erspan0' (000000004df98c4e): kobject_uevent_env [ 2057.347460][ T5791] IPVS: ftp: loaded support on port[0] = 21 15:23:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 2057.350161][ T5788] kobject: 'erspan0' (000000004df98c4e): fill_kobj_path: path = '/devices/virtual/net/erspan0' [ 2057.366925][ T5788] kobject: 'queues' (00000000ee9ce0f5): kobject_add_internal: parent: 'erspan0', set: '' [ 2057.377570][ T5788] kobject: 'queues' (00000000ee9ce0f5): kobject_uevent_env [ 2057.385128][ T5788] kobject: 'queues' (00000000ee9ce0f5): kobject_uevent_env: filter function caused the event to drop! [ 2057.396547][ T5788] kobject: 'rx-0' (00000000000116fd): kobject_add_internal: parent: 'queues', set: 'queues' 15:23:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 2057.407639][ T5788] kobject: 'rx-0' (00000000000116fd): kobject_uevent_env [ 2057.415579][ T5788] kobject: 'rx-0' (00000000000116fd): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/rx-0' [ 2057.427075][ T5788] kobject: 'tx-0' (000000004cccb90b): kobject_add_internal: parent: 'queues', set: 'queues' [ 2057.437694][ T5788] kobject: 'tx-0' (000000004cccb90b): kobject_uevent_env [ 2057.444816][ T5788] kobject: 'tx-0' (000000004cccb90b): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/tx-0' [ 2057.457036][ T5788] kobject: 'batman_adv' (000000005919d10d): kobject_add_internal: parent: 'erspan0', set: '' [ 2057.570077][ T5346] kobject: 'batman_adv' (00000000c8739505): kobject_uevent_env [ 2057.578102][ T5346] kobject: 'batman_adv' (00000000c8739505): kobject_uevent_env: filter function caused the event to drop! [ 2057.589936][ T5346] kobject: 'batman_adv' (00000000c8739505): kobject_cleanup, parent 00000000e5fbc8a3 [ 2057.599738][ T5346] kobject: 'batman_adv' (00000000c8739505): calling ktype release [ 2057.607849][ T5346] kobject: (00000000c8739505): dynamic_kobj_release [ 2057.615056][ T5346] kobject: 'batman_adv': free name [ 2057.620425][ T5346] kobject: 'rx-0' (00000000db874a8f): kobject_cleanup, parent 0000000060be588c [ 2057.629801][ T5346] kobject: 'rx-0' (00000000db874a8f): auto cleanup 'remove' event [ 2057.637937][ T5346] kobject: 'rx-0' (00000000db874a8f): kobject_uevent_env [ 2057.645333][ T5346] kobject: 'rx-0' (00000000db874a8f): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/rx-0' [ 2057.656925][ T5346] kobject: 'rx-0' (00000000db874a8f): auto cleanup kobject_del [ 2057.667830][ T5346] kobject: 'rx-0' (00000000db874a8f): calling ktype release [ 2057.675467][ T5346] kobject: 'rx-0': free name [ 2057.680200][ T5346] kobject: 'tx-0' (000000000e7d9192): kobject_cleanup, parent 0000000060be588c [ 2057.694651][ T5346] kobject: 'tx-0' (000000000e7d9192): auto cleanup 'remove' event [ 2057.702496][ T5346] kobject: 'tx-0' (000000000e7d9192): kobject_uevent_env [ 2057.710904][ T5346] kobject: 'tx-0' (000000000e7d9192): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0' [ 2057.725089][ T5346] kobject: 'tx-0' (000000000e7d9192): auto cleanup kobject_del [ 2057.732791][ T5346] kobject: 'tx-0' (000000000e7d9192): calling ktype release [ 2057.741448][ T5346] kobject: 'tx-0': free name [ 2057.747882][ T5346] kobject: 'queues' (0000000060be588c): kobject_cleanup, parent 00000000e5fbc8a3 [ 2057.758481][ T5346] kobject: 'queues' (0000000060be588c): calling ktype release [ 2057.767737][ T5346] kobject: 'queues' (0000000060be588c): kset_release [ 2057.775713][ T5346] kobject: 'queues': free name [ 2057.780892][ T5346] kobject: 'syz_tun' (00000000a0359c25): kobject_uevent_env [ 2057.790101][ T5346] kobject: 'syz_tun' (00000000a0359c25): fill_kobj_path: path = '/devices/virtual/net/syz_tun' [ 2057.802375][ T5786] kobject: 'ip6_vti0' (0000000011375df9): kobject_add_internal: parent: 'net', set: 'devices' [ 2057.813404][ T5786] kobject: 'ip6_vti0' (0000000011375df9): kobject_uevent_env [ 2057.821194][ T5786] kobject: 'ip6_vti0' (0000000011375df9): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0' [ 2057.832114][ T5786] kobject: 'queues' (00000000fb530b96): kobject_add_internal: parent: 'ip6_vti0', set: '' [ 2057.842864][ T5786] kobject: 'queues' (00000000fb530b96): kobject_uevent_env [ 2057.856415][ T5786] kobject: 'queues' (00000000fb530b96): kobject_uevent_env: filter function caused the event to drop! [ 2057.867462][ T5786] kobject: 'rx-0' (0000000076bd027b): kobject_add_internal: parent: 'queues', set: 'queues' [ 2057.877716][ T5786] kobject: 'rx-0' (0000000076bd027b): kobject_uevent_env [ 2057.884829][ T5786] kobject: 'rx-0' (0000000076bd027b): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0/queues/rx-0' [ 2057.896151][ T5786] kobject: 'tx-0' (00000000add38afb): kobject_add_internal: parent: 'queues', set: 'queues' [ 2057.906488][ T5786] kobject: 'tx-0' (00000000add38afb): kobject_uevent_env [ 2057.913524][ T5786] kobject: 'tx-0' (00000000add38afb): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0/queues/tx-0' [ 2057.925621][ T5791] kobject: 'lo' (00000000bca33a55): kobject_add_internal: parent: 'net', set: 'devices' [ 2057.937066][ T5791] kobject: 'lo' (00000000bca33a55): kobject_uevent_env [ 2057.943945][ T5791] kobject: 'lo' (00000000bca33a55): fill_kobj_path: path = '/devices/virtual/net/lo' [ 2057.953497][ T5791] kobject: 'queues' (00000000c5fa4aeb): kobject_add_internal: parent: 'lo', set: '' [ 2057.963714][ T5791] kobject: 'queues' (00000000c5fa4aeb): kobject_uevent_env [ 2057.971196][ T5791] kobject: 'queues' (00000000c5fa4aeb): kobject_uevent_env: filter function caused the event to drop! [ 2057.982183][ T5791] kobject: 'rx-0' (00000000b924c6cb): kobject_add_internal: parent: 'queues', set: 'queues' [ 2057.992325][ T5791] kobject: 'rx-0' (00000000b924c6cb): kobject_uevent_env [ 2057.999632][ T5791] kobject: 'rx-0' (00000000b924c6cb): fill_kobj_path: path = '/devices/virtual/net/lo/queues/rx-0' [ 2058.011207][ T5791] kobject: 'tx-0' (000000000a958887): kobject_add_internal: parent: 'queues', set: 'queues' [ 2058.021723][ T5791] kobject: 'tx-0' (000000000a958887): kobject_uevent_env [ 2058.029035][ T5791] kobject: 'tx-0' (000000000a958887): fill_kobj_path: path = '/devices/virtual/net/lo/queues/tx-0' [ 2058.041029][ T5788] kobject: 'ip_vti0' (000000005b9bf11a): kobject_add_internal: parent: 'net', set: 'devices' [ 2058.052428][ T5788] kobject: 'ip_vti0' (000000005b9bf11a): kobject_uevent_env [ 2058.060006][ T5788] kobject: 'ip_vti0' (000000005b9bf11a): fill_kobj_path: path = '/devices/virtual/net/ip_vti0' [ 2058.070452][ T5788] kobject: 'queues' (00000000fe55d5a1): kobject_add_internal: parent: 'ip_vti0', set: '' [ 2058.080819][ T5788] kobject: 'queues' (00000000fe55d5a1): kobject_uevent_env [ 2058.088122][ T5788] kobject: 'queues' (00000000fe55d5a1): kobject_uevent_env: filter function caused the event to drop! [ 2058.099361][ T5788] kobject: 'rx-0' (00000000ede039e9): kobject_add_internal: parent: 'queues', set: 'queues' [ 2058.109536][ T5788] kobject: 'rx-0' (00000000ede039e9): kobject_uevent_env [ 2058.116612][ T5788] kobject: 'rx-0' (00000000ede039e9): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/rx-0' [ 2058.127818][ T5788] kobject: 'tx-0' (000000009b686a84): kobject_add_internal: parent: 'queues', set: 'queues' [ 2058.138034][ T5788] kobject: 'tx-0' (000000009b686a84): kobject_uevent_env [ 2058.145059][ T5788] kobject: 'tx-0' (000000009b686a84): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/tx-0' [ 2058.417146][ T125] kobject: 'rx-0' (00000000262a07aa): kobject_cleanup, parent 00000000157f9a4f [ 2058.426259][ T125] kobject: 'rx-0' (00000000262a07aa): auto cleanup 'remove' event [ 2058.434347][ T125] kobject: 'rx-0' (00000000262a07aa): kobject_uevent_env [ 2058.441468][ T125] kobject: 'rx-0' (00000000262a07aa): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2058.452384][ T125] kobject: 'rx-0' (00000000262a07aa): auto cleanup kobject_del [ 2058.460031][ T125] kobject: 'rx-0' (00000000262a07aa): calling ktype release [ 2058.467317][ T125] kobject: 'rx-0': free name [ 2058.471997][ T125] kobject: 'tx-0' (0000000065a31c7c): kobject_cleanup, parent 00000000157f9a4f [ 2058.480942][ T125] kobject: 'tx-0' (0000000065a31c7c): auto cleanup 'remove' event [ 2058.488736][ T125] kobject: 'tx-0' (0000000065a31c7c): kobject_uevent_env [ 2058.496555][ T125] kobject: 'tx-0' (0000000065a31c7c): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2058.507625][ T125] kobject: 'tx-0' (0000000065a31c7c): auto cleanup kobject_del [ 2058.515568][ T125] kobject: 'tx-0' (0000000065a31c7c): calling ktype release [ 2058.522870][ T125] kobject: 'tx-0': free name [ 2058.527475][ T125] kobject: 'queues' (00000000157f9a4f): kobject_cleanup, parent 00000000e5fbc8a3 [ 2058.536621][ T125] kobject: 'queues' (00000000157f9a4f): calling ktype release [ 2058.544105][ T125] kobject: 'queues' (00000000157f9a4f): kset_release [ 2058.550817][ T125] kobject: 'queues': free name [ 2058.555762][ T125] kobject: 'ip6gre0' (0000000002af86d4): kobject_uevent_env [ 2058.563096][ T125] kobject: 'ip6gre0' (0000000002af86d4): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2058.575124][ T125] kobject: 'batman_adv' (00000000730e8a60): kobject_uevent_env [ 2058.584626][ T125] kobject: 'batman_adv' (00000000730e8a60): kobject_uevent_env: filter function caused the event to drop! [ 2058.595946][ T125] kobject: 'batman_adv' (00000000730e8a60): kobject_cleanup, parent 00000000e5fbc8a3 [ 2058.605415][ T125] kobject: 'batman_adv' (00000000730e8a60): calling ktype release [ 2058.613232][ T125] kobject: (00000000730e8a60): dynamic_kobj_release [ 2058.619798][ T125] kobject: 'batman_adv': free name [ 2058.625400][ T125] kobject: 'rx-0' (00000000f7b8450f): kobject_cleanup, parent 00000000046b9a2b [ 2058.634403][ T125] kobject: 'rx-0' (00000000f7b8450f): auto cleanup 'remove' event [ 2058.642322][ T125] kobject: 'rx-0' (00000000f7b8450f): kobject_uevent_env [ 2058.649335][ T125] kobject: 'rx-0' (00000000f7b8450f): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2058.660187][ T125] kobject: 'rx-0' (00000000f7b8450f): auto cleanup kobject_del [ 2058.667772][ T125] kobject: 'rx-0' (00000000f7b8450f): calling ktype release [ 2058.675083][ T125] kobject: 'rx-0': free name [ 2058.679737][ T125] kobject: 'tx-0' (0000000088b389e3): kobject_cleanup, parent 00000000046b9a2b [ 2058.688721][ T125] kobject: 'tx-0' (0000000088b389e3): auto cleanup 'remove' event [ 2058.696581][ T125] kobject: 'tx-0' (0000000088b389e3): kobject_uevent_env [ 2058.703652][ T125] kobject: 'tx-0' (0000000088b389e3): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2058.714454][ T125] kobject: 'tx-0' (0000000088b389e3): auto cleanup kobject_del [ 2058.722057][ T125] kobject: 'tx-0' (0000000088b389e3): calling ktype release [ 2058.729326][ T125] kobject: 'tx-0': free name [ 2058.734048][ T125] kobject: 'queues' (00000000046b9a2b): kobject_cleanup, parent 00000000e5fbc8a3 [ 2058.743213][ T125] kobject: 'queues' (00000000046b9a2b): calling ktype release [ 2058.750668][ T125] kobject: 'queues' (00000000046b9a2b): kset_release [ 2058.757879][ T125] kobject: 'queues': free name [ 2058.762942][ T125] kobject: 'ip6gretap0' (000000005bf2b77d): kobject_uevent_env [ 2058.770475][ T125] kobject: 'ip6gretap0' (000000005bf2b77d): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2058.783071][ T125] kobject: 'rx-0' (000000005ddf67d1): kobject_cleanup, parent 00000000901d499a [ 2058.792025][ T125] kobject: 'rx-0' (000000005ddf67d1): auto cleanup 'remove' event [ 2058.799900][ T125] kobject: 'rx-0' (000000005ddf67d1): kobject_uevent_env [ 2058.806965][ T125] kobject: 'rx-0' (000000005ddf67d1): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2058.817824][ T125] kobject: 'rx-0' (000000005ddf67d1): auto cleanup kobject_del [ 2058.825470][ T125] kobject: 'rx-0' (000000005ddf67d1): calling ktype release [ 2058.832791][ T125] kobject: 'rx-0': free name [ 2058.837472][ T125] kobject: 'tx-0' (00000000b1a1910c): kobject_cleanup, parent 00000000901d499a [ 2058.846450][ T125] kobject: 'tx-0' (00000000b1a1910c): auto cleanup 'remove' event [ 2058.854304][ T125] kobject: 'tx-0' (00000000b1a1910c): kobject_uevent_env [ 2058.861336][ T125] kobject: 'tx-0' (00000000b1a1910c): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2058.872609][ T125] kobject: 'tx-0' (00000000b1a1910c): auto cleanup kobject_del [ 2058.880507][ T125] kobject: 'tx-0' (00000000b1a1910c): calling ktype release [ 2058.888378][ T125] kobject: 'tx-0': free name [ 2058.892994][ T125] kobject: 'queues' (00000000901d499a): kobject_cleanup, parent 00000000e5fbc8a3 [ 2058.902442][ T125] kobject: 'queues' (00000000901d499a): calling ktype release [ 2058.910444][ T125] kobject: 'queues' (00000000901d499a): kset_release [ 2058.917280][ T125] kobject: 'queues': free name [ 2058.922296][ T125] kobject: 'ip6gre0' (00000000deafff36): kobject_uevent_env [ 2058.929635][ T125] kobject: 'ip6gre0' (00000000deafff36): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2058.941582][ T125] kobject: 'batman_adv' (00000000bf6be6bc): kobject_uevent_env [ 2058.949166][ T125] kobject: 'batman_adv' (00000000bf6be6bc): kobject_uevent_env: filter function caused the event to drop! [ 2058.960488][ T125] kobject: 'batman_adv' (00000000bf6be6bc): kobject_cleanup, parent 00000000e5fbc8a3 [ 2058.969959][ T125] kobject: 'batman_adv' (00000000bf6be6bc): calling ktype release [ 2058.977780][ T125] kobject: (00000000bf6be6bc): dynamic_kobj_release [ 2058.984511][ T125] kobject: 'batman_adv': free name [ 2058.989725][ T125] kobject: 'rx-0' (0000000005357ca7): kobject_cleanup, parent 00000000a3b8d24e [ 2058.998687][ T125] kobject: 'rx-0' (0000000005357ca7): auto cleanup 'remove' event [ 2059.006504][ T125] kobject: 'rx-0' (0000000005357ca7): kobject_uevent_env [ 2059.013497][ T125] kobject: 'rx-0' (0000000005357ca7): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2059.024589][ T125] kobject: 'rx-0' (0000000005357ca7): auto cleanup kobject_del [ 2059.032157][ T125] kobject: 'rx-0' (0000000005357ca7): calling ktype release [ 2059.039483][ T125] kobject: 'rx-0': free name [ 2059.044088][ T125] kobject: 'tx-0' (0000000064a3adcb): kobject_cleanup, parent 00000000a3b8d24e [ 2059.053086][ T125] kobject: 'tx-0' (0000000064a3adcb): auto cleanup 'remove' event [ 2059.061048][ T125] kobject: 'tx-0' (0000000064a3adcb): kobject_uevent_env [ 2059.068090][ T125] kobject: 'tx-0' (0000000064a3adcb): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2059.079028][ T125] kobject: 'tx-0' (0000000064a3adcb): auto cleanup kobject_del [ 2059.086656][ T125] kobject: 'tx-0' (0000000064a3adcb): calling ktype release [ 2059.093928][ T125] kobject: 'tx-0': free name [ 2059.098561][ T125] kobject: 'queues' (00000000a3b8d24e): kobject_cleanup, parent 00000000e5fbc8a3 [ 2059.107692][ T125] kobject: 'queues' (00000000a3b8d24e): calling ktype release [ 2059.115144][ T125] kobject: 'queues' (00000000a3b8d24e): kset_release [ 2059.121854][ T125] kobject: 'queues': free name [ 2059.126832][ T125] kobject: 'ip6gretap0' (000000004b52eacd): kobject_uevent_env [ 2059.134346][ T125] kobject: 'ip6gretap0' (000000004b52eacd): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2059.146907][ T125] kobject: 'rx-0' (00000000fde5f06c): kobject_cleanup, parent 000000009ef74913 [ 2059.156183][ T125] kobject: 'rx-0' (00000000fde5f06c): auto cleanup 'remove' event [ 2059.163976][ T125] kobject: 'rx-0' (00000000fde5f06c): kobject_uevent_env [ 2059.171029][ T125] kobject: 'rx-0' (00000000fde5f06c): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2059.181902][ T125] kobject: 'rx-0' (00000000fde5f06c): auto cleanup kobject_del [ 2059.189492][ T125] kobject: 'rx-0' (00000000fde5f06c): calling ktype release [ 2059.196777][ T125] kobject: 'rx-0': free name [ 2059.201370][ T125] kobject: 'tx-0' (00000000c2179f5e): kobject_cleanup, parent 000000009ef74913 [ 2059.210315][ T125] kobject: 'tx-0' (00000000c2179f5e): auto cleanup 'remove' event [ 2059.218205][ T125] kobject: 'tx-0' (00000000c2179f5e): kobject_uevent_env [ 2059.225198][ T125] kobject: 'tx-0' (00000000c2179f5e): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2059.236058][ T125] kobject: 'tx-0' (00000000c2179f5e): auto cleanup kobject_del [ 2059.243644][ T125] kobject: 'tx-0' (00000000c2179f5e): calling ktype release [ 2059.250939][ T125] kobject: 'tx-0': free name [ 2059.255533][ T125] kobject: 'queues' (000000009ef74913): kobject_cleanup, parent 00000000e5fbc8a3 [ 2059.264653][ T125] kobject: 'queues' (000000009ef74913): calling ktype release [ 2059.272129][ T125] kobject: 'queues' (000000009ef74913): kset_release [ 2059.278810][ T125] kobject: 'queues': free name [ 2059.283771][ T125] kobject: 'ip6gre0' (00000000e3a24d41): kobject_uevent_env [ 2059.291347][ T125] kobject: 'ip6gre0' (00000000e3a24d41): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2059.303732][ T125] kobject: 'batman_adv' (000000002aaf3127): kobject_uevent_env [ 2059.311456][ T125] kobject: 'batman_adv' (000000002aaf3127): kobject_uevent_env: filter function caused the event to drop! [ 2059.322779][ T125] kobject: 'batman_adv' (000000002aaf3127): kobject_cleanup, parent 00000000e5fbc8a3 [ 2059.332254][ T125] kobject: 'batman_adv' (000000002aaf3127): calling ktype release [ 2059.340058][ T125] kobject: (000000002aaf3127): dynamic_kobj_release [ 2059.346631][ T125] kobject: 'batman_adv': free name [ 2059.351915][ T125] kobject: 'rx-0' (00000000a1cc6408): kobject_cleanup, parent 0000000099c0e686 [ 2059.360949][ T125] kobject: 'rx-0' (00000000a1cc6408): auto cleanup 'remove' event [ 2059.368781][ T125] kobject: 'rx-0' (00000000a1cc6408): kobject_uevent_env [ 2059.375793][ T125] kobject: 'rx-0' (00000000a1cc6408): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2059.386568][ T125] kobject: 'rx-0' (00000000a1cc6408): auto cleanup kobject_del [ 2059.394153][ T125] kobject: 'rx-0' (00000000a1cc6408): calling ktype release [ 2059.401437][ T125] kobject: 'rx-0': free name [ 2059.406037][ T125] kobject: 'tx-0' (00000000dbcb98e4): kobject_cleanup, parent 0000000099c0e686 [ 2059.414983][ T125] kobject: 'tx-0' (00000000dbcb98e4): auto cleanup 'remove' event [ 2059.422977][ T125] kobject: 'tx-0' (00000000dbcb98e4): kobject_uevent_env [ 2059.430028][ T125] kobject: 'tx-0' (00000000dbcb98e4): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2059.440825][ T125] kobject: 'tx-0' (00000000dbcb98e4): auto cleanup kobject_del [ 2059.448433][ T125] kobject: 'tx-0' (00000000dbcb98e4): calling ktype release [ 2059.455714][ T125] kobject: 'tx-0': free name [ 2059.460358][ T125] kobject: 'queues' (0000000099c0e686): kobject_cleanup, parent 00000000e5fbc8a3 [ 2059.469479][ T125] kobject: 'queues' (0000000099c0e686): calling ktype release [ 2059.476909][ T125] kobject: 'queues' (0000000099c0e686): kset_release [ 2059.483798][ T125] kobject: 'queues': free name [ 2059.489022][ T125] kobject: 'ip6gretap0' (00000000bdb802e8): kobject_uevent_env [ 2059.496674][ T125] kobject: 'ip6gretap0' (00000000bdb802e8): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2059.512000][ T125] kobject: 'rx-0' (000000000f66b6f2): kobject_cleanup, parent 00000000b9d948d4 [ 2059.521055][ T125] kobject: 'rx-0' (000000000f66b6f2): auto cleanup 'remove' event [ 2059.529160][ T125] kobject: 'rx-0' (000000000f66b6f2): kobject_uevent_env [ 2059.536164][ T125] kobject: 'rx-0' (000000000f66b6f2): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2059.546975][ T125] kobject: 'rx-0' (000000000f66b6f2): auto cleanup kobject_del [ 2059.554868][ T125] kobject: 'rx-0' (000000000f66b6f2): calling ktype release [ 2059.562292][ T125] kobject: 'rx-0': free name [ 2059.566999][ T125] kobject: 'tx-0' (00000000d064698d): kobject_cleanup, parent 00000000b9d948d4 [ 2059.576317][ T125] kobject: 'tx-0' (00000000d064698d): auto cleanup 'remove' event [ 2059.584266][ T125] kobject: 'tx-0' (00000000d064698d): kobject_uevent_env [ 2059.591329][ T125] kobject: 'tx-0' (00000000d064698d): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2059.602113][ T125] kobject: 'tx-0' (00000000d064698d): auto cleanup kobject_del [ 2059.609714][ T125] kobject: 'tx-0' (00000000d064698d): calling ktype release [ 2059.616983][ T125] kobject: 'tx-0': free name [ 2059.621657][ T125] kobject: 'queues' (00000000b9d948d4): kobject_cleanup, parent 00000000e5fbc8a3 [ 2059.630858][ T125] kobject: 'queues' (00000000b9d948d4): calling ktype release [ 2059.638292][ T125] kobject: 'queues' (00000000b9d948d4): kset_release [ 2059.644991][ T125] kobject: 'queues': free name [ 2059.650084][ T125] kobject: 'ip6gre0' (00000000a98ff74f): kobject_uevent_env [ 2059.657396][ T125] kobject: 'ip6gre0' (00000000a98ff74f): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2059.669412][ T125] kobject: 'batman_adv' (000000001d5e4914): kobject_uevent_env [ 2059.677000][ T125] kobject: 'batman_adv' (000000001d5e4914): kobject_uevent_env: filter function caused the event to drop! [ 2059.688646][ T125] kobject: 'batman_adv' (000000001d5e4914): kobject_cleanup, parent 00000000e5fbc8a3 [ 2059.698288][ T125] kobject: 'batman_adv' (000000001d5e4914): calling ktype release [ 2059.706132][ T125] kobject: (000000001d5e4914): dynamic_kobj_release [ 2059.712779][ T125] kobject: 'batman_adv': free name [ 2059.718042][ T125] kobject: 'rx-0' (00000000049cc67c): kobject_cleanup, parent 000000008cec1765 [ 2059.727079][ T125] kobject: 'rx-0' (00000000049cc67c): auto cleanup 'remove' event [ 2059.734921][ T125] kobject: 'rx-0' (00000000049cc67c): kobject_uevent_env [ 2059.741991][ T125] kobject: 'rx-0' (00000000049cc67c): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2059.752794][ T125] kobject: 'rx-0' (00000000049cc67c): auto cleanup kobject_del [ 2059.760379][ T125] kobject: 'rx-0' (00000000049cc67c): calling ktype release [ 2059.767702][ T125] kobject: 'rx-0': free name [ 2059.772356][ T125] kobject: 'tx-0' (000000000e2a9665): kobject_cleanup, parent 000000008cec1765 [ 2059.781559][ T125] kobject: 'tx-0' (000000000e2a9665): auto cleanup 'remove' event [ 2059.789378][ T125] kobject: 'tx-0' (000000000e2a9665): kobject_uevent_env [ 2059.796466][ T125] kobject: 'tx-0' (000000000e2a9665): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2059.807489][ T125] kobject: 'tx-0' (000000000e2a9665): auto cleanup kobject_del [ 2059.815392][ T125] kobject: 'tx-0' (000000000e2a9665): calling ktype release [ 2059.822709][ T125] kobject: 'tx-0': free name [ 2059.827326][ T125] kobject: 'queues' (000000008cec1765): kobject_cleanup, parent 00000000e5fbc8a3 [ 2059.836634][ T125] kobject: 'queues' (000000008cec1765): calling ktype release [ 2059.844111][ T125] kobject: 'queues' (000000008cec1765): kset_release [ 2059.850800][ T125] kobject: 'queues': free name [ 2059.855899][ T125] kobject: 'ip6gretap0' (000000005c65dc05): kobject_uevent_env [ 2059.863485][ T125] kobject: 'ip6gretap0' (000000005c65dc05): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2059.875805][ T125] kobject: 'rx-0' (00000000e9ab0d6e): kobject_cleanup, parent 0000000050d62711 [ 2059.884903][ T125] kobject: 'rx-0' (00000000e9ab0d6e): auto cleanup 'remove' event [ 2059.892763][ T125] kobject: 'rx-0' (00000000e9ab0d6e): kobject_uevent_env [ 2059.899779][ T125] kobject: 'rx-0' (00000000e9ab0d6e): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2059.910570][ T125] kobject: 'rx-0' (00000000e9ab0d6e): auto cleanup kobject_del [ 2059.918181][ T125] kobject: 'rx-0' (00000000e9ab0d6e): calling ktype release [ 2059.925502][ T125] kobject: 'rx-0': free name [ 2059.930246][ T125] kobject: 'tx-0' (00000000bcd230bd): kobject_cleanup, parent 0000000050d62711 [ 2059.939213][ T125] kobject: 'tx-0' (00000000bcd230bd): auto cleanup 'remove' event [ 2059.947297][ T125] kobject: 'tx-0' (00000000bcd230bd): kobject_uevent_env [ 2059.954376][ T125] kobject: 'tx-0' (00000000bcd230bd): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2059.965301][ T125] kobject: 'tx-0' (00000000bcd230bd): auto cleanup kobject_del [ 2059.972908][ T125] kobject: 'tx-0' (00000000bcd230bd): calling ktype release [ 2059.980175][ T125] kobject: 'tx-0': free name [ 2059.984818][ T125] kobject: 'queues' (0000000050d62711): kobject_cleanup, parent 00000000e5fbc8a3 [ 2059.993954][ T125] kobject: 'queues' (0000000050d62711): calling ktype release [ 2060.001388][ T125] kobject: 'queues' (0000000050d62711): kset_release [ 2060.008105][ T125] kobject: 'queues': free name [ 2060.013168][ T125] kobject: 'ip6gre0' (00000000f7b3d000): kobject_uevent_env [ 2060.020430][ T125] kobject: 'ip6gre0' (00000000f7b3d000): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2060.033206][ T125] kobject: 'batman_adv' (0000000087871ebd): kobject_uevent_env [ 2060.040757][ T125] kobject: 'batman_adv' (0000000087871ebd): kobject_uevent_env: filter function caused the event to drop! [ 2060.052120][ T125] kobject: 'batman_adv' (0000000087871ebd): kobject_cleanup, parent 00000000e5fbc8a3 [ 2060.061602][ T125] kobject: 'batman_adv' (0000000087871ebd): calling ktype release [ 2060.069430][ T125] kobject: (0000000087871ebd): dynamic_kobj_release [ 2060.076232][ T125] kobject: 'batman_adv': free name [ 2060.081438][ T125] kobject: 'rx-0' (000000004f5a2dcc): kobject_cleanup, parent 000000004defe6b4 [ 2060.090532][ T125] kobject: 'rx-0' (000000004f5a2dcc): auto cleanup 'remove' event [ 2060.098478][ T125] kobject: 'rx-0' (000000004f5a2dcc): kobject_uevent_env [ 2060.105535][ T125] kobject: 'rx-0' (000000004f5a2dcc): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2060.116381][ T125] kobject: 'rx-0' (000000004f5a2dcc): auto cleanup kobject_del [ 2060.123982][ T125] kobject: 'rx-0' (000000004f5a2dcc): calling ktype release [ 2060.131248][ T125] kobject: 'rx-0': free name [ 2060.135912][ T125] kobject: 'tx-0' (00000000ed84c1c5): kobject_cleanup, parent 000000004defe6b4 [ 2060.145258][ T125] kobject: 'tx-0' (00000000ed84c1c5): auto cleanup 'remove' event [ 2060.153057][ T125] kobject: 'tx-0' (00000000ed84c1c5): kobject_uevent_env [ 2060.160104][ T125] kobject: 'tx-0' (00000000ed84c1c5): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2060.170879][ T125] kobject: 'tx-0' (00000000ed84c1c5): auto cleanup kobject_del [ 2060.178470][ T125] kobject: 'tx-0' (00000000ed84c1c5): calling ktype release [ 2060.185810][ T125] kobject: 'tx-0': free name [ 2060.190401][ T125] kobject: 'queues' (000000004defe6b4): kobject_cleanup, parent 00000000e5fbc8a3 [ 2060.199552][ T125] kobject: 'queues' (000000004defe6b4): calling ktype release [ 2060.207278][ T125] kobject: 'queues' (000000004defe6b4): kset_release [ 2060.213927][ T125] kobject: 'queues': free name [ 2060.218992][ T125] kobject: 'ip6gretap0' (00000000bd2bf0b1): kobject_uevent_env [ 2060.226569][ T125] kobject: 'ip6gretap0' (00000000bd2bf0b1): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2060.238855][ T125] kobject: 'rx-0' (000000005bd6f120): kobject_cleanup, parent 00000000be944292 [ 2060.248121][ T125] kobject: 'rx-0' (000000005bd6f120): auto cleanup 'remove' event [ 2060.255953][ T125] kobject: 'rx-0' (000000005bd6f120): kobject_uevent_env [ 2060.262960][ T125] kobject: 'rx-0' (000000005bd6f120): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2060.273734][ T125] kobject: 'rx-0' (000000005bd6f120): auto cleanup kobject_del [ 2060.281386][ T125] kobject: 'rx-0' (000000005bd6f120): calling ktype release [ 2060.288718][ T125] kobject: 'rx-0': free name [ 2060.293321][ T125] kobject: 'tx-0' (000000003f18714e): kobject_cleanup, parent 00000000be944292 [ 2060.302276][ T125] kobject: 'tx-0' (000000003f18714e): auto cleanup 'remove' event [ 2060.310085][ T125] kobject: 'tx-0' (000000003f18714e): kobject_uevent_env [ 2060.317154][ T125] kobject: 'tx-0' (000000003f18714e): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2060.327933][ T125] kobject: 'tx-0' (000000003f18714e): auto cleanup kobject_del [ 2060.335861][ T125] kobject: 'tx-0' (000000003f18714e): calling ktype release [ 2060.343136][ T125] kobject: 'tx-0': free name [ 2060.347760][ T125] kobject: 'queues' (00000000be944292): kobject_cleanup, parent 00000000e5fbc8a3 [ 2060.356900][ T125] kobject: 'queues' (00000000be944292): calling ktype release [ 2060.364332][ T125] kobject: 'queues' (00000000be944292): kset_release [ 2060.371028][ T125] kobject: 'queues': free name [ 2060.376022][ T125] kobject: 'ip6gre0' (000000000a1522ae): kobject_uevent_env [ 2060.383279][ T125] kobject: 'ip6gre0' (000000000a1522ae): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2060.395283][ T125] kobject: 'batman_adv' (00000000e3b10618): kobject_uevent_env [ 2060.402857][ T125] kobject: 'batman_adv' (00000000e3b10618): kobject_uevent_env: filter function caused the event to drop! [ 2060.414174][ T125] kobject: 'batman_adv' (00000000e3b10618): kobject_cleanup, parent 00000000e5fbc8a3 [ 2060.423646][ T125] kobject: 'batman_adv' (00000000e3b10618): calling ktype release [ 2060.431744][ T125] kobject: (00000000e3b10618): dynamic_kobj_release [ 2060.438371][ T125] kobject: 'batman_adv': free name [ 2060.443578][ T125] kobject: 'rx-0' (000000000b95125c): kobject_cleanup, parent 000000003b1d023e [ 2060.452513][ T125] kobject: 'rx-0' (000000000b95125c): auto cleanup 'remove' event [ 2060.460338][ T125] kobject: 'rx-0' (000000000b95125c): kobject_uevent_env [ 2060.467692][ T125] kobject: 'rx-0' (000000000b95125c): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2060.478481][ T125] kobject: 'rx-0' (000000000b95125c): auto cleanup kobject_del [ 2060.486030][ T125] kobject: 'rx-0' (000000000b95125c): calling ktype release [ 2060.493523][ T125] kobject: 'rx-0': free name [ 2060.498200][ T125] kobject: 'tx-0' (00000000a9b27637): kobject_cleanup, parent 000000003b1d023e [ 2060.507283][ T125] kobject: 'tx-0' (00000000a9b27637): auto cleanup 'remove' event [ 2060.515073][ T125] kobject: 'tx-0' (00000000a9b27637): kobject_uevent_env [ 2060.522125][ T125] kobject: 'tx-0' (00000000a9b27637): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2060.532960][ T125] kobject: 'tx-0' (00000000a9b27637): auto cleanup kobject_del [ 2060.540688][ T125] kobject: 'tx-0' (00000000a9b27637): calling ktype release [ 2060.548028][ T125] kobject: 'tx-0': free name [ 2060.552623][ T125] kobject: 'queues' (000000003b1d023e): kobject_cleanup, parent 00000000e5fbc8a3 [ 2060.561759][ T125] kobject: 'queues' (000000003b1d023e): calling ktype release [ 2060.569224][ T125] kobject: 'queues' (000000003b1d023e): kset_release [ 2060.575877][ T125] kobject: 'queues': free name [ 2060.580979][ T125] kobject: 'ip6gretap0' (00000000ff35fb53): kobject_uevent_env [ 2060.588553][ T125] kobject: 'ip6gretap0' (00000000ff35fb53): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2060.600242][ T5346] kobject: 'syz_tun' (00000000a0359c25): kobject_cleanup, parent 00000000e5fbc8a3 [ 2060.600390][ T5786] kobject: 'sit0' (00000000cf8fc14c): kobject_add_internal: parent: 'net', set: 'devices' 15:23:39 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x2) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb2537705067b0d4e4c4c627f1ff739247ff512fae595ef57dc22615639007ff2d863a0ece762051be98d2ae16c901ecb132073ece3f697206f590a4de249a3b4241f74a2d20879aa4aec86126c8916db837906b4344d334412383a144a01e23257b31"]) sendmsg(r6, 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 2060.612230][ T5346] kobject: 'syz_tun' (00000000a0359c25): calling ktype release [ 2060.620316][ T5786] kobject: 'sit0' (00000000cf8fc14c): kobject_uevent_env [ 2060.627225][ T5346] kobject: 'syz_tun': free name [ 2060.634169][ T5786] kobject: 'sit0' (00000000cf8fc14c): fill_kobj_path: path = '/devices/virtual/net/sit0' [ 2060.634260][ T5786] kobject: 'queues' (00000000143416fa): kobject_add_internal: parent: 'sit0', set: '' [ 2060.659329][ T5786] kobject: 'queues' (00000000143416fa): kobject_uevent_env [ 2060.666579][ T5786] kobject: 'queues' (00000000143416fa): kobject_uevent_env: filter function caused the event to drop! [ 2060.677612][ T5786] kobject: 'rx-0' (000000002e4ffe4a): kobject_add_internal: parent: 'queues', set: 'queues' [ 2060.688005][ T5786] kobject: 'rx-0' (000000002e4ffe4a): kobject_uevent_env [ 2060.695111][ T5786] kobject: 'rx-0' (000000002e4ffe4a): fill_kobj_path: path = '/devices/virtual/net/sit0/queues/rx-0' [ 2060.706045][ T5786] kobject: 'tx-0' (000000000e83e515): kobject_add_internal: parent: 'queues', set: 'queues' [ 2060.716273][ T5786] kobject: 'tx-0' (000000000e83e515): kobject_uevent_env [ 2060.723334][ T5786] kobject: 'tx-0' (000000000e83e515): fill_kobj_path: path = '/devices/virtual/net/sit0/queues/tx-0' [ 2060.735235][ T5791] kobject: 'tunl0' (000000003b148972): kobject_add_internal: parent: 'net', set: 'devices' [ 2060.746092][ T5791] kobject: 'tunl0' (000000003b148972): kobject_uevent_env [ 2060.753564][ T5791] kobject: 'tunl0' (000000003b148972): fill_kobj_path: path = '/devices/virtual/net/tunl0' [ 2060.764166][ T5791] kobject: 'queues' (000000000fbf8784): kobject_add_internal: parent: 'tunl0', set: '' [ 2060.774407][ T5791] kobject: 'queues' (000000000fbf8784): kobject_uevent_env [ 2060.781620][ T5791] kobject: 'queues' (000000000fbf8784): kobject_uevent_env: filter function caused the event to drop! [ 2060.792598][ T5791] kobject: 'rx-0' (00000000357d1b5f): kobject_add_internal: parent: 'queues', set: 'queues' [ 2060.802726][ T5791] kobject: 'rx-0' (00000000357d1b5f): kobject_uevent_env [ 2060.809797][ T5791] kobject: 'rx-0' (00000000357d1b5f): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/rx-0' [ 2060.820836][ T5791] kobject: 'tx-0' (00000000542cc436): kobject_add_internal: parent: 'queues', set: 'queues' [ 2060.831119][ T5791] kobject: 'tx-0' (00000000542cc436): kobject_uevent_env [ 2060.838162][ T5791] kobject: 'tx-0' (00000000542cc436): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/tx-0' [ 2060.850019][ T5788] kobject: 'ip6_vti0' (00000000829acc48): kobject_add_internal: parent: 'net', set: 'devices' [ 2060.861255][ T5788] kobject: 'ip6_vti0' (00000000829acc48): kobject_uevent_env [ 2060.868868][ T5788] kobject: 'ip6_vti0' (00000000829acc48): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0' [ 2060.879480][ T5788] kobject: 'queues' (00000000041a6359): kobject_add_internal: parent: 'ip6_vti0', set: '' [ 2060.889998][ T5788] kobject: 'queues' (00000000041a6359): kobject_uevent_env [ 2060.897180][ T5788] kobject: 'queues' (00000000041a6359): kobject_uevent_env: filter function caused the event to drop! [ 2060.908250][ T5788] kobject: 'rx-0' (000000000af8a70a): kobject_add_internal: parent: 'queues', set: 'queues' [ 2060.918393][ T5788] kobject: 'rx-0' (000000000af8a70a): kobject_uevent_env [ 2060.925474][ T5788] kobject: 'rx-0' (000000000af8a70a): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0/queues/rx-0' [ 2060.936758][ T5788] kobject: 'tx-0' (00000000618e901b): kobject_add_internal: parent: 'queues', set: 'queues' [ 2060.947481][ T5788] kobject: 'tx-0' (00000000618e901b): kobject_uevent_env [ 2060.954565][ T5788] kobject: 'tx-0' (00000000618e901b): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0/queues/tx-0' [ 2060.966574][ T5788] kobject: 'sit0' (0000000037bf46e1): kobject_add_internal: parent: 'net', set: 'devices' [ 2060.976855][ T5788] kobject: 'sit0' (0000000037bf46e1): kobject_uevent_env [ 2060.983919][ T5788] kobject: 'sit0' (0000000037bf46e1): fill_kobj_path: path = '/devices/virtual/net/sit0' [ 2060.994000][ T5788] kobject: 'queues' (000000001f15428c): kobject_add_internal: parent: 'sit0', set: '' [ 2061.004106][ T5788] kobject: 'queues' (000000001f15428c): kobject_uevent_env [ 2061.011331][ T5788] kobject: 'queues' (000000001f15428c): kobject_uevent_env: filter function caused the event to drop! [ 2061.022347][ T5788] kobject: 'rx-0' (0000000032e5e4ef): kobject_add_internal: parent: 'queues', set: 'queues' [ 2061.032465][ T5788] kobject: 'rx-0' (0000000032e5e4ef): kobject_uevent_env [ 2061.039486][ T5788] kobject: 'rx-0' (0000000032e5e4ef): fill_kobj_path: path = '/devices/virtual/net/sit0/queues/rx-0' [ 2061.050425][ T5788] kobject: 'tx-0' (00000000f58fee80): kobject_add_internal: parent: 'queues', set: 'queues' [ 2061.060584][ T5788] kobject: 'tx-0' (00000000f58fee80): kobject_uevent_env [ 2061.067659][ T5788] kobject: 'tx-0' (00000000f58fee80): fill_kobj_path: path = '/devices/virtual/net/sit0/queues/tx-0' [ 2061.079746][ T125] kobject: 'ip6gre0' (0000000002af86d4): kobject_cleanup, parent 00000000e5fbc8a3 [ 2061.080512][ T5788] kobject: 'ip6tnl0' (000000003daa268d): kobject_add_internal: parent: 'net', set: 'devices' [ 2061.099959][ T125] kobject: 'ip6gre0' (0000000002af86d4): calling ktype release [ 2061.100969][ T5788] kobject: 'ip6tnl0' (000000003daa268d): kobject_uevent_env [ 2061.107832][ T125] kobject: 'ip6gre0': free name [ 2061.115384][ T5788] kobject: 'ip6tnl0' (000000003daa268d): fill_kobj_path: path = '/devices/virtual/net/ip6tnl0' [ 2061.130628][ T5788] kobject: 'queues' (0000000024433aa0): kobject_add_internal: parent: 'ip6tnl0', set: '' [ 2061.141166][ T5788] kobject: 'queues' (0000000024433aa0): kobject_uevent_env [ 2061.148370][ T5788] kobject: 'queues' (0000000024433aa0): kobject_uevent_env: filter function caused the event to drop! [ 2061.159352][ T5788] kobject: 'rx-0' (00000000a224d048): kobject_add_internal: parent: 'queues', set: 'queues' [ 2061.169472][ T5788] kobject: 'rx-0' (00000000a224d048): kobject_uevent_env [ 2061.176513][ T5788] kobject: 'rx-0' (00000000a224d048): fill_kobj_path: path = '/devices/virtual/net/ip6tnl0/queues/rx-0' [ 2061.187710][ T5788] kobject: 'tx-0' (000000003e5f7029): kobject_add_internal: parent: 'queues', set: 'queues' [ 2061.197846][ T5788] kobject: 'tx-0' (000000003e5f7029): kobject_uevent_env [ 2061.204954][ T5788] kobject: 'tx-0' (000000003e5f7029): fill_kobj_path: path = '/devices/virtual/net/ip6tnl0/queues/tx-0' [ 2061.216718][ T5786] kobject: 'ip6tnl0' (0000000051f04e18): kobject_add_internal: parent: 'net', set: 'devices' [ 2061.227767][ T5786] kobject: 'ip6tnl0' (0000000051f04e18): kobject_uevent_env [ 2061.235206][ T5786] kobject: 'ip6tnl0' (0000000051f04e18): fill_kobj_path: path = '/devices/virtual/net/ip6tnl0' [ 2061.245640][ T5786] kobject: 'queues' (000000007ecb5d72): kobject_add_internal: parent: 'ip6tnl0', set: '' [ 2061.256182][ T5786] kobject: 'queues' (000000007ecb5d72): kobject_uevent_env [ 2061.263388][ T5786] kobject: 'queues' (000000007ecb5d72): kobject_uevent_env: filter function caused the event to drop! [ 2061.274348][ T5786] kobject: 'rx-0' (000000006976d615): kobject_add_internal: parent: 'queues', set: 'queues' [ 2061.284457][ T5786] kobject: 'rx-0' (000000006976d615): kobject_uevent_env [ 2061.291505][ T5786] kobject: 'rx-0' (000000006976d615): fill_kobj_path: path = '/devices/virtual/net/ip6tnl0/queues/rx-0' [ 2061.302706][ T5786] kobject: 'tx-0' (000000008642c489): kobject_add_internal: parent: 'queues', set: 'queues' [ 2061.312852][ T5786] kobject: 'tx-0' (000000008642c489): kobject_uevent_env [ 2061.319928][ T5786] kobject: 'tx-0' (000000008642c489): fill_kobj_path: path = '/devices/virtual/net/ip6tnl0/queues/tx-0' [ 2061.331806][ T5791] kobject: 'gre0' (0000000079370ab6): kobject_add_internal: parent: 'net', set: 'devices' [ 2061.342562][ T5791] kobject: 'gre0' (0000000079370ab6): kobject_uevent_env [ 2061.349639][ T5791] kobject: 'gre0' (0000000079370ab6): fill_kobj_path: path = '/devices/virtual/net/gre0' [ 2061.359524][ T5791] kobject: 'queues' (00000000e8974220): kobject_add_internal: parent: 'gre0', set: '' [ 2061.369607][ T5791] kobject: 'queues' (00000000e8974220): kobject_uevent_env [ 2061.376805][ T5791] kobject: 'queues' (00000000e8974220): kobject_uevent_env: filter function caused the event to drop! [ 2061.387771][ T5791] kobject: 'rx-0' (000000006cf89a91): kobject_add_internal: parent: 'queues', set: 'queues' [ 2061.397868][ T5791] kobject: 'rx-0' (000000006cf89a91): kobject_uevent_env [ 2061.404928][ T5791] kobject: 'rx-0' (000000006cf89a91): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/rx-0' [ 2061.415879][ T5791] kobject: 'tx-0' (00000000ec10e8a5): kobject_add_internal: parent: 'queues', set: 'queues' [ 2061.426058][ T5791] kobject: 'tx-0' (00000000ec10e8a5): kobject_uevent_env [ 2061.433090][ T5791] kobject: 'tx-0' (00000000ec10e8a5): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/tx-0' [ 2061.444573][ T5791] kobject: 'gretap0' (00000000b3cd2e29): kobject_add_internal: parent: 'net', set: 'devices' [ 2061.455363][ T5791] kobject: 'gretap0' (00000000b3cd2e29): kobject_uevent_env [ 2061.462666][ T5791] kobject: 'gretap0' (00000000b3cd2e29): fill_kobj_path: path = '/devices/virtual/net/gretap0' [ 2061.473269][ T5791] kobject: 'queues' (00000000984aea5e): kobject_add_internal: parent: 'gretap0', set: '' [ 2061.483838][ T5791] kobject: 'queues' (00000000984aea5e): kobject_uevent_env [ 2061.491075][ T5791] kobject: 'queues' (00000000984aea5e): kobject_uevent_env: filter function caused the event to drop! [ 2061.502034][ T5791] kobject: 'rx-0' (0000000093b220d4): kobject_add_internal: parent: 'queues', set: 'queues' [ 2061.512146][ T5791] kobject: 'rx-0' (0000000093b220d4): kobject_uevent_env [ 2061.519232][ T5791] kobject: 'rx-0' (0000000093b220d4): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/rx-0' [ 2061.530609][ T5791] kobject: 'tx-0' (00000000ebc1fcc7): kobject_add_internal: parent: 'queues', set: 'queues' [ 2061.540804][ T5791] kobject: 'tx-0' (00000000ebc1fcc7): kobject_uevent_env [ 2061.547872][ T5791] kobject: 'tx-0' (00000000ebc1fcc7): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/tx-0' [ 2061.559563][ T5791] kobject: 'batman_adv' (00000000e7bf0f54): kobject_add_internal: parent: 'gretap0', set: '' [ 2061.571239][ T5791] kobject: 'erspan0' (000000003baa2c1d): kobject_add_internal: parent: 'net', set: 'devices' [ 2061.582134][ T5791] kobject: 'erspan0' (000000003baa2c1d): kobject_uevent_env [ 2061.589495][ T5791] kobject: 'erspan0' (000000003baa2c1d): fill_kobj_path: path = '/devices/virtual/net/erspan0' [ 2061.599956][ T5791] kobject: 'queues' (000000001a47be18): kobject_add_internal: parent: 'erspan0', set: '' [ 2061.610313][ T5791] kobject: 'queues' (000000001a47be18): kobject_uevent_env [ 2061.617536][ T5791] kobject: 'queues' (000000001a47be18): kobject_uevent_env: filter function caused the event to drop! [ 2061.628496][ T5791] kobject: 'rx-0' (00000000a84cdd18): kobject_add_internal: parent: 'queues', set: 'queues' [ 2061.638610][ T5791] kobject: 'rx-0' (00000000a84cdd18): kobject_uevent_env [ 2061.645642][ T5791] kobject: 'rx-0' (00000000a84cdd18): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/rx-0' [ 2061.657095][ T5791] kobject: 'tx-0' (00000000f734807d): kobject_add_internal: parent: 'queues', set: 'queues' [ 2061.667376][ T5791] kobject: 'tx-0' (00000000f734807d): kobject_uevent_env [ 2061.674407][ T5791] kobject: 'tx-0' (00000000f734807d): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/tx-0' [ 2061.686201][ T5791] kobject: 'batman_adv' (0000000056b5841d): kobject_add_internal: parent: 'erspan0', set: '' [ 2061.697507][ T125] kobject: 'ip6gretap0' (000000005bf2b77d): kobject_cleanup, parent 00000000e5fbc8a3 [ 2061.699815][ T5796] kobject: 'nfs_client' (000000001e9bcdb2): kobject_add_internal: parent: 'net', set: 'nfs' [ 2061.707311][ T5788] kobject: 'ip6gre0' (00000000bd5e077c): kobject_add_internal: parent: 'net', set: 'devices' [ 2061.720928][ T5796] kobject: 'nfs_client' (000000001e9bcdb2): kobject_uevent_env [ 2061.729087][ T125] kobject: 'ip6gretap0' (000000005bf2b77d): calling ktype release [ 2061.736149][ T5796] kobject: 'nfs_client' (000000001e9bcdb2): fill_kobj_path: path = '/fs/nfs/net/nfs_client' [ 2061.744553][ T5788] kobject: 'ip6gre0' (00000000bd5e077c): kobject_uevent_env [ 2061.758690][ T5796] IPVS: ftp: loaded support on port[0] = 21 [ 2061.761521][ T125] kobject: 'ip6gretap0': free name [ 2061.772629][ T5788] kobject: 'ip6gre0' (00000000bd5e077c): fill_kobj_path: path = '/devices/virtual/net/ip6gre0' [ 2061.783278][ T5788] kobject: 'queues' (000000000ac8349a): kobject_add_internal: parent: 'ip6gre0', set: '' [ 2061.793731][ T5788] kobject: 'queues' (000000000ac8349a): kobject_uevent_env [ 2061.801016][ T5788] kobject: 'queues' (000000000ac8349a): kobject_uevent_env: filter function caused the event to drop! [ 2061.812123][ T5788] kobject: 'rx-0' (00000000fecd764a): kobject_add_internal: parent: 'queues', set: 'queues' [ 2061.822272][ T5788] kobject: 'rx-0' (00000000fecd764a): kobject_uevent_env [ 2061.829390][ T5788] kobject: 'rx-0' (00000000fecd764a): fill_kobj_path: path = '/devices/virtual/net/ip6gre0/queues/rx-0' [ 2061.840588][ T5788] kobject: 'tx-0' (0000000024576a76): kobject_add_internal: parent: 'queues', set: 'queues' [ 2061.851397][ T5788] kobject: 'tx-0' (0000000024576a76): kobject_uevent_env [ 2061.858457][ T5788] kobject: 'tx-0' (0000000024576a76): fill_kobj_path: path = '/devices/virtual/net/ip6gre0/queues/tx-0' [ 2061.870624][ T5786] kobject: 'ip6gre0' (00000000d5e969ef): kobject_add_internal: parent: 'net', set: 'devices' [ 2061.881588][ T5786] kobject: 'ip6gre0' (00000000d5e969ef): kobject_uevent_env [ 2061.889020][ T5786] kobject: 'ip6gre0' (00000000d5e969ef): fill_kobj_path: path = '/devices/virtual/net/ip6gre0' [ 2061.899484][ T5786] kobject: 'queues' (000000006e199e7c): kobject_add_internal: parent: 'ip6gre0', set: '' [ 2061.910023][ T5786] kobject: 'queues' (000000006e199e7c): kobject_uevent_env [ 2061.917204][ T5786] kobject: 'queues' (000000006e199e7c): kobject_uevent_env: filter function caused the event to drop! [ 2061.928640][ T5786] kobject: 'rx-0' (0000000059a8fb39): kobject_add_internal: parent: 'queues', set: 'queues' [ 2061.938927][ T5786] kobject: 'rx-0' (0000000059a8fb39): kobject_uevent_env [ 2061.946011][ T5786] kobject: 'rx-0' (0000000059a8fb39): fill_kobj_path: path = '/devices/virtual/net/ip6gre0/queues/rx-0' [ 2061.957221][ T5786] kobject: 'tx-0' (000000000ed7cb1e): kobject_add_internal: parent: 'queues', set: 'queues' [ 2061.967473][ T5786] kobject: 'tx-0' (000000000ed7cb1e): kobject_uevent_env [ 2061.974601][ T5786] kobject: 'tx-0' (000000000ed7cb1e): fill_kobj_path: path = '/devices/virtual/net/ip6gre0/queues/tx-0' [ 2061.987447][ T5786] kobject: 'syz_tun' (0000000077d4f75c): kobject_add_internal: parent: 'net', set: 'devices' [ 2061.988543][ T5794] kobject: 'nfs_client' (00000000b8a2c6e5): kobject_add_internal: parent: 'net', set: 'nfs' [ 2061.998512][ T5786] kobject: 'syz_tun' (0000000077d4f75c): kobject_uevent_env [ 2062.008104][ T5794] kobject: 'nfs_client' (00000000b8a2c6e5): kobject_uevent_env [ 2062.018035][ T5786] kobject: 'syz_tun' (0000000077d4f75c): fill_kobj_path: path = '/devices/virtual/net/syz_tun' [ 2062.022886][ T5794] kobject: 'nfs_client' (00000000b8a2c6e5): fill_kobj_path: path = '/fs/nfs/net/nfs_client' [ 2062.036034][ T5786] kobject: 'queues' (00000000a075c412): kobject_add_internal: parent: 'syz_tun', set: '' [ 2062.045880][ T5794] IPVS: ftp: loaded support on port[0] = 21 [ 2062.056962][ T5786] kobject: 'queues' (00000000a075c412): kobject_uevent_env [ 2062.067199][ T5786] kobject: 'queues' (00000000a075c412): kobject_uevent_env: filter function caused the event to drop! [ 2062.079754][ T5786] kobject: 'rx-0' (000000003a79a752): kobject_add_internal: parent: 'queues', set: 'queues' [ 2062.090017][ T5786] kobject: 'rx-0' (000000003a79a752): kobject_uevent_env [ 2062.097049][ T5786] kobject: 'rx-0' (000000003a79a752): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/rx-0' [ 2062.108266][ T5786] kobject: 'tx-0' (0000000081da71bd): kobject_add_internal: parent: 'queues', set: 'queues' [ 2062.118411][ T5786] kobject: 'tx-0' (0000000081da71bd): kobject_uevent_env [ 2062.125510][ T5786] kobject: 'tx-0' (0000000081da71bd): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0' [ 2062.137121][ T5786] kobject: 'batman_adv' (00000000f1c27ef8): kobject_add_internal: parent: 'syz_tun', set: '' [ 2062.148283][ T5791] kobject: 'ip_vti0' (00000000f733b5cf): kobject_add_internal: parent: 'net', set: 'devices' [ 2062.160262][ T5791] kobject: 'ip_vti0' (00000000f733b5cf): kobject_uevent_env [ 2062.167588][ T5791] kobject: 'ip_vti0' (00000000f733b5cf): fill_kobj_path: path = '/devices/virtual/net/ip_vti0' [ 2062.178061][ T5791] kobject: 'queues' (0000000009910ca3): kobject_add_internal: parent: 'ip_vti0', set: '' [ 2062.188429][ T5791] kobject: 'queues' (0000000009910ca3): kobject_uevent_env [ 2062.195634][ T5791] kobject: 'queues' (0000000009910ca3): kobject_uevent_env: filter function caused the event to drop! [ 2062.206615][ T5791] kobject: 'rx-0' (00000000b8f6a033): kobject_add_internal: parent: 'queues', set: 'queues' [ 2062.216752][ T5791] kobject: 'rx-0' (00000000b8f6a033): kobject_uevent_env [ 2062.223811][ T5791] kobject: 'rx-0' (00000000b8f6a033): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/rx-0' [ 2062.234985][ T5791] kobject: 'tx-0' (00000000d6a58eb6): kobject_add_internal: parent: 'queues', set: 'queues' [ 2062.245182][ T5791] kobject: 'tx-0' (00000000d6a58eb6): kobject_uevent_env [ 2062.252246][ T5791] kobject: 'tx-0' (00000000d6a58eb6): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/tx-0' [ 2062.263943][ T125] kobject: 'ip6gre0' (00000000deafff36): kobject_cleanup, parent 00000000e5fbc8a3 [ 2062.264028][ T5796] kobject: 'lo' (0000000011e99198): kobject_add_internal: parent: 'net', set: 'devices' [ 2062.281735][ T125] kobject: 'ip6gre0' (00000000deafff36): calling ktype release [ 2062.286087][ T5796] kobject: 'lo' (0000000011e99198): kobject_uevent_env [ 2062.290426][ T125] kobject: 'ip6gre0': free name [ 2062.297599][ T5796] kobject: 'lo' (0000000011e99198): fill_kobj_path: path = '/devices/virtual/net/lo' [ 2062.311800][ T5796] kobject: 'queues' (00000000c3234450): kobject_add_internal: parent: 'lo', set: '' [ 2062.321722][ T5796] kobject: 'queues' (00000000c3234450): kobject_uevent_env [ 2062.328936][ T5796] kobject: 'queues' (00000000c3234450): kobject_uevent_env: filter function caused the event to drop! [ 2062.339903][ T5796] kobject: 'rx-0' (0000000073c4587f): kobject_add_internal: parent: 'queues', set: 'queues' [ 2062.350048][ T5796] kobject: 'rx-0' (0000000073c4587f): kobject_uevent_env [ 2062.357098][ T5796] kobject: 'rx-0' (0000000073c4587f): fill_kobj_path: path = '/devices/virtual/net/lo/queues/rx-0' [ 2062.369844][ T5796] kobject: 'tx-0' (00000000e6d61058): kobject_add_internal: parent: 'queues', set: 'queues' [ 2062.380049][ T5796] kobject: 'tx-0' (00000000e6d61058): kobject_uevent_env [ 2062.387135][ T5796] kobject: 'tx-0' (00000000e6d61058): fill_kobj_path: path = '/devices/virtual/net/lo/queues/tx-0' [ 2062.398682][ T5788] kobject: 'syz_tun' (00000000c35de10e): kobject_add_internal: parent: 'net', set: 'devices' [ 2062.410864][ T5788] kobject: 'syz_tun' (00000000c35de10e): kobject_uevent_env [ 2062.418398][ T5788] kobject: 'syz_tun' (00000000c35de10e): fill_kobj_path: path = '/devices/virtual/net/syz_tun' [ 2062.428923][ T5788] kobject: 'queues' (00000000c46fadc1): kobject_add_internal: parent: 'syz_tun', set: '' [ 2062.439287][ T5788] kobject: 'queues' (00000000c46fadc1): kobject_uevent_env [ 2062.446495][ T5788] kobject: 'queues' (00000000c46fadc1): kobject_uevent_env: filter function caused the event to drop! [ 2062.457723][ T5788] kobject: 'rx-0' (0000000015d93d45): kobject_add_internal: parent: 'queues', set: 'queues' [ 2062.468016][ T5788] kobject: 'rx-0' (0000000015d93d45): kobject_uevent_env [ 2062.475191][ T5788] kobject: 'rx-0' (0000000015d93d45): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/rx-0' [ 2062.486466][ T5788] kobject: 'tx-0' (000000003c2c1f7e): kobject_add_internal: parent: 'queues', set: 'queues' [ 2062.496643][ T5788] kobject: 'tx-0' (000000003c2c1f7e): kobject_uevent_env [ 2062.503740][ T5788] kobject: 'tx-0' (000000003c2c1f7e): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0' [ 2062.515608][ T5788] kobject: 'batman_adv' (00000000575897ff): kobject_add_internal: parent: 'syz_tun', set: '' [ 2062.526977][ T5794] kobject: 'lo' (000000009bdb673c): kobject_add_internal: parent: 'net', set: 'devices' [ 2062.537495][ T5794] kobject: 'lo' (000000009bdb673c): kobject_uevent_env [ 2062.544438][ T5794] kobject: 'lo' (000000009bdb673c): fill_kobj_path: path = '/devices/virtual/net/lo' [ 2062.554011][ T5794] kobject: 'queues' (00000000045c3e88): kobject_add_internal: parent: 'lo', set: '' [ 2062.563934][ T5794] kobject: 'queues' (00000000045c3e88): kobject_uevent_env [ 2062.571133][ T5794] kobject: 'queues' (00000000045c3e88): kobject_uevent_env: filter function caused the event to drop! [ 2062.582101][ T5794] kobject: 'rx-0' (0000000098b4c548): kobject_add_internal: parent: 'queues', set: 'queues' [ 2062.592288][ T5794] kobject: 'rx-0' (0000000098b4c548): kobject_uevent_env [ 2062.601661][ T5794] kobject: 'rx-0' (0000000098b4c548): fill_kobj_path: path = '/devices/virtual/net/lo/queues/rx-0' [ 2062.612536][ T5794] kobject: 'tx-0' (00000000d2913f76): kobject_add_internal: parent: 'queues', set: 'queues' [ 2062.622735][ T5794] kobject: 'tx-0' (00000000d2913f76): kobject_uevent_env [ 2062.629808][ T5794] kobject: 'tx-0' (00000000d2913f76): fill_kobj_path: path = '/devices/virtual/net/lo/queues/tx-0' [ 2062.641392][ T5791] kobject: 'ip6_vti0' (00000000e012d1f5): kobject_add_internal: parent: 'net', set: 'devices' [ 2062.652059][ T5791] kobject: 'ip6_vti0' (00000000e012d1f5): kobject_uevent_env [ 2062.659496][ T5791] kobject: 'ip6_vti0' (00000000e012d1f5): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0' [ 2062.670081][ T5791] kobject: 'queues' (000000003ce9e03e): kobject_add_internal: parent: 'ip6_vti0', set: '' [ 2062.680534][ T5791] kobject: 'queues' (000000003ce9e03e): kobject_uevent_env [ 2062.687768][ T5791] kobject: 'queues' (000000003ce9e03e): kobject_uevent_env: filter function caused the event to drop! [ 2062.698745][ T5791] kobject: 'rx-0' (00000000c5e66041): kobject_add_internal: parent: 'queues', set: 'queues' [ 2062.708869][ T5791] kobject: 'rx-0' (00000000c5e66041): kobject_uevent_env [ 2062.715957][ T5791] kobject: 'rx-0' (00000000c5e66041): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0/queues/rx-0' [ 2062.727285][ T5791] kobject: 'tx-0' (000000005258bd96): kobject_add_internal: parent: 'queues', set: 'queues' [ 2062.737506][ T5791] kobject: 'tx-0' (000000005258bd96): kobject_uevent_env [ 2062.744590][ T5791] kobject: 'tx-0' (000000005258bd96): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0/queues/tx-0' [ 2062.756625][ T125] kobject: 'ip6gretap0' (000000004b52eacd): kobject_cleanup, parent 00000000e5fbc8a3 [ 2062.758530][ T5796] kobject: 'tunl0' (00000000cdd0cfa4): kobject_add_internal: parent: 'net', set: 'devices' [ 2062.775574][ T125] kobject: 'ip6gretap0' (000000004b52eacd): calling ktype release [ 2062.779274][ T5796] kobject: 'tunl0' (00000000cdd0cfa4): kobject_uevent_env [ 2062.783916][ T125] kobject: 'ip6gretap0': free name [ 2062.791522][ T5796] kobject: 'tunl0' (00000000cdd0cfa4): fill_kobj_path: path = '/devices/virtual/net/tunl0' [ 2062.806585][ T5796] kobject: 'queues' (000000002ad6f08a): kobject_add_internal: parent: 'tunl0', set: '' [ 2062.816818][ T5796] kobject: 'queues' (000000002ad6f08a): kobject_uevent_env [ 2062.824056][ T5796] kobject: 'queues' (000000002ad6f08a): kobject_uevent_env: filter function caused the event to drop! [ 2062.835105][ T5796] kobject: 'rx-0' (000000009ee2f0a9): kobject_add_internal: parent: 'queues', set: 'queues' [ 2062.845242][ T5796] kobject: 'rx-0' (000000009ee2f0a9): kobject_uevent_env [ 2062.852650][ T5796] kobject: 'rx-0' (000000009ee2f0a9): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/rx-0' [ 2062.863713][ T5796] kobject: 'tx-0' (00000000cdf3d111): kobject_add_internal: parent: 'queues', set: 'queues' [ 2062.874011][ T5796] kobject: 'tx-0' (00000000cdf3d111): kobject_uevent_env [ 2062.881079][ T5796] kobject: 'tx-0' (00000000cdf3d111): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/tx-0' [ 2062.892747][ T5796] kobject: 'gre0' (00000000c31e0b17): kobject_add_internal: parent: 'net', set: 'devices' [ 2062.903273][ T5796] kobject: 'gre0' (00000000c31e0b17): kobject_uevent_env [ 2062.910525][ T5796] kobject: 'gre0' (00000000c31e0b17): fill_kobj_path: path = '/devices/virtual/net/gre0' [ 2062.920439][ T5796] kobject: 'queues' (00000000ec13dbde): kobject_add_internal: parent: 'gre0', set: '' [ 2062.930598][ T5796] kobject: 'queues' (00000000ec13dbde): kobject_uevent_env [ 2062.937828][ T5796] kobject: 'queues' (00000000ec13dbde): kobject_uevent_env: filter function caused the event to drop! [ 2062.948818][ T5796] kobject: 'rx-0' (0000000094b8e208): kobject_add_internal: parent: 'queues', set: 'queues' [ 2062.959004][ T5796] kobject: 'rx-0' (0000000094b8e208): kobject_uevent_env [ 2062.966067][ T5796] kobject: 'rx-0' (0000000094b8e208): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/rx-0' [ 2062.977035][ T5796] kobject: 'tx-0' (000000005719a5c7): kobject_add_internal: parent: 'queues', set: 'queues' [ 2062.987597][ T5796] kobject: 'tx-0' (000000005719a5c7): kobject_uevent_env [ 2062.994644][ T5796] kobject: 'tx-0' (000000005719a5c7): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/tx-0' [ 2063.009956][ T5786] kobject: 'ip6gretap0' (000000001f39eb70): kobject_add_internal: parent: 'net', set: 'devices' [ 2063.021019][ T5786] kobject: 'ip6gretap0' (000000001f39eb70): kobject_uevent_env [ 2063.028682][ T5786] kobject: 'ip6gretap0' (000000001f39eb70): fill_kobj_path: path = '/devices/virtual/net/ip6gretap0' [ 2063.039768][ T5786] kobject: 'queues' (0000000042814df0): kobject_add_internal: parent: 'ip6gretap0', set: '' [ 2063.050412][ T5786] kobject: 'queues' (0000000042814df0): kobject_uevent_env [ 2063.057601][ T5786] kobject: 'queues' (0000000042814df0): kobject_uevent_env: filter function caused the event to drop! [ 2063.068589][ T5786] kobject: 'rx-0' (0000000079258fca): kobject_add_internal: parent: 'queues', set: 'queues' [ 2063.078725][ T5786] kobject: 'rx-0' (0000000079258fca): kobject_uevent_env [ 2063.085770][ T5786] kobject: 'rx-0' (0000000079258fca): fill_kobj_path: path = '/devices/virtual/net/ip6gretap0/queues/rx-0' [ 2063.097327][ T5786] kobject: 'tx-0' (0000000090387281): kobject_add_internal: parent: 'queues', set: 'queues' [ 2063.107543][ T5786] kobject: 'tx-0' (0000000090387281): kobject_uevent_env [ 2063.114803][ T5786] kobject: 'tx-0' (0000000090387281): fill_kobj_path: path = '/devices/virtual/net/ip6gretap0/queues/tx-0' [ 2063.127038][ T5786] kobject: 'batman_adv' (00000000d66f5c5b): kobject_add_internal: parent: 'ip6gretap0', set: '' [ 2063.138612][ T5794] kobject: 'tunl0' (000000004948dcbc): kobject_add_internal: parent: 'net', set: 'devices' [ 2063.149478][ T5794] kobject: 'tunl0' (000000004948dcbc): kobject_uevent_env [ 2063.156627][ T5794] kobject: 'tunl0' (000000004948dcbc): fill_kobj_path: path = '/devices/virtual/net/tunl0' [ 2063.166752][ T5794] kobject: 'queues' (00000000504b9c90): kobject_add_internal: parent: 'tunl0', set: '' [ 2063.177119][ T5794] kobject: 'queues' (00000000504b9c90): kobject_uevent_env [ 2063.184344][ T5794] kobject: 'queues' (00000000504b9c90): kobject_uevent_env: filter function caused the event to drop! [ 2063.195336][ T5794] kobject: 'rx-0' (00000000f0090756): kobject_add_internal: parent: 'queues', set: 'queues' [ 2063.205477][ T5794] kobject: 'rx-0' (00000000f0090756): kobject_uevent_env [ 2063.212547][ T5794] kobject: 'rx-0' (00000000f0090756): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/rx-0' [ 2063.223570][ T5794] kobject: 'tx-0' (000000001857f7d1): kobject_add_internal: parent: 'queues', set: 'queues' [ 2063.233747][ T5794] kobject: 'tx-0' (000000001857f7d1): kobject_uevent_env [ 2063.240830][ T5794] kobject: 'tx-0' (000000001857f7d1): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/tx-0' [ 2063.252349][ T5794] kobject: 'gre0' (000000006bc262ac): kobject_add_internal: parent: 'net', set: 'devices' [ 2063.262793][ T5794] kobject: 'gre0' (000000006bc262ac): kobject_uevent_env [ 2063.269871][ T5794] kobject: 'gre0' (000000006bc262ac): fill_kobj_path: path = '/devices/virtual/net/gre0' [ 2063.279817][ T5794] kobject: 'queues' (0000000077e2ad0e): kobject_add_internal: parent: 'gre0', set: '' [ 2063.289929][ T5794] kobject: 'queues' (0000000077e2ad0e): kobject_uevent_env [ 2063.297105][ T5794] kobject: 'queues' (0000000077e2ad0e): kobject_uevent_env: filter function caused the event to drop! [ 2063.308084][ T5794] kobject: 'rx-0' (00000000f7ecfd9d): kobject_add_internal: parent: 'queues', set: 'queues' [ 2063.318216][ T5794] kobject: 'rx-0' (00000000f7ecfd9d): kobject_uevent_env [ 2063.325341][ T5794] kobject: 'rx-0' (00000000f7ecfd9d): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/rx-0' [ 2063.336272][ T5794] kobject: 'tx-0' (00000000a0a34b32): kobject_add_internal: parent: 'queues', set: 'queues' [ 2063.346496][ T5794] kobject: 'tx-0' (00000000a0a34b32): kobject_uevent_env [ 2063.353560][ T5794] kobject: 'tx-0' (00000000a0a34b32): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/tx-0' [ 2063.365060][ T5791] kobject: 'sit0' (00000000f255fb3a): kobject_add_internal: parent: 'net', set: 'devices' [ 2063.376817][ T5791] kobject: 'sit0' (00000000f255fb3a): kobject_uevent_env [ 2063.384173][ T5791] kobject: 'sit0' (00000000f255fb3a): fill_kobj_path: path = '/devices/virtual/net/sit0' [ 2063.395672][ T5791] kobject: 'queues' (00000000034bcbb8): kobject_add_internal: parent: 'sit0', set: '' [ 2063.405797][ T5791] kobject: 'queues' (00000000034bcbb8): kobject_uevent_env [ 2063.413205][ T5791] kobject: 'queues' (00000000034bcbb8): kobject_uevent_env: filter function caused the event to drop! [ 2063.424213][ T5791] kobject: 'rx-0' (0000000058856c65): kobject_add_internal: parent: 'queues', set: 'queues' [ 2063.434404][ T5791] kobject: 'rx-0' (0000000058856c65): kobject_uevent_env [ 2063.441598][ T5791] kobject: 'rx-0' (0000000058856c65): fill_kobj_path: path = '/devices/virtual/net/sit0/queues/rx-0' [ 2063.452560][ T5791] kobject: 'tx-0' (000000003577141b): kobject_add_internal: parent: 'queues', set: 'queues' [ 2063.462746][ T5791] kobject: 'tx-0' (000000003577141b): kobject_uevent_env [ 2063.469816][ T5791] kobject: 'tx-0' (000000003577141b): fill_kobj_path: path = '/devices/virtual/net/sit0/queues/tx-0' [ 2063.481402][ T125] kobject: 'ip6gre0' (00000000e3a24d41): kobject_cleanup, parent 00000000e5fbc8a3 [ 2063.481635][ T5796] kobject: 'gretap0' (00000000353ed6c0): kobject_add_internal: parent: 'net', set: 'devices' [ 2063.490670][ T125] kobject: 'ip6gre0' (00000000e3a24d41): calling ktype release [ 2063.501529][ T5796] kobject: 'gretap0' (00000000353ed6c0): kobject_uevent_env [ 2063.508739][ T125] kobject: 'ip6gre0': free name [ 2063.518687][ T5796] kobject: 'gretap0' (00000000353ed6c0): fill_kobj_path: path = '/devices/virtual/net/gretap0' [ 2063.531029][ T5796] kobject: 'queues' (000000000e1f653a): kobject_add_internal: parent: 'gretap0', set: '' [ 2063.542082][ T5796] kobject: 'queues' (000000000e1f653a): kobject_uevent_env [ 2063.549372][ T5796] kobject: 'queues' (000000000e1f653a): kobject_uevent_env: filter function caused the event to drop! [ 2063.560385][ T5796] kobject: 'rx-0' (0000000032c4a1f0): kobject_add_internal: parent: 'queues', set: 'queues' [ 2063.570536][ T5796] kobject: 'rx-0' (0000000032c4a1f0): kobject_uevent_env [ 2063.577658][ T5796] kobject: 'rx-0' (0000000032c4a1f0): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/rx-0' [ 2063.588845][ T5796] kobject: 'tx-0' (000000003c5d0270): kobject_add_internal: parent: 'queues', set: 'queues' [ 2063.599089][ T5796] kobject: 'tx-0' (000000003c5d0270): kobject_uevent_env [ 2063.606143][ T5796] kobject: 'tx-0' (000000003c5d0270): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/tx-0' [ 2063.617869][ T5796] kobject: 'batman_adv' (000000006cbecf3e): kobject_add_internal: parent: 'gretap0', set: '' [ 2063.629048][ T5796] kobject: 'erspan0' (0000000009d2a356): kobject_add_internal: parent: 'net', set: 'devices' [ 2063.639730][ T5796] kobject: 'erspan0' (0000000009d2a356): kobject_uevent_env [ 2063.647372][ T5796] kobject: 'erspan0' (0000000009d2a356): fill_kobj_path: path = '/devices/virtual/net/erspan0' [ 2063.657947][ T5796] kobject: 'queues' (000000000f69b16f): kobject_add_internal: parent: 'erspan0', set: '' [ 2063.668336][ T5796] kobject: 'queues' (000000000f69b16f): kobject_uevent_env [ 2063.675554][ T5796] kobject: 'queues' (000000000f69b16f): kobject_uevent_env: filter function caused the event to drop! [ 2063.686549][ T5796] kobject: 'rx-0' (00000000b0786d25): kobject_add_internal: parent: 'queues', set: 'queues' [ 2063.696678][ T5796] kobject: 'rx-0' (00000000b0786d25): kobject_uevent_env [ 2063.703759][ T5796] kobject: 'rx-0' (00000000b0786d25): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/rx-0' [ 2063.714972][ T5796] kobject: 'tx-0' (00000000d90a2bdb): kobject_add_internal: parent: 'queues', set: 'queues' [ 2063.725216][ T5796] kobject: 'tx-0' (00000000d90a2bdb): kobject_uevent_env [ 2063.732266][ T5796] kobject: 'tx-0' (00000000d90a2bdb): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/tx-0' [ 2063.744167][ T5796] kobject: 'batman_adv' (000000000fe55e9b): kobject_add_internal: parent: 'erspan0', set: '' [ 2063.755912][ T5786] kobject: 'bridge0' (0000000049e70686): kobject_add_internal: parent: 'net', set: 'devices' [ 2063.766620][ T5786] kobject: 'bridge0' (0000000049e70686): kobject_uevent_env [ 2063.774317][ T5786] kobject: 'bridge0' (0000000049e70686): fill_kobj_path: path = '/devices/virtual/net/bridge0' [ 2063.784926][ T5786] kobject: 'queues' (000000000cd2d393): kobject_add_internal: parent: 'bridge0', set: '' [ 2063.795367][ T5786] kobject: 'queues' (000000000cd2d393): kobject_uevent_env [ 2063.802626][ T5786] kobject: 'queues' (000000000cd2d393): kobject_uevent_env: filter function caused the event to drop! [ 2063.813632][ T5786] kobject: 'rx-0' (000000000d36bdde): kobject_add_internal: parent: 'queues', set: 'queues' [ 2063.823789][ T5786] kobject: 'rx-0' (000000000d36bdde): kobject_uevent_env [ 2063.830873][ T5786] kobject: 'rx-0' (000000000d36bdde): fill_kobj_path: path = '/devices/virtual/net/bridge0/queues/rx-0' [ 2063.842072][ T5786] kobject: 'tx-0' (000000001320a822): kobject_add_internal: parent: 'queues', set: 'queues' [ 2063.852291][ T5786] kobject: 'tx-0' (000000001320a822): kobject_uevent_env [ 2063.859399][ T5786] kobject: 'tx-0' (000000001320a822): fill_kobj_path: path = '/devices/virtual/net/bridge0/queues/tx-0' [ 2063.871442][ T5786] kobject: 'brif' (0000000088c0c358): kobject_add_internal: parent: 'bridge0', set: '' [ 2063.881793][ T5786] kobject: 'batman_adv' (00000000ac58caf8): kobject_add_internal: parent: 'bridge0', set: '' [ 2063.893117][ T5794] kobject: 'gretap0' (00000000f3f783bf): kobject_add_internal: parent: 'net', set: 'devices' [ 2063.904213][ T5794] kobject: 'gretap0' (00000000f3f783bf): kobject_uevent_env [ 2063.911561][ T5794] kobject: 'gretap0' (00000000f3f783bf): fill_kobj_path: path = '/devices/virtual/net/gretap0' [ 2063.921976][ T5794] kobject: 'queues' (00000000eb7bc5c4): kobject_add_internal: parent: 'gretap0', set: '' [ 2063.932363][ T5794] kobject: 'queues' (00000000eb7bc5c4): kobject_uevent_env [ 2063.939590][ T5794] kobject: 'queues' (00000000eb7bc5c4): kobject_uevent_env: filter function caused the event to drop! [ 2063.950565][ T5794] kobject: 'rx-0' (00000000712605fd): kobject_add_internal: parent: 'queues', set: 'queues' [ 2063.960727][ T5794] kobject: 'rx-0' (00000000712605fd): kobject_uevent_env [ 2063.967823][ T5794] kobject: 'rx-0' (00000000712605fd): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/rx-0' [ 2063.979098][ T5794] kobject: 'tx-0' (0000000001175d1d): kobject_add_internal: parent: 'queues', set: 'queues' [ 2063.989323][ T5794] kobject: 'tx-0' (0000000001175d1d): kobject_uevent_env [ 2063.996391][ T5794] kobject: 'tx-0' (0000000001175d1d): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/tx-0' [ 2064.008276][ T5794] kobject: 'batman_adv' (0000000097ee7e75): kobject_add_internal: parent: 'gretap0', set: '' [ 2064.019398][ T5794] kobject: 'erspan0' (000000001a42d9aa): kobject_add_internal: parent: 'net', set: 'devices' [ 2064.030156][ T5794] kobject: 'erspan0' (000000001a42d9aa): kobject_uevent_env [ 2064.037505][ T5794] kobject: 'erspan0' (000000001a42d9aa): fill_kobj_path: path = '/devices/virtual/net/erspan0' [ 2064.047949][ T5794] kobject: 'queues' (000000008ad24b26): kobject_add_internal: parent: 'erspan0', set: '' [ 2064.058698][ T5794] kobject: 'queues' (000000008ad24b26): kobject_uevent_env [ 2064.065889][ T5794] kobject: 'queues' (000000008ad24b26): kobject_uevent_env: filter function caused the event to drop! [ 2064.076862][ T5794] kobject: 'rx-0' (00000000608c7e75): kobject_add_internal: parent: 'queues', set: 'queues' [ 2064.087013][ T5794] kobject: 'rx-0' (00000000608c7e75): kobject_uevent_env [ 2064.094051][ T5794] kobject: 'rx-0' (00000000608c7e75): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/rx-0' [ 2064.105258][ T5794] kobject: 'tx-0' (0000000011781cca): kobject_add_internal: parent: 'queues', set: 'queues' [ 2064.115430][ T5794] kobject: 'tx-0' (0000000011781cca): kobject_uevent_env [ 2064.122519][ T5794] kobject: 'tx-0' (0000000011781cca): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/tx-0' [ 2064.134177][ T5794] kobject: 'batman_adv' (0000000033d6f7e3): kobject_add_internal: parent: 'erspan0', set: '' [ 2064.145342][ T5791] kobject: 'ip6tnl0' (000000006086eb24): kobject_add_internal: parent: 'net', set: 'devices' [ 2064.156216][ T5791] kobject: 'ip6tnl0' (000000006086eb24): kobject_uevent_env [ 2064.163578][ T5791] kobject: 'ip6tnl0' (000000006086eb24): fill_kobj_path: path = '/devices/virtual/net/ip6tnl0' [ 2064.174259][ T5791] kobject: 'queues' (000000005334ddf5): kobject_add_internal: parent: 'ip6tnl0', set: '' [ 2064.184646][ T5791] kobject: 'queues' (000000005334ddf5): kobject_uevent_env [ 2064.191862][ T5791] kobject: 'queues' (000000005334ddf5): kobject_uevent_env: filter function caused the event to drop! [ 2064.202855][ T5791] kobject: 'rx-0' (000000000943a5aa): kobject_add_internal: parent: 'queues', set: 'queues' [ 2064.213000][ T5791] kobject: 'rx-0' (000000000943a5aa): kobject_uevent_env [ 2064.220078][ T5791] kobject: 'rx-0' (000000000943a5aa): fill_kobj_path: path = '/devices/virtual/net/ip6tnl0/queues/rx-0' [ 2064.231249][ T5791] kobject: 'tx-0' (000000001f65d30f): kobject_add_internal: parent: 'queues', set: 'queues' [ 2064.241456][ T5791] kobject: 'tx-0' (000000001f65d30f): kobject_uevent_env [ 2064.248511][ T5791] kobject: 'tx-0' (000000001f65d30f): fill_kobj_path: path = '/devices/virtual/net/ip6tnl0/queues/tx-0' [ 2064.260479][ T125] kobject: 'ip6gretap0' (00000000bdb802e8): kobject_cleanup, parent 00000000e5fbc8a3 [ 2064.260663][ T5796] kobject: 'ip_vti0' (000000000ed35aaa): kobject_add_internal: parent: 'net', set: 'devices' [ 2064.271749][ T125] kobject: 'ip6gretap0' (00000000bdb802e8): calling ktype release [ 2064.280820][ T5796] kobject: 'ip_vti0' (000000000ed35aaa): kobject_uevent_env [ 2064.288836][ T125] kobject: 'ip6gretap0': free name [ 2064.295302][ T5796] kobject: 'ip_vti0' (000000000ed35aaa): fill_kobj_path: path = '/devices/virtual/net/ip_vti0' [ 2064.310946][ T5796] kobject: 'queues' (000000003a0c7feb): kobject_add_internal: parent: 'ip_vti0', set: '' [ 2064.321332][ T5796] kobject: 'queues' (000000003a0c7feb): kobject_uevent_env [ 2064.328552][ T5796] kobject: 'queues' (000000003a0c7feb): kobject_uevent_env: filter function caused the event to drop! [ 2064.339530][ T5796] kobject: 'rx-0' (0000000001c82bf8): kobject_add_internal: parent: 'queues', set: 'queues' [ 2064.349649][ T5796] kobject: 'rx-0' (0000000001c82bf8): kobject_uevent_env [ 2064.356670][ T5796] kobject: 'rx-0' (0000000001c82bf8): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/rx-0' [ 2064.367894][ T5796] kobject: 'tx-0' (0000000081e0ae5e): kobject_add_internal: parent: 'queues', set: 'queues' [ 2064.378048][ T5796] kobject: 'tx-0' (0000000081e0ae5e): kobject_uevent_env [ 2064.385199][ T5796] kobject: 'tx-0' (0000000081e0ae5e): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/tx-0' [ 2064.398248][ T5796] kobject: 'ip6_vti0' (00000000f7369247): kobject_add_internal: parent: 'net', set: 'devices' [ 2064.409177][ T5796] kobject: 'ip6_vti0' (00000000f7369247): kobject_uevent_env [ 2064.416581][ T5796] kobject: 'ip6_vti0' (00000000f7369247): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0' [ 2064.427196][ T5796] kobject: 'queues' (000000008aaa78cd): kobject_add_internal: parent: 'ip6_vti0', set: '' [ 2064.437650][ T5796] kobject: 'queues' (000000008aaa78cd): kobject_uevent_env [ 2064.445148][ T5796] kobject: 'queues' (000000008aaa78cd): kobject_uevent_env: filter function caused the event to drop! [ 2064.456131][ T5796] kobject: 'rx-0' (0000000000cd4bc9): kobject_add_internal: parent: 'queues', set: 'queues' [ 2064.466290][ T5796] kobject: 'rx-0' (0000000000cd4bc9): kobject_uevent_env [ 2064.473358][ T5796] kobject: 'rx-0' (0000000000cd4bc9): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0/queues/rx-0' [ 2064.484649][ T5796] kobject: 'tx-0' (00000000ef48a274): kobject_add_internal: parent: 'queues', set: 'queues' [ 2064.494832][ T5796] kobject: 'tx-0' (00000000ef48a274): kobject_uevent_env [ 2064.501930][ T5796] kobject: 'tx-0' (00000000ef48a274): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0/queues/tx-0' [ 2064.514244][ T5786] kobject: 'vcan0' (00000000df8380aa): kobject_add_internal: parent: 'net', set: 'devices' [ 2064.526115][ T5786] kobject: 'vcan0' (00000000df8380aa): kobject_uevent_env [ 2064.533276][ T5786] kobject: 'vcan0' (00000000df8380aa): fill_kobj_path: path = '/devices/virtual/net/vcan0' [ 2064.543443][ T5786] kobject: 'queues' (00000000efb1960e): kobject_add_internal: parent: 'vcan0', set: '' [ 2064.553670][ T5786] kobject: 'queues' (00000000efb1960e): kobject_uevent_env [ 2064.560875][ T5786] kobject: 'queues' (00000000efb1960e): kobject_uevent_env: filter function caused the event to drop! [ 2064.571846][ T5786] kobject: 'rx-0' (000000007e2ed9a5): kobject_add_internal: parent: 'queues', set: 'queues' [ 2064.581947][ T5786] kobject: 'rx-0' (000000007e2ed9a5): kobject_uevent_env [ 2064.588959][ T5786] kobject: 'rx-0' (000000007e2ed9a5): fill_kobj_path: path = '/devices/virtual/net/vcan0/queues/rx-0' [ 2064.599980][ T5786] kobject: 'tx-0' (000000009afa1f84): kobject_add_internal: parent: 'queues', set: 'queues' [ 2064.610168][ T5786] kobject: 'tx-0' (000000009afa1f84): kobject_uevent_env [ 2064.617237][ T5786] kobject: 'tx-0' (000000009afa1f84): fill_kobj_path: path = '/devices/virtual/net/vcan0/queues/tx-0' [ 2064.628885][ T5794] kobject: 'ip_vti0' (00000000094ec656): kobject_add_internal: parent: 'net', set: 'devices' [ 2064.640091][ T5794] kobject: 'ip_vti0' (00000000094ec656): kobject_uevent_env [ 2064.647510][ T5794] kobject: 'ip_vti0' (00000000094ec656): fill_kobj_path: path = '/devices/virtual/net/ip_vti0' [ 2064.657963][ T5794] kobject: 'queues' (00000000f58545bf): kobject_add_internal: parent: 'ip_vti0', set: '' [ 2064.668340][ T5794] kobject: 'queues' (00000000f58545bf): kobject_uevent_env [ 2064.675553][ T5794] kobject: 'queues' (00000000f58545bf): kobject_uevent_env: filter function caused the event to drop! [ 2064.686535][ T5794] kobject: 'rx-0' (000000008721121e): kobject_add_internal: parent: 'queues', set: 'queues' [ 2064.696748][ T5794] kobject: 'rx-0' (000000008721121e): kobject_uevent_env [ 2064.704151][ T5794] kobject: 'rx-0' (000000008721121e): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/rx-0' [ 2064.715355][ T5794] kobject: 'tx-0' (000000003f417a24): kobject_add_internal: parent: 'queues', set: 'queues' [ 2064.725519][ T5794] kobject: 'tx-0' (000000003f417a24): kobject_uevent_env [ 2064.732591][ T5794] kobject: 'tx-0' (000000003f417a24): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/tx-0' [ 2064.744256][ T5791] kobject: 'ip6gre0' (000000009978e4a7): kobject_add_internal: parent: 'net', set: 'devices' [ 2064.755304][ T5791] kobject: 'ip6gre0' (000000009978e4a7): kobject_uevent_env [ 2064.762670][ T5791] kobject: 'ip6gre0' (000000009978e4a7): fill_kobj_path: path = '/devices/virtual/net/ip6gre0' [ 2064.773104][ T5791] kobject: 'queues' (00000000fe9957b2): kobject_add_internal: parent: 'ip6gre0', set: '' [ 2064.783483][ T5791] kobject: 'queues' (00000000fe9957b2): kobject_uevent_env [ 2064.790732][ T5791] kobject: 'queues' (00000000fe9957b2): kobject_uevent_env: filter function caused the event to drop! [ 2064.801717][ T5791] kobject: 'rx-0' (0000000047c7d50a): kobject_add_internal: parent: 'queues', set: 'queues' [ 2064.811854][ T5791] kobject: 'rx-0' (0000000047c7d50a): kobject_uevent_env [ 2064.818938][ T5791] kobject: 'rx-0' (0000000047c7d50a): fill_kobj_path: path = '/devices/virtual/net/ip6gre0/queues/rx-0' [ 2064.830119][ T5791] kobject: 'tx-0' (000000008cb9ac0f): kobject_add_internal: parent: 'queues', set: 'queues' [ 2064.840317][ T5791] kobject: 'tx-0' (000000008cb9ac0f): kobject_uevent_env [ 2064.847433][ T5791] kobject: 'tx-0' (000000008cb9ac0f): fill_kobj_path: path = '/devices/virtual/net/ip6gre0/queues/tx-0' [ 2064.859263][ T125] kobject: 'ip6gre0' (00000000a98ff74f): kobject_cleanup, parent 00000000e5fbc8a3 [ 2064.860484][ T5791] kobject: 'syz_tun' (000000001fa0523f): kobject_add_internal: parent: 'net', set: 'devices' [ 2064.879427][ T5791] kobject: 'syz_tun' (000000001fa0523f): kobject_uevent_env [ 2064.881344][ T125] kobject: 'ip6gre0' (00000000a98ff74f): calling ktype release [ 2064.886769][ T5791] kobject: 'syz_tun' (000000001fa0523f): fill_kobj_path: path = '/devices/virtual/net/syz_tun' [ 2064.897188][ T125] kobject: 'ip6gre0': free name [ 2064.904816][ T5791] kobject: 'queues' (00000000998fb774): kobject_add_internal: parent: 'syz_tun', set: '' [ 2064.919950][ T5791] kobject: 'queues' (00000000998fb774): kobject_uevent_env [ 2064.927162][ T5791] kobject: 'queues' (00000000998fb774): kobject_uevent_env: filter function caused the event to drop! [ 2064.938129][ T5791] kobject: 'rx-0' (00000000be56a84b): kobject_add_internal: parent: 'queues', set: 'queues' [ 2064.949007][ T5791] kobject: 'rx-0' (00000000be56a84b): kobject_uevent_env [ 2064.956097][ T5791] kobject: 'rx-0' (00000000be56a84b): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/rx-0' [ 2064.967263][ T5791] kobject: 'tx-0' (000000006c8f5b77): kobject_add_internal: parent: 'queues', set: 'queues' [ 2064.977450][ T5791] kobject: 'tx-0' (000000006c8f5b77): kobject_uevent_env [ 2064.984537][ T5791] kobject: 'tx-0' (000000006c8f5b77): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0' [ 2064.996222][ T5791] kobject: 'batman_adv' (000000008530f551): kobject_add_internal: parent: 'syz_tun', set: '' [ 2065.007398][ T5788] kobject: 'ip6gretap0' (00000000f210d1b2): kobject_add_internal: parent: 'net', set: 'devices' [ 2065.018780][ T5788] kobject: 'ip6gretap0' (00000000f210d1b2): kobject_uevent_env [ 2065.026604][ T5788] kobject: 'ip6gretap0' (00000000f210d1b2): fill_kobj_path: path = '/devices/virtual/net/ip6gretap0' [ 2065.037609][ T5788] kobject: 'queues' (00000000b55e4223): kobject_add_internal: parent: 'ip6gretap0', set: '' [ 2065.048339][ T5788] kobject: 'queues' (00000000b55e4223): kobject_uevent_env [ 2065.055832][ T5788] kobject: 'queues' (00000000b55e4223): kobject_uevent_env: filter function caused the event to drop! [ 2065.066820][ T5788] kobject: 'rx-0' (00000000a5f38175): kobject_add_internal: parent: 'queues', set: 'queues' [ 2065.076971][ T5788] kobject: 'rx-0' (00000000a5f38175): kobject_uevent_env [ 2065.084008][ T5788] kobject: 'rx-0' (00000000a5f38175): fill_kobj_path: path = '/devices/virtual/net/ip6gretap0/queues/rx-0' [ 2065.095762][ T5788] kobject: 'tx-0' (000000000f97e318): kobject_add_internal: parent: 'queues', set: 'queues' [ 2065.106069][ T5788] kobject: 'tx-0' (000000000f97e318): kobject_uevent_env [ 2065.113294][ T5788] kobject: 'tx-0' (000000000f97e318): fill_kobj_path: path = '/devices/virtual/net/ip6gretap0/queues/tx-0' [ 2065.125407][ T5788] kobject: 'batman_adv' (00000000b076db0f): kobject_add_internal: parent: 'ip6gretap0', set: '' [ 2065.137244][ T5788] kobject: 'bridge0' (000000002386bc80): kobject_add_internal: parent: 'net', set: 'devices' [ 2065.148075][ T5788] kobject: 'bridge0' (000000002386bc80): kobject_uevent_env [ 2065.155505][ T5788] kobject: 'bridge0' (000000002386bc80): fill_kobj_path: path = '/devices/virtual/net/bridge0' [ 2065.165980][ T5788] kobject: 'queues' (00000000420b55b8): kobject_add_internal: parent: 'bridge0', set: '' [ 2065.176470][ T5788] kobject: 'queues' (00000000420b55b8): kobject_uevent_env [ 2065.183668][ T5788] kobject: 'queues' (00000000420b55b8): kobject_uevent_env: filter function caused the event to drop! [ 2065.194660][ T5788] kobject: 'rx-0' (00000000ff415f11): kobject_add_internal: parent: 'queues', set: 'queues' [ 2065.204824][ T5788] kobject: 'rx-0' (00000000ff415f11): kobject_uevent_env [ 2065.211892][ T5788] kobject: 'rx-0' (00000000ff415f11): fill_kobj_path: path = '/devices/virtual/net/bridge0/queues/rx-0' [ 2065.223179][ T5788] kobject: 'tx-0' (000000001c5ae61b): kobject_add_internal: parent: 'queues', set: 'queues' [ 2065.233621][ T5788] kobject: 'tx-0' (000000001c5ae61b): kobject_uevent_env [ 2065.240717][ T5788] kobject: 'tx-0' (000000001c5ae61b): fill_kobj_path: path = '/devices/virtual/net/bridge0/queues/tx-0' [ 2065.252664][ T5788] kobject: 'brif' (0000000006706468): kobject_add_internal: parent: 'bridge0', set: '' [ 2065.263081][ T5788] kobject: 'batman_adv' (00000000f681b9b7): kobject_add_internal: parent: 'bridge0', set: '' [ 2065.274317][ T5796] kobject: 'sit0' (000000007dff8380): kobject_add_internal: parent: 'net', set: 'devices' [ 2065.285179][ T5796] kobject: 'sit0' (000000007dff8380): kobject_uevent_env [ 2065.292322][ T5796] kobject: 'sit0' (000000007dff8380): fill_kobj_path: path = '/devices/virtual/net/sit0' [ 2065.302369][ T5796] kobject: 'queues' (00000000a8ef46f3): kobject_add_internal: parent: 'sit0', set: '' [ 2065.312491][ T5796] kobject: 'queues' (00000000a8ef46f3): kobject_uevent_env [ 2065.319721][ T5796] kobject: 'queues' (00000000a8ef46f3): kobject_uevent_env: filter function caused the event to drop! [ 2065.330691][ T5796] kobject: 'rx-0' (00000000f7e11624): kobject_add_internal: parent: 'queues', set: 'queues' [ 2065.340812][ T5796] kobject: 'rx-0' (00000000f7e11624): kobject_uevent_env [ 2065.347891][ T5796] kobject: 'rx-0' (00000000f7e11624): fill_kobj_path: path = '/devices/virtual/net/sit0/queues/rx-0' [ 2065.358873][ T5796] kobject: 'tx-0' (0000000051af977b): kobject_add_internal: parent: 'queues', set: 'queues' [ 2065.369115][ T5796] kobject: 'tx-0' (0000000051af977b): kobject_uevent_env [ 2065.376159][ T5796] kobject: 'tx-0' (0000000051af977b): fill_kobj_path: path = '/devices/virtual/net/sit0/queues/tx-0' [ 2065.388475][ T5786] kobject: 'bond0' (00000000fe46ea20): kobject_add_internal: parent: 'net', set: 'devices' [ 2065.399370][ T5786] kobject: 'bond0' (00000000fe46ea20): kobject_uevent_env [ 2065.406491][ T5786] kobject: 'bond0' (00000000fe46ea20): fill_kobj_path: path = '/devices/virtual/net/bond0' [ 2065.416579][ T5786] kobject: 'queues' (00000000ca400819): kobject_add_internal: parent: 'bond0', set: '' [ 2065.426785][ T5786] kobject: 'queues' (00000000ca400819): kobject_uevent_env [ 2065.434010][ T5786] kobject: 'queues' (00000000ca400819): kobject_uevent_env: filter function caused the event to drop! [ 2065.444987][ T5786] kobject: 'rx-0' (0000000061a42b30): kobject_add_internal: parent: 'queues', set: 'queues' [ 2065.455137][ T5786] kobject: 'rx-0' (0000000061a42b30): kobject_uevent_env [ 2065.462213][ T5786] kobject: 'rx-0' (0000000061a42b30): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-0' [ 2065.473238][ T5786] kobject: 'rx-1' (00000000a29e18df): kobject_add_internal: parent: 'queues', set: 'queues' [ 2065.483376][ T5786] kobject: 'rx-1' (00000000a29e18df): kobject_uevent_env [ 2065.490435][ T5786] kobject: 'rx-1' (00000000a29e18df): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-1' [ 2065.501455][ T5786] kobject: 'rx-2' (00000000fd26769a): kobject_add_internal: parent: 'queues', set: 'queues' [ 2065.511590][ T5786] kobject: 'rx-2' (00000000fd26769a): kobject_uevent_env [ 2065.518665][ T5786] kobject: 'rx-2' (00000000fd26769a): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-2' [ 2065.529735][ T5786] kobject: 'rx-3' (00000000e4a1b573): kobject_add_internal: parent: 'queues', set: 'queues' [ 2065.539960][ T5786] kobject: 'rx-3' (00000000e4a1b573): kobject_uevent_env [ 2065.547021][ T5786] kobject: 'rx-3' (00000000e4a1b573): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-3' [ 2065.558051][ T5786] kobject: 'rx-4' (00000000afb20db2): kobject_add_internal: parent: 'queues', set: 'queues' [ 2065.568177][ T5786] kobject: 'rx-4' (00000000afb20db2): kobject_uevent_env [ 2065.575367][ T5786] kobject: 'rx-4' (00000000afb20db2): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-4' [ 2065.586498][ T5786] kobject: 'rx-5' (0000000027c4c7e2): kobject_add_internal: parent: 'queues', set: 'queues' [ 2065.597054][ T5786] kobject: 'rx-5' (0000000027c4c7e2): kobject_uevent_env [ 2065.604137][ T5786] kobject: 'rx-5' (0000000027c4c7e2): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-5' [ 2065.615235][ T5786] kobject: 'rx-6' (00000000431dda50): kobject_add_internal: parent: 'queues', set: 'queues' [ 2065.625853][ T5786] kobject: 'rx-6' (00000000431dda50): kobject_uevent_env [ 2065.632957][ T5786] kobject: 'rx-6' (00000000431dda50): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-6' [ 2065.643982][ T5786] kobject: 'rx-7' (0000000072ed86d4): kobject_add_internal: parent: 'queues', set: 'queues' [ 2065.654132][ T5786] kobject: 'rx-7' (0000000072ed86d4): kobject_uevent_env [ 2065.661221][ T5786] kobject: 'rx-7' (0000000072ed86d4): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-7' [ 2065.672407][ T5786] kobject: 'rx-8' (00000000464c3bfb): kobject_add_internal: parent: 'queues', set: 'queues' [ 2065.682536][ T5786] kobject: 'rx-8' (00000000464c3bfb): kobject_uevent_env [ 2065.689569][ T5786] kobject: 'rx-8' (00000000464c3bfb): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-8'