79d08295eea8f6632d201c5a5df81d94cf0806e557cdfc6138f42c45f5f830ade4aee6f583d97f2e82b8b6ed4d8b3f291ac8a781e04c2b8f505ebd6fdfea207ed7525b58b3eddf34c8a70c38c", 0xc2}, {&(0x7f00000008c0)="8c6e8cf7eca78c83189f0dfb81146e8ff944602643836c41a835d8e2b64494dc8b7eef4fcfa736882353c7495a29df40d7d62c78354264fe5d4c7356964a605863521d8435a0aa634220edbcebca47e93530cd11c6b8c179f2f251b7ed700368d8d11757214c4674edb4935bd8079065d8a0897f58cd84bd5a9d241cda9e6c85ba09b328f9d339d3979249eadc4bd8a47beae7800bcfbd464236eec4e3a663710b371a55b50e4e25c9ff426197d5988062b9752a0da7e5f013b7d6853891b0244a78a53ac830a48e06c7a6fc61f99a887fcfe982c47779bf0c", 0xd9}, {&(0x7f00000004c0)="fd569e1cd7153739a6010a77c116e8412b7d5dbe9870f30328fc54c9b5c15849", 0x20}, {&(0x7f0000000600)="2df0b90d7d87d8c736b0c16c000984e960364d5de976d883585eb5d3eafd8c5222462b1b6eed44cadc4d6d22a0528068d3538605d905cc714cbc", 0x3a}, {&(0x7f00000009c0)="d4236ff0d8c995b3f63c0de6873d2405c9a94d749ebbe6d8d5fe177df73e0db17f6ae9df6227d13c78a3f71cbca08a8d08c3a81fab16f3b7817d2c3d60bb67fb5b5047e66b13b8f7255089da9a4c543903dd1adfdb3807af37d6a417d5598f531dd60869d51b780796f73c17009ae0ac98bc8702f42dc3d4cd61828efe53dc074814b9a412d94bd1d3bf762b7efc4f555910f3b3fb52aa589053d557dbb574b912cb46a1df1bb96b56ba6673a8725a7669a204865af0db27", 0xb8}, {&(0x7f0000000a80)="20de6d088a236bb430b29dbd4f4b8cbc720c93e75ac208f322cbf8e36c68163efa09b18712e08a5d3551b6bbb365569e96e7a179334a8097316c349b73ac8537b208d8dbf6780672fa7fddfe23dec7846752a74736b7762a5c66fe7e20f2d4305a71f701b0175583d9e32bb3d3806182301d04", 0x73}], 0x9, &(0x7f0000000bc0)=[@mark={{0x14, 0x1, 0x24, 0x5f8}}], 0x18}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:16:57 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x1100000000000000}, 0x0) 18:16:57 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xfffffff5}, 0x0) 18:16:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:16:57 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x19e, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="5ea03f6db511aee466448c41d0a37c5d52fbf6d123b2238bc0dc67ffb8a030dd7d9264060255082b5024d1bd6e117d7a20ca56078066e91049b134eb2db929be3f0ac2f70eacf24ae891471c290affb67848907db14e21832c3df1d097ecf14e120ecc990d234042832cc0352f4c22b3828a9ad20ee214973a95bd34110513eb0b903c83d4b8aa755076804cf502013c1bbace98bc821e5a8ba782e18f8fa11b088b70db05e454dd159d018ed06d197dd6014565077d4ebfb8b7db6d35f609ed05ffbcf3380687357f1a593b6f2842e76ff1df4bd5ae29584f89e9d2e50ccbb2964e2e6d3487a509a21e1f6c0ab2dcd9f70777a5c1d58dbf37d5ad66d553898b5620b1e35eb2a96ec010bb87957b6193071706744e312fff95abe536818207e41f7af43e08cca42680fadb739d70aafbeafa7fae70e4526c97e9edcac5648e4c38e10efd34d9f09592c73542bf127a1e68cf8fc3e58e78142b5e5fbbee0175350ab1a8aeedc6c8072ccaa476da314b578854756bb2db47caff231a7f64c51d1d7b4ed1e7cde59355285ef2c2be4ca6f0f6d01dc2d9845505f3a97a57f240c0b0f18fb4936dbb6cf7b6dbf6ec28e61a91ae6e748d0adec1c02c7a39019853b7497e5c3fdd571058f3e648b9f14080442b7279b28de971b6c8b97f1cea66a08bf83bee0707cae6972648a7f3924d63fd69ed03a13aaeba0d9e3bb239544359153fa124e70f873f9d10c07a5a0b58e82536153849350203d848998d61cbaa4f67dc73c84dbcd45939a3f01839e0897a3271118e304694db3ab806e05d206bd3c42dc79be167c9c297559d9a85d5eb04369c534360045b1a80e28d1466705873e3d8bfa73c44d59473df58b8a0305e6a5ec7300183cc60115288e393ca5d160a0fc8eaec5a77c0ba0798eed1e18890e2403ee8d156514eb6f5dc075d4a1f7ce70ae6fab8c82c6ecbcf3e973bc6a461f2f739f9820d66e28f3e9834a7ac8ed81a352c9f7a0882b14b2044ededaf694eba063ad3192f4dbf6ba79288a47ccbf6546c4fbbaefc864694e7063e39cb12ec68dca7b20986c48ae94022cdcb888222ee7f05f55ddea71f0298223b3c4109c15dd7ec41e78aef8dd5ff55c89ce7900261d62b35d12b813b8a385863f3c9d1f4ed37d7cd5314226afdb2892ddaeb1eec542cc8c040fc64cd3ae4dcd7264d68d247acbb353e40a33d5682ce2a4a005a2975908cbd0526beb6048840f3499cfcebba06eaf0c51c8b760593098a3def21b3664e7d42253f8c990538d382bf0768cdc106fac3699bcb5b12279f81dc9ba6ed1e2f7820f6cf8a2b3e4c88a33d9f0a32f60673b5897cadbbe7dffb9cf7f6b5a5d62701eba230fb2daa966a63d91e86c02472bd8114e5ba5df8152067086c142e6cd88289a501fc3353c1d0f17a663b179c446220d970d50a9c9adbb0b990be52ad19cd36669df47ff6e1f6fec4b7b1693c802d736aebe985e0c3c59c753ed95d79a7564880c4e2ffe5c9e59e818d2810468c48a4e75f15f3f252f2d780dd30717fe572c5d55adf090223fb30216c3882e9be19cb627aab1fdad81f8f117a90c2e7874edf1c4dc8e2da674348855659434eaba5c5063a29c28f4d22ce5515464b53967ab33d82f0e5afa98322c31e789be5d7600c726bd467d3be3eb4e0df733b91eecd95a5d1648ef268c43906b187ab24bb83bc80fa2ba4ab21d99c0aadf87d15cec51bf2cd52412ec638b43c27551f039e58026e6e910c7f327afe2e363491cfed5caadc8ca674659004f24991fdf76faac054dff64fb2282fc92d3b9ae32222833f1ae905dfa1dada3116765ef2b04ae6124f44cc7f83bd8f159eaa5290cc9e691fa77bec9c35a625b1b24cde8c9363b37b6f77ce844ea77752891b4c837c7c9648f7a16da6aadaf8912ba392c9984d26977c4b99e5c94925f0c6b9a48f2701eeb477aa0a99adb7fd145cd01b3cee9ad3c835690cda9ee1302fdf301558bb1979e177f18876b3fbe7b01597260a33822a63cdc760edee9839d75e0de20acdc8ae98a008d7390e4bb095650149b1bae84d240bd6480fbb10c1930f3a61dbfc3cb17888e33fb12f2dec1523380699b28300bf8b377e4357d5385176a35edbbb6e81e17e42fb07964452b53a069704f597cab1c646a8e8b99c0411e18def7e1c26e7cab72369228dfeb0d306cd46cdd9299538c89697c1c681d577290c2b03c9d84cd1b5803ff9291a28f3efbc3112b53e5cea348d364a954ac78db91e610df86be53c20707401d70f7768cdf0566420c1dfb7216877784244b5a84abc61e577b11b5dfd194018dbaa4024b57e6b0dcba72f621f62938f7a717c9a899aaa78b595f01c48f94c0bbf68c7cfb16c59269f48611dc9d7077b6805edbe30f2c7988a18f5ef3928a769f011936af9cb4665f48ce17afa1bb3f614e76b40a7e0920b9942362c41589f2be923530a186693a429a8e2767ec30d02407d4fbb6a397f52ec48fdb3fc0d2863f301585a14941cfac093cf8e53e91762db548306961979d396e4645f5698aa36db22603d1893149ba2d7aaa44bb14e0eceafd84cddb3c5c3e2a8eeb02a96e9d9f08db989b450614b0767314e4024114c785c95272226f1c2e2a29a07c7c133abaf254fb9d64a1c597ca32c3a1b17bf262907d9a5a468d37986a300f9a1274718521d76cc1fa8ae122f5dc46ba1c998c3d66bbfdece070f37ac35c7d7de0bffc8369f222fe768273edb69115f94177e9ab237ba50eafdefd5a2369059be377db15661961961c3bc60e6b1af713bd20d70b315025a249d5a6d67e340582404b561ae11fcc711c21c80a56d0a6b964d333e0c1a53333a2ebf4ebda28a59680639c0fd282d64539143b2d416accb7b5cfa16fb2dd9b767f79fe9c26f2b70972b2225ae8beae908dfcb34bbe30870369ea766479db570787a6e11d7544f32888b637e3cbbc4fc85e34d7847e26779e8a8d940ae28de2f2d122c1dba8948af913b2ba890cb12cf2db92ae75aac53614d6faaed47b4373147c6c93880646ee35d85394d25d9dadf73ea35ada21cdbc89038e90e9a28949fd84bac77ea7b2f79ece1c3c2defe5faf9b001ac4750920fc6414569413fd2cdb4e49751fa9c1a531d0081856aa2a9f884040610f9782eeb2c135afc0f60c09e1d5c3a83311010ead8b7bebe91bf339b7d88fab261596465fbbb8942fd32aac8661bb3ad21696895365e258f2a6d4e9049f93545e971fc053317082a2c6ebe65e571b29cdcbca06e5f422c6ea288f98d282ad5c9475a3e9258b4a21360d19cb91c99aeb6476f21049c8d6c9918a9ba7ced60b1f97b9b9cacef6958da3fb8b762f35043539c145956487110ccd420783f3c4490cecb089179c99a89e07fc14d2a8e8a78cc1cbbf0caaf9f8a6850fa8f150c45b616c102a09b995ac9408fdfd26b79339ad175691cc065f7911d99c53b249f03a96b3df1cca6f9dfd2d3c1e732681d58cc2fc671010e7bd98c006ba63b703266aa2f1c3d6fbc148902e425d83d044f014b9e7b3977b8fda094e02dd6dd8298983d5d891d66db077233fc155dad208bfe7c6585bdc6d246bba81cacff55994ee88f9163b27f51d6ae47d0b296124d3018f69f79528797e8aaf21d8035c044821137b0f7e7b3b41b8019379002ae9bc70dc1bc377b6fc0e2a40accf480ae0dc53e61a91d1815ea796fc14d6abddcee1fd965adc3a441333d430568bcb29f0cac078b70a4f6d1011c1822708fb1bbeeaea6433cf5cdcf9aec7bbce4c92e6fdda88b3dc48a4d42f4348a05fee23c41869ca326d39c0605d9144f82bd0c3c2f9ac9ae0b1f5fabe0ab5af39babf027a83df5b1c58513d27cb5babc9a5be073043543bff731da9bb715e57678507baf194fec9efa3235631b9594682dd531c3762432e25c25c048e600cc7c318e82b720db17436fbc054c04f59923ae61ec0b4896d08daab3b617bd8d239c24e95c8fcd1a7dd64a8a3d7e158c626833a2735c9e96514639f007983da3bb43a6f18e40d3eda0cc9468d118d28c6bda3ebae6c3ae2c14b1b02305abd16b7c6be707ffaf59142988eb931275bd4c38aefefbbaa95e16d7551f5f1fcfa9744a357d21c76b28747e5e94683d455530433876d509793ed409847f8a972450285f9e9f2dc665e78c7747418523bb51ef8191231e989ca93ef75e9ca27f38a2e5327d29c265c39f12fb1d01a723a902292c6bc06fdc6856d4829680909db55c4650449d0a2d2dad92cfbc8c03fdcb5656a56fded95b0ac41595a2a5bb34d5feb4e06da8adb5143eef67cdc3d18edd095c086d99cb43cddbbfeeb0beadadc1e30ec57bf760592e6365ffacbd6134b7262966af9c808f980fff81280566c79d3a2a15654c597aa050dda7ace4b5298f512b445023d4d86bc37c85ee1a2d7637f3ea0eafd6440893f43a2a912735d0dc8e2827148893f7554897fcb91a4f5581d793fa707fa181dcf69e3fddf498a19767922f4c52fd6797bfba85a61f9c5fe10970b06c7006d7b804f5d1db40b6f606f532cc5a6b93be6473bcbad8f06ead3995cb5f42ee8ddc658ac9085d0c6046b07be03837d5d68504c04b2a769db69e04aa1e414eec40118856f58ac5d3765e5d5038b20d2966389d0b462dfd71065140bf8ae0bb6eb105ac8160c8cc7641b14aaf0304731ab4d9d4bef89d62dd137d7f88645f941999e2fbfbd171a445c2702a87adcb5fd7d7e36d53b715e6ee87fcebdd0b9fef00182fa8e7ec8e7b5a3ac9d332ce92334a8e1ce0d493cff3c2a4fe1f902da785deb68bf936eabfe59a2f698b2d8d0dbd11c25f413ad4b7c554ed5d9e69a1c44c0dd523b47fc66e474357bd6b1e49fc2e12e30e206347d479ce0c20ef4b12e5d63de14e4b7550772a1ef0b5327d755aef1766da85e429a7920e4652d772619ea3526b330778ad35966c12e45a85ce6a5e3e99372a8c621e17ac2c3ff024c625a5599d41ad794e99ceeecb0bf334fd56b823e5b9406c6089fa406aaabe75afd7413affdc1019729d6f72a4b1a330412c03d9f75dbedb88bf556ee57a642fd1802e35807878f7aa15af0a00bc8fa8a4d01ff3e60249d07e780244d387cc60d7f25869f50580f0136391faec535332727b7ec85b12e3be7d8f34369f00b888133c3ad0ffa24bd03c5183d55172076b989b4151227467b915ab6e8347e15c99f2f9051d6ae0b2b72a717536899473b7c04160cc8d6d23a3f0ee63ae0ae4f79523af48779d836f0e0ae4b92ee78b820a9f6319ab064d11b7fb3e91579528a91c7c2521332ffaceb00ebaded7ef22d0ff9986273759b08b9f75565fe5c194bbfe704eda0fc0662db8cc3002b05dc39792540278a2c12501680ef4b95b3eac0573e559c6cf0badbe364e3bcaa14661afe1320a32d4e9644fdcd44b9dce2fee476e8f840a91a66cd877d3e5bbb5b595e654580955f4ba8548b41220a355a805669de9f3bc50157e594f5b444b88a320d80522e51bce929200d71e10e4a85c3d12ee133dda3fcdf7a454773a0575f7d9bfcb8c8646ffbad451446daf3ea742c0fa6bbb2ca4db442e60492ac9e131037278fa5552c0ed00c84469cd11600d3365617f57af4178fc264500327c48ae67de27c62766f9d6848e57f2ce0eb75e1cf72bafb21541c0370f73fc77e0d8b0b11056362a3936e38271259377d40fbc257d8c72b3e583fc6b0e20420dbc99a7932cb305fa9e61bd0de0d9758d35fe0ee13d0eaa782a3059e10caa61df3903aa1061298aced4712d998181e7edd03a11041de4018fe56cae17e0dced027ab7a0a27a6415d8d", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:16:57 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x175, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) [ 2597.673605][T19509] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2597.725109][T19509] CPU: 1 PID: 19509 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 2597.732705][T19509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2597.742771][T19509] Call Trace: [ 2597.746076][T19509] dump_stack+0x172/0x1f0 [ 2597.750463][T19509] dump_header+0x10b/0x82d [ 2597.754892][T19509] ? oom_kill_process+0x94/0x3f0 [ 2597.759846][T19509] oom_kill_process.cold+0x10/0x15 [ 2597.764968][T19509] out_of_memory+0x334/0x1340 [ 2597.769690][T19509] ? lock_downgrade+0x920/0x920 [ 2597.774717][T19509] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2597.780548][T19509] ? oom_killer_disable+0x280/0x280 [ 2597.785764][T19509] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2597.791338][T19509] ? memcg_stat_show+0xc40/0xc40 [ 2597.796297][T19509] ? do_raw_spin_unlock+0x57/0x270 [ 2597.801420][T19509] ? _raw_spin_unlock+0x2d/0x50 [ 2597.806273][T19509] try_charge+0xf4b/0x1440 [ 2597.810700][T19509] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2597.816262][T19509] ? percpu_ref_tryget_live+0x111/0x290 [ 2597.821834][T19509] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2597.828088][T19509] ? __kasan_check_read+0x11/0x20 [ 2597.833134][T19509] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2597.838694][T19509] mem_cgroup_try_charge+0x136/0x590 [ 2597.843996][T19509] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2597.849647][T19509] __handle_mm_fault+0x1f0d/0x4040 [ 2597.854782][T19509] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2597.860354][T19509] ? handle_mm_fault+0x292/0xaa0 [ 2597.865325][T19509] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2597.871597][T19509] ? __kasan_check_read+0x11/0x20 [ 2597.876655][T19509] handle_mm_fault+0x3b7/0xaa0 [ 2597.881444][T19509] __do_page_fault+0x536/0xdd0 [ 2597.886228][T19509] do_page_fault+0x38/0x590 [ 2597.890744][T19509] page_fault+0x39/0x40 [ 2597.894899][T19509] RIP: 0033:0x403522 [ 2597.898797][T19509] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 59 8f 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 79 44 05 00 48 [ 2597.918410][T19509] RSP: 002b:00007fffdd2dee90 EFLAGS: 00010246 18:16:57 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0) 18:16:57 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x10000000000}, 0x0) 18:16:57 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x1300000000000000}, 0x0) [ 2597.924491][T19509] RAX: 0000000000000000 RBX: 000000000027a0d9 RCX: 0000000000413660 [ 2597.932470][T19509] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007fffdd2dffc0 [ 2597.932478][T19509] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000a7f940 [ 2597.932485][T19509] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffdd2dffc0 [ 2597.932492][T19509] R13: 00007fffdd2dffb0 R14: 0000000000000000 R15: 00007fffdd2dffc0 [ 2597.970062][T19530] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2597.971961][T19509] memory: usage 1324kB, limit 0kB, failcnt 1440 [ 2598.020064][T19509] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2598.110824][T19509] Memory cgroup stats for /syz1: [ 2598.110951][T19509] anon 57344 [ 2598.110951][T19509] file 0 [ 2598.110951][T19509] kernel_stack 0 [ 2598.110951][T19509] slab 1216512 [ 2598.110951][T19509] sock 0 [ 2598.110951][T19509] shmem 0 [ 2598.110951][T19509] file_mapped 0 [ 2598.110951][T19509] file_dirty 0 [ 2598.110951][T19509] file_writeback 0 [ 2598.110951][T19509] anon_thp 0 [ 2598.110951][T19509] inactive_anon 0 [ 2598.110951][T19509] active_anon 57344 [ 2598.110951][T19509] inactive_file 0 [ 2598.110951][T19509] active_file 0 18:16:57 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0) [ 2598.110951][T19509] unevictable 0 [ 2598.110951][T19509] slab_reclaimable 270336 [ 2598.110951][T19509] slab_unreclaimable 946176 [ 2598.110951][T19509] pgfault 89628 [ 2598.110951][T19509] pgmajfault 0 [ 2598.110951][T19509] workingset_refault 33 [ 2598.110951][T19509] workingset_activate 0 [ 2598.110951][T19509] workingset_nodereclaim 0 [ 2598.110951][T19509] pgrefill 1281 [ 2598.110951][T19509] pgscan 1276 [ 2598.110951][T19509] pgsteal 33 [ 2598.110951][T19509] pgactivate 1188 18:16:57 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0) 18:16:57 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x2800000000000000}, 0x0) [ 2598.300641][T19509] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19509,uid=0 [ 2598.359036][T19509] Memory cgroup out of memory: Killed process 19509 (syz-executor.1) total-vm:72444kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 2598.414046][T19012] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2598.414617][ T1065] oom_reaper: reaped process 19509 (syz-executor.1), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 2598.426647][T19012] CPU: 0 PID: 19012 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 2598.444723][T19012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2598.454791][T19012] Call Trace: [ 2598.458093][T19012] dump_stack+0x172/0x1f0 [ 2598.462462][T19012] dump_header+0x10b/0x82d [ 2598.466890][T19012] ? oom_kill_process+0x94/0x3f0 [ 2598.471846][T19012] oom_kill_process.cold+0x10/0x15 [ 2598.476968][T19012] out_of_memory+0x334/0x1340 [ 2598.481649][T19012] ? lock_downgrade+0x920/0x920 [ 2598.486726][T19012] ? oom_killer_disable+0x280/0x280 [ 2598.491991][T19012] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2598.497560][T19012] ? memcg_stat_show+0xc40/0xc40 [ 2598.502514][T19012] ? do_raw_spin_unlock+0x57/0x270 [ 2598.507647][T19012] ? _raw_spin_unlock+0x2d/0x50 [ 2598.512520][T19012] try_charge+0xf4b/0x1440 [ 2598.516944][T19012] ? find_held_lock+0x35/0x130 [ 2598.521717][T19012] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2598.527253][T19012] ? get_mem_cgroup_from_mm+0x139/0x320 [ 2598.527271][T19012] ? find_held_lock+0x35/0x130 [ 2598.537733][T19012] ? get_mem_cgroup_from_mm+0x139/0x320 [ 2598.543300][T19012] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2598.548852][T19012] ? memcg_kmem_put_cache+0x50/0x50 [ 2598.554071][T19012] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2598.559624][T19012] __memcg_kmem_charge+0x13a/0x3a0 [ 2598.559642][T19012] __alloc_pages_nodemask+0x4f5/0x900 [ 2598.559656][T19012] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2598.559671][T19012] ? __alloc_pages_slowpath+0x2910/0x2910 [ 2598.559684][T19012] ? percpu_ref_put_many+0xb6/0x190 [ 2598.559702][T19012] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2598.559718][T19012] ? trace_hardirqs_on+0x67/0x240 [ 2598.559729][T19012] ? __kasan_check_read+0x11/0x20 [ 2598.559749][T19012] copy_process+0x3f8/0x6860 [ 2598.559766][T19012] ? __kasan_check_read+0x11/0x20 [ 2598.559780][T19012] ? __lock_acquire+0x16f2/0x4a00 [ 2598.559790][T19012] ? __kasan_check_read+0x11/0x20 [ 2598.559807][T19012] ? mark_lock+0xc2/0x1220 [ 2598.592031][T19012] ? __cleanup_sighand+0x60/0x60 [ 2598.592052][T19012] ? find_held_lock+0x35/0x130 [ 2598.592077][T19012] _do_fork+0x146/0xfa0 [ 2598.592093][T19012] ? copy_init_mm+0x20/0x20 [ 2598.592113][T19012] ? __kasan_check_read+0x11/0x20 [ 2598.592132][T19012] ? _copy_to_user+0x118/0x160 [ 2598.592152][T19012] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2598.592170][T19012] ? put_timespec64+0xda/0x140 [ 2598.592187][T19012] __x64_sys_clone+0x18d/0x250 [ 2598.592202][T19012] ? __ia32_sys_vfork+0xc0/0xc0 [ 2598.592223][T19012] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2598.592242][T19012] ? trace_hardirqs_on+0x67/0x240 [ 2598.592272][T19012] do_syscall_64+0xfa/0x760 [ 2598.592296][T19012] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2598.592308][T19012] RIP: 0033:0x45802a [ 2598.592324][T19012] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2598.592339][T19012] RSP: 002b:00007ffd87910c20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2598.611969][T19012] RAX: ffffffffffffffda RBX: 00007ffd87910c20 RCX: 000000000045802a [ 2598.611977][T19012] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2598.611984][T19012] RBP: 00007ffd87910c60 R08: 0000000000000001 R09: 0000000001f6c940 [ 2598.611991][T19012] R10: 0000000001f6cc10 R11: 0000000000000246 R12: 0000000000000001 [ 2598.611998][T19012] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd87910cb0 [ 2598.632814][T19012] memory: usage 3784kB, limit 0kB, failcnt 284 [ 2598.850363][T19531] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2598.909791][T19012] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2598.916681][T19012] Memory cgroup stats for /syz3: [ 2598.916806][T19012] anon 155648 [ 2598.916806][T19012] file 126976 [ 2598.916806][T19012] kernel_stack 0 [ 2598.916806][T19012] slab 3878912 [ 2598.916806][T19012] sock 163840 [ 2598.916806][T19012] shmem 0 [ 2598.916806][T19012] file_mapped 0 [ 2598.916806][T19012] file_dirty 135168 [ 2598.916806][T19012] file_writeback 0 [ 2598.916806][T19012] anon_thp 0 [ 2598.916806][T19012] inactive_anon 0 [ 2598.916806][T19012] active_anon 73728 [ 2598.916806][T19012] inactive_file 126976 [ 2598.916806][T19012] active_file 0 [ 2598.916806][T19012] unevictable 0 [ 2598.916806][T19012] slab_reclaimable 2162688 [ 2598.916806][T19012] slab_unreclaimable 1716224 [ 2598.916806][T19012] pgfault 123486 [ 2598.916806][T19012] pgmajfault 0 [ 2598.916806][T19012] workingset_refault 0 [ 2598.916806][T19012] workingset_activate 0 [ 2598.916806][T19012] workingset_nodereclaim 0 [ 2598.916806][T19012] pgrefill 67 [ 2598.916806][T19012] pgscan 108 [ 2598.916806][T19012] pgsteal 42 [ 2598.916806][T19012] pgactivate 0 [ 2599.013165][T19012] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19012,uid=0 [ 2599.028744][T19012] Memory cgroup out of memory: Killed process 19012 (syz-executor.3) total-vm:72440kB, anon-rss:100kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 2599.046944][ T1065] oom_reaper: reaped process 19012 (syz-executor.3), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 18:16:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0xfffffffffffffec7, &(0x7f0000000640)=[{&(0x7f0000000340)="c944a5fcaeedbafda5709e3f0002", 0xe}], 0x1}, 0xfc00) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f00000004c0)=""/5) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:16:59 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x8000a0ffffffff}, 0x0) 18:16:59 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x3000000000000000}, 0x0) [ 2599.649278][T19559] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. 18:16:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) [ 2599.841942][T19562] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. 18:16:59 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x19f, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="5ea03f6db511aee466448c41d0a37c5d52fbf6d123b2238bc0dc67ffb8a030dd7d9264060255082b5024d1bd6e117d7a20ca56078066e91049b134eb2db929be3f0ac2f70eacf24ae891471c290affb67848907db14e21832c3df1d097ecf14e120ecc990d234042832cc0352f4c22b3828a9ad20ee214973a95bd34110513eb0b903c83d4b8aa755076804cf502013c1bbace98bc821e5a8ba782e18f8fa11b088b70db05e454dd159d018ed06d197dd6014565077d4ebfb8b7db6d35f609ed05ffbcf3380687357f1a593b6f2842e76ff1df4bd5ae29584f89e9d2e50ccbb2964e2e6d3487a509a21e1f6c0ab2dcd9f70777a5c1d58dbf37d5ad66d553898b5620b1e35eb2a96ec010bb87957b6193071706744e312fff95abe536818207e41f7af43e08cca42680fadb739d70aafbeafa7fae70e4526c97e9edcac5648e4c38e10efd34d9f09592c73542bf127a1e68cf8fc3e58e78142b5e5fbbee0175350ab1a8aeedc6c8072ccaa476da314b578854756bb2db47caff231a7f64c51d1d7b4ed1e7cde59355285ef2c2be4ca6f0f6d01dc2d9845505f3a97a57f240c0b0f18fb4936dbb6cf7b6dbf6ec28e61a91ae6e748d0adec1c02c7a39019853b7497e5c3fdd571058f3e648b9f14080442b7279b28de971b6c8b97f1cea66a08bf83bee0707cae6972648a7f3924d63fd69ed03a13aaeba0d9e3bb239544359153fa124e70f873f9d10c07a5a0b58e82536153849350203d848998d61cbaa4f67dc73c84dbcd45939a3f01839e0897a3271118e304694db3ab806e05d206bd3c42dc79be167c9c297559d9a85d5eb04369c534360045b1a80e28d1466705873e3d8bfa73c44d59473df58b8a0305e6a5ec7300183cc60115288e393ca5d160a0fc8eaec5a77c0ba0798eed1e18890e2403ee8d156514eb6f5dc075d4a1f7ce70ae6fab8c82c6ecbcf3e973bc6a461f2f739f9820d66e28f3e9834a7ac8ed81a352c9f7a0882b14b2044ededaf694eba063ad3192f4dbf6ba79288a47ccbf6546c4fbbaefc864694e7063e39cb12ec68dca7b20986c48ae94022cdcb888222ee7f05f55ddea71f0298223b3c4109c15dd7ec41e78aef8dd5ff55c89ce7900261d62b35d12b813b8a385863f3c9d1f4ed37d7cd5314226afdb2892ddaeb1eec542cc8c040fc64cd3ae4dcd7264d68d247acbb353e40a33d5682ce2a4a005a2975908cbd0526beb6048840f3499cfcebba06eaf0c51c8b760593098a3def21b3664e7d42253f8c990538d382bf0768cdc106fac3699bcb5b12279f81dc9ba6ed1e2f7820f6cf8a2b3e4c88a33d9f0a32f60673b5897cadbbe7dffb9cf7f6b5a5d62701eba230fb2daa966a63d91e86c02472bd8114e5ba5df8152067086c142e6cd88289a501fc3353c1d0f17a663b179c446220d970d50a9c9adbb0b990be52ad19cd36669df47ff6e1f6fec4b7b1693c802d736aebe985e0c3c59c753ed95d79a7564880c4e2ffe5c9e59e818d2810468c48a4e75f15f3f252f2d780dd30717fe572c5d55adf090223fb30216c3882e9be19cb627aab1fdad81f8f117a90c2e7874edf1c4dc8e2da674348855659434eaba5c5063a29c28f4d22ce5515464b53967ab33d82f0e5afa98322c31e789be5d7600c726bd467d3be3eb4e0df733b91eecd95a5d1648ef268c43906b187ab24bb83bc80fa2ba4ab21d99c0aadf87d15cec51bf2cd52412ec638b43c27551f039e58026e6e910c7f327afe2e363491cfed5caadc8ca674659004f24991fdf76faac054dff64fb2282fc92d3b9ae32222833f1ae905dfa1dada3116765ef2b04ae6124f44cc7f83bd8f159eaa5290cc9e691fa77bec9c35a625b1b24cde8c9363b37b6f77ce844ea77752891b4c837c7c9648f7a16da6aadaf8912ba392c9984d26977c4b99e5c94925f0c6b9a48f2701eeb477aa0a99adb7fd145cd01b3cee9ad3c835690cda9ee1302fdf301558bb1979e177f18876b3fbe7b01597260a33822a63cdc760edee9839d75e0de20acdc8ae98a008d7390e4bb095650149b1bae84d240bd6480fbb10c1930f3a61dbfc3cb17888e33fb12f2dec1523380699b28300bf8b377e4357d5385176a35edbbb6e81e17e42fb07964452b53a069704f597cab1c646a8e8b99c0411e18def7e1c26e7cab72369228dfeb0d306cd46cdd9299538c89697c1c681d577290c2b03c9d84cd1b5803ff9291a28f3efbc3112b53e5cea348d364a954ac78db91e610df86be53c20707401d70f7768cdf0566420c1dfb7216877784244b5a84abc61e577b11b5dfd194018dbaa4024b57e6b0dcba72f621f62938f7a717c9a899aaa78b595f01c48f94c0bbf68c7cfb16c59269f48611dc9d7077b6805edbe30f2c7988a18f5ef3928a769f011936af9cb4665f48ce17afa1bb3f614e76b40a7e0920b9942362c41589f2be923530a186693a429a8e2767ec30d02407d4fbb6a397f52ec48fdb3fc0d2863f301585a14941cfac093cf8e53e91762db548306961979d396e4645f5698aa36db22603d1893149ba2d7aaa44bb14e0eceafd84cddb3c5c3e2a8eeb02a96e9d9f08db989b450614b0767314e4024114c785c95272226f1c2e2a29a07c7c133abaf254fb9d64a1c597ca32c3a1b17bf262907d9a5a468d37986a300f9a1274718521d76cc1fa8ae122f5dc46ba1c998c3d66bbfdece070f37ac35c7d7de0bffc8369f222fe768273edb69115f94177e9ab237ba50eafdefd5a2369059be377db15661961961c3bc60e6b1af713bd20d70b315025a249d5a6d67e340582404b561ae11fcc711c21c80a56d0a6b964d333e0c1a53333a2ebf4ebda28a59680639c0fd282d64539143b2d416accb7b5cfa16fb2dd9b767f79fe9c26f2b70972b2225ae8beae908dfcb34bbe30870369ea766479db570787a6e11d7544f32888b637e3cbbc4fc85e34d7847e26779e8a8d940ae28de2f2d122c1dba8948af913b2ba890cb12cf2db92ae75aac53614d6faaed47b4373147c6c93880646ee35d85394d25d9dadf73ea35ada21cdbc89038e90e9a28949fd84bac77ea7b2f79ece1c3c2defe5faf9b001ac4750920fc6414569413fd2cdb4e49751fa9c1a531d0081856aa2a9f884040610f9782eeb2c135afc0f60c09e1d5c3a83311010ead8b7bebe91bf339b7d88fab261596465fbbb8942fd32aac8661bb3ad21696895365e258f2a6d4e9049f93545e971fc053317082a2c6ebe65e571b29cdcbca06e5f422c6ea288f98d282ad5c9475a3e9258b4a21360d19cb91c99aeb6476f21049c8d6c9918a9ba7ced60b1f97b9b9cacef6958da3fb8b762f35043539c145956487110ccd420783f3c4490cecb089179c99a89e07fc14d2a8e8a78cc1cbbf0caaf9f8a6850fa8f150c45b616c102a09b995ac9408fdfd26b79339ad175691cc065f7911d99c53b249f03a96b3df1cca6f9dfd2d3c1e732681d58cc2fc671010e7bd98c006ba63b703266aa2f1c3d6fbc148902e425d83d044f014b9e7b3977b8fda094e02dd6dd8298983d5d891d66db077233fc155dad208bfe7c6585bdc6d246bba81cacff55994ee88f9163b27f51d6ae47d0b296124d3018f69f79528797e8aaf21d8035c044821137b0f7e7b3b41b8019379002ae9bc70dc1bc377b6fc0e2a40accf480ae0dc53e61a91d1815ea796fc14d6abddcee1fd965adc3a441333d430568bcb29f0cac078b70a4f6d1011c1822708fb1bbeeaea6433cf5cdcf9aec7bbce4c92e6fdda88b3dc48a4d42f4348a05fee23c41869ca326d39c0605d9144f82bd0c3c2f9ac9ae0b1f5fabe0ab5af39babf027a83df5b1c58513d27cb5babc9a5be073043543bff731da9bb715e57678507baf194fec9efa3235631b9594682dd531c3762432e25c25c048e600cc7c318e82b720db17436fbc054c04f59923ae61ec0b4896d08daab3b617bd8d239c24e95c8fcd1a7dd64a8a3d7e158c626833a2735c9e96514639f007983da3bb43a6f18e40d3eda0cc9468d118d28c6bda3ebae6c3ae2c14b1b02305abd16b7c6be707ffaf59142988eb931275bd4c38aefefbbaa95e16d7551f5f1fcfa9744a357d21c76b28747e5e94683d455530433876d509793ed409847f8a972450285f9e9f2dc665e78c7747418523bb51ef8191231e989ca93ef75e9ca27f38a2e5327d29c265c39f12fb1d01a723a902292c6bc06fdc6856d4829680909db55c4650449d0a2d2dad92cfbc8c03fdcb5656a56fded95b0ac41595a2a5bb34d5feb4e06da8adb5143eef67cdc3d18edd095c086d99cb43cddbbfeeb0beadadc1e30ec57bf760592e6365ffacbd6134b7262966af9c808f980fff81280566c79d3a2a15654c597aa050dda7ace4b5298f512b445023d4d86bc37c85ee1a2d7637f3ea0eafd6440893f43a2a912735d0dc8e2827148893f7554897fcb91a4f5581d793fa707fa181dcf69e3fddf498a19767922f4c52fd6797bfba85a61f9c5fe10970b06c7006d7b804f5d1db40b6f606f532cc5a6b93be6473bcbad8f06ead3995cb5f42ee8ddc658ac9085d0c6046b07be03837d5d68504c04b2a769db69e04aa1e414eec40118856f58ac5d3765e5d5038b20d2966389d0b462dfd71065140bf8ae0bb6eb105ac8160c8cc7641b14aaf0304731ab4d9d4bef89d62dd137d7f88645f941999e2fbfbd171a445c2702a87adcb5fd7d7e36d53b715e6ee87fcebdd0b9fef00182fa8e7ec8e7b5a3ac9d332ce92334a8e1ce0d493cff3c2a4fe1f902da785deb68bf936eabfe59a2f698b2d8d0dbd11c25f413ad4b7c554ed5d9e69a1c44c0dd523b47fc66e474357bd6b1e49fc2e12e30e206347d479ce0c20ef4b12e5d63de14e4b7550772a1ef0b5327d755aef1766da85e429a7920e4652d772619ea3526b330778ad35966c12e45a85ce6a5e3e99372a8c621e17ac2c3ff024c625a5599d41ad794e99ceeecb0bf334fd56b823e5b9406c6089fa406aaabe75afd7413affdc1019729d6f72a4b1a330412c03d9f75dbedb88bf556ee57a642fd1802e35807878f7aa15af0a00bc8fa8a4d01ff3e60249d07e780244d387cc60d7f25869f50580f0136391faec535332727b7ec85b12e3be7d8f34369f00b888133c3ad0ffa24bd03c5183d55172076b989b4151227467b915ab6e8347e15c99f2f9051d6ae0b2b72a717536899473b7c04160cc8d6d23a3f0ee63ae0ae4f79523af48779d836f0e0ae4b92ee78b820a9f6319ab064d11b7fb3e91579528a91c7c2521332ffaceb00ebaded7ef22d0ff9986273759b08b9f75565fe5c194bbfe704eda0fc0662db8cc3002b05dc39792540278a2c12501680ef4b95b3eac0573e559c6cf0badbe364e3bcaa14661afe1320a32d4e9644fdcd44b9dce2fee476e8f840a91a66cd877d3e5bbb5b595e654580955f4ba8548b41220a355a805669de9f3bc50157e594f5b444b88a320d80522e51bce929200d71e10e4a85c3d12ee133dda3fcdf7a454773a0575f7d9bfcb8c8646ffbad451446daf3ea742c0fa6bbb2ca4db442e60492ac9e131037278fa5552c0ed00c84469cd11600d3365617f57af4178fc264500327c48ae67de27c62766f9d6848e57f2ce0eb75e1cf72bafb21541c0370f73fc77e0d8b0b11056362a3936e38271259377d40fbc257d8c72b3e583fc6b0e20420dbc99a7932cb305fa9e61bd0de0d9758d35fe0ee13d0eaa782a3059e10caa61df3903aa1061298aced4712d998181e7edd03a11041de4018fe56cae17e0dced027ab7a0a27a6415d8d", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:16:59 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0) 18:16:59 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x3f00000000000000}, 0x0) 18:16:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r7 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) perf_event_open$cgroup(&(0x7f0000000540)={0x3, 0x70, 0x40, 0x0, 0x0, 0xa3, 0x0, 0x4, 0x20003, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x6, 0x8}, 0x400, 0x1f, 0x1, 0x5, 0xfffffffffffffffe, 0x7, 0x8}, r6, 0x1, 0xffffffffffffffff, 0xd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffd3) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r8 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r8, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0xfffffffffffffec7, &(0x7f0000000640)=[{&(0x7f0000000340)="c944a5fcaeedbafda5709e3f0002", 0xe}], 0x1}, 0xfc00) sendmsg$kcm(r8, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r7, 0x0, 0x0) 18:16:59 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x176, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:16:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) write$cgroup_int(r6, 0x0, 0x0) 18:16:59 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x103000000000000}, 0x0) 18:16:59 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0) [ 2600.212784][T19580] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. 18:17:00 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0) 18:17:00 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x4c8ad9fffeb2a3e1}, 0x0) 18:17:00 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0) 18:17:00 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x5800000000000000}, 0x0) [ 2600.973837][T19589] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2601.193454][T19613] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2601.276316][T19617] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. 18:17:01 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1a0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:17:01 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0) 18:17:01 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0) [ 2601.638702][T19628] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2602.086509][T19633] IPVS: ftp: loaded support on port[0] = 21 [ 2602.276326][T19632] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2602.333854][T19636] IPVS: ftp: loaded support on port[0] = 21 [ 2602.781542][T19633] chnl_net:caif_netlink_parms(): no params data found [ 2602.798621][T19636] chnl_net:caif_netlink_parms(): no params data found [ 2602.928445][T19633] bridge0: port 1(bridge_slave_0) entered blocking state [ 2602.936868][T19633] bridge0: port 1(bridge_slave_0) entered disabled state [ 2602.945794][T19633] device bridge_slave_0 entered promiscuous mode [ 2602.960939][T19633] bridge0: port 2(bridge_slave_1) entered blocking state [ 2602.968078][T19633] bridge0: port 2(bridge_slave_1) entered disabled state [ 2602.977120][T19633] device bridge_slave_1 entered promiscuous mode [ 2602.985460][T19636] bridge0: port 1(bridge_slave_0) entered blocking state [ 2602.992807][T19636] bridge0: port 1(bridge_slave_0) entered disabled state [ 2603.001353][T19636] device bridge_slave_0 entered promiscuous mode [ 2603.068025][T19636] bridge0: port 2(bridge_slave_1) entered blocking state [ 2603.076201][T19636] bridge0: port 2(bridge_slave_1) entered disabled state [ 2603.085175][T19636] device bridge_slave_1 entered promiscuous mode [ 2603.158641][T19633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2603.181727][T19636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2603.193611][T19633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2603.205866][T19636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2603.288797][T19633] team0: Port device team_slave_0 added [ 2603.305886][T19636] team0: Port device team_slave_0 added [ 2603.314374][T19633] team0: Port device team_slave_1 added [ 2603.324228][T19636] team0: Port device team_slave_1 added [ 2603.443660][T19633] device hsr_slave_0 entered promiscuous mode [ 2603.500953][T19633] device hsr_slave_1 entered promiscuous mode [ 2603.550019][T19633] debugfs: Directory 'hsr0' with parent '/' already present! [ 2603.703971][T19636] device hsr_slave_0 entered promiscuous mode [ 2603.780749][T19636] device hsr_slave_1 entered promiscuous mode [ 2603.869885][T19636] debugfs: Directory 'hsr0' with parent '/' already present! [ 2603.879120][T19633] bridge0: port 2(bridge_slave_1) entered blocking state [ 2603.886363][T19633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2603.893801][T19633] bridge0: port 1(bridge_slave_0) entered blocking state [ 2603.900907][T19633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2603.995755][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state [ 2604.007161][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state [ 2604.294480][T19633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2604.387045][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2604.396184][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2604.411570][T19633] 8021q: adding VLAN 0 to HW filter on device team0 [ 2604.431609][T19636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2604.568124][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2604.581143][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2604.590161][T14677] bridge0: port 1(bridge_slave_0) entered blocking state [ 2604.597252][T14677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2604.632539][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2604.642454][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2604.651586][T11670] bridge0: port 2(bridge_slave_1) entered blocking state [ 2604.658734][T11670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2604.669390][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2604.679025][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2604.688045][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2604.702836][T19636] 8021q: adding VLAN 0 to HW filter on device team0 [ 2604.784923][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2604.818941][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2604.828663][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2604.838773][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2604.849234][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2604.859010][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2604.869142][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2604.878349][T14678] bridge0: port 1(bridge_slave_0) entered blocking state [ 2604.885461][T14678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2605.015866][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2605.024817][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2605.033775][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2605.046009][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2605.055226][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state [ 2605.062355][ T5761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2605.073313][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2605.082990][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2605.093392][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2605.102808][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2605.112468][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2605.124471][T19633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2605.140380][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2605.213434][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2605.226009][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2605.288858][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2605.310614][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2605.330367][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2605.339580][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2605.349815][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2605.362799][T19633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2605.377413][T19636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2605.391273][T19636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2605.415692][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2605.425762][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2605.499212][T19636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2605.874147][T19653] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2605.887899][T19653] CPU: 0 PID: 19653 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 2605.895473][T19653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2605.905540][T19653] Call Trace: [ 2605.908844][T19653] dump_stack+0x172/0x1f0 [ 2605.913186][T19653] dump_header+0x10b/0x82d [ 2605.917614][T19653] oom_kill_process.cold+0x10/0x15 [ 2605.922755][T19653] out_of_memory+0x334/0x1340 [ 2605.927461][T19653] ? __sched_text_start+0x8/0x8 [ 2605.932332][T19653] ? oom_killer_disable+0x280/0x280 [ 2605.937558][T19653] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2605.943128][T19653] ? memcg_stat_show+0xc40/0xc40 [ 2605.948081][T19653] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2605.953905][T19653] ? cgroup_file_notify+0x140/0x1b0 [ 2605.959128][T19653] memory_max_write+0x262/0x3a0 [ 2605.963996][T19653] ? mem_cgroup_write+0x370/0x370 [ 2605.969056][T19653] ? cgroup_file_write+0x86/0x790 [ 2605.974096][T19653] cgroup_file_write+0x241/0x790 [ 2605.979046][T19653] ? mem_cgroup_write+0x370/0x370 [ 2605.984087][T19653] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2605.989735][T19653] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2605.995378][T19653] kernfs_fop_write+0x2b8/0x480 [ 2606.000281][T19653] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2606.006544][T19653] __vfs_write+0x8a/0x110 [ 2606.010889][T19653] ? kernfs_fop_open+0xd80/0xd80 [ 2606.015839][T19653] vfs_write+0x268/0x5d0 [ 2606.020096][T19653] ksys_write+0x14f/0x290 [ 2606.024426][T19653] ? __ia32_sys_read+0xb0/0xb0 [ 2606.029198][T19653] ? do_syscall_64+0x26/0x760 [ 2606.033878][T19653] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2606.039952][T19653] ? do_syscall_64+0x26/0x760 [ 2606.044714][T19653] __x64_sys_write+0x73/0xb0 [ 2606.049321][T19653] do_syscall_64+0xfa/0x760 [ 2606.053835][T19653] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2606.059727][T19653] RIP: 0033:0x459a59 [ 2606.063625][T19653] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2606.083237][T19653] RSP: 002b:00007f00512b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2606.091686][T19653] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 2606.099662][T19653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2606.107637][T19653] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2606.115617][T19653] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f00512b46d4 [ 2606.123596][T19653] R13: 00000000004c9e7e R14: 00000000004e1a90 R15: 00000000ffffffff [ 2606.156022][T19653] memory: usage 5940kB, limit 0kB, failcnt 289 [ 2606.173901][T19653] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2606.181571][T19653] Memory cgroup stats for /syz3: [ 2606.183103][T19653] anon 2207744 [ 2606.183103][T19653] file 126976 [ 2606.183103][T19653] kernel_stack 65536 [ 2606.183103][T19653] slab 3878912 [ 2606.183103][T19653] sock 163840 [ 2606.183103][T19653] shmem 0 [ 2606.183103][T19653] file_mapped 0 [ 2606.183103][T19653] file_dirty 135168 [ 2606.183103][T19653] file_writeback 0 [ 2606.183103][T19653] anon_thp 2097152 [ 2606.183103][T19653] inactive_anon 0 [ 2606.183103][T19653] active_anon 2125824 [ 2606.183103][T19653] inactive_file 126976 [ 2606.183103][T19653] active_file 0 [ 2606.183103][T19653] unevictable 0 [ 2606.183103][T19653] slab_reclaimable 2162688 [ 2606.183103][T19653] slab_unreclaimable 1716224 [ 2606.183103][T19653] pgfault 123552 [ 2606.183103][T19653] pgmajfault 0 [ 2606.183103][T19653] workingset_refault 0 [ 2606.183103][T19653] workingset_activate 0 [ 2606.183103][T19653] workingset_nodereclaim 0 [ 2606.183103][T19653] pgrefill 67 [ 2606.183103][T19653] pgscan 108 [ 2606.183103][T19653] pgsteal 42 [ 2606.183103][T19653] pgactivate 0 [ 2606.297949][T19653] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19651,uid=0 [ 2606.315176][T19653] Memory cgroup out of memory: Killed process 19651 (syz-executor.3) total-vm:72708kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2606.339941][ T1065] oom_reaper: reaped process 19651 (syz-executor.3), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 2606.351696][T19658] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2606.371954][T19658] CPU: 1 PID: 19658 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 2606.379553][T19658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2606.389623][T19658] Call Trace: [ 2606.392939][T19658] dump_stack+0x172/0x1f0 [ 2606.397279][T19658] dump_header+0x10b/0x82d [ 2606.401710][T19658] oom_kill_process.cold+0x10/0x15 [ 2606.406825][T19658] out_of_memory+0x334/0x1340 [ 2606.411521][T19658] ? oom_killer_disable+0x280/0x280 [ 2606.416744][T19658] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2606.422313][T19658] ? memcg_stat_show+0xc40/0xc40 [ 2606.427357][T19658] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2606.433171][T19658] ? cgroup_file_notify+0x140/0x1b0 [ 2606.433192][T19658] memory_max_write+0x262/0x3a0 [ 2606.443213][T19658] ? mem_cgroup_write+0x370/0x370 [ 2606.443228][T19658] ? lock_acquire+0x20b/0x410 [ 2606.443249][T19658] cgroup_file_write+0x241/0x790 [ 2606.443264][T19658] ? mem_cgroup_write+0x370/0x370 [ 2606.443277][T19658] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2606.443301][T19658] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2606.452993][T19658] kernfs_fop_write+0x2b8/0x480 [ 2606.453011][T19658] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2606.453032][T19658] __vfs_write+0x8a/0x110 [ 2606.462950][T19658] ? kernfs_fop_open+0xd80/0xd80 [ 2606.462967][T19658] vfs_write+0x268/0x5d0 [ 2606.462985][T19658] ksys_write+0x14f/0x290 [ 2606.463000][T19658] ? __ia32_sys_read+0xb0/0xb0 [ 2606.463016][T19658] ? do_syscall_64+0x26/0x760 [ 2606.463036][T19658] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2606.474270][T19658] ? do_syscall_64+0x26/0x760 [ 2606.474292][T19658] __x64_sys_write+0x73/0xb0 [ 2606.474308][T19658] do_syscall_64+0xfa/0x760 [ 2606.474328][T19658] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2606.474339][T19658] RIP: 0033:0x459a59 [ 2606.474356][T19658] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2606.474362][T19658] RSP: 002b:00007f1766588c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2606.485432][T19658] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 2606.485441][T19658] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2606.485449][T19658] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2606.485462][T19658] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17665896d4 [ 2606.494699][T19658] R13: 00000000004c9e7e R14: 00000000004e1a90 R15: 00000000ffffffff [ 2606.495505][T19658] memory: usage 3776kB, limit 0kB, failcnt 1441 [ 2606.513970][T19658] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2606.533926][T19658] Memory cgroup stats for /syz1: [ 2606.535250][T19658] anon 2134016 [ 2606.535250][T19658] file 0 [ 2606.535250][T19658] kernel_stack 65536 [ 2606.535250][T19658] slab 1355776 [ 2606.535250][T19658] sock 0 [ 2606.535250][T19658] shmem 0 [ 2606.535250][T19658] file_mapped 0 [ 2606.535250][T19658] file_dirty 0 [ 2606.535250][T19658] file_writeback 0 [ 2606.535250][T19658] anon_thp 2097152 [ 2606.535250][T19658] inactive_anon 0 [ 2606.535250][T19658] active_anon 2134016 [ 2606.535250][T19658] inactive_file 0 [ 2606.535250][T19658] active_file 0 [ 2606.535250][T19658] unevictable 0 [ 2606.535250][T19658] slab_reclaimable 270336 [ 2606.535250][T19658] slab_unreclaimable 1085440 [ 2606.535250][T19658] pgfault 89661 [ 2606.535250][T19658] pgmajfault 0 [ 2606.535250][T19658] workingset_refault 33 [ 2606.535250][T19658] workingset_activate 0 [ 2606.535250][T19658] workingset_nodereclaim 0 [ 2606.535250][T19658] pgrefill 1281 [ 2606.535250][T19658] pgscan 1276 [ 2606.535250][T19658] pgsteal 33 [ 2606.535250][T19658] pgactivate 1188 [ 2606.544285][T19658] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19656,uid=0 [ 2606.578397][T19658] Memory cgroup out of memory: Killed process 19656 (syz-executor.1) total-vm:72708kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2606.774544][ T1065] oom_reaper: reaped process 19656 (syz-executor.1), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 2606.825136][T19633] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2606.835265][T19633] CPU: 1 PID: 19633 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 2606.842812][T19633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2606.852869][T19633] Call Trace: [ 2606.856170][T19633] dump_stack+0x172/0x1f0 [ 2606.860505][T19633] dump_header+0x10b/0x82d [ 2606.864919][T19633] ? oom_kill_process+0x94/0x3f0 [ 2606.869859][T19633] oom_kill_process.cold+0x10/0x15 [ 2606.874970][T19633] out_of_memory+0x334/0x1340 [ 2606.879645][T19633] ? lock_downgrade+0x920/0x920 [ 2606.884487][T19633] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2606.890277][T19633] ? oom_killer_disable+0x280/0x280 [ 2606.895460][T19633] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2606.901019][T19633] ? memcg_stat_show+0xc40/0xc40 [ 2606.905935][T19633] ? do_raw_spin_unlock+0x57/0x270 [ 2606.911026][T19633] ? _raw_spin_unlock+0x2d/0x50 [ 2606.915854][T19633] try_charge+0xf4b/0x1440 [ 2606.920288][T19633] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2606.925808][T19633] ? percpu_ref_tryget_live+0x111/0x290 [ 2606.931367][T19633] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2606.937620][T19633] ? __kasan_check_read+0x11/0x20 [ 2606.942659][T19633] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2606.948182][T19633] mem_cgroup_try_charge+0x136/0x590 [ 2606.953463][T19633] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2606.959084][T19633] wp_page_copy+0x407/0x1860 [ 2606.963664][T19633] ? find_held_lock+0x35/0x130 [ 2606.968403][T19633] ? do_wp_page+0x53b/0x15c0 [ 2606.972987][T19633] ? pmd_devmap_trans_unstable+0x220/0x220 [ 2606.978780][T19633] ? lock_downgrade+0x920/0x920 [ 2606.983609][T19633] ? swp_swapcount+0x540/0x540 [ 2606.988439][T19633] ? __kasan_check_read+0x11/0x20 [ 2606.993439][T19633] ? do_raw_spin_unlock+0x57/0x270 [ 2606.998527][T19633] do_wp_page+0x543/0x15c0 [ 2607.002925][T19633] ? finish_mkwrite_fault+0x6a0/0x6a0 [ 2607.008289][T19633] __handle_mm_fault+0x23ec/0x4040 [ 2607.013390][T19633] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2607.019174][T19633] ? handle_mm_fault+0x292/0xaa0 [ 2607.024095][T19633] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2607.030311][T19633] ? __kasan_check_read+0x11/0x20 [ 2607.035313][T19633] handle_mm_fault+0x3b7/0xaa0 [ 2607.040059][T19633] __do_page_fault+0x536/0xdd0 [ 2607.044813][T19633] do_page_fault+0x38/0x590 [ 2607.049304][T19633] page_fault+0x39/0x40 [ 2607.053435][T19633] RIP: 0033:0x430b36 [ 2607.057308][T19633] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 66 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 2c 44 64 00 85 c0 0f 84 [ 2607.076886][T19633] RSP: 002b:00007ffdc9e3c460 EFLAGS: 00010206 [ 2607.082930][T19633] RAX: 0000000000019691 RBX: 0000000000716640 RCX: 0000000000008041 [ 2607.090879][T19633] RDX: 00000000021fc930 RSI: 0000000002204970 RDI: 0000000000000003 [ 2607.098834][T19633] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000021fb940 [ 2607.106879][T19633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000716698 [ 2607.114838][T19633] R13: 0000000000716698 R14: 0000000000000000 R15: 0000000000002710 [ 2607.141833][T19633] memory: usage 3532kB, limit 0kB, failcnt 297 [ 2607.148028][T19633] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2607.155363][T19633] Memory cgroup stats for /syz3: [ 2607.155466][T19633] anon 98304 [ 2607.155466][T19633] file 126976 [ 2607.155466][T19633] kernel_stack 0 [ 2607.155466][T19633] slab 3878912 [ 2607.155466][T19633] sock 163840 [ 2607.155466][T19633] shmem 0 [ 2607.155466][T19633] file_mapped 0 [ 2607.155466][T19633] file_dirty 135168 [ 2607.155466][T19633] file_writeback 0 [ 2607.155466][T19633] anon_thp 0 [ 2607.155466][T19633] inactive_anon 0 [ 2607.155466][T19633] active_anon 16384 [ 2607.155466][T19633] inactive_file 126976 [ 2607.155466][T19633] active_file 0 [ 2607.155466][T19633] unevictable 0 [ 2607.155466][T19633] slab_reclaimable 2162688 [ 2607.155466][T19633] slab_unreclaimable 1716224 [ 2607.155466][T19633] pgfault 123585 [ 2607.155466][T19633] pgmajfault 0 [ 2607.155466][T19633] workingset_refault 0 [ 2607.155466][T19633] workingset_activate 0 [ 2607.155466][T19633] workingset_nodereclaim 0 [ 2607.155466][T19633] pgrefill 67 18:17:06 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = perf_event_open(&(0x7f00000008c0)={0x4, 0x70, 0x6e, 0x8, 0x9, 0x5, 0x0, 0x3, 0x8000, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000340), 0x4}, 0x480, 0x6, 0x3, 0x9, 0xfff, 0xfffffffc, 0x4}, r0, 0x9, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x1f, 0xfffffffffffffffe}, 0x10a2, 0x0, 0x4000, 0x1}, r0, 0x9, r1, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0), 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x1a0ffffffff) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='cpuset.effective_mems\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x8, 0x0, 0x0) close(r7) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r9 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x11, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x1a7}, 0x8080063) openat$cgroup_ro(r9, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r10 = openat$cgroup_int(r8, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) gettid() r11 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r11, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)}, 0xfc00) sendmsg$kcm(r11, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}]}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x1a0ffffffff) r13 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r13, 0x1, 0x3e, &(0x7f00000002c0)=r12, 0x161) perf_event_open(0x0, 0x0, 0x0, r12, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r10, 0x0, 0x0) 18:17:06 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x177, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) [ 2607.155466][T19633] pgscan 108 [ 2607.155466][T19633] pgsteal 42 [ 2607.155466][T19633] pgactivate 0 [ 2607.251361][T19633] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19633,uid=0 [ 2607.266903][T19633] Memory cgroup out of memory: Killed process 19633 (syz-executor.3) total-vm:72444kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 18:17:06 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x8004020000000000}, 0x0) 18:17:06 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x500000000000000}, 0x0) 18:17:07 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1a1, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:17:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) write$cgroup_int(r6, 0x0, 0x0) [ 2607.306830][T19636] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2607.324135][T19636] CPU: 0 PID: 19636 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 2607.331717][T19636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2607.341779][T19636] Call Trace: [ 2607.345080][T19636] dump_stack+0x172/0x1f0 [ 2607.349427][T19636] dump_header+0x10b/0x82d [ 2607.353847][T19636] ? oom_kill_process+0x94/0x3f0 [ 2607.358798][T19636] oom_kill_process.cold+0x10/0x15 [ 2607.363924][T19636] out_of_memory+0x334/0x1340 [ 2607.368691][T19636] ? lock_downgrade+0x920/0x920 [ 2607.373556][T19636] ? oom_killer_disable+0x280/0x280 [ 2607.378775][T19636] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2607.384337][T19636] ? memcg_stat_show+0xc40/0xc40 [ 2607.389298][T19636] ? do_raw_spin_unlock+0x57/0x270 [ 2607.394435][T19636] ? _raw_spin_unlock+0x2d/0x50 [ 2607.399309][T19636] try_charge+0xf4b/0x1440 18:17:07 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x8405000000000000}, 0x0) [ 2607.403752][T19636] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2607.408760][T19669] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2607.409304][T19636] ? percpu_ref_tryget_live+0x111/0x290 [ 2607.409327][T19636] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2607.409344][T19636] ? __kasan_check_read+0x11/0x20 [ 2607.409364][T19636] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2607.435443][T19636] mem_cgroup_try_charge+0x136/0x590 [ 2607.446269][T19636] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2607.451929][T19636] __handle_mm_fault+0x1f0d/0x4040 [ 2607.457048][T19636] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2607.457065][T19636] ? handle_mm_fault+0x292/0xaa0 [ 2607.457093][T19636] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2607.473780][T19636] ? __kasan_check_read+0x11/0x20 [ 2607.478822][T19636] handle_mm_fault+0x3b7/0xaa0 [ 2607.483607][T19636] __do_page_fault+0x536/0xdd0 [ 2607.488505][T19636] do_page_fault+0x38/0x590 [ 2607.493031][T19636] page_fault+0x39/0x40 [ 2607.493043][T19636] RIP: 0033:0x403522 [ 2607.493058][T19636] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 59 8f 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 79 44 05 00 48 [ 2607.493071][T19636] RSP: 002b:00007fff658e6000 EFLAGS: 00010246 [ 2607.493084][T19636] RAX: 0000000000000000 RBX: 000000000027c382 RCX: 0000000000413660 [ 2607.493092][T19636] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007fff658e7130 [ 2607.493100][T19636] RBP: 0000000000000002 R08: 0000000000000001 R09: 00000000026db940 18:17:07 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x600000000000000}, 0x0) [ 2607.493108][T19636] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff658e7130 [ 2607.493116][T19636] R13: 00007fff658e7120 R14: 0000000000000000 R15: 00007fff658e7130 [ 2607.544655][T19636] memory: usage 1404kB, limit 0kB, failcnt 1449 [ 2607.576305][T19636] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2607.600034][T19636] Memory cgroup stats for /syz1: [ 2607.600138][T19636] anon 0 [ 2607.600138][T19636] file 0 [ 2607.600138][T19636] kernel_stack 65536 [ 2607.600138][T19636] slab 1355776 [ 2607.600138][T19636] sock 0 [ 2607.600138][T19636] shmem 0 [ 2607.600138][T19636] file_mapped 0 [ 2607.600138][T19636] file_dirty 0 [ 2607.600138][T19636] file_writeback 0 [ 2607.600138][T19636] anon_thp 0 [ 2607.600138][T19636] inactive_anon 0 [ 2607.600138][T19636] active_anon 0 [ 2607.600138][T19636] inactive_file 0 [ 2607.600138][T19636] active_file 0 18:17:07 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x8dffffff00000000}, 0x0) [ 2607.600138][T19636] unevictable 0 [ 2607.600138][T19636] slab_reclaimable 270336 [ 2607.600138][T19636] slab_unreclaimable 1085440 [ 2607.600138][T19636] pgfault 89661 [ 2607.600138][T19636] pgmajfault 0 [ 2607.600138][T19636] workingset_refault 33 [ 2607.600138][T19636] workingset_activate 0 [ 2607.600138][T19636] workingset_nodereclaim 0 [ 2607.600138][T19636] pgrefill 1281 [ 2607.600138][T19636] pgscan 1276 [ 2607.600138][T19636] pgsteal 33 [ 2607.600138][T19636] pgactivate 1188 18:17:07 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x700000000000000}, 0x0) 18:17:07 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xac05000000000000}, 0x0) [ 2607.816106][T19636] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19636,uid=0 [ 2607.846498][T19636] Memory cgroup out of memory: Killed process 19636 (syz-executor.1) total-vm:72444kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 18:17:07 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0) [ 2607.923884][ T1065] oom_reaper: reaped process 19636 (syz-executor.1), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 2608.699735][T19674] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. 18:17:08 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x900000000000000}, 0x0) 18:17:08 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xe1a3b2feffd98a4c}, 0x0) 18:17:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) write$cgroup_int(r6, 0x0, 0x0) 18:17:08 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x178, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) [ 2608.912944][T19706] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. 18:17:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340), 0x0, 0x0, 0xfffffffffffffde8}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x1c, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x1024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000005c0)}, {&(0x7f0000000680)="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"}, {&(0x7f0000000600)="b935de44a2225da8020032f0"}], 0x1, 0x0, 0x3d56f99ba7ee879d}, 0x20044020) openat$cgroup_ro(r4, &(0x7f00000016c0)='pids.current\x00\x9d\x858h\x89\xfb\xcc\xb8\x14\xe6\xd1s\x13\x8c\xbe\x9c\xe9\xff\xc0\xab\xa5\x94\x92\xb1\xe21h\xa4\xa9\x8a\xa2b&\x1b\b\x00\x00\x00\x00\x00\x00\x00\xc6\xae\xac\xb5%\xe0V[\xc4Oe\x14\x85}n>$\xa30\xca\xde{\n', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)={&(0x7f00000004c0)='./file0\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0xfffffffffffffec7, &(0x7f0000000640)=[{&(0x7f0000000340)="c944a5fcaeedbafda5709e3f0002", 0xe}], 0x1}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x131}, 0x10800) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:17:08 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xe803000000000000}, 0x0) 18:17:08 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xa00000000000000}, 0x0) 18:17:08 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1a2, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:17:08 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xeffdffff00000000}, 0x0) 18:17:08 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xe00000000000000}, 0x0) 18:17:09 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0) 18:17:09 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xf401000000000000}, 0x0) 18:17:09 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xf5ffffff00000000}, 0x0) 18:17:09 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x1100000000000000}, 0x0) [ 2609.721430][T19722] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2610.076634][T19740] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2610.185048][T19753] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2610.547826][T19758] IPVS: ftp: loaded support on port[0] = 21 [ 2610.787547][T19758] chnl_net:caif_netlink_parms(): no params data found [ 2610.932278][T19758] bridge0: port 1(bridge_slave_0) entered blocking state [ 2610.949847][T19758] bridge0: port 1(bridge_slave_0) entered disabled state [ 2610.958791][T19758] device bridge_slave_0 entered promiscuous mode [ 2610.971259][T19758] bridge0: port 2(bridge_slave_1) entered blocking state [ 2610.978429][T19758] bridge0: port 2(bridge_slave_1) entered disabled state [ 2611.002994][T19758] device bridge_slave_1 entered promiscuous mode [ 2611.088481][T19758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2611.106078][T19761] IPVS: ftp: loaded support on port[0] = 21 [ 2611.116244][T19758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2611.250806][T19758] team0: Port device team_slave_0 added [ 2611.340700][T19758] team0: Port device team_slave_1 added [ 2611.433820][T19758] device hsr_slave_0 entered promiscuous mode [ 2611.490863][T19758] device hsr_slave_1 entered promiscuous mode [ 2611.649887][T19758] debugfs: Directory 'hsr0' with parent '/' already present! [ 2611.877438][T19761] chnl_net:caif_netlink_parms(): no params data found [ 2612.008334][T19761] bridge0: port 1(bridge_slave_0) entered blocking state [ 2612.017002][T19761] bridge0: port 1(bridge_slave_0) entered disabled state [ 2612.026174][T19761] device bridge_slave_0 entered promiscuous mode [ 2612.082265][T19761] bridge0: port 2(bridge_slave_1) entered blocking state [ 2612.089369][T19761] bridge0: port 2(bridge_slave_1) entered disabled state [ 2612.099344][T19761] device bridge_slave_1 entered promiscuous mode [ 2612.161669][T19761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2612.174397][T19761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2612.207057][T19758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2612.274674][T19761] team0: Port device team_slave_0 added [ 2612.294581][T19761] team0: Port device team_slave_1 added [ 2612.304810][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2612.313867][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2612.411510][T19758] 8021q: adding VLAN 0 to HW filter on device team0 [ 2612.524575][T19761] device hsr_slave_0 entered promiscuous mode [ 2612.640764][T19761] device hsr_slave_1 entered promiscuous mode [ 2612.699868][T19761] debugfs: Directory 'hsr0' with parent '/' already present! [ 2612.798173][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2612.807981][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2612.817135][T14677] bridge0: port 1(bridge_slave_0) entered blocking state [ 2612.824244][T14677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2612.885353][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2612.895834][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2612.905699][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2612.914651][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state [ 2612.921763][ T5761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2612.984420][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2613.001195][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2613.031618][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2613.041672][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2613.156573][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2613.165285][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2613.174973][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2613.201292][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2613.211129][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2613.287592][T19758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2613.300994][T19758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2613.313317][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2613.323710][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2613.462287][T19761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2613.482347][T19758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2613.544330][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2613.553387][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2613.652151][T19761] 8021q: adding VLAN 0 to HW filter on device team0 [ 2613.676545][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2613.686407][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2613.695176][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state [ 2613.702307][ T5761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2613.725199][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2613.734689][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2613.744184][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2613.760961][T11670] bridge0: port 2(bridge_slave_1) entered blocking state [ 2613.768089][T11670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2613.787066][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2613.854363][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2613.896825][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2613.935415][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2613.962600][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2613.966679][T19769] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2613.972434][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2613.991714][T19769] CPU: 0 PID: 19769 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 2613.999283][T19769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2614.009328][T19769] Call Trace: [ 2614.012610][T19769] dump_stack+0x172/0x1f0 [ 2614.016927][T19769] dump_header+0x10b/0x82d [ 2614.021339][T19769] oom_kill_process.cold+0x10/0x15 [ 2614.026433][T19769] out_of_memory+0x334/0x1340 [ 2614.031093][T19769] ? trace_hardirqs_on_caller+0x6a/0x240 [ 2614.036719][T19769] ? cgroup_file_notify+0x140/0x1b0 [ 2614.041907][T19769] ? oom_killer_disable+0x280/0x280 [ 2614.047096][T19769] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2614.052623][T19769] ? memcg_stat_show+0xc40/0xc40 [ 2614.057551][T19769] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2614.063345][T19769] ? cgroup_file_notify+0x140/0x1b0 [ 2614.068545][T19769] memory_max_write+0x262/0x3a0 [ 2614.073385][T19769] ? mem_cgroup_write+0x370/0x370 [ 2614.078394][T19769] ? lock_acquire+0x190/0x410 [ 2614.083054][T19769] ? kernfs_fop_write+0x227/0x480 [ 2614.088076][T19769] cgroup_file_write+0x241/0x790 [ 2614.093014][T19769] ? mem_cgroup_write+0x370/0x370 [ 2614.098023][T19769] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2614.103659][T19769] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2614.109274][T19769] kernfs_fop_write+0x2b8/0x480 [ 2614.114116][T19769] __vfs_write+0x8a/0x110 [ 2614.118430][T19769] ? kernfs_fop_open+0xd80/0xd80 [ 2614.123350][T19769] vfs_write+0x268/0x5d0 [ 2614.127576][T19769] ksys_write+0x14f/0x290 [ 2614.131888][T19769] ? __ia32_sys_read+0xb0/0xb0 [ 2614.136740][T19769] ? do_syscall_64+0x26/0x760 [ 2614.141400][T19769] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2614.147447][T19769] ? do_syscall_64+0x26/0x760 [ 2614.152111][T19769] __x64_sys_write+0x73/0xb0 [ 2614.156691][T19769] do_syscall_64+0xfa/0x760 [ 2614.161273][T19769] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2614.167144][T19769] RIP: 0033:0x459a59 [ 2614.171024][T19769] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2614.190611][T19769] RSP: 002b:00007fd4e2545c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2614.199015][T19769] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 2614.206970][T19769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2614.214921][T19769] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2614.222872][T19769] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4e25466d4 [ 2614.230929][T19769] R13: 00000000004c9e7e R14: 00000000004e1a90 R15: 00000000ffffffff [ 2614.276657][T19769] memory: usage 5676kB, limit 0kB, failcnt 298 [ 2614.286308][T19769] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2614.293619][T19769] Memory cgroup stats for /syz3: [ 2614.294577][T19769] anon 2179072 [ 2614.294577][T19769] file 126976 [ 2614.294577][T19769] kernel_stack 0 [ 2614.294577][T19769] slab 3743744 [ 2614.294577][T19769] sock 163840 [ 2614.294577][T19769] shmem 0 [ 2614.294577][T19769] file_mapped 0 [ 2614.294577][T19769] file_dirty 135168 [ 2614.294577][T19769] file_writeback 0 [ 2614.294577][T19769] anon_thp 2097152 [ 2614.294577][T19769] inactive_anon 0 [ 2614.294577][T19769] active_anon 2179072 [ 2614.294577][T19769] inactive_file 126976 [ 2614.294577][T19769] active_file 0 [ 2614.294577][T19769] unevictable 0 [ 2614.294577][T19769] slab_reclaimable 2162688 [ 2614.294577][T19769] slab_unreclaimable 1581056 [ 2614.294577][T19769] pgfault 123618 [ 2614.294577][T19769] pgmajfault 0 [ 2614.294577][T19769] workingset_refault 0 [ 2614.294577][T19769] workingset_activate 0 [ 2614.294577][T19769] workingset_nodereclaim 0 [ 2614.294577][T19769] pgrefill 67 [ 2614.294577][T19769] pgscan 108 [ 2614.294577][T19769] pgsteal 42 [ 2614.294577][T19769] pgactivate 0 [ 2614.395948][T19769] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19768,uid=0 [ 2614.425128][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2614.434291][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2614.443453][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2614.452415][T19769] Memory cgroup out of memory: Killed process 19768 (syz-executor.3) total-vm:72576kB, anon-rss:2180kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 2614.490607][ T1065] oom_reaper: reaped process 19768 (syz-executor.3), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 2614.535246][T19761] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2614.590917][T19761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2614.606397][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2614.620169][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 18:17:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:17:14 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x1300000000000000}, 0x0) [ 2614.779579][T19761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2614.842961][T19758] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2614.879902][T19758] CPU: 1 PID: 19758 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 2614.887513][T19758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2614.897572][T19758] Call Trace: [ 2614.900870][T19758] dump_stack+0x172/0x1f0 [ 2614.905207][T19758] dump_header+0x10b/0x82d [ 2614.909613][T19758] ? oom_kill_process+0x94/0x3f0 [ 2614.914633][T19758] oom_kill_process.cold+0x10/0x15 [ 2614.919748][T19758] out_of_memory+0x334/0x1340 [ 2614.924421][T19758] ? lock_downgrade+0x920/0x920 [ 2614.929270][T19758] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2614.935076][T19758] ? oom_killer_disable+0x280/0x280 [ 2614.940285][T19758] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2614.945837][T19758] ? memcg_stat_show+0xc40/0xc40 [ 2614.950788][T19758] ? do_raw_spin_unlock+0x57/0x270 [ 2614.955913][T19758] ? _raw_spin_unlock+0x2d/0x50 [ 2614.960780][T19758] try_charge+0xf4b/0x1440 [ 2614.965230][T19758] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2614.970784][T19758] ? percpu_ref_tryget_live+0x111/0x290 [ 2614.970803][T19758] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2614.970818][T19758] ? __kasan_check_read+0x11/0x20 [ 2614.970837][T19758] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2614.982671][T19758] mem_cgroup_try_charge+0x136/0x590 [ 2614.982694][T19758] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2614.982711][T19758] wp_page_copy+0x407/0x1860 [ 2614.982728][T19758] ? find_held_lock+0x35/0x130 [ 2615.013553][T19758] ? do_wp_page+0x53b/0x15c0 [ 2615.018143][T19758] ? pmd_devmap_trans_unstable+0x220/0x220 [ 2615.023936][T19758] ? lock_downgrade+0x920/0x920 [ 2615.028763][T19758] ? swp_swapcount+0x540/0x540 [ 2615.033507][T19758] ? __kasan_check_read+0x11/0x20 [ 2615.038594][T19758] ? do_raw_spin_unlock+0x57/0x270 [ 2615.043694][T19758] do_wp_page+0x543/0x15c0 [ 2615.048096][T19758] ? finish_mkwrite_fault+0x6a0/0x6a0 [ 2615.053469][T19758] __handle_mm_fault+0x23ec/0x4040 [ 2615.058562][T19758] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2615.064261][T19758] ? handle_mm_fault+0x292/0xaa0 [ 2615.069587][T19758] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2615.076054][T19758] ? __kasan_check_read+0x11/0x20 [ 2615.081300][T19758] handle_mm_fault+0x3b7/0xaa0 [ 2615.088798][T19758] __do_page_fault+0x536/0xdd0 [ 2615.096881][T19758] do_page_fault+0x38/0x590 [ 2615.101384][T19758] page_fault+0x39/0x40 [ 2615.105524][T19758] RIP: 0033:0x430b36 [ 2615.109560][T19758] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 66 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 2c 44 64 00 85 c0 0f 84 [ 2615.129490][T19758] RSP: 002b:00007ffe4b2b4260 EFLAGS: 00010206 [ 2615.135539][T19758] RAX: 0000000000019691 RBX: 0000000000716640 RCX: 0000000000008041 [ 2615.143491][T19758] RDX: 0000000001871930 RSI: 0000000001879970 RDI: 0000000000000003 [ 2615.151473][T19758] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001870940 [ 2615.159509][T19758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000716698 [ 2615.167462][T19758] R13: 0000000000716698 R14: 0000000000000000 R15: 0000000000002710 [ 2615.176867][T19758] memory: usage 3348kB, limit 0kB, failcnt 306 [ 2615.183439][T19758] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2615.190582][T19758] Memory cgroup stats for /syz3: [ 2615.190681][T19758] anon 73728 [ 2615.190681][T19758] file 126976 [ 2615.190681][T19758] kernel_stack 0 [ 2615.190681][T19758] slab 3743744 [ 2615.190681][T19758] sock 163840 [ 2615.190681][T19758] shmem 0 [ 2615.190681][T19758] file_mapped 0 [ 2615.190681][T19758] file_dirty 135168 [ 2615.190681][T19758] file_writeback 0 [ 2615.190681][T19758] anon_thp 0 [ 2615.190681][T19758] inactive_anon 0 [ 2615.190681][T19758] active_anon 73728 [ 2615.190681][T19758] inactive_file 126976 [ 2615.190681][T19758] active_file 0 [ 2615.190681][T19758] unevictable 0 [ 2615.190681][T19758] slab_reclaimable 2162688 [ 2615.190681][T19758] slab_unreclaimable 1581056 [ 2615.190681][T19758] pgfault 123618 [ 2615.190681][T19758] pgmajfault 0 [ 2615.190681][T19758] workingset_refault 0 [ 2615.190681][T19758] workingset_activate 0 [ 2615.190681][T19758] workingset_nodereclaim 0 [ 2615.190681][T19758] pgrefill 67 [ 2615.190681][T19758] pgscan 108 [ 2615.190681][T19758] pgsteal 75 [ 2615.190681][T19758] pgactivate 0 [ 2615.195625][T19758] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19758,uid=0 [ 2615.301536][T19758] Memory cgroup out of memory: Killed process 19758 (syz-executor.3) total-vm:72444kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 2615.382554][T19780] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2615.396779][T19780] CPU: 0 PID: 19780 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 2615.404413][T19780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2615.414485][T19780] Call Trace: [ 2615.417786][T19780] dump_stack+0x172/0x1f0 [ 2615.422130][T19780] dump_header+0x10b/0x82d [ 2615.426549][T19780] oom_kill_process.cold+0x10/0x15 [ 2615.431810][T19780] out_of_memory+0x334/0x1340 [ 2615.436505][T19780] ? __sched_text_start+0x8/0x8 [ 2615.441410][T19780] ? oom_killer_disable+0x280/0x280 [ 2615.446642][T19780] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2615.452215][T19780] ? memcg_stat_show+0xc40/0xc40 [ 2615.457199][T19780] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2615.463034][T19780] ? cgroup_file_notify+0x140/0x1b0 [ 2615.468244][T19780] memory_max_write+0x262/0x3a0 [ 2615.473110][T19780] ? mem_cgroup_write+0x370/0x370 [ 2615.478133][T19780] ? lock_acquire+0x190/0x410 [ 2615.482820][T19780] ? kernfs_fop_write+0x227/0x480 [ 2615.487882][T19780] cgroup_file_write+0x241/0x790 [ 2615.493440][T19780] ? mem_cgroup_write+0x370/0x370 [ 2615.498487][T19780] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2615.504141][T19780] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2615.509780][T19780] kernfs_fop_write+0x2b8/0x480 [ 2615.514632][T19780] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2615.520964][T19780] __vfs_write+0x8a/0x110 [ 2615.525291][T19780] ? kernfs_fop_open+0xd80/0xd80 [ 2615.530239][T19780] vfs_write+0x268/0x5d0 [ 2615.534484][T19780] ksys_write+0x14f/0x290 [ 2615.538814][T19780] ? __ia32_sys_read+0xb0/0xb0 [ 2615.543586][T19780] ? do_syscall_64+0x26/0x760 [ 2615.548439][T19780] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2615.554528][T19780] ? do_syscall_64+0x26/0x760 [ 2615.559233][T19780] __x64_sys_write+0x73/0xb0 [ 2615.565499][T19780] do_syscall_64+0xfa/0x760 [ 2615.570099][T19780] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2615.579546][T19780] RIP: 0033:0x459a59 [ 2615.583456][T19780] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2615.603255][T19780] RSP: 002b:00007f3963299c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2615.612036][T19780] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 2615.620021][T19780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2615.627986][T19780] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2615.635953][T19780] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f396329a6d4 [ 2615.644010][T19780] R13: 00000000004c9e7e R14: 00000000004e1a90 R15: 00000000ffffffff [ 2615.657599][T19780] memory: usage 3724kB, limit 0kB, failcnt 1450 [ 2615.664050][T19780] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2615.671402][T19780] Memory cgroup stats for /syz1: [ 2615.671524][T19780] anon 2162688 [ 2615.671524][T19780] file 0 [ 2615.671524][T19780] kernel_stack 65536 [ 2615.671524][T19780] slab 1355776 [ 2615.671524][T19780] sock 0 [ 2615.671524][T19780] shmem 0 [ 2615.671524][T19780] file_mapped 0 [ 2615.671524][T19780] file_dirty 0 [ 2615.671524][T19780] file_writeback 0 [ 2615.671524][T19780] anon_thp 2097152 [ 2615.671524][T19780] inactive_anon 0 [ 2615.671524][T19780] active_anon 2162688 [ 2615.671524][T19780] inactive_file 0 [ 2615.671524][T19780] active_file 0 [ 2615.671524][T19780] unevictable 0 [ 2615.671524][T19780] slab_reclaimable 270336 [ 2615.671524][T19780] slab_unreclaimable 1085440 [ 2615.671524][T19780] pgfault 89760 [ 2615.671524][T19780] pgmajfault 0 [ 2615.671524][T19780] workingset_refault 33 [ 2615.671524][T19780] workingset_activate 0 [ 2615.671524][T19780] workingset_nodereclaim 0 [ 2615.671524][T19780] pgrefill 1281 [ 2615.671524][T19780] pgscan 1276 [ 2615.671524][T19780] pgsteal 33 [ 2615.671524][T19780] pgactivate 1188 [ 2615.769301][T19780] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19779,uid=0 [ 2615.787114][T19780] Memory cgroup out of memory: Killed process 19779 (syz-executor.1) total-vm:72576kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2615.811366][ T1065] oom_reaper: reaped process 19779 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 18:17:15 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x1a0ffffffff) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x161) ioctl$PERF_EVENT_IOC_QUERY_BPF(r7, 0xc008240a, &(0x7f00000004c0)={0x2, 0x0, [0x0, 0x0]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r9 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r9, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0xfffffffffffffec7, &(0x7f0000000640)=[{&(0x7f0000000340)="c944a5fcaeedbafda5709e3f0002", 0xe}], 0x1}, 0xfc00) sendmsg$kcm(r9, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:17:15 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xfc00000000000000}, 0x0) 18:17:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:17:15 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1a3, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:17:15 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x179, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:17:15 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x2800000000000000}, 0x0) [ 2615.911858][T19761] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2615.946528][T19761] CPU: 1 PID: 19761 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 2615.954148][T19761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2615.964207][T19761] Call Trace: [ 2615.967558][T19761] dump_stack+0x172/0x1f0 [ 2615.971902][T19761] dump_header+0x10b/0x82d [ 2615.977538][T19761] ? oom_kill_process+0x94/0x3f0 [ 2615.982483][T19761] oom_kill_process.cold+0x10/0x15 [ 2615.987620][T19761] out_of_memory+0x334/0x1340 [ 2615.992336][T19761] ? lock_downgrade+0x920/0x920 [ 2615.997304][T19761] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2616.003130][T19761] ? oom_killer_disable+0x280/0x280 [ 2616.008449][T19761] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2616.014016][T19761] ? memcg_stat_show+0xc40/0xc40 [ 2616.018976][T19761] ? do_raw_spin_unlock+0x57/0x270 [ 2616.018994][T19761] ? _raw_spin_unlock+0x2d/0x50 [ 2616.019012][T19761] try_charge+0xf4b/0x1440 [ 2616.033555][T19761] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2616.039109][T19761] ? percpu_ref_tryget_live+0x111/0x290 [ 2616.039131][T19761] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2616.039152][T19761] ? __kasan_check_read+0x11/0x20 [ 2616.048716][T19791] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2616.051840][T19761] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2616.051860][T19761] mem_cgroup_try_charge+0x136/0x590 [ 2616.051881][T19761] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2616.083036][T19761] wp_page_copy+0x407/0x1860 [ 2616.087830][T19761] ? find_held_lock+0x35/0x130 [ 2616.092624][T19761] ? do_wp_page+0x53b/0x15c0 [ 2616.097662][T19761] ? pmd_devmap_trans_unstable+0x220/0x220 [ 2616.097679][T19761] ? lock_downgrade+0x920/0x920 [ 2616.097700][T19761] ? swp_swapcount+0x540/0x540 [ 2616.113105][T19761] ? __kasan_check_read+0x11/0x20 [ 2616.118154][T19761] ? do_raw_spin_unlock+0x57/0x270 [ 2616.123375][T19761] do_wp_page+0x543/0x15c0 [ 2616.127823][T19761] ? finish_mkwrite_fault+0x6a0/0x6a0 [ 2616.133224][T19761] __handle_mm_fault+0x23ec/0x4040 [ 2616.138353][T19761] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2616.143930][T19761] ? handle_mm_fault+0x292/0xaa0 [ 2616.148899][T19761] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2616.155565][T19761] ? __kasan_check_read+0x11/0x20 18:17:15 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xfe80000000000000}, 0x0) 18:17:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:17:15 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xfec0000000000000}, 0x0) [ 2616.160609][T19761] handle_mm_fault+0x3b7/0xaa0 [ 2616.160631][T19761] __do_page_fault+0x536/0xdd0 [ 2616.160653][T19761] do_page_fault+0x38/0x590 [ 2616.160676][T19761] page_fault+0x39/0x40 [ 2616.178809][T19761] RIP: 0033:0x430b36 [ 2616.182734][T19761] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 66 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 2c 44 64 00 85 c0 0f 84 [ 2616.202337][T19761] RSP: 002b:00007ffc95cf5110 EFLAGS: 00010206 [ 2616.202350][T19761] RAX: 0000000000019691 RBX: 0000000000716640 RCX: 0000000000008041 [ 2616.202359][T19761] RDX: 0000000001bc1930 RSI: 0000000001bc9970 RDI: 0000000000000003 [ 2616.202367][T19761] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001bc0940 [ 2616.202375][T19761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000716698 [ 2616.202383][T19761] R13: 0000000000716698 R14: 0000000000000000 R15: 0000000000002710 18:17:16 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x2900000000000000}, 0x0) 18:17:16 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xfeffffff00000000}, 0x0) [ 2616.520660][T19797] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. 18:17:16 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x3000000000000000}, 0x0) [ 2616.730765][T19761] memory: usage 1392kB, limit 0kB, failcnt 1458 [ 2616.737053][T19761] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2616.765050][T19761] Memory cgroup stats for /syz1: [ 2616.765164][T19761] anon 0 [ 2616.765164][T19761] file 0 [ 2616.765164][T19761] kernel_stack 65536 [ 2616.765164][T19761] slab 1355776 [ 2616.765164][T19761] sock 0 [ 2616.765164][T19761] shmem 0 [ 2616.765164][T19761] file_mapped 0 [ 2616.765164][T19761] file_dirty 0 [ 2616.765164][T19761] file_writeback 0 [ 2616.765164][T19761] anon_thp 0 [ 2616.765164][T19761] inactive_anon 0 [ 2616.765164][T19761] active_anon 0 [ 2616.765164][T19761] inactive_file 0 [ 2616.765164][T19761] active_file 0 [ 2616.765164][T19761] unevictable 0 [ 2616.765164][T19761] slab_reclaimable 270336 [ 2616.765164][T19761] slab_unreclaimable 1085440 [ 2616.765164][T19761] pgfault 89760 [ 2616.765164][T19761] pgmajfault 0 [ 2616.765164][T19761] workingset_refault 66 [ 2616.765164][T19761] workingset_activate 0 [ 2616.765164][T19761] workingset_nodereclaim 0 [ 2616.765164][T19761] pgrefill 1281 [ 2616.765164][T19761] pgscan 1276 [ 2616.765164][T19761] pgsteal 33 [ 2616.765164][T19761] pgactivate 1188 [ 2616.896422][T19784] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2616.933258][T19761] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19761,uid=0 [ 2616.994574][T19761] Memory cgroup out of memory: Killed process 19761 (syz-executor.1) total-vm:72444kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 2617.021436][ T1065] oom_reaper: reaped process 19761 (syz-executor.1), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 18:17:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x30f}, 0x1024, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab7}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r1}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x1a0ffffffff) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) r6 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) r10 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0x8, 0x0, 0x0) sendmsg$kcm(r10, &(0x7f0000000d00)={&(0x7f0000000540)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x4}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000680)="1f185b8ae42a8551e2c032b65f1aafe22e04efda3fd1f8a7110ce36feb97b085be476225e1dd97c44f2764de0543bae010df788ca089b143f8cf9f30daa80f0142148309460a83925470f79e647316f171d9dc2d850ab4e77e7b8b8792f2a7d4af43d8121c5514ffba1ed005dceaf54c6c43477e09a3ca09c9f4ec3a5a9d5d18c2b9b7847397b08d15d93dc412db54aefdc78ad984a8b915246d8c8db5cac53dd9f262387ac10b8e9dfdc2c37a055c7c487b35081a69f35bf25958f606ad", 0xbe}, {&(0x7f0000000740)="24591ef23f26e48c83c61e9b2f3c9d0e637d803061a319a294c2f215c04f1faed9e5029bc35b3133678c998c828c60f4daa838c6e6098c46b3d64680e8bd2a7a964113898cdfa86458b0a079a57eb2bcb57c66ea446101c140bc785910753dbc8152cd9422691b81230e7a08a36051a7bcc78402a6586dfe57f155eedb8753f81bd1", 0x82}, {&(0x7f00000005c0)="a9835b94f749026482bbe4ba73a0b3267c6a87b68941672f2f230c3a073dabdb34ec99e5d9df2af16f7a37aabf3e5f9d7147d48b3b6bd19e0c131cfa79d5846f8ae9a19de5b2ed7f78765664f49c9cfa00b16e", 0x53}, {&(0x7f00000004c0)="d236909ad4605afa11ceb347e01bf0c0dc0b78acaea87c8f92b9bf3f8a0f0333fded579f9febd37c30e422f2c546e6c6777f9ab6a4edbd93e13fda", 0x3b}, {&(0x7f0000000800)="8d75104d80af92e21b542f7efd1f01c8a6e23ec3981dd1874c512dd98c83c257c22bc31d2aff29308ff51f6718d39b2c2b1a79e34847c6ea713601becbdda2e93d4e7dd52cf13fc51cce64209cc4cd9eb0e997f52cffdc7e0f16a3dd5dce21913f02a7aea11c14296caa7a028c4a87e539da0c8726e5ca0f512892950da0e007b721233222a1d4404558ca38785e2aba6de85c16125d27fc14470fa38245f97c55c477da772dc19acfa01cf661c16f396a41af8b7f1cf294861a5e36b383b941cdc05bfd80ba8ad96d3aa61f8c552265f7b3aee8280173b08de005c6b532c26ba382", 0xe2}, {&(0x7f0000000900)="28f086ba98e4a7b9795e5b14e01ef339c4e2e76add20faedebe7b2814064d5975c6f5b71312a92ccf001dda6a05065fb7d771cbca0fde894218d8e565cad0301711034c0c61339672980841a3c311f99737a5e39a95f12c30a2df42232c78372ca6b2009647628a358616808d87eba733a54bc454d3007393e588f90c6aae615dad9c281abdafe0f9136ad2acb84330f96f6bd623391848fd3fd5d2bb9c3c9b1a07b0b22dbb5723e71f990a730c7a2e4df5751a62f9c2b3a3a9fe733c6f9d253cedf7ac9a96a79be036907f75e68d72b1fea881ed24774646019608e581c36de", 0xe0}, {&(0x7f0000000a00)="4dbf6d07b90e17b08acf24deb96575fd7a20612289140caba75ee2dd0c343b7bee39bb39b34f189b4acd7421fe18d2b0c5193656ee8e0599c6e57e2a0655be5cbcee4cabe48f89cc646ebfdc4bedc163f70d2b2b433a494f1979d6e0ffcfded117cd6fb12f743d7d4e336725b0af198cc35380d279f23884b8182a88bf395e4edb698e8105885113bb9ab1623917b729b4eaa3514f443aefdd1925fe69051d701175cc2d273b07fe71cf8a4203e7622513af846682d1e8f9d8ede8af3338c686b2829aa9", 0xc4}, {&(0x7f0000000b00)}], 0x8, &(0x7f0000000bc0)=[{0xf0, 0x117, 0x400, "5a37df2506f49324a4741f0b4f38f008d850d1cabc25d1304def906c87c748e095a80a9e0c0af44049563399d4d3bfeb45533b9adf421ba9878aece0557aa89a15cfd2ae01477f8da6ba554459da81b3ce79940374f53b343050c2fedc3d7faccb6e60c1a7ec4fc0b2a251e11098185dc76fda7571fe47f8ea45761b24002e9dd0568cc06c4097d6c72e9e9e2db78165a04003c861fee172806cb21c9324e3f2e0e00001b7484da036d424a8fa394cd74e4d65d60b634da120c82bfb647b6dec3bd2531f6f49bfa972295bdf7c6f415121e18f2d7e217ce021d9110f5d614eb4"}, {0x38, 0x1, 0x3, "ec27e8ec90025603360a0c8222ae97003011955db4851e235b3f280fd57c989451b8"}], 0x128}, 0x4000) openat$cgroup_ro(r8, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r11 = openat$cgroup_int(r7, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r7, 0x0, 0x1, 0x0, 0x0}, 0x20) r12 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r12, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0xfffffffffffffec7, &(0x7f0000000640)=[{&(0x7f0000000340)="c944a5fcaeedbafda5709e3f0002", 0xe}], 0x1}, 0xfc00) sendmsg$kcm(r12, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r11, 0x0, 0x0) 18:17:17 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xff00000000000000}, 0x0) 18:17:17 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1a5, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="5ea03f6db511aee466448c41d0a37c5d52fbf6d123b2238bc0dc67ffb8a030dd7d9264060255082b5024d1bd6e117d7a20ca56078066e91049b134eb2db929be3f0ac2f70eacf24ae891471c290affb67848907db14e21832c3df1d097ecf14e120ecc990d234042832cc0352f4c22b3828a9ad20ee214973a95bd34110513eb0b903c83d4b8aa755076804cf502013c1bbace98bc821e5a8ba782e18f8fa11b088b70db05e454dd159d018ed06d197dd6014565077d4ebfb8b7db6d35f609ed05ffbcf3380687357f1a593b6f2842e76ff1df4bd5ae29584f89e9d2e50ccbb2964e2e6d3487a509a21e1f6c0ab2dcd9f70777a5c1d58dbf37d5ad66d553898b5620b1e35eb2a96ec010bb87957b6193071706744e312fff95abe536818207e41f7af43e08cca42680fadb739d70aafbeafa7fae70e4526c97e9edcac5648e4c38e10efd34d9f09592c73542bf127a1e68cf8fc3e58e78142b5e5fbbee0175350ab1a8aeedc6c8072ccaa476da314b578854756bb2db47caff231a7f64c51d1d7b4ed1e7cde59355285ef2c2be4ca6f0f6d01dc2d9845505f3a97a57f240c0b0f18fb4936dbb6cf7b6dbf6ec28e61a91ae6e748d0adec1c02c7a39019853b7497e5c3fdd571058f3e648b9f14080442b7279b28de971b6c8b97f1cea66a08bf83bee0707cae6972648a7f3924d63fd69ed03a13aaeba0d9e3bb239544359153fa124e70f873f9d10c07a5a0b58e82536153849350203d848998d61cbaa4f67dc73c84dbcd45939a3f01839e0897a3271118e304694db3ab806e05d206bd3c42dc79be167c9c297559d9a85d5eb04369c534360045b1a80e28d1466705873e3d8bfa73c44d59473df58b8a0305e6a5ec7300183cc60115288e393ca5d160a0fc8eaec5a77c0ba0798eed1e18890e2403ee8d156514eb6f5dc075d4a1f7ce70ae6fab8c82c6ecbcf3e973bc6a461f2f739f9820d66e28f3e9834a7ac8ed81a352c9f7a0882b14b2044ededaf694eba063ad3192f4dbf6ba79288a47ccbf6546c4fbbaefc864694e7063e39cb12ec68dca7b20986c48ae94022cdcb888222ee7f05f55ddea71f0298223b3c4109c15dd7ec41e78aef8dd5ff55c89ce7900261d62b35d12b813b8a385863f3c9d1f4ed37d7cd5314226afdb2892ddaeb1eec542cc8c040fc64cd3ae4dcd7264d68d247acbb353e40a33d5682ce2a4a005a2975908cbd0526beb6048840f3499cfcebba06eaf0c51c8b760593098a3def21b3664e7d42253f8c990538d382bf0768cdc106fac3699bcb5b12279f81dc9ba6ed1e2f7820f6cf8a2b3e4c88a33d9f0a32f60673b5897cadbbe7dffb9cf7f6b5a5d62701eba230fb2daa966a63d91e86c02472bd8114e5ba5df8152067086c142e6cd88289a501fc3353c1d0f17a663b179c446220d970d50a9c9adbb0b990be52ad19cd36669df47ff6e1f6fec4b7b1693c802d736aebe985e0c3c59c753ed95d79a7564880c4e2ffe5c9e59e818d2810468c48a4e75f15f3f252f2d780dd30717fe572c5d55adf090223fb30216c3882e9be19cb627aab1fdad81f8f117a90c2e7874edf1c4dc8e2da674348855659434eaba5c5063a29c28f4d22ce5515464b53967ab33d82f0e5afa98322c31e789be5d7600c726bd467d3be3eb4e0df733b91eecd95a5d1648ef268c43906b187ab24bb83bc80fa2ba4ab21d99c0aadf87d15cec51bf2cd52412ec638b43c27551f039e58026e6e910c7f327afe2e363491cfed5caadc8ca674659004f24991fdf76faac054dff64fb2282fc92d3b9ae32222833f1ae905dfa1dada3116765ef2b04ae6124f44cc7f83bd8f159eaa5290cc9e691fa77bec9c35a625b1b24cde8c9363b37b6f77ce844ea77752891b4c837c7c9648f7a16da6aadaf8912ba392c9984d26977c4b99e5c94925f0c6b9a48f2701eeb477aa0a99adb7fd145cd01b3cee9ad3c835690cda9ee1302fdf301558bb1979e177f18876b3fbe7b01597260a33822a63cdc760edee9839d75e0de20acdc8ae98a008d7390e4bb095650149b1bae84d240bd6480fbb10c1930f3a61dbfc3cb17888e33fb12f2dec1523380699b28300bf8b377e4357d5385176a35edbbb6e81e17e42fb07964452b53a069704f597cab1c646a8e8b99c0411e18def7e1c26e7cab72369228dfeb0d306cd46cdd9299538c89697c1c681d577290c2b03c9d84cd1b5803ff9291a28f3efbc3112b53e5cea348d364a954ac78db91e610df86be53c20707401d70f7768cdf0566420c1dfb7216877784244b5a84abc61e577b11b5dfd194018dbaa4024b57e6b0dcba72f621f62938f7a717c9a899aaa78b595f01c48f94c0bbf68c7cfb16c59269f48611dc9d7077b6805edbe30f2c7988a18f5ef3928a769f011936af9cb4665f48ce17afa1bb3f614e76b40a7e0920b9942362c41589f2be923530a186693a429a8e2767ec30d02407d4fbb6a397f52ec48fdb3fc0d2863f301585a14941cfac093cf8e53e91762db548306961979d396e4645f5698aa36db22603d1893149ba2d7aaa44bb14e0eceafd84cddb3c5c3e2a8eeb02a96e9d9f08db989b450614b0767314e4024114c785c95272226f1c2e2a29a07c7c133abaf254fb9d64a1c597ca32c3a1b17bf262907d9a5a468d37986a300f9a1274718521d76cc1fa8ae122f5dc46ba1c998c3d66bbfdece070f37ac35c7d7de0bffc8369f222fe768273edb69115f94177e9ab237ba50eafdefd5a2369059be377db15661961961c3bc60e6b1af713bd20d70b315025a249d5a6d67e340582404b561ae11fcc711c21c80a56d0a6b964d333e0c1a53333a2ebf4ebda28a59680639c0fd282d64539143b2d416accb7b5cfa16fb2dd9b767f79fe9c26f2b70972b2225ae8beae908dfcb34bbe30870369ea766479db570787a6e11d7544f32888b637e3cbbc4fc85e34d7847e26779e8a8d940ae28de2f2d122c1dba8948af913b2ba890cb12cf2db92ae75aac53614d6faaed47b4373147c6c93880646ee35d85394d25d9dadf73ea35ada21cdbc89038e90e9a28949fd84bac77ea7b2f79ece1c3c2defe5faf9b001ac4750920fc6414569413fd2cdb4e49751fa9c1a531d0081856aa2a9f884040610f9782eeb2c135afc0f60c09e1d5c3a83311010ead8b7bebe91bf339b7d88fab261596465fbbb8942fd32aac8661bb3ad21696895365e258f2a6d4e9049f93545e971fc053317082a2c6ebe65e571b29cdcbca06e5f422c6ea288f98d282ad5c9475a3e9258b4a21360d19cb91c99aeb6476f21049c8d6c9918a9ba7ced60b1f97b9b9cacef6958da3fb8b762f35043539c145956487110ccd420783f3c4490cecb089179c99a89e07fc14d2a8e8a78cc1cbbf0caaf9f8a6850fa8f150c45b616c102a09b995ac9408fdfd26b79339ad175691cc065f7911d99c53b249f03a96b3df1cca6f9dfd2d3c1e732681d58cc2fc671010e7bd98c006ba63b703266aa2f1c3d6fbc148902e425d83d044f014b9e7b3977b8fda094e02dd6dd8298983d5d891d66db077233fc155dad208bfe7c6585bdc6d246bba81cacff55994ee88f9163b27f51d6ae47d0b296124d3018f69f79528797e8aaf21d8035c044821137b0f7e7b3b41b8019379002ae9bc70dc1bc377b6fc0e2a40accf480ae0dc53e61a91d1815ea796fc14d6abddcee1fd965adc3a441333d430568bcb29f0cac078b70a4f6d1011c1822708fb1bbeeaea6433cf5cdcf9aec7bbce4c92e6fdda88b3dc48a4d42f4348a05fee23c41869ca326d39c0605d9144f82bd0c3c2f9ac9ae0b1f5fabe0ab5af39babf027a83df5b1c58513d27cb5babc9a5be073043543bff731da9bb715e57678507baf194fec9efa3235631b9594682dd531c3762432e25c25c048e600cc7c318e82b720db17436fbc054c04f59923ae61ec0b4896d08daab3b617bd8d239c24e95c8fcd1a7dd64a8a3d7e158c626833a2735c9e96514639f007983da3bb43a6f18e40d3eda0cc9468d118d28c6bda3ebae6c3ae2c14b1b02305abd16b7c6be707ffaf59142988eb931275bd4c38aefefbbaa95e16d7551f5f1fcfa9744a357d21c76b28747e5e94683d455530433876d509793ed409847f8a972450285f9e9f2dc665e78c7747418523bb51ef8191231e989ca93ef75e9ca27f38a2e5327d29c265c39f12fb1d01a723a902292c6bc06fdc6856d4829680909db55c4650449d0a2d2dad92cfbc8c03fdcb5656a56fded95b0ac41595a2a5bb34d5feb4e06da8adb5143eef67cdc3d18edd095c086d99cb43cddbbfeeb0beadadc1e30ec57bf760592e6365ffacbd6134b7262966af9c808f980fff81280566c79d3a2a15654c597aa050dda7ace4b5298f512b445023d4d86bc37c85ee1a2d7637f3ea0eafd6440893f43a2a912735d0dc8e2827148893f7554897fcb91a4f5581d793fa707fa181dcf69e3fddf498a19767922f4c52fd6797bfba85a61f9c5fe10970b06c7006d7b804f5d1db40b6f606f532cc5a6b93be6473bcbad8f06ead3995cb5f42ee8ddc658ac9085d0c6046b07be03837d5d68504c04b2a769db69e04aa1e414eec40118856f58ac5d3765e5d5038b20d2966389d0b462dfd71065140bf8ae0bb6eb105ac8160c8cc7641b14aaf0304731ab4d9d4bef89d62dd137d7f88645f941999e2fbfbd171a445c2702a87adcb5fd7d7e36d53b715e6ee87fcebdd0b9fef00182fa8e7ec8e7b5a3ac9d332ce92334a8e1ce0d493cff3c2a4fe1f902da785deb68bf936eabfe59a2f698b2d8d0dbd11c25f413ad4b7c554ed5d9e69a1c44c0dd523b47fc66e474357bd6b1e49fc2e12e30e206347d479ce0c20ef4b12e5d63de14e4b7550772a1ef0b5327d755aef1766da85e429a7920e4652d772619ea3526b330778ad35966c12e45a85ce6a5e3e99372a8c621e17ac2c3ff024c625a5599d41ad794e99ceeecb0bf334fd56b823e5b9406c6089fa406aaabe75afd7413affdc1019729d6f72a4b1a330412c03d9f75dbedb88bf556ee57a642fd1802e35807878f7aa15af0a00bc8fa8a4d01ff3e60249d07e780244d387cc60d7f25869f50580f0136391faec535332727b7ec85b12e3be7d8f34369f00b888133c3ad0ffa24bd03c5183d55172076b989b4151227467b915ab6e8347e15c99f2f9051d6ae0b2b72a717536899473b7c04160cc8d6d23a3f0ee63ae0ae4f79523af48779d836f0e0ae4b92ee78b820a9f6319ab064d11b7fb3e91579528a91c7c2521332ffaceb00ebaded7ef22d0ff9986273759b08b9f75565fe5c194bbfe704eda0fc0662db8cc3002b05dc39792540278a2c12501680ef4b95b3eac0573e559c6cf0badbe364e3bcaa14661afe1320a32d4e9644fdcd44b9dce2fee476e8f840a91a66cd877d3e5bbb5b595e654580955f4ba8548b41220a355a805669de9f3bc50157e594f5b444b88a320d80522e51bce929200d71e10e4a85c3d12ee133dda3fcdf7a454773a0575f7d9bfcb8c8646ffbad451446daf3ea742c0fa6bbb2ca4db442e60492ac9e131037278fa5552c0ed00c84469cd11600d3365617f57af4178fc264500327c48ae67de27c62766f9d6848e57f2ce0eb75e1cf72bafb21541c0370f73fc77e0d8b0b11056362a3936e38271259377d40fbc257d8c72b3e583fc6b0e20420dbc99a7932cb305fa9e61bd0de0d9758d35fe0ee13d0eaa782a3059e10caa61df3903aa1061298aced4712d998181e7edd03a11041de4018fe56cae17e0dced027ab7a0a27a6415d8d", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:17:17 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x3f00000000000000}, 0x0) 18:17:17 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x17a, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:17:17 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0) [ 2617.536848][T19826] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. 18:17:17 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xffff000000000000}, 0x0) [ 2617.977692][T19843] IPVS: ftp: loaded support on port[0] = 21 [ 2618.226459][T19827] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2618.544340][T19843] chnl_net:caif_netlink_parms(): no params data found [ 2618.675274][T19843] bridge0: port 1(bridge_slave_0) entered blocking state [ 2618.683073][T19843] bridge0: port 1(bridge_slave_0) entered disabled state [ 2618.691997][T19843] device bridge_slave_0 entered promiscuous mode [ 2618.700989][T19843] bridge0: port 2(bridge_slave_1) entered blocking state [ 2618.708142][T19843] bridge0: port 2(bridge_slave_1) entered disabled state [ 2618.717055][T19843] device bridge_slave_1 entered promiscuous mode [ 2618.743420][T19843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2618.795195][T19843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2618.826230][T19843] team0: Port device team_slave_0 added [ 2618.835025][T19843] team0: Port device team_slave_1 added [ 2618.953888][T19843] device hsr_slave_0 entered promiscuous mode [ 2619.010825][T19843] device hsr_slave_1 entered promiscuous mode [ 2619.059801][T19843] debugfs: Directory 'hsr0' with parent '/' already present! [ 2619.142089][T19843] bridge0: port 2(bridge_slave_1) entered blocking state [ 2619.149223][T19843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2619.156685][T19843] bridge0: port 1(bridge_slave_0) entered blocking state [ 2619.163831][T19843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2619.318202][T19843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2619.404392][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2619.414584][T14678] bridge0: port 1(bridge_slave_0) entered disabled state [ 2619.423661][T14678] bridge0: port 2(bridge_slave_1) entered disabled state [ 2619.434195][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2619.532001][T19843] 8021q: adding VLAN 0 to HW filter on device team0 [ 2619.546099][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2619.556019][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2619.566361][T14909] bridge0: port 1(bridge_slave_0) entered blocking state [ 2619.573537][T14909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2619.651396][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2619.664883][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2619.674398][T14907] bridge0: port 2(bridge_slave_1) entered blocking state [ 2619.681536][T14907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2619.746429][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2619.758242][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2619.768277][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2619.780024][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2619.802589][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2619.812505][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2619.823020][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2619.833601][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2619.843515][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2619.916300][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2619.926429][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2619.937178][T19843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2619.973295][T19843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2620.239622][T19856] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2620.253551][T19856] CPU: 1 PID: 19856 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 2620.261099][T19856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2620.271153][T19856] Call Trace: [ 2620.274449][T19856] dump_stack+0x172/0x1f0 [ 2620.278782][T19856] dump_header+0x10b/0x82d [ 2620.283203][T19856] oom_kill_process.cold+0x10/0x15 [ 2620.288312][T19856] out_of_memory+0x334/0x1340 [ 2620.292982][T19856] ? __sched_text_start+0x8/0x8 [ 2620.292998][T19856] ? oom_killer_disable+0x280/0x280 [ 2620.293023][T19856] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2620.293036][T19856] ? memcg_stat_show+0xc40/0xc40 [ 2620.293059][T19856] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2620.303084][T19856] ? cgroup_file_notify+0x140/0x1b0 [ 2620.303103][T19856] memory_max_write+0x262/0x3a0 [ 2620.303123][T19856] ? mem_cgroup_write+0x370/0x370 [ 2620.313598][T19856] ? lock_acquire+0x190/0x410 [ 2620.313614][T19856] ? kernfs_fop_write+0x227/0x480 [ 2620.313635][T19856] cgroup_file_write+0x241/0x790 [ 2620.313655][T19856] ? mem_cgroup_write+0x370/0x370 [ 2620.324757][T19856] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2620.324778][T19856] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2620.324794][T19856] kernfs_fop_write+0x2b8/0x480 [ 2620.324816][T19856] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2620.334713][T19856] __vfs_write+0x8a/0x110 [ 2620.344378][T19856] ? kernfs_fop_open+0xd80/0xd80 [ 2620.344392][T19856] vfs_write+0x268/0x5d0 [ 2620.344409][T19856] ksys_write+0x14f/0x290 [ 2620.344422][T19856] ? __ia32_sys_read+0xb0/0xb0 [ 2620.344443][T19856] ? do_syscall_64+0x26/0x760 [ 2620.354354][T19856] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2620.354367][T19856] ? do_syscall_64+0x26/0x760 [ 2620.354387][T19856] __x64_sys_write+0x73/0xb0 [ 2620.365615][T19856] do_syscall_64+0xfa/0x760 [ 2620.376659][T19856] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2620.385870][T19856] RIP: 0033:0x459a59 [ 2620.394686][T19856] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2620.404071][T19856] RSP: 002b:00007f1196dbfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2620.404085][T19856] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 2620.404092][T19856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2620.404100][T19856] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 2620.404112][T19856] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1196dc06d4 [ 2620.414800][T19856] R13: 00000000004c9e7e R14: 00000000004e1a90 R15: 00000000ffffffff [ 2620.503553][T19856] memory: usage 5520kB, limit 0kB, failcnt 307 [ 2620.514196][T19856] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2620.521879][T19856] Memory cgroup stats for /syz3: [ 2620.521993][T19856] anon 2154496 [ 2620.521993][T19856] file 126976 [ 2620.521993][T19856] kernel_stack 65536 [ 2620.521993][T19856] slab 3334144 [ 2620.521993][T19856] sock 163840 [ 2620.521993][T19856] shmem 0 [ 2620.521993][T19856] file_mapped 0 [ 2620.521993][T19856] file_dirty 135168 [ 2620.521993][T19856] file_writeback 0 [ 2620.521993][T19856] anon_thp 2097152 [ 2620.521993][T19856] inactive_anon 0 [ 2620.521993][T19856] active_anon 2154496 [ 2620.521993][T19856] inactive_file 126976 [ 2620.521993][T19856] active_file 0 [ 2620.521993][T19856] unevictable 0 [ 2620.521993][T19856] slab_reclaimable 2027520 [ 2620.521993][T19856] slab_unreclaimable 1306624 [ 2620.521993][T19856] pgfault 123684 [ 2620.521993][T19856] pgmajfault 0 [ 2620.521993][T19856] workingset_refault 0 [ 2620.521993][T19856] workingset_activate 0 [ 2620.521993][T19856] workingset_nodereclaim 0 [ 2620.521993][T19856] pgrefill 67 [ 2620.521993][T19856] pgscan 108 [ 2620.521993][T19856] pgsteal 75 [ 2620.521993][T19856] pgactivate 0 [ 2620.618672][T19856] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19854,uid=0 [ 2620.635057][T19856] Memory cgroup out of memory: Killed process 19854 (syz-executor.3) total-vm:72708kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2620.657920][ T1065] oom_reaper: reaped process 19854 (syz-executor.3), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 18:17:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:17:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x1a0ffffffff) socket$kcm(0x2, 0x1000000000000002, 0x0) r4 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x8, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0), 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x1a0ffffffff) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161) r7 = perf_event_open$cgroup(&(0x7f0000000540)={0x509ce149edc2da42, 0x70, 0xb9, 0x4, 0x7b, 0x9d, 0x0, 0x54, 0x48001, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x9bbaf8629a27fd87, @perf_bp={&(0x7f00000005c0), 0xe}, 0x20, 0x7f, 0x7834, 0x6, 0x2, 0xffffffff, 0x3}, r5, 0xe, r3, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r2) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r9 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r9, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) openat$cgroup_int(r8, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() 18:17:20 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x5800000000000000}, 0x0) 18:17:20 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xffffff7f00000000}, 0x0) 18:17:20 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x17b, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:17:20 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1a6, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="5ea03f6db511aee466448c41d0a37c5d52fbf6d123b2238bc0dc67ffb8a030dd7d9264060255082b5024d1bd6e117d7a20ca56078066e91049b134eb2db929be3f0ac2f70eacf24ae891471c290affb67848907db14e21832c3df1d097ecf14e120ecc990d234042832cc0352f4c22b3828a9ad20ee214973a95bd34110513eb0b903c83d4b8aa755076804cf502013c1bbace98bc821e5a8ba782e18f8fa11b088b70db05e454dd159d018ed06d197dd6014565077d4ebfb8b7db6d35f609ed05ffbcf3380687357f1a593b6f2842e76ff1df4bd5ae29584f89e9d2e50ccbb2964e2e6d3487a509a21e1f6c0ab2dcd9f70777a5c1d58dbf37d5ad66d553898b5620b1e35eb2a96ec010bb87957b6193071706744e312fff95abe536818207e41f7af43e08cca42680fadb739d70aafbeafa7fae70e4526c97e9edcac5648e4c38e10efd34d9f09592c73542bf127a1e68cf8fc3e58e78142b5e5fbbee0175350ab1a8aeedc6c8072ccaa476da314b578854756bb2db47caff231a7f64c51d1d7b4ed1e7cde59355285ef2c2be4ca6f0f6d01dc2d9845505f3a97a57f240c0b0f18fb4936dbb6cf7b6dbf6ec28e61a91ae6e748d0adec1c02c7a39019853b7497e5c3fdd571058f3e648b9f14080442b7279b28de971b6c8b97f1cea66a08bf83bee0707cae6972648a7f3924d63fd69ed03a13aaeba0d9e3bb239544359153fa124e70f873f9d10c07a5a0b58e82536153849350203d848998d61cbaa4f67dc73c84dbcd45939a3f01839e0897a3271118e304694db3ab806e05d206bd3c42dc79be167c9c297559d9a85d5eb04369c534360045b1a80e28d1466705873e3d8bfa73c44d59473df58b8a0305e6a5ec7300183cc60115288e393ca5d160a0fc8eaec5a77c0ba0798eed1e18890e2403ee8d156514eb6f5dc075d4a1f7ce70ae6fab8c82c6ecbcf3e973bc6a461f2f739f9820d66e28f3e9834a7ac8ed81a352c9f7a0882b14b2044ededaf694eba063ad3192f4dbf6ba79288a47ccbf6546c4fbbaefc864694e7063e39cb12ec68dca7b20986c48ae94022cdcb888222ee7f05f55ddea71f0298223b3c4109c15dd7ec41e78aef8dd5ff55c89ce7900261d62b35d12b813b8a385863f3c9d1f4ed37d7cd5314226afdb2892ddaeb1eec542cc8c040fc64cd3ae4dcd7264d68d247acbb353e40a33d5682ce2a4a005a2975908cbd0526beb6048840f3499cfcebba06eaf0c51c8b760593098a3def21b3664e7d42253f8c990538d382bf0768cdc106fac3699bcb5b12279f81dc9ba6ed1e2f7820f6cf8a2b3e4c88a33d9f0a32f60673b5897cadbbe7dffb9cf7f6b5a5d62701eba230fb2daa966a63d91e86c02472bd8114e5ba5df8152067086c142e6cd88289a501fc3353c1d0f17a663b179c446220d970d50a9c9adbb0b990be52ad19cd36669df47ff6e1f6fec4b7b1693c802d736aebe985e0c3c59c753ed95d79a7564880c4e2ffe5c9e59e818d2810468c48a4e75f15f3f252f2d780dd30717fe572c5d55adf090223fb30216c3882e9be19cb627aab1fdad81f8f117a90c2e7874edf1c4dc8e2da674348855659434eaba5c5063a29c28f4d22ce5515464b53967ab33d82f0e5afa98322c31e789be5d7600c726bd467d3be3eb4e0df733b91eecd95a5d1648ef268c43906b187ab24bb83bc80fa2ba4ab21d99c0aadf87d15cec51bf2cd52412ec638b43c27551f039e58026e6e910c7f327afe2e363491cfed5caadc8ca674659004f24991fdf76faac054dff64fb2282fc92d3b9ae32222833f1ae905dfa1dada3116765ef2b04ae6124f44cc7f83bd8f159eaa5290cc9e691fa77bec9c35a625b1b24cde8c9363b37b6f77ce844ea77752891b4c837c7c9648f7a16da6aadaf8912ba392c9984d26977c4b99e5c94925f0c6b9a48f2701eeb477aa0a99adb7fd145cd01b3cee9ad3c835690cda9ee1302fdf301558bb1979e177f18876b3fbe7b01597260a33822a63cdc760edee9839d75e0de20acdc8ae98a008d7390e4bb095650149b1bae84d240bd6480fbb10c1930f3a61dbfc3cb17888e33fb12f2dec1523380699b28300bf8b377e4357d5385176a35edbbb6e81e17e42fb07964452b53a069704f597cab1c646a8e8b99c0411e18def7e1c26e7cab72369228dfeb0d306cd46cdd9299538c89697c1c681d577290c2b03c9d84cd1b5803ff9291a28f3efbc3112b53e5cea348d364a954ac78db91e610df86be53c20707401d70f7768cdf0566420c1dfb7216877784244b5a84abc61e577b11b5dfd194018dbaa4024b57e6b0dcba72f621f62938f7a717c9a899aaa78b595f01c48f94c0bbf68c7cfb16c59269f48611dc9d7077b6805edbe30f2c7988a18f5ef3928a769f011936af9cb4665f48ce17afa1bb3f614e76b40a7e0920b9942362c41589f2be923530a186693a429a8e2767ec30d02407d4fbb6a397f52ec48fdb3fc0d2863f301585a14941cfac093cf8e53e91762db548306961979d396e4645f5698aa36db22603d1893149ba2d7aaa44bb14e0eceafd84cddb3c5c3e2a8eeb02a96e9d9f08db989b450614b0767314e4024114c785c95272226f1c2e2a29a07c7c133abaf254fb9d64a1c597ca32c3a1b17bf262907d9a5a468d37986a300f9a1274718521d76cc1fa8ae122f5dc46ba1c998c3d66bbfdece070f37ac35c7d7de0bffc8369f222fe768273edb69115f94177e9ab237ba50eafdefd5a2369059be377db15661961961c3bc60e6b1af713bd20d70b315025a249d5a6d67e340582404b561ae11fcc711c21c80a56d0a6b964d333e0c1a53333a2ebf4ebda28a59680639c0fd282d64539143b2d416accb7b5cfa16fb2dd9b767f79fe9c26f2b70972b2225ae8beae908dfcb34bbe30870369ea766479db570787a6e11d7544f32888b637e3cbbc4fc85e34d7847e26779e8a8d940ae28de2f2d122c1dba8948af913b2ba890cb12cf2db92ae75aac53614d6faaed47b4373147c6c93880646ee35d85394d25d9dadf73ea35ada21cdbc89038e90e9a28949fd84bac77ea7b2f79ece1c3c2defe5faf9b001ac4750920fc6414569413fd2cdb4e49751fa9c1a531d0081856aa2a9f884040610f9782eeb2c135afc0f60c09e1d5c3a83311010ead8b7bebe91bf339b7d88fab261596465fbbb8942fd32aac8661bb3ad21696895365e258f2a6d4e9049f93545e971fc053317082a2c6ebe65e571b29cdcbca06e5f422c6ea288f98d282ad5c9475a3e9258b4a21360d19cb91c99aeb6476f21049c8d6c9918a9ba7ced60b1f97b9b9cacef6958da3fb8b762f35043539c145956487110ccd420783f3c4490cecb089179c99a89e07fc14d2a8e8a78cc1cbbf0caaf9f8a6850fa8f150c45b616c102a09b995ac9408fdfd26b79339ad175691cc065f7911d99c53b249f03a96b3df1cca6f9dfd2d3c1e732681d58cc2fc671010e7bd98c006ba63b703266aa2f1c3d6fbc148902e425d83d044f014b9e7b3977b8fda094e02dd6dd8298983d5d891d66db077233fc155dad208bfe7c6585bdc6d246bba81cacff55994ee88f9163b27f51d6ae47d0b296124d3018f69f79528797e8aaf21d8035c044821137b0f7e7b3b41b8019379002ae9bc70dc1bc377b6fc0e2a40accf480ae0dc53e61a91d1815ea796fc14d6abddcee1fd965adc3a441333d430568bcb29f0cac078b70a4f6d1011c1822708fb1bbeeaea6433cf5cdcf9aec7bbce4c92e6fdda88b3dc48a4d42f4348a05fee23c41869ca326d39c0605d9144f82bd0c3c2f9ac9ae0b1f5fabe0ab5af39babf027a83df5b1c58513d27cb5babc9a5be073043543bff731da9bb715e57678507baf194fec9efa3235631b9594682dd531c3762432e25c25c048e600cc7c318e82b720db17436fbc054c04f59923ae61ec0b4896d08daab3b617bd8d239c24e95c8fcd1a7dd64a8a3d7e158c626833a2735c9e96514639f007983da3bb43a6f18e40d3eda0cc9468d118d28c6bda3ebae6c3ae2c14b1b02305abd16b7c6be707ffaf59142988eb931275bd4c38aefefbbaa95e16d7551f5f1fcfa9744a357d21c76b28747e5e94683d455530433876d509793ed409847f8a972450285f9e9f2dc665e78c7747418523bb51ef8191231e989ca93ef75e9ca27f38a2e5327d29c265c39f12fb1d01a723a902292c6bc06fdc6856d4829680909db55c4650449d0a2d2dad92cfbc8c03fdcb5656a56fded95b0ac41595a2a5bb34d5feb4e06da8adb5143eef67cdc3d18edd095c086d99cb43cddbbfeeb0beadadc1e30ec57bf760592e6365ffacbd6134b7262966af9c808f980fff81280566c79d3a2a15654c597aa050dda7ace4b5298f512b445023d4d86bc37c85ee1a2d7637f3ea0eafd6440893f43a2a912735d0dc8e2827148893f7554897fcb91a4f5581d793fa707fa181dcf69e3fddf498a19767922f4c52fd6797bfba85a61f9c5fe10970b06c7006d7b804f5d1db40b6f606f532cc5a6b93be6473bcbad8f06ead3995cb5f42ee8ddc658ac9085d0c6046b07be03837d5d68504c04b2a769db69e04aa1e414eec40118856f58ac5d3765e5d5038b20d2966389d0b462dfd71065140bf8ae0bb6eb105ac8160c8cc7641b14aaf0304731ab4d9d4bef89d62dd137d7f88645f941999e2fbfbd171a445c2702a87adcb5fd7d7e36d53b715e6ee87fcebdd0b9fef00182fa8e7ec8e7b5a3ac9d332ce92334a8e1ce0d493cff3c2a4fe1f902da785deb68bf936eabfe59a2f698b2d8d0dbd11c25f413ad4b7c554ed5d9e69a1c44c0dd523b47fc66e474357bd6b1e49fc2e12e30e206347d479ce0c20ef4b12e5d63de14e4b7550772a1ef0b5327d755aef1766da85e429a7920e4652d772619ea3526b330778ad35966c12e45a85ce6a5e3e99372a8c621e17ac2c3ff024c625a5599d41ad794e99ceeecb0bf334fd56b823e5b9406c6089fa406aaabe75afd7413affdc1019729d6f72a4b1a330412c03d9f75dbedb88bf556ee57a642fd1802e35807878f7aa15af0a00bc8fa8a4d01ff3e60249d07e780244d387cc60d7f25869f50580f0136391faec535332727b7ec85b12e3be7d8f34369f00b888133c3ad0ffa24bd03c5183d55172076b989b4151227467b915ab6e8347e15c99f2f9051d6ae0b2b72a717536899473b7c04160cc8d6d23a3f0ee63ae0ae4f79523af48779d836f0e0ae4b92ee78b820a9f6319ab064d11b7fb3e91579528a91c7c2521332ffaceb00ebaded7ef22d0ff9986273759b08b9f75565fe5c194bbfe704eda0fc0662db8cc3002b05dc39792540278a2c12501680ef4b95b3eac0573e559c6cf0badbe364e3bcaa14661afe1320a32d4e9644fdcd44b9dce2fee476e8f840a91a66cd877d3e5bbb5b595e654580955f4ba8548b41220a355a805669de9f3bc50157e594f5b444b88a320d80522e51bce929200d71e10e4a85c3d12ee133dda3fcdf7a454773a0575f7d9bfcb8c8646ffbad451446daf3ea742c0fa6bbb2ca4db442e60492ac9e131037278fa5552c0ed00c84469cd11600d3365617f57af4178fc264500327c48ae67de27c62766f9d6848e57f2ce0eb75e1cf72bafb21541c0370f73fc77e0d8b0b11056362a3936e38271259377d40fbc257d8c72b3e583fc6b0e20420dbc99a7932cb305fa9e61bd0de0d9758d35fe0ee13d0eaa782a3059e10caa61df3903aa1061298aced4712d998181e7edd03a11041de4018fe56cae17e0dced027ab7a0a27a6415d8d", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) [ 2620.798735][T19843] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2620.836066][T19861] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2620.839866][T19843] CPU: 0 PID: 19843 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 2620.852963][T19843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2620.863017][T19843] Call Trace: [ 2620.866315][T19843] dump_stack+0x172/0x1f0 [ 2620.870657][T19843] dump_header+0x10b/0x82d [ 2620.875083][T19843] ? oom_kill_process+0x94/0x3f0 [ 2620.880028][T19843] oom_kill_process.cold+0x10/0x15 [ 2620.885148][T19843] out_of_memory+0x334/0x1340 [ 2620.885166][T19843] ? lock_downgrade+0x920/0x920 [ 2620.885185][T19843] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2620.885203][T19843] ? oom_killer_disable+0x280/0x280 [ 2620.905903][T19843] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2620.911831][T19843] ? memcg_stat_show+0xc40/0xc40 [ 2620.916777][T19843] ? do_raw_spin_unlock+0x57/0x270 [ 2620.916797][T19843] ? _raw_spin_unlock+0x2d/0x50 [ 2620.916821][T19843] try_charge+0xf4b/0x1440 [ 2620.916844][T19843] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2620.937254][T19843] ? percpu_ref_tryget_live+0x111/0x290 [ 2620.942835][T19843] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2620.942854][T19843] ? __kasan_check_read+0x11/0x20 [ 2620.942877][T19843] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2620.942896][T19843] mem_cgroup_try_charge+0x136/0x590 [ 2620.942918][T19843] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2620.971220][T19843] wp_page_copy+0x407/0x1860 [ 2620.971238][T19843] ? find_held_lock+0x35/0x130 [ 2620.971254][T19843] ? do_wp_page+0x53b/0x15c0 [ 2620.971271][T19843] ? pmd_devmap_trans_unstable+0x220/0x220 [ 2620.971286][T19843] ? lock_downgrade+0x920/0x920 18:17:20 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0) [ 2620.971304][T19843] ? swp_swapcount+0x540/0x540 [ 2620.971322][T19843] ? __kasan_check_read+0x11/0x20 [ 2620.971335][T19843] ? do_raw_spin_unlock+0x57/0x270 [ 2620.971354][T19843] do_wp_page+0x543/0x15c0 [ 2620.971373][T19843] ? finish_mkwrite_fault+0x6a0/0x6a0 [ 2620.971398][T19843] __handle_mm_fault+0x23ec/0x4040 [ 2620.971418][T19843] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2620.971432][T19843] ? handle_mm_fault+0x292/0xaa0 [ 2620.971461][T19843] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2620.971476][T19843] ? __kasan_check_read+0x11/0x20 [ 2620.971495][T19843] handle_mm_fault+0x3b7/0xaa0 [ 2620.971515][T19843] __do_page_fault+0x536/0xdd0 [ 2620.971541][T19843] do_page_fault+0x38/0x590 [ 2620.971560][T19843] page_fault+0x39/0x40 [ 2620.971572][T19843] RIP: 0033:0x403522 [ 2620.971588][T19843] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 59 8f 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 79 44 05 00 48 [ 2620.971596][T19843] RSP: 002b:00007ffedc3a7bd0 EFLAGS: 00010246 18:17:20 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xffffffffa0008000}, 0x0) 18:17:20 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0) [ 2620.971606][T19843] RAX: 0000000000000000 RBX: 000000000027fc40 RCX: 0000000000413660 [ 2620.971620][T19843] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffedc3a8d00 [ 2621.002579][T19843] RBP: 0000000000000002 R08: 0000000000000001 R09: 000000000213d940 [ 2621.002595][T19843] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffedc3a8d00 [ 2621.002602][T19843] R13: 00007ffedc3a8cf0 R14: 0000000000000000 R15: 00007ffedc3a8d00 [ 2621.051347][T19843] memory: usage 3148kB, limit 0kB, failcnt 315 [ 2621.296094][T19843] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2621.338609][T19843] Memory cgroup stats for /syz3: [ 2621.338725][T19843] anon 0 [ 2621.338725][T19843] file 126976 [ 2621.338725][T19843] kernel_stack 0 [ 2621.338725][T19843] slab 3334144 [ 2621.338725][T19843] sock 163840 [ 2621.338725][T19843] shmem 0 [ 2621.338725][T19843] file_mapped 0 [ 2621.338725][T19843] file_dirty 135168 [ 2621.338725][T19843] file_writeback 0 [ 2621.338725][T19843] anon_thp 0 [ 2621.338725][T19843] inactive_anon 0 [ 2621.338725][T19843] active_anon 0 [ 2621.338725][T19843] inactive_file 126976 [ 2621.338725][T19843] active_file 0 [ 2621.338725][T19843] unevictable 0 [ 2621.338725][T19843] slab_reclaimable 2027520 [ 2621.338725][T19843] slab_unreclaimable 1306624 [ 2621.338725][T19843] pgfault 123684 [ 2621.338725][T19843] pgmajfault 0 [ 2621.338725][T19843] workingset_refault 0 [ 2621.338725][T19843] workingset_activate 0 [ 2621.338725][T19843] workingset_nodereclaim 0 [ 2621.338725][T19843] pgrefill 67 [ 2621.338725][T19843] pgscan 108 [ 2621.338725][T19843] pgsteal 75 [ 2621.338725][T19843] pgactivate 0 18:17:21 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0}, 0x0) 18:17:21 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x7ca905feff4fef9c}, 0x0) 18:17:21 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0) [ 2621.565630][T19843] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19843,uid=0 [ 2621.592142][T19843] Memory cgroup out of memory: Killed process 19843 (syz-executor.3) total-vm:72444kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 2621.690374][T19865] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. 18:17:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) [ 2622.170799][T19867] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2622.311143][T19892] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2622.742946][T19903] IPVS: ftp: loaded support on port[0] = 21 [ 2623.084225][T19903] chnl_net:caif_netlink_parms(): no params data found [ 2623.195838][T19903] bridge0: port 1(bridge_slave_0) entered blocking state [ 2623.203982][T19903] bridge0: port 1(bridge_slave_0) entered disabled state [ 2623.213286][T19903] device bridge_slave_0 entered promiscuous mode [ 2623.335461][T19903] bridge0: port 2(bridge_slave_1) entered blocking state [ 2623.343735][T19903] bridge0: port 2(bridge_slave_1) entered disabled state [ 2623.352893][T19903] device bridge_slave_1 entered promiscuous mode [ 2623.383638][T19903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2623.448982][T19903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2623.478874][T19903] team0: Port device team_slave_0 added [ 2623.488345][T19903] team0: Port device team_slave_1 added [ 2623.583759][T19903] device hsr_slave_0 entered promiscuous mode [ 2623.630899][T19903] device hsr_slave_1 entered promiscuous mode [ 2623.689989][T19903] debugfs: Directory 'hsr0' with parent '/' already present! [ 2623.887964][T19903] bridge0: port 2(bridge_slave_1) entered blocking state [ 2623.895119][T19903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2624.059362][T19903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2624.131867][T11670] bridge0: port 2(bridge_slave_1) entered disabled state [ 2624.151622][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2624.164959][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2624.173444][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2624.187421][T19903] 8021q: adding VLAN 0 to HW filter on device team0 [ 2624.256173][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2624.282253][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2624.291350][T11670] bridge0: port 1(bridge_slave_0) entered blocking state [ 2624.298387][T11670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2624.336334][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2624.346755][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2624.355902][T14909] bridge0: port 2(bridge_slave_1) entered blocking state [ 2624.363066][T14909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2624.372241][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2624.447672][T14908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2624.458635][T14908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2624.468669][T14908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2624.491455][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2624.501170][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2624.511281][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2624.525695][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2624.536260][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2624.622584][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2624.632433][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2624.643880][T19903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2624.755903][T19903] 8021q: adding VLAN 0 to HW filter on device batadv0 18:17:24 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext, 0x1024, 0x1000000010000}, 0x0, 0xfffffffffffffbff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x1a0ffffffff) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161) openat$cgroup_procs(r5, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r8 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r8, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0xfffffffffffffec7, &(0x7f0000000640)=[{&(0x7f0000000340)="c944a5fcaeedbafda5709e3f0002", 0xe}], 0x1}, 0xfc00) sendmsg$kcm(r8, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x1a0ffffffff) r10 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x3e, &(0x7f00000002c0)=r9, 0x161) write$cgroup_int(r9, 0x0, 0x0) 18:17:24 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) 18:17:24 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x8004020000000000}, 0x0) 18:17:24 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:17:24 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1a8, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:17:24 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x17c, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) [ 2625.202862][T19916] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. 18:17:25 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x8405000000000000}, 0x0) 18:17:25 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) 18:17:25 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x8dffffff00000000}, 0x0) 18:17:25 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) 18:17:25 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) 18:17:25 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x9cef4ffffe05a97c}, 0x0) 18:17:25 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0xfffffffffffffec7, &(0x7f0000000640)=[{&(0x7f0000000340)="c944a5fcaeedbafda5709e3f0002", 0xe}], 0x1}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x1a0ffffffff) r9 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x161) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x1a0ffffffff) r11 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x3e, &(0x7f00000002c0)=r10, 0x161) perf_event_open$cgroup(&(0x7f0000000540)={0x1, 0x70, 0x40, 0xbb, 0xff, 0xa5, 0x0, 0x20, 0x9, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f00000004c0)}, 0x10, 0x5, 0xffffffe1, 0x8, 0x0, 0x3, 0x8}, r8, 0x9, r10, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:17:25 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0) [ 2626.002199][T19921] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. 18:17:25 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xac05000000000000}, 0x0) [ 2626.178127][T19967] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2626.233075][T19967] CPU: 1 PID: 19967 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 2626.240674][T19967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2626.250728][T19967] Call Trace: [ 2626.250755][T19967] dump_stack+0x172/0x1f0 [ 2626.250777][T19967] dump_header+0x10b/0x82d [ 2626.250796][T19967] oom_kill_process.cold+0x10/0x15 [ 2626.250814][T19967] out_of_memory+0x334/0x1340 [ 2626.270996][T19926] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2626.272568][T19967] ? __sched_text_start+0x8/0x8 [ 2626.272587][T19967] ? oom_killer_disable+0x280/0x280 [ 2626.272613][T19967] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2626.297560][T19967] ? memcg_stat_show+0xc40/0xc40 [ 2626.302517][T19967] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2626.302537][T19967] ? cgroup_file_notify+0x140/0x1b0 [ 2626.302561][T19967] memory_max_write+0x262/0x3a0 [ 2626.318508][T19967] ? mem_cgroup_write+0x370/0x370 [ 2626.323544][T19967] ? lock_acquire+0x190/0x410 [ 2626.323561][T19967] ? kernfs_fop_write+0x227/0x480 [ 2626.323583][T19967] cgroup_file_write+0x241/0x790 [ 2626.323603][T19967] ? mem_cgroup_write+0x370/0x370 [ 2626.338215][T19967] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2626.338243][T19967] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2626.354481][T19967] kernfs_fop_write+0x2b8/0x480 [ 2626.359345][T19967] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2626.365589][T19967] __vfs_write+0x8a/0x110 [ 2626.365605][T19967] ? kernfs_fop_open+0xd80/0xd80 [ 2626.365626][T19967] vfs_write+0x268/0x5d0 [ 2626.374871][T19967] ksys_write+0x14f/0x290 [ 2626.374889][T19967] ? __ia32_sys_read+0xb0/0xb0 [ 2626.374910][T19967] ? do_syscall_64+0x26/0x760 [ 2626.383437][T19967] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2626.383453][T19967] ? do_syscall_64+0x26/0x760 [ 2626.383476][T19967] __x64_sys_write+0x73/0xb0 [ 2626.392894][T19967] do_syscall_64+0xfa/0x760 [ 2626.392915][T19967] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2626.392926][T19967] RIP: 0033:0x459a59 [ 2626.392941][T19967] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2626.392953][T19967] RSP: 002b:00007f4f04edec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2626.403648][T19967] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 2626.403656][T19967] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2626.403665][T19967] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 2626.403673][T19967] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4f04edf6d4 [ 2626.403681][T19967] R13: 00000000004c9e7e R14: 00000000004e1a90 R15: 00000000ffffffff [ 2626.536713][T19967] memory: usage 3920kB, limit 0kB, failcnt 1459 [ 2626.728578][T19967] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2626.743469][T19976] IPVS: ftp: loaded support on port[0] = 21 [ 2626.762391][T19967] Memory cgroup stats for /syz1: [ 2626.762507][T19967] anon 2281472 [ 2626.762507][T19967] file 0 [ 2626.762507][T19967] kernel_stack 65536 [ 2626.762507][T19967] slab 1355776 [ 2626.762507][T19967] sock 0 [ 2626.762507][T19967] shmem 0 [ 2626.762507][T19967] file_mapped 0 [ 2626.762507][T19967] file_dirty 0 [ 2626.762507][T19967] file_writeback 0 [ 2626.762507][T19967] anon_thp 2097152 [ 2626.762507][T19967] inactive_anon 0 [ 2626.762507][T19967] active_anon 2207744 [ 2626.762507][T19967] inactive_file 0 [ 2626.762507][T19967] active_file 0 [ 2626.762507][T19967] unevictable 0 [ 2626.762507][T19967] slab_reclaimable 270336 [ 2626.762507][T19967] slab_unreclaimable 1085440 [ 2626.762507][T19967] pgfault 89958 [ 2626.762507][T19967] pgmajfault 0 [ 2626.762507][T19967] workingset_refault 66 [ 2626.762507][T19967] workingset_activate 0 [ 2626.762507][T19967] workingset_nodereclaim 0 [ 2626.762507][T19967] pgrefill 1281 [ 2626.762507][T19967] pgscan 1276 [ 2626.762507][T19967] pgsteal 33 [ 2626.762507][T19967] pgactivate 1188 [ 2626.869756][T19967] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19953,uid=0 [ 2626.886293][T19967] Memory cgroup out of memory: Killed process 19953 (syz-executor.1) total-vm:72704kB, anon-rss:2148kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2626.907803][ T1065] oom_reaper: reaped process 19953 (syz-executor.1), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB [ 2626.983512][T19903] syz-executor.1 invoked oom-killer: gfp_mask=0x40cd0(GFP_KERNEL|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 2626.996323][T19903] CPU: 0 PID: 19903 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 2627.003871][T19903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2627.013928][T19903] Call Trace: [ 2627.017227][T19903] dump_stack+0x172/0x1f0 [ 2627.021565][T19903] dump_header+0x10b/0x82d [ 2627.025975][T19903] ? oom_kill_process+0x94/0x3f0 [ 2627.030933][T19903] oom_kill_process.cold+0x10/0x15 [ 2627.036059][T19903] out_of_memory+0x334/0x1340 [ 2627.041613][T19903] ? lock_downgrade+0x920/0x920 [ 2627.046483][T19903] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2627.052296][T19903] ? oom_killer_disable+0x280/0x280 [ 2627.057505][T19903] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2627.063051][T19903] ? memcg_stat_show+0xc40/0xc40 [ 2627.067994][T19903] ? do_raw_spin_unlock+0x57/0x270 [ 2627.073300][T19903] ? _raw_spin_unlock+0x2d/0x50 [ 2627.078182][T19903] try_charge+0xf4b/0x1440 [ 2627.082616][T19903] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2627.088163][T19903] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2627.093724][T19903] ? cache_grow_begin+0x122/0xd20 [ 2627.098749][T19903] ? find_held_lock+0x35/0x130 [ 2627.103512][T19903] ? cache_grow_begin+0x122/0xd20 [ 2627.108543][T19903] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2627.114089][T19903] ? lock_downgrade+0x920/0x920 [ 2627.118948][T19903] ? memcg_kmem_put_cache+0x50/0x50 [ 2627.124148][T19903] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2627.130397][T19903] ? __kasan_check_read+0x11/0x20 [ 2627.135443][T19903] cache_grow_begin+0x629/0xd20 [ 2627.140300][T19903] ? write_comp_data+0x61/0x70 [ 2627.145064][T19903] ? mempolicy_slab_node+0x139/0x390 [ 2627.150361][T19903] fallback_alloc+0x1fd/0x2d0 [ 2627.155051][T19903] ____cache_alloc_node+0x1bc/0x1d0 [ 2627.160247][T19903] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2627.166487][T19903] kmem_cache_alloc+0x1ef/0x710 [ 2627.171382][T19903] ? rcu_read_lock_held+0x9c/0xb0 [ 2627.176455][T19903] __d_alloc+0x2e/0x8c0 [ 2627.180620][T19903] d_alloc+0x4d/0x280 [ 2627.184618][T19903] d_alloc_parallel+0xf4/0x1c30 [ 2627.189471][T19903] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2627.195724][T19903] ? __d_lookup_rcu+0x6c0/0x6c0 [ 2627.200570][T19903] ? __lock_acquire+0x16f2/0x4a00 [ 2627.205589][T19903] ? __kasan_check_read+0x11/0x20 [ 2627.210612][T19903] ? mark_lock+0xc2/0x1220 [ 2627.215030][T19903] ? lockdep_init_map+0x1be/0x6d0 [ 2627.220056][T19903] ? lockdep_init_map+0x1be/0x6d0 [ 2627.225091][T19903] __lookup_slow+0x1ab/0x500 [ 2627.229683][T19903] ? vfs_unlink+0x620/0x620 [ 2627.234221][T19903] lookup_slow+0x58/0x80 [ 2627.238465][T19903] path_mountpoint+0x5d2/0x1e60 [ 2627.243322][T19903] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2627.249566][T19903] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 2627.255559][T19903] ? path_openat+0x46d0/0x46d0 [ 2627.260334][T19903] filename_mountpoint+0x18e/0x390 [ 2627.265451][T19903] ? filename_parentat.isra.0+0x410/0x410 [ 2627.271170][T19903] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 2627.277349][T19903] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2627.283593][T19903] ? __phys_addr_symbol+0x30/0x70 [ 2627.288614][T19903] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2627.294332][T19903] ? __check_object_size+0x3d/0x437 [ 2627.299531][T19903] ? strncpy_from_user+0x2b4/0x400 [ 2627.304734][T19903] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2627.310969][T19903] ? getname_flags+0x277/0x5b0 [ 2627.315778][T19903] user_path_mountpoint_at+0x3a/0x50 [ 2627.321082][T19903] ksys_umount+0x164/0xf00 [ 2627.325533][T19903] ? __ia32_sys_rmdir+0x40/0x40 [ 2627.330395][T19903] ? __detach_mounts+0x2a0/0x2a0 [ 2627.335332][T19903] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2627.341573][T19903] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 2627.347031][T19903] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 2627.353013][T19903] ? do_syscall_64+0x26/0x760 [ 2627.357713][T19903] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2627.363784][T19903] ? do_syscall_64+0x26/0x760 [ 2627.368462][T19903] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2627.373760][T19903] __x64_sys_umount+0x54/0x80 [ 2627.378450][T19903] do_syscall_64+0xfa/0x760 [ 2627.382995][T19903] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2627.388892][T19903] RIP: 0033:0x45c487 [ 2627.392783][T19903] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2627.412385][T19903] RSP: 002b:00007ffe481dba48 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 2627.420798][T19903] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045c487 [ 2627.428765][T19903] RDX: 0000000000403550 RSI: 0000000000000002 RDI: 00007ffe481dbaf0 [ 2627.436735][T19903] RBP: 000000000000000a R08: 0000000000000000 R09: 000000000000000e [ 2627.444708][T19903] R10: 000000000000000a R11: 0000000000000202 R12: 00007ffe481dcb80 [ 2627.452675][T19903] R13: 0000000002735940 R14: 0000000000000000 R15: 00007ffe481dcb80 [ 2627.515444][T19903] memory: usage 1536kB, limit 0kB, failcnt 1475 [ 2627.536737][T19903] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2627.546871][T19903] Memory cgroup stats for /syz1: [ 2627.546984][T19903] anon 0 [ 2627.546984][T19903] file 0 [ 2627.546984][T19903] kernel_stack 65536 [ 2627.546984][T19903] slab 1355776 [ 2627.546984][T19903] sock 0 [ 2627.546984][T19903] shmem 0 [ 2627.546984][T19903] file_mapped 0 [ 2627.546984][T19903] file_dirty 0 [ 2627.546984][T19903] file_writeback 0 [ 2627.546984][T19903] anon_thp 0 [ 2627.546984][T19903] inactive_anon 0 [ 2627.546984][T19903] active_anon 0 [ 2627.546984][T19903] inactive_file 0 [ 2627.546984][T19903] active_file 0 [ 2627.546984][T19903] unevictable 0 [ 2627.546984][T19903] slab_reclaimable 270336 [ 2627.546984][T19903] slab_unreclaimable 1085440 [ 2627.546984][T19903] pgfault 89991 [ 2627.546984][T19903] pgmajfault 0 [ 2627.546984][T19903] workingset_refault 66 [ 2627.546984][T19903] workingset_activate 0 [ 2627.546984][T19903] workingset_nodereclaim 0 [ 2627.546984][T19903] pgrefill 1281 [ 2627.546984][T19903] pgscan 1276 [ 2627.546984][T19903] pgsteal 33 [ 2627.546984][T19903] pgactivate 1188 [ 2627.642328][T19903] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19903,uid=0 [ 2627.657920][T19903] Memory cgroup out of memory: Killed process 19903 (syz-executor.1) total-vm:72440kB, anon-rss:100kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 2627.676684][ T1065] oom_reaper: reaped process 19903 (syz-executor.1), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 2627.768733][T19976] chnl_net:caif_netlink_parms(): no params data found [ 2628.182939][T19976] bridge0: port 1(bridge_slave_0) entered blocking state [ 2628.200010][T19976] bridge0: port 1(bridge_slave_0) entered disabled state [ 2628.230322][T19976] device bridge_slave_0 entered promiscuous mode [ 2628.443070][T19976] bridge0: port 2(bridge_slave_1) entered blocking state [ 2628.454501][T19976] bridge0: port 2(bridge_slave_1) entered disabled state [ 2628.463874][T19976] device bridge_slave_1 entered promiscuous mode [ 2628.495144][T19976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2628.581800][T19976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2628.609435][T19976] team0: Port device team_slave_0 added [ 2628.618593][T19976] team0: Port device team_slave_1 added [ 2628.784037][T19976] device hsr_slave_0 entered promiscuous mode [ 2628.860929][T19976] device hsr_slave_1 entered promiscuous mode [ 2628.909843][T19976] debugfs: Directory 'hsr0' with parent '/' already present! [ 2629.140546][T19976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2629.162473][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2629.171932][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2629.227890][T19976] 8021q: adding VLAN 0 to HW filter on device team0 [ 2629.243072][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2629.252989][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2629.264466][T11670] bridge0: port 1(bridge_slave_0) entered blocking state [ 2629.271610][T11670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2629.345822][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2629.356349][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2629.366011][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2629.376134][T14677] bridge0: port 2(bridge_slave_1) entered blocking state [ 2629.383272][T14677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2629.392865][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2629.475768][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2629.495476][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2629.505784][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2629.591936][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2629.601219][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2629.611895][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2629.623002][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2629.632422][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2629.650578][T19976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2629.665280][T19976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2629.725064][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2629.745127][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2629.843173][T19976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2630.105985][T19985] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2630.116466][T19985] CPU: 1 PID: 19985 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 2630.124027][T19985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2630.134092][T19985] Call Trace: [ 2630.137396][T19985] dump_stack+0x172/0x1f0 [ 2630.141742][T19985] dump_header+0x10b/0x82d [ 2630.146167][T19985] oom_kill_process.cold+0x10/0x15 [ 2630.151285][T19985] out_of_memory+0x334/0x1340 [ 2630.155971][T19985] ? __sched_text_start+0x8/0x8 [ 2630.160830][T19985] ? oom_killer_disable+0x280/0x280 [ 2630.166044][T19985] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2630.171592][T19985] ? memcg_stat_show+0xc40/0xc40 [ 2630.176540][T19985] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2630.182362][T19985] ? cgroup_file_notify+0x140/0x1b0 [ 2630.187572][T19985] memory_max_write+0x262/0x3a0 [ 2630.192430][T19985] ? mem_cgroup_write+0x370/0x370 [ 2630.197453][T19985] ? lock_acquire+0x190/0x410 [ 2630.202141][T19985] ? kernfs_fop_write+0x227/0x480 [ 2630.207174][T19985] cgroup_file_write+0x241/0x790 [ 2630.212120][T19985] ? mem_cgroup_write+0x370/0x370 [ 2630.217149][T19985] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2630.222793][T19985] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2630.228517][T19985] kernfs_fop_write+0x2b8/0x480 [ 2630.233372][T19985] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2630.239617][T19985] __vfs_write+0x8a/0x110 [ 2630.243945][T19985] ? kernfs_fop_open+0xd80/0xd80 [ 2630.248883][T19985] vfs_write+0x268/0x5d0 [ 2630.253133][T19985] ksys_write+0x14f/0x290 [ 2630.257464][T19985] ? __ia32_sys_read+0xb0/0xb0 [ 2630.262236][T19985] ? do_syscall_64+0x26/0x760 [ 2630.266913][T19985] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2630.272979][T19985] ? do_syscall_64+0x26/0x760 [ 2630.277662][T19985] __x64_sys_write+0x73/0xb0 [ 2630.282271][T19985] do_syscall_64+0xfa/0x760 [ 2630.286785][T19985] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2630.292683][T19985] RIP: 0033:0x459a59 [ 2630.296577][T19985] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2630.316326][T19985] RSP: 002b:00007fd956bd7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2630.324750][T19985] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 2630.332726][T19985] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2630.340707][T19985] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 2630.348682][T19985] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd956bd86d4 [ 2630.356648][T19985] R13: 00000000004c9e7e R14: 00000000004e1a90 R15: 00000000ffffffff [ 2630.375963][T19985] memory: usage 5196kB, limit 0kB, failcnt 316 [ 2630.382539][T19985] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2630.389523][T19985] Memory cgroup stats for /syz3: [ 2630.390190][T19985] anon 2183168 [ 2630.390190][T19985] file 126976 [ 2630.390190][T19985] kernel_stack 65536 [ 2630.390190][T19985] slab 3059712 [ 2630.390190][T19985] sock 163840 [ 2630.390190][T19985] shmem 0 [ 2630.390190][T19985] file_mapped 0 [ 2630.390190][T19985] file_dirty 135168 [ 2630.390190][T19985] file_writeback 0 [ 2630.390190][T19985] anon_thp 2097152 [ 2630.390190][T19985] inactive_anon 0 [ 2630.390190][T19985] active_anon 2183168 [ 2630.390190][T19985] inactive_file 126976 [ 2630.390190][T19985] active_file 0 [ 2630.390190][T19985] unevictable 0 [ 2630.390190][T19985] slab_reclaimable 1892352 [ 2630.390190][T19985] slab_unreclaimable 1167360 [ 2630.390190][T19985] pgfault 123750 [ 2630.390190][T19985] pgmajfault 0 [ 2630.390190][T19985] workingset_refault 0 [ 2630.390190][T19985] workingset_activate 0 [ 2630.390190][T19985] workingset_nodereclaim 0 [ 2630.390190][T19985] pgrefill 67 [ 2630.390190][T19985] pgscan 108 [ 2630.390190][T19985] pgsteal 75 [ 2630.390190][T19985] pgactivate 0 [ 2630.486627][T19985] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19983,uid=0 [ 2630.504460][T19985] Memory cgroup out of memory: Killed process 19983 (syz-executor.3) total-vm:72708kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 2630.526126][ T1065] oom_reaper: reaped process 19983 (syz-executor.3), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 18:17:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:17:30 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0) 18:17:30 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x17d, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:17:30 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xe803000000000000}, 0x0) 18:17:30 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1a9, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:17:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0xfffffffffffffec7, &(0x7f0000000640)=[{&(0x7f0000000340)="c944a5fcaeedbafda5709e3f0002", 0xe}], 0x1}, 0xfc00) sendmsg$kcm(r7, &(0x7f00000004c0)={&(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x81}, 0xffffffffffffff84, &(0x7f0000000100)=[{&(0x7f0000000680)="88dae72daf45dfc479701227a20f3a48b92c16be4711f3895b249cf0cdff554258c81d6dab24a867d96faa1c9f6a243b4508aa27e7ab99909a294b80a8b5947ec05663f723426fbcd84792f48b24d13d03c7c4279936e6ca3466801c1ed0246d7dcfd000e20272c8f73a6e24577501dd86e9fd0009b3bb4460a52b8e2ff29cb33ad808db49d591bd42d12efd3786190c5b227d19c8b7aa21c91c1e214d6018b2f2c369e61ed71177f32d448af3c0c94f76cd23036efc6a207c3c8c69616d0d6b7618d318eba23d01802697ab955f63fc1816bfbbb7e1a90a93f10f1df5", 0x29}], 0x1}, 0x4000040) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) [ 2630.647308][T19976] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2630.694283][T19976] CPU: 1 PID: 19976 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 2630.701871][T19976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2630.710919][T19990] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2630.711928][T19976] Call Trace: [ 2630.711952][T19976] dump_stack+0x172/0x1f0 [ 2630.711973][T19976] dump_header+0x10b/0x82d [ 2630.711986][T19976] ? oom_kill_process+0x94/0x3f0 [ 2630.712003][T19976] oom_kill_process.cold+0x10/0x15 18:17:30 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xeffdffff00000000}, 0x0) [ 2630.712021][T19976] out_of_memory+0x334/0x1340 [ 2630.748001][T19976] ? lock_downgrade+0x920/0x920 [ 2630.752866][T19976] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2630.758688][T19976] ? oom_killer_disable+0x280/0x280 [ 2630.758721][T19976] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2630.758736][T19976] ? memcg_stat_show+0xc40/0xc40 [ 2630.758765][T19976] ? do_raw_spin_unlock+0x57/0x270 [ 2630.779525][T19976] ? _raw_spin_unlock+0x2d/0x50 [ 2630.784401][T19976] try_charge+0xf4b/0x1440 [ 2630.788848][T19976] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2630.794414][T19976] ? percpu_ref_tryget_live+0x111/0x290 [ 2630.799985][T19976] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2630.806248][T19976] ? __kasan_check_read+0x11/0x20 [ 2630.811296][T19976] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2630.816866][T19976] mem_cgroup_try_charge+0x136/0x590 [ 2630.822174][T19976] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2630.822195][T19976] wp_page_copy+0x407/0x1860 [ 2630.822216][T19976] ? find_held_lock+0x35/0x130 [ 2630.822228][T19976] ? do_wp_page+0x53b/0x15c0 [ 2630.822245][T19976] ? pmd_devmap_trans_unstable+0x220/0x220 [ 2630.822260][T19976] ? lock_downgrade+0x920/0x920 [ 2630.822278][T19976] ? swp_swapcount+0x540/0x540 [ 2630.822296][T19976] ? __kasan_check_read+0x11/0x20 [ 2630.822309][T19976] ? do_raw_spin_unlock+0x57/0x270 [ 2630.822327][T19976] do_wp_page+0x543/0x15c0 [ 2630.822346][T19976] ? finish_mkwrite_fault+0x6a0/0x6a0 [ 2630.822370][T19976] __handle_mm_fault+0x23ec/0x4040 [ 2630.822392][T19976] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2630.822405][T19976] ? handle_mm_fault+0x292/0xaa0 [ 2630.822433][T19976] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2630.900521][T19976] ? __kasan_check_read+0x11/0x20 [ 2630.905563][T19976] handle_mm_fault+0x3b7/0xaa0 [ 2630.905588][T19976] __do_page_fault+0x536/0xdd0 [ 2630.905613][T19976] do_page_fault+0x38/0x590 [ 2630.905635][T19976] page_fault+0x39/0x40 [ 2630.905658][T19976] RIP: 0033:0x430b36 18:17:30 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xf401000000000000}, 0x0) [ 2630.927713][T19976] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 66 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 2c 44 64 00 85 c0 0f 84 [ 2630.947327][T19976] RSP: 002b:00007ffe625921d0 EFLAGS: 00010206 [ 2630.953408][T19976] RAX: 0000000000019691 RBX: 0000000000716640 RCX: 0000000000008041 [ 2630.961385][T19976] RDX: 0000000001207930 RSI: 000000000120f970 RDI: 0000000000000003 [ 2630.961395][T19976] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001206940 [ 2630.961404][T19976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000716698 [ 2630.961412][T19976] R13: 0000000000716698 R14: 0000000000000000 R15: 0000000000002710 18:17:30 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0) 18:17:30 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xf5ffffff00000000}, 0x0) 18:17:30 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0) [ 2631.309746][T19976] memory: usage 2824kB, limit 0kB, failcnt 324 [ 2631.317303][T19976] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2631.353769][T19976] Memory cgroup stats for /syz3: [ 2631.353884][T19976] anon 53248 [ 2631.353884][T19976] file 126976 [ 2631.353884][T19976] kernel_stack 0 [ 2631.353884][T19976] slab 3059712 [ 2631.353884][T19976] sock 163840 [ 2631.353884][T19976] shmem 0 [ 2631.353884][T19976] file_mapped 0 [ 2631.353884][T19976] file_dirty 135168 [ 2631.353884][T19976] file_writeback 0 [ 2631.353884][T19976] anon_thp 0 [ 2631.353884][T19976] inactive_anon 0 [ 2631.353884][T19976] active_anon 53248 [ 2631.353884][T19976] inactive_file 126976 18:17:31 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xfc00000000000000}, 0x0) [ 2631.353884][T19976] active_file 0 [ 2631.353884][T19976] unevictable 0 [ 2631.353884][T19976] slab_reclaimable 1892352 [ 2631.353884][T19976] slab_unreclaimable 1167360 [ 2631.353884][T19976] pgfault 123750 [ 2631.353884][T19976] pgmajfault 0 [ 2631.353884][T19976] workingset_refault 0 [ 2631.353884][T19976] workingset_activate 0 [ 2631.353884][T19976] workingset_nodereclaim 0 [ 2631.353884][T19976] pgrefill 67 [ 2631.353884][T19976] pgscan 108 [ 2631.353884][T19976] pgsteal 75 [ 2631.353884][T19976] pgactivate 0 [ 2631.509351][T19976] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19976,uid=0 [ 2631.565640][T19994] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2631.595909][T19976] Memory cgroup out of memory: Killed process 19976 (syz-executor.3) total-vm:72444kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 2631.630438][ T1065] oom_reaper: reaped process 19976 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 2631.810286][T20022] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. 18:17:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:17:31 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0) 18:17:32 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x17e, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:17:32 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xfe80000000000000}, 0x0) 18:17:32 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1ab, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) [ 2632.435197][T20041] IPVS: ftp: loaded support on port[0] = 21 [ 2632.445351][T20037] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2633.180849][T20044] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2633.379490][T20046] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2633.414023][T20041] chnl_net:caif_netlink_parms(): no params data found [ 2633.676006][T20041] bridge0: port 1(bridge_slave_0) entered blocking state [ 2633.684159][T20041] bridge0: port 1(bridge_slave_0) entered disabled state [ 2633.694107][T20041] device bridge_slave_0 entered promiscuous mode [ 2633.703638][T20041] bridge0: port 2(bridge_slave_1) entered blocking state [ 2633.712593][T20041] bridge0: port 2(bridge_slave_1) entered disabled state [ 2633.721910][T20041] device bridge_slave_1 entered promiscuous mode [ 2633.791546][T20041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2633.805696][T20041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2633.900569][T20041] team0: Port device team_slave_0 added [ 2633.909372][T20041] team0: Port device team_slave_1 added [ 2633.983713][T20041] device hsr_slave_0 entered promiscuous mode [ 2634.040809][T20041] device hsr_slave_1 entered promiscuous mode [ 2634.089769][T20041] debugfs: Directory 'hsr0' with parent '/' already present! [ 2634.195559][T20041] bridge0: port 2(bridge_slave_1) entered blocking state [ 2634.202727][T20041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2634.210145][T20041] bridge0: port 1(bridge_slave_0) entered blocking state [ 2634.217219][T20041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2634.346743][T20041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2634.362825][T14908] bridge0: port 1(bridge_slave_0) entered disabled state [ 2634.371696][T14908] bridge0: port 2(bridge_slave_1) entered disabled state [ 2634.383453][T14908] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2634.445091][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2634.456656][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2634.470589][T20041] 8021q: adding VLAN 0 to HW filter on device team0 [ 2634.551774][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2634.561945][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2634.570754][T14677] bridge0: port 1(bridge_slave_0) entered blocking state [ 2634.577829][T14677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2634.647580][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2634.657800][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2634.666999][T11670] bridge0: port 2(bridge_slave_1) entered blocking state [ 2634.674842][T11670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2634.696485][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2634.706643][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2634.784095][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2634.794306][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2634.803814][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2634.815660][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2634.837125][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2634.847074][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2634.856459][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2634.866226][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2634.875756][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2634.945897][T20041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2634.980187][T20041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2635.307746][T20060] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2635.319193][T20060] CPU: 1 PID: 20060 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 2635.326757][T20060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2635.336916][T20060] Call Trace: [ 2635.340224][T20060] dump_stack+0x172/0x1f0 [ 2635.344561][T20060] dump_header+0x10b/0x82d [ 2635.348976][T20060] oom_kill_process.cold+0x10/0x15 [ 2635.354079][T20060] out_of_memory+0x334/0x1340 [ 2635.358737][T20060] ? __sched_text_start+0x8/0x8 [ 2635.363566][T20060] ? oom_killer_disable+0x280/0x280 [ 2635.368749][T20060] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2635.374300][T20060] ? memcg_stat_show+0xc40/0xc40 [ 2635.379227][T20060] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2635.385022][T20060] ? cgroup_file_notify+0x140/0x1b0 [ 2635.390254][T20060] memory_max_write+0x262/0x3a0 [ 2635.395090][T20060] ? mem_cgroup_write+0x370/0x370 [ 2635.400097][T20060] ? lock_acquire+0x190/0x410 [ 2635.404825][T20060] ? kernfs_fop_write+0x227/0x480 [ 2635.409828][T20060] ? kernfs_get_active+0x129/0x240 [ 2635.414922][T20060] cgroup_file_write+0x241/0x790 [ 2635.419903][T20060] ? mem_cgroup_write+0x370/0x370 [ 2635.424976][T20060] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2635.430603][T20060] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2635.436214][T20060] kernfs_fop_write+0x2b8/0x480 [ 2635.441049][T20060] __vfs_write+0x8a/0x110 [ 2635.445403][T20060] ? kernfs_fop_open+0xd80/0xd80 [ 2635.450319][T20060] vfs_write+0x268/0x5d0 [ 2635.454542][T20060] ksys_write+0x14f/0x290 [ 2635.458851][T20060] ? __ia32_sys_read+0xb0/0xb0 [ 2635.463595][T20060] ? do_syscall_64+0x26/0x760 [ 2635.468248][T20060] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2635.474986][T20060] ? do_syscall_64+0x26/0x760 [ 2635.479682][T20060] __x64_sys_write+0x73/0xb0 [ 2635.484266][T20060] do_syscall_64+0xfa/0x760 [ 2635.488803][T20060] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2635.494675][T20060] RIP: 0033:0x459a59 [ 2635.498556][T20060] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2635.518273][T20060] RSP: 002b:00007f4a23af8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2635.526663][T20060] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 2635.534618][T20060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2635.542567][T20060] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2635.550518][T20060] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4a23af96d4 [ 2635.558465][T20060] R13: 00000000004c9e7e R14: 00000000004e1a90 R15: 00000000ffffffff [ 2635.582490][T20060] memory: usage 3884kB, limit 0kB, failcnt 1476 [ 2635.588910][T20060] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2635.596972][T20060] Memory cgroup stats for /syz1: [ 2635.598105][T20060] anon 2211840 [ 2635.598105][T20060] file 0 [ 2635.598105][T20060] kernel_stack 65536 [ 2635.598105][T20060] slab 1490944 [ 2635.598105][T20060] sock 0 [ 2635.598105][T20060] shmem 0 [ 2635.598105][T20060] file_mapped 0 [ 2635.598105][T20060] file_dirty 0 [ 2635.598105][T20060] file_writeback 0 [ 2635.598105][T20060] anon_thp 2097152 [ 2635.598105][T20060] inactive_anon 0 [ 2635.598105][T20060] active_anon 2211840 [ 2635.598105][T20060] inactive_file 0 [ 2635.598105][T20060] active_file 0 [ 2635.598105][T20060] unevictable 0 [ 2635.598105][T20060] slab_reclaimable 270336 [ 2635.598105][T20060] slab_unreclaimable 1220608 [ 2635.598105][T20060] pgfault 90024 [ 2635.598105][T20060] pgmajfault 0 [ 2635.598105][T20060] workingset_refault 66 [ 2635.598105][T20060] workingset_activate 0 [ 2635.598105][T20060] workingset_nodereclaim 0 [ 2635.598105][T20060] pgrefill 1281 [ 2635.598105][T20060] pgscan 1276 [ 2635.598105][T20060] pgsteal 33 [ 2635.598105][T20060] pgactivate 1188 [ 2635.701056][T20060] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20059,uid=0 [ 2635.720182][T20060] Memory cgroup out of memory: Killed process 20059 (syz-executor.1) total-vm:72576kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2635.749985][ T1065] oom_reaper: reaped process 20059 (syz-executor.1), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 18:17:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x1a0ffffffff) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x161) perf_event_open$cgroup(&(0x7f0000000540)={0x3, 0x70, 0x64, 0x0, 0x9, 0x6e, 0x0, 0x8000, 0x20000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8a, 0x5, @perf_bp={&(0x7f00000004c0), 0x1}, 0x0, 0x0, 0x101, 0x4, 0x0, 0x0, 0x2}, r7, 0xc, 0xffffffffffffffff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r9 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r9, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0xfffffffffffffec7, &(0x7f0000000640)=[{&(0x7f0000000340)="c944a5fcaeedbafda5709e3f0002", 0xe}], 0x1}, 0xfc00) sendmsg$kcm(r9, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:17:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:17:35 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) 18:17:35 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xfec0000000000000}, 0x0) 18:17:35 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1ac, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:17:35 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x17f, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) [ 2636.164436][T20041] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2636.179809][T20041] CPU: 1 PID: 20041 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 2636.187409][T20041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2636.197471][T20041] Call Trace: [ 2636.200781][T20041] dump_stack+0x172/0x1f0 [ 2636.205131][T20041] dump_header+0x10b/0x82d [ 2636.209566][T20041] ? oom_kill_process+0x94/0x3f0 [ 2636.214528][T20041] oom_kill_process.cold+0x10/0x15 [ 2636.219665][T20041] out_of_memory+0x334/0x1340 [ 2636.224368][T20041] ? lock_downgrade+0x920/0x920 [ 2636.229253][T20041] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2636.234419][T20070] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2636.235074][T20041] ? oom_killer_disable+0x280/0x280 [ 2636.235104][T20041] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2636.235125][T20041] ? memcg_stat_show+0xc40/0xc40 [ 2636.260096][T20041] ? do_raw_spin_unlock+0x57/0x270 [ 2636.265232][T20041] ? _raw_spin_unlock+0x2d/0x50 [ 2636.271056][T20041] try_charge+0xf4b/0x1440 [ 2636.271089][T20041] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2636.281046][T20041] ? percpu_ref_tryget_live+0x111/0x290 [ 2636.286625][T20041] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2636.292972][T20041] ? __kasan_check_read+0x11/0x20 [ 2636.292996][T20041] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2636.293016][T20041] mem_cgroup_try_charge+0x136/0x590 [ 2636.293040][T20041] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2636.293074][T20041] __handle_mm_fault+0x1f0d/0x4040 [ 2636.319672][T20041] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2636.325226][T20041] ? handle_mm_fault+0x292/0xaa0 [ 2636.325257][T20041] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2636.325274][T20041] ? __kasan_check_read+0x11/0x20 [ 2636.325293][T20041] handle_mm_fault+0x3b7/0xaa0 [ 2636.325319][T20041] __do_page_fault+0x536/0xdd0 [ 2636.351041][T20041] do_page_fault+0x38/0x590 [ 2636.355568][T20041] page_fault+0x39/0x40 [ 2636.359737][T20041] RIP: 0033:0x4579f1 [ 2636.363643][T20041] Code: 48 81 ec 98 00 00 00 0f 05 48 3d 00 f0 ff ff 48 89 c3 0f 87 e9 00 00 00 85 db 0f 88 2f 01 00 00 48 89 e2 89 de bf 01 00 00 00 ba 13 00 00 85 c0 0f 88 98 00 00 00 8b 44 24 18 25 00 f0 00 00 [ 2636.383250][T20041] RSP: 002b:00007fff37debf70 EFLAGS: 00010206 [ 2636.383262][T20041] RAX: 0000000000000003 RBX: 0000000000000003 RCX: 00000000004579d0 [ 2636.383270][T20041] RDX: 00007fff37debf70 RSI: 0000000000000003 RDI: 0000000000000001 [ 2636.383279][T20041] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000001125940 [ 2636.383287][T20041] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff37ded150 [ 2636.383296][T20041] R13: 00007fff37ded140 R14: 0000000000000000 R15: 00007fff37ded150 18:17:36 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xfeffffff00000000}, 0x0) 18:17:36 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x0) [ 2636.569747][T20041] memory: usage 1536kB, limit 0kB, failcnt 1488 [ 2636.579914][T20041] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2636.609989][T20041] Memory cgroup stats for /syz1: [ 2636.610103][T20041] anon 106496 [ 2636.610103][T20041] file 0 [ 2636.610103][T20041] kernel_stack 0 [ 2636.610103][T20041] slab 1490944 [ 2636.610103][T20041] sock 0 [ 2636.610103][T20041] shmem 0 [ 2636.610103][T20041] file_mapped 0 [ 2636.610103][T20041] file_dirty 0 [ 2636.610103][T20041] file_writeback 0 [ 2636.610103][T20041] anon_thp 0 [ 2636.610103][T20041] inactive_anon 0 [ 2636.610103][T20041] active_anon 106496 [ 2636.610103][T20041] inactive_file 0 [ 2636.610103][T20041] active_file 0 [ 2636.610103][T20041] unevictable 0 [ 2636.610103][T20041] slab_reclaimable 270336 [ 2636.610103][T20041] slab_unreclaimable 1220608 [ 2636.610103][T20041] pgfault 90024 [ 2636.610103][T20041] pgmajfault 0 [ 2636.610103][T20041] workingset_refault 66 [ 2636.610103][T20041] workingset_activate 0 [ 2636.610103][T20041] workingset_nodereclaim 0 [ 2636.610103][T20041] pgrefill 1281 [ 2636.610103][T20041] pgscan 1276 [ 2636.610103][T20041] pgsteal 33 [ 2636.610103][T20041] pgactivate 1188 [ 2636.720059][T20041] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20041,uid=0 18:17:36 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0) 18:17:36 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xff00000000000000}, 0x0) [ 2636.753648][T20041] Memory cgroup out of memory: Killed process 20041 (syz-executor.1) total-vm:72444kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 2636.773451][ T1065] oom_reaper: reaped process 20041 (syz-executor.1), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 18:17:36 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x0) 18:17:36 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xffff000000000000}, 0x0) [ 2637.033816][T20065] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. 18:17:37 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1ad, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) [ 2637.644974][T20104] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2637.999495][T20108] IPVS: ftp: loaded support on port[0] = 21 [ 2638.175190][T20104] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2638.471829][T20108] chnl_net:caif_netlink_parms(): no params data found [ 2638.576630][T20108] bridge0: port 1(bridge_slave_0) entered blocking state [ 2638.585890][T20108] bridge0: port 1(bridge_slave_0) entered disabled state [ 2638.595197][T20108] device bridge_slave_0 entered promiscuous mode [ 2638.604708][T20108] bridge0: port 2(bridge_slave_1) entered blocking state [ 2638.612536][T20108] bridge0: port 2(bridge_slave_1) entered disabled state [ 2638.621662][T20108] device bridge_slave_1 entered promiscuous mode [ 2638.757595][T20108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2638.771160][T20108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2638.799477][T20108] team0: Port device team_slave_0 added [ 2638.809276][T20108] team0: Port device team_slave_1 added [ 2638.934313][T20108] device hsr_slave_0 entered promiscuous mode [ 2639.050851][T20108] device hsr_slave_1 entered promiscuous mode [ 2639.100650][T20108] debugfs: Directory 'hsr0' with parent '/' already present! [ 2639.196834][T20108] bridge0: port 2(bridge_slave_1) entered blocking state [ 2639.203985][T20108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2639.211407][T20108] bridge0: port 1(bridge_slave_0) entered blocking state [ 2639.218469][T20108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2639.444736][T20108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2639.466003][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2639.475522][T14677] bridge0: port 1(bridge_slave_0) entered disabled state [ 2639.484339][T14677] bridge0: port 2(bridge_slave_1) entered disabled state [ 2639.496039][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2639.513733][T20108] 8021q: adding VLAN 0 to HW filter on device team0 [ 2639.618095][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2639.627914][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2639.637650][T14677] bridge0: port 1(bridge_slave_0) entered blocking state [ 2639.644799][T14677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2639.749576][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2639.760201][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2639.768862][T11670] bridge0: port 2(bridge_slave_1) entered blocking state [ 2639.775984][T11670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2639.839551][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2639.851971][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2639.872196][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2639.882806][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2639.892367][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2639.902211][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2639.965637][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2639.991212][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2640.000851][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2640.061707][T20108] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2640.073839][T20108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2640.085359][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2640.095264][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2640.216497][T20108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2640.514661][T20119] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2640.534465][T20119] CPU: 1 PID: 20119 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 2640.542065][T20119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2640.552122][T20119] Call Trace: [ 2640.555423][T20119] dump_stack+0x172/0x1f0 [ 2640.559761][T20119] dump_header+0x10b/0x82d [ 2640.564186][T20119] oom_kill_process.cold+0x10/0x15 [ 2640.569300][T20119] out_of_memory+0x334/0x1340 [ 2640.573983][T20119] ? __sched_text_start+0x8/0x8 [ 2640.578863][T20119] ? oom_killer_disable+0x280/0x280 [ 2640.584089][T20119] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2640.589640][T20119] ? memcg_stat_show+0xc40/0xc40 [ 2640.594588][T20119] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2640.600399][T20119] ? cgroup_file_notify+0x140/0x1b0 [ 2640.605615][T20119] memory_max_write+0x262/0x3a0 [ 2640.610462][T20119] ? mem_cgroup_write+0x370/0x370 [ 2640.615471][T20119] ? lock_acquire+0x190/0x410 [ 2640.620129][T20119] ? kernfs_fop_write+0x227/0x480 [ 2640.625239][T20119] cgroup_file_write+0x241/0x790 [ 2640.630217][T20119] ? mem_cgroup_write+0x370/0x370 [ 2640.635275][T20119] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2640.640895][T20119] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2640.646523][T20119] kernfs_fop_write+0x2b8/0x480 [ 2640.651411][T20119] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2640.657636][T20119] __vfs_write+0x8a/0x110 [ 2640.661992][T20119] ? kernfs_fop_open+0xd80/0xd80 [ 2640.666907][T20119] vfs_write+0x268/0x5d0 [ 2640.671132][T20119] ksys_write+0x14f/0x290 [ 2640.675442][T20119] ? __ia32_sys_read+0xb0/0xb0 [ 2640.680186][T20119] ? do_syscall_64+0x26/0x760 [ 2640.684849][T20119] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2640.690920][T20119] ? do_syscall_64+0x26/0x760 [ 2640.695596][T20119] __x64_sys_write+0x73/0xb0 [ 2640.700178][T20119] do_syscall_64+0xfa/0x760 [ 2640.704668][T20119] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2640.710538][T20119] RIP: 0033:0x459a59 [ 2640.714415][T20119] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2640.734209][T20119] RSP: 002b:00007f70cea73c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2640.742611][T20119] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 2640.750565][T20119] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2640.758522][T20119] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2640.766474][T20119] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f70cea746d4 [ 2640.774424][T20119] R13: 00000000004c9e7e R14: 00000000004e1a90 R15: 00000000ffffffff [ 2640.789415][T20119] memory: usage 4996kB, limit 0kB, failcnt 325 [ 2640.809276][T20119] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2640.816416][T20119] Memory cgroup stats for /syz3: [ 2640.818428][T20119] anon 2138112 [ 2640.818428][T20119] file 126976 [ 2640.818428][T20119] kernel_stack 65536 [ 2640.818428][T20119] slab 2785280 [ 2640.818428][T20119] sock 163840 [ 2640.818428][T20119] shmem 0 [ 2640.818428][T20119] file_mapped 0 [ 2640.818428][T20119] file_dirty 135168 [ 2640.818428][T20119] file_writeback 0 [ 2640.818428][T20119] anon_thp 2097152 [ 2640.818428][T20119] inactive_anon 0 [ 2640.818428][T20119] active_anon 2138112 [ 2640.818428][T20119] inactive_file 126976 [ 2640.818428][T20119] active_file 0 [ 2640.818428][T20119] unevictable 0 [ 2640.818428][T20119] slab_reclaimable 1757184 [ 2640.818428][T20119] slab_unreclaimable 1028096 [ 2640.818428][T20119] pgfault 123849 [ 2640.818428][T20119] pgmajfault 0 [ 2640.818428][T20119] workingset_refault 0 [ 2640.818428][T20119] workingset_activate 0 [ 2640.818428][T20119] workingset_nodereclaim 0 [ 2640.818428][T20119] pgrefill 67 [ 2640.818428][T20119] pgscan 108 [ 2640.818428][T20119] pgsteal 75 [ 2640.818428][T20119] pgactivate 0 [ 2640.915646][T20119] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20117,uid=0 [ 2640.944288][T20119] Memory cgroup out of memory: Killed process 20117 (syz-executor.3) total-vm:72576kB, anon-rss:2184kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2640.966614][ T1065] oom_reaper: reaped process 20117 (syz-executor.3), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 18:17:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:17:40 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xffffff7f00000000}, 0x0) 18:17:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x1a0ffffffff) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x161) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r7, 0x0, 0x1, 0x0, 0x0}, 0x20) r9 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r9, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0xfffffffffffffec7, &(0x7f0000000640)=[{&(0x7f0000000340)="c944a5fcaeedbafda5709e3f0002", 0xe}], 0x1}, 0xfc00) sendmsg$kcm(r9, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:17:40 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x180, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:17:40 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x0) 18:17:40 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1ae, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) [ 2641.100763][T20108] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2641.135224][T20108] CPU: 1 PID: 20108 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 2641.142840][T20108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2641.152898][T20108] Call Trace: [ 2641.156191][T20108] dump_stack+0x172/0x1f0 [ 2641.160539][T20108] dump_header+0x10b/0x82d [ 2641.164964][T20108] ? oom_kill_process+0x94/0x3f0 [ 2641.169915][T20108] oom_kill_process.cold+0x10/0x15 [ 2641.175041][T20108] out_of_memory+0x334/0x1340 [ 2641.179726][T20108] ? lock_downgrade+0x920/0x920 [ 2641.184593][T20108] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2641.190412][T20108] ? oom_killer_disable+0x280/0x280 [ 2641.195633][T20108] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2641.201198][T20108] ? memcg_stat_show+0xc40/0xc40 [ 2641.206152][T20108] ? do_raw_spin_unlock+0x57/0x270 [ 2641.211295][T20108] ? _raw_spin_unlock+0x2d/0x50 [ 2641.216163][T20108] try_charge+0xf4b/0x1440 [ 2641.216252][T20131] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2641.220591][T20108] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2641.220603][T20108] ? percpu_ref_tryget_live+0x111/0x290 [ 2641.220622][T20108] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2641.220638][T20108] ? __kasan_check_read+0x11/0x20 [ 2641.220659][T20108] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2641.220683][T20108] mem_cgroup_try_charge+0x136/0x590 [ 2641.263115][T20108] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2641.268777][T20108] wp_page_copy+0x407/0x1860 [ 2641.273386][T20108] ? find_held_lock+0x35/0x130 [ 2641.278157][T20108] ? do_wp_page+0x53b/0x15c0 [ 2641.282758][T20108] ? pmd_devmap_trans_unstable+0x220/0x220 [ 2641.288584][T20108] ? lock_downgrade+0x920/0x920 [ 2641.293457][T20108] ? swp_swapcount+0x540/0x540 [ 2641.298234][T20108] ? __kasan_check_read+0x11/0x20 [ 2641.303283][T20108] ? do_raw_spin_unlock+0x57/0x270 [ 2641.308424][T20108] do_wp_page+0x543/0x15c0 [ 2641.312858][T20108] ? finish_mkwrite_fault+0x6a0/0x6a0 [ 2641.312885][T20108] __handle_mm_fault+0x23ec/0x4040 [ 2641.312907][T20108] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2641.312923][T20108] ? handle_mm_fault+0x292/0xaa0 [ 2641.312954][T20108] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2641.312970][T20108] ? __kasan_check_read+0x11/0x20 [ 2641.312993][T20108] handle_mm_fault+0x3b7/0xaa0 [ 2641.340201][T20108] __do_page_fault+0x536/0xdd0 [ 2641.340227][T20108] do_page_fault+0x38/0x590 [ 2641.340246][T20108] page_fault+0x39/0x40 [ 2641.340256][T20108] RIP: 0033:0x430b36 18:17:41 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x0) 18:17:41 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0) [ 2641.340271][T20108] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 66 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 2c 44 64 00 85 c0 0f 84 [ 2641.340278][T20108] RSP: 002b:00007ffe340a2160 EFLAGS: 00010206 [ 2641.340290][T20108] RAX: 0000000000019691 RBX: 0000000000716640 RCX: 0000000000008041 [ 2641.340299][T20108] RDX: 0000000002466930 RSI: 000000000246e970 RDI: 0000000000000003 [ 2641.340307][T20108] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002465940 [ 2641.340314][T20108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000716698 [ 2641.340327][T20108] R13: 0000000000716698 R14: 0000000000000000 R15: 0000000000002710 [ 2641.481134][T20108] memory: usage 2668kB, limit 0kB, failcnt 333 [ 2641.487343][T20108] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2641.514944][T20108] Memory cgroup stats for /syz3: [ 2641.515051][T20108] anon 0 [ 2641.515051][T20108] file 126976 [ 2641.515051][T20108] kernel_stack 0 [ 2641.515051][T20108] slab 2785280 [ 2641.515051][T20108] sock 163840 [ 2641.515051][T20108] shmem 0 [ 2641.515051][T20108] file_mapped 0 [ 2641.515051][T20108] file_dirty 135168 [ 2641.515051][T20108] file_writeback 0 [ 2641.515051][T20108] anon_thp 0 [ 2641.515051][T20108] inactive_anon 0 [ 2641.515051][T20108] active_anon 0 [ 2641.515051][T20108] inactive_file 126976 [ 2641.515051][T20108] active_file 0 [ 2641.515051][T20108] unevictable 0 [ 2641.515051][T20108] slab_reclaimable 1757184 [ 2641.515051][T20108] slab_unreclaimable 1028096 [ 2641.515051][T20108] pgfault 123849 18:17:41 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0xffffffffa0008000}, 0x0) 18:17:41 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x0) [ 2641.515051][T20108] pgmajfault 0 [ 2641.515051][T20108] workingset_refault 0 [ 2641.515051][T20108] workingset_activate 0 [ 2641.515051][T20108] workingset_nodereclaim 0 [ 2641.515051][T20108] pgrefill 67 [ 2641.515051][T20108] pgscan 108 [ 2641.515051][T20108] pgsteal 75 [ 2641.515051][T20108] pgactivate 0 18:17:41 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0}, 0x0) 18:17:41 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x103}, 0x0) [ 2641.961314][T20133] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2641.985221][T20108] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20108,uid=0 [ 2642.001107][T20108] Memory cgroup out of memory: Killed process 20108 (syz-executor.3) total-vm:72444kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 18:17:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:17:42 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x181, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) [ 2642.533531][T20130] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2642.689076][T20163] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2643.084517][T20167] IPVS: ftp: loaded support on port[0] = 21 [ 2643.463171][T20167] chnl_net:caif_netlink_parms(): no params data found [ 2643.553313][T20167] bridge0: port 1(bridge_slave_0) entered blocking state [ 2643.561301][T20167] bridge0: port 1(bridge_slave_0) entered disabled state [ 2643.570781][T20167] device bridge_slave_0 entered promiscuous mode [ 2643.581632][T20167] bridge0: port 2(bridge_slave_1) entered blocking state [ 2643.588800][T20167] bridge0: port 2(bridge_slave_1) entered disabled state [ 2643.598047][T20167] device bridge_slave_1 entered promiscuous mode [ 2643.708672][T20167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2643.723642][T20167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2643.752523][T20167] team0: Port device team_slave_0 added [ 2643.761060][T20167] team0: Port device team_slave_1 added [ 2643.904192][T20167] device hsr_slave_0 entered promiscuous mode [ 2643.961841][T20167] device hsr_slave_1 entered promiscuous mode [ 2644.000019][T20167] debugfs: Directory 'hsr0' with parent '/' already present! [ 2644.130170][T20167] bridge0: port 2(bridge_slave_1) entered blocking state [ 2644.137272][T20167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2644.144682][T20167] bridge0: port 1(bridge_slave_0) entered blocking state [ 2644.151798][T20167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2644.265456][T20167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2644.344578][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2644.356053][T14677] bridge0: port 1(bridge_slave_0) entered disabled state [ 2644.365347][T14677] bridge0: port 2(bridge_slave_1) entered disabled state [ 2644.376972][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2644.395106][T20167] 8021q: adding VLAN 0 to HW filter on device team0 [ 2644.487504][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2644.496683][T14677] bridge0: port 1(bridge_slave_0) entered blocking state [ 2644.503817][T14677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2644.522093][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2644.531315][T14677] bridge0: port 2(bridge_slave_1) entered blocking state [ 2644.538382][T14677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2644.628974][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2644.647885][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2644.726054][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2644.737866][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2644.763272][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2644.772440][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2644.783009][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2644.793056][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2644.802926][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2644.915999][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2644.926774][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2644.938220][T20167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2645.032002][T20167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2645.252406][T20180] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2645.262821][T20180] CPU: 1 PID: 20180 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 2645.270374][T20180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2645.280439][T20180] Call Trace: [ 2645.283745][T20180] dump_stack+0x172/0x1f0 [ 2645.288086][T20180] dump_header+0x10b/0x82d [ 2645.292516][T20180] oom_kill_process.cold+0x10/0x15 [ 2645.297640][T20180] out_of_memory+0x334/0x1340 [ 2645.302322][T20180] ? __sched_text_start+0x8/0x8 [ 2645.307175][T20180] ? oom_killer_disable+0x280/0x280 [ 2645.312384][T20180] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2645.317920][T20180] ? memcg_stat_show+0xc40/0xc40 [ 2645.322847][T20180] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2645.328658][T20180] ? cgroup_file_notify+0x140/0x1b0 [ 2645.333876][T20180] memory_max_write+0x262/0x3a0 [ 2645.338716][T20180] ? mem_cgroup_write+0x370/0x370 [ 2645.343723][T20180] ? lock_acquire+0x190/0x410 [ 2645.348419][T20180] ? kernfs_fop_write+0x227/0x480 [ 2645.353428][T20180] cgroup_file_write+0x241/0x790 [ 2645.358357][T20180] ? mem_cgroup_write+0x370/0x370 [ 2645.363361][T20180] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2645.368995][T20180] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2645.374603][T20180] kernfs_fop_write+0x2b8/0x480 [ 2645.379446][T20180] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2645.385669][T20180] __vfs_write+0x8a/0x110 [ 2645.389977][T20180] ? kernfs_fop_open+0xd80/0xd80 [ 2645.394892][T20180] vfs_write+0x268/0x5d0 [ 2645.399115][T20180] ksys_write+0x14f/0x290 [ 2645.403423][T20180] ? __ia32_sys_read+0xb0/0xb0 [ 2645.408164][T20180] ? do_syscall_64+0x26/0x760 [ 2645.412834][T20180] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2645.418876][T20180] ? do_syscall_64+0x26/0x760 [ 2645.423532][T20180] __x64_sys_write+0x73/0xb0 [ 2645.428557][T20180] do_syscall_64+0xfa/0x760 [ 2645.433042][T20180] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2645.438918][T20180] RIP: 0033:0x459a59 [ 2645.442799][T20180] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2645.462383][T20180] RSP: 002b:00007ff71ff11c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2645.470794][T20180] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 2645.478744][T20180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2645.486712][T20180] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 2645.494743][T20180] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff71ff126d4 [ 2645.502709][T20180] R13: 00000000004c9e7e R14: 00000000004e1a90 R15: 00000000ffffffff [ 2645.518322][T20180] memory: usage 3916kB, limit 0kB, failcnt 1489 [ 2645.539832][T20180] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2645.546721][T20180] Memory cgroup stats for /syz1: [ 2645.546849][T20180] anon 2170880 [ 2645.546849][T20180] file 0 [ 2645.546849][T20180] kernel_stack 65536 [ 2645.546849][T20180] slab 1490944 [ 2645.546849][T20180] sock 0 [ 2645.546849][T20180] shmem 0 [ 2645.546849][T20180] file_mapped 0 [ 2645.546849][T20180] file_dirty 0 [ 2645.546849][T20180] file_writeback 0 [ 2645.546849][T20180] anon_thp 2097152 [ 2645.546849][T20180] inactive_anon 0 [ 2645.546849][T20180] active_anon 2170880 [ 2645.546849][T20180] inactive_file 0 [ 2645.546849][T20180] active_file 0 [ 2645.546849][T20180] unevictable 0 [ 2645.546849][T20180] slab_reclaimable 270336 [ 2645.546849][T20180] slab_unreclaimable 1220608 [ 2645.546849][T20180] pgfault 90090 [ 2645.546849][T20180] pgmajfault 0 [ 2645.546849][T20180] workingset_refault 66 [ 2645.546849][T20180] workingset_activate 0 [ 2645.546849][T20180] workingset_nodereclaim 0 [ 2645.546849][T20180] pgrefill 1281 [ 2645.546849][T20180] pgscan 1276 [ 2645.546849][T20180] pgsteal 33 [ 2645.546849][T20180] pgactivate 1188 [ 2645.642820][T20180] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20178,uid=0 [ 2645.658471][T20180] Memory cgroup out of memory: Killed process 20178 (syz-executor.1) total-vm:72708kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 2645.678709][ T1065] oom_reaper: reaped process 20178 (syz-executor.1), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB 18:17:45 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r1}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r5, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r4, 0x0, 0x1, 0x0, 0x0}, 0x20) r8 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r8, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0xfffffffffffffec7, &(0x7f0000000640)=[{&(0x7f0000000340)="c944a5fcaeedbafda5709e3f0002", 0xe}], 0x1}, 0xfc00) sendmsg$kcm(r8, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r7, 0x0, 0x0) 18:17:45 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0) 18:17:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:17:45 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1af, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:17:45 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1f4}, 0x0) [ 2645.816393][T20167] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2645.840512][T20167] CPU: 0 PID: 20167 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 2645.849063][T20167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2645.859132][T20167] Call Trace: [ 2645.862445][T20167] dump_stack+0x172/0x1f0 [ 2645.866807][T20167] dump_header+0x10b/0x82d [ 2645.871244][T20167] ? oom_kill_process+0x94/0x3f0 [ 2645.876214][T20167] oom_kill_process.cold+0x10/0x15 [ 2645.881354][T20167] out_of_memory+0x334/0x1340 [ 2645.886061][T20167] ? lock_downgrade+0x920/0x920 [ 2645.890945][T20167] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2645.896777][T20167] ? oom_killer_disable+0x280/0x280 [ 2645.898015][T20184] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2645.901999][T20167] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2645.902015][T20167] ? memcg_stat_show+0xc40/0xc40 [ 2645.902034][T20167] ? do_raw_spin_unlock+0x57/0x270 [ 2645.902051][T20167] ? _raw_spin_unlock+0x2d/0x50 [ 2645.902069][T20167] try_charge+0xf4b/0x1440 [ 2645.902094][T20167] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2645.902105][T20167] ? percpu_ref_tryget_live+0x111/0x290 [ 2645.902128][T20167] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2645.953582][T20167] ? __kasan_check_read+0x11/0x20 [ 2645.958634][T20167] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2645.964200][T20167] mem_cgroup_try_charge+0x136/0x590 [ 2645.964224][T20167] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2645.964242][T20167] wp_page_copy+0x407/0x1860 [ 2645.964260][T20167] ? find_held_lock+0x35/0x130 [ 2645.964277][T20167] ? do_wp_page+0x53b/0x15c0 [ 2645.989116][T20167] ? pmd_devmap_trans_unstable+0x220/0x220 [ 2645.994937][T20167] ? lock_downgrade+0x920/0x920 [ 2645.994959][T20167] ? swp_swapcount+0x540/0x540 [ 2645.994976][T20167] ? __kasan_check_read+0x11/0x20 [ 2645.994989][T20167] ? do_raw_spin_unlock+0x57/0x270 [ 2645.995008][T20167] do_wp_page+0x543/0x15c0 [ 2645.995034][T20167] ? finish_mkwrite_fault+0x6a0/0x6a0 [ 2646.024880][T20167] __handle_mm_fault+0x23ec/0x4040 [ 2646.030023][T20167] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2646.035591][T20167] ? handle_mm_fault+0x292/0xaa0 [ 2646.040562][T20167] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2646.046829][T20167] ? __kasan_check_read+0x11/0x20 [ 2646.051853][T20167] handle_mm_fault+0x3b7/0xaa0 [ 2646.051872][T20167] __do_page_fault+0x536/0xdd0 [ 2646.051892][T20167] do_page_fault+0x38/0x590 18:17:45 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x182, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:17:45 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) [ 2646.051910][T20167] page_fault+0x39/0x40 [ 2646.051921][T20167] RIP: 0033:0x430b36 [ 2646.051935][T20167] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 66 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 2c 44 64 00 85 c0 0f 84 [ 2646.051941][T20167] RSP: 002b:00007ffcc431c1c0 EFLAGS: 00010206 [ 2646.051951][T20167] RAX: 0000000000019691 RBX: 0000000000716640 RCX: 0000000000008041 [ 2646.051959][T20167] RDX: 0000000001a8d930 RSI: 0000000001a95970 RDI: 0000000000000003 18:17:45 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0) [ 2646.051965][T20167] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001a8c940 [ 2646.051972][T20167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000716698 [ 2646.051980][T20167] R13: 0000000000716698 R14: 0000000000000000 R15: 0000000000002710 [ 2646.099300][T20167] memory: usage 1548kB, limit 0kB, failcnt 1497 [ 2646.118001][T20167] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2646.158534][T20167] Memory cgroup stats for /syz1: [ 2646.158629][T20167] anon 81920 [ 2646.158629][T20167] file 0 [ 2646.158629][T20167] kernel_stack 0 [ 2646.158629][T20167] slab 1490944 [ 2646.158629][T20167] sock 0 [ 2646.158629][T20167] shmem 0 [ 2646.158629][T20167] file_mapped 0 [ 2646.158629][T20167] file_dirty 0 [ 2646.158629][T20167] file_writeback 0 [ 2646.158629][T20167] anon_thp 0 [ 2646.158629][T20167] inactive_anon 0 [ 2646.158629][T20167] active_anon 81920 [ 2646.158629][T20167] inactive_file 0 [ 2646.158629][T20167] active_file 0 [ 2646.158629][T20167] unevictable 0 [ 2646.158629][T20167] slab_reclaimable 270336 [ 2646.158629][T20167] slab_unreclaimable 1220608 [ 2646.158629][T20167] pgfault 90090 [ 2646.158629][T20167] pgmajfault 0 [ 2646.158629][T20167] workingset_refault 66 [ 2646.158629][T20167] workingset_activate 0 [ 2646.158629][T20167] workingset_nodereclaim 0 [ 2646.158629][T20167] pgrefill 1281 [ 2646.158629][T20167] pgscan 1276 [ 2646.158629][T20167] pgsteal 33 [ 2646.158629][T20167] pgactivate 1188 18:17:46 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x301}, 0x0) 18:17:46 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) [ 2646.449881][T20167] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20167,uid=0 [ 2646.485671][T20167] Memory cgroup out of memory: Killed process 20167 (syz-executor.1) total-vm:72444kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 18:17:46 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3e8}, 0x0) [ 2646.543760][ T1065] oom_reaper: reaped process 20167 (syz-executor.1), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 18:17:46 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) [ 2646.727132][T20191] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. 18:17:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='cpuset.effective_cpus\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0xfffffffffffffec7, &(0x7f0000000640)=[{&(0x7f0000000340)="c944a5fcaeedbafda5709e3f0002", 0xe}], 0x1}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:17:46 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x0) [ 2647.387811][T20221] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2647.666820][T20229] IPVS: ftp: loaded support on port[0] = 21 [ 2648.045051][T20229] chnl_net:caif_netlink_parms(): no params data found [ 2648.092800][T20229] bridge0: port 1(bridge_slave_0) entered blocking state [ 2648.100444][T20229] bridge0: port 1(bridge_slave_0) entered disabled state [ 2648.109179][T20229] device bridge_slave_0 entered promiscuous mode [ 2648.155336][T20229] bridge0: port 2(bridge_slave_1) entered blocking state [ 2648.164554][T20229] bridge0: port 2(bridge_slave_1) entered disabled state [ 2648.173681][T20229] device bridge_slave_1 entered promiscuous mode [ 2648.203158][T20229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2648.216067][T20229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2648.253974][T20229] team0: Port device team_slave_0 added [ 2648.327902][T20229] team0: Port device team_slave_1 added [ 2648.495466][T20229] device hsr_slave_0 entered promiscuous mode [ 2648.560713][T20229] device hsr_slave_1 entered promiscuous mode [ 2648.629886][T20229] debugfs: Directory 'hsr0' with parent '/' already present! [ 2648.824264][T20229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2648.899347][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2648.910771][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2648.924153][T20229] 8021q: adding VLAN 0 to HW filter on device team0 [ 2648.939111][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2648.949260][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2648.958448][T14909] bridge0: port 1(bridge_slave_0) entered blocking state [ 2648.965584][T14909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2649.048770][T14908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2649.058724][T14908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2649.068213][T14908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2649.077668][T14908] bridge0: port 2(bridge_slave_1) entered blocking state [ 2649.084788][T14908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2649.147794][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2649.159421][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2649.182794][T14908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2649.193356][T14908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2649.202959][T14908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2649.215467][T14908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2649.319850][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2649.328361][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2649.351254][T20229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2649.364051][T20229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2649.428010][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2649.471534][T20229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2649.807273][T20238] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2649.822981][T20238] CPU: 0 PID: 20238 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 2649.830552][T20238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2649.840606][T20238] Call Trace: [ 2649.843900][T20238] dump_stack+0x172/0x1f0 [ 2649.848241][T20238] dump_header+0x10b/0x82d [ 2649.852668][T20238] oom_kill_process.cold+0x10/0x15 [ 2649.857789][T20238] out_of_memory+0x334/0x1340 [ 2649.862481][T20238] ? __sched_text_start+0x8/0x8 [ 2649.867338][T20238] ? oom_killer_disable+0x280/0x280 [ 2649.872550][T20238] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2649.878097][T20238] ? memcg_stat_show+0xc40/0xc40 [ 2649.883066][T20238] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2649.888884][T20238] ? cgroup_file_notify+0x140/0x1b0 [ 2649.894091][T20238] memory_max_write+0x262/0x3a0 [ 2649.899101][T20238] ? mem_cgroup_write+0x370/0x370 [ 2649.904153][T20238] ? lock_acquire+0x190/0x410 [ 2649.908843][T20238] ? kernfs_fop_write+0x227/0x480 [ 2649.913885][T20238] cgroup_file_write+0x241/0x790 [ 2649.918832][T20238] ? mem_cgroup_write+0x370/0x370 [ 2649.923858][T20238] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2649.930369][T20238] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2649.936001][T20238] kernfs_fop_write+0x2b8/0x480 [ 2649.940860][T20238] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2649.947114][T20238] __vfs_write+0x8a/0x110 [ 2649.951501][T20238] ? kernfs_fop_open+0xd80/0xd80 [ 2649.956502][T20238] vfs_write+0x268/0x5d0 [ 2649.960862][T20238] ksys_write+0x14f/0x290 [ 2649.965195][T20238] ? __ia32_sys_read+0xb0/0xb0 [ 2649.970919][T20238] ? do_syscall_64+0x26/0x760 [ 2649.975599][T20238] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2649.981665][T20238] ? do_syscall_64+0x26/0x760 [ 2649.986348][T20238] __x64_sys_write+0x73/0xb0 [ 2649.990946][T20238] do_syscall_64+0xfa/0x760 [ 2649.995459][T20238] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2650.001347][T20238] RIP: 0033:0x459a59 [ 2650.005241][T20238] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2650.024849][T20238] RSP: 002b:00007fc1a0accc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2650.033276][T20238] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 2650.041314][T20238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2650.049307][T20238] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2650.057280][T20238] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc1a0acd6d4 [ 2650.065269][T20238] R13: 00000000004c9e7e R14: 00000000004e1a90 R15: 00000000ffffffff [ 2650.106132][T20238] memory: usage 4892kB, limit 0kB, failcnt 334 [ 2650.113837][T20238] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2650.130348][T20238] Memory cgroup stats for /syz3: [ 2650.131827][T20238] anon 2121728 [ 2650.131827][T20238] file 126976 [ 2650.131827][T20238] kernel_stack 0 [ 2650.131827][T20238] slab 2650112 [ 2650.131827][T20238] sock 163840 [ 2650.131827][T20238] shmem 0 [ 2650.131827][T20238] file_mapped 0 [ 2650.131827][T20238] file_dirty 135168 [ 2650.131827][T20238] file_writeback 0 [ 2650.131827][T20238] anon_thp 2097152 [ 2650.131827][T20238] inactive_anon 0 [ 2650.131827][T20238] active_anon 2121728 [ 2650.131827][T20238] inactive_file 126976 [ 2650.131827][T20238] active_file 0 [ 2650.131827][T20238] unevictable 0 [ 2650.131827][T20238] slab_reclaimable 1757184 [ 2650.131827][T20238] slab_unreclaimable 892928 [ 2650.131827][T20238] pgfault 123882 [ 2650.131827][T20238] pgmajfault 0 [ 2650.131827][T20238] workingset_refault 0 [ 2650.131827][T20238] workingset_activate 0 [ 2650.131827][T20238] workingset_nodereclaim 0 [ 2650.131827][T20238] pgrefill 67 [ 2650.131827][T20238] pgscan 108 [ 2650.131827][T20238] pgsteal 75 [ 2650.131827][T20238] pgactivate 0 [ 2650.240830][T20238] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20237,uid=0 [ 2650.257682][T20238] Memory cgroup out of memory: Killed process 20237 (syz-executor.3) total-vm:72576kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 2650.281854][ T1065] oom_reaper: reaped process 20237 (syz-executor.3), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 18:17:50 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:17:50 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1b0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:17:50 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x584}, 0x0) 18:17:50 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) 18:17:50 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x2a9, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000}, 0x1024, 0x0, 0x0, 0x7}, r1, 0x7, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r5, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r4, 0x0, 0x1, 0x0, 0x0}, 0x20) r8 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r8, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0xfffffffffffffec7, &(0x7f0000000640)=[{&(0x7f0000000340)="c944a5fcaeedbafda5709e3f0002", 0xe}], 0x1}, 0xfc00) sendmsg$kcm(r8, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r3, &(0x7f0000000540)="06e8adcf720b2226ccd7146573cf7319b5a75f5362c0376ef80c570620a8671f1fd9b68e35ea76b32a9dee3fc9704c3ee4636255af34cea5c72d5ee29dc20bb51ef63ee2de319600f68504cd1f2e091e8ac2bba36df0532f0f290a2a016d39c4730722efd457dc87b39d8f55d45f68538fc33a5bb801f4302fbda2097b24d9bf3f300f140bb0b0f83c833c2831f2e45f3855a72e43d65b04d978bb6f12541b135e0ac413c18b9161ddf61554fe4be31638fa96c60f600fb4da0e3a2424ae3b6b0e9572fc365139f587705db70c7d61cfc39df742004ebbbdeb6ff7d366f7672a7db21cd149a55cb8b34cf33218e327b5621607aa", &(0x7f0000000680)=""/123, 0x4}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r7, 0x0, 0x0) 18:17:50 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x183, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) [ 2650.727012][T20229] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2650.739740][T20229] CPU: 1 PID: 20229 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 2650.747341][T20229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2650.757416][T20229] Call Trace: [ 2650.760763][T20229] dump_stack+0x172/0x1f0 [ 2650.765119][T20229] dump_header+0x10b/0x82d [ 2650.769559][T20229] ? oom_kill_process+0x94/0x3f0 [ 2650.774527][T20229] oom_kill_process.cold+0x10/0x15 [ 2650.779670][T20229] out_of_memory+0x334/0x1340 [ 2650.784370][T20229] ? lock_downgrade+0x920/0x920 [ 2650.789257][T20229] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2650.795085][T20229] ? oom_killer_disable+0x280/0x280 [ 2650.800316][T20229] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2650.805892][T20229] ? memcg_stat_show+0xc40/0xc40 [ 2650.810865][T20229] ? do_raw_spin_unlock+0x57/0x270 [ 2650.816009][T20229] ? _raw_spin_unlock+0x2d/0x50 [ 2650.820888][T20229] try_charge+0xf4b/0x1440 [ 2650.825338][T20229] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2650.830907][T20229] ? percpu_ref_tryget_live+0x111/0x290 [ 2650.836481][T20229] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2650.842744][T20229] ? __kasan_check_read+0x11/0x20 [ 2650.847803][T20229] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2650.853379][T20229] mem_cgroup_try_charge+0x136/0x590 [ 2650.858700][T20229] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2650.864358][T20229] wp_page_copy+0x407/0x1860 [ 2650.868974][T20229] ? find_held_lock+0x35/0x130 [ 2650.873765][T20229] ? do_wp_page+0x53b/0x15c0 [ 2650.878379][T20229] ? pmd_devmap_trans_unstable+0x220/0x220 [ 2650.884206][T20229] ? lock_downgrade+0x920/0x920 [ 2650.889079][T20229] ? swp_swapcount+0x540/0x540 [ 2650.893869][T20229] ? __kasan_check_read+0x11/0x20 [ 2650.898918][T20229] ? do_raw_spin_unlock+0x57/0x270 [ 2650.904065][T20229] do_wp_page+0x543/0x15c0 [ 2650.908514][T20229] ? finish_mkwrite_fault+0x6a0/0x6a0 [ 2650.914012][T20229] __handle_mm_fault+0x23ec/0x4040 [ 2650.919156][T20229] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2650.924725][T20229] ? handle_mm_fault+0x292/0xaa0 [ 2650.929699][T20229] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2650.935977][T20229] ? __kasan_check_read+0x11/0x20 [ 2650.941034][T20229] handle_mm_fault+0x3b7/0xaa0 [ 2650.945825][T20229] __do_page_fault+0x536/0xdd0 [ 2650.950579][T20229] do_page_fault+0x38/0x590 [ 2650.955067][T20229] page_fault+0x39/0x40 [ 2650.959201][T20229] RIP: 0033:0x430b36 [ 2650.963081][T20229] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 66 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 2c 44 64 00 85 c0 0f 84 [ 2650.982664][T20229] RSP: 002b:00007fffb0510730 EFLAGS: 00010206 [ 2650.988728][T20229] RAX: 0000000000019691 RBX: 0000000000716640 RCX: 0000000000008041 [ 2650.996684][T20229] RDX: 00000000012cd930 RSI: 00000000012d5970 RDI: 0000000000000003 [ 2651.004637][T20229] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000012cc940 [ 2651.012593][T20229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000716698 18:17:50 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0) [ 2651.020681][T20229] R13: 0000000000716698 R14: 0000000000000000 R15: 0000000000002710 18:17:50 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5ac}, 0x0) 18:17:50 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0) [ 2651.115540][T20244] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2651.129895][T20229] memory: usage 2564kB, limit 0kB, failcnt 342 [ 2651.136108][T20229] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2651.167534][T20229] Memory cgroup stats for /syz3: [ 2651.167645][T20229] anon 0 [ 2651.167645][T20229] file 126976 [ 2651.167645][T20229] kernel_stack 0 [ 2651.167645][T20229] slab 2650112 [ 2651.167645][T20229] sock 163840 [ 2651.167645][T20229] shmem 0 [ 2651.167645][T20229] file_mapped 0 [ 2651.167645][T20229] file_dirty 135168 [ 2651.167645][T20229] file_writeback 0 [ 2651.167645][T20229] anon_thp 0 [ 2651.167645][T20229] inactive_anon 0 [ 2651.167645][T20229] active_anon 0 [ 2651.167645][T20229] inactive_file 126976 [ 2651.167645][T20229] active_file 0 [ 2651.167645][T20229] unevictable 0 [ 2651.167645][T20229] slab_reclaimable 1757184 [ 2651.167645][T20229] slab_unreclaimable 892928 [ 2651.167645][T20229] pgfault 123882 [ 2651.167645][T20229] pgmajfault 0 [ 2651.167645][T20229] workingset_refault 0 [ 2651.167645][T20229] workingset_activate 0 [ 2651.167645][T20229] workingset_nodereclaim 0 [ 2651.167645][T20229] pgrefill 67 [ 2651.167645][T20229] pgscan 108 [ 2651.167645][T20229] pgsteal 75 [ 2651.167645][T20229] pgactivate 0 18:17:51 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0) 18:17:51 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0) [ 2651.318809][T20229] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20229,uid=0 18:17:51 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0) [ 2651.452687][T20229] Memory cgroup out of memory: Killed process 20229 (syz-executor.3) total-vm:72444kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 2651.545719][ T1065] oom_reaper: reaped process 20229 (syz-executor.3), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 2651.700301][T20246] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. 18:17:51 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) [ 2652.125686][T20275] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. 18:17:51 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1b2, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:17:51 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x0) 18:17:51 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0) [ 2652.326583][T20280] IPVS: ftp: loaded support on port[0] = 21 [ 2652.373697][T20289] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2653.137628][T20280] chnl_net:caif_netlink_parms(): no params data found [ 2653.242047][T20280] bridge0: port 1(bridge_slave_0) entered blocking state [ 2653.249214][T20280] bridge0: port 1(bridge_slave_0) entered disabled state [ 2653.258744][T20280] device bridge_slave_0 entered promiscuous mode [ 2653.268132][T20280] bridge0: port 2(bridge_slave_1) entered blocking state [ 2653.275403][T20280] bridge0: port 2(bridge_slave_1) entered disabled state [ 2653.284635][T20280] device bridge_slave_1 entered promiscuous mode [ 2653.313267][T20280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2653.423667][T20280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2653.454465][T20280] team0: Port device team_slave_0 added [ 2653.463886][T20280] team0: Port device team_slave_1 added [ 2653.583756][T20280] device hsr_slave_0 entered promiscuous mode [ 2653.750743][T20280] device hsr_slave_1 entered promiscuous mode [ 2653.819830][T20280] debugfs: Directory 'hsr0' with parent '/' already present! [ 2653.907891][T20280] bridge0: port 2(bridge_slave_1) entered blocking state [ 2653.915071][T20280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2653.922611][T20280] bridge0: port 1(bridge_slave_0) entered blocking state [ 2653.929720][T20280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2654.010908][T20280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2654.071196][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2654.085614][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state [ 2654.095028][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state [ 2654.106321][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2654.127891][T20280] 8021q: adding VLAN 0 to HW filter on device team0 [ 2654.197894][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2654.209497][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2654.218602][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state [ 2654.225711][ T5761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2654.329565][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2654.340113][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2654.348732][T14677] bridge0: port 2(bridge_slave_1) entered blocking state [ 2654.355835][T14677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2654.382574][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2654.392735][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2654.411371][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2654.422858][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2654.545628][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2654.554554][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2654.564342][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2654.574000][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2654.583334][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2654.645714][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2654.655865][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2654.666730][T20280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2654.751134][T20280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2654.935381][T20302] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2654.945721][T20302] CPU: 0 PID: 20302 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 2654.953353][T20302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2654.963409][T20302] Call Trace: [ 2654.966706][T20302] dump_stack+0x172/0x1f0 [ 2654.971040][T20302] dump_header+0x10b/0x82d [ 2654.975459][T20302] oom_kill_process.cold+0x10/0x15 [ 2654.980581][T20302] out_of_memory+0x334/0x1340 [ 2654.985265][T20302] ? __sched_text_start+0x8/0x8 [ 2654.990119][T20302] ? oom_killer_disable+0x280/0x280 [ 2654.995331][T20302] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2655.000878][T20302] ? memcg_stat_show+0xc40/0xc40 [ 2655.005948][T20302] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2655.011759][T20302] ? cgroup_file_notify+0x140/0x1b0 [ 2655.016966][T20302] memory_max_write+0x262/0x3a0 [ 2655.021820][T20302] ? mem_cgroup_write+0x370/0x370 [ 2655.026871][T20302] ? lock_acquire+0x190/0x410 [ 2655.031549][T20302] ? kernfs_fop_write+0x227/0x480 [ 2655.036579][T20302] cgroup_file_write+0x241/0x790 [ 2655.041518][T20302] ? mem_cgroup_write+0x370/0x370 [ 2655.046548][T20302] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2655.052188][T20302] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2655.057822][T20302] kernfs_fop_write+0x2b8/0x480 [ 2655.062677][T20302] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2655.068925][T20302] __vfs_write+0x8a/0x110 [ 2655.073257][T20302] ? kernfs_fop_open+0xd80/0xd80 [ 2655.078200][T20302] vfs_write+0x268/0x5d0 [ 2655.082455][T20302] ksys_write+0x14f/0x290 [ 2655.086784][T20302] ? __ia32_sys_read+0xb0/0xb0 [ 2655.091553][T20302] ? do_syscall_64+0x26/0x760 [ 2655.096238][T20302] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2655.102609][T20302] ? do_syscall_64+0x26/0x760 [ 2655.107297][T20302] __x64_sys_write+0x73/0xb0 [ 2655.111899][T20302] do_syscall_64+0xfa/0x760 [ 2655.116418][T20302] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2655.122313][T20302] RIP: 0033:0x459a59 [ 2655.126217][T20302] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2655.146347][T20302] RSP: 002b:00007f26bbfc1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2655.154758][T20302] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 2655.162735][T20302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2655.170709][T20302] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2655.178677][T20302] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f26bbfc26d4 [ 2655.189079][T20302] R13: 00000000004c9e7e R14: 00000000004e1a90 R15: 00000000ffffffff [ 2655.204131][T20302] memory: usage 3872kB, limit 0kB, failcnt 1498 [ 2655.218814][T20302] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2655.227053][T20302] Memory cgroup stats for /syz1: [ 2655.227166][T20302] anon 2220032 [ 2655.227166][T20302] file 0 [ 2655.227166][T20302] kernel_stack 65536 [ 2655.227166][T20302] slab 1490944 [ 2655.227166][T20302] sock 0 [ 2655.227166][T20302] shmem 0 [ 2655.227166][T20302] file_mapped 0 [ 2655.227166][T20302] file_dirty 0 [ 2655.227166][T20302] file_writeback 0 [ 2655.227166][T20302] anon_thp 2097152 [ 2655.227166][T20302] inactive_anon 0 [ 2655.227166][T20302] active_anon 2220032 [ 2655.227166][T20302] inactive_file 0 [ 2655.227166][T20302] active_file 0 [ 2655.227166][T20302] unevictable 0 [ 2655.227166][T20302] slab_reclaimable 270336 [ 2655.227166][T20302] slab_unreclaimable 1220608 [ 2655.227166][T20302] pgfault 90189 [ 2655.227166][T20302] pgmajfault 0 [ 2655.227166][T20302] workingset_refault 66 [ 2655.227166][T20302] workingset_activate 0 [ 2655.227166][T20302] workingset_nodereclaim 0 [ 2655.227166][T20302] pgrefill 1281 [ 2655.227166][T20302] pgscan 1276 [ 2655.227166][T20302] pgsteal 33 [ 2655.227166][T20302] pgactivate 1188 [ 2655.324562][T20302] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20300,uid=0 [ 2655.341674][T20302] Memory cgroup out of memory: Killed process 20300 (syz-executor.1) total-vm:72576kB, anon-rss:2144kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2655.362853][ T1065] oom_reaper: reaped process 20300 (syz-executor.1), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 18:17:55 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) 18:17:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:17:55 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1b3, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="5ea03f6db511aee466448c41d0a37c5d52fbf6d123b2238bc0dc67ffb8a030dd7d9264060255082b5024d1bd6e117d7a20ca56078066e91049b134eb2db929be3f0ac2f70eacf24ae891471c290affb67848907db14e21832c3df1d097ecf14e120ecc990d234042832cc0352f4c22b3828a9ad20ee214973a95bd34110513eb0b903c83d4b8aa755076804cf502013c1bbace98bc821e5a8ba782e18f8fa11b088b70db05e454dd159d018ed06d197dd6014565077d4ebfb8b7db6d35f609ed05ffbcf3380687357f1a593b6f2842e76ff1df4bd5ae29584f89e9d2e50ccbb2964e2e6d3487a509a21e1f6c0ab2dcd9f70777a5c1d58dbf37d5ad66d553898b5620b1e35eb2a96ec010bb87957b6193071706744e312fff95abe536818207e41f7af43e08cca42680fadb739d70aafbeafa7fae70e4526c97e9edcac5648e4c38e10efd34d9f09592c73542bf127a1e68cf8fc3e58e78142b5e5fbbee0175350ab1a8aeedc6c8072ccaa476da314b578854756bb2db47caff231a7f64c51d1d7b4ed1e7cde59355285ef2c2be4ca6f0f6d01dc2d9845505f3a97a57f240c0b0f18fb4936dbb6cf7b6dbf6ec28e61a91ae6e748d0adec1c02c7a39019853b7497e5c3fdd571058f3e648b9f14080442b7279b28de971b6c8b97f1cea66a08bf83bee0707cae6972648a7f3924d63fd69ed03a13aaeba0d9e3bb239544359153fa124e70f873f9d10c07a5a0b58e82536153849350203d848998d61cbaa4f67dc73c84dbcd45939a3f01839e0897a3271118e304694db3ab806e05d206bd3c42dc79be167c9c297559d9a85d5eb04369c534360045b1a80e28d1466705873e3d8bfa73c44d59473df58b8a0305e6a5ec7300183cc60115288e393ca5d160a0fc8eaec5a77c0ba0798eed1e18890e2403ee8d156514eb6f5dc075d4a1f7ce70ae6fab8c82c6ecbcf3e973bc6a461f2f739f9820d66e28f3e9834a7ac8ed81a352c9f7a0882b14b2044ededaf694eba063ad3192f4dbf6ba79288a47ccbf6546c4fbbaefc864694e7063e39cb12ec68dca7b20986c48ae94022cdcb888222ee7f05f55ddea71f0298223b3c4109c15dd7ec41e78aef8dd5ff55c89ce7900261d62b35d12b813b8a385863f3c9d1f4ed37d7cd5314226afdb2892ddaeb1eec542cc8c040fc64cd3ae4dcd7264d68d247acbb353e40a33d5682ce2a4a005a2975908cbd0526beb6048840f3499cfcebba06eaf0c51c8b760593098a3def21b3664e7d42253f8c990538d382bf0768cdc106fac3699bcb5b12279f81dc9ba6ed1e2f7820f6cf8a2b3e4c88a33d9f0a32f60673b5897cadbbe7dffb9cf7f6b5a5d62701eba230fb2daa966a63d91e86c02472bd8114e5ba5df8152067086c142e6cd88289a501fc3353c1d0f17a663b179c446220d970d50a9c9adbb0b990be52ad19cd36669df47ff6e1f6fec4b7b1693c802d736aebe985e0c3c59c753ed95d79a7564880c4e2ffe5c9e59e818d2810468c48a4e75f15f3f252f2d780dd30717fe572c5d55adf090223fb30216c3882e9be19cb627aab1fdad81f8f117a90c2e7874edf1c4dc8e2da674348855659434eaba5c5063a29c28f4d22ce5515464b53967ab33d82f0e5afa98322c31e789be5d7600c726bd467d3be3eb4e0df733b91eecd95a5d1648ef268c43906b187ab24bb83bc80fa2ba4ab21d99c0aadf87d15cec51bf2cd52412ec638b43c27551f039e58026e6e910c7f327afe2e363491cfed5caadc8ca674659004f24991fdf76faac054dff64fb2282fc92d3b9ae32222833f1ae905dfa1dada3116765ef2b04ae6124f44cc7f83bd8f159eaa5290cc9e691fa77bec9c35a625b1b24cde8c9363b37b6f77ce844ea77752891b4c837c7c9648f7a16da6aadaf8912ba392c9984d26977c4b99e5c94925f0c6b9a48f2701eeb477aa0a99adb7fd145cd01b3cee9ad3c835690cda9ee1302fdf301558bb1979e177f18876b3fbe7b01597260a33822a63cdc760edee9839d75e0de20acdc8ae98a008d7390e4bb095650149b1bae84d240bd6480fbb10c1930f3a61dbfc3cb17888e33fb12f2dec1523380699b28300bf8b377e4357d5385176a35edbbb6e81e17e42fb07964452b53a069704f597cab1c646a8e8b99c0411e18def7e1c26e7cab72369228dfeb0d306cd46cdd9299538c89697c1c681d577290c2b03c9d84cd1b5803ff9291a28f3efbc3112b53e5cea348d364a954ac78db91e610df86be53c20707401d70f7768cdf0566420c1dfb7216877784244b5a84abc61e577b11b5dfd194018dbaa4024b57e6b0dcba72f621f62938f7a717c9a899aaa78b595f01c48f94c0bbf68c7cfb16c59269f48611dc9d7077b6805edbe30f2c7988a18f5ef3928a769f011936af9cb4665f48ce17afa1bb3f614e76b40a7e0920b9942362c41589f2be923530a186693a429a8e2767ec30d02407d4fbb6a397f52ec48fdb3fc0d2863f301585a14941cfac093cf8e53e91762db548306961979d396e4645f5698aa36db22603d1893149ba2d7aaa44bb14e0eceafd84cddb3c5c3e2a8eeb02a96e9d9f08db989b450614b0767314e4024114c785c95272226f1c2e2a29a07c7c133abaf254fb9d64a1c597ca32c3a1b17bf262907d9a5a468d37986a300f9a1274718521d76cc1fa8ae122f5dc46ba1c998c3d66bbfdece070f37ac35c7d7de0bffc8369f222fe768273edb69115f94177e9ab237ba50eafdefd5a2369059be377db15661961961c3bc60e6b1af713bd20d70b315025a249d5a6d67e340582404b561ae11fcc711c21c80a56d0a6b964d333e0c1a53333a2ebf4ebda28a59680639c0fd282d64539143b2d416accb7b5cfa16fb2dd9b767f79fe9c26f2b70972b2225ae8beae908dfcb34bbe30870369ea766479db570787a6e11d7544f32888b637e3cbbc4fc85e34d7847e26779e8a8d940ae28de2f2d122c1dba8948af913b2ba890cb12cf2db92ae75aac53614d6faaed47b4373147c6c93880646ee35d85394d25d9dadf73ea35ada21cdbc89038e90e9a28949fd84bac77ea7b2f79ece1c3c2defe5faf9b001ac4750920fc6414569413fd2cdb4e49751fa9c1a531d0081856aa2a9f884040610f9782eeb2c135afc0f60c09e1d5c3a83311010ead8b7bebe91bf339b7d88fab261596465fbbb8942fd32aac8661bb3ad21696895365e258f2a6d4e9049f93545e971fc053317082a2c6ebe65e571b29cdcbca06e5f422c6ea288f98d282ad5c9475a3e9258b4a21360d19cb91c99aeb6476f21049c8d6c9918a9ba7ced60b1f97b9b9cacef6958da3fb8b762f35043539c145956487110ccd420783f3c4490cecb089179c99a89e07fc14d2a8e8a78cc1cbbf0caaf9f8a6850fa8f150c45b616c102a09b995ac9408fdfd26b79339ad175691cc065f7911d99c53b249f03a96b3df1cca6f9dfd2d3c1e732681d58cc2fc671010e7bd98c006ba63b703266aa2f1c3d6fbc148902e425d83d044f014b9e7b3977b8fda094e02dd6dd8298983d5d891d66db077233fc155dad208bfe7c6585bdc6d246bba81cacff55994ee88f9163b27f51d6ae47d0b296124d3018f69f79528797e8aaf21d8035c044821137b0f7e7b3b41b8019379002ae9bc70dc1bc377b6fc0e2a40accf480ae0dc53e61a91d1815ea796fc14d6abddcee1fd965adc3a441333d430568bcb29f0cac078b70a4f6d1011c1822708fb1bbeeaea6433cf5cdcf9aec7bbce4c92e6fdda88b3dc48a4d42f4348a05fee23c41869ca326d39c0605d9144f82bd0c3c2f9ac9ae0b1f5fabe0ab5af39babf027a83df5b1c58513d27cb5babc9a5be073043543bff731da9bb715e57678507baf194fec9efa3235631b9594682dd531c3762432e25c25c048e600cc7c318e82b720db17436fbc054c04f59923ae61ec0b4896d08daab3b617bd8d239c24e95c8fcd1a7dd64a8a3d7e158c626833a2735c9e96514639f007983da3bb43a6f18e40d3eda0cc9468d118d28c6bda3ebae6c3ae2c14b1b02305abd16b7c6be707ffaf59142988eb931275bd4c38aefefbbaa95e16d7551f5f1fcfa9744a357d21c76b28747e5e94683d455530433876d509793ed409847f8a972450285f9e9f2dc665e78c7747418523bb51ef8191231e989ca93ef75e9ca27f38a2e5327d29c265c39f12fb1d01a723a902292c6bc06fdc6856d4829680909db55c4650449d0a2d2dad92cfbc8c03fdcb5656a56fded95b0ac41595a2a5bb34d5feb4e06da8adb5143eef67cdc3d18edd095c086d99cb43cddbbfeeb0beadadc1e30ec57bf760592e6365ffacbd6134b7262966af9c808f980fff81280566c79d3a2a15654c597aa050dda7ace4b5298f512b445023d4d86bc37c85ee1a2d7637f3ea0eafd6440893f43a2a912735d0dc8e2827148893f7554897fcb91a4f5581d793fa707fa181dcf69e3fddf498a19767922f4c52fd6797bfba85a61f9c5fe10970b06c7006d7b804f5d1db40b6f606f532cc5a6b93be6473bcbad8f06ead3995cb5f42ee8ddc658ac9085d0c6046b07be03837d5d68504c04b2a769db69e04aa1e414eec40118856f58ac5d3765e5d5038b20d2966389d0b462dfd71065140bf8ae0bb6eb105ac8160c8cc7641b14aaf0304731ab4d9d4bef89d62dd137d7f88645f941999e2fbfbd171a445c2702a87adcb5fd7d7e36d53b715e6ee87fcebdd0b9fef00182fa8e7ec8e7b5a3ac9d332ce92334a8e1ce0d493cff3c2a4fe1f902da785deb68bf936eabfe59a2f698b2d8d0dbd11c25f413ad4b7c554ed5d9e69a1c44c0dd523b47fc66e474357bd6b1e49fc2e12e30e206347d479ce0c20ef4b12e5d63de14e4b7550772a1ef0b5327d755aef1766da85e429a7920e4652d772619ea3526b330778ad35966c12e45a85ce6a5e3e99372a8c621e17ac2c3ff024c625a5599d41ad794e99ceeecb0bf334fd56b823e5b9406c6089fa406aaabe75afd7413affdc1019729d6f72a4b1a330412c03d9f75dbedb88bf556ee57a642fd1802e35807878f7aa15af0a00bc8fa8a4d01ff3e60249d07e780244d387cc60d7f25869f50580f0136391faec535332727b7ec85b12e3be7d8f34369f00b888133c3ad0ffa24bd03c5183d55172076b989b4151227467b915ab6e8347e15c99f2f9051d6ae0b2b72a717536899473b7c04160cc8d6d23a3f0ee63ae0ae4f79523af48779d836f0e0ae4b92ee78b820a9f6319ab064d11b7fb3e91579528a91c7c2521332ffaceb00ebaded7ef22d0ff9986273759b08b9f75565fe5c194bbfe704eda0fc0662db8cc3002b05dc39792540278a2c12501680ef4b95b3eac0573e559c6cf0badbe364e3bcaa14661afe1320a32d4e9644fdcd44b9dce2fee476e8f840a91a66cd877d3e5bbb5b595e654580955f4ba8548b41220a355a805669de9f3bc50157e594f5b444b88a320d80522e51bce929200d71e10e4a85c3d12ee133dda3fcdf7a454773a0575f7d9bfcb8c8646ffbad451446daf3ea742c0fa6bbb2ca4db442e60492ac9e131037278fa5552c0ed00c84469cd11600d3365617f57af4178fc264500327c48ae67de27c62766f9d6848e57f2ce0eb75e1cf72bafb21541c0370f73fc77e0d8b0b11056362a3936e38271259377d40fbc257d8c72b3e583fc6b0e20420dbc99a7932cb305fa9e61bd0de0d9758d35fe0ee13d0eaa782a3059e10caa61df3903aa1061298aced4712d998181e7edd03a11041de4018fe56cae17e0dced027ab7a0a27a6415d8d", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) [ 2655.498150][T20280] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2655.519891][T20280] CPU: 1 PID: 20280 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 2655.527470][T20280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2655.527477][T20280] Call Trace: [ 2655.527497][T20280] dump_stack+0x172/0x1f0 [ 2655.527517][T20280] dump_header+0x10b/0x82d [ 2655.549553][T20280] ? oom_kill_process+0x94/0x3f0 [ 2655.554509][T20280] oom_kill_process.cold+0x10/0x15 [ 2655.559639][T20280] out_of_memory+0x334/0x1340 [ 2655.564327][T20280] ? lock_downgrade+0x920/0x920 [ 2655.569217][T20280] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2655.575054][T20280] ? oom_killer_disable+0x280/0x280 [ 2655.580277][T20280] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2655.580292][T20280] ? memcg_stat_show+0xc40/0xc40 [ 2655.580312][T20280] ? do_raw_spin_unlock+0x57/0x270 [ 2655.595900][T20280] ? _raw_spin_unlock+0x2d/0x50 [ 2655.600785][T20280] try_charge+0xf4b/0x1440 [ 2655.605213][T20280] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2655.605232][T20280] ? percpu_ref_tryget_live+0x111/0x290 [ 2655.605252][T20280] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2655.605268][T20280] ? __kasan_check_read+0x11/0x20 [ 2655.627612][T20280] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2655.634033][T20280] mem_cgroup_try_charge+0x136/0x590 [ 2655.639312][T20280] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2655.644930][T20280] wp_page_copy+0x407/0x1860 [ 2655.649505][T20280] ? find_held_lock+0x35/0x130 [ 2655.654280][T20280] ? do_wp_page+0x53b/0x15c0 [ 2655.658886][T20280] ? pmd_devmap_trans_unstable+0x220/0x220 [ 2655.664777][T20280] ? lock_downgrade+0x920/0x920 [ 2655.669625][T20280] ? swp_swapcount+0x540/0x540 [ 2655.674390][T20280] ? __kasan_check_read+0x11/0x20 [ 2655.679405][T20280] ? do_raw_spin_unlock+0x57/0x270 [ 2655.684507][T20280] do_wp_page+0x543/0x15c0 [ 2655.688908][T20280] ? finish_mkwrite_fault+0x6a0/0x6a0 [ 2655.694270][T20280] __handle_mm_fault+0x23ec/0x4040 [ 2655.699368][T20280] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2655.704899][T20280] ? handle_mm_fault+0x292/0xaa0 [ 2655.709829][T20280] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2655.716138][T20280] ? __kasan_check_read+0x11/0x20 [ 2655.721148][T20280] handle_mm_fault+0x3b7/0xaa0 [ 2655.725895][T20280] __do_page_fault+0x536/0xdd0 [ 2655.730651][T20280] do_page_fault+0x38/0x590 [ 2655.735143][T20280] page_fault+0x39/0x40 [ 2655.739289][T20280] RIP: 0033:0x403522 [ 2655.743167][T20280] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 59 8f 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 79 44 05 00 48 [ 2655.762754][T20280] RSP: 002b:00007ffd14e3db60 EFLAGS: 00010246 [ 2655.768837][T20280] RAX: 0000000000000000 RBX: 00000000002882be RCX: 0000000000413660 [ 2655.776804][T20280] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffd14e3ec90 [ 2655.784759][T20280] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000c5d940 18:17:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = gettid() perf_event_open(0x0, r7, 0x80000040000001, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r7, r6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x3cb8c47343ecb3e0) perf_event_open(&(0x7f0000000540)={0x0, 0x70, 0x1f, 0x4, 0x8, 0x7, 0x0, 0x4b, 0x200, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c, 0x2, @perf_bp={&(0x7f00000004c0), 0x2}, 0x21810, 0x1, 0x6, 0x4, 0xfff, 0x0, 0x2}, r7, 0xa, r1, 0x9) openat$cgroup_ro(r2, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x1a0ffffffff) r10 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x3e, &(0x7f00000002c0)=r9, 0x161) perf_event_open(&(0x7f0000000680)={0x2, 0x70, 0x20, 0x7e, 0x6, 0x0, 0x0, 0x5, 0x10802, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x8, @perf_bp={&(0x7f00000005c0), 0x8}, 0x8200, 0x100000001, 0x7, 0xe, 0x76, 0x3, 0x6}, r8, 0xe, r9, 0x6) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x1a0ffffffff) r12 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r12, 0x1, 0x3e, &(0x7f00000002c0)=r11, 0x161) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x1a0ffffffff) r14 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r14, 0x1, 0x3e, &(0x7f00000002c0)=r13, 0x161) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x2400, 0x100000001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r15 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r15, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0xfffffffffffffec7, &(0x7f0000000640)=[{&(0x7f0000000340)="c944a5fcaeedbafda5709e3f0002", 0xe}], 0x1}, 0xfc00) sendmsg$kcm(r15, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgro5p.cpu/sygz1\x00eX\xd0j\xe2Z5\x02\x01\xf8G\x0e\xfdQ\x1du\xaa\xcf\xec\x7f$\x8fq!<\x13}\t\xc2{\x81LZ6\xbd\xd9\xf9\x8b/\xf4\xfb]\x00*V\xc1\xc9\"WZAP+\xf6\r\xe7\x17\x9f\xab6\x8e f6\x16\xf6\x19:\xb4Gb\xee\xeb\x9a\xda\xed\x14\xe9(\xb4\xfc\xea\\\xc5\xe9\xb6\x11X#v\x15]\xd4H\x8a\xde\xf3\x04 \xe2\x00\x00\x00\x00\x00\x00\x00\xc5\xdd\'\xb5\x1a-\x05\x8af\xbe\xf4$\xa3\x1c\x87\xcb~Hn\x8b\xd23\x98\x7f\\!\xf8\xf3\xb1\xb0\xab\x9c\xcb\xb1\xee\rDl,\x9d\xd8\xb3\x0f7\x16\xac\xad\xef+\xe04\xb1\xf8$\x1e\x1e\xcb\xdc\xddqn\x93\x83$\xf4\x02\x02$\xe6\x03t\xa1\x91\xa1n\x87\\N\x89\xfd\xc7rB\n\x109\xe2\xf4\xf1K-\n\x86\xd3\x9e\xda\x99DV1\v\xc6\xd8\xc1\xae\xc8\x9b\xa5~\xdb\xc4b\x06`\xe8\x1b\x06\xd1M\x1dGa\xa2Y\xc8\xa89}\xfc\xca\x9f\x02\xef/\xd0,\xebK\xb7\xdck\xca\xa6e\xe3l\x9e\x11 \x82[S*\xe5\x89b\xdd\"\t.\x8cYy\xc6K\x94\xd5\x82!d\x99\xa9\xc2\xc5y\x87\xe3\xb8w\xafXKm\xbb\xa7\xa1\t\t\x040\xe3\xee\x00\xc9\xcd\xfd\xc3H\xaf\x9b(7\xf0\x0f<+\xf5\x13\xb4\\{\a\x88~\f\x13\xa3^\xe9\xfcqUPdm\xf7\x91@?\xcd\xf7g\xc4\xe92J\xd7j.V:\xbf\xe8b{\xe0\'5\\&w\xae*', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) 18:17:55 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) 18:17:55 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x184, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) [ 2655.792710][T20280] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd14e3ec90 [ 2655.800661][T20280] R13: 00007ffd14e3ec80 R14: 0000000000000000 R15: 00007ffd14e3ec90 18:17:55 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x0) 18:17:55 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x0) [ 2655.891359][T20313] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2656.009881][T20280] memory: usage 1548kB, limit 0kB, failcnt 1506 [ 2656.020475][T20280] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2656.061552][T20280] Memory cgroup stats for /syz1: [ 2656.061669][T20280] anon 32768 [ 2656.061669][T20280] file 0 [ 2656.061669][T20280] kernel_stack 0 [ 2656.061669][T20280] slab 1490944 [ 2656.061669][T20280] sock 0 [ 2656.061669][T20280] shmem 0 [ 2656.061669][T20280] file_mapped 0 [ 2656.061669][T20280] file_dirty 0 [ 2656.061669][T20280] file_writeback 0 [ 2656.061669][T20280] anon_thp 0 [ 2656.061669][T20280] inactive_anon 0 [ 2656.061669][T20280] active_anon 32768 [ 2656.061669][T20280] inactive_file 0 [ 2656.061669][T20280] active_file 0 [ 2656.061669][T20280] unevictable 0 [ 2656.061669][T20280] slab_reclaimable 270336 [ 2656.061669][T20280] slab_unreclaimable 1220608 [ 2656.061669][T20280] pgfault 90189 [ 2656.061669][T20280] pgmajfault 0 [ 2656.061669][T20280] workingset_refault 66 [ 2656.061669][T20280] workingset_activate 0 [ 2656.061669][T20280] workingset_nodereclaim 0 [ 2656.061669][T20280] pgrefill 1281 [ 2656.061669][T20280] pgscan 1276 [ 2656.061669][T20280] pgsteal 33 [ 2656.061669][T20280] pgactivate 1188 18:17:55 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xe00}, 0x0) 18:17:55 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0) [ 2656.198399][T20306] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2656.242340][T20280] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20280,uid=0 [ 2656.259453][T20280] Memory cgroup out of memory: Killed process 20280 (syz-executor.1) total-vm:72444kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 2656.300363][ T1065] oom_reaper: reaped process 20280 (syz-executor.1), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 18:17:56 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1100}, 0x0) 18:17:56 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x0) 18:17:56 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x0) [ 2656.954997][T20312] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2657.144408][T20332] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2657.406659][T20350] IPVS: ftp: loaded support on port[0] = 21 [ 2657.757188][T20350] chnl_net:caif_netlink_parms(): no params data found [ 2657.806638][T20350] bridge0: port 1(bridge_slave_0) entered blocking state [ 2657.815113][T20350] bridge0: port 1(bridge_slave_0) entered disabled state [ 2657.824460][T20350] device bridge_slave_0 entered promiscuous mode [ 2657.905669][T20350] bridge0: port 2(bridge_slave_1) entered blocking state [ 2657.914780][T20350] bridge0: port 2(bridge_slave_1) entered disabled state [ 2657.924053][T20350] device bridge_slave_1 entered promiscuous mode [ 2657.956622][T20350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2657.971234][T20350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2657.998155][T20350] team0: Port device team_slave_0 added [ 2658.152660][T20350] team0: Port device team_slave_1 added [ 2658.223757][T20350] device hsr_slave_0 entered promiscuous mode [ 2658.310825][T20350] device hsr_slave_1 entered promiscuous mode [ 2658.379842][T20350] debugfs: Directory 'hsr0' with parent '/' already present! [ 2658.611968][T20350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2658.721068][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2658.733775][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2658.742243][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2658.756997][T20350] 8021q: adding VLAN 0 to HW filter on device team0 [ 2658.838820][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2658.851641][T11670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2658.860448][T11670] bridge0: port 1(bridge_slave_0) entered blocking state [ 2658.867520][T11670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2658.949434][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2658.958319][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2658.968077][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2658.977349][T14677] bridge0: port 2(bridge_slave_1) entered blocking state [ 2658.984482][T14677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2659.086074][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2659.095949][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2659.117945][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2659.128333][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2659.138221][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2659.148181][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2659.334920][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2659.343933][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2659.353692][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2659.370037][T20350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2659.382954][T20350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2659.395223][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2659.406828][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2659.514439][T20350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2659.830924][T20357] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2659.842013][T20357] CPU: 1 PID: 20357 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 2659.849575][T20357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2659.859640][T20357] Call Trace: [ 2659.862950][T20357] dump_stack+0x172/0x1f0 [ 2659.867372][T20357] dump_header+0x10b/0x82d [ 2659.871804][T20357] oom_kill_process.cold+0x10/0x15 [ 2659.876917][T20357] out_of_memory+0x334/0x1340 [ 2659.881609][T20357] ? __sched_text_start+0x8/0x8 [ 2659.886466][T20357] ? oom_killer_disable+0x280/0x280 [ 2659.891693][T20357] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2659.897238][T20357] ? memcg_stat_show+0xc40/0xc40 [ 2659.902187][T20357] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2659.907995][T20357] ? cgroup_file_notify+0x140/0x1b0 [ 2659.913216][T20357] memory_max_write+0x262/0x3a0 [ 2659.918073][T20357] ? mem_cgroup_write+0x370/0x370 [ 2659.923120][T20357] ? cgroup_file_write+0x86/0x790 [ 2659.928159][T20357] cgroup_file_write+0x241/0x790 [ 2659.933116][T20357] ? mem_cgroup_write+0x370/0x370 [ 2659.938147][T20357] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2659.943798][T20357] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2659.949433][T20357] kernfs_fop_write+0x2b8/0x480 [ 2659.954304][T20357] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2659.960560][T20357] __vfs_write+0x8a/0x110 [ 2659.964893][T20357] ? kernfs_fop_open+0xd80/0xd80 [ 2659.969959][T20357] vfs_write+0x268/0x5d0 [ 2659.974207][T20357] ksys_write+0x14f/0x290 [ 2659.978537][T20357] ? __ia32_sys_read+0xb0/0xb0 [ 2659.983313][T20357] ? do_syscall_64+0x26/0x760 [ 2659.988689][T20357] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2659.994793][T20357] ? do_syscall_64+0x26/0x760 [ 2659.999488][T20357] __x64_sys_write+0x73/0xb0 [ 2660.004091][T20357] do_syscall_64+0xfa/0x760 [ 2660.008598][T20357] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2660.014493][T20357] RIP: 0033:0x459a59 [ 2660.018390][T20357] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2660.037997][T20357] RSP: 002b:00007f4ae6e55c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2660.046426][T20357] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 2660.054844][T20357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2660.063428][T20357] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2660.071404][T20357] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4ae6e566d4 [ 2660.079380][T20357] R13: 00000000004c9e7e R14: 00000000004e1a90 R15: 00000000ffffffff [ 2660.114057][T20357] memory: usage 4760kB, limit 0kB, failcnt 343 [ 2660.162061][T20357] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2660.169044][T20357] Memory cgroup stats for /syz3: [ 2660.171004][T20357] anon 2187264 [ 2660.171004][T20357] file 126976 [ 2660.171004][T20357] kernel_stack 65536 [ 2660.171004][T20357] slab 2650112 [ 2660.171004][T20357] sock 163840 [ 2660.171004][T20357] shmem 0 [ 2660.171004][T20357] file_mapped 0 [ 2660.171004][T20357] file_dirty 135168 [ 2660.171004][T20357] file_writeback 0 [ 2660.171004][T20357] anon_thp 2097152 [ 2660.171004][T20357] inactive_anon 0 [ 2660.171004][T20357] active_anon 2187264 [ 2660.171004][T20357] inactive_file 126976 [ 2660.171004][T20357] active_file 0 [ 2660.171004][T20357] unevictable 0 [ 2660.171004][T20357] slab_reclaimable 1757184 [ 2660.171004][T20357] slab_unreclaimable 892928 [ 2660.171004][T20357] pgfault 123948 [ 2660.171004][T20357] pgmajfault 0 [ 2660.171004][T20357] workingset_refault 0 [ 2660.171004][T20357] workingset_activate 0 [ 2660.171004][T20357] workingset_nodereclaim 0 [ 2660.171004][T20357] pgrefill 67 [ 2660.171004][T20357] pgscan 108 [ 2660.171004][T20357] pgsteal 75 [ 2660.171004][T20357] pgactivate 0 [ 2660.277272][T20357] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20356,uid=0 [ 2660.308122][T20357] Memory cgroup out of memory: Killed process 20356 (syz-executor.3) total-vm:72576kB, anon-rss:2144kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2660.331385][ T1065] oom_reaper: reaped process 20356 (syz-executor.3), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 18:18:00 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:18:00 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2800}, 0x0) 18:18:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0xfffffffffffffec7, &(0x7f0000000640)=[{&(0x7f0000000340)="c944a5fcaeedbafda5709e3f0002", 0xe}], 0x1}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x1a0ffffffff) r9 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x161) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r8, 0xfffffffffffffdde, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x1}, 0x0, 0x0, &(0x7f0000000580)={0xfffffffe, 0x0, 0x10000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, r10}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={0x0, 0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000600)='vmnet0vboxnet0\x00', r10}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={r10}, 0xc) 18:18:00 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x185, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:18:00 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1b4, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:18:00 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x0) [ 2660.784467][T20350] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2660.854379][T20350] CPU: 1 PID: 20350 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 2660.861970][T20350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2660.872038][T20350] Call Trace: [ 2660.875347][T20350] dump_stack+0x172/0x1f0 [ 2660.879699][T20350] dump_header+0x10b/0x82d [ 2660.884154][T20350] ? oom_kill_process+0x94/0x3f0 [ 2660.889107][T20350] oom_kill_process.cold+0x10/0x15 [ 2660.894236][T20350] out_of_memory+0x334/0x1340 [ 2660.898924][T20350] ? lock_downgrade+0x920/0x920 [ 2660.903794][T20350] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2660.909617][T20350] ? oom_killer_disable+0x280/0x280 [ 2660.914843][T20350] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2660.920423][T20350] ? memcg_stat_show+0xc40/0xc40 [ 2660.925377][T20350] ? do_raw_spin_unlock+0x57/0x270 [ 2660.930505][T20350] ? _raw_spin_unlock+0x2d/0x50 [ 2660.935374][T20350] try_charge+0xf4b/0x1440 [ 2660.939810][T20350] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2660.945363][T20350] ? percpu_ref_tryget_live+0x111/0x290 [ 2660.950923][T20350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2660.957190][T20350] ? __kasan_check_read+0x11/0x20 [ 2660.962232][T20350] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2660.967803][T20350] mem_cgroup_try_charge+0x136/0x590 [ 2660.973127][T20350] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2660.978779][T20350] wp_page_copy+0x407/0x1860 [ 2660.983381][T20350] ? find_held_lock+0x35/0x130 [ 2660.988154][T20350] ? do_wp_page+0x53b/0x15c0 [ 2660.992756][T20350] ? pmd_devmap_trans_unstable+0x220/0x220 [ 2660.998578][T20350] ? lock_downgrade+0x920/0x920 [ 2661.003458][T20350] ? swp_swapcount+0x540/0x540 [ 2661.008234][T20350] ? __kasan_check_read+0x11/0x20 [ 2661.013296][T20350] ? do_raw_spin_unlock+0x57/0x270 [ 2661.018423][T20350] do_wp_page+0x543/0x15c0 [ 2661.022852][T20350] ? finish_mkwrite_fault+0x6a0/0x6a0 [ 2661.028253][T20350] __handle_mm_fault+0x23ec/0x4040 [ 2661.033380][T20350] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2661.038932][T20350] ? handle_mm_fault+0x292/0xaa0 [ 2661.043893][T20350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2661.050144][T20350] ? __kasan_check_read+0x11/0x20 [ 2661.055180][T20350] handle_mm_fault+0x3b7/0xaa0 [ 2661.059957][T20350] __do_page_fault+0x536/0xdd0 [ 2661.064859][T20350] do_page_fault+0x38/0x590 [ 2661.069381][T20350] page_fault+0x39/0x40 [ 2661.073533][T20350] RIP: 0033:0x403522 [ 2661.077428][T20350] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 59 8f 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 79 44 05 00 48 [ 2661.097037][T20350] RSP: 002b:00007ffc7ee30b60 EFLAGS: 00010246 18:18:00 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3000}, 0x0) [ 2661.103215][T20350] RAX: 0000000000000000 RBX: 00000000002895b5 RCX: 0000000000413660 [ 2661.111194][T20350] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffc7ee31c90 [ 2661.119184][T20350] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000ef2940 [ 2661.127167][T20350] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc7ee31c90 [ 2661.135137][T20350] R13: 00007ffc7ee31c80 R14: 0000000000000000 R15: 00007ffc7ee31c90 [ 2661.148566][T20363] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. 18:18:00 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x0) [ 2661.299898][T20350] memory: usage 2436kB, limit 0kB, failcnt 355 [ 2661.306395][T20350] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2661.331624][T20350] Memory cgroup stats for /syz3: [ 2661.331861][T20350] anon 0 [ 2661.331861][T20350] file 126976 [ 2661.331861][T20350] kernel_stack 0 [ 2661.331861][T20350] slab 2650112 [ 2661.331861][T20350] sock 163840 [ 2661.331861][T20350] shmem 0 [ 2661.331861][T20350] file_mapped 0 [ 2661.331861][T20350] file_dirty 135168 [ 2661.331861][T20350] file_writeback 0 [ 2661.331861][T20350] anon_thp 0 [ 2661.331861][T20350] inactive_anon 0 [ 2661.331861][T20350] active_anon 0 [ 2661.331861][T20350] inactive_file 126976 [ 2661.331861][T20350] active_file 0 [ 2661.331861][T20350] unevictable 0 [ 2661.331861][T20350] slab_reclaimable 1757184 [ 2661.331861][T20350] slab_unreclaimable 892928 [ 2661.331861][T20350] pgfault 123948 18:18:01 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x0) 18:18:01 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0x0) [ 2661.331861][T20350] pgmajfault 0 [ 2661.331861][T20350] workingset_refault 0 [ 2661.331861][T20350] workingset_activate 0 [ 2661.331861][T20350] workingset_nodereclaim 0 [ 2661.331861][T20350] pgrefill 67 [ 2661.331861][T20350] pgscan 108 [ 2661.331861][T20350] pgsteal 75 [ 2661.331861][T20350] pgactivate 0 18:18:01 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x103}, 0x0) [ 2661.538237][T20350] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20350,uid=0 [ 2661.608249][T20350] Memory cgroup out of memory: Killed process 20350 (syz-executor.3) total-vm:72444kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 18:18:01 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) [ 2661.653510][ T1065] oom_reaper: reaped process 20350 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 2661.684369][T20367] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. 18:18:01 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1f4}, 0x0) 18:18:01 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) [ 2662.203110][T20389] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2662.385423][T20404] IPVS: ftp: loaded support on port[0] = 21 [ 2662.395223][T20391] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2662.772371][T20404] chnl_net:caif_netlink_parms(): no params data found [ 2662.864113][T20404] bridge0: port 1(bridge_slave_0) entered blocking state [ 2662.872122][T20404] bridge0: port 1(bridge_slave_0) entered disabled state [ 2662.882221][T20404] device bridge_slave_0 entered promiscuous mode [ 2662.893008][T20404] bridge0: port 2(bridge_slave_1) entered blocking state [ 2662.900633][T20404] bridge0: port 2(bridge_slave_1) entered disabled state [ 2662.920420][T20404] device bridge_slave_1 entered promiscuous mode [ 2662.946677][T20404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2662.960082][T20404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2663.059239][T20404] team0: Port device team_slave_0 added [ 2663.069464][T20404] team0: Port device team_slave_1 added [ 2663.274223][T20404] device hsr_slave_0 entered promiscuous mode [ 2663.352373][T20404] device hsr_slave_1 entered promiscuous mode [ 2663.379894][T20404] debugfs: Directory 'hsr0' with parent '/' already present! [ 2663.616753][T20404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2663.637506][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2663.646465][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2663.660923][T20404] 8021q: adding VLAN 0 to HW filter on device team0 [ 2663.777543][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2663.787395][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2663.797132][T14909] bridge0: port 1(bridge_slave_0) entered blocking state [ 2663.804277][T14909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2663.829756][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2663.838742][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2663.849085][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2663.860266][T14906] bridge0: port 2(bridge_slave_1) entered blocking state [ 2663.867356][T14906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2663.876591][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2663.898874][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2663.909117][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2663.919413][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2663.942530][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2663.953368][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2663.965882][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2663.978065][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2663.987752][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2664.045865][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2664.071376][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2664.083867][T20404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2664.167240][T20404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2664.454014][T20416] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2664.465293][T20416] CPU: 0 PID: 20416 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 2664.472863][T20416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2664.482931][T20416] Call Trace: [ 2664.486239][T20416] dump_stack+0x172/0x1f0 [ 2664.490583][T20416] dump_header+0x10b/0x82d [ 2664.495006][T20416] oom_kill_process.cold+0x10/0x15 [ 2664.500125][T20416] out_of_memory+0x334/0x1340 [ 2664.504818][T20416] ? __sched_text_start+0x8/0x8 [ 2664.509667][T20416] ? oom_killer_disable+0x280/0x280 [ 2664.514881][T20416] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2664.520429][T20416] ? memcg_stat_show+0xc40/0xc40 [ 2664.525377][T20416] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2664.531187][T20416] ? cgroup_file_notify+0x140/0x1b0 [ 2664.536390][T20416] memory_max_write+0x262/0x3a0 [ 2664.541251][T20416] ? mem_cgroup_write+0x370/0x370 [ 2664.546276][T20416] ? lock_acquire+0x190/0x410 [ 2664.550954][T20416] ? kernfs_fop_write+0x227/0x480 [ 2664.556100][T20416] cgroup_file_write+0x241/0x790 [ 2664.561048][T20416] ? mem_cgroup_write+0x370/0x370 [ 2664.566075][T20416] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2664.571721][T20416] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2664.577357][T20416] kernfs_fop_write+0x2b8/0x480 [ 2664.582212][T20416] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2664.588456][T20416] __vfs_write+0x8a/0x110 [ 2664.592795][T20416] ? kernfs_fop_open+0xd80/0xd80 [ 2664.597997][T20416] vfs_write+0x268/0x5d0 [ 2664.602278][T20416] ksys_write+0x14f/0x290 [ 2664.606616][T20416] ? __ia32_sys_read+0xb0/0xb0 [ 2664.611406][T20416] ? do_syscall_64+0x26/0x760 [ 2664.616082][T20416] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2664.622150][T20416] ? do_syscall_64+0x26/0x760 [ 2664.626832][T20416] __x64_sys_write+0x73/0xb0 [ 2664.631431][T20416] do_syscall_64+0xfa/0x760 [ 2664.635943][T20416] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2664.641831][T20416] RIP: 0033:0x459a59 [ 2664.645725][T20416] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2664.665338][T20416] RSP: 002b:00007f1dc4f9ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2664.673756][T20416] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 2664.681737][T20416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2664.689709][T20416] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 2664.697688][T20416] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1dc4f9b6d4 [ 2664.705664][T20416] R13: 00000000004c9e7e R14: 00000000004e1a90 R15: 00000000ffffffff [ 2664.730899][T20416] memory: usage 3916kB, limit 0kB, failcnt 1507 [ 2664.764431][T20416] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2664.804057][T20416] Memory cgroup stats for /syz1: [ 2664.804184][T20416] anon 2125824 [ 2664.804184][T20416] file 0 [ 2664.804184][T20416] kernel_stack 65536 [ 2664.804184][T20416] slab 1490944 [ 2664.804184][T20416] sock 0 [ 2664.804184][T20416] shmem 0 [ 2664.804184][T20416] file_mapped 0 [ 2664.804184][T20416] file_dirty 0 [ 2664.804184][T20416] file_writeback 0 [ 2664.804184][T20416] anon_thp 2097152 [ 2664.804184][T20416] inactive_anon 0 [ 2664.804184][T20416] active_anon 2125824 [ 2664.804184][T20416] inactive_file 0 [ 2664.804184][T20416] active_file 0 [ 2664.804184][T20416] unevictable 0 [ 2664.804184][T20416] slab_reclaimable 270336 [ 2664.804184][T20416] slab_unreclaimable 1220608 [ 2664.804184][T20416] pgfault 90255 [ 2664.804184][T20416] pgmajfault 0 [ 2664.804184][T20416] workingset_refault 66 [ 2664.804184][T20416] workingset_activate 0 [ 2664.804184][T20416] workingset_nodereclaim 0 [ 2664.804184][T20416] pgrefill 1281 [ 2664.804184][T20416] pgscan 1276 [ 2664.804184][T20416] pgsteal 33 [ 2664.804184][T20416] pgactivate 1188 [ 2664.901934][T20416] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20414,uid=0 [ 2664.917606][T20416] Memory cgroup out of memory: Killed process 20414 (syz-executor.1) total-vm:72840kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2664.939132][ T1065] oom_reaper: reaped process 20414 (syz-executor.1), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 18:18:04 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0) 18:18:04 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5800}, 0x0) 18:18:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:18:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0xfffffffffffffec7, &(0x7f0000000640)=[{&(0x7f0000000340)="c944a5fcaeedbafda5709e3f0002", 0xe}], 0x1}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) socket$kcm(0x29, 0x5, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:18:04 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x186, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:18:04 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1b6, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) [ 2665.043707][T20404] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2665.109409][T20404] CPU: 0 PID: 20404 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 2665.117012][T20404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2665.127086][T20404] Call Trace: [ 2665.130391][T20404] dump_stack+0x172/0x1f0 [ 2665.134744][T20404] dump_header+0x10b/0x82d [ 2665.139172][T20404] ? oom_kill_process+0x94/0x3f0 [ 2665.144308][T20404] oom_kill_process.cold+0x10/0x15 [ 2665.149439][T20404] out_of_memory+0x334/0x1340 [ 2665.154140][T20404] ? lock_downgrade+0x920/0x920 [ 2665.159013][T20404] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2665.164840][T20404] ? oom_killer_disable+0x280/0x280 [ 2665.170072][T20404] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2665.176884][T20404] ? memcg_stat_show+0xc40/0xc40 [ 2665.181847][T20404] ? do_raw_spin_unlock+0x57/0x270 [ 2665.186982][T20404] ? _raw_spin_unlock+0x2d/0x50 [ 2665.191858][T20404] try_charge+0xf4b/0x1440 [ 2665.196304][T20404] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2665.201866][T20404] ? percpu_ref_tryget_live+0x111/0x290 [ 2665.207439][T20404] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2665.213703][T20404] ? __kasan_check_read+0x11/0x20 [ 2665.218750][T20404] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2665.224321][T20404] mem_cgroup_try_charge+0x136/0x590 [ 2665.229635][T20404] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2665.235294][T20404] wp_page_copy+0x407/0x1860 [ 2665.239910][T20404] ? find_held_lock+0x35/0x130 [ 2665.244706][T20404] ? do_wp_page+0x53b/0x15c0 [ 2665.249323][T20404] ? pmd_devmap_trans_unstable+0x220/0x220 [ 2665.255146][T20404] ? lock_downgrade+0x920/0x920 [ 2665.260018][T20404] ? swp_swapcount+0x540/0x540 [ 2665.264806][T20404] ? __kasan_check_read+0x11/0x20 [ 2665.269854][T20404] ? do_raw_spin_unlock+0x57/0x270 [ 2665.274990][T20404] do_wp_page+0x543/0x15c0 [ 2665.279424][T20404] ? finish_mkwrite_fault+0x6a0/0x6a0 [ 2665.284960][T20404] __handle_mm_fault+0x23ec/0x4040 [ 2665.290103][T20404] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2665.295684][T20404] ? handle_mm_fault+0x292/0xaa0 [ 2665.300684][T20404] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2665.306950][T20404] ? __kasan_check_read+0x11/0x20 [ 2665.311997][T20404] handle_mm_fault+0x3b7/0xaa0 [ 2665.316788][T20404] __do_page_fault+0x536/0xdd0 [ 2665.321607][T20404] do_page_fault+0x38/0x590 [ 2665.326132][T20404] page_fault+0x39/0x40 [ 2665.330299][T20404] RIP: 0033:0x430b36 [ 2665.334203][T20404] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 66 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 2c 44 64 00 85 c0 0f 84 [ 2665.353818][T20404] RSP: 002b:00007ffff58de2d0 EFLAGS: 00010206 18:18:05 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x301}, 0x0) [ 2665.359896][T20404] RAX: 0000000000019691 RBX: 0000000000716640 RCX: 0000000000008041 [ 2665.367907][T20404] RDX: 0000000001684930 RSI: 000000000168c970 RDI: 0000000000000003 [ 2665.375920][T20404] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001683940 [ 2665.383930][T20404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000716698 [ 2665.391917][T20404] R13: 0000000000716698 R14: 0000000000000000 R15: 0000000000002710 [ 2665.449783][T20404] memory: usage 1544kB, limit 0kB, failcnt 1524 [ 2665.457399][T20404] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2665.477456][T20404] Memory cgroup stats for /syz1: [ 2665.477560][T20404] anon 0 [ 2665.477560][T20404] file 0 [ 2665.477560][T20404] kernel_stack 0 [ 2665.477560][T20404] slab 1490944 [ 2665.477560][T20404] sock 0 [ 2665.477560][T20404] shmem 0 [ 2665.477560][T20404] file_mapped 0 [ 2665.477560][T20404] file_dirty 0 [ 2665.477560][T20404] file_writeback 0 [ 2665.477560][T20404] anon_thp 0 [ 2665.477560][T20404] inactive_anon 0 [ 2665.477560][T20404] active_anon 0 [ 2665.477560][T20404] inactive_file 0 [ 2665.477560][T20404] active_file 0 [ 2665.477560][T20404] unevictable 0 [ 2665.477560][T20404] slab_reclaimable 270336 [ 2665.477560][T20404] slab_unreclaimable 1220608 [ 2665.477560][T20404] pgfault 90255 [ 2665.477560][T20404] pgmajfault 0 [ 2665.477560][T20404] workingset_refault 66 18:18:05 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6000}, 0x0) [ 2665.477560][T20404] workingset_activate 0 [ 2665.477560][T20404] workingset_nodereclaim 0 [ 2665.477560][T20404] pgrefill 1281 [ 2665.477560][T20404] pgscan 1276 [ 2665.477560][T20404] pgsteal 33 [ 2665.477560][T20404] pgactivate 1188 [ 2665.494585][T20420] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. 18:18:05 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3e8}, 0x0) 18:18:05 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80fe}, 0x0) 18:18:05 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x0) 18:18:05 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8405}, 0x0) 18:18:05 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x584}, 0x0) [ 2666.005506][T20404] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20404,uid=0 18:18:05 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xac05}, 0x0) [ 2666.063255][T20423] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2666.089875][T20404] Memory cgroup out of memory: Killed process 20404 (syz-executor.1) total-vm:72444kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 2666.160545][ T1065] oom_reaper: reaped process 20404 (syz-executor.1), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 2666.307729][T20451] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2666.759350][T20470] IPVS: ftp: loaded support on port[0] = 21 [ 2666.780468][T20440] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2667.237072][T20470] chnl_net:caif_netlink_parms(): no params data found [ 2667.357037][T20470] bridge0: port 1(bridge_slave_0) entered blocking state [ 2667.365487][T20470] bridge0: port 1(bridge_slave_0) entered disabled state [ 2667.374602][T20470] device bridge_slave_0 entered promiscuous mode [ 2667.383901][T20470] bridge0: port 2(bridge_slave_1) entered blocking state [ 2667.391568][T20470] bridge0: port 2(bridge_slave_1) entered disabled state [ 2667.401622][T20470] device bridge_slave_1 entered promiscuous mode [ 2667.501492][T20470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2667.568876][T20470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2667.600879][T20470] team0: Port device team_slave_0 added [ 2667.643441][T20470] team0: Port device team_slave_1 added [ 2667.774035][T20470] device hsr_slave_0 entered promiscuous mode [ 2667.820721][T20470] device hsr_slave_1 entered promiscuous mode [ 2667.869916][T20470] debugfs: Directory 'hsr0' with parent '/' already present! [ 2668.136945][T20470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2668.160910][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2668.169555][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2668.184045][T20470] 8021q: adding VLAN 0 to HW filter on device team0 [ 2668.198842][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2668.209076][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2668.218353][T14906] bridge0: port 1(bridge_slave_0) entered blocking state [ 2668.225570][T14906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2668.289363][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2668.300449][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2668.312163][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2668.321530][T14907] bridge0: port 2(bridge_slave_1) entered blocking state [ 2668.328597][T14907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2668.461216][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2668.471814][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2668.492225][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2668.501778][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2668.521666][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2668.532337][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2668.542872][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2668.553229][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2668.562730][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2668.632838][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2668.642302][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2668.654879][T20470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2668.728888][T20470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2669.105401][T20480] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2669.116223][T20480] CPU: 1 PID: 20480 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 2669.124478][T20480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2669.134540][T20480] Call Trace: [ 2669.137855][T20480] dump_stack+0x172/0x1f0 [ 2669.142199][T20480] dump_header+0x10b/0x82d [ 2669.146621][T20480] oom_kill_process.cold+0x10/0x15 [ 2669.151745][T20480] out_of_memory+0x334/0x1340 [ 2669.156432][T20480] ? __sched_text_start+0x8/0x8 [ 2669.161376][T20480] ? oom_killer_disable+0x280/0x280 [ 2669.166587][T20480] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2669.172128][T20480] ? memcg_stat_show+0xc40/0xc40 [ 2669.177059][T20480] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2669.182848][T20480] ? cgroup_file_notify+0x140/0x1b0 [ 2669.188057][T20480] memory_max_write+0x262/0x3a0 [ 2669.192905][T20480] ? mem_cgroup_write+0x370/0x370 [ 2669.198094][T20480] ? lock_acquire+0x190/0x410 [ 2669.202763][T20480] ? kernfs_fop_write+0x227/0x480 [ 2669.207774][T20480] cgroup_file_write+0x241/0x790 [ 2669.212696][T20480] ? mem_cgroup_write+0x370/0x370 [ 2669.217703][T20480] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2669.223334][T20480] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2669.228963][T20480] kernfs_fop_write+0x2b8/0x480 [ 2669.233800][T20480] __vfs_write+0x8a/0x110 [ 2669.238197][T20480] ? kernfs_fop_open+0xd80/0xd80 [ 2669.243153][T20480] vfs_write+0x268/0x5d0 [ 2669.248364][T20480] ksys_write+0x14f/0x290 [ 2669.252677][T20480] ? __ia32_sys_read+0xb0/0xb0 [ 2669.257443][T20480] ? do_syscall_64+0x26/0x760 [ 2669.262129][T20480] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2669.268176][T20480] ? do_syscall_64+0x26/0x760 [ 2669.272869][T20480] __x64_sys_write+0x73/0xb0 [ 2669.277453][T20480] do_syscall_64+0xfa/0x760 [ 2669.281947][T20480] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2669.287831][T20480] RIP: 0033:0x459a59 [ 2669.291807][T20480] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2669.311404][T20480] RSP: 002b:00007f9261794c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2669.319843][T20480] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 2669.327803][T20480] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2669.335768][T20480] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2669.343781][T20480] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f92617956d4 [ 2669.351743][T20480] R13: 00000000004c9e7e R14: 00000000004e1a90 R15: 00000000ffffffff [ 2669.384853][T20480] memory: usage 4732kB, limit 0kB, failcnt 356 [ 2669.391720][T20480] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2669.398919][T20480] Memory cgroup stats for /syz3: [ 2669.402130][T20480] anon 2080768 [ 2669.402130][T20480] file 126976 [ 2669.402130][T20480] kernel_stack 65536 [ 2669.402130][T20480] slab 2650112 [ 2669.402130][T20480] sock 163840 [ 2669.402130][T20480] shmem 0 [ 2669.402130][T20480] file_mapped 0 [ 2669.402130][T20480] file_dirty 135168 [ 2669.402130][T20480] file_writeback 0 [ 2669.402130][T20480] anon_thp 2097152 [ 2669.402130][T20480] inactive_anon 0 [ 2669.402130][T20480] active_anon 2080768 [ 2669.402130][T20480] inactive_file 126976 [ 2669.402130][T20480] active_file 0 [ 2669.402130][T20480] unevictable 0 [ 2669.402130][T20480] slab_reclaimable 1757184 [ 2669.402130][T20480] slab_unreclaimable 892928 [ 2669.402130][T20480] pgfault 124047 [ 2669.402130][T20480] pgmajfault 0 [ 2669.402130][T20480] workingset_refault 0 [ 2669.402130][T20480] workingset_activate 0 [ 2669.402130][T20480] workingset_nodereclaim 0 [ 2669.402130][T20480] pgrefill 67 [ 2669.402130][T20480] pgscan 108 [ 2669.402130][T20480] pgsteal 75 [ 2669.402130][T20480] pgactivate 0 [ 2669.500293][T20480] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20479,uid=0 [ 2669.518739][T20480] Memory cgroup out of memory: Killed process 20479 (syz-executor.3) total-vm:72576kB, anon-rss:2144kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 2669.542085][ T1065] oom_reaper: reaped process 20479 (syz-executor.3), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 18:18:09 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc0fe}, 0x0) 18:18:09 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5ac}, 0x0) 18:18:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003b00)='cgroup.controllers\x00', 0x0, 0x0) r8 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0x8, 0x0, 0x0) sendmsg(r7, &(0x7f0000003d80)={&(0x7f0000003b40)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x2, 0x1, 0x2, 0x1, {0xa, 0x4e23, 0x1, @mcast1, 0x2}}}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003bc0)}], 0x1, &(0x7f0000003c40)=ANY=[@ANYBLOB="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"], 0x108}, 0x0) r9 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r9, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0xfffffffffffffec7, &(0x7f0000000640)=[{&(0x7f0000000340)="c944a5fcaeedbafda5709e3f0002", 0xe}], 0x1}, 0xfc00) sendmsg$kcm(r9, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:18:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:18:09 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1b7, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="5ea03f6db511aee466448c41d0a37c5d52fbf6d123b2238bc0dc67ffb8a030dd7d9264060255082b5024d1bd6e117d7a20ca56078066e91049b134eb2db929be3f0ac2f70eacf24ae891471c290affb67848907db14e21832c3df1d097ecf14e120ecc990d234042832cc0352f4c22b3828a9ad20ee214973a95bd34110513eb0b903c83d4b8aa755076804cf502013c1bbace98bc821e5a8ba782e18f8fa11b088b70db05e454dd159d018ed06d197dd6014565077d4ebfb8b7db6d35f609ed05ffbcf3380687357f1a593b6f2842e76ff1df4bd5ae29584f89e9d2e50ccbb2964e2e6d3487a509a21e1f6c0ab2dcd9f70777a5c1d58dbf37d5ad66d553898b5620b1e35eb2a96ec010bb87957b6193071706744e312fff95abe536818207e41f7af43e08cca42680fadb739d70aafbeafa7fae70e4526c97e9edcac5648e4c38e10efd34d9f09592c73542bf127a1e68cf8fc3e58e78142b5e5fbbee0175350ab1a8aeedc6c8072ccaa476da314b578854756bb2db47caff231a7f64c51d1d7b4ed1e7cde59355285ef2c2be4ca6f0f6d01dc2d9845505f3a97a57f240c0b0f18fb4936dbb6cf7b6dbf6ec28e61a91ae6e748d0adec1c02c7a39019853b7497e5c3fdd571058f3e648b9f14080442b7279b28de971b6c8b97f1cea66a08bf83bee0707cae6972648a7f3924d63fd69ed03a13aaeba0d9e3bb239544359153fa124e70f873f9d10c07a5a0b58e82536153849350203d848998d61cbaa4f67dc73c84dbcd45939a3f01839e0897a3271118e304694db3ab806e05d206bd3c42dc79be167c9c297559d9a85d5eb04369c534360045b1a80e28d1466705873e3d8bfa73c44d59473df58b8a0305e6a5ec7300183cc60115288e393ca5d160a0fc8eaec5a77c0ba0798eed1e18890e2403ee8d156514eb6f5dc075d4a1f7ce70ae6fab8c82c6ecbcf3e973bc6a461f2f739f9820d66e28f3e9834a7ac8ed81a352c9f7a0882b14b2044ededaf694eba063ad3192f4dbf6ba79288a47ccbf6546c4fbbaefc864694e7063e39cb12ec68dca7b20986c48ae94022cdcb888222ee7f05f55ddea71f0298223b3c4109c15dd7ec41e78aef8dd5ff55c89ce7900261d62b35d12b813b8a385863f3c9d1f4ed37d7cd5314226afdb2892ddaeb1eec542cc8c040fc64cd3ae4dcd7264d68d247acbb353e40a33d5682ce2a4a005a2975908cbd0526beb6048840f3499cfcebba06eaf0c51c8b760593098a3def21b3664e7d42253f8c990538d382bf0768cdc106fac3699bcb5b12279f81dc9ba6ed1e2f7820f6cf8a2b3e4c88a33d9f0a32f60673b5897cadbbe7dffb9cf7f6b5a5d62701eba230fb2daa966a63d91e86c02472bd8114e5ba5df8152067086c142e6cd88289a501fc3353c1d0f17a663b179c446220d970d50a9c9adbb0b990be52ad19cd36669df47ff6e1f6fec4b7b1693c802d736aebe985e0c3c59c753ed95d79a7564880c4e2ffe5c9e59e818d2810468c48a4e75f15f3f252f2d780dd30717fe572c5d55adf090223fb30216c3882e9be19cb627aab1fdad81f8f117a90c2e7874edf1c4dc8e2da674348855659434eaba5c5063a29c28f4d22ce5515464b53967ab33d82f0e5afa98322c31e789be5d7600c726bd467d3be3eb4e0df733b91eecd95a5d1648ef268c43906b187ab24bb83bc80fa2ba4ab21d99c0aadf87d15cec51bf2cd52412ec638b43c27551f039e58026e6e910c7f327afe2e363491cfed5caadc8ca674659004f24991fdf76faac054dff64fb2282fc92d3b9ae32222833f1ae905dfa1dada3116765ef2b04ae6124f44cc7f83bd8f159eaa5290cc9e691fa77bec9c35a625b1b24cde8c9363b37b6f77ce844ea77752891b4c837c7c9648f7a16da6aadaf8912ba392c9984d26977c4b99e5c94925f0c6b9a48f2701eeb477aa0a99adb7fd145cd01b3cee9ad3c835690cda9ee1302fdf301558bb1979e177f18876b3fbe7b01597260a33822a63cdc760edee9839d75e0de20acdc8ae98a008d7390e4bb095650149b1bae84d240bd6480fbb10c1930f3a61dbfc3cb17888e33fb12f2dec1523380699b28300bf8b377e4357d5385176a35edbbb6e81e17e42fb07964452b53a069704f597cab1c646a8e8b99c0411e18def7e1c26e7cab72369228dfeb0d306cd46cdd9299538c89697c1c681d577290c2b03c9d84cd1b5803ff9291a28f3efbc3112b53e5cea348d364a954ac78db91e610df86be53c20707401d70f7768cdf0566420c1dfb7216877784244b5a84abc61e577b11b5dfd194018dbaa4024b57e6b0dcba72f621f62938f7a717c9a899aaa78b595f01c48f94c0bbf68c7cfb16c59269f48611dc9d7077b6805edbe30f2c7988a18f5ef3928a769f011936af9cb4665f48ce17afa1bb3f614e76b40a7e0920b9942362c41589f2be923530a186693a429a8e2767ec30d02407d4fbb6a397f52ec48fdb3fc0d2863f301585a14941cfac093cf8e53e91762db548306961979d396e4645f5698aa36db22603d1893149ba2d7aaa44bb14e0eceafd84cddb3c5c3e2a8eeb02a96e9d9f08db989b450614b0767314e4024114c785c95272226f1c2e2a29a07c7c133abaf254fb9d64a1c597ca32c3a1b17bf262907d9a5a468d37986a300f9a1274718521d76cc1fa8ae122f5dc46ba1c998c3d66bbfdece070f37ac35c7d7de0bffc8369f222fe768273edb69115f94177e9ab237ba50eafdefd5a2369059be377db15661961961c3bc60e6b1af713bd20d70b315025a249d5a6d67e340582404b561ae11fcc711c21c80a56d0a6b964d333e0c1a53333a2ebf4ebda28a59680639c0fd282d64539143b2d416accb7b5cfa16fb2dd9b767f79fe9c26f2b70972b2225ae8beae908dfcb34bbe30870369ea766479db570787a6e11d7544f32888b637e3cbbc4fc85e34d7847e26779e8a8d940ae28de2f2d122c1dba8948af913b2ba890cb12cf2db92ae75aac53614d6faaed47b4373147c6c93880646ee35d85394d25d9dadf73ea35ada21cdbc89038e90e9a28949fd84bac77ea7b2f79ece1c3c2defe5faf9b001ac4750920fc6414569413fd2cdb4e49751fa9c1a531d0081856aa2a9f884040610f9782eeb2c135afc0f60c09e1d5c3a83311010ead8b7bebe91bf339b7d88fab261596465fbbb8942fd32aac8661bb3ad21696895365e258f2a6d4e9049f93545e971fc053317082a2c6ebe65e571b29cdcbca06e5f422c6ea288f98d282ad5c9475a3e9258b4a21360d19cb91c99aeb6476f21049c8d6c9918a9ba7ced60b1f97b9b9cacef6958da3fb8b762f35043539c145956487110ccd420783f3c4490cecb089179c99a89e07fc14d2a8e8a78cc1cbbf0caaf9f8a6850fa8f150c45b616c102a09b995ac9408fdfd26b79339ad175691cc065f7911d99c53b249f03a96b3df1cca6f9dfd2d3c1e732681d58cc2fc671010e7bd98c006ba63b703266aa2f1c3d6fbc148902e425d83d044f014b9e7b3977b8fda094e02dd6dd8298983d5d891d66db077233fc155dad208bfe7c6585bdc6d246bba81cacff55994ee88f9163b27f51d6ae47d0b296124d3018f69f79528797e8aaf21d8035c044821137b0f7e7b3b41b8019379002ae9bc70dc1bc377b6fc0e2a40accf480ae0dc53e61a91d1815ea796fc14d6abddcee1fd965adc3a441333d430568bcb29f0cac078b70a4f6d1011c1822708fb1bbeeaea6433cf5cdcf9aec7bbce4c92e6fdda88b3dc48a4d42f4348a05fee23c41869ca326d39c0605d9144f82bd0c3c2f9ac9ae0b1f5fabe0ab5af39babf027a83df5b1c58513d27cb5babc9a5be073043543bff731da9bb715e57678507baf194fec9efa3235631b9594682dd531c3762432e25c25c048e600cc7c318e82b720db17436fbc054c04f59923ae61ec0b4896d08daab3b617bd8d239c24e95c8fcd1a7dd64a8a3d7e158c626833a2735c9e96514639f007983da3bb43a6f18e40d3eda0cc9468d118d28c6bda3ebae6c3ae2c14b1b02305abd16b7c6be707ffaf59142988eb931275bd4c38aefefbbaa95e16d7551f5f1fcfa9744a357d21c76b28747e5e94683d455530433876d509793ed409847f8a972450285f9e9f2dc665e78c7747418523bb51ef8191231e989ca93ef75e9ca27f38a2e5327d29c265c39f12fb1d01a723a902292c6bc06fdc6856d4829680909db55c4650449d0a2d2dad92cfbc8c03fdcb5656a56fded95b0ac41595a2a5bb34d5feb4e06da8adb5143eef67cdc3d18edd095c086d99cb43cddbbfeeb0beadadc1e30ec57bf760592e6365ffacbd6134b7262966af9c808f980fff81280566c79d3a2a15654c597aa050dda7ace4b5298f512b445023d4d86bc37c85ee1a2d7637f3ea0eafd6440893f43a2a912735d0dc8e2827148893f7554897fcb91a4f5581d793fa707fa181dcf69e3fddf498a19767922f4c52fd6797bfba85a61f9c5fe10970b06c7006d7b804f5d1db40b6f606f532cc5a6b93be6473bcbad8f06ead3995cb5f42ee8ddc658ac9085d0c6046b07be03837d5d68504c04b2a769db69e04aa1e414eec40118856f58ac5d3765e5d5038b20d2966389d0b462dfd71065140bf8ae0bb6eb105ac8160c8cc7641b14aaf0304731ab4d9d4bef89d62dd137d7f88645f941999e2fbfbd171a445c2702a87adcb5fd7d7e36d53b715e6ee87fcebdd0b9fef00182fa8e7ec8e7b5a3ac9d332ce92334a8e1ce0d493cff3c2a4fe1f902da785deb68bf936eabfe59a2f698b2d8d0dbd11c25f413ad4b7c554ed5d9e69a1c44c0dd523b47fc66e474357bd6b1e49fc2e12e30e206347d479ce0c20ef4b12e5d63de14e4b7550772a1ef0b5327d755aef1766da85e429a7920e4652d772619ea3526b330778ad35966c12e45a85ce6a5e3e99372a8c621e17ac2c3ff024c625a5599d41ad794e99ceeecb0bf334fd56b823e5b9406c6089fa406aaabe75afd7413affdc1019729d6f72a4b1a330412c03d9f75dbedb88bf556ee57a642fd1802e35807878f7aa15af0a00bc8fa8a4d01ff3e60249d07e780244d387cc60d7f25869f50580f0136391faec535332727b7ec85b12e3be7d8f34369f00b888133c3ad0ffa24bd03c5183d55172076b989b4151227467b915ab6e8347e15c99f2f9051d6ae0b2b72a717536899473b7c04160cc8d6d23a3f0ee63ae0ae4f79523af48779d836f0e0ae4b92ee78b820a9f6319ab064d11b7fb3e91579528a91c7c2521332ffaceb00ebaded7ef22d0ff9986273759b08b9f75565fe5c194bbfe704eda0fc0662db8cc3002b05dc39792540278a2c12501680ef4b95b3eac0573e559c6cf0badbe364e3bcaa14661afe1320a32d4e9644fdcd44b9dce2fee476e8f840a91a66cd877d3e5bbb5b595e654580955f4ba8548b41220a355a805669de9f3bc50157e594f5b444b88a320d80522e51bce929200d71e10e4a85c3d12ee133dda3fcdf7a454773a0575f7d9bfcb8c8646ffbad451446daf3ea742c0fa6bbb2ca4db442e60492ac9e131037278fa5552c0ed00c84469cd11600d3365617f57af4178fc264500327c48ae67de27c62766f9d6848e57f2ce0eb75e1cf72bafb21541c0370f73fc77e0d8b0b11056362a3936e38271259377d40fbc257d8c72b3e583fc6b0e20420dbc99a7932cb305fa9e61bd0de0d9758d35fe0ee13d0eaa782a3059e10caa61df3903aa1061298aced4712d998181e7edd03a11041de4018fe56cae17e0dced027ab7a0a27a6415d8d", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:18:09 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x187, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) [ 2669.830069][T20470] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2669.881832][T20470] CPU: 1 PID: 20470 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 2669.889778][T20470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2669.893235][T20483] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2669.899849][T20470] Call Trace: [ 2669.899876][T20470] dump_stack+0x172/0x1f0 [ 2669.899894][T20470] dump_header+0x10b/0x82d [ 2669.899904][T20470] ? oom_kill_process+0x94/0x3f0 [ 2669.899919][T20470] oom_kill_process.cold+0x10/0x15 [ 2669.899936][T20470] out_of_memory+0x334/0x1340 [ 2669.899951][T20470] ? lock_downgrade+0x920/0x920 [ 2669.899974][T20470] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2669.946695][T20470] ? oom_killer_disable+0x280/0x280 [ 2669.946731][T20470] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2669.957483][T20470] ? memcg_stat_show+0xc40/0xc40 [ 2669.962453][T20470] ? do_raw_spin_unlock+0x57/0x270 [ 2669.967590][T20470] ? _raw_spin_unlock+0x2d/0x50 [ 2669.972471][T20470] try_charge+0xf4b/0x1440 [ 2669.976907][T20470] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2669.982471][T20470] ? percpu_ref_tryget_live+0x111/0x290 [ 2669.988038][T20470] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2669.994301][T20470] ? __kasan_check_read+0x11/0x20 [ 2669.999359][T20470] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2670.004921][T20470] mem_cgroup_try_charge+0x136/0x590 [ 2670.004946][T20470] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2670.004965][T20470] wp_page_copy+0x407/0x1860 [ 2670.004982][T20470] ? find_held_lock+0x35/0x130 [ 2670.005000][T20470] ? do_wp_page+0x53b/0x15c0 [ 2670.029927][T20470] ? pmd_devmap_trans_unstable+0x220/0x220 [ 2670.035742][T20470] ? lock_downgrade+0x920/0x920 [ 2670.040601][T20470] ? swp_swapcount+0x540/0x540 [ 2670.045377][T20470] ? __kasan_check_read+0x11/0x20 [ 2670.050410][T20470] ? do_raw_spin_unlock+0x57/0x270 [ 2670.055539][T20470] do_wp_page+0x543/0x15c0 [ 2670.059976][T20470] ? finish_mkwrite_fault+0x6a0/0x6a0 [ 2670.065395][T20470] __handle_mm_fault+0x23ec/0x4040 [ 2670.070538][T20470] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2670.076101][T20470] ? handle_mm_fault+0x292/0xaa0 [ 2670.076133][T20470] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2670.076149][T20470] ? __kasan_check_read+0x11/0x20 [ 2670.076169][T20470] handle_mm_fault+0x3b7/0xaa0 [ 2670.076197][T20470] __do_page_fault+0x536/0xdd0 [ 2670.097159][T20470] do_page_fault+0x38/0x590 [ 2670.097181][T20470] page_fault+0x39/0x40 [ 2670.097195][T20470] RIP: 0033:0x430b36 [ 2670.097207][T20470] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 66 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 2c 44 64 00 85 c0 0f 84 [ 2670.097220][T20470] RSP: 002b:00007fffe9deb860 EFLAGS: 00010206 [ 2670.140160][T20470] RAX: 0000000000019691 RBX: 0000000000716640 RCX: 0000000000008041 [ 2670.148147][T20470] RDX: 0000000002625930 RSI: 000000000262d970 RDI: 0000000000000003 [ 2670.156130][T20470] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002624940 [ 2670.164119][T20470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000716698 [ 2670.172113][T20470] R13: 0000000000716698 R14: 0000000000000000 R15: 0000000000002710 [ 2670.200581][T20470] memory: usage 2404kB, limit 0kB, failcnt 364 [ 2670.210059][T20470] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2670.227465][T20470] Memory cgroup stats for /syz3: [ 2670.227574][T20470] anon 0 [ 2670.227574][T20470] file 126976 [ 2670.227574][T20470] kernel_stack 65536 [ 2670.227574][T20470] slab 2650112 [ 2670.227574][T20470] sock 163840 [ 2670.227574][T20470] shmem 0 [ 2670.227574][T20470] file_mapped 0 [ 2670.227574][T20470] file_dirty 135168 [ 2670.227574][T20470] file_writeback 0 [ 2670.227574][T20470] anon_thp 0 [ 2670.227574][T20470] inactive_anon 0 [ 2670.227574][T20470] active_anon 0 [ 2670.227574][T20470] inactive_file 126976 [ 2670.227574][T20470] active_file 0 [ 2670.227574][T20470] unevictable 0 [ 2670.227574][T20470] slab_reclaimable 1757184 [ 2670.227574][T20470] slab_unreclaimable 892928 [ 2670.227574][T20470] pgfault 124047 [ 2670.227574][T20470] pgmajfault 0 18:18:10 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0) [ 2670.227574][T20470] workingset_refault 0 [ 2670.227574][T20470] workingset_activate 0 [ 2670.227574][T20470] workingset_nodereclaim 0 [ 2670.227574][T20470] pgrefill 67 [ 2670.227574][T20470] pgscan 108 [ 2670.227574][T20470] pgsteal 75 [ 2670.227574][T20470] pgactivate 0 [ 2670.242791][T20470] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20470,uid=0 18:18:10 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xe803}, 0x0) 18:18:10 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 18:18:10 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x0) 18:18:10 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) [ 2670.677370][T20470] Memory cgroup out of memory: Killed process 20470 (syz-executor.3) total-vm:72444kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 2670.696639][ T1065] oom_reaper: reaped process 20470 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 18:18:10 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfc00}, 0x0) 18:18:10 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x0) [ 2670.797988][T20491] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. 18:18:10 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfe80}, 0x0) [ 2671.316618][T20513] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2671.617671][T20537] IPVS: ftp: loaded support on port[0] = 21 [ 2671.845229][T20537] chnl_net:caif_netlink_parms(): no params data found [ 2671.901911][T20537] bridge0: port 1(bridge_slave_0) entered blocking state [ 2671.909112][T20537] bridge0: port 1(bridge_slave_0) entered disabled state [ 2671.919045][T20537] device bridge_slave_0 entered promiscuous mode [ 2671.985438][T20537] bridge0: port 2(bridge_slave_1) entered blocking state [ 2671.993803][T20537] bridge0: port 2(bridge_slave_1) entered disabled state [ 2672.003187][T20537] device bridge_slave_1 entered promiscuous mode [ 2672.035912][T20537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2672.051612][T20537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2672.079482][T20537] team0: Port device team_slave_0 added [ 2672.089580][T20537] team0: Port device team_slave_1 added [ 2672.273922][T20537] device hsr_slave_0 entered promiscuous mode [ 2672.330986][T20537] device hsr_slave_1 entered promiscuous mode [ 2672.450457][T20537] debugfs: Directory 'hsr0' with parent '/' already present! [ 2672.745439][T20537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2672.818368][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2672.827068][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2672.841804][T20537] 8021q: adding VLAN 0 to HW filter on device team0 [ 2672.924264][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2672.934048][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2672.943709][T14907] bridge0: port 1(bridge_slave_0) entered blocking state [ 2672.950838][T14907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2672.971504][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2672.980874][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2672.991162][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2673.002567][T14909] bridge0: port 2(bridge_slave_1) entered blocking state [ 2673.009694][T14909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2673.018739][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2673.050427][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2673.059522][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2673.068832][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2673.111889][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2673.120452][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2673.130142][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2673.139256][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2673.148940][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2673.251809][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2673.270465][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2673.284191][T20537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2673.366534][T20537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2673.658148][T20545] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2673.669325][T20545] CPU: 0 PID: 20545 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 2673.676885][T20545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2673.686952][T20545] Call Trace: [ 2673.690258][T20545] dump_stack+0x172/0x1f0 [ 2673.694596][T20545] dump_header+0x10b/0x82d [ 2673.699012][T20545] oom_kill_process.cold+0x10/0x15 [ 2673.704127][T20545] out_of_memory+0x334/0x1340 [ 2673.708806][T20545] ? __sched_text_start+0x8/0x8 [ 2673.713664][T20545] ? oom_killer_disable+0x280/0x280 [ 2673.718882][T20545] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2673.724457][T20545] ? memcg_stat_show+0xc40/0xc40 [ 2673.729694][T20545] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2673.735512][T20545] ? cgroup_file_notify+0x140/0x1b0 [ 2673.740726][T20545] memory_max_write+0x262/0x3a0 [ 2673.745585][T20545] ? mem_cgroup_write+0x370/0x370 [ 2673.750612][T20545] ? cgroup_file_write+0x86/0x790 [ 2673.755648][T20545] cgroup_file_write+0x241/0x790 [ 2673.760588][T20545] ? mem_cgroup_write+0x370/0x370 [ 2673.765611][T20545] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2673.771255][T20545] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2673.776885][T20545] kernfs_fop_write+0x2b8/0x480 [ 2673.781737][T20545] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2673.787979][T20545] __vfs_write+0x8a/0x110 [ 2673.792419][T20545] ? kernfs_fop_open+0xd80/0xd80 [ 2673.797361][T20545] vfs_write+0x268/0x5d0 [ 2673.801623][T20545] ksys_write+0x14f/0x290 [ 2673.805959][T20545] ? __ia32_sys_read+0xb0/0xb0 [ 2673.810725][T20545] ? do_syscall_64+0x26/0x760 [ 2673.815403][T20545] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2673.821462][T20545] ? do_syscall_64+0x26/0x760 [ 2673.826145][T20545] __x64_sys_write+0x73/0xb0 [ 2673.830743][T20545] do_syscall_64+0xfa/0x760 [ 2673.835512][T20545] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2673.841429][T20545] RIP: 0033:0x459a59 [ 2673.845347][T20545] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2673.864963][T20545] RSP: 002b:00007f501eda6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2673.873387][T20545] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 2673.881361][T20545] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2673.889335][T20545] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2673.897307][T20545] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f501eda76d4 [ 2673.905278][T20545] R13: 00000000004c9e7e R14: 00000000004e1a90 R15: 00000000ffffffff [ 2673.934907][T20545] memory: usage 3756kB, limit 0kB, failcnt 1525 [ 2673.943036][T20545] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2673.950803][T20545] Memory cgroup stats for /syz1: [ 2673.952394][T20545] anon 2199552 [ 2673.952394][T20545] file 0 [ 2673.952394][T20545] kernel_stack 65536 [ 2673.952394][T20545] slab 1490944 [ 2673.952394][T20545] sock 0 [ 2673.952394][T20545] shmem 0 [ 2673.952394][T20545] file_mapped 0 [ 2673.952394][T20545] file_dirty 0 [ 2673.952394][T20545] file_writeback 0 [ 2673.952394][T20545] anon_thp 2097152 [ 2673.952394][T20545] inactive_anon 0 [ 2673.952394][T20545] active_anon 2199552 [ 2673.952394][T20545] inactive_file 0 [ 2673.952394][T20545] active_file 0 [ 2673.952394][T20545] unevictable 0 [ 2673.952394][T20545] slab_reclaimable 270336 [ 2673.952394][T20545] slab_unreclaimable 1220608 [ 2673.952394][T20545] pgfault 90321 [ 2673.952394][T20545] pgmajfault 0 [ 2673.952394][T20545] workingset_refault 66 [ 2673.952394][T20545] workingset_activate 0 [ 2673.952394][T20545] workingset_nodereclaim 0 [ 2673.952394][T20545] pgrefill 1281 [ 2673.952394][T20545] pgscan 1276 [ 2673.952394][T20545] pgsteal 33 [ 2673.952394][T20545] pgactivate 1188 [ 2674.049124][T20545] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20543,uid=0 [ 2674.077118][T20545] Memory cgroup out of memory: Killed process 20543 (syz-executor.1) total-vm:72576kB, anon-rss:2144kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000 [ 2674.101287][ T1065] oom_reaper: reaped process 20543 (syz-executor.1), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 18:18:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000780)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000800)="7d585224f5b0e1bcbf0824993fa1ac5176b7bbc7adb3e20fd1cad6bd5d673b4a23a7535f234eb7616e9803a2b62f6b4ffc428aa74c9796616bbacb94c116219cac87c6388c8512d6298affef732beffbab5afa48c0e00146ffdd93016c111dcfc5ed4dfb6c3040678007f308a7de102ae43571fea8c81f742c84f31370de07b683c9e963207d1025bb978f7a10f885fd54c93eca529e5dadf733b42d6e340dc26a8747f50ee531e6201665de0d18157eb6244f8cf0a8f1c496a1a3d675ed6d8b4906714a54b881563224fc5c4f8016c09e7af0a465ab6a067f852859a5120a5d1bea", 0xe2}], 0x1}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xff7ffffffffffff8, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000540), 0x8}, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x1a0ffffffff) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161) mkdirat$cgroup(r6, &(0x7f00000004c0)='syz0\x00', 0x1ff) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r8 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r9 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r9, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0xfffffffffffffec7, &(0x7f0000000640)=[{&(0x7f0000000340)="c944a5fcaeedbafda5709e3f0002", 0xe}], 0x1}, 0xfc00) sendmsg$kcm(r9, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x40400}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000580)="517976324b369e250fa04382492f6018d8117a2bfee60008b75019c2d88c532266d0e5b19e4acd98308e463bb36946ebe159ecd9938da1c2409b86350cb8736cc7adee3468b8032d7a9e38aa334c66", 0x4f}, {&(0x7f0000000680)="c32fb179d71120552a10a1dd543ff755fe03f87e81381768fb54ac5ae007e4cd2f8da5eb1e00b2e132703caf661b9a412bb08882b5d6686b928a8e65b724b8fb11f876e20a1fd6fee316e08457bf642d2c9d5f83a586320be3c1c1a9b6f76517c6b814f0c9e60f43ee1850a0ab8ca3c5327f552d70a544e40830a4b2af8f6d9bb78014", 0x83}, {&(0x7f0000000600)="e8f4b7998fe7a66d735dd1cb4b7f6600ab1366c83b896d1189", 0x19}], 0x3}, 0xaf539ce2cda8fa13) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r8, 0x0, 0x0) 18:18:14 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfec0}, 0x0) 18:18:14 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xe00}, 0x0) 18:18:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:18:14 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1b9, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:18:14 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x188, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) [ 2674.520823][T20537] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2674.520840][T20537] CPU: 1 PID: 20537 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 2674.538299][T20537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2674.548356][T20537] Call Trace: [ 2674.548380][T20537] dump_stack+0x172/0x1f0 [ 2674.548399][T20537] dump_header+0x10b/0x82d [ 2674.561011][T20537] ? oom_kill_process+0x94/0x3f0 [ 2674.565959][T20537] oom_kill_process.cold+0x10/0x15 [ 2674.571083][T20537] out_of_memory+0x334/0x1340 [ 2674.575765][T20537] ? lock_downgrade+0x920/0x920 [ 2674.580683][T20537] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2674.581847][T20553] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2674.586497][T20537] ? oom_killer_disable+0x280/0x280 [ 2674.586522][T20537] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2674.586535][T20537] ? memcg_stat_show+0xc40/0xc40 [ 2674.586553][T20537] ? do_raw_spin_unlock+0x57/0x270 [ 2674.586572][T20537] ? _raw_spin_unlock+0x2d/0x50 [ 2674.586591][T20537] try_charge+0xf4b/0x1440 [ 2674.586614][T20537] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2674.601079][T20537] ? percpu_ref_tryget_live+0x111/0x290 [ 2674.601100][T20537] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2674.601117][T20537] ? __kasan_check_read+0x11/0x20 [ 2674.601135][T20537] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2674.601153][T20537] mem_cgroup_try_charge+0x136/0x590 [ 2674.625923][T20537] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2674.636977][T20537] wp_page_copy+0x407/0x1860 [ 2674.636997][T20537] ? find_held_lock+0x35/0x130 [ 2674.665301][T20537] ? do_wp_page+0x53b/0x15c0 [ 2674.665322][T20537] ? pmd_devmap_trans_unstable+0x220/0x220 [ 2674.665340][T20537] ? lock_downgrade+0x920/0x920 [ 2674.665359][T20537] ? swp_swapcount+0x540/0x540 [ 2674.665377][T20537] ? __kasan_check_read+0x11/0x20 [ 2674.665389][T20537] ? do_raw_spin_unlock+0x57/0x270 [ 2674.665410][T20537] do_wp_page+0x543/0x15c0 [ 2674.674762][T20537] ? finish_mkwrite_fault+0x6a0/0x6a0 [ 2674.674789][T20537] __handle_mm_fault+0x23ec/0x4040 [ 2674.694783][T20537] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2674.704893][T20537] ? handle_mm_fault+0x292/0xaa0 [ 2674.704925][T20537] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2674.704942][T20537] ? __kasan_check_read+0x11/0x20 [ 2674.714710][T20537] handle_mm_fault+0x3b7/0xaa0 [ 2674.714738][T20537] __do_page_fault+0x536/0xdd0 [ 2674.714760][T20537] do_page_fault+0x38/0x590 [ 2674.714780][T20537] page_fault+0x39/0x40 18:18:14 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff00}, 0x0) [ 2674.725672][T20537] RIP: 0033:0x430b36 [ 2674.725688][T20537] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 66 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 2c 44 64 00 85 c0 0f 84 [ 2674.725697][T20537] RSP: 002b:00007ffd121fd840 EFLAGS: 00010206 [ 2674.725709][T20537] RAX: 0000000000019691 RBX: 0000000000716640 RCX: 0000000000008041 [ 2674.725717][T20537] RDX: 00000000029d7930 RSI: 00000000029df970 RDI: 0000000000000003 18:18:14 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1100}, 0x0) [ 2674.725726][T20537] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000029d6940 [ 2674.725734][T20537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000716698 [ 2674.725743][T20537] R13: 0000000000716698 R14: 0000000000000000 R15: 0000000000002710 [ 2674.845447][T20537] memory: usage 1424kB, limit 0kB, failcnt 1533 [ 2674.855302][T20537] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2674.867315][T20537] Memory cgroup stats for /syz1: [ 2674.867418][T20537] anon 32768 [ 2674.867418][T20537] file 0 [ 2674.867418][T20537] kernel_stack 0 [ 2674.867418][T20537] slab 1490944 [ 2674.867418][T20537] sock 0 [ 2674.867418][T20537] shmem 0 [ 2674.867418][T20537] file_mapped 0 [ 2674.867418][T20537] file_dirty 0 [ 2674.867418][T20537] file_writeback 0 [ 2674.867418][T20537] anon_thp 0 [ 2674.867418][T20537] inactive_anon 0 [ 2674.867418][T20537] active_anon 32768 [ 2674.867418][T20537] inactive_file 0 [ 2674.867418][T20537] active_file 0 [ 2674.867418][T20537] unevictable 0 [ 2674.867418][T20537] slab_reclaimable 270336 [ 2674.867418][T20537] slab_unreclaimable 1220608 [ 2674.867418][T20537] pgfault 90321 [ 2674.867418][T20537] pgmajfault 0 [ 2674.867418][T20537] workingset_refault 66 [ 2674.867418][T20537] workingset_activate 0 [ 2674.867418][T20537] workingset_nodereclaim 0 [ 2674.867418][T20537] pgrefill 1281 [ 2674.867418][T20537] pgscan 1276 [ 2674.867418][T20537] pgsteal 33 [ 2674.867418][T20537] pgactivate 1188 18:18:14 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x20480}, 0x0) 18:18:14 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2800}, 0x0) 18:18:14 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2900}, 0x0) [ 2675.217470][T20537] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20537,uid=0 18:18:14 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) [ 2675.278884][T20537] Memory cgroup out of memory: Killed process 20537 (syz-executor.1) total-vm:72444kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:0 [ 2675.374735][ T1065] oom_reaper: reaped process 20537 (syz-executor.1), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 2675.476647][T20552] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. 18:18:15 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3000}, 0x0) 18:18:15 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0xfffffffffffffec7, &(0x7f0000000640)=[{&(0x7f0000000340)="c944a5fcaeedbafda5709e3f0002", 0xe}], 0x1}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x802000}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) close(0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:18:15 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0) [ 2675.889084][T20578] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2676.295028][T20596] IPVS: ftp: loaded support on port[0] = 21 [ 2676.695592][T20596] chnl_net:caif_netlink_parms(): no params data found [ 2676.743917][T20596] bridge0: port 1(bridge_slave_0) entered blocking state [ 2676.752203][T20596] bridge0: port 1(bridge_slave_0) entered disabled state [ 2676.764436][T20596] device bridge_slave_0 entered promiscuous mode [ 2676.865776][T20596] bridge0: port 2(bridge_slave_1) entered blocking state [ 2676.873205][T20596] bridge0: port 2(bridge_slave_1) entered disabled state [ 2676.882189][T20596] device bridge_slave_1 entered promiscuous mode [ 2676.911114][T20596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2676.971703][T20596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2677.005880][T20596] team0: Port device team_slave_0 added [ 2677.078348][T20596] team0: Port device team_slave_1 added [ 2677.183835][T20596] device hsr_slave_0 entered promiscuous mode [ 2677.300924][T20596] device hsr_slave_1 entered promiscuous mode [ 2677.359923][T20596] debugfs: Directory 'hsr0' with parent '/' already present! [ 2677.614658][T20596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2677.645118][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2677.661036][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2677.669522][T14907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2677.733930][T20596] 8021q: adding VLAN 0 to HW filter on device team0 [ 2677.750236][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2677.759506][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2677.769263][T14909] bridge0: port 1(bridge_slave_0) entered blocking state [ 2677.776402][T14909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2677.803942][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2677.812942][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2677.823055][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2677.833022][T14906] bridge0: port 2(bridge_slave_1) entered blocking state [ 2677.840153][T14906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2677.985643][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2678.004354][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2678.013776][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2678.025372][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2678.119799][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2678.131060][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2678.146741][T20596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2678.159369][T20596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2678.171047][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2678.181068][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2678.274493][T20596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2678.478704][T20605] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2678.489429][T20605] CPU: 1 PID: 20605 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 2678.496995][T20605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2678.507058][T20605] Call Trace: [ 2678.510362][T20605] dump_stack+0x172/0x1f0 [ 2678.514714][T20605] dump_header+0x10b/0x82d [ 2678.519133][T20605] oom_kill_process.cold+0x10/0x15 [ 2678.524255][T20605] out_of_memory+0x334/0x1340 [ 2678.528934][T20605] ? __sched_text_start+0x8/0x8 [ 2678.533787][T20605] ? oom_killer_disable+0x280/0x280 [ 2678.538994][T20605] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2678.544541][T20605] ? memcg_stat_show+0xc40/0xc40 [ 2678.549486][T20605] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2678.555295][T20605] ? cgroup_file_notify+0x140/0x1b0 [ 2678.560499][T20605] memory_max_write+0x262/0x3a0 [ 2678.565351][T20605] ? mem_cgroup_write+0x370/0x370 [ 2678.570373][T20605] ? lock_acquire+0x190/0x410 [ 2678.575047][T20605] ? kernfs_fop_write+0x227/0x480 [ 2678.580161][T20605] cgroup_file_write+0x241/0x790 [ 2678.585096][T20605] ? mem_cgroup_write+0x370/0x370 [ 2678.590121][T20605] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2678.595759][T20605] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2678.601392][T20605] kernfs_fop_write+0x2b8/0x480 [ 2678.606252][T20605] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2678.612499][T20605] __vfs_write+0x8a/0x110 [ 2678.616851][T20605] ? kernfs_fop_open+0xd80/0xd80 [ 2678.621791][T20605] vfs_write+0x268/0x5d0 [ 2678.626037][T20605] ksys_write+0x14f/0x290 [ 2678.630365][T20605] ? __ia32_sys_read+0xb0/0xb0 [ 2678.635127][T20605] ? do_syscall_64+0x26/0x760 [ 2678.639801][T20605] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2678.645867][T20605] ? do_syscall_64+0x26/0x760 [ 2678.650553][T20605] __x64_sys_write+0x73/0xb0 [ 2678.655149][T20605] do_syscall_64+0xfa/0x760 [ 2678.659655][T20605] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2678.665538][T20605] RIP: 0033:0x459a59 [ 2678.669428][T20605] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2678.689032][T20605] RSP: 002b:00007fd84b61fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2678.697445][T20605] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 2678.705411][T20605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2678.713373][T20605] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 2678.721338][T20605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd84b6206d4 [ 2678.729303][T20605] R13: 00000000004c9e7e R14: 00000000004e1a90 R15: 00000000ffffffff [ 2678.744527][T20605] memory: usage 4760kB, limit 0kB, failcnt 365 [ 2678.750869][T20605] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2678.757818][T20605] Memory cgroup stats for /syz3: [ 2678.757942][T20605] anon 2080768 [ 2678.757942][T20605] file 126976 [ 2678.757942][T20605] kernel_stack 65536 [ 2678.757942][T20605] slab 2650112 [ 2678.757942][T20605] sock 163840 [ 2678.757942][T20605] shmem 0 [ 2678.757942][T20605] file_mapped 0 [ 2678.757942][T20605] file_dirty 135168 [ 2678.757942][T20605] file_writeback 0 [ 2678.757942][T20605] anon_thp 2097152 [ 2678.757942][T20605] inactive_anon 0 [ 2678.757942][T20605] active_anon 2080768 [ 2678.757942][T20605] inactive_file 126976 [ 2678.757942][T20605] active_file 0 [ 2678.757942][T20605] unevictable 0 [ 2678.757942][T20605] slab_reclaimable 1757184 [ 2678.757942][T20605] slab_unreclaimable 892928 [ 2678.757942][T20605] pgfault 124113 [ 2678.757942][T20605] pgmajfault 0 [ 2678.757942][T20605] workingset_refault 0 [ 2678.757942][T20605] workingset_activate 0 [ 2678.757942][T20605] workingset_nodereclaim 0 [ 2678.757942][T20605] pgrefill 67 [ 2678.757942][T20605] pgscan 108 [ 2678.757942][T20605] pgsteal 75 [ 2678.757942][T20605] pgactivate 0 [ 2678.857595][T20605] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20602,uid=0 [ 2678.873213][T20605] Memory cgroup out of memory: Killed process 20602 (syz-executor.3) total-vm:72708kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 2678.892461][ T1065] oom_reaper: reaped process 20602 (syz-executor.3), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 18:18:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:18:18 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1ba, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:18:18 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0x0) 18:18:18 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8000a0}, 0x0) 18:18:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x1}, 0x41224, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x127, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x1a0ffffffff) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x161) openat$cgroup_ro(r7, &(0x7f00000004c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r9 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r9, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0xfffffffffffffec7, &(0x7f0000000640)=[{&(0x7f0000000340)="c944a5fcaeedbafda5709e3f0002", 0xe}], 0x1}, 0xfc00) sendmsg$kcm(r9, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='.\xc7/\x01\xf4\x00\x00\x00\x00\x00\x00p=Y\x01\x00\x00\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:18:18 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x189, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) [ 2679.012472][T20596] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2679.040684][T20596] CPU: 0 PID: 20596 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 2679.048262][T20596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2679.058322][T20596] Call Trace: [ 2679.061624][T20596] dump_stack+0x172/0x1f0 [ 2679.062717][T20613] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2679.065961][T20596] dump_header+0x10b/0x82d [ 2679.065974][T20596] ? oom_kill_process+0x94/0x3f0 [ 2679.065992][T20596] oom_kill_process.cold+0x10/0x15 [ 2679.066009][T20596] out_of_memory+0x334/0x1340 [ 2679.066029][T20596] ? lock_downgrade+0x920/0x920 [ 2679.099238][T20596] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2679.105060][T20596] ? oom_killer_disable+0x280/0x280 [ 2679.110289][T20596] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2679.115856][T20596] ? memcg_stat_show+0xc40/0xc40 [ 2679.120814][T20596] ? do_raw_spin_unlock+0x57/0x270 [ 2679.125933][T20596] ? _raw_spin_unlock+0x2d/0x50 [ 2679.125956][T20596] try_charge+0xf4b/0x1440 [ 2679.125982][T20596] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2679.125996][T20596] ? percpu_ref_tryget_live+0x111/0x290 [ 2679.126015][T20596] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2679.126034][T20596] ? __kasan_check_read+0x11/0x20 [ 2679.157596][T20596] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2679.157619][T20596] mem_cgroup_try_charge+0x136/0x590 [ 2679.157642][T20596] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2679.157661][T20596] wp_page_copy+0x407/0x1860 [ 2679.157679][T20596] ? find_held_lock+0x35/0x130 [ 2679.157694][T20596] ? do_wp_page+0x53b/0x15c0 [ 2679.157716][T20596] ? pmd_devmap_trans_unstable+0x220/0x220 [ 2679.178726][T20596] ? lock_downgrade+0x920/0x920 [ 2679.178752][T20596] ? swp_swapcount+0x540/0x540 [ 2679.193914][T20596] ? __kasan_check_read+0x11/0x20 [ 2679.208504][T20596] ? do_raw_spin_unlock+0x57/0x270 [ 2679.208525][T20596] do_wp_page+0x543/0x15c0 [ 2679.208544][T20596] ? finish_mkwrite_fault+0x6a0/0x6a0 [ 2679.218052][T20596] __handle_mm_fault+0x23ec/0x4040 [ 2679.228500][T20596] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2679.234130][T20596] ? handle_mm_fault+0x292/0xaa0 [ 2679.234158][T20596] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2679.234175][T20596] ? __kasan_check_read+0x11/0x20 [ 2679.234195][T20596] handle_mm_fault+0x3b7/0xaa0 [ 2679.234218][T20596] __do_page_fault+0x536/0xdd0 [ 2679.234243][T20596] do_page_fault+0x38/0x590 [ 2679.234263][T20596] page_fault+0x39/0x40 [ 2679.234283][T20596] RIP: 0033:0x430b36 [ 2679.272437][T20596] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 66 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 2c 44 64 00 85 c0 0f 84 [ 2679.292043][T20596] RSP: 002b:00007ffe0ed8f540 EFLAGS: 00010206 [ 2679.298114][T20596] RAX: 0000000000019691 RBX: 0000000000716640 RCX: 0000000000008041 [ 2679.306091][T20596] RDX: 0000000001c5e930 RSI: 0000000001c66970 RDI: 0000000000000003 18:18:19 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0) [ 2679.314175][T20596] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001c5d940 [ 2679.322143][T20596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000716698 [ 2679.330114][T20596] R13: 0000000000716698 R14: 0000000000000000 R15: 0000000000002710 18:18:19 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1030000}, 0x0) 18:18:19 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) [ 2679.509895][T20596] memory: usage 2392kB, limit 0kB, failcnt 377 [ 2679.518779][T20596] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2679.553641][T20596] Memory cgroup stats for /syz3: [ 2679.553749][T20596] anon 0 [ 2679.553749][T20596] file 126976 [ 2679.553749][T20596] kernel_stack 0 [ 2679.553749][T20596] slab 2650112 [ 2679.553749][T20596] sock 163840 [ 2679.553749][T20596] shmem 0 [ 2679.553749][T20596] file_mapped 0 [ 2679.553749][T20596] file_dirty 135168 [ 2679.553749][T20596] file_writeback 0 [ 2679.553749][T20596] anon_thp 0 [ 2679.553749][T20596] inactive_anon 0 [ 2679.553749][T20596] active_anon 0 [ 2679.553749][T20596] inactive_file 126976 [ 2679.553749][T20596] active_file 0 [ 2679.553749][T20596] unevictable 0 [ 2679.553749][T20596] slab_reclaimable 1757184 [ 2679.553749][T20596] slab_unreclaimable 892928 [ 2679.553749][T20596] pgfault 124113 [ 2679.553749][T20596] pgmajfault 0 [ 2679.553749][T20596] workingset_refault 0 [ 2679.553749][T20596] workingset_activate 0 [ 2679.553749][T20596] workingset_nodereclaim 0 [ 2679.553749][T20596] pgrefill 67 [ 2679.553749][T20596] pgscan 108 [ 2679.553749][T20596] pgsteal 75 [ 2679.553749][T20596] pgactivate 0 18:18:19 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5800}, 0x0) 18:18:19 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0) [ 2679.888260][T20612] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. 18:18:19 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x0) [ 2679.932091][T20596] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20596,uid=0 [ 2679.978359][T20596] Memory cgroup out of memory: Killed process 20596 (syz-executor.3) total-vm:72444kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 2680.031722][ T1065] oom_reaper: reaped process 20596 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 2680.084707][T20633] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2680.482021][T20636] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. 18:18:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:18:20 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1bb, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:18:20 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6000}, 0x0) 18:18:20 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0) [ 2680.781932][T20658] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2681.098405][T20663] IPVS: ftp: loaded support on port[0] = 21 [ 2681.488541][T20663] chnl_net:caif_netlink_parms(): no params data found [ 2681.617732][T20663] bridge0: port 1(bridge_slave_0) entered blocking state [ 2681.628211][T20663] bridge0: port 1(bridge_slave_0) entered disabled state [ 2681.637333][T20663] device bridge_slave_0 entered promiscuous mode [ 2681.695311][T20663] bridge0: port 2(bridge_slave_1) entered blocking state [ 2681.702612][T20663] bridge0: port 2(bridge_slave_1) entered disabled state [ 2681.712136][T20663] device bridge_slave_1 entered promiscuous mode [ 2681.803430][T20663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2681.817095][T20663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2681.846219][T20663] team0: Port device team_slave_0 added [ 2681.856052][T20663] team0: Port device team_slave_1 added [ 2681.945863][T20663] device hsr_slave_0 entered promiscuous mode [ 2682.050894][T20663] device hsr_slave_1 entered promiscuous mode [ 2682.169889][T20663] debugfs: Directory 'hsr0' with parent '/' already present! [ 2682.246983][T20663] bridge0: port 2(bridge_slave_1) entered blocking state [ 2682.254126][T20663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2682.261985][T20663] bridge0: port 1(bridge_slave_0) entered blocking state [ 2682.269074][T20663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2682.415570][T20663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2682.491618][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2682.501357][T14906] bridge0: port 1(bridge_slave_0) entered disabled state [ 2682.510186][T14906] bridge0: port 2(bridge_slave_1) entered disabled state [ 2682.535079][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2682.618883][T20663] 8021q: adding VLAN 0 to HW filter on device team0 [ 2682.634774][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2682.644740][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2682.653805][T14906] bridge0: port 1(bridge_slave_0) entered blocking state [ 2682.660911][T14906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2682.756207][T14908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2682.766745][T14908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2682.775659][T14908] bridge0: port 2(bridge_slave_1) entered blocking state [ 2682.782754][T14908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2682.866286][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2682.877315][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2682.910688][T14908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2682.920508][T14908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2682.930851][T14908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2682.941063][T14908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2682.951116][T14908] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2683.028270][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2683.038015][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2683.057636][T20663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2683.071714][T20663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2683.080787][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2683.090596][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2683.177766][T20663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2683.378230][T20674] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2683.388805][T20674] CPU: 0 PID: 20674 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 2683.396357][T20674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2683.406421][T20674] Call Trace: [ 2683.409725][T20674] dump_stack+0x172/0x1f0 [ 2683.414094][T20674] dump_header+0x10b/0x82d [ 2683.418542][T20674] oom_kill_process.cold+0x10/0x15 [ 2683.423662][T20674] out_of_memory+0x334/0x1340 [ 2683.428344][T20674] ? __sched_text_start+0x8/0x8 [ 2683.433199][T20674] ? oom_killer_disable+0x280/0x280 [ 2683.438409][T20674] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2683.444131][T20674] ? memcg_stat_show+0xc40/0xc40 [ 2683.449134][T20674] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2683.454937][T20674] ? cgroup_file_notify+0x140/0x1b0 [ 2683.460994][T20674] memory_max_write+0x262/0x3a0 [ 2683.465972][T20674] ? mem_cgroup_write+0x370/0x370 [ 2683.471002][T20674] ? lock_acquire+0x190/0x410 [ 2683.475674][T20674] ? kernfs_fop_write+0x227/0x480 [ 2683.480691][T20674] cgroup_file_write+0x241/0x790 [ 2683.485612][T20674] ? mem_cgroup_write+0x370/0x370 [ 2683.490649][T20674] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2683.496264][T20674] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2683.501929][T20674] kernfs_fop_write+0x2b8/0x480 [ 2683.506796][T20674] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2683.513020][T20674] __vfs_write+0x8a/0x110 [ 2683.517367][T20674] ? kernfs_fop_open+0xd80/0xd80 [ 2683.522282][T20674] vfs_write+0x268/0x5d0 [ 2683.526505][T20674] ksys_write+0x14f/0x290 [ 2683.530813][T20674] ? __ia32_sys_read+0xb0/0xb0 [ 2683.535576][T20674] ? do_syscall_64+0x26/0x760 [ 2683.540235][T20674] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2683.546276][T20674] ? do_syscall_64+0x26/0x760 [ 2683.550935][T20674] __x64_sys_write+0x73/0xb0 [ 2683.555528][T20674] do_syscall_64+0xfa/0x760 [ 2683.560010][T20674] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2683.565884][T20674] RIP: 0033:0x459a59 [ 2683.569774][T20674] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2683.589365][T20674] RSP: 002b:00007f476de8ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2683.597765][T20674] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 2683.605716][T20674] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2683.613664][T20674] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2683.621624][T20674] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f476de8f6d4 [ 2683.629574][T20674] R13: 00000000004c9e7e R14: 00000000004e1a90 R15: 00000000ffffffff [ 2683.651425][T20674] memory: usage 3736kB, limit 0kB, failcnt 1534 [ 2683.657726][T20674] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2683.664721][T20674] Memory cgroup stats for /syz1: [ 2683.664819][T20674] anon 2174976 [ 2683.664819][T20674] file 0 [ 2683.664819][T20674] kernel_stack 0 [ 2683.664819][T20674] slab 1355776 [ 2683.664819][T20674] sock 0 [ 2683.664819][T20674] shmem 0 [ 2683.664819][T20674] file_mapped 0 [ 2683.664819][T20674] file_dirty 0 [ 2683.664819][T20674] file_writeback 0 [ 2683.664819][T20674] anon_thp 2097152 [ 2683.664819][T20674] inactive_anon 0 [ 2683.664819][T20674] active_anon 2174976 [ 2683.664819][T20674] inactive_file 0 [ 2683.664819][T20674] active_file 0 [ 2683.664819][T20674] unevictable 0 [ 2683.664819][T20674] slab_reclaimable 270336 [ 2683.664819][T20674] slab_unreclaimable 1085440 [ 2683.664819][T20674] pgfault 90387 [ 2683.664819][T20674] pgmajfault 0 [ 2683.664819][T20674] workingset_refault 66 [ 2683.664819][T20674] workingset_activate 0 [ 2683.664819][T20674] workingset_nodereclaim 0 [ 2683.664819][T20674] pgrefill 1281 [ 2683.664819][T20674] pgscan 1276 [ 2683.664819][T20674] pgsteal 33 [ 2683.664819][T20674] pgactivate 1188 [ 2683.760140][T20674] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20673,uid=0 [ 2683.776527][T20674] Memory cgroup out of memory: Killed process 20673 (syz-executor.1) total-vm:72576kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2683.825583][ T1065] oom_reaper: reaped process 20673 (syz-executor.1), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 18:18:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000540)='cpuacct.usage_user\x00', 0x0, 0x0) r7 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r8 = socket$kcm(0xa, 0x3, 0x3a) r9 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0x8, 0x0, 0x0) sendmsg$kcm(r9, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f00000005c0)}, 0xfc00) sendmsg$kcm(r8, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r7, 0x0, 0x0) 18:18:23 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x18a, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:18:23 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80fe}, 0x0) 18:18:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:18:23 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1bc, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:18:23 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5000000}, 0x0) [ 2683.901697][T20663] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2683.978806][T20663] CPU: 1 PID: 20663 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 2683.986403][T20663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2683.996464][T20663] Call Trace: [ 2683.999765][T20663] dump_stack+0x172/0x1f0 [ 2684.001550][T20685] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2684.004103][T20663] dump_header+0x10b/0x82d [ 2684.004122][T20663] ? oom_kill_process+0x94/0x3f0 [ 2684.022741][T20663] oom_kill_process.cold+0x10/0x15 [ 2684.027869][T20663] out_of_memory+0x334/0x1340 [ 2684.032562][T20663] ? lock_downgrade+0x920/0x920 [ 2684.037429][T20663] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2684.043244][T20663] ? oom_killer_disable+0x280/0x280 [ 2684.043271][T20663] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2684.043289][T20663] ? memcg_stat_show+0xc40/0xc40 [ 2684.058956][T20663] ? do_raw_spin_unlock+0x57/0x270 [ 2684.064078][T20663] ? _raw_spin_unlock+0x2d/0x50 [ 2684.068939][T20663] try_charge+0xf4b/0x1440 [ 2684.073357][T20663] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2684.073369][T20663] ? percpu_ref_tryget_live+0x111/0x290 [ 2684.073386][T20663] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2684.073401][T20663] ? __kasan_check_read+0x11/0x20 [ 2684.073418][T20663] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2684.073435][T20663] mem_cgroup_try_charge+0x136/0x590 [ 2684.073457][T20663] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2684.073474][T20663] wp_page_copy+0x407/0x1860 [ 2684.073490][T20663] ? find_held_lock+0x35/0x130 [ 2684.073504][T20663] ? do_wp_page+0x53b/0x15c0 18:18:23 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6000000}, 0x0) [ 2684.073522][T20663] ? pmd_devmap_trans_unstable+0x220/0x220 [ 2684.073541][T20663] ? lock_downgrade+0x920/0x920 [ 2684.116932][T20663] ? swp_swapcount+0x540/0x540 [ 2684.116948][T20663] ? __kasan_check_read+0x11/0x20 [ 2684.116967][T20663] ? do_raw_spin_unlock+0x57/0x270 [ 2684.151811][T20663] do_wp_page+0x543/0x15c0 [ 2684.151832][T20663] ? finish_mkwrite_fault+0x6a0/0x6a0 [ 2684.151855][T20663] __handle_mm_fault+0x23ec/0x4040 [ 2684.151875][T20663] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2684.151888][T20663] ? handle_mm_fault+0x292/0xaa0 18:18:23 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8405}, 0x0) [ 2684.151915][T20663] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2684.151932][T20663] ? __kasan_check_read+0x11/0x20 [ 2684.151951][T20663] handle_mm_fault+0x3b7/0xaa0 [ 2684.151972][T20663] __do_page_fault+0x536/0xdd0 [ 2684.151993][T20663] do_page_fault+0x38/0x590 [ 2684.152010][T20663] page_fault+0x39/0x40 [ 2684.152020][T20663] RIP: 0033:0x430b36 [ 2684.152034][T20663] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 66 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 2c 44 64 00 85 c0 0f 84 [ 2684.152047][T20663] RSP: 002b:00007fff9e837130 EFLAGS: 00010206 [ 2684.198218][T20663] RAX: 0000000000019691 RBX: 0000000000716640 RCX: 0000000000008041 [ 2684.198228][T20663] RDX: 0000000001e46930 RSI: 0000000001e4e970 RDI: 0000000000000003 [ 2684.198236][T20663] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001e45940 [ 2684.198244][T20663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000716698 [ 2684.198252][T20663] R13: 0000000000716698 R14: 0000000000000000 R15: 0000000000002710 18:18:24 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0) 18:18:24 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xac05}, 0x0) [ 2684.390645][T20663] memory: usage 1404kB, limit 0kB, failcnt 1546 [ 2684.396926][T20663] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2684.396931][T20663] Memory cgroup stats for /syz1: [ 2684.397038][T20663] anon 32768 [ 2684.397038][T20663] file 0 [ 2684.397038][T20663] kernel_stack 0 [ 2684.397038][T20663] slab 1355776 [ 2684.397038][T20663] sock 0 [ 2684.397038][T20663] shmem 0 [ 2684.397038][T20663] file_mapped 0 [ 2684.397038][T20663] file_dirty 0 [ 2684.397038][T20663] file_writeback 0 [ 2684.397038][T20663] anon_thp 0 [ 2684.397038][T20663] inactive_anon 0 [ 2684.397038][T20663] active_anon 32768 [ 2684.397038][T20663] inactive_file 0 [ 2684.397038][T20663] active_file 0 [ 2684.397038][T20663] unevictable 0 [ 2684.397038][T20663] slab_reclaimable 270336 [ 2684.397038][T20663] slab_unreclaimable 1085440 [ 2684.397038][T20663] pgfault 90387 [ 2684.397038][T20663] pgmajfault 0 [ 2684.397038][T20663] workingset_refault 66 [ 2684.397038][T20663] workingset_activate 0 [ 2684.397038][T20663] workingset_nodereclaim 0 [ 2684.397038][T20663] pgrefill 1281 [ 2684.397038][T20663] pgscan 1276 [ 2684.397038][T20663] pgsteal 33 [ 2684.397038][T20663] pgactivate 1188 [ 2684.429174][T20663] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20663,uid=0 18:18:24 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) [ 2684.558441][T20687] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. 18:18:24 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc0fe}, 0x0) [ 2684.709040][T20663] Memory cgroup out of memory: Killed process 20663 (syz-executor.1) total-vm:72444kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 2684.776684][T20685] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2684.790320][ T1065] oom_reaper: reaped process 20663 (syz-executor.1), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 18:18:24 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0xfffffffffffffec7, &(0x7f0000000640)=[{&(0x7f0000000340)="c944a5fcaeedbafda5709e3f0002", 0xe}], 0x1}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:18:24 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9000000}, 0x0) 18:18:24 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xe803}, 0x0) [ 2685.754121][T20729] IPVS: ftp: loaded support on port[0] = 21 [ 2685.955510][T20729] chnl_net:caif_netlink_parms(): no params data found [ 2686.053366][T20729] bridge0: port 1(bridge_slave_0) entered blocking state [ 2686.061119][T20729] bridge0: port 1(bridge_slave_0) entered disabled state [ 2686.070425][T20729] device bridge_slave_0 entered promiscuous mode [ 2686.079281][T20729] bridge0: port 2(bridge_slave_1) entered blocking state [ 2686.087011][T20729] bridge0: port 2(bridge_slave_1) entered disabled state [ 2686.096271][T20729] device bridge_slave_1 entered promiscuous mode [ 2686.198738][T20729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2686.214140][T20729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2686.319123][T20729] team0: Port device team_slave_0 added [ 2686.327627][T20729] team0: Port device team_slave_1 added [ 2686.453796][T20729] device hsr_slave_0 entered promiscuous mode [ 2686.580867][T20729] device hsr_slave_1 entered promiscuous mode [ 2686.640677][T20729] debugfs: Directory 'hsr0' with parent '/' already present! [ 2686.828773][T20729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2686.950345][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2686.958536][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2686.974502][T20729] 8021q: adding VLAN 0 to HW filter on device team0 [ 2686.988963][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2686.998876][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2687.011582][T14677] bridge0: port 1(bridge_slave_0) entered blocking state [ 2687.018666][T14677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2687.107804][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2687.117093][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2687.127387][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2687.137496][T14678] bridge0: port 2(bridge_slave_1) entered blocking state [ 2687.144656][T14678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2687.154514][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2687.375945][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2687.386785][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2687.397628][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2687.508902][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2687.522427][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2687.534333][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2687.544310][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2687.553920][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2687.573620][T20729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2687.586108][T20729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2687.597014][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2687.607085][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2687.694057][T20729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2687.916435][T20738] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2687.928220][T20738] CPU: 0 PID: 20738 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 2687.935780][T20738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2687.945837][T20738] Call Trace: [ 2687.949138][T20738] dump_stack+0x172/0x1f0 [ 2687.953481][T20738] dump_header+0x10b/0x82d [ 2687.957903][T20738] oom_kill_process.cold+0x10/0x15 [ 2687.963020][T20738] out_of_memory+0x334/0x1340 [ 2687.967707][T20738] ? __sched_text_start+0x8/0x8 [ 2687.972576][T20738] ? oom_killer_disable+0x280/0x280 [ 2687.977765][T20738] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2687.983293][T20738] ? memcg_stat_show+0xc40/0xc40 [ 2687.988253][T20738] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2687.994045][T20738] ? cgroup_file_notify+0x140/0x1b0 [ 2687.999259][T20738] memory_max_write+0x262/0x3a0 [ 2688.004091][T20738] ? mem_cgroup_write+0x370/0x370 [ 2688.009094][T20738] ? lock_acquire+0x190/0x410 [ 2688.013751][T20738] ? kernfs_fop_write+0x227/0x480 [ 2688.018773][T20738] cgroup_file_write+0x241/0x790 [ 2688.023712][T20738] ? mem_cgroup_write+0x370/0x370 [ 2688.028737][T20738] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2688.034362][T20738] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2688.039981][T20738] kernfs_fop_write+0x2b8/0x480 [ 2688.044816][T20738] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2688.051054][T20738] __vfs_write+0x8a/0x110 [ 2688.055362][T20738] ? kernfs_fop_open+0xd80/0xd80 [ 2688.060292][T20738] vfs_write+0x268/0x5d0 [ 2688.064516][T20738] ksys_write+0x14f/0x290 [ 2688.068826][T20738] ? __ia32_sys_read+0xb0/0xb0 [ 2688.073582][T20738] ? do_syscall_64+0x26/0x760 [ 2688.078246][T20738] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2688.084289][T20738] ? do_syscall_64+0x26/0x760 [ 2688.088956][T20738] __x64_sys_write+0x73/0xb0 [ 2688.093526][T20738] do_syscall_64+0xfa/0x760 [ 2688.098016][T20738] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2688.103886][T20738] RIP: 0033:0x459a59 [ 2688.107784][T20738] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2688.127381][T20738] RSP: 002b:00007f4e67c68c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2688.135773][T20738] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 2688.143725][T20738] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2688.151706][T20738] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 2688.159661][T20738] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4e67c696d4 [ 2688.167618][T20738] R13: 00000000004c9e7e R14: 00000000004e1a90 R15: 00000000ffffffff [ 2688.178681][T20738] memory: usage 4752kB, limit 0kB, failcnt 378 [ 2688.184936][T20738] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2688.191990][T20738] Memory cgroup stats for /syz3: [ 2688.192088][T20738] anon 2166784 [ 2688.192088][T20738] file 126976 [ 2688.192088][T20738] kernel_stack 65536 [ 2688.192088][T20738] slab 2514944 [ 2688.192088][T20738] sock 163840 [ 2688.192088][T20738] shmem 0 [ 2688.192088][T20738] file_mapped 0 [ 2688.192088][T20738] file_dirty 135168 [ 2688.192088][T20738] file_writeback 0 [ 2688.192088][T20738] anon_thp 2097152 [ 2688.192088][T20738] inactive_anon 0 [ 2688.192088][T20738] active_anon 2166784 [ 2688.192088][T20738] inactive_file 126976 [ 2688.192088][T20738] active_file 0 [ 2688.192088][T20738] unevictable 0 [ 2688.192088][T20738] slab_reclaimable 1757184 [ 2688.192088][T20738] slab_unreclaimable 757760 [ 2688.192088][T20738] pgfault 124179 [ 2688.192088][T20738] pgmajfault 0 [ 2688.192088][T20738] workingset_refault 0 [ 2688.192088][T20738] workingset_activate 0 [ 2688.192088][T20738] workingset_nodereclaim 0 [ 2688.192088][T20738] pgrefill 67 [ 2688.192088][T20738] pgscan 108 [ 2688.192088][T20738] pgsteal 75 [ 2688.192088][T20738] pgactivate 0 [ 2688.291323][T20738] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20736,uid=0 [ 2688.307876][T20738] Memory cgroup out of memory: Killed process 20736 (syz-executor.3) total-vm:72708kB, anon-rss:2144kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2688.328033][ T1065] oom_reaper: reaped process 20736 (syz-executor.3), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 2688.489162][ T7] device bridge_slave_1 left promiscuous mode [ 2688.510101][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2688.571320][ T7] device bridge_slave_0 left promiscuous mode [ 2688.577592][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2688.702566][ T7] device bridge_slave_1 left promiscuous mode [ 2688.708810][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2688.781163][ T7] device bridge_slave_0 left promiscuous mode [ 2688.787529][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2688.843136][ T7] device bridge_slave_1 left promiscuous mode [ 2688.849485][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2688.928012][ T7] device bridge_slave_0 left promiscuous mode [ 2688.934942][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2689.022441][ T7] device bridge_slave_1 left promiscuous mode [ 2689.028825][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2689.121043][ T7] device bridge_slave_0 left promiscuous mode [ 2689.127472][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2689.232473][ T7] device bridge_slave_1 left promiscuous mode [ 2689.238790][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2689.361086][ T7] device bridge_slave_0 left promiscuous mode [ 2689.367425][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2689.462552][ T7] device bridge_slave_1 left promiscuous mode [ 2689.468882][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2689.521220][ T7] device bridge_slave_0 left promiscuous mode [ 2689.527561][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2689.582556][ T7] device bridge_slave_1 left promiscuous mode [ 2689.588812][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2689.651103][ T7] device bridge_slave_0 left promiscuous mode [ 2689.657441][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2689.733457][ T7] device bridge_slave_1 left promiscuous mode [ 2689.740600][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2689.831233][ T7] device bridge_slave_0 left promiscuous mode [ 2689.837586][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2690.957174][T20729] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2690.979772][T20729] CPU: 1 PID: 20729 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 2690.987354][T20729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2690.997411][T20729] Call Trace: [ 2691.000715][T20729] dump_stack+0x172/0x1f0 [ 2691.005749][T20729] dump_header+0x10b/0x82d [ 2691.010161][T20729] ? oom_kill_process+0x94/0x3f0 [ 2691.015099][T20729] oom_kill_process.cold+0x10/0x15 [ 2691.020212][T20729] out_of_memory+0x334/0x1340 [ 2691.024886][T20729] ? lock_downgrade+0x920/0x920 [ 2691.029738][T20729] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2691.035656][T20729] ? oom_killer_disable+0x280/0x280 [ 2691.040870][T20729] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2691.046448][T20729] ? memcg_stat_show+0xc40/0xc40 [ 2691.051410][T20729] ? do_raw_spin_unlock+0x57/0x270 [ 2691.056536][T20729] ? _raw_spin_unlock+0x2d/0x50 [ 2691.061402][T20729] try_charge+0xf4b/0x1440 [ 2691.065830][T20729] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2691.071369][T20729] ? percpu_ref_tryget_live+0x111/0x290 [ 2691.076919][T20729] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2691.083161][T20729] ? __kasan_check_read+0x11/0x20 [ 2691.088189][T20729] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2691.093736][T20729] mem_cgroup_try_charge+0x136/0x590 [ 2691.099028][T20729] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2691.104666][T20729] wp_page_copy+0x407/0x1860 [ 2691.109260][T20729] ? find_held_lock+0x35/0x130 [ 2691.114027][T20729] ? do_wp_page+0x53b/0x15c0 [ 2691.118715][T20729] ? pmd_devmap_trans_unstable+0x220/0x220 [ 2691.124521][T20729] ? lock_downgrade+0x920/0x920 [ 2691.129374][T20729] ? swp_swapcount+0x540/0x540 [ 2691.134138][T20729] ? __kasan_check_read+0x11/0x20 [ 2691.139161][T20729] ? do_raw_spin_unlock+0x57/0x270 [ 2691.144273][T20729] do_wp_page+0x543/0x15c0 [ 2691.148695][T20729] ? finish_mkwrite_fault+0x6a0/0x6a0 [ 2691.154092][T20729] __handle_mm_fault+0x23ec/0x4040 [ 2691.159209][T20729] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2691.164763][T20729] ? handle_mm_fault+0x292/0xaa0 [ 2691.169715][T20729] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2691.175956][T20729] ? __kasan_check_read+0x11/0x20 [ 2691.180990][T20729] handle_mm_fault+0x3b7/0xaa0 [ 2691.185755][T20729] __do_page_fault+0x536/0xdd0 [ 2691.190524][T20729] do_page_fault+0x38/0x590 [ 2691.195031][T20729] page_fault+0x39/0x40 [ 2691.199180][T20729] RIP: 0033:0x430b36 [ 2691.203079][T20729] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 66 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 2c 44 64 00 85 c0 0f 84 [ 2691.222684][T20729] RSP: 002b:00007ffe080d7cf0 EFLAGS: 00010206 [ 2691.228748][T20729] RAX: 0000000000019691 RBX: 0000000000716640 RCX: 0000000000008041 [ 2691.236713][T20729] RDX: 0000000001297930 RSI: 000000000129f970 RDI: 0000000000000003 [ 2691.244679][T20729] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001296940 [ 2691.252643][T20729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000716698 [ 2691.260618][T20729] R13: 0000000000716698 R14: 000000000029034b R15: 0000000000002710 [ 2691.269820][T20729] memory: usage 2420kB, limit 0kB, failcnt 386 [ 2691.276025][T20729] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2691.283341][T20729] Memory cgroup stats for /syz3: [ 2691.283461][T20729] anon 49152 [ 2691.283461][T20729] file 126976 [ 2691.283461][T20729] kernel_stack 0 [ 2691.283461][T20729] slab 2514944 [ 2691.283461][T20729] sock 163840 [ 2691.283461][T20729] shmem 0 [ 2691.283461][T20729] file_mapped 0 [ 2691.283461][T20729] file_dirty 135168 [ 2691.283461][T20729] file_writeback 0 [ 2691.283461][T20729] anon_thp 0 [ 2691.283461][T20729] inactive_anon 0 [ 2691.283461][T20729] active_anon 49152 [ 2691.283461][T20729] inactive_file 126976 [ 2691.283461][T20729] active_file 0 [ 2691.283461][T20729] unevictable 0 [ 2691.283461][T20729] slab_reclaimable 1757184 [ 2691.283461][T20729] slab_unreclaimable 757760 [ 2691.283461][T20729] pgfault 124179 [ 2691.283461][T20729] pgmajfault 0 [ 2691.283461][T20729] workingset_refault 0 [ 2691.283461][T20729] workingset_activate 0 [ 2691.283461][T20729] workingset_nodereclaim 0 [ 2691.283461][T20729] pgrefill 67 [ 2691.283461][T20729] pgscan 108 [ 2691.283461][T20729] pgsteal 75 [ 2691.283461][T20729] pgactivate 0 [ 2691.382327][T20729] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20729,uid=0 [ 2691.398254][T20729] Memory cgroup out of memory: Killed process 20729 (syz-executor.3) total-vm:72444kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 2691.416785][ T1065] oom_reaper: reaped process 20729 (syz-executor.3), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 2708.030249][ T7] device hsr_slave_0 left promiscuous mode [ 2708.129846][ T7] device hsr_slave_1 left promiscuous mode [ 2708.222566][ T7] team0 (unregistering): Port device team_slave_1 removed [ 2708.241157][ T7] team0 (unregistering): Port device team_slave_0 removed [ 2708.257312][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2708.291863][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2708.442660][ T7] bond0 (unregistering): Released all slaves [ 2708.630610][ T7] device hsr_slave_0 left promiscuous mode [ 2708.679883][ T7] device hsr_slave_1 left promiscuous mode [ 2708.766677][ T7] team0 (unregistering): Port device team_slave_1 removed [ 2708.787125][ T7] team0 (unregistering): Port device team_slave_0 removed [ 2708.805919][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2708.892083][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2709.058865][ T7] bond0 (unregistering): Released all slaves [ 2709.341054][ T7] device hsr_slave_0 left promiscuous mode [ 2709.420327][ T7] device hsr_slave_1 left promiscuous mode [ 2709.514416][ T7] team0 (unregistering): Port device team_slave_1 removed [ 2709.537182][ T7] team0 (unregistering): Port device team_slave_0 removed [ 2709.556336][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2709.643184][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2709.803387][ T7] bond0 (unregistering): Released all slaves [ 2710.200906][ T7] device hsr_slave_0 left promiscuous mode [ 2710.240530][ T7] device hsr_slave_1 left promiscuous mode [ 2710.321597][ T7] team0 (unregistering): Port device team_slave_1 removed [ 2710.339277][ T7] team0 (unregistering): Port device team_slave_0 removed [ 2710.357079][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2710.462608][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2710.638607][ T7] bond0 (unregistering): Released all slaves [ 2710.860071][ T7] device hsr_slave_0 left promiscuous mode [ 2710.960735][ T7] device hsr_slave_1 left promiscuous mode [ 2711.134405][ T7] team0 (unregistering): Port device team_slave_1 removed [ 2711.156911][ T7] team0 (unregistering): Port device team_slave_0 removed [ 2711.177295][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2711.233381][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2711.416360][ T7] bond0 (unregistering): Released all slaves [ 2711.620737][ T7] device hsr_slave_0 left promiscuous mode [ 2711.740190][ T7] device hsr_slave_1 left promiscuous mode [ 2711.804467][ T7] team0 (unregistering): Port device team_slave_1 removed [ 2711.824575][ T7] team0 (unregistering): Port device team_slave_0 removed [ 2711.843442][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2711.932312][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2712.137185][ T7] bond0 (unregistering): Released all slaves [ 2712.430522][ T7] device hsr_slave_0 left promiscuous mode [ 2712.499880][ T7] device hsr_slave_1 left promiscuous mode [ 2712.602542][ T7] team0 (unregistering): Port device team_slave_1 removed [ 2712.622997][ T7] team0 (unregistering): Port device team_slave_0 removed [ 2712.642700][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2712.732510][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2712.904012][ T7] bond0 (unregistering): Released all slaves [ 2713.140555][ T7] device hsr_slave_0 left promiscuous mode [ 2713.180635][ T7] device hsr_slave_1 left promiscuous mode [ 2713.286647][ T7] team0 (unregistering): Port device team_slave_1 removed [ 2713.307199][ T7] team0 (unregistering): Port device team_slave_0 removed [ 2713.327557][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2713.422309][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2713.576731][ T7] bond0 (unregistering): Released all slaves 18:18:53 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:18:53 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x18b, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:18:53 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1bd, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:18:53 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x0) 18:18:53 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 18:18:53 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={&(0x7f00000005c0), 0x6}, 0x1024, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x11, 0x3, 0x0) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x8, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000580)={0xffffffffffffffff}) sendmsg(r6, &(0x7f0000000440)={0x0, 0x196, &(0x7f0000000280)=[{&(0x7f00000001c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x2008001) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r7 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r8 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r8, &(0x7f00000002c0)={&(0x7f0000000680)=@generic={0x5, "ecb98a7349a4556886aacdac962b82cd4b9b7fb622208c131f242d5114e3eb5a19da2f443c2e789683c28d591ca56b214cb074c1987c36aee4d413bb15306e299b19efa9f11d0e0675315608e9eff74f327599b08c2fa7acfcbe673a45bbd6b75e44a87c4349328c9a64e8e1fe1f494c78bafd6dc23b49300a53e75dd22e"}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000340)="c944a5fcaeedbafda5709e3f0002", 0xe}], 0x1}, 0x1fc04) sendmsg$kcm(r8, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x1a0ffffffff) r10 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x3e, &(0x7f00000002c0)=r9, 0x161) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x1a0ffffffff) r12 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r12, 0x1, 0x3e, &(0x7f00000002c0)=r11, 0x161) r13 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r13, 0x107, 0x8, 0x0, 0x0) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000000540)=r11, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 2714.202927][T20741] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. 18:18:53 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfc00}, 0x0) 18:18:53 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xe000000}, 0x0) 18:18:54 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r3, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x1, 0x0, 0x0}, 0x20) r6 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r6, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r5, 0x0, 0x0) 18:18:54 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0) 18:18:54 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfe80}, 0x0) 18:18:54 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) 18:18:54 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfec0}, 0x0) [ 2715.025980][T20745] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2715.318793][T20749] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2715.497097][T20750] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. 18:18:55 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x18c, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:18:55 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x28000000}, 0x0) 18:18:55 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff00}, 0x0) 18:18:55 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1be, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) [ 2715.753461][T20795] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2716.132600][T20806] IPVS: ftp: loaded support on port[0] = 21 [ 2716.346740][T20800] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2716.608243][T20802] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2716.627263][T20808] IPVS: ftp: loaded support on port[0] = 21 [ 2716.755115][T20811] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2716.861596][T20806] chnl_net:caif_netlink_parms(): no params data found [ 2717.047129][T20806] bridge0: port 1(bridge_slave_0) entered blocking state [ 2717.054447][T20806] bridge0: port 1(bridge_slave_0) entered disabled state [ 2717.063702][T20806] device bridge_slave_0 entered promiscuous mode [ 2717.114898][T20806] bridge0: port 2(bridge_slave_1) entered blocking state [ 2717.125964][T20806] bridge0: port 2(bridge_slave_1) entered disabled state [ 2717.141596][T20806] device bridge_slave_1 entered promiscuous mode [ 2717.210454][T20806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2717.220093][T20808] chnl_net:caif_netlink_parms(): no params data found [ 2717.233138][T20806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2717.278944][T20806] team0: Port device team_slave_0 added [ 2717.302819][T20806] team0: Port device team_slave_1 added [ 2717.320393][T20808] bridge0: port 1(bridge_slave_0) entered blocking state [ 2717.328302][T20808] bridge0: port 1(bridge_slave_0) entered disabled state [ 2717.337462][T20808] device bridge_slave_0 entered promiscuous mode [ 2717.379885][T20808] bridge0: port 2(bridge_slave_1) entered blocking state [ 2717.387085][T20808] bridge0: port 2(bridge_slave_1) entered disabled state [ 2717.396722][T20808] device bridge_slave_1 entered promiscuous mode [ 2717.484365][T20806] device hsr_slave_0 entered promiscuous mode [ 2717.530601][T20806] device hsr_slave_1 entered promiscuous mode [ 2717.626905][T20808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2717.664815][T20808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2717.696638][T20806] bridge0: port 2(bridge_slave_1) entered blocking state [ 2717.703767][T20806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2717.711171][T20806] bridge0: port 1(bridge_slave_0) entered blocking state [ 2717.718280][T20806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2717.739865][T20808] team0: Port device team_slave_0 added [ 2717.756334][T20808] team0: Port device team_slave_1 added [ 2717.804314][T20785] bridge0: port 1(bridge_slave_0) entered disabled state [ 2717.813090][T20785] bridge0: port 2(bridge_slave_1) entered disabled state [ 2717.924055][T20808] device hsr_slave_0 entered promiscuous mode [ 2717.980815][T20808] device hsr_slave_1 entered promiscuous mode [ 2718.019719][T20808] debugfs: Directory 'hsr0' with parent '/' already present! [ 2718.069136][T20806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2718.136899][T20785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2718.161102][T20785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2718.177320][T20806] 8021q: adding VLAN 0 to HW filter on device team0 [ 2718.208783][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2718.220999][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2718.230433][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state [ 2718.237508][ T5761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2718.273929][T20786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2718.284055][T20786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2718.293446][T20786] bridge0: port 2(bridge_slave_1) entered blocking state [ 2718.300574][T20786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2718.326439][T20786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2718.372328][T20783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2718.382501][T20783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2718.411620][T20783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2718.461720][T20785] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2718.471428][T20785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2718.491189][T20785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2718.530040][T20785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2718.539072][T20785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2718.561747][T20785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2718.580913][T20785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2718.604842][T20808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2718.624191][T20806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2718.663260][T20783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2718.673390][T20783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2718.699242][T20808] 8021q: adding VLAN 0 to HW filter on device team0 [ 2718.728294][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2718.740943][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2718.760305][T14906] bridge0: port 1(bridge_slave_0) entered blocking state [ 2718.767384][T14906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2718.820543][T20667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2718.829013][T20667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2718.851995][T20667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2718.870318][T20667] bridge0: port 2(bridge_slave_1) entered blocking state [ 2718.877400][T20667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2718.907518][T20806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2718.935851][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2718.945563][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2718.982008][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2718.992036][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2719.032147][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2719.051484][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2719.061550][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2719.071138][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2719.080570][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2719.096701][T20808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2719.123553][T20808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2719.151005][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2719.180920][T14909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2719.234884][T20808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2719.241375][T20825] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2719.260318][T20825] CPU: 1 PID: 20825 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 2719.267900][T20825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2719.277963][T20825] Call Trace: [ 2719.281260][T20825] dump_stack+0x172/0x1f0 [ 2719.285604][T20825] dump_header+0x10b/0x82d [ 2719.290024][T20825] oom_kill_process.cold+0x10/0x15 [ 2719.295144][T20825] out_of_memory+0x334/0x1340 [ 2719.299820][T20825] ? __sched_text_start+0x8/0x8 [ 2719.304670][T20825] ? oom_killer_disable+0x280/0x280 [ 2719.309881][T20825] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2719.315425][T20825] ? memcg_stat_show+0xc40/0xc40 [ 2719.320372][T20825] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2719.326174][T20825] ? cgroup_file_notify+0x140/0x1b0 [ 2719.331378][T20825] memory_max_write+0x262/0x3a0 [ 2719.336230][T20825] ? mem_cgroup_write+0x370/0x370 [ 2719.341251][T20825] ? lock_acquire+0x190/0x410 [ 2719.345935][T20825] ? kernfs_fop_write+0x227/0x480 [ 2719.350966][T20825] cgroup_file_write+0x241/0x790 [ 2719.355907][T20825] ? mem_cgroup_write+0x370/0x370 [ 2719.360930][T20825] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2719.366672][T20825] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2719.372302][T20825] kernfs_fop_write+0x2b8/0x480 [ 2719.377152][T20825] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2719.383392][T20825] __vfs_write+0x8a/0x110 [ 2719.387720][T20825] ? kernfs_fop_open+0xd80/0xd80 [ 2719.392661][T20825] vfs_write+0x268/0x5d0 [ 2719.396905][T20825] ksys_write+0x14f/0x290 [ 2719.401233][T20825] ? __ia32_sys_read+0xb0/0xb0 [ 2719.405998][T20825] ? do_syscall_64+0x26/0x760 [ 2719.410673][T20825] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2719.416736][T20825] ? do_syscall_64+0x26/0x760 [ 2719.421414][T20825] __x64_sys_write+0x73/0xb0 [ 2719.426006][T20825] do_syscall_64+0xfa/0x760 [ 2719.430532][T20825] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2719.436439][T20825] RIP: 0033:0x459a59 [ 2719.440332][T20825] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2719.459936][T20825] RSP: 002b:00007fae2d23fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2719.468358][T20825] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 2719.476350][T20825] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2719.484322][T20825] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2719.492296][T20825] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fae2d2406d4 [ 2719.500263][T20825] R13: 00000000004c9e7e R14: 00000000004e1a90 R15: 00000000ffffffff [ 2719.521163][T20825] memory: usage 3712kB, limit 0kB, failcnt 1547 [ 2719.555759][T20825] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2719.583010][T20825] Memory cgroup stats for /syz1: [ 2719.583130][T20825] anon 2158592 [ 2719.583130][T20825] file 0 [ 2719.583130][T20825] kernel_stack 0 [ 2719.583130][T20825] slab 1355776 [ 2719.583130][T20825] sock 0 [ 2719.583130][T20825] shmem 0 [ 2719.583130][T20825] file_mapped 0 [ 2719.583130][T20825] file_dirty 0 [ 2719.583130][T20825] file_writeback 0 [ 2719.583130][T20825] anon_thp 2097152 [ 2719.583130][T20825] inactive_anon 0 [ 2719.583130][T20825] active_anon 2158592 [ 2719.583130][T20825] inactive_file 0 [ 2719.583130][T20825] active_file 0 [ 2719.583130][T20825] unevictable 0 [ 2719.583130][T20825] slab_reclaimable 270336 [ 2719.583130][T20825] slab_unreclaimable 1085440 [ 2719.583130][T20825] pgfault 90453 [ 2719.583130][T20825] pgmajfault 0 [ 2719.583130][T20825] workingset_refault 66 [ 2719.583130][T20825] workingset_activate 0 [ 2719.583130][T20825] workingset_nodereclaim 0 [ 2719.583130][T20825] pgrefill 1281 [ 2719.583130][T20825] pgscan 1276 [ 2719.583130][T20825] pgsteal 33 [ 2719.583130][T20825] pgactivate 1188 [ 2719.696639][T20825] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20824,uid=0 [ 2719.726866][T20825] Memory cgroup out of memory: Killed process 20824 (syz-executor.1) total-vm:72576kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 2719.794582][ T1065] oom_reaper: reaped process 20824 (syz-executor.1), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 2719.870726][T20833] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2719.893692][T20833] CPU: 1 PID: 20833 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 2719.901277][T20833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2719.911341][T20833] Call Trace: [ 2719.914735][T20833] dump_stack+0x172/0x1f0 [ 2719.919075][T20833] dump_header+0x10b/0x82d [ 2719.923542][T20833] oom_kill_process.cold+0x10/0x15 [ 2719.928747][T20833] out_of_memory+0x334/0x1340 [ 2719.933431][T20833] ? __sched_text_start+0x8/0x8 [ 2719.938293][T20833] ? oom_killer_disable+0x280/0x280 [ 2719.943511][T20833] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2719.949077][T20833] ? memcg_stat_show+0xc40/0xc40 [ 2719.954217][T20833] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2719.960033][T20833] ? cgroup_file_notify+0x140/0x1b0 [ 2719.965244][T20833] memory_max_write+0x262/0x3a0 [ 2719.970108][T20833] ? mem_cgroup_write+0x370/0x370 [ 2719.975134][T20833] ? lock_acquire+0x190/0x410 [ 2719.979811][T20833] ? kernfs_fop_write+0x227/0x480 [ 2719.984898][T20833] cgroup_file_write+0x241/0x790 [ 2719.990033][T20833] ? mem_cgroup_write+0x370/0x370 [ 2719.995166][T20833] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2720.000829][T20833] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2720.006446][T20833] kernfs_fop_write+0x2b8/0x480 [ 2720.011334][T20833] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2720.017594][T20833] __vfs_write+0x8a/0x110 [ 2720.021933][T20833] ? kernfs_fop_open+0xd80/0xd80 [ 2720.027087][T20833] vfs_write+0x268/0x5d0 [ 2720.031417][T20833] ksys_write+0x14f/0x290 [ 2720.035746][T20833] ? __ia32_sys_read+0xb0/0xb0 [ 2720.040498][T20833] ? do_syscall_64+0x26/0x760 [ 2720.045157][T20833] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2720.051213][T20833] ? do_syscall_64+0x26/0x760 [ 2720.055910][T20833] __x64_sys_write+0x73/0xb0 [ 2720.060491][T20833] do_syscall_64+0xfa/0x760 [ 2720.064982][T20833] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2720.070852][T20833] RIP: 0033:0x459a59 [ 2720.074736][T20833] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2720.094360][T20833] RSP: 002b:00007fddb8c44c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2720.102767][T20833] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 2720.110743][T20833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2720.118721][T20833] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 2720.126691][T20833] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fddb8c456d4 [ 2720.134731][T20833] R13: 00000000004c9e7e R14: 00000000004e1a90 R15: 00000000ffffffff [ 2720.148276][T20833] memory: usage 4748kB, limit 0kB, failcnt 387 [ 2720.154659][T20833] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2720.161629][T20833] Memory cgroup stats for /syz3: [ 2720.161738][T20833] anon 2183168 [ 2720.161738][T20833] file 126976 [ 2720.161738][T20833] kernel_stack 131072 [ 2720.161738][T20833] slab 2514944 [ 2720.161738][T20833] sock 163840 [ 2720.161738][T20833] shmem 0 [ 2720.161738][T20833] file_mapped 0 [ 2720.161738][T20833] file_dirty 135168 [ 2720.161738][T20833] file_writeback 0 [ 2720.161738][T20833] anon_thp 2097152 [ 2720.161738][T20833] inactive_anon 0 [ 2720.161738][T20833] active_anon 2183168 [ 2720.161738][T20833] inactive_file 126976 [ 2720.161738][T20833] active_file 0 [ 2720.161738][T20833] unevictable 0 [ 2720.161738][T20833] slab_reclaimable 1757184 [ 2720.161738][T20833] slab_unreclaimable 757760 [ 2720.161738][T20833] pgfault 124245 [ 2720.161738][T20833] pgmajfault 0 [ 2720.161738][T20833] workingset_refault 0 [ 2720.161738][T20833] workingset_activate 0 [ 2720.161738][T20833] workingset_nodereclaim 0 [ 2720.161738][T20833] pgrefill 67 [ 2720.161738][T20833] pgscan 108 [ 2720.161738][T20833] pgsteal 75 [ 2720.161738][T20833] pgactivate 0 [ 2720.260265][T20833] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20831,uid=0 [ 2720.275901][T20833] Memory cgroup out of memory: Killed process 20831 (syz-executor.3) total-vm:72708kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 2720.297782][ T1065] oom_reaper: reaped process 20831 (syz-executor.3), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 18:19:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x47}, 0x10020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x10000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0xfffffffffffffec7, &(0x7f0000000640)=[{&(0x7f0000000340)="c944a5fcaeedbafda5709e3f0002", 0xe}], 0x1}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:19:00 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x30000000}, 0x0) 18:19:00 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x20480}, 0x0) [ 2720.342360][T20806] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2720.356426][T20806] CPU: 0 PID: 20806 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 2720.363996][T20806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2720.374143][T20806] Call Trace: [ 2720.377471][T20806] dump_stack+0x172/0x1f0 [ 2720.381829][T20806] dump_header+0x10b/0x82d [ 2720.386352][T20806] ? oom_kill_process+0x94/0x3f0 [ 2720.391310][T20806] oom_kill_process.cold+0x10/0x15 [ 2720.396438][T20806] out_of_memory+0x334/0x1340 [ 2720.401121][T20806] ? lock_downgrade+0x920/0x920 [ 2720.405978][T20806] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2720.412073][T20806] ? oom_killer_disable+0x280/0x280 [ 2720.419216][T20806] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2720.424958][T20806] ? memcg_stat_show+0xc40/0xc40 [ 2720.429916][T20806] ? do_raw_spin_unlock+0x57/0x270 [ 2720.435036][T20806] ? _raw_spin_unlock+0x2d/0x50 18:19:00 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r3, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x1, 0x0, 0x0}, 0x20) r6 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r6, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r5, 0x0, 0x0) 18:19:00 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1bf, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:19:00 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x18d, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:19:00 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, 0x0) [ 2720.439889][T20806] try_charge+0xf4b/0x1440 [ 2720.439912][T20806] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2720.439923][T20806] ? percpu_ref_tryget_live+0x111/0x290 [ 2720.439940][T20806] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2720.439955][T20806] ? __kasan_check_read+0x11/0x20 [ 2720.439971][T20806] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2720.439989][T20806] mem_cgroup_try_charge+0x136/0x590 [ 2720.440012][T20806] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2720.440027][T20806] wp_page_copy+0x407/0x1860 [ 2720.440041][T20806] ? find_held_lock+0x35/0x130 [ 2720.440055][T20806] ? do_wp_page+0x53b/0x15c0 [ 2720.440072][T20806] ? pmd_devmap_trans_unstable+0x220/0x220 [ 2720.440087][T20806] ? lock_downgrade+0x920/0x920 [ 2720.440104][T20806] ? swp_swapcount+0x540/0x540 [ 2720.440118][T20806] ? __kasan_check_read+0x11/0x20 [ 2720.440131][T20806] ? do_raw_spin_unlock+0x57/0x270 [ 2720.440150][T20806] do_wp_page+0x543/0x15c0 [ 2720.440169][T20806] ? finish_mkwrite_fault+0x6a0/0x6a0 [ 2720.440193][T20806] __handle_mm_fault+0x23ec/0x4040 [ 2720.440213][T20806] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2720.440228][T20806] ? handle_mm_fault+0x292/0xaa0 [ 2720.440256][T20806] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2720.440271][T20806] ? __kasan_check_read+0x11/0x20 [ 2720.440290][T20806] handle_mm_fault+0x3b7/0xaa0 [ 2720.440311][T20806] __do_page_fault+0x536/0xdd0 [ 2720.440335][T20806] do_page_fault+0x38/0x590 [ 2720.440353][T20806] page_fault+0x39/0x40 [ 2720.440365][T20806] RIP: 0033:0x403522 18:19:00 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0) [ 2720.440379][T20806] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 59 8f 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 79 44 05 00 48 [ 2720.440387][T20806] RSP: 002b:00007ffe9996abc0 EFLAGS: 00010246 [ 2720.440398][T20806] RAX: 0000000000000000 RBX: 0000000000297de6 RCX: 0000000000413660 [ 2720.440407][T20806] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffe9996bcf0 [ 2720.440414][T20806] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000c22940 18:19:00 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) [ 2720.440423][T20806] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe9996bcf0 [ 2720.440431][T20806] R13: 00007ffe9996bce0 R14: 0000000000000000 R15: 00007ffe9996bcf0 [ 2720.503861][T20842] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2720.601866][T20806] memory: usage 1396kB, limit 0kB, failcnt 1555 18:19:00 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0) [ 2720.820266][T20806] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2720.831936][T20806] Memory cgroup stats for /syz1: [ 2720.832050][T20806] anon 53248 [ 2720.832050][T20806] file 0 [ 2720.832050][T20806] kernel_stack 0 [ 2720.832050][T20806] slab 1355776 [ 2720.832050][T20806] sock 0 [ 2720.832050][T20806] shmem 0 [ 2720.832050][T20806] file_mapped 0 [ 2720.832050][T20806] file_dirty 0 [ 2720.832050][T20806] file_writeback 0 [ 2720.832050][T20806] anon_thp 0 [ 2720.832050][T20806] inactive_anon 0 [ 2720.832050][T20806] active_anon 53248 [ 2720.832050][T20806] inactive_file 0 [ 2720.832050][T20806] active_file 0 [ 2720.832050][T20806] unevictable 0 [ 2720.832050][T20806] slab_reclaimable 270336 [ 2720.832050][T20806] slab_unreclaimable 1085440 [ 2720.832050][T20806] pgfault 90453 [ 2720.832050][T20806] pgmajfault 0 [ 2720.832050][T20806] workingset_refault 66 [ 2720.832050][T20806] workingset_activate 0 [ 2720.832050][T20806] workingset_nodereclaim 0 [ 2720.832050][T20806] pgrefill 1281 [ 2720.832050][T20806] pgscan 1276 18:19:00 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8000a0}, 0x0) 18:19:00 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x58000000}, 0x0) [ 2720.832050][T20806] pgsteal 33 [ 2720.832050][T20806] pgactivate 1188 [ 2721.239787][T20806] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20806,uid=0 [ 2721.275170][T20841] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2721.284639][T20806] Memory cgroup out of memory: Killed process 20806 (syz-executor.1) total-vm:72444kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 2721.302455][T20808] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2721.320635][T20808] CPU: 0 PID: 20808 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 2721.328220][T20808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2721.338299][T20808] Call Trace: [ 2721.341614][T20808] dump_stack+0x172/0x1f0 [ 2721.345947][T20808] dump_header+0x10b/0x82d [ 2721.350358][T20808] ? oom_kill_process+0x94/0x3f0 [ 2721.355305][T20808] oom_kill_process.cold+0x10/0x15 [ 2721.355322][T20808] out_of_memory+0x334/0x1340 [ 2721.355342][T20808] ? lock_downgrade+0x920/0x920 [ 2721.369977][T20808] ? oom_killer_disable+0x280/0x280 [ 2721.375190][T20808] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2721.380750][T20808] ? memcg_stat_show+0xc40/0xc40 [ 2721.385704][T20808] ? do_raw_spin_unlock+0x57/0x270 [ 2721.390819][T20808] ? _raw_spin_unlock+0x2d/0x50 [ 2721.390841][T20808] try_charge+0xf4b/0x1440 [ 2721.390863][T20808] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2721.390876][T20808] ? percpu_ref_tryget_live+0x111/0x290 [ 2721.390894][T20808] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2721.390910][T20808] ? __kasan_check_read+0x11/0x20 [ 2721.390927][T20808] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2721.390954][T20808] mem_cgroup_try_charge+0x136/0x590 [ 2721.433271][T20808] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2721.438892][T20808] __handle_mm_fault+0x1f0d/0x4040 [ 2721.444002][T20808] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2721.449534][T20808] ? handle_mm_fault+0x292/0xaa0 [ 2721.454474][T20808] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2721.460698][T20808] ? __kasan_check_read+0x11/0x20 [ 2721.465741][T20808] handle_mm_fault+0x3b7/0xaa0 [ 2721.470516][T20808] __do_page_fault+0x536/0xdd0 [ 2721.475318][T20808] do_page_fault+0x38/0x590 [ 2721.479828][T20808] page_fault+0x39/0x40 [ 2721.483967][T20808] RIP: 0033:0x403522 [ 2721.487861][T20808] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 59 8f 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 79 44 05 00 48 [ 2721.507457][T20808] RSP: 002b:00007fff0856ce70 EFLAGS: 00010246 [ 2721.513508][T20808] RAX: 0000000000000000 RBX: 0000000000298093 RCX: 0000000000413660 [ 2721.521460][T20808] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007fff0856dfa0 [ 2721.529522][T20808] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000ce7940 [ 2721.537475][T20808] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff0856dfa0 [ 2721.545434][T20808] R13: 00007fff0856df90 R14: 0000000000000000 R15: 00007fff0856dfa0 [ 2721.619917][T20808] memory: usage 2384kB, limit 0kB, failcnt 395 [ 2721.626137][T20808] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2721.626143][T20808] Memory cgroup stats for /syz3: [ 2721.626240][T20808] anon 0 [ 2721.626240][T20808] file 126976 [ 2721.626240][T20808] kernel_stack 65536 [ 2721.626240][T20808] slab 2514944 [ 2721.626240][T20808] sock 163840 [ 2721.626240][T20808] shmem 0 [ 2721.626240][T20808] file_mapped 0 [ 2721.626240][T20808] file_dirty 135168 [ 2721.626240][T20808] file_writeback 0 [ 2721.626240][T20808] anon_thp 0 [ 2721.626240][T20808] inactive_anon 0 [ 2721.626240][T20808] active_anon 0 [ 2721.626240][T20808] inactive_file 126976 [ 2721.626240][T20808] active_file 0 [ 2721.626240][T20808] unevictable 0 [ 2721.626240][T20808] slab_reclaimable 1757184 [ 2721.626240][T20808] slab_unreclaimable 757760 [ 2721.626240][T20808] pgfault 124245 [ 2721.626240][T20808] pgmajfault 0 [ 2721.626240][T20808] workingset_refault 0 [ 2721.626240][T20808] workingset_activate 0 [ 2721.626240][T20808] workingset_nodereclaim 0 [ 2721.626240][T20808] pgrefill 67 [ 2721.626240][T20808] pgscan 108 [ 2721.626240][T20808] pgsteal 75 [ 2721.626240][T20808] pgactivate 0 [ 2721.651271][T20808] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20808,uid=0 [ 2721.744692][T20808] Memory cgroup out of memory: Killed process 20808 (syz-executor.3) total-vm:72444kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 2721.762823][ T1065] oom_reaper: reaped process 20808 (syz-executor.3), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 2721.840356][T20842] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. 18:19:02 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x1a0ffffffff) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f00000005c0)='cgroup.max.descendants\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0xd, 0x1, 0x3, 0x0}, 0xe501cf90cb3582c4) r10 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r10, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0xfffffffffffffec7, &(0x7f0000000640)=[{&(0x7f0000000340)="c944a5fcaeedbafda5709e3f0002", 0xe}], 0x1}, 0xfc00) sendmsg$kcm(r10, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0), 0xc) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={0xffffffffffffffff, r11, 0xe, 0x1}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r9, 0x0, 0x0) 18:19:02 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0) 18:19:02 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x0) 18:19:14 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80040200}, 0x0) 18:19:14 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1c0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:19:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r3, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x1, 0x0, 0x0}, 0x20) r6 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r6, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r5, 0x0, 0x0) 18:19:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNSETCARRIER(r7, 0x400454e2, &(0x7f00000004c0)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r8 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r8, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0xfffffffffffffec7, &(0x7f0000000640)=[{&(0x7f0000000340)="c944a5fcaeedbafda5709e3f0002", 0xe}], 0x1}, 0xfc00) sendmsg$kcm(r8, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:19:14 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1030000}, 0x0) 18:19:14 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x18e, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:19:14 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x84050000}, 0x0) [ 2734.606010][T20902] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. 18:19:14 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0) 18:19:14 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8dffffff}, 0x0) 18:19:14 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x0) 18:19:14 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xa0008000}, 0x0) 18:19:14 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xac050000}, 0x0) 18:19:14 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0) [ 2741.135770][T20907] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2741.147647][T20945] IPVS: ftp: loaded support on port[0] = 21 [ 2741.177742][T20947] IPVS: ftp: loaded support on port[0] = 21 [ 2747.001476][T20938] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2752.820601][T20910] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. 18:19:32 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1c1, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="5ea03f6db511aee466448c41d0a37c5d52fbf6d123b2238bc0dc67ffb8a030dd7d9264060255082b5024d1bd6e117d7a20ca56078066e91049b134eb2db929be3f0ac2f70eacf24ae891471c290affb67848907db14e21832c3df1d097ecf14e120ecc990d234042832cc0352f4c22b3828a9ad20ee214973a95bd34110513eb0b903c83d4b8aa755076804cf502013c1bbace98bc821e5a8ba782e18f8fa11b088b70db05e454dd159d018ed06d197dd6014565077d4ebfb8b7db6d35f609ed05ffbcf3380687357f1a593b6f2842e76ff1df4bd5ae29584f89e9d2e50ccbb2964e2e6d3487a509a21e1f6c0ab2dcd9f70777a5c1d58dbf37d5ad66d553898b5620b1e35eb2a96ec010bb87957b6193071706744e312fff95abe536818207e41f7af43e08cca42680fadb739d70aafbeafa7fae70e4526c97e9edcac5648e4c38e10efd34d9f09592c73542bf127a1e68cf8fc3e58e78142b5e5fbbee0175350ab1a8aeedc6c8072ccaa476da314b578854756bb2db47caff231a7f64c51d1d7b4ed1e7cde59355285ef2c2be4ca6f0f6d01dc2d9845505f3a97a57f240c0b0f18fb4936dbb6cf7b6dbf6ec28e61a91ae6e748d0adec1c02c7a39019853b7497e5c3fdd571058f3e648b9f14080442b7279b28de971b6c8b97f1cea66a08bf83bee0707cae6972648a7f3924d63fd69ed03a13aaeba0d9e3bb239544359153fa124e70f873f9d10c07a5a0b58e82536153849350203d848998d61cbaa4f67dc73c84dbcd45939a3f01839e0897a3271118e304694db3ab806e05d206bd3c42dc79be167c9c297559d9a85d5eb04369c534360045b1a80e28d1466705873e3d8bfa73c44d59473df58b8a0305e6a5ec7300183cc60115288e393ca5d160a0fc8eaec5a77c0ba0798eed1e18890e2403ee8d156514eb6f5dc075d4a1f7ce70ae6fab8c82c6ecbcf3e973bc6a461f2f739f9820d66e28f3e9834a7ac8ed81a352c9f7a0882b14b2044ededaf694eba063ad3192f4dbf6ba79288a47ccbf6546c4fbbaefc864694e7063e39cb12ec68dca7b20986c48ae94022cdcb888222ee7f05f55ddea71f0298223b3c4109c15dd7ec41e78aef8dd5ff55c89ce7900261d62b35d12b813b8a385863f3c9d1f4ed37d7cd5314226afdb2892ddaeb1eec542cc8c040fc64cd3ae4dcd7264d68d247acbb353e40a33d5682ce2a4a005a2975908cbd0526beb6048840f3499cfcebba06eaf0c51c8b760593098a3def21b3664e7d42253f8c990538d382bf0768cdc106fac3699bcb5b12279f81dc9ba6ed1e2f7820f6cf8a2b3e4c88a33d9f0a32f60673b5897cadbbe7dffb9cf7f6b5a5d62701eba230fb2daa966a63d91e86c02472bd8114e5ba5df8152067086c142e6cd88289a501fc3353c1d0f17a663b179c446220d970d50a9c9adbb0b990be52ad19cd36669df47ff6e1f6fec4b7b1693c802d736aebe985e0c3c59c753ed95d79a7564880c4e2ffe5c9e59e818d2810468c48a4e75f15f3f252f2d780dd30717fe572c5d55adf090223fb30216c3882e9be19cb627aab1fdad81f8f117a90c2e7874edf1c4dc8e2da674348855659434eaba5c5063a29c28f4d22ce5515464b53967ab33d82f0e5afa98322c31e789be5d7600c726bd467d3be3eb4e0df733b91eecd95a5d1648ef268c43906b187ab24bb83bc80fa2ba4ab21d99c0aadf87d15cec51bf2cd52412ec638b43c27551f039e58026e6e910c7f327afe2e363491cfed5caadc8ca674659004f24991fdf76faac054dff64fb2282fc92d3b9ae32222833f1ae905dfa1dada3116765ef2b04ae6124f44cc7f83bd8f159eaa5290cc9e691fa77bec9c35a625b1b24cde8c9363b37b6f77ce844ea77752891b4c837c7c9648f7a16da6aadaf8912ba392c9984d26977c4b99e5c94925f0c6b9a48f2701eeb477aa0a99adb7fd145cd01b3cee9ad3c835690cda9ee1302fdf301558bb1979e177f18876b3fbe7b01597260a33822a63cdc760edee9839d75e0de20acdc8ae98a008d7390e4bb095650149b1bae84d240bd6480fbb10c1930f3a61dbfc3cb17888e33fb12f2dec1523380699b28300bf8b377e4357d5385176a35edbbb6e81e17e42fb07964452b53a069704f597cab1c646a8e8b99c0411e18def7e1c26e7cab72369228dfeb0d306cd46cdd9299538c89697c1c681d577290c2b03c9d84cd1b5803ff9291a28f3efbc3112b53e5cea348d364a954ac78db91e610df86be53c20707401d70f7768cdf0566420c1dfb7216877784244b5a84abc61e577b11b5dfd194018dbaa4024b57e6b0dcba72f621f62938f7a717c9a899aaa78b595f01c48f94c0bbf68c7cfb16c59269f48611dc9d7077b6805edbe30f2c7988a18f5ef3928a769f011936af9cb4665f48ce17afa1bb3f614e76b40a7e0920b9942362c41589f2be923530a186693a429a8e2767ec30d02407d4fbb6a397f52ec48fdb3fc0d2863f301585a14941cfac093cf8e53e91762db548306961979d396e4645f5698aa36db22603d1893149ba2d7aaa44bb14e0eceafd84cddb3c5c3e2a8eeb02a96e9d9f08db989b450614b0767314e4024114c785c95272226f1c2e2a29a07c7c133abaf254fb9d64a1c597ca32c3a1b17bf262907d9a5a468d37986a300f9a1274718521d76cc1fa8ae122f5dc46ba1c998c3d66bbfdece070f37ac35c7d7de0bffc8369f222fe768273edb69115f94177e9ab237ba50eafdefd5a2369059be377db15661961961c3bc60e6b1af713bd20d70b315025a249d5a6d67e340582404b561ae11fcc711c21c80a56d0a6b964d333e0c1a53333a2ebf4ebda28a59680639c0fd282d64539143b2d416accb7b5cfa16fb2dd9b767f79fe9c26f2b70972b2225ae8beae908dfcb34bbe30870369ea766479db570787a6e11d7544f32888b637e3cbbc4fc85e34d7847e26779e8a8d940ae28de2f2d122c1dba8948af913b2ba890cb12cf2db92ae75aac53614d6faaed47b4373147c6c93880646ee35d85394d25d9dadf73ea35ada21cdbc89038e90e9a28949fd84bac77ea7b2f79ece1c3c2defe5faf9b001ac4750920fc6414569413fd2cdb4e49751fa9c1a531d0081856aa2a9f884040610f9782eeb2c135afc0f60c09e1d5c3a83311010ead8b7bebe91bf339b7d88fab261596465fbbb8942fd32aac8661bb3ad21696895365e258f2a6d4e9049f93545e971fc053317082a2c6ebe65e571b29cdcbca06e5f422c6ea288f98d282ad5c9475a3e9258b4a21360d19cb91c99aeb6476f21049c8d6c9918a9ba7ced60b1f97b9b9cacef6958da3fb8b762f35043539c145956487110ccd420783f3c4490cecb089179c99a89e07fc14d2a8e8a78cc1cbbf0caaf9f8a6850fa8f150c45b616c102a09b995ac9408fdfd26b79339ad175691cc065f7911d99c53b249f03a96b3df1cca6f9dfd2d3c1e732681d58cc2fc671010e7bd98c006ba63b703266aa2f1c3d6fbc148902e425d83d044f014b9e7b3977b8fda094e02dd6dd8298983d5d891d66db077233fc155dad208bfe7c6585bdc6d246bba81cacff55994ee88f9163b27f51d6ae47d0b296124d3018f69f79528797e8aaf21d8035c044821137b0f7e7b3b41b8019379002ae9bc70dc1bc377b6fc0e2a40accf480ae0dc53e61a91d1815ea796fc14d6abddcee1fd965adc3a441333d430568bcb29f0cac078b70a4f6d1011c1822708fb1bbeeaea6433cf5cdcf9aec7bbce4c92e6fdda88b3dc48a4d42f4348a05fee23c41869ca326d39c0605d9144f82bd0c3c2f9ac9ae0b1f5fabe0ab5af39babf027a83df5b1c58513d27cb5babc9a5be073043543bff731da9bb715e57678507baf194fec9efa3235631b9594682dd531c3762432e25c25c048e600cc7c318e82b720db17436fbc054c04f59923ae61ec0b4896d08daab3b617bd8d239c24e95c8fcd1a7dd64a8a3d7e158c626833a2735c9e96514639f007983da3bb43a6f18e40d3eda0cc9468d118d28c6bda3ebae6c3ae2c14b1b02305abd16b7c6be707ffaf59142988eb931275bd4c38aefefbbaa95e16d7551f5f1fcfa9744a357d21c76b28747e5e94683d455530433876d509793ed409847f8a972450285f9e9f2dc665e78c7747418523bb51ef8191231e989ca93ef75e9ca27f38a2e5327d29c265c39f12fb1d01a723a902292c6bc06fdc6856d4829680909db55c4650449d0a2d2dad92cfbc8c03fdcb5656a56fded95b0ac41595a2a5bb34d5feb4e06da8adb5143eef67cdc3d18edd095c086d99cb43cddbbfeeb0beadadc1e30ec57bf760592e6365ffacbd6134b7262966af9c808f980fff81280566c79d3a2a15654c597aa050dda7ace4b5298f512b445023d4d86bc37c85ee1a2d7637f3ea0eafd6440893f43a2a912735d0dc8e2827148893f7554897fcb91a4f5581d793fa707fa181dcf69e3fddf498a19767922f4c52fd6797bfba85a61f9c5fe10970b06c7006d7b804f5d1db40b6f606f532cc5a6b93be6473bcbad8f06ead3995cb5f42ee8ddc658ac9085d0c6046b07be03837d5d68504c04b2a769db69e04aa1e414eec40118856f58ac5d3765e5d5038b20d2966389d0b462dfd71065140bf8ae0bb6eb105ac8160c8cc7641b14aaf0304731ab4d9d4bef89d62dd137d7f88645f941999e2fbfbd171a445c2702a87adcb5fd7d7e36d53b715e6ee87fcebdd0b9fef00182fa8e7ec8e7b5a3ac9d332ce92334a8e1ce0d493cff3c2a4fe1f902da785deb68bf936eabfe59a2f698b2d8d0dbd11c25f413ad4b7c554ed5d9e69a1c44c0dd523b47fc66e474357bd6b1e49fc2e12e30e206347d479ce0c20ef4b12e5d63de14e4b7550772a1ef0b5327d755aef1766da85e429a7920e4652d772619ea3526b330778ad35966c12e45a85ce6a5e3e99372a8c621e17ac2c3ff024c625a5599d41ad794e99ceeecb0bf334fd56b823e5b9406c6089fa406aaabe75afd7413affdc1019729d6f72a4b1a330412c03d9f75dbedb88bf556ee57a642fd1802e35807878f7aa15af0a00bc8fa8a4d01ff3e60249d07e780244d387cc60d7f25869f50580f0136391faec535332727b7ec85b12e3be7d8f34369f00b888133c3ad0ffa24bd03c5183d55172076b989b4151227467b915ab6e8347e15c99f2f9051d6ae0b2b72a717536899473b7c04160cc8d6d23a3f0ee63ae0ae4f79523af48779d836f0e0ae4b92ee78b820a9f6319ab064d11b7fb3e91579528a91c7c2521332ffaceb00ebaded7ef22d0ff9986273759b08b9f75565fe5c194bbfe704eda0fc0662db8cc3002b05dc39792540278a2c12501680ef4b95b3eac0573e559c6cf0badbe364e3bcaa14661afe1320a32d4e9644fdcd44b9dce2fee476e8f840a91a66cd877d3e5bbb5b595e654580955f4ba8548b41220a355a805669de9f3bc50157e594f5b444b88a320d80522e51bce929200d71e10e4a85c3d12ee133dda3fcdf7a454773a0575f7d9bfcb8c8646ffbad451446daf3ea742c0fa6bbb2ca4db442e60492ac9e131037278fa5552c0ed00c84469cd11600d3365617f57af4178fc264500327c48ae67de27c62766f9d6848e57f2ce0eb75e1cf72bafb21541c0370f73fc77e0d8b0b11056362a3936e38271259377d40fbc257d8c72b3e583fc6b0e20420dbc99a7932cb305fa9e61bd0de0d9758d35fe0ee13d0eaa782a3059e10caa61df3903aa1061298aced4712d998181e7edd03a11041de4018fe56cae17e0dced027ab7a0a27a6415d8d", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) [ 2753.085030][T20945] chnl_net:caif_netlink_parms(): no params data found [ 2753.206757][T20953] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2759.035060][T20947] chnl_net:caif_netlink_parms(): no params data found [ 2764.819220][T20945] bridge0: port 1(bridge_slave_0) entered blocking state [ 2764.827864][T20945] bridge0: port 1(bridge_slave_0) entered disabled state [ 2764.837903][T20945] device bridge_slave_0 entered promiscuous mode [ 2770.545742][T20945] bridge0: port 2(bridge_slave_1) entered blocking state [ 2770.554841][T20945] bridge0: port 2(bridge_slave_1) entered disabled state [ 2770.564785][T20945] device bridge_slave_1 entered promiscuous mode [ 2776.291520][T20947] bridge0: port 1(bridge_slave_0) entered blocking state [ 2776.298701][T20947] bridge0: port 1(bridge_slave_0) entered disabled state [ 2776.310791][T20947] device bridge_slave_0 entered promiscuous mode [ 2776.321846][T20945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2776.332387][T20947] bridge0: port 2(bridge_slave_1) entered blocking state [ 2776.339467][T20947] bridge0: port 2(bridge_slave_1) entered disabled state [ 2776.349208][T20947] device bridge_slave_1 entered promiscuous mode [ 2776.359175][T20945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2776.397642][T20947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2776.409989][T20945] team0: Port device team_slave_0 added [ 2776.417618][T20945] team0: Port device team_slave_1 added [ 2782.030700][T20947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2782.133317][T20945] device hsr_slave_0 entered promiscuous mode [ 2782.170738][T20945] device hsr_slave_1 entered promiscuous mode [ 2782.239870][T20945] debugfs: Directory 'hsr0' with parent '/' already present! [ 2782.257640][T20947] team0: Port device team_slave_0 added [ 2782.291675][T20947] team0: Port device team_slave_1 added [ 2782.383894][T20947] device hsr_slave_0 entered promiscuous mode [ 2782.440904][T20947] device hsr_slave_1 entered promiscuous mode [ 2782.529746][T20947] debugfs: Directory 'hsr0' with parent '/' already present! [ 2782.833603][T20945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2782.976034][T20947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2782.995905][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2783.007582][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2783.064185][T20945] 8021q: adding VLAN 0 to HW filter on device team0 [ 2783.077871][T20786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2783.087087][T20786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2783.106021][T20947] 8021q: adding VLAN 0 to HW filter on device team0 [ 2783.163839][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2783.174385][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2783.183523][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state [ 2783.190638][ T5761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2783.200572][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2783.210270][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2783.218854][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state [ 2783.225980][ T5761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2783.235440][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2783.313380][T20786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2783.322835][T20786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2783.332815][T20786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2783.343824][T20786] bridge0: port 1(bridge_slave_0) entered blocking state [ 2783.350941][T20786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2783.361991][T20786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2783.371495][T20786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2783.381986][T20786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2783.391054][T20786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2783.401715][T20786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2783.410505][T20786] bridge0: port 2(bridge_slave_1) entered blocking state [ 2783.417550][T20786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2783.514691][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2783.525006][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2783.534199][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2783.546977][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2783.556973][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2783.568252][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2783.578555][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2783.587926][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2783.597482][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2783.607083][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2783.626025][T20945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2783.685963][T20786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2783.695851][T20786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2783.705273][T20786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2783.722246][T20786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2783.752589][T20785] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2783.761638][T20785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2783.771126][T20785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2783.781497][T20785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2783.791470][T20785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2783.816832][T20947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2783.864886][T20945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2783.953291][T20947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2784.328932][T20965] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2784.360978][T20965] CPU: 1 PID: 20965 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 2784.368681][T20965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2784.378837][T20965] Call Trace: [ 2784.382150][T20965] dump_stack+0x172/0x1f0 [ 2784.386491][T20965] dump_header+0x10b/0x82d [ 2784.390920][T20965] oom_kill_process.cold+0x10/0x15 [ 2784.396053][T20965] out_of_memory+0x334/0x1340 [ 2784.400739][T20965] ? __sched_text_start+0x8/0x8 [ 2784.405623][T20965] ? oom_killer_disable+0x280/0x280 [ 2784.410844][T20965] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2784.416410][T20965] ? memcg_stat_show+0xc40/0xc40 [ 2784.421367][T20965] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2784.427184][T20965] ? cgroup_file_notify+0x140/0x1b0 [ 2784.432394][T20965] memory_max_write+0x262/0x3a0 [ 2784.437260][T20965] ? mem_cgroup_write+0x370/0x370 [ 2784.442300][T20965] ? retint_kernel+0x2b/0x2b [ 2784.446980][T20965] cgroup_file_write+0x241/0x790 [ 2784.452044][T20965] ? mem_cgroup_write+0x370/0x370 [ 2784.457060][T20965] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2784.462813][T20965] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2784.468444][T20965] kernfs_fop_write+0x2b8/0x480 [ 2784.473288][T20965] __vfs_write+0x8a/0x110 [ 2784.477638][T20965] ? kernfs_fop_open+0xd80/0xd80 [ 2784.482558][T20965] vfs_write+0x268/0x5d0 [ 2784.486886][T20965] ksys_write+0x14f/0x290 [ 2784.491211][T20965] ? __ia32_sys_read+0xb0/0xb0 [ 2784.495991][T20965] ? do_syscall_64+0x26/0x760 [ 2784.500665][T20965] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2784.506712][T20965] ? do_syscall_64+0x26/0x760 [ 2784.511374][T20965] __x64_sys_write+0x73/0xb0 [ 2784.515950][T20965] do_syscall_64+0xfa/0x760 [ 2784.520452][T20965] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2784.526322][T20965] RIP: 0033:0x459a59 [ 2784.530203][T20965] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2784.549821][T20965] RSP: 002b:00007f9ec25b5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2784.558229][T20965] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 2784.566195][T20965] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2784.574161][T20965] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2784.582633][T20965] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9ec25b66d4 [ 2784.590590][T20965] R13: 00000000004c9e7e R14: 00000000004e1a90 R15: 00000000ffffffff [ 2784.602918][T20965] memory: usage 3676kB, limit 0kB, failcnt 1556 [ 2784.609412][T20965] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2784.616691][T20965] Memory cgroup stats for /syz1: [ 2784.617943][T20965] anon 2125824 [ 2784.617943][T20965] file 0 [ 2784.617943][T20965] kernel_stack 65536 [ 2784.617943][T20965] slab 1355776 [ 2784.617943][T20965] sock 0 [ 2784.617943][T20965] shmem 0 [ 2784.617943][T20965] file_mapped 0 [ 2784.617943][T20965] file_dirty 0 [ 2784.617943][T20965] file_writeback 0 [ 2784.617943][T20965] anon_thp 2097152 [ 2784.617943][T20965] inactive_anon 0 [ 2784.617943][T20965] active_anon 2125824 [ 2784.617943][T20965] inactive_file 0 [ 2784.617943][T20965] active_file 0 [ 2784.617943][T20965] unevictable 0 [ 2784.617943][T20965] slab_reclaimable 270336 [ 2784.617943][T20965] slab_unreclaimable 1085440 [ 2784.617943][T20965] pgfault 90519 [ 2784.617943][T20965] pgmajfault 0 [ 2784.617943][T20965] workingset_refault 66 [ 2784.617943][T20965] workingset_activate 0 [ 2784.617943][T20965] workingset_nodereclaim 0 [ 2784.617943][T20965] pgrefill 1281 [ 2784.617943][T20965] pgscan 1276 [ 2784.617943][T20965] pgsteal 33 [ 2784.617943][T20965] pgactivate 1188 [ 2784.714490][T20965] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 2784.714514][T20965] ,cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20963,uid=0 [ 2784.743358][T20965] Memory cgroup out of memory: Killed process 20963 (syz-executor.1) total-vm:72840kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 2784.779543][ T1065] oom_reaper: reaped process 20963 (syz-executor.1), now anon-rss:0kB, file-rss:34860kB, shmem-rss:0kB [ 2784.791524][T20972] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2784.802118][T20972] CPU: 1 PID: 20972 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 2784.809676][T20972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2784.819736][T20972] Call Trace: [ 2784.819761][T20972] dump_stack+0x172/0x1f0 [ 2784.819781][T20972] dump_header+0x10b/0x82d [ 2784.819798][T20972] oom_kill_process.cold+0x10/0x15 [ 2784.819813][T20972] out_of_memory+0x334/0x1340 [ 2784.819834][T20972] ? oom_killer_disable+0x280/0x280 [ 2784.827441][T20972] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2784.841593][T20972] ? memcg_stat_show+0xc40/0xc40 [ 2784.841618][T20972] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2784.841635][T20972] ? cgroup_file_notify+0x140/0x1b0 [ 2784.841654][T20972] memory_max_write+0x262/0x3a0 [ 2784.868299][T20972] ? mem_cgroup_write+0x370/0x370 [ 2784.868319][T20972] ? lock_acquire+0x190/0x410 [ 2784.878162][T20972] ? kernfs_fop_write+0x227/0x480 [ 2784.878186][T20972] cgroup_file_write+0x241/0x790 [ 2784.878204][T20972] ? mem_cgroup_write+0x370/0x370 [ 2784.897815][T20972] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2784.903481][T20972] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2784.909124][T20972] kernfs_fop_write+0x2b8/0x480 [ 2784.913989][T20972] __vfs_write+0x8a/0x110 [ 2784.918322][T20972] ? kernfs_fop_open+0xd80/0xd80 [ 2784.923263][T20972] vfs_write+0x268/0x5d0 [ 2784.927509][T20972] ksys_write+0x14f/0x290 [ 2784.931843][T20972] ? __ia32_sys_read+0xb0/0xb0 [ 2784.936616][T20972] __x64_sys_write+0x73/0xb0 [ 2784.941206][T20972] do_syscall_64+0xfa/0x760 [ 2784.945713][T20972] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2784.951613][T20972] RIP: 0033:0x459a59 [ 2784.955507][T20972] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2784.975116][T20972] RSP: 002b:00007f534b194c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2784.983522][T20972] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 2784.991508][T20972] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2784.999476][T20972] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2785.007446][T20972] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f534b1956d4 [ 2785.015413][T20972] R13: 00000000004c9e7e R14: 00000000004e1a90 R15: 00000000ffffffff [ 2785.266753][T20972] memory: usage 4600kB, limit 0kB, failcnt 396 [ 2785.273508][T20972] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2785.283287][T20972] Memory cgroup stats for /syz3: [ 2785.283409][T20972] anon 2150400 [ 2785.283409][T20972] file 126976 [ 2785.283409][T20972] kernel_stack 65536 [ 2785.283409][T20972] slab 2379776 [ 2785.283409][T20972] sock 163840 [ 2785.283409][T20972] shmem 0 [ 2785.283409][T20972] file_mapped 0 [ 2785.283409][T20972] file_dirty 135168 [ 2785.283409][T20972] file_writeback 0 [ 2785.283409][T20972] anon_thp 2097152 [ 2785.283409][T20972] inactive_anon 0 [ 2785.283409][T20972] active_anon 2150400 [ 2785.283409][T20972] inactive_file 126976 [ 2785.283409][T20972] active_file 0 [ 2785.283409][T20972] unevictable 0 [ 2785.283409][T20972] slab_reclaimable 1622016 [ 2785.283409][T20972] slab_unreclaimable 757760 [ 2785.283409][T20972] pgfault 124344 [ 2785.283409][T20972] pgmajfault 0 [ 2785.283409][T20972] workingset_refault 0 [ 2785.283409][T20972] workingset_activate 0 [ 2785.283409][T20972] workingset_nodereclaim 0 [ 2785.283409][T20972] pgrefill 67 [ 2785.283409][T20972] pgscan 108 [ 2785.283409][T20972] pgsteal 75 [ 2785.283409][T20972] pgactivate 0 [ 2785.390557][T20972] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20971,uid=0 [ 2785.449782][T20972] Memory cgroup out of memory: Killed process 20971 (syz-executor.3) total-vm:72576kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 18:20:05 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5000000}, 0x0) [ 2785.519381][ T1065] oom_reaper: reaped process 20971 (syz-executor.3), now anon-rss:0kB, file-rss:34852kB, shmem-rss:0kB [ 2785.563027][T20947] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2785.594213][T20947] CPU: 0 PID: 20947 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 2785.601810][T20947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2785.611860][T20947] Call Trace: [ 2785.615154][T20947] dump_stack+0x172/0x1f0 [ 2785.619490][T20947] dump_header+0x10b/0x82d [ 2785.623905][T20947] ? oom_kill_process+0x94/0x3f0 [ 2785.628845][T20947] oom_kill_process.cold+0x10/0x15 [ 2785.633963][T20947] out_of_memory+0x334/0x1340 [ 2785.638650][T20947] ? lock_downgrade+0x920/0x920 [ 2785.643530][T20947] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2785.649353][T20947] ? oom_killer_disable+0x280/0x280 [ 2785.654568][T20947] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2785.660119][T20947] ? memcg_stat_show+0xc40/0xc40 [ 2785.665067][T20947] ? do_raw_spin_unlock+0x57/0x270 [ 2785.670187][T20947] ? _raw_spin_unlock+0x2d/0x50 [ 2785.675045][T20947] try_charge+0xf4b/0x1440 [ 2785.679474][T20947] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2785.685013][T20947] ? percpu_ref_tryget_live+0x111/0x290 [ 2785.690566][T20947] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2785.696808][T20947] ? __kasan_check_read+0x11/0x20 [ 2785.701838][T20947] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2785.707389][T20947] mem_cgroup_try_charge+0x136/0x590 [ 2785.712688][T20947] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2785.718341][T20947] __handle_mm_fault+0x1f0d/0x4040 [ 2785.723461][T20947] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2785.729007][T20947] ? handle_mm_fault+0x292/0xaa0 [ 2785.734005][T20947] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2785.740253][T20947] ? __kasan_check_read+0x11/0x20 [ 2785.745290][T20947] handle_mm_fault+0x3b7/0xaa0 [ 2785.745314][T20947] __do_page_fault+0x536/0xdd0 [ 2785.745338][T20947] do_page_fault+0x38/0x590 [ 2785.745358][T20947] page_fault+0x39/0x40 [ 2785.759333][T20947] RIP: 0033:0x42ffac [ 2785.759350][T20947] Code: 83 c0 17 41 55 41 54 55 53 48 89 c5 48 83 e5 f0 48 89 fb 48 81 ec 98 00 00 00 48 83 f8 20 b8 20 00 00 00 48 0f 42 e8 48 85 ff <48> 89 74 24 08 0f 84 3a 08 00 00 48 3b 2d ba 4f 64 00 77 70 89 ef [ 2785.759365][T20947] RSP: 002b:00007ffea9d86fa0 EFLAGS: 00010202 [ 2785.786961][T20947] RAX: 0000000000000020 RBX: 0000000000716640 RCX: 0000000000458dc4 [ 2785.786970][T20947] RDX: 00007ffea9d87090 RSI: 0000000000008030 RDI: 0000000000716640 [ 2785.786978][T20947] RBP: 0000000000008040 R08: 0000000000000001 R09: 0000000002a69940 [ 2785.786985][T20947] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffea9d88270 [ 2785.786992][T20947] R13: 00007ffea9d88260 R14: 0000000000000000 R15: 00007ffea9d88270 [ 2785.803049][T20947] memory: usage 2272kB, limit 0kB, failcnt 404 [ 2785.803067][T20947] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2785.803073][T20947] Memory cgroup stats for /syz3: [ 2785.803180][T20947] anon 40960 [ 2785.803180][T20947] file 126976 [ 2785.803180][T20947] kernel_stack 65536 [ 2785.803180][T20947] slab 2379776 [ 2785.803180][T20947] sock 163840 [ 2785.803180][T20947] shmem 0 [ 2785.803180][T20947] file_mapped 0 [ 2785.803180][T20947] file_dirty 135168 [ 2785.803180][T20947] file_writeback 0 [ 2785.803180][T20947] anon_thp 0 [ 2785.803180][T20947] inactive_anon 0 [ 2785.803180][T20947] active_anon 40960 [ 2785.803180][T20947] inactive_file 126976 [ 2785.803180][T20947] active_file 0 [ 2785.803180][T20947] unevictable 0 [ 2785.803180][T20947] slab_reclaimable 1622016 [ 2785.803180][T20947] slab_unreclaimable 757760 [ 2785.803180][T20947] pgfault 124344 [ 2785.803180][T20947] pgmajfault 0 [ 2785.803180][T20947] workingset_refault 0 [ 2785.803180][T20947] workingset_activate 0 [ 2785.803180][T20947] workingset_nodereclaim 0 [ 2785.803180][T20947] pgrefill 67 [ 2785.803180][T20947] pgscan 108 [ 2785.803180][T20947] pgsteal 75 [ 2785.803180][T20947] pgactivate 0 [ 2785.803202][T20947] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20947,uid=0 [ 2785.803331][T20947] Memory cgroup out of memory: Killed process 20947 (syz-executor.3) total-vm:72444kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 18:20:06 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x1a0ffffffff) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161) write$cgroup_subtree(r5, &(0x7f00000004c0)={[{0x9f7e879e3a6b4d6b, 'io'}, {0x2d, 'memory'}, {0x2d, 'cpu'}, {0x3e, 'memory'}, {0x2d, 'memory'}, {0x2b, 'io'}, {0x6, 'memory'}, {0x2d, 'pids'}, {0x2b, 'rdma'}, {0x2d, 'io'}]}, 0x3d) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r8 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r9 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r9, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0xfffffffffffffec7, &(0x7f0000000640)=[{&(0x7f0000000340)="c944a5fcaeedbafda5709e3f0002", 0xe}], 0x1}, 0xfc00) sendmsg$kcm(r9, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r8, 0x0, 0x0) 18:20:06 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xe8030000}, 0x0) 18:20:06 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:20:06 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x18f, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:20:06 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1c2, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:20:06 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:20:06 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6000000}, 0x0) [ 2786.593466][T20945] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2786.623732][T20945] CPU: 0 PID: 20945 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 2786.631353][T20945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2786.641418][T20945] Call Trace: [ 2786.641823][T20980] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2786.644716][T20945] dump_stack+0x172/0x1f0 [ 2786.644738][T20945] dump_header+0x10b/0x82d [ 2786.644752][T20945] ? oom_kill_process+0x94/0x3f0 [ 2786.644773][T20945] oom_kill_process.cold+0x10/0x15 [ 2786.672938][T20945] out_of_memory+0x334/0x1340 [ 2786.677633][T20945] ? lock_downgrade+0x920/0x920 [ 2786.682504][T20945] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2786.688425][T20945] ? oom_killer_disable+0x280/0x280 [ 2786.693641][T20945] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2786.693654][T20945] ? memcg_stat_show+0xc40/0xc40 [ 2786.693671][T20945] ? do_raw_spin_unlock+0x57/0x270 [ 2786.693687][T20945] ? _raw_spin_unlock+0x2d/0x50 [ 2786.693705][T20945] try_charge+0xf4b/0x1440 [ 2786.693729][T20945] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2786.693743][T20945] ? percpu_ref_tryget_live+0x111/0x290 [ 2786.693762][T20945] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2786.693778][T20945] ? __kasan_check_read+0x11/0x20 [ 2786.693803][T20945] ? get_mem_cgroup_from_mm+0x156/0x320 [ 2786.693821][T20945] mem_cgroup_try_charge+0x136/0x590 [ 2786.693842][T20945] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2786.757296][T20945] wp_page_copy+0x407/0x1860 [ 2786.761876][T20945] ? find_held_lock+0x35/0x130 [ 2786.766622][T20945] ? do_wp_page+0x53b/0x15c0 [ 2786.771197][T20945] ? pmd_devmap_trans_unstable+0x220/0x220 [ 2786.776989][T20945] ? lock_downgrade+0x920/0x920 [ 2786.781823][T20945] ? swp_swapcount+0x540/0x540 [ 2786.786570][T20945] ? __kasan_check_read+0x11/0x20 [ 2786.791576][T20945] ? do_raw_spin_unlock+0x57/0x270 [ 2786.796668][T20945] do_wp_page+0x543/0x15c0 [ 2786.801080][T20945] ? finish_mkwrite_fault+0x6a0/0x6a0 [ 2786.806440][T20945] __handle_mm_fault+0x23ec/0x4040 [ 2786.811540][T20945] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2786.817067][T20945] ? handle_mm_fault+0x292/0xaa0 [ 2786.822270][T20945] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2786.828491][T20945] ? __kasan_check_read+0x11/0x20 [ 2786.833502][T20945] handle_mm_fault+0x3b7/0xaa0 [ 2786.838253][T20945] __do_page_fault+0x536/0xdd0 [ 2786.843009][T20945] do_page_fault+0x38/0x590 [ 2786.847499][T20945] page_fault+0x39/0x40 [ 2786.851645][T20945] RIP: 0033:0x430b36 [ 2786.855522][T20945] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 66 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 2c 44 64 00 85 c0 0f 84 [ 2786.875108][T20945] RSP: 002b:00007ffca25547c0 EFLAGS: 00010206 [ 2786.881168][T20945] RAX: 0000000000019691 RBX: 0000000000716640 RCX: 0000000000008041 18:20:06 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xeffdffff}, 0x0) [ 2786.889122][T20945] RDX: 00000000015bb930 RSI: 00000000015c3970 RDI: 0000000000000003 [ 2786.897076][T20945] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000015ba940 [ 2786.905028][T20945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000716698 [ 2786.913158][T20945] R13: 0000000000716698 R14: 0000000000000000 R15: 0000000000002710 18:20:06 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0) 18:20:06 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf4010000}, 0x0) 18:20:06 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) [ 2787.099942][T20945] memory: usage 1268kB, limit 0kB, failcnt 1564 [ 2787.107446][T20945] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2787.131756][T20945] Memory cgroup stats for /syz1: [ 2787.131888][T20945] anon 36864 [ 2787.131888][T20945] file 0 [ 2787.131888][T20945] kernel_stack 65536 [ 2787.131888][T20945] slab 1355776 [ 2787.131888][T20945] sock 0 [ 2787.131888][T20945] shmem 0 [ 2787.131888][T20945] file_mapped 0 [ 2787.131888][T20945] file_dirty 0 [ 2787.131888][T20945] file_writeback 0 [ 2787.131888][T20945] anon_thp 0 [ 2787.131888][T20945] inactive_anon 0 [ 2787.131888][T20945] active_anon 36864 [ 2787.131888][T20945] inactive_file 0 [ 2787.131888][T20945] active_file 0 [ 2787.131888][T20945] unevictable 0 [ 2787.131888][T20945] slab_reclaimable 270336 [ 2787.131888][T20945] slab_unreclaimable 1085440 [ 2787.131888][T20945] pgfault 90519 [ 2787.131888][T20945] pgmajfault 0 [ 2787.131888][T20945] workingset_refault 66 [ 2787.131888][T20945] workingset_activate 0 [ 2787.131888][T20945] workingset_nodereclaim 0 [ 2787.131888][T20945] pgrefill 1281 [ 2787.131888][T20945] pgscan 1276 [ 2787.131888][T20945] pgsteal 33 [ 2787.131888][T20945] pgactivate 1188 18:20:06 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x0) [ 2787.422086][T20985] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2787.458997][T20945] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20945,uid=0 [ 2787.513718][T20945] Memory cgroup out of memory: Killed process 20945 (syz-executor.1) total-vm:72444kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 2787.514046][T21017] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2787.551862][ T1065] oom_reaper: reaped process 20945 (syz-executor.1), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 18:20:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000540)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000005c0)="a46c08e2a60e80b473a3d938c08180d68aacc3ee60565cfd9857a4e43f2fc7b119fcceac28c3b88ceafff320027b26935a5d0b5dde4009857cad3b85cba3c7d0d0970661ce31cdbe1a835393f7022f1f660e80431de72f3dd6e79c"}, {&(0x7f0000002a40)="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"}, {&(0x7f0000001680)="7d76a6a20446ce1a3549d6176d7d4c231a061acd29618fa2e966bdafdc485cf5884f622b7973b0f041efd0d162379d02"}], 0x1}, 0x645e53567e42a59c) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0xfffffffffffffec7, &(0x7f0000000640)=[{&(0x7f0000000340)="c944a5fcaeedbafda5709e3f0002", 0xe}], 0x1}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f00000004c0)={'bridge_slave_1\x00', 0xc00}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:20:07 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9000000}, 0x0) 18:20:07 executing program 4: socketpair(0x13, 0x80000, 0xef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x1c4, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) close(r4) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000400)={r5}) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f0000000200)=@isdn={0x22, 0x1f, 0xffffffff, 0x400, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000006c0)="5ea03f6db511aee466448c41d0a37c5d52fbf6d123b2238bc0dc67ffb8a030dd7d9264060255082b5024d1bd6e117d7a20ca56078066e91049b134eb2db929be3f0ac2f70eacf24ae891471c290affb67848907db14e21832c3df1d097ecf14e120ecc990d234042832cc0352f4c22b3828a9ad20ee214973a95bd34110513eb0b903c83d4b8aa755076804cf502013c1bbace98bc821e5a8ba782e18f8fa11b088b70db05e454dd159d018ed06d197dd6014565077d4ebfb8b7db6d35f609ed05ffbcf3380687357f1a593b6f2842e76ff1df4bd5ae29584f89e9d2e50ccbb2964e2e6d3487a509a21e1f6c0ab2dcd9f70777a5c1d58dbf37d5ad66d553898b5620b1e35eb2a96ec010bb87957b6193071706744e312fff95abe536818207e41f7af43e08cca42680fadb739d70aafbeafa7fae70e4526c97e9edcac5648e4c38e10efd34d9f09592c73542bf127a1e68cf8fc3e58e78142b5e5fbbee0175350ab1a8aeedc6c8072ccaa476da314b578854756bb2db47caff231a7f64c51d1d7b4ed1e7cde59355285ef2c2be4ca6f0f6d01dc2d9845505f3a97a57f240c0b0f18fb4936dbb6cf7b6dbf6ec28e61a91ae6e748d0adec1c02c7a39019853b7497e5c3fdd571058f3e648b9f14080442b7279b28de971b6c8b97f1cea66a08bf83bee0707cae6972648a7f3924d63fd69ed03a13aaeba0d9e3bb239544359153fa124e70f873f9d10c07a5a0b58e82536153849350203d848998d61cbaa4f67dc73c84dbcd45939a3f01839e0897a3271118e304694db3ab806e05d206bd3c42dc79be167c9c297559d9a85d5eb04369c534360045b1a80e28d1466705873e3d8bfa73c44d59473df58b8a0305e6a5ec7300183cc60115288e393ca5d160a0fc8eaec5a77c0ba0798eed1e18890e2403ee8d156514eb6f5dc075d4a1f7ce70ae6fab8c82c6ecbcf3e973bc6a461f2f739f9820d66e28f3e9834a7ac8ed81a352c9f7a0882b14b2044ededaf694eba063ad3192f4dbf6ba79288a47ccbf6546c4fbbaefc864694e7063e39cb12ec68dca7b20986c48ae94022cdcb888222ee7f05f55ddea71f0298223b3c4109c15dd7ec41e78aef8dd5ff55c89ce7900261d62b35d12b813b8a385863f3c9d1f4ed37d7cd5314226afdb2892ddaeb1eec542cc8c040fc64cd3ae4dcd7264d68d247acbb353e40a33d5682ce2a4a005a2975908cbd0526beb6048840f3499cfcebba06eaf0c51c8b760593098a3def21b3664e7d42253f8c990538d382bf0768cdc106fac3699bcb5b12279f81dc9ba6ed1e2f7820f6cf8a2b3e4c88a33d9f0a32f60673b5897cadbbe7dffb9cf7f6b5a5d62701eba230fb2daa966a63d91e86c02472bd8114e5ba5df8152067086c142e6cd88289a501fc3353c1d0f17a663b179c446220d970d50a9c9adbb0b990be52ad19cd36669df47ff6e1f6fec4b7b1693c802d736aebe985e0c3c59c753ed95d79a7564880c4e2ffe5c9e59e818d2810468c48a4e75f15f3f252f2d780dd30717fe572c5d55adf090223fb30216c3882e9be19cb627aab1fdad81f8f117a90c2e7874edf1c4dc8e2da674348855659434eaba5c5063a29c28f4d22ce5515464b53967ab33d82f0e5afa98322c31e789be5d7600c726bd467d3be3eb4e0df733b91eecd95a5d1648ef268c43906b187ab24bb83bc80fa2ba4ab21d99c0aadf87d15cec51bf2cd52412ec638b43c27551f039e58026e6e910c7f327afe2e363491cfed5caadc8ca674659004f24991fdf76faac054dff64fb2282fc92d3b9ae32222833f1ae905dfa1dada3116765ef2b04ae6124f44cc7f83bd8f159eaa5290cc9e691fa77bec9c35a625b1b24cde8c9363b37b6f77ce844ea77752891b4c837c7c9648f7a16da6aadaf8912ba392c9984d26977c4b99e5c94925f0c6b9a48f2701eeb477aa0a99adb7fd145cd01b3cee9ad3c835690cda9ee1302fdf301558bb1979e177f18876b3fbe7b01597260a33822a63cdc760edee9839d75e0de20acdc8ae98a008d7390e4bb095650149b1bae84d240bd6480fbb10c1930f3a61dbfc3cb17888e33fb12f2dec1523380699b28300bf8b377e4357d5385176a35edbbb6e81e17e42fb07964452b53a069704f597cab1c646a8e8b99c0411e18def7e1c26e7cab72369228dfeb0d306cd46cdd9299538c89697c1c681d577290c2b03c9d84cd1b5803ff9291a28f3efbc3112b53e5cea348d364a954ac78db91e610df86be53c20707401d70f7768cdf0566420c1dfb7216877784244b5a84abc61e577b11b5dfd194018dbaa4024b57e6b0dcba72f621f62938f7a717c9a899aaa78b595f01c48f94c0bbf68c7cfb16c59269f48611dc9d7077b6805edbe30f2c7988a18f5ef3928a769f011936af9cb4665f48ce17afa1bb3f614e76b40a7e0920b9942362c41589f2be923530a186693a429a8e2767ec30d02407d4fbb6a397f52ec48fdb3fc0d2863f301585a14941cfac093cf8e53e91762db548306961979d396e4645f5698aa36db22603d1893149ba2d7aaa44bb14e0eceafd84cddb3c5c3e2a8eeb02a96e9d9f08db989b450614b0767314e4024114c785c95272226f1c2e2a29a07c7c133abaf254fb9d64a1c597ca32c3a1b17bf262907d9a5a468d37986a300f9a1274718521d76cc1fa8ae122f5dc46ba1c998c3d66bbfdece070f37ac35c7d7de0bffc8369f222fe768273edb69115f94177e9ab237ba50eafdefd5a2369059be377db15661961961c3bc60e6b1af713bd20d70b315025a249d5a6d67e340582404b561ae11fcc711c21c80a56d0a6b964d333e0c1a53333a2ebf4ebda28a59680639c0fd282d64539143b2d416accb7b5cfa16fb2dd9b767f79fe9c26f2b70972b2225ae8beae908dfcb34bbe30870369ea766479db570787a6e11d7544f32888b637e3cbbc4fc85e34d7847e26779e8a8d940ae28de2f2d122c1dba8948af913b2ba890cb12cf2db92ae75aac53614d6faaed47b4373147c6c93880646ee35d85394d25d9dadf73ea35ada21cdbc89038e90e9a28949fd84bac77ea7b2f79ece1c3c2defe5faf9b001ac4750920fc6414569413fd2cdb4e49751fa9c1a531d0081856aa2a9f884040610f9782eeb2c135afc0f60c09e1d5c3a83311010ead8b7bebe91bf339b7d88fab261596465fbbb8942fd32aac8661bb3ad21696895365e258f2a6d4e9049f93545e971fc053317082a2c6ebe65e571b29cdcbca06e5f422c6ea288f98d282ad5c9475a3e9258b4a21360d19cb91c99aeb6476f21049c8d6c9918a9ba7ced60b1f97b9b9cacef6958da3fb8b762f35043539c145956487110ccd420783f3c4490cecb089179c99a89e07fc14d2a8e8a78cc1cbbf0caaf9f8a6850fa8f150c45b616c102a09b995ac9408fdfd26b79339ad175691cc065f7911d99c53b249f03a96b3df1cca6f9dfd2d3c1e732681d58cc2fc671010e7bd98c006ba63b703266aa2f1c3d6fbc148902e425d83d044f014b9e7b3977b8fda094e02dd6dd8298983d5d891d66db077233fc155dad208bfe7c6585bdc6d246bba81cacff55994ee88f9163b27f51d6ae47d0b296124d3018f69f79528797e8aaf21d8035c044821137b0f7e7b3b41b8019379002ae9bc70dc1bc377b6fc0e2a40accf480ae0dc53e61a91d1815ea796fc14d6abddcee1fd965adc3a441333d430568bcb29f0cac078b70a4f6d1011c1822708fb1bbeeaea6433cf5cdcf9aec7bbce4c92e6fdda88b3dc48a4d42f4348a05fee23c41869ca326d39c0605d9144f82bd0c3c2f9ac9ae0b1f5fabe0ab5af39babf027a83df5b1c58513d27cb5babc9a5be073043543bff731da9bb715e57678507baf194fec9efa3235631b9594682dd531c3762432e25c25c048e600cc7c318e82b720db17436fbc054c04f59923ae61ec0b4896d08daab3b617bd8d239c24e95c8fcd1a7dd64a8a3d7e158c626833a2735c9e96514639f007983da3bb43a6f18e40d3eda0cc9468d118d28c6bda3ebae6c3ae2c14b1b02305abd16b7c6be707ffaf59142988eb931275bd4c38aefefbbaa95e16d7551f5f1fcfa9744a357d21c76b28747e5e94683d455530433876d509793ed409847f8a972450285f9e9f2dc665e78c7747418523bb51ef8191231e989ca93ef75e9ca27f38a2e5327d29c265c39f12fb1d01a723a902292c6bc06fdc6856d4829680909db55c4650449d0a2d2dad92cfbc8c03fdcb5656a56fded95b0ac41595a2a5bb34d5feb4e06da8adb5143eef67cdc3d18edd095c086d99cb43cddbbfeeb0beadadc1e30ec57bf760592e6365ffacbd6134b7262966af9c808f980fff81280566c79d3a2a15654c597aa050dda7ace4b5298f512b445023d4d86bc37c85ee1a2d7637f3ea0eafd6440893f43a2a912735d0dc8e2827148893f7554897fcb91a4f5581d793fa707fa181dcf69e3fddf498a19767922f4c52fd6797bfba85a61f9c5fe10970b06c7006d7b804f5d1db40b6f606f532cc5a6b93be6473bcbad8f06ead3995cb5f42ee8ddc658ac9085d0c6046b07be03837d5d68504c04b2a769db69e04aa1e414eec40118856f58ac5d3765e5d5038b20d2966389d0b462dfd71065140bf8ae0bb6eb105ac8160c8cc7641b14aaf0304731ab4d9d4bef89d62dd137d7f88645f941999e2fbfbd171a445c2702a87adcb5fd7d7e36d53b715e6ee87fcebdd0b9fef00182fa8e7ec8e7b5a3ac9d332ce92334a8e1ce0d493cff3c2a4fe1f902da785deb68bf936eabfe59a2f698b2d8d0dbd11c25f413ad4b7c554ed5d9e69a1c44c0dd523b47fc66e474357bd6b1e49fc2e12e30e206347d479ce0c20ef4b12e5d63de14e4b7550772a1ef0b5327d755aef1766da85e429a7920e4652d772619ea3526b330778ad35966c12e45a85ce6a5e3e99372a8c621e17ac2c3ff024c625a5599d41ad794e99ceeecb0bf334fd56b823e5b9406c6089fa406aaabe75afd7413affdc1019729d6f72a4b1a330412c03d9f75dbedb88bf556ee57a642fd1802e35807878f7aa15af0a00bc8fa8a4d01ff3e60249d07e780244d387cc60d7f25869f50580f0136391faec535332727b7ec85b12e3be7d8f34369f00b888133c3ad0ffa24bd03c5183d55172076b989b4151227467b915ab6e8347e15c99f2f9051d6ae0b2b72a717536899473b7c04160cc8d6d23a3f0ee63ae0ae4f79523af48779d836f0e0ae4b92ee78b820a9f6319ab064d11b7fb3e91579528a91c7c2521332ffaceb00ebaded7ef22d0ff9986273759b08b9f75565fe5c194bbfe704eda0fc0662db8cc3002b05dc39792540278a2c12501680ef4b95b3eac0573e559c6cf0badbe364e3bcaa14661afe1320a32d4e9644fdcd44b9dce2fee476e8f840a91a66cd877d3e5bbb5b595e654580955f4ba8548b41220a355a805669de9f3bc50157e594f5b444b88a320d80522e51bce929200d71e10e4a85c3d12ee133dda3fcdf7a454773a0575f7d9bfcb8c8646ffbad451446daf3ea742c0fa6bbb2ca4db442e60492ac9e131037278fa5552c0ed00c84469cd11600d3365617f57af4178fc264500327c48ae67de27c62766f9d6848e57f2ce0eb75e1cf72bafb21541c0370f73fc77e0d8b0b11056362a3936e38271259377d40fbc257d8c72b3e583fc6b0e20420dbc99a7932cb305fa9e61bd0de0d9758d35fe0ee13d0eaa782a3059e10caa61df3903aa1061298aced4712d998181e7edd03a11041de4018fe56cae17e0dced027ab7a0a27a6415d8d", 0x1000}], 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:20:07 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfc000000}, 0x0) 18:20:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="c944a5fcaeedbafda5709e3f0002", 0xe}]}, 0xfc00) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:20:07 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2}, 0x22) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000e80000000000010000000d243292ba6bead3057a778bea8c55931b04cd45642cb1a662b3a106259e4611a8179bd56c434e004d99fc83e952050f99b06e8c3b78942c7d60224e069e553c13f8406d70a0db313a888e3ece8fa0dee56e55e5052b0a811b1c6b9af08a8f8e2c4076872bdc94c7d2cad58b6003183a6540af81d495ccb2a54b38a1c03a5011de4802cc31dd7e8ecef2aef8c1b34f0dab6c20f520c0d7b4dcef25ccdfd340db995f7c14acca8ab563791fdb56183dae2ee6b056168af5392d902c4d00"/224], 0x0, 0x1b6}, 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x190, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xfffffffffffffdb4, 0x0, 0x5b, 0x0, 0xfffffffffffffdf0}, 0x4000000) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 18:20:07 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x0) 18:20:07 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfe800000}, 0x0) [ 2788.181008][T21031] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. 18:20:08 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfec00000}, 0x0) 18:20:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x400, 0x100000000, 0x1f06, 0x1}, 0x80, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x308) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20) r7 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x8, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000004c0)="7eb82a86bff26ee327e897fc215ce78b1c2883f45efcfb7db8", 0x19}, {&(0x7f0000000540)="5f4cb61d8efce0042c3a01c319accf9aae31fde8556c3d8e6642d139990f3ec57690bc25108dbed4fb2d8d29172d008dfa75227a485e326144f4bd690fe10b30138b58a5ac92082ef1543a2f792d7fe9b47f51eb64af5fcb8c87cdc87b078d6270ae7de9417a4e2d23c2a2bf2f587da3036572f75dc31d6843769f9fbb632002b675f49cd4bfd8554b0f2225d69e750119c5c8e5eb559c35ee7187e028cfcfe2cb7bf4f4cf2a08fa064e1c0242361a77a122018fb40e81904910d589af0a665c095ef011a466c88f6198327c62", 0xcd}, {&(0x7f0000000680)="ae9fc445aee2c10e776c1fc5d167ab41d1fc39354581d29e825bc64d22ed74591d76572980f25882cde7e30a7e2fb9d8f716d8a5e989702589aab05e3c1cd4b86447c16fb941a6d10d502c17587b83cb8fc6be12b8c121e1a632d72cdcdd1a96c06c4a5cdca771f71e9a143c15220fc7e7b92046195f6af6d33afade25a0c84ee1ae6d004d406c501ebcf6f267c531e6cb8d32185fe2f7b85ced8a9847542670c2f8783faa2af788cfc0b5846c9cc389fbb81532a955c47ffba5407681b4fcfa1a9b97c908116d501dc7fbb9d070d61965ec8c6c69ebc01dc17b5ee0d5a0117fdf82641e87b6ace6615e77c3c672526ab350a438b5ef1e2d87060984fe65bfc0b5a91993647c4d95bed5eac5d9d3c29129bf00fccec0b38736131f47c180d506b9ad93a9b1db1443f447affa8df32259f2b296b596c4f0393dd6896c5f706eaa40be100143ad30f1b8e989e0ab4d65386bae4a317f3f4a188e1f33cf55bd9eb8f96d921375308c814de11628c4dac1b6d72885c915072d30ea8d7e3b25ac1f3024cf453d6f9c53c8f3ceb7b220216d279a97cbfbfd2e44988b207f109e365fdf17c87688859d705efb2e2723a785199c017f1d88cc69fef3b65ceaccb16c29bdff1e325e90dbb70974b90e50588de50f857340445b103f5fa557f775e650598b99b7d7f11bc8b74da58e43dae86203822e5c6ca698d5e4cfa8041ea71b431656cf254702fcd25762a326a5c4e71f677536a946ee533dd198a5e0fac1634fd5dc57f1a4eb516bf5a1f9bef447169163a081ada162d4b9d61b921149f230a86ac37bf3424bc418543a4a12603977c6cc780830d0b4670c3d9289eb66ec9f21cd13d730f3f913404ec184aee4043601ff70b432a2d89548cf0edd142e38163833df2d2e5206bc6d8afa18cd97fc6ade851746fc742fc6dfc2dd73a42df3cff4dad26e5b06843da30052e9b737d88b2201eea6d5db2e49a67e1691d25a0301c11cda094cdcfa303d601d8eca99ffefc03310771f644cbdfbd28b436e9733f020dbc6bdf2738e84c8615e1b9b495e3a18362518cccf37d31381133b30278b2e0fd3c67aa79c16d1905db4905e888a43decd110ee558f058c1525308e39d2779e4198210cd724effc18eef60a19aca3239683ac8e45e0ed71288b71d579ec9e828104223e6cc281980a0377a09d5106583121e13202cf73ae345dc4053975f9f3687812122c43430b4a1fb6774b03fc062b3f6d3d72cc1b9c7c885d5a4f6a5840b07b81d48dc54b4a98cc4558d0fbb2b38912692c4e4e9caaca7c7d1a239f76dd988c6d557feb8dcf7d07bc6fd84d941342c4580b98d86c487bc8f711c878d9529dafb5c38e9515fd528ccf8a7fa1fdec377f3038e16f1015d6e4bab0c05beac0ef157dfbc5dd3e911c4c559fb20b7555e48765e89ee70bdc960ec7e9bace7949af74eed8e5455d443717c416253cf1148acd44598306880cf8413117a2a3af66d9ccc2f4143e9cc0fcac60c1634f5b45ef39ef55111ce5e3f2033465716811a8cc402f2a0d579d78e5f2e466131862cebab3f9f8f8d64fefe50493b98b1f0547bdae1435b2329ca9245e802e6187f7f07abbd2a67101772024d46dc6136148e953e0ae878c37e2caf68c143c9ec0c37e7ac8866bfabb00e8ac51ed59f80406496fb0d1ad40fa8021fe7f1da32dbb0bd3a5290f6a60c65c41a895a662ce924fb0f48047674b3a0c61349413d5521bd8e949a8e2eff117f992fe405e026df105812a2a5225695d25f8c5886184309709c3125385453ec24b2abee386a87eff0ac2f30b7d1650d2b14bd1b4aa4b674370996889d24c9bd9efb525a034f9c6655902d22b520229360a6e0ed12deab7a1afa2a7d14ec948e01e59f9a0e34a34a24168f25b19169df9696c09d3ccf90b6519951b1ddcec2d7a88d58a19b5e6dec5f96ffb126e63ba65ef55cb2e0a7c423f4cf218de8c79c4c7bea1ce54ecca00d91639989bc8a9db60fd900f1ade8762c684ef7cf07ee46869a90b5668519e193d535472acf6f32e8c430aec23f28aab0e5c476b40f2e46cc498b47fb284571927be744bb73b2bbdb3d1a6516f1ce176ca986ae061bdca2356c678f981ee533fba6c9954db7d60a53c62926f33993f0e20b49ea393469073f607f06532a28523a764a25f8fb8f520bc91b8326b536ee603024d975b1715febd2b3d14d8c672b430961e492e5d60e1a1d74241f52aa4abb451808212644361395be152c981ee4692629eb825dd149677713a965f40a555ba0825f06843a7fd99d5ff7ac1cd87b784beb90a09f6c2217abebffd5e3feb13cfda842d3f7be17a4262e7970c35bd1fe1a616cedbc2a0b85198ab5e3f1640096c2f057387f0d9c6b154ef9343805fef747f413f9c2a7c3c05e28f0e3ade74b68bfc1e087ca5efc97e6c281f7fed8da9b04609e58f86b516f97dcd130fe0e5df111829202e6dbc2d34d3f68acf252052cfb3fc4b8ee939f21621cd051dce7d240328e761eb47781bb6150ee44c9d9133046a245f7530978af417f66f72d5d0403f8b19cb5efa19bb8d0e3a5de8de220125b406cddeb2524ffb2e6fc128be288e9d19efb72c0e4e88db44c582a00798a5b1458bbad447cd9097221179b44dc285406584f24d6b1bd6e1a2202e2cf7bf94507cfb316d8e948abee5b7a4150d24cb382e1742ec4682ac013fe460224806407cd2bcaf7f41951774b061b8c4e6ed5ecf944df80da50b80c6ab825c41795ae25ad521508c9e8ed3201d5ec3603c8bb4f9099a6f1c7847e6b4db6ca8b411ad3abfebe73066e05045a8d4275619ec2fbce6b25ed871f95b7cd5ab3c11ffd9e1cef54ab0c4f8c8391d2ac4d311695687f6d7bf20fcba7351a3ab21883566abe7aa7757ab8458de75f46eb10122d6d7489f9f4bd5754269ad6c23b897a8e3d9ff07fea3d6c1068aa7cd8d335f996ada54eca980a4688ba8e5b9167417f1af8bfde2eb366ecb348ca38aeb6da3f91bdf05c96a4fe91f0174bbb3988787441c396169f9f2b504ab329bd86899e49b818bedc2a6ae045658737d41b5ebfa807a87c15561466735905d3824734371e99ad6e3caa1fd64cf03b2b2de6356032b4ab32d8fc15e4c73d5224b83020141d19ce6df04ea80c58994249c28a92f881080e7f41063b2139455eea9c2a574d8cae89f356d15341916ac585a92a8807b339bd70c01630d713aab12a1ad1571096b383fe35dee0abe38b5d29efa620a6816a1b9360c7628eecd1726af67862a2fb303db6273a68560282a4897f46086c07100547108e59931550c077096d9e0cba789d9b9002017d3f53ec2b7eca183be2ece9b2d149095dc2341c59afbead37935b01ca0010bc2985a12aca859affa51e096bd121a338e9f5e4f98ffbfdb8ef70a29fc7990e503ce13fec4fe18d6a2f7cd69a38d1386ad7be318bab3687015ad133ea3065e7f510d8343eed6037938c621e1237c95002db84916d14349f084dfb7790d387df5464099dee0f92d35223f6ed95c7b2f81e5b2230838bf4b0e50d39d2db5b32c3e8af4ffeae88aaaf299e4fb02eeefa24fc1e38868417fdf431a49301a8935cb95b1058edfb6a3785897cd4ae483223e231f5b3ac744a5cf07c0cdc8533d7e3f0600880b456f1d6442f2d2e3d4b116126f8db5d7088a8e30d897ecea6d301167bb3471a34e5784464215f2bb717ba8be5ad0eccccd77efd2a174a517754681f4c3c1828696a379462d6318dfd197c71768b756e1288891071aa12d38c7df5ca15608f3e1c7ed0513687337ead428f47844bbd4d4aea6928b4c363c5297be8026942b05f78bfe63c9dc98075c9f3c85f194ee2c321fe769b1711d31e1f0f6fcd6e4e93cb9bdc294ebd187c8fbf0ea772260ba5aebcc7ab951c719bdb0fab71f11dd964c0a96758a652708e14e24ff0b247295c0854d131cfdfe74737fc1f6a991afa490e73b1b2fe335564583f33808f729e224daa11b49a5899a796a21b3981cbee898ff6f537d5eee9fd15eb0474dd1f119a4ede9ef21b2e91bbdbb830a1e2b4678a4623f632d36c143cb78c1794174753c7f2cc5fff499c74b813afb54c996b90909a29f5c6251ed099b46d0bb42f82db28e99bd460b0f704d161cbb440b6d9cc8df8129b08cf19deb223d8d38d8324a976e0fe94883ef04241ac1b49d39148018b103975683340f0a650aedc4d320bc705e57cd26fa5ead55cdb7693f3d91b42d383edeb84109abd30dc8af1301306574478c52ad72607ac891f2e87a8b5c263ece59b0ca839ff4bee7275477ca95cf498954c559edfa7ad41c2ff13b4d8a757019046413268636c49654a34e9bb9bf57edb7b88e652068050dce912ba60e4d6a7c03bbaa487ed7b90942b69ce31a02710ba1281eae8bbfb22d0f0463737c5ce6198fd6749a244cce16c09a72bc6dfd29f10ca3bf4270510a83d5f1f744e7357abb4ed369785d21948665be2d82fca61443c0e7451b7a12bad1ee744efa5908b5bdc408caba5df24330faddc1566afb42afe80bb7f155897ad58f6dae909376bc3abc577d9ed5f506ef8c4d6d4b83e56ce57e8b773934a8a421da517fc996e23f06e4fb366d17b1b635af5f305696591b1e50c77fcf6baac90bc5a7fbb4674959660f6957c0dad3a2a3761bece2c017fb036d004345dfc631018ed5e4ae6ec0c54105533923ca828220bb5c772ce26891a238ebddd4a79378a6974b90157092fc119b8a4d6a46b830f0fea9085e16b89856487e750c0f889569f409c5beb0a04e8ba216b283c584910051fe1f87e6022d7b56a2e37288a8b04dd8b744045c029e113c27c39277c6969e771e0aee6ec95a556c6a2d1ef1f7aafea829464a41d54f03a32464a40a09e4098235b220eb72ada3a7b33a8d9369bffec3f4ebfcace39fa4df5b28eec2a954e39708af2305cfe5e8f0ac5c0756118631ead106f3f48cff0f84dafdc9263e43eb0295a477e75970d8b43b0635dd64d7d2e0e36aade35f389c481144615d46ccf698fe702e0efea7695f47fd46d50efe74680344f172d8d90e9ac3838754ea2b3bff43b9055adf1f1d0e3c4d87c110404999fa8a18e10f90d080e13cd7807a913145aa4cd08af4ea7864490cbde50f4a33e9792464745586f207130204f0be7fbcce7bd46b7e0a29a3410c04acfea9a0b0f18d4b9a0d662b21ef79c969a94d3f14e12742fdc3b3f055d9ba9cf40a8cd4552fa2c4092bc9455e1106a29be6aaf0fda5451c504cb2e0e03bc1c2f053bc36f31df5b92e8dc18c3d7a1c4d5eda6170709946a149f9c6d4ac588e9da94fcd2d2ae58e4d8658808b24cc6a14a938faa7fbe01864039a08c0cff6c9e667dbd110225f519ffd70ad1744e18ee5543820a5c2a0b239d59935ff1097f01299fac82c5c64379f13a4bb2953b0ccd6c34bdbee7ab1c54ed8e6efce479a120cb83ff90c059d6f0d4fe799e6041834a965498755ef98da411061fc1df197f0a09882597666d9416eb419d45ae9e1cc19e79187b2c04fc65bf48c7f58f3f25a58d1db31cffe92a31a333c434b3ef67a2fcf3f80ca5c1d78aa2e02af18641dbd5e610d11f3d660813cb390bfc58bd02724d3ac3b7dd30e37f0eac1c42f9dcc8602a2247c14f4f77b03dd009b3e9306ee459874f4cc88e12d8daf30ab4ce2d05d8ed6079aaf5937ed5b0d5c97e810c42c21056fd65ba448e07cac5fa2d5f79ee9790690d3f940153652b5d8e91c73e46b7de071cfea926811727b702e40bef81c1c88cdf81f79c79caed6b928eade6bc0eed5335fbbb365135aa4d38aa42a000cc", 0x1000}, {&(0x7f0000001680)="20dd95bc8b94355e5ff431287eb22f673e41e9b31e6f4a968729a3f2e7a86da115a36d2f378347f9a886612dc620def5f500f65597f6da2b13daa21df02eee68ffc1ad394c7cedd558df3b77", 0x4c}, {&(0x7f0000001700)="bf67dbf324bb875124b60497b43f1e0ef8fca544697918b3da37f99454a94eeebae534980bd51b7b87b2829d4dce509d2e66f674c329c753048c626a0ce9b03609438d360cbe681d73a4e8f9f1b9b443215b5be162cc78b056bdd2c6ca9c7381336af80707aeb1eb14cedc1db61102b82343b7b470cf99875a500e6fe31856fb191c1ae952196af68c9c95845b75bc1aca8b30888113ff04cfc5bbacb457ae6ea4e78b8b078e6a8ad9dc5435d096a2e92608a9141a299b3356ebf608424b5fd278cbdfde1cfcc534c26a5f60d08ffb70406a643602b2f6791b0ad542", 0xdc}, {&(0x7f0000001800)="2a77fe40af90cc9017a7ebb206625765cd60bbbb446f47d1428cc14fe6708a24ebad50aade0226dbeae9ba", 0x2b}, {&(0x7f0000001840)="43e01a6d80c0b2e4f9ba00ef85f788e14b94b78357f533e97b7f3874b950789f5e3173852053c8aef616b9c036519e5eeb4769195b6bf2d982728f4894cb880f9a066452082db867b0f12c5227934f9bedacad50c71c336c05aca3a1", 0x5c}, {&(0x7f00000018c0)="9bb1ad45a071d0011bd3e7bce76d8bdf8f034bc67000749a347e7bb6c9532dd7d00e3a9ebd686b919990ea73aa75cd0369b4fd0c66931a42605c070ab89ef3c185a1b727189a7a0960b76433095ae996f7e0eda04fe14c371be5ef9660b564e4a0d3b56d110ccd3243475954c689a8a518af97186fe990e54d2a69f95e26fa57035ad40aac6e9aba7a7e3823a554d26f1450ab9bc81bf10c7a1a940aecce6250b3b358710c8ae5676a965c394a", 0xad}, {&(0x7f0000001980)="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", 0xfb}], 0x9, &(0x7f0000001b40)=[{0x18, 0x111, 0x8, 'c/'}, {0xc8, 0x101, 0x9, "bee46c26c7cd5f5a5d5cbb329bb430340dd654f2fb836a6493017dd5a48d9ce125c986f031e85d041d8149f9b379870014b80acc19415902b9a82c87c645e4468ce1e14b2deff19cdbe0a093237180fb9e29f5022cbd2d412a1311b1885d24887e9db8d2edf10fa5c10869c4f54abad599584eba368b1a140db4cdd5c6e5974d0f030628422e0085abe20aac69cb48e684f5e182bc7cae3ac638006f0c3ec35c6212bd559fce89e58ec407a3f3c0091158"}], 0xe0}, 0x4044032) r8 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r8, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@unspec, 0xfffffffffffffec7, &(0x7f0000000640)=[{&(0x7f0000000340)="c944a5fcaeedbafda5709e3f0002", 0xe}], 0x1}, 0xfc00) sendmsg$kcm(r8, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="88e7", 0x2}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r6, 0x0, 0x0) 18:20:08 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xe000000}, 0x0) 18:20:08 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x0) 18:20:08 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff000000}, 0x0) 18:20:08 executing program 2: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0) [ 2788.798502][ T7] device bridge_slave_1 left promiscuous mode [ 2788.808760][T21032] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2788.859177][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2788.942770][ T7] device bridge_slave_0 left promiscuous mode [ 2788.949079][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2789.062639][ T7] device bridge_slave_1 left promiscuous mode [ 2789.068880][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2789.111645][ T7] device bridge_slave_0 left promiscuous mode [ 2789.118029][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2789.172850][ T7] device bridge_slave_1 left promiscuous mode [ 2789.179211][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2789.261448][ T7] device bridge_slave_0 left promiscuous mode [ 2789.267956][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2789.323167][ T7] device bridge_slave_1 left promiscuous mode [ 2789.329519][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2789.421516][ T7] device bridge_slave_0 left promiscuous mode [ 2789.427913][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2789.503408][ T7] device bridge_slave_1 left promiscuous mode [ 2789.510619][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2789.571629][ T7] device bridge_slave_0 left promiscuous mode [ 2789.577988][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2789.673173][ T7] device bridge_slave_1 left promiscuous mode [ 2789.684933][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2789.791668][ T7] device bridge_slave_0 left promiscuous mode [ 2789.798066][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2789.862950][ T7] device bridge_slave_1 left promiscuous mode [ 2789.869373][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2790.001698][ T7] device bridge_slave_0 left promiscuous mode [ 2790.008113][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2790.062777][ T7] device bridge_slave_1 left promiscuous mode [ 2790.073977][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2790.131599][ T7] device bridge_slave_0 left promiscuous mode [ 2790.140459][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2790.193232][ T7] device bridge_slave_1 left promiscuous mode [ 2790.199473][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2790.321436][ T7] device bridge_slave_0 left promiscuous mode [ 2790.327870][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2790.402712][ T7] device bridge_slave_1 left promiscuous mode [ 2790.409151][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2790.451525][ T7] device bridge_slave_0 left promiscuous mode [ 2790.457930][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2790.562791][ T7] device bridge_slave_1 left promiscuous mode [ 2790.569190][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2790.611486][ T7] device bridge_slave_0 left promiscuous mode [ 2790.617883][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2790.702607][ T7] device bridge_slave_1 left promiscuous mode [ 2790.709024][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2790.771386][ T7] device bridge_slave_0 left promiscuous mode [ 2790.777786][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2790.862586][ T7] device bridge_slave_1 left promiscuous mode [ 2790.869001][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2790.941449][ T7] device bridge_slave_0 left promiscuous mode [ 2790.947879][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2791.072594][ T7] device bridge_slave_1 left promiscuous mode [ 2791.078992][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2791.131451][ T7] device bridge_slave_0 left promiscuous mode [ 2791.137933][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2791.252819][ T7] device bridge_slave_1 left promiscuous mode [ 2791.259055][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2791.351182][ T7] device bridge_slave_0 left promiscuous mode [ 2791.357422][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2791.422405][ T7] device bridge_slave_1 left promiscuous mode [ 2791.428649][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2791.522954][ T7] device bridge_slave_0 left promiscuous mode [ 2791.529187][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2791.652415][ T7] device bridge_slave_1 left promiscuous mode [ 2791.658646][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2791.701770][ T7] device bridge_slave_0 left promiscuous mode [ 2791.708082][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2791.782356][ T7] device bridge_slave_1 left promiscuous mode [ 2791.788678][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2791.841335][ T7] device bridge_slave_0 left promiscuous mode [ 2791.847563][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2791.920949][ T7] device bridge_slave_1 left promiscuous mode [ 2791.927123][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2792.061273][ T7] device bridge_slave_0 left promiscuous mode [ 2792.067493][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2792.142384][ T7] device bridge_slave_1 left promiscuous mode [ 2792.148624][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2792.211297][ T7] device bridge_slave_0 left promiscuous mode [ 2792.217520][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2792.292459][ T7] device bridge_slave_1 left promiscuous mode [ 2792.298861][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2792.391196][ T7] device bridge_slave_0 left promiscuous mode [ 2792.397431][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2792.462388][ T7] device bridge_slave_1 left promiscuous mode [ 2792.468658][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2792.541207][ T7] device bridge_slave_0 left promiscuous mode [ 2792.547431][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2792.632180][ T7] device bridge_slave_1 left promiscuous mode [ 2792.638405][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2792.691307][ T7] device bridge_slave_0 left promiscuous mode [ 2792.697558][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2792.762547][ T7] device bridge_slave_1 left promiscuous mode [ 2792.768787][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2792.870421][ T7] device bridge_slave_0 left promiscuous mode [ 2792.876629][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2792.932267][ T7] device bridge_slave_1 left promiscuous mode [ 2792.938488][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2793.031113][ T7] device bridge_slave_0 left promiscuous mode [ 2793.037342][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2793.132358][ T7] device bridge_slave_1 left promiscuous mode [ 2793.138589][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2793.210855][ T7] device bridge_slave_0 left promiscuous mode [ 2793.217083][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2793.282001][ T7] device bridge_slave_1 left promiscuous mode [ 2793.288307][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2793.361166][ T7] device bridge_slave_0 left promiscuous mode [ 2793.367402][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2793.472232][ T7] device bridge_slave_1 left promiscuous mode [ 2793.478647][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2793.551217][ T7] device bridge_slave_0 left promiscuous mode [ 2793.557447][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2793.602295][ T7] device bridge_slave_1 left promiscuous mode [ 2793.608517][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2793.701202][ T7] device bridge_slave_0 left promiscuous mode [ 2793.707440][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2793.762193][ T7] device bridge_slave_1 left promiscuous mode [ 2793.768427][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2793.861288][ T7] device bridge_slave_0 left promiscuous mode [ 2793.867549][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2793.952240][ T7] device bridge_slave_1 left promiscuous mode [ 2793.958468][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2794.011120][ T7] device bridge_slave_0 left promiscuous mode [ 2794.017329][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2794.082174][ T7] device bridge_slave_1 left promiscuous mode [ 2794.088387][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2794.221160][ T7] device bridge_slave_0 left promiscuous mode [ 2794.227386][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2794.292272][ T7] device bridge_slave_1 left promiscuous mode [ 2794.298517][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2794.381069][ T7] device bridge_slave_0 left promiscuous mode [ 2794.387304][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2794.462146][ T7] device bridge_slave_1 left promiscuous mode [ 2794.468426][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2794.531083][ T7] device bridge_slave_0 left promiscuous mode [ 2794.537325][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2794.582346][ T7] device bridge_slave_1 left promiscuous mode [ 2794.588696][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2794.650994][ T7] device bridge_slave_0 left promiscuous mode [ 2794.657230][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2794.742198][ T7] device bridge_slave_1 left promiscuous mode [ 2794.748457][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2794.830485][ T7] device bridge_slave_0 left promiscuous mode [ 2794.836845][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2794.883708][ T7] device bridge_slave_1 left promiscuous mode [ 2794.891043][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2794.950969][ T7] device bridge_slave_0 left promiscuous mode [ 2794.957198][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2795.032140][ T7] device bridge_slave_1 left promiscuous mode [ 2795.038471][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2795.091127][ T7] device bridge_slave_0 left promiscuous mode [ 2795.097348][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2795.183061][ T7] device bridge_slave_1 left promiscuous mode [ 2795.189399][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2795.261369][ T7] device bridge_slave_0 left promiscuous mode [ 2795.267596][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2795.352250][ T7] device bridge_slave_1 left promiscuous mode [ 2795.358496][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2795.420968][ T7] device bridge_slave_0 left promiscuous mode [ 2795.427209][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2795.582312][ T7] device bridge_slave_1 left promiscuous mode [ 2795.588566][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2795.671419][ T7] device bridge_slave_0 left promiscuous mode [ 2795.677897][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2795.732176][ T7] device bridge_slave_1 left promiscuous mode [ 2795.738416][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2795.820998][ T7] device bridge_slave_0 left promiscuous mode [ 2795.827238][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2795.922073][ T7] device bridge_slave_1 left promiscuous mode [ 2795.928310][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2796.100898][ T7] device bridge_slave_0 left promiscuous mode [ 2796.107134][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2796.222189][ T7] device bridge_slave_1 left promiscuous mode [ 2796.228437][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2796.280958][ T7] device bridge_slave_0 left promiscuous mode [ 2796.287196][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2796.372232][ T7] device bridge_slave_1 left promiscuous mode [ 2796.378486][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2796.430417][ T7] device bridge_slave_0 left promiscuous mode [ 2796.436605][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2796.492179][ T7] device bridge_slave_1 left promiscuous mode [ 2796.498433][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2796.570998][ T7] device bridge_slave_0 left promiscuous mode [ 2796.577230][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2796.722193][ T7] device bridge_slave_1 left promiscuous mode [ 2796.728438][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2796.801039][ T7] device bridge_slave_0 left promiscuous mode [ 2796.807292][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2796.882218][ T7] device bridge_slave_1 left promiscuous mode [ 2796.888460][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2796.950982][ T7] device bridge_slave_0 left promiscuous mode [ 2796.957219][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2797.083574][ T7] device bridge_slave_1 left promiscuous mode [ 2797.090567][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2797.131033][ T7] device bridge_slave_0 left promiscuous mode [ 2797.137294][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2797.212142][ T7] device bridge_slave_1 left promiscuous mode [ 2797.218403][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2797.321158][ T7] device bridge_slave_0 left promiscuous mode [ 2797.327375][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2797.392156][ T7] device bridge_slave_1 left promiscuous mode [ 2797.398396][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2797.451035][ T7] device bridge_slave_0 left promiscuous mode [ 2797.457277][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2797.522293][ T7] device bridge_slave_1 left promiscuous mode [ 2797.528571][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 2797.600980][ T7] device bridge_slave_0 left promiscuous mode [ 2797.607216][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 2939.800364][ T1064] INFO: task kworker/1:18:14909 blocked for more than 143 seconds. [ 2939.808325][ T1064] Not tainted 5.3.0+ #0 [ 2939.830588][ T1064] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2939.839311][ T1064] kworker/1:18 D26616 14909 2 0x80004000 [ 2939.859686][ T1064] Workqueue: events switchdev_deferred_process_work [ 2939.866307][ T1064] Call Trace: [ 2939.879681][ T1064] __schedule+0x94f/0x1e70 [ 2939.884149][ T1064] ? __sched_text_start+0x8/0x8 [ 2939.888996][ T1064] ? __kasan_check_read+0x11/0x20 [ 2939.909744][ T1064] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2939.914992][ T1064] schedule+0xd9/0x260 [ 2939.919067][ T1064] schedule_preempt_disabled+0x13/0x20 [ 2939.939734][ T1064] __mutex_lock+0x7b0/0x13c0 [ 2939.944375][ T1064] ? rtnl_lock+0x17/0x20 [ 2939.948618][ T1064] ? mutex_trylock+0x2d0/0x2d0 [ 2939.954346][ T1064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2939.961947][ T1064] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 2939.968124][ T1064] mutex_lock_nested+0x16/0x20 [ 2939.973346][ T1064] ? mutex_lock_nested+0x16/0x20 [ 2939.978300][ T1064] rtnl_lock+0x17/0x20 [ 2939.982842][ T1064] switchdev_deferred_process_work+0xe/0x20 [ 2939.988745][ T1064] process_one_work+0x9af/0x1740 [ 2939.994116][ T1064] ? pwq_dec_nr_in_flight+0x320/0x320 [ 2939.999492][ T1064] ? lock_acquire+0x190/0x410 [ 2940.004563][ T1064] worker_thread+0x98/0xe40 [ 2940.009091][ T1064] kthread+0x361/0x430 [ 2940.013608][ T1064] ? process_one_work+0x1740/0x1740 [ 2940.018822][ T1064] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 2940.025493][ T1064] ret_from_fork+0x24/0x30 [ 2940.039942][ T1064] INFO: task kworker/1:13:20887 blocked for more than 143 seconds. [ 2940.047875][ T1064] Not tainted 5.3.0+ #0 [ 2940.069706][ T1064] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2940.078417][ T1064] kworker/1:13 D27112 20887 2 0x80004000 [ 2940.099673][ T1064] Workqueue: events linkwatch_event [ 2940.104915][ T1064] Call Trace: [ 2940.108218][ T1064] __schedule+0x94f/0x1e70 [ 2940.129741][ T1064] ? __sched_text_start+0x8/0x8 [ 2940.134635][ T1064] ? __kasan_check_read+0x11/0x20 [ 2940.149741][ T1064] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2940.155089][ T1064] schedule+0xd9/0x260 [ 2940.159161][ T1064] schedule_preempt_disabled+0x13/0x20 [ 2940.179681][ T1064] __mutex_lock+0x7b0/0x13c0 [ 2940.184320][ T1064] ? rtnl_lock+0x17/0x20 [ 2940.188563][ T1064] ? mutex_trylock+0x2d0/0x2d0 [ 2940.209785][ T1064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2940.216077][ T1064] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 2940.229696][ T1064] mutex_lock_nested+0x16/0x20 [ 2940.234492][ T1064] ? mutex_lock_nested+0x16/0x20 [ 2940.239429][ T1064] rtnl_lock+0x17/0x20 [ 2940.259685][ T1064] linkwatch_event+0xf/0x70 [ 2940.264240][ T1064] process_one_work+0x9af/0x1740 [ 2940.269191][ T1064] ? pwq_dec_nr_in_flight+0x320/0x320 [ 2940.289732][ T1064] ? lock_acquire+0x190/0x410 [ 2940.294468][ T1064] worker_thread+0x98/0xe40 [ 2940.298991][ T1064] kthread+0x361/0x430 [ 2940.319700][ T1064] ? process_one_work+0x1740/0x1740 [ 2940.324958][ T1064] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 2940.339171][ T1064] ret_from_fork+0x24/0x30 [ 2940.349872][ T1064] INFO: task syz-executor.4:21032 blocked for more than 143 seconds. [ 2940.357966][ T1064] Not tainted 5.3.0+ #0 [ 2940.379728][ T1064] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2940.388430][ T1064] syz-executor.4 D25976 21032 14854 0x00004004 [ 2940.409790][ T1064] Call Trace: [ 2940.413158][ T1064] __schedule+0x94f/0x1e70 [ 2940.417580][ T1064] ? __sched_text_start+0x8/0x8 [ 2940.429711][ T1064] ? lock_downgrade+0x920/0x920 [ 2940.434615][ T1064] ? rwlock_bug.part.0+0x90/0x90 [ 2940.439561][ T1064] schedule+0xd9/0x260 [ 2940.459687][ T1064] schedule_preempt_disabled+0x13/0x20 [ 2940.465216][ T1064] __mutex_lock+0x7b0/0x13c0 [ 2940.479690][ T1064] ? rtnl_lock+0x17/0x20 [ 2940.483979][ T1064] ? genl_rcv_msg+0xca/0x170 [ 2940.488573][ T1064] ? mutex_trylock+0x2d0/0x2d0 [ 2940.499677][ T1064] ? ___sys_sendmsg+0x803/0x920 [ 2940.504554][ T1064] ? __sys_sendmsg+0x105/0x1d0 [ 2940.509329][ T1064] ? __x64_sys_sendmsg+0x78/0xb0 [ 2940.529763][ T1064] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2940.535896][ T1064] ? __lock_acquire+0x16f2/0x4a00 [ 2940.549708][ T1064] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 2940.555420][ T1064] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2940.569699][ T1064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2940.576078][ T1064] mutex_lock_nested+0x16/0x20 [ 2940.589699][ T1064] ? mutex_lock_nested+0x16/0x20 [ 2940.594701][ T1064] rtnl_lock+0x17/0x20 [ 2940.598771][ T1064] wiphy_register+0x1c3e/0x2720 [ 2940.619693][ T1064] ? wiphy_unregister+0x1040/0x1040 [ 2940.624935][ T1064] ? __kmalloc+0x608/0x770 [ 2940.629353][ T1064] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2940.649755][ T1064] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2940.655074][ T1064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2940.661817][ T1064] ? ieee80211_cs_list_valid+0x1a1/0x280 [ 2940.667455][ T1064] ieee80211_register_hw+0x157e/0x3ac0 [ 2940.689817][ T1064] ? ieee80211_ifa_changed+0xde0/0xde0 [ 2940.695313][ T1064] ? memset+0x32/0x40 [ 2940.699293][ T1064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2940.715374][ T1064] ? __hrtimer_init+0x13d/0x280 [ 2940.720453][ T1064] mac80211_hwsim_new_radio+0x20d9/0x4360 [ 2940.726180][ T1064] ? vprintk_func+0x86/0x189 [ 2940.739716][ T1064] ? hwsim_cloned_frame_received_nl+0x1640/0x1640 [ 2940.746179][ T1064] hwsim_new_radio_nl+0x9e3/0x1070 [ 2940.779773][ T1064] ? mac80211_hwsim_new_radio+0x4360/0x4360 [ 2940.785704][ T1064] ? nla_memcpy+0xb0/0xb0 [ 2940.799726][ T1064] ? __nla_parse+0x43/0x60 [ 2940.804176][ T1064] genl_family_rcv_msg+0x74b/0xf90 [ 2940.809290][ T1064] ? genl_unregister_family+0x7b0/0x7b0 [ 2940.829737][ T1064] ? __kasan_check_read+0x11/0x20 [ 2940.834798][ T1064] ? __lock_acquire+0x16f2/0x4a00 [ 2940.849687][ T1064] ? __dev_queue_xmit+0xbb5/0x3720 [ 2940.854876][ T1064] genl_rcv_msg+0xca/0x170 [ 2940.859299][ T1064] netlink_rcv_skb+0x177/0x450 [ 2940.879673][ T1064] ? genl_family_rcv_msg+0xf90/0xf90 [ 2940.885012][ T1064] ? netlink_ack+0xb50/0xb50 [ 2940.889617][ T1064] ? __kasan_check_write+0x14/0x20 [ 2940.904821][ T1064] ? netlink_deliver_tap+0x254/0xbf0 [ 2940.919718][ T1064] genl_rcv+0x29/0x40 [ 2940.923724][ T1064] netlink_unicast+0x531/0x710 [ 2940.928490][ T1064] ? netlink_attachskb+0x7c0/0x7c0 [ 2940.949766][ T1064] ? _copy_from_iter_full+0x25d/0x8c0 [ 2940.955177][ T1064] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2940.969665][ T1064] ? __check_object_size+0x3d/0x437 [ 2940.974963][ T1064] netlink_sendmsg+0x8a5/0xd60 [ 2940.989865][ T1064] ? netlink_unicast+0x710/0x710 [ 2940.994821][ T1064] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 2941.009684][ T1064] ? apparmor_socket_sendmsg+0x2a/0x30 [ 2941.015165][ T1064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2941.049681][ T1064] ? security_socket_sendmsg+0x8d/0xc0 [ 2941.055186][ T1064] ? netlink_unicast+0x710/0x710 [ 2941.069695][ T1064] sock_sendmsg+0xd7/0x130 [ 2941.074240][ T1064] ___sys_sendmsg+0x803/0x920 [ 2941.089704][ T1064] ? copy_msghdr_from_user+0x440/0x440 [ 2941.095216][ T1064] ? __kasan_check_read+0x11/0x20 [ 2941.109728][ T1064] ? __fget+0x384/0x560 [ 2941.113933][ T1064] ? ksys_dup3+0x3e0/0x3e0 [ 2941.118362][ T1064] ? __fget_light+0x1a9/0x230 [ 2941.139693][ T1064] ? __fdget+0x1b/0x20 [ 2941.143810][ T1064] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2941.159829][ T1064] __sys_sendmsg+0x105/0x1d0 [ 2941.164458][ T1064] ? __sys_sendmsg_sock+0xd0/0xd0 [ 2941.169498][ T1064] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 2941.189783][ T1064] ? do_syscall_64+0x26/0x760 [ 2941.194507][ T1064] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2941.209676][ T1064] ? do_syscall_64+0x26/0x760 [ 2941.214393][ T1064] __x64_sys_sendmsg+0x78/0xb0 [ 2941.219156][ T1064] do_syscall_64+0xfa/0x760 [ 2941.239802][ T1064] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2941.245817][ T1064] RIP: 0033:0x459a59 [ 2941.249943][ T1064] Code: Bad RIP value. [ 2941.254010][ T1064] RSP: 002b:00007f955d67ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2941.289668][ T1064] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 2941.297686][ T1064] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000008 [ 2941.319766][ T1064] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 2941.327782][ T1064] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f955d67b6d4 [ 2941.349688][ T1064] R13: 00000000004c7b64 R14: 00000000004dd8c0 R15: 00000000ffffffff [ 2941.357756][ T1064] INFO: task syz-executor.0:21031 blocked for more than 144 seconds. [ 2941.379657][ T1064] Not tainted 5.3.0+ #0 [ 2941.384365][ T1064] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2941.409686][ T1064] syz-executor.0 D25712 21031 14852 0x00000004 [ 2941.416067][ T1064] Call Trace: [ 2941.419369][ T1064] __schedule+0x94f/0x1e70 [ 2941.424220][ T1064] ? __sched_text_start+0x8/0x8 [ 2941.429076][ T1064] ? lock_downgrade+0x920/0x920 [ 2941.434309][ T1064] ? rwlock_bug.part.0+0x90/0x90 [ 2941.439262][ T1064] schedule+0xd9/0x260 [ 2941.443695][ T1064] schedule_preempt_disabled+0x13/0x20 [ 2941.449157][ T1064] __mutex_lock+0x7b0/0x13c0 [ 2941.454165][ T1064] ? genl_rcv_msg+0x13e/0x170 [ 2941.458851][ T1064] ? mark_lock+0xc2/0x1220 [ 2941.479739][ T1064] ? mutex_trylock+0x2d0/0x2d0 [ 2941.484570][ T1064] ? __kasan_check_read+0x11/0x20 [ 2941.489602][ T1064] ? __lock_acquire+0x16f2/0x4a00 [ 2941.495096][ T1064] ? __dev_queue_xmit+0xbb5/0x3720 [ 2941.500565][ T1064] mutex_lock_nested+0x16/0x20 [ 2941.505331][ T1064] ? mutex_lock_nested+0x16/0x20 [ 2941.510597][ T1064] genl_rcv_msg+0x13e/0x170 [ 2941.515108][ T1064] netlink_rcv_skb+0x177/0x450 [ 2941.529688][ T1064] ? genl_family_rcv_msg+0xf90/0xf90 [ 2941.535000][ T1064] ? netlink_ack+0xb50/0xb50 [ 2941.539589][ T1064] ? __kasan_check_write+0x14/0x20 [ 2941.559789][ T1064] ? netlink_deliver_tap+0x254/0xbf0 [ 2941.565117][ T1064] genl_rcv+0x29/0x40 [ 2941.569099][ T1064] netlink_unicast+0x531/0x710 [ 2941.579927][ T7] kobject: 'vlan0' (00000000c76db878): kobject_uevent_env [ 2941.587069][ T7] kobject: 'vlan0' (00000000c76db878): kobject_uevent_env: attempted to send uevent without kset! [ 2941.589777][ T1064] ? netlink_attachskb+0x7c0/0x7c0 [ 2941.602954][ T1064] ? _copy_from_iter_full+0x25d/0x8c0 [ 2941.608331][ T1064] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2941.609696][ T7] kobject: 'mesh' (00000000423f9c8c): kobject_cleanup, parent 00000000af72a81e [ 2941.614515][ T1064] ? __check_object_size+0x3d/0x437 [ 2941.628653][ T1064] netlink_sendmsg+0x8a5/0xd60 [ 2941.629642][ T7] kobject: 'mesh' (00000000423f9c8c): calling ktype release [ 2941.633839][ T1064] ? netlink_unicast+0x710/0x710 [ 2941.641590][ T7] kobject: (00000000423f9c8c): dynamic_kobj_release [ 2941.652573][ T7] kobject: 'mesh': free name [ 2941.657242][ T7] kobject: 'vlan0' (00000000c76db878): kobject_cleanup, parent 00000000af72a81e [ 2941.659714][ T1064] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 2941.672285][ T1064] ? apparmor_socket_sendmsg+0x2a/0x30 [ 2941.677750][ T1064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2941.679652][ T7] kobject: 'vlan0' (00000000c76db878): calling ktype release [ 2941.684472][ T1064] ? security_socket_sendmsg+0x8d/0xc0 [ 2941.691534][ T7] kobject: (00000000c76db878): dynamic_kobj_release [ 2941.691562][ T7] kobject: 'vlan0': free name [ 2941.697627][ T1064] ? netlink_unicast+0x710/0x710 [ 2941.713632][ T1064] sock_sendmsg+0xd7/0x130 [ 2941.718072][ T1064] ___sys_sendmsg+0x803/0x920 [ 2941.723348][ T1064] ? copy_msghdr_from_user+0x440/0x440 [ 2941.728830][ T1064] ? __kasan_check_read+0x11/0x20 [ 2941.734245][ T1064] ? __fget+0x384/0x560 [ 2941.738411][ T1064] ? ksys_dup3+0x3e0/0x3e0 [ 2941.743207][ T1064] ? __fget_light+0x1a9/0x230 [ 2941.747886][ T1064] ? __fdget+0x1b/0x20 [ 2941.752329][ T1064] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2941.758578][ T1064] __sys_sendmsg+0x105/0x1d0 [ 2941.763521][ T1064] ? __sys_sendmsg_sock+0xd0/0xd0 [ 2941.768563][ T1064] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 2941.780555][ T1064] ? do_syscall_64+0x26/0x760 [ 2941.785254][ T1064] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2941.809728][ T1064] ? do_syscall_64+0x26/0x760 [ 2941.814464][ T1064] __x64_sys_sendmsg+0x78/0xb0 [ 2941.819229][ T1064] do_syscall_64+0xfa/0x760 [ 2941.849728][ T1064] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2941.855665][ T1064] RIP: 0033:0x459a59 [ 2941.869762][ T1064] Code: Bad RIP value. [ 2941.873874][ T1064] RSP: 002b:00007fe082f8ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2941.889706][ T1064] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 2941.897702][ T1064] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000009 [ 2941.919736][ T1064] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 2941.927750][ T1064] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe082f8f6d4 [ 2941.959757][ T1064] R13: 00000000004c7b64 R14: 00000000004dd8c0 R15: 00000000ffffffff [ 2941.967854][ T1064] INFO: task syz-executor.3:21067 blocked for more than 145 seconds. [ 2941.989722][ T1064] Not tainted 5.3.0+ #0 [ 2941.994423][ T1064] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2942.003224][ T1064] syz-executor.3 D28136 21067 1 0x00000004 [ 2942.009570][ T1064] Call Trace: [ 2942.013273][ T1064] __schedule+0x94f/0x1e70 [ 2942.017704][ T1064] ? __sched_text_start+0x8/0x8 [ 2942.022966][ T1064] ? lock_downgrade+0x920/0x920 [ 2942.027821][ T1064] ? rwlock_bug.part.0+0x90/0x90 [ 2942.033109][ T1064] schedule+0xd9/0x260 [ 2942.037206][ T1064] schedule_preempt_disabled+0x13/0x20 [ 2942.043106][ T1064] __mutex_lock+0x7b0/0x13c0 [ 2942.047707][ T1064] ? rtnetlink_rcv_msg+0x40a/0xb00 [ 2942.053166][ T1064] ? mutex_trylock+0x2d0/0x2d0 [ 2942.057932][ T1064] ? find_held_lock+0x35/0x130 [ 2942.063135][ T1064] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 2942.068260][ T1064] ? lock_downgrade+0x920/0x920 [ 2942.073480][ T1064] ? rcu_read_lock_held_common+0x130/0x130 [ 2942.079296][ T1064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2942.085902][ T1064] mutex_lock_nested+0x16/0x20 [ 2942.099666][ T1064] ? mutex_lock_nested+0x16/0x20 [ 2942.104626][ T1064] rtnetlink_rcv_msg+0x40a/0xb00 [ 2942.109567][ T1064] ? rtnl_bridge_getlink+0x910/0x910 [ 2942.125845][ T1064] ? lock_downgrade+0x920/0x920 [ 2942.139732][ T1064] ? netlink_deliver_tap+0x22d/0xbf0 [ 2942.145047][ T1064] ? find_held_lock+0x35/0x130 [ 2942.159670][ T1064] netlink_rcv_skb+0x177/0x450 [ 2942.164461][ T1064] ? rtnl_bridge_getlink+0x910/0x910 [ 2942.179765][ T1064] ? netlink_ack+0xb50/0xb50 [ 2942.184390][ T1064] ? __kasan_check_read+0x11/0x20 [ 2942.189418][ T1064] ? netlink_deliver_tap+0x254/0xbf0 [ 2942.219708][ T1064] rtnetlink_rcv+0x1d/0x30 [ 2942.224152][ T1064] netlink_unicast+0x531/0x710 [ 2942.228917][ T1064] ? netlink_attachskb+0x7c0/0x7c0 [ 2942.239710][ T1064] ? _copy_from_iter_full+0x25d/0x8c0 [ 2942.245103][ T1064] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2942.269727][ T1064] ? __check_object_size+0x3d/0x437 [ 2942.274980][ T1064] netlink_sendmsg+0x8a5/0xd60 [ 2942.290038][ T1064] ? netlink_unicast+0x710/0x710 [ 2942.294994][ T1064] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 2942.309678][ T1064] ? apparmor_socket_sendmsg+0x2a/0x30 [ 2942.315167][ T1064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2942.329693][ T1064] ? security_socket_sendmsg+0x8d/0xc0 [ 2942.335185][ T1064] ? netlink_unicast+0x710/0x710 [ 2942.359983][ T1064] sock_sendmsg+0xd7/0x130 [ 2942.364438][ T1064] __sys_sendto+0x262/0x380 [ 2942.368942][ T1064] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2942.379731][ T1064] ? lock_downgrade+0x920/0x920 [ 2942.384615][ T1064] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2942.409743][ T1064] ? __blkcg_punt_bio_submit+0x1e0/0x1e0 [ 2942.415420][ T1064] ? unlock_page_memcg+0x40/0x40 [ 2942.429875][ T1064] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 2942.435355][ T1064] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 2942.459798][ T1064] ? do_syscall_64+0x26/0x760 [ 2942.464503][ T1064] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2942.479674][ T1064] __x64_sys_sendto+0xe1/0x1a0 [ 2942.484470][ T1064] do_syscall_64+0xfa/0x760 [ 2942.488977][ T1064] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2942.509737][ T1064] RIP: 0033:0x4138a3 [ 2942.513664][ T1064] Code: 30 44 00 b9 11 00 00 00 48 89 ee f3 a6 75 0c 48 c7 03 b0 39 41 00 e9 1a ff ff ff bf b5 30 44 00 b9 18 00 00 00 48 89 ee f3 a6 <75> 0c 48 c7 03 10 37 41 00 e9 fd fe ff ff bf cd 30 44 00 b9 0a 00 [ 2942.533945][ T1064] RSP: 002b:00007fff1fc8ac58 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2942.542695][ T1064] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004138a3 [ 2942.550987][ T1064] RDX: 0000000000000028 RSI: 0000000000a70070 RDI: 0000000000000003 [ 2942.558959][ T1064] RBP: 00007fff1fc8acc0 R08: 00007fff1fc8ac60 R09: 000000000000000c [ 2942.567250][ T1064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2942.575518][ T1064] R13: 00007fff1fc8afc8 R14: 0000000000000000 R15: 0000000000000000 [ 2942.583838][ T1064] INFO: task syz-executor.1:21069 blocked for more than 146 seconds. [ 2942.593581][ T1064] Not tainted 5.3.0+ #0 [ 2942.598253][ T1064] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2942.619639][ T1064] syz-executor.1 D28160 21069 1 0x00000004 [ 2942.626037][ T1064] Call Trace: [ 2942.629333][ T1064] __schedule+0x94f/0x1e70 [ 2942.634181][ T1064] ? __sched_text_start+0x8/0x8 [ 2942.639037][ T1064] ? lock_downgrade+0x920/0x920 [ 2942.659659][ T1064] ? rwlock_bug.part.0+0x90/0x90 [ 2942.664638][ T1064] schedule+0xd9/0x260 [ 2942.668719][ T1064] schedule_preempt_disabled+0x13/0x20 [ 2942.689680][ T1064] __mutex_lock+0x7b0/0x13c0 [ 2942.694313][ T1064] ? rtnetlink_rcv_msg+0x40a/0xb00 [ 2942.699423][ T1064] ? mutex_trylock+0x2d0/0x2d0 [ 2942.719661][ T1064] ? find_held_lock+0x35/0x130 [ 2942.724461][ T1064] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 2942.729578][ T1064] ? lock_downgrade+0x920/0x920 [ 2942.749679][ T1064] ? rcu_read_lock_held_common+0x130/0x130 [ 2942.755528][ T1064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2942.762424][ T1064] mutex_lock_nested+0x16/0x20 [ 2942.767195][ T1064] ? mutex_lock_nested+0x16/0x20 [ 2942.772484][ T1064] rtnetlink_rcv_msg+0x40a/0xb00 [ 2942.777441][ T1064] ? rtnl_bridge_getlink+0x910/0x910 [ 2942.789767][ T1064] ? lock_downgrade+0x920/0x920 [ 2942.794645][ T1064] ? netlink_deliver_tap+0x22d/0xbf0 [ 2942.809678][ T1064] ? find_held_lock+0x35/0x130 [ 2942.814488][ T1064] netlink_rcv_skb+0x177/0x450 [ 2942.819256][ T1064] ? rtnl_bridge_getlink+0x910/0x910 [ 2942.849767][ T1064] ? netlink_ack+0xb50/0xb50 [ 2942.854451][ T1064] ? __kasan_check_read+0x11/0x20 [ 2942.859479][ T1064] ? netlink_deliver_tap+0x254/0xbf0 [ 2942.879708][ T1064] rtnetlink_rcv+0x1d/0x30 [ 2942.884183][ T1064] netlink_unicast+0x531/0x710 [ 2942.888954][ T1064] ? netlink_attachskb+0x7c0/0x7c0 [ 2942.909763][ T1064] ? _copy_from_iter_full+0x25d/0x8c0 [ 2942.915180][ T1064] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2942.929679][ T1064] ? __check_object_size+0x3d/0x437 [ 2942.934936][ T1064] netlink_sendmsg+0x8a5/0xd60 [ 2942.950586][ T1064] ? netlink_unicast+0x710/0x710 [ 2942.955548][ T1064] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 2942.969698][ T1064] ? apparmor_socket_sendmsg+0x2a/0x30 [ 2942.975538][ T1064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2943.000400][ T1064] ? security_socket_sendmsg+0x8d/0xc0 [ 2943.005906][ T1064] ? netlink_unicast+0x710/0x710 [ 2943.019716][ T1064] sock_sendmsg+0xd7/0x130 [ 2943.024159][ T1064] __sys_sendto+0x262/0x380 [ 2943.028660][ T1064] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2943.049796][ T1064] ? lock_downgrade+0x920/0x920 [ 2943.054686][ T1064] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2943.069702][ T1064] ? __blkcg_punt_bio_submit+0x1e0/0x1e0 [ 2943.075377][ T1064] ? unlock_page_memcg+0x40/0x40 [ 2943.081740][ T1064] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 2943.087211][ T1064] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 2943.093127][ T1064] ? do_syscall_64+0x26/0x760 [ 2943.097809][ T1064] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2943.104291][ T1064] __x64_sys_sendto+0xe1/0x1a0 [ 2943.110069][ T1064] do_syscall_64+0xfa/0x760 [ 2943.114582][ T1064] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2943.120863][ T1064] RIP: 0033:0x4138a3 [ 2943.124762][ T1064] Code: 30 44 00 b9 11 00 00 00 48 89 ee f3 a6 75 0c 48 c7 03 b0 39 41 00 e9 1a ff ff ff bf b5 30 44 00 b9 18 00 00 00 48 89 ee f3 a6 <75> 0c 48 c7 03 10 37 41 00 e9 fd fe ff ff bf cd 30 44 00 b9 0a 00 [ 2943.144898][ T1064] RSP: 002b:00007ffd23c7a688 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2943.153674][ T1064] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004138a3 [ 2943.162295][ T1064] RDX: 0000000000000028 RSI: 0000000000a70070 RDI: 0000000000000003 [ 2943.179717][ T1064] RBP: 00007ffd23c7a6f0 R08: 00007ffd23c7a690 R09: 000000000000000c [ 2943.187715][ T1064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2943.210630][ T1064] R13: 00007ffd23c7a9f8 R14: 0000000000000000 R15: 0000000000000000 [ 2943.229682][ T1064] [ 2943.229682][ T1064] Showing all locks held in the system: [ 2943.237721][ T1064] 4 locks held by kworker/u4:0/7: [ 2943.259670][ T1064] 1 lock held by khungtaskd/1064: [ 2943.264819][ T1064] #0: ffffffff88faad00 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 2943.289755][ T1064] 1 lock held by rsyslogd/8695: [ 2943.294634][ T1064] #0: ffff8880a89bc420 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 2943.309726][ T1064] 2 locks held by getty/8785: [ 2943.314414][ T1064] #0: ffff88808eccd710 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 2943.339697][ T1064] #1: ffffc90005f2f2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 2943.349305][ T1064] 2 locks held by getty/8786: [ 2943.369704][ T1064] #0: ffff8880a8d6d510 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 2943.378689][ T1064] #1: ffffc90005f112e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 2943.409717][ T1064] 2 locks held by getty/8787: [ 2943.414418][ T1064] #0: ffff88808de16490 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 2943.423616][ T1064] #1: ffffc90005f292e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 2943.449832][ T1064] 2 locks held by getty/8788: [ 2943.454539][ T1064] #0: ffff88808eccce90 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 2943.479708][ T1064] #1: ffffc90005f332e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 2943.489324][ T1064] 2 locks held by getty/8789: [ 2943.509742][ T1064] #0: ffff8880a7821750 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 2943.519087][ T1064] #1: ffffc90005f3b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 2943.529155][ T1064] 2 locks held by getty/8790: [ 2943.534310][ T1064] #0: ffff88808d4a25d0 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 2943.543721][ T1064] #1: ffffc90005f372e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 2943.553630][ T1064] 2 locks held by getty/8791: [ 2943.558404][ T1064] #0: ffff8880a92814d0 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 2943.567818][ T1064] #1: ffffc90005f092e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 2943.577755][ T1064] 2 locks held by kworker/u4:4/23527: [ 2943.583583][ T1064] 3 locks held by kworker/1:18/14909: [ 2943.588958][ T1064] #0: ffff8880aa4278e8 ((wq_completion)events){+.+.}, at: process_one_work+0x88b/0x1740 [ 2943.599250][ T1064] #1: ffff88804584fdc0 (deferred_process_work){+.+.}, at: process_one_work+0x8c1/0x1740 [ 2943.609522][ T1064] #2: ffffffff89997ca0 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 2943.617865][ T1064] 2 locks held by kworker/0:2/20785: [ 2943.623489][ T1064] #0: ffff8880aa435ba8 ((wq_completion)rcu_gp){+.+.}, at: process_one_work+0x88b/0x1740 [ 2943.633675][ T1064] #1: ffff888035a47dc0 ((work_completion)(&rew.rew_work)){+.+.}, at: process_one_work+0x8c1/0x1740 [ 2943.644994][ T1064] 3 locks held by kworker/0:3/20786: [ 2943.650652][ T1064] #0: ffff88821642bba8 ((wq_completion)ipv6_addrconf){+.+.}, at: process_one_work+0x88b/0x1740 [ 2943.661455][ T1064] #1: ffff888038237dc0 ((addr_chk_work).work){+.+.}, at: process_one_work+0x8c1/0x1740 [ 2943.671521][ T1064] #2: ffffffff89997ca0 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 2943.679532][ T1064] 3 locks held by kworker/1:13/20887: [ 2943.685318][ T1064] #0: ffff8880aa4278e8 ((wq_completion)events){+.+.}, at: process_one_work+0x88b/0x1740 [ 2943.695500][ T1064] #1: ffff888041d4fdc0 ((linkwatch_work).work){+.+.}, at: process_one_work+0x8c1/0x1740 [ 2943.705745][ T1064] #2: ffffffff89997ca0 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 2943.714071][ T1064] 3 locks held by syz-executor.4/21032: [ 2943.719977][ T1064] #0: ffffffff899e8a68 (cb_lock){++++}, at: genl_rcv+0x1a/0x40 [ 2943.727629][ T1064] #1: ffffffff899e8b20 (genl_mutex){+.+.}, at: genl_rcv_msg+0x13e/0x170 [ 2943.736788][ T1064] #2: ffffffff89997ca0 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 2943.745247][ T1064] 2 locks held by syz-executor.0/21031: [ 2943.751092][ T1064] #0: ffffffff899e8a68 (cb_lock){++++}, at: genl_rcv+0x1a/0x40 [ 2943.758742][ T1064] #1: ffffffff899e8b20 (genl_mutex){+.+.}, at: genl_rcv_msg+0x13e/0x170 [ 2943.767585][ T1064] 1 lock held by syz-executor.3/21067: [ 2943.773342][ T1064] #0: ffffffff89997ca0 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00 [ 2943.782560][ T1064] 1 lock held by syz-executor.1/21069: [ 2943.788011][ T1064] #0: ffffffff89997ca0 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00 [ 2943.797321][ T1064] [ 2943.801314][ T1064] ============================================= [ 2943.801314][ T1064] [ 2943.810107][ T1064] NMI backtrace for cpu 1 [ 2943.814451][ T1064] CPU: 1 PID: 1064 Comm: khungtaskd Not tainted 5.3.0+ #0 [ 2943.821548][ T1064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2943.831766][ T1064] Call Trace: [ 2943.835108][ T1064] dump_stack+0x172/0x1f0 [ 2943.839450][ T1064] nmi_cpu_backtrace.cold+0x70/0xb2 [ 2943.844654][ T1064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2943.850898][ T1064] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 2943.856530][ T1064] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 2943.862511][ T1064] arch_trigger_cpumask_backtrace+0x14/0x20 [ 2943.868401][ T1064] watchdog+0x9d0/0xef0 [ 2943.872559][ T1064] kthread+0x361/0x430 [ 2943.876622][ T1064] ? reset_hung_task_detector+0x30/0x30 [ 2943.882167][ T1064] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 2943.888407][ T1064] ret_from_fork+0x24/0x30 [ 2943.893288][ T1064] Sending NMI from CPU 1 to CPUs 0: [ 2943.898788][ C0] NMI backtrace for cpu 0 [ 2943.898793][ C0] CPU: 0 PID: 23527 Comm: kworker/u4:4 Not tainted 5.3.0+ #0 [ 2943.898798][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2943.898802][ C0] Workqueue: bat_events batadv_nc_worker [ 2943.898808][ C0] RIP: 0010:lock_release+0x10e/0x960 [ 2943.898817][ C0] Code: 05 00 00 9c 58 0f 1f 44 00 00 48 89 85 48 ff ff ff 48 c7 c0 28 1c f3 88 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 <0f> 85 e4 06 00 00 48 83 3d cc e5 99 07 00 0f 84 12 05 00 00 fa 66 [ 2943.898821][ C0] RSP: 0018:ffff888061297c00 EFLAGS: 00000246 [ 2943.898828][ C0] RAX: 1ffffffff11e6385 RBX: 1ffff1100c252f85 RCX: 0000000000000000 [ 2943.898832][ C0] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2943.898837][ C0] RBP: ffff888061297cd0 R08: ffff88808ed20280 R09: ffffed1015d06b75 [ 2943.898842][ C0] R10: ffffed1015d06b74 R11: ffff8880ae835ba3 R12: ffffffff88faad00 [ 2943.898846][ C0] R13: ffffffff872abdca R14: ffff888061297ca8 R15: ffff88808ed20280 [ 2943.898851][ C0] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 2943.898855][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2943.898859][ C0] CR2: 0000000000459a2f CR3: 0000000099b35000 CR4: 00000000001406f0 [ 2943.898864][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2943.898868][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2943.898871][ C0] Call Trace: [ 2943.898874][ C0] ? lock_downgrade+0x920/0x920 [ 2943.898877][ C0] ? lock_acquire+0x190/0x410 [ 2943.898881][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2943.898884][ C0] ? __kasan_check_read+0x11/0x20 [ 2943.898887][ C0] batadv_nc_worker+0x225/0x760 [ 2943.898890][ C0] process_one_work+0x9af/0x1740 [ 2943.898893][ C0] ? pwq_dec_nr_in_flight+0x320/0x320 [ 2943.898896][ C0] ? lock_acquire+0x190/0x410 [ 2943.898899][ C0] worker_thread+0x98/0xe40 [ 2943.898903][ C0] ? trace_hardirqs_on+0x67/0x240 [ 2943.898906][ C0] kthread+0x361/0x430 [ 2943.898909][ C0] ? process_one_work+0x1740/0x1740 [ 2943.898913][ C0] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 2943.898916][ C0] ret_from_fork+0x24/0x30 [ 2943.900893][ T1064] Kernel panic - not syncing: hung_task: blocked tasks [ 2944.116224][ T1064] CPU: 1 PID: 1064 Comm: khungtaskd Not tainted 5.3.0+ #0 [ 2944.124021][ T1064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2944.134069][ T1064] Call Trace: [ 2944.137362][ T1064] dump_stack+0x172/0x1f0 [ 2944.141691][ T1064] panic+0x2dc/0x755 [ 2944.145579][ T1064] ? add_taint.cold+0x16/0x16 [ 2944.150249][ T1064] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 2944.155878][ T1064] ? ___preempt_schedule+0x16/0x20 [ 2944.161009][ T1064] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 2944.167185][ T1064] ? nmi_trigger_cpumask_backtrace+0x24c/0x28b [ 2944.173342][ T1064] ? nmi_trigger_cpumask_backtrace+0x256/0x28b [ 2944.179498][ T1064] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 2944.185656][ T1064] watchdog+0x9e1/0xef0 [ 2944.189823][ T1064] kthread+0x361/0x430 [ 2944.193897][ T1064] ? reset_hung_task_detector+0x30/0x30 [ 2944.199452][ T1064] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 2944.205700][ T1064] ret_from_fork+0x24/0x30 [ 2944.211707][ T1064] Kernel Offset: disabled [ 2944.216039][ T1064] Rebooting in 86400 seconds..