x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfe1, 0x4, @perf_config_ext={0x9, 0x4}, 0x10844, 0x100000000, 0x1be, 0x8, 0x4, 0xce2, 0x1, 0x0, 0xfffffffb, 0x0, 0x9}, r7, 0x9, 0xffffffffffffffff, 0x3) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff, 0x7, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0xa, 0x3, 0x5, 0xc, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @alu={0x7, 0x1, 0x7, 0x0, 0x6, 0x30, 0xb}, @call], &(0x7f0000000300)='GPL\x00', 0xa10d, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x2, 0xd, 0x8, 0xfffffffd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r10]}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000040)='\x00') write$cgroup_int(r2, &(0x7f0000000600), 0x12) 18:31:51 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_clone(0x4021000, &(0x7f0000000280), 0x0, &(0x7f0000000300), 0x0, 0x0) 18:31:52 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_clone(0x4021000, &(0x7f0000000280), 0x0, &(0x7f0000000300), 0x0, 0x0) [ 992.705539][T13374] syz-executor.5 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=0 [ 992.745170][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.753204][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.766787][T13374] CPU: 1 PID: 13374 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 992.777243][T13374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 992.787318][T13374] Call Trace: [ 992.790625][T13374] [ 992.793586][T13374] dump_stack_lvl+0xd1/0x138 [ 992.798229][T13374] dump_header+0x10b/0x85f [ 992.802697][T13374] oom_kill_process.cold+0x10/0x15 [ 992.807865][T13374] out_of_memory+0x35c/0x14a0 [ 992.812597][T13374] ? find_held_lock+0x2d/0x110 [ 992.817409][T13374] ? oom_killer_disable+0x280/0x280 [ 992.822664][T13374] ? find_held_lock+0x2d/0x110 [ 992.827463][T13374] mem_cgroup_out_of_memory+0x206/0x270 [ 992.833063][T13374] ? mem_cgroup_margin+0x130/0x130 [ 992.838190][T13374] ? lock_downgrade+0x6e0/0x6e0 [ 992.843070][T13374] try_charge_memcg+0xefb/0x12f0 [ 992.848024][T13374] ? mem_cgroup_handle_over_high+0x520/0x520 [ 992.854014][T13374] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 992.859754][T13374] ? lock_downgrade+0x6e0/0x6e0 [ 992.864629][T13374] ? lock_downgrade+0x6e0/0x6e0 [ 992.869491][T13374] ? rcu_read_unlock+0x9/0x60 [ 992.874197][T13374] obj_cgroup_charge+0x2af/0x5e0 [ 992.879153][T13374] __kmem_cache_alloc_node+0xb2/0x430 [ 992.884532][T13374] ? kvmalloc_node+0xa2/0x1a0 [ 992.889235][T13374] ? kvmalloc_node+0xa2/0x1a0 [ 992.893923][T13374] __kmalloc_node+0x4d/0xd0 [ 992.898443][T13374] kvmalloc_node+0xa2/0x1a0 [ 992.902960][T13374] xt_alloc_table_info+0x40/0xa0 [ 992.907979][T13374] do_ip6t_set_ctl+0x514/0xb30 [ 992.912773][T13374] ? trace_contention_end+0x153/0x1e0 [ 992.918161][T13374] ? __mutex_lock+0x231/0x1360 [ 992.922951][T13374] ? compat_do_replace.constprop.0+0x410/0x410 [ 992.929132][T13374] ? wait_for_completion_io_timeout+0x20/0x20 [ 992.935216][T13374] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 992.940631][T13374] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 992.946700][T13374] nf_setsockopt+0x87/0xe0 [ 992.951135][T13374] ipv6_setsockopt+0x12b/0x190 [ 992.955949][T13374] tcp_setsockopt+0x9f/0x100 [ 992.960571][T13374] ? sock_common_recvmsg+0x190/0x190 [ 992.965865][T13374] __sys_setsockopt+0x2c6/0x5b0 [ 992.970755][T13374] ? __ia32_sys_recv+0x100/0x100 [ 992.975713][T13374] ? up_write+0x520/0x520 [ 992.980068][T13374] ? handle_mm_fault+0x25b/0x850 [ 992.985042][T13374] __x64_sys_setsockopt+0xbe/0x160 [ 992.990175][T13374] ? syscall_enter_from_user_mode+0x26/0xb0 [ 992.996076][T13374] do_syscall_64+0x39/0xb0 [ 993.000511][T13374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 993.006414][T13374] RIP: 0033:0x7f9b5b28d71a [ 993.010833][T13374] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 993.030447][T13374] RSP: 002b:00007fff8944efc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 993.038866][T13374] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 00007f9b5b28d71a [ 993.046867][T13374] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 993.054839][T13374] RBP: 00007fff8944eff0 R08: 0000000000000558 R09: fefefefefeff646b [ 993.062810][T13374] R10: 00007f9b5b384940 R11: 0000000000000202 R12: 00007fff8944f050 [ 993.070781][T13374] R13: 0000000000000003 R14: 00007fff8944efec R15: 00007f9b5b3848e0 [ 993.078780][T13374] [ 993.093470][T13374] memory: usage 8372kB, limit 0kB, failcnt 185 [ 993.111777][T13374] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 993.131403][T13374] Memory cgroup stats for /syz5: [ 993.131611][T13374] anon 45056 [ 993.131611][T13374] file 8384512 [ 993.131611][T13374] kernel 143360 [ 993.131611][T13374] kernel_stack 0 [ 993.131611][T13374] pagetables 8192 [ 993.131611][T13374] sec_pagetables 0 [ 993.131611][T13374] percpu 64 [ 993.131611][T13374] sock 0 [ 993.131611][T13374] vmalloc 0 [ 993.131611][T13374] shmem 8368128 [ 993.131611][T13374] zswap 0 [ 993.131611][T13374] zswapped 0 [ 993.131611][T13374] file_mapped 180224 [ 993.131611][T13374] file_dirty 0 [ 993.131611][T13374] file_writeback 0 [ 993.131611][T13374] swapcached 0 [ 993.131611][T13374] anon_thp 0 [ 993.131611][T13374] file_thp 0 [ 993.131611][T13374] shmem_thp 0 [ 993.131611][T13374] inactive_anon 45056 [ 993.131611][T13374] active_anon 8368128 [ 993.131611][T13374] inactive_file 4096 [ 993.131611][T13374] active_file 12288 [ 993.131611][T13374] unevictable 0 [ 993.131611][T13374] slab_reclaimable 34472 [ 993.131611][T13374] slab_unreclaimable 85192 [ 993.131611][T13374] slab 119664 [ 993.298134][T14082] bridge0: port 3(veth0_to_bond) entered blocking state [ 993.351477][T14082] bridge0: port 3(veth0_to_bond) entered disabled state [ 993.369772][T14082] device veth0_to_bond entered promiscuous mode 18:31:52 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x7, 0x0, 0x0, 0xd}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/4096, 0x2c, 0x1000, 0x1}, 0x20) [ 993.399014][T14082] bridge0: port 3(veth0_to_bond) entered blocking state [ 993.406171][T14082] bridge0: port 3(veth0_to_bond) entered forwarding state [ 993.525916][T13374] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=13374,uid=0 [ 993.577889][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.621824][T13374] Memory cgroup out of memory: Killed process 13374 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 993.842796][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.046446][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.232584][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.751131][ T9] device hsr_slave_0 left promiscuous mode [ 995.790796][ T9] device hsr_slave_1 left promiscuous mode [ 995.802407][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 995.809843][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 995.853613][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 995.861050][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 995.913585][ T9] device bridge_slave_1 left promiscuous mode [ 995.919834][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.952819][ T9] device bridge_slave_0 left promiscuous mode [ 995.959058][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.007612][ T9] device veth1_macvtap left promiscuous mode [ 996.031995][ T9] device veth0_macvtap left promiscuous mode [ 996.038153][ T9] device veth1_vlan left promiscuous mode [ 996.051647][ T9] device veth0_vlan left promiscuous mode [ 996.276075][ T5109] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 996.287229][ T5109] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 996.297081][ T5109] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 996.304781][ T5109] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 996.312282][ T5109] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 996.746845][ T9] team0 (unregistering): Port device team_slave_1 removed [ 996.783510][ T9] team0 (unregistering): Port device team_slave_0 removed [ 996.812046][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.837038][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 997.021782][ T9] bond0 (unregistering): Released all slaves 18:31:56 executing program 1: syz_clone(0x140300, 0x0, 0x0, 0x0, 0x0, 0x0) 18:31:56 executing program 3: syz_clone(0x100a8000, 0x0, 0x0, 0x0, 0x0, 0x0) 18:31:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x100, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x13}, 0x48) 18:31:56 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000000)=@raw=[@generic, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @func, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x97, &(0x7f00000000c0)=""/151, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:31:56 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x1, 0x2, 0x4, 0x4}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, 0xffffffffffffffff, 0x0}, 0x20) 18:31:56 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x100, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc}, 0x48) 18:31:56 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x5c, &(0x7f00000000c0)=""/92, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:31:56 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 997.750301][T14127] chnl_net:caif_netlink_parms(): no params data found [ 998.103245][T14127] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.110365][T14127] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.170901][T14127] device bridge_slave_0 entered promiscuous mode [ 998.222936][T14127] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.238068][T14127] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.260387][T14127] device bridge_slave_1 entered promiscuous mode [ 998.401452][ T9326] Bluetooth: hci2: command 0x0409 tx timeout [ 998.445348][T14127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.475201][T14127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.656223][T14127] team0: Port device team_slave_0 added [ 998.692369][T14127] team0: Port device team_slave_1 added [ 998.790560][T14127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 998.832736][T14127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 998.931339][T14127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 998.983487][T14127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 998.990467][T14127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 999.155342][T14127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.425024][T14127] device hsr_slave_0 entered promiscuous mode [ 999.479676][T14127] device hsr_slave_1 entered promiscuous mode [ 999.509547][T14127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 999.539255][T14127] Cannot create hsr debugfs directory [ 1000.445581][T14127] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1000.481451][ T9326] Bluetooth: hci2: command 0x041b tx timeout [ 1000.491987][T14127] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1000.515121][T14127] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1000.545500][T14127] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1000.678720][ T5109] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1000.688212][ T5109] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1000.697494][ T5109] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1000.705218][ T5109] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1000.713478][ T5109] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1000.888945][T14127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.938606][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1000.947784][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1000.964606][T14127] 8021q: adding VLAN 0 to HW filter on device team0 [ 1001.004940][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1001.014944][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1001.039675][T12947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.046860][T12947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1001.103973][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1001.120006][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1001.130659][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1001.148202][T13513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.155390][T13513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1001.172720][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1001.188515][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1001.256288][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.273967][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1001.284508][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1001.301083][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.320440][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1001.337070][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1001.362031][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1001.370385][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1001.402571][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1001.413168][T14127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1001.483359][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.538503][T14183] chnl_net:caif_netlink_parms(): no params data found [ 1001.592197][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.794528][T14183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.819016][T14183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.829060][T14183] device bridge_slave_0 entered promiscuous mode [ 1001.870348][T14183] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.881419][T14183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.889623][T14183] device bridge_slave_1 entered promiscuous mode [ 1001.975226][T14183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1002.027652][T14183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.116013][T14183] team0: Port device team_slave_0 added [ 1002.174711][T14127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1002.196807][T14183] team0: Port device team_slave_1 added [ 1002.216018][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1002.230516][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1002.293108][T14183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1002.300077][T14183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1002.329146][T14183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1002.365797][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1002.375583][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1002.396033][T14183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1002.403220][T14183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1002.429509][T14183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.447950][T14127] device veth0_vlan entered promiscuous mode [ 1002.483287][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1002.493638][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1002.506396][T14127] device veth1_vlan entered promiscuous mode [ 1002.520167][T14183] device hsr_slave_0 entered promiscuous mode [ 1002.527241][T14183] device hsr_slave_1 entered promiscuous mode [ 1002.534943][T14183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1002.543271][T14183] Cannot create hsr debugfs directory [ 1002.550055][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1002.558890][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1002.566305][ T5109] Bluetooth: hci2: command 0x040f tx timeout [ 1002.573109][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1002.619103][T14127] device veth0_macvtap entered promiscuous mode [ 1002.627725][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1002.637616][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1002.654482][T14127] device veth1_macvtap entered promiscuous mode [ 1002.682711][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1002.695273][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1002.725778][T14127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.737001][T14127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.747189][T14127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.757947][T14127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.768282][T14127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.780352][T14127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.792808][T14127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.811338][ T9326] Bluetooth: hci4: command 0x0409 tx timeout [ 1002.822329][T14127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.841008][T14127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.852159][T14127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.863809][T14127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1002.878275][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1002.888294][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1002.905102][T14127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.918428][T14127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.929076][T14127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.940529][T14127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.950622][T14127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.962352][T14127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.972491][T14127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.983232][T14127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.993610][T14127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.005046][T14127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.016548][T14127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1003.039511][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1003.049135][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1003.060740][T14127] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.072598][T14127] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.089343][T14127] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.100701][T14127] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.319470][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.338013][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.492034][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1003.591715][ T9] device hsr_slave_0 left promiscuous mode [ 1003.598240][ T9] device hsr_slave_1 left promiscuous mode [ 1003.632933][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1003.640369][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1003.663603][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1003.671033][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1003.703483][ T9] device bridge_slave_1 left promiscuous mode [ 1003.709722][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.753189][ T9] device bridge_slave_0 left promiscuous mode [ 1003.759437][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.814924][ T9] device veth1_macvtap left promiscuous mode [ 1003.820994][ T9] device veth0_macvtap left promiscuous mode [ 1003.841424][ T9] device veth1_vlan left promiscuous mode [ 1003.847324][ T9] device veth0_vlan left promiscuous mode [ 1004.324971][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1004.341084][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1004.363505][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1004.379840][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1004.476859][ T9] bond0 (unregistering): Released all slaves [ 1004.592998][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1004.607498][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1004.651409][ T9326] Bluetooth: hci2: command 0x0419 tx timeout [ 1004.657803][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:32:04 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x6, 0x8, &(0x7f0000000cc0)=@framed={{}, [@func, @map_idx_val, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000880)='syzkaller\x00', 0x5, 0x87, &(0x7f0000000d80)=""/135, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:32:04 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) 18:32:04 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2de, &(0x7f0000000a00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\bH\x0e*\xb2O3\xc9\x04\x8f\f\xe3\xfe\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94\x00\x00\x00\x00\x00\x00\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) 18:32:04 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8924, &(0x7f0000000080)) 18:32:04 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x2, &(0x7f0000000340)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000380)='syzkaller\x00', 0x1, 0xf5, &(0x7f00000003c0)=""/245, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1004.891520][ T9326] Bluetooth: hci4: command 0x041b tx timeout 18:32:04 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff}, 0x20, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:32:04 executing program 3: perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2408, 0x462890d0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xd3, 0xfffffffffffffe64, &(0x7f0000000040)="b90703600000f007049e0ff086dd1fffffe10ec53308633a77fbac141441e0022001be3e7d2a2002ff", 0x0, 0x104, 0xa000000, 0x0, 0xfeb9, &(0x7f0000000640)="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", &(0x7f0000000100)}, 0x28) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x5, 0x7, 0xfc, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext={0x1, 0xac6}, 0x2, 0x17cd, 0x4, 0x5, 0x200, 0x900000, 0x4000, 0x0, 0x4}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x9) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = syz_clone(0x28000800, 0x0, 0x0, &(0x7f0000000d00), 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x9, 0x0, 0x1, 0x1f, 0x0, 0xfffffffffffff800, 0x4011, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x20, 0x578, 0xd80, 0x3b84668625df2020, 0x2, 0x3, 0xffff, 0x0, 0x2, 0x0, 0x5}, r2, 0xb, 0xffffffffffffffff, 0xb) perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x3f, 0x0, 0x4d, 0x6, 0x0, 0x3, 0x2000, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x1, 0x8000000000000000, 0x9, 0x9, 0x9f6f, 0x7, 0x3, 0x0, 0x3f}, r0, 0x4, 0xffffffffffffffff, 0x8) [ 1006.021404][T14183] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1006.039878][T14183] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1006.063870][T14183] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1006.122451][T14183] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1006.268444][T14183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1006.298667][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1006.315349][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1006.330678][T14183] 8021q: adding VLAN 0 to HW filter on device team0 [ 1006.354982][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1006.372382][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1006.391550][T13513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.398658][T13513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1006.446760][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1006.460838][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1006.480865][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1006.499488][T10893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.506660][T10893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1006.521810][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1006.538647][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1006.549909][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1006.589412][T14183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1006.600190][T14183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1006.614821][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1006.625184][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1006.635338][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1006.644779][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1006.654455][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1006.668690][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1006.693001][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1006.972094][ T9326] Bluetooth: hci4: command 0x040f tx timeout [ 1007.085790][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1007.095218][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1007.116725][T14183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1007.673653][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1007.684346][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1007.717865][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1007.727073][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1007.738308][T14183] device veth0_vlan entered promiscuous mode [ 1007.749709][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1007.757830][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1007.770277][T14183] device veth1_vlan entered promiscuous mode [ 1007.806077][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1007.816642][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1007.825444][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1007.834847][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1007.845637][T14183] device veth0_macvtap entered promiscuous mode [ 1007.860577][T14183] device veth1_macvtap entered promiscuous mode [ 1007.886380][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.905234][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.916940][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.928016][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.938205][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.950488][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.967242][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.981466][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.999629][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1008.011837][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.032968][T14183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1008.044322][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1008.059991][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1008.069726][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1008.087060][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1008.098754][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.116089][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.130556][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.145133][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.159177][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.177959][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.192810][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.208885][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.224723][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.242663][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.254305][T14183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1008.264036][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1008.272815][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1008.286816][T14183] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.295974][T14183] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.305125][T14183] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.313960][T14183] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.398867][ T5227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.414555][ T5227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.435003][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1008.452337][ T5227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.460339][ T5227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.476252][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:32:07 executing program 0: perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2408}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xd3, 0xfffffffffffffe64, &(0x7f0000000040)="b90703600000f007049e0ff086dd1fffffe10ec53308633a77fbac141441e0022001be3e7d2a2002ff", 0x0, 0x104, 0xa000000, 0x0, 0xfeb9, &(0x7f0000000640)="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", &(0x7f0000000100)}, 0x28) syz_clone(0x28000800, 0x0, 0x0, &(0x7f0000000d00), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) 18:32:07 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4, 0x200}, 0x0, 0x3, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000001f00)='ip60\xb7\xb5\x04F\x13\x87\xa1\xe3d\xbd|\x95\xb7\x13i\xe3\xa0\\XJ~\xdaW\xe0\x03\xaa\xcd\x12\x91\x18\x15\xd1\xd5\xfbB\xd0\xe2\xfdS\x94.\x8f{(\xf9\x1f\xa6I\n\x17WE\x15\x1c\xabX>\x7f`\xde\xdb.\'\x9fpH\x0467\x9d\x01\xfe<\x02\x83\x99 \xfc^\xcb:\xcds\x89X\xcb\xd18\xb4\xea\x98\a\xeaB\xd4\x1e\xd0PB\x91\x15\xd3\xb8\xaf \xb9\xb3b\xff\xaa\x9d\x81e\x00\x00\x00\x00\x00\x00\x00\x00&\xe1;t\x82\x96\xe0Y\xe0\x85VG\a\x00\x00\x00\xd6\x9d\x0f\x98\xefY5\xd2\xb7\x1e\xfa/\xc7isq\x9f\xeb\xf1\xd8l`\x06O\x81-\xdd\xfe\x02\xe2\xa8o\x1fRf\x18\fI\x99\xa6G\xc9\x86\xf1\xc3?%\xc7\xeb\xe2\vP\x00]\xc4\x11N\xbe\xc8\xed\xa5\x83\xd4\xc1\x00\xfa#O\xb6gR#\x19\xa9\xdf\x14\x1fc\x17.\xa0\xdd\xbf\x91)!\x9f\x98u\x85\xec>\xf6*\xbc\xaas\xd3\xae\xe6\x01\xeb\'\xc0\xd1e-$\x13K\x1ce\xd4*vX\xce?\xcf:\xe5\x88W[^l]>\x9a\xe8\xda?\xfb\xce\xa9+T\xea\xfe-\xac\xb88S_\x0f3sk\xfb\x04\xc6&\x939\x8b@\xac\x90\xae\x9a\xdf\x9c\t\xb3\f\x7f&\xf7\xad\xc2\xcc\xd5\xd9+\xf2\x8ce\x94\\\xb7(e\xcb\xe9\xe7\x02\xcd\xd76\xa4P\xe2T\xa6O\xca\t\x00b\x94\xa4>+J\x12\xebK\xb1\xda \xac\xc1o\xfad\xa8\xe4w\xd3\xd4\x8d\xf0\xe7N_\x94\xfb\xe1\xe2\xac}\x87\xfewv\xf2\xc4y}a\xf7\xd4{kQ\x9a\xa6\x00\x00\x00\x00\x00\x00') r2 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000552d, 0x30414, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x80}, 0xba21, 0x3b, 0x7d, 0x0, 0x4, 0x101, 0x745c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x5, 0x6, 0x4e, 0x2, 0x0, 0xfe, 0x0, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000400)}, 0x0, 0x6, 0xf, 0x0, 0x9, 0x5026, 0xfff, 0x0, 0x1}, 0xffffffffffffffff, 0x9, r2, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'dummy0\x00', 0x10}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) socketpair(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x10}) bpf$ITER_CREATE(0x21, &(0x7f00000003c0)={r1}, 0x8) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000001a00)={0x0, &(0x7f0000000100)}) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000019c0), 0xfffffffffffffdd7) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000700)=""/212, 0xd4}, {&(0x7f00000005c0)=""/101, 0x65}, {&(0x7f0000000880)=""/244, 0xf4}], 0x3, &(0x7f0000000040)=""/9, 0x9}, 0x10121) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000001c80)='!&\v\x13\xb0s\xc1\xb1=\x1bN^]>.(\t\xdb>|\xf1\x16\xf43x\x1e\xcem\xf8(\xd0\xfe\xf1\xec\x00\x00I\x85\xa8\xbaw\xb0]\'*XOJ`\x8cO,y\'B\x17\xcb\xa3\xd8?\xa11\xcd\x11\xfeK\xca\xd6\xc4\x12\xeb4T\xd6\x00A1*@\xe5\xabe\x04\xed\xa1S>\xdeY\xd6&\xaf\xc0\xff\a\xcc]\xc3Ta7,\xed\xb3\xab\x86\x94\xcb\xc10>#\xefE\xb0k\x00\x82\x8c\xa4\x8a?\x02a\x14\xdc\xee\x9aSh:K>#\xaf\x98\x84\xa0t\xec\xcb\xe7\x82\xed\xd2]\xcb\xe4\xfe\xe2\xec\xa7\xd7c?\xbe\xe57\xd5\x91Lh\xc7B2\xe8\xc7\xf5S\xd6fe\a\x84\x11tI%;\x01\x84\xcb\xa2\xe8\xcf`a\x9c\x92Ce\xf6\xbf\tU\xaa`\xa1\x12\x04\xd2\xd8\xd5\xd3\xf9Z\xf4\xea\aj\xabhl\x90\n\xa3\xc7V9}\x9eg\x9b\x15\x01n\x88L\x84\x10\x8b)\xc5\xaa\xdf\xd6X\xce\x9f\xd3\xa9\xc8\'\xad\xcd\x15\xe8\x81d\xfb\xffd\xde\vm\xc7\xe88\x84\vkhW9\xe3\x00\x1b\x15f\xda!\nd\x1d\x9b,\xbb\xce\x03\v\xe6\x99\x10u\xca\x1c\x1eH\xe9\x96\xe0\x891\xf3\nP\x0e\xf3\xa1Rk5\xfb\xc0\xc1\xd2\b\xa6\x89\'\x8b\xd0\xb6\xb5\x15\xb6\x89`\x9b\x96\xa7\x01G\xd8\xe6\xda\xea\x14){d\x1b\xdfms\a\x02>\xbf\xa4XWN\xf7\x7f53\xed\xed\x96;f\xd4\xf5\xc7\xaf\a\xb4\xcf\xc17\x00\x00\x00\x00\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$TUNGETFILTER(r6, 0x801054db, &(0x7f00000009c0)=""/4096) write$cgroup_int(r5, &(0x7f00000002c0), 0x12) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0x4, 0x0, 0x0, 0x4, 0x0, 0x8000007, 0x73dc0ac7e45ff080, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1fdc}, 0x4100a, 0x5, 0x88, 0x0, 0x1b, 0x7, 0x202, 0x0, 0x400007, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8923, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x20000, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, &(0x7f0000001a40)='\xa3\x16\x85\x1e \xb4\x19\x00\xccj\xa2\xb7+\x04pp\xa4Q\x84\xf8\x0f}S\xd9\x8c\'\xa9\x95\x9d\x83\x91$\x87\xe4\x18\xbb\x17\xe8!\x9c\t%?\xca\xe8\xe4\x1a\x8a\x83\x8ci\xbd\xf6\x84\xa2\xe1\xaeg\xf0\x1a\xcdM\xea`6Q\xec\xbc\xb1D\xe0w\xae\x14\xcf\xf3\xb72\x87\xfb\xa8\xd6\x1d\xdc\x9a\x93_\x1f\x90\x05\x8c\xbc\f\xd8\xad\xc9@.\x8d\x18z\x03O\xd2h\xbeGE\a\xa7\xe2\x1doU5\xa5\xa5\xfff@\xc5\xf2S\xe6\x1eXX\xc9-[\xf3*\x8e\x8c/\xa8\x87>\xee\xb7\xf7\xa5\x9fI\xd9\"') sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="99301a7ae4cae582fbaee282fc8c08ae307cf2ea3d5b21b6140479c62b2e2625960f93ad88e3313737c0b9d42f995a5265170829e5835f42e3474b9173b2a273f544fb", 0x43}], 0x1, &(0x7f00000029c0)=ANY=[@ANYRES64=r4, @ANYRES16=r7, @ANYRES8, @ANYBLOB="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", @ANYRES16=r4], 0x128}, 0x40) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x1fffffffffffd, 0x12) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x6) 18:32:07 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x8, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 18:32:07 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2de, &(0x7f0000000a00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\bH\x0e*\xb2O3\xc9\x04\x8f\f\xe3\xfe\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94\x00\x00\x00\x00\x00\x00\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) 18:32:07 executing program 3: perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2408, 0x462890d0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xd3, 0xfffffffffffffe64, &(0x7f0000000040)="b90703600000f007049e0ff086dd1fffffe10ec53308633a77fbac141441e0022001be3e7d2a2002ff", 0x0, 0x104, 0xa000000, 0x0, 0xfeb9, &(0x7f0000000640)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7", &(0x7f0000000100)}, 0x28) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x5, 0x7, 0xfc, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext={0x1, 0xac6}, 0x2, 0x17cd, 0x4, 0x5, 0x200, 0x900000, 0x4000, 0x0, 0x4}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x9) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = syz_clone(0x28000800, 0x0, 0x0, &(0x7f0000000d00), 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x9, 0x0, 0x1, 0x1f, 0x0, 0xfffffffffffff800, 0x4011, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x20, 0x578, 0xd80, 0x3b84668625df2020, 0x2, 0x3, 0xffff, 0x0, 0x2, 0x0, 0x5}, r2, 0xb, 0xffffffffffffffff, 0xb) perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x3f, 0x0, 0x4d, 0x6, 0x0, 0x3, 0x2000, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x1, 0x8000000000000000, 0x9, 0x9, 0x9f6f, 0x7, 0x3, 0x0, 0x3f}, r0, 0x4, 0xffffffffffffffff, 0x8) 18:32:07 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff}, 0x20, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:32:08 executing program 1: gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)) 18:32:08 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:32:08 executing program 3: perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2408, 0x462890d0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000009c0)=ANY=[@ANYBLOB="b702000002000000bfa30000000000000703000000fef7ff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f050404000001007d60b7030000000000006a0a00fefdff0000850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c59916ffc9b7a3e09f08811c43f757fb2ea80e5cf8df265e1b40e4c8ae7a89cf8bd819b5c0c0000f0008da6807677fa6d1e8f6afa076abb480a1e2907b54bb4db2c769937000098af27db5b56024db9f6fd1af32d12c66bcbbbd2cb2000ce94284673b4c566ca8f01e3deff7b46f2cf64e8d5467e357754508535766c80114604eab9b290a248a120c9c6e39f3052aae80677eeba68562eaeaea5fecf298ca20f274233106e2baf69b1c60f0ce4099f366b89ab63ecf772de7b265040b6b19dbef92b2704550a4d1dd5c50b7420b58a93fe94c756008afcd0b2eb785632e0a85f02a5a6474ae54990ff9fce77ea4f6594fba0ed5020e6477cc921fee1f6d8ad6a80d0947cd6d4a561ced23b0b4a902be6af7ec2d1ba000057f30100000000d155b599fae50696100000aaf253886c0b7f004731d714ad6cd20cef7ed95157ab050000f0077e9d13d8b93eb0f2c6f8941e35e15d3d2369f5a662c849eb709df5c6ba73cccdfa3c58bc5204339b0b487f0eeed581cb202994c40d322713c338033213c18a34ee0ca2cf61efb4b3787a642735d6d482ba98d252f36c54333aab1aa736369392239820f5f1557b0bf7ccb0a5a13c714e0b1a5bc3f9caff32a64e8647dff683076cda3dd5b0e7b11141fba72db530abcbe44bc40528ad807970727fb819afa14aaaccfceec4932dad57380e0499f933f1f7d7dd51995edcf53b907228fa9e83433eedb4ac88d0285594ffb0d14e71d5c57f33700f22b2241741307bd8325a76f395bc9aa315211e5979f34adddb521914f92eed3d3e9de82942a952e86bd67aff5bc2e3c1fcc00f61124dd06df4b8fd356cb365adc037e443820c05c5db160087a9cf471e0eff227f25b2c5ca67bfcd55f8c81f5eb1f8b8ee2541621e7afddb8009a1996f8e5b80000000000000003b5a4a5d6495479fac471ba60fbd0e502235174f3a3484124cba15f5fe92c7b07fd45a5563cd3700000000001825b05a9bc7ffc60a580ea8cb7f85b77b35a06a895b287b47efba224d97b5610f33e30bc215aca48e5d7018a7f91c4228b35f71a70900000000000000870086d851ff7535e07bbec801b79afa477ebab255c7265820456fd13f34f9d729315d856be7ec564613d5e28cf7c405d6e2b6ae8de10e117733d30f4fe049658a2c3e0000000025e4e01e681f67eb459728d07479064af682677b771a8fdd89f1fba434d6558c49c4b72aa82d142e8ced2566e8b96354a8057aa887ff0300002cb55832349f63c9755d7419925f75561264e54b5481d939ffff790000d4b7093e6972ededfa34923502e43cfa148cf5ae88577329c5d417cb5db367436e7d4dbf801050bbdef0c605627955eca0334e63b024b33ae7a6000000000000000000000000e18b356ca5e873e9b02e2f2ce5f324f9df617f8fab2113bed7054291b0fd00cf56995ec3151815b1998c9d6d24aa5e8de4b0263fa220bddccd44dd0090fd0e3ab60d265a05af4b60e40969f3fc5990e51b885dc9cb8c12ca6de5d4970d494f4d50119a3671dc9562a2296022767f7a059c74a069286fa9b49f670ddb38bfe31377955cdf8e77f9f4652c3ac63b6cfcca9f47bcbbc59fa62b2ff4a21cb43479e407cb00b7c2e719a2982bddd0dc90f9cd53e78f0ecf3476b09137510c0ddb6f902759be07c1c095412b63cf3975939846ecff9906effbcf78deba0442c9d040034a33c360e9137e8dc3a652f025208aa7eab080fa7e75a405aceb6600b40ef4b56bbaefcc9ce2b3a0963c00c2e930616a90ba082dba70047d727e73d3966439f63978656ceb5d3ff7e56535f7e44b05c710c45764a2a69150ac7201bc8991468cd519941655132574e5701fa159822d8eb43380d13d86783ba1c33bcfc0194af35df75ae49e1b7a42b22fe7dbd0ff1907bae441605754a50d02597c1e31376a544cdae3fb8c2e983bc06b6cbbb5a047ef769e7d0d44b8b838594981d721353ce3a9b1b4e62f2dd97c17f8895ca5a304fb49e08496e86d5c18ee2ba1bb8ff8bec7f4d414223089643e251801458de3e15f014ae8d1d9ff400406812fb8d5a425aef8559761f0fa946d4de98278e84fbfb61b4493781fd91a30b497095d2dcb0660f4036d3869a7668e93309c00000000000000000000000093252dbdd7dcdb449f1fe0a5bf78e4d3c71de12b158ddb375a5f04a6acb91c834926278b97a2af7e8cf661af430c30e3b6e3bd092ce089cdd3731851fdbf0fb6fb4c8054a33d06ff8cc3ab2ae0dc2d66c8e1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xd3, 0xfffffffffffffe64, &(0x7f0000000040)="b90703600000f007049e0ff086dd1fffffe10ec53308633a77fbac141441e0022001be3e7d2a2002ff", 0x0, 0x104, 0xa000000, 0x0, 0xfeb9, &(0x7f0000000640)="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", &(0x7f0000000100)}, 0x28) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x5, 0x7, 0xfc, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext={0x1, 0xac6}, 0x2, 0x17cd, 0x4, 0x5, 0x200, 0x900000, 0x4000, 0x0, 0x4}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x9) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = syz_clone(0x28000800, 0x0, 0x0, &(0x7f0000000d00), 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x9, 0x0, 0x1, 0x1f, 0x0, 0xfffffffffffff800, 0x4011, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x20, 0x578, 0xd80, 0x3b84668625df2020, 0x2, 0x3, 0xffff, 0x0, 0x2, 0x0, 0x5}, r2, 0xb, 0xffffffffffffffff, 0xb) perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x3f, 0x0, 0x4d, 0x6, 0x0, 0x3, 0x2000, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x1, 0x8000000000000000, 0x9, 0x9, 0x9f6f, 0x7, 0x3, 0x0, 0x3f}, r0, 0x4, 0xffffffffffffffff, 0x8) 18:32:08 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x7, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:32:08 executing program 3: perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2408, 0x462890d0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000009c0)=ANY=[@ANYBLOB="b702000002000000bfa30000000000000703000000fef7ff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f050404000001007d60b7030000000000006a0a00fefdff0000850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c59916ffc9b7a3e09f08811c43f757fb2ea80e5cf8df265e1b40e4c8ae7a89cf8bd819b5c0c0000f0008da6807677fa6d1e8f6afa076abb480a1e2907b54bb4db2c769937000098af27db5b56024db9f6fd1af32d12c66bcbbbd2cb2000ce94284673b4c566ca8f01e3deff7b46f2cf64e8d5467e357754508535766c80114604eab9b290a248a120c9c6e39f3052aae80677eeba68562eaeaea5fecf298ca20f274233106e2baf69b1c60f0ce4099f366b89ab63ecf772de7b265040b6b19dbef92b2704550a4d1dd5c50b7420b58a93fe94c756008afcd0b2eb785632e0a85f02a5a6474ae54990ff9fce77ea4f6594fba0ed5020e6477cc921fee1f6d8ad6a80d0947cd6d4a561ced23b0b4a902be6af7ec2d1ba000057f30100000000d155b599fae50696100000aaf253886c0b7f004731d714ad6cd20cef7ed95157ab050000f0077e9d13d8b93eb0f2c6f8941e35e15d3d2369f5a662c849eb709df5c6ba73cccdfa3c58bc5204339b0b487f0eeed581cb202994c40d322713c338033213c18a34ee0ca2cf61efb4b3787a642735d6d482ba98d252f36c54333aab1aa736369392239820f5f1557b0bf7ccb0a5a13c714e0b1a5bc3f9caff32a64e8647dff683076cda3dd5b0e7b11141fba72db530abcbe44bc40528ad807970727fb819afa14aaaccfceec4932dad57380e0499f933f1f7d7dd51995edcf53b907228fa9e83433eedb4ac88d0285594ffb0d14e71d5c57f33700f22b2241741307bd8325a76f395bc9aa315211e5979f34adddb521914f92eed3d3e9de82942a952e86bd67aff5bc2e3c1fcc00f61124dd06df4b8fd356cb365adc037e443820c05c5db160087a9cf471e0eff227f25b2c5ca67bfcd55f8c81f5eb1f8b8ee2541621e7afddb8009a1996f8e5b80000000000000003b5a4a5d6495479fac471ba60fbd0e502235174f3a3484124cba15f5fe92c7b07fd45a5563cd3700000000001825b05a9bc7ffc60a580ea8cb7f85b77b35a06a895b287b47efba224d97b5610f33e30bc215aca48e5d7018a7f91c4228b35f71a70900000000000000870086d851ff7535e07bbec801b79afa477ebab255c7265820456fd13f34f9d729315d856be7ec564613d5e28cf7c405d6e2b6ae8de10e117733d30f4fe049658a2c3e0000000025e4e01e681f67eb459728d07479064af682677b771a8fdd89f1fba434d6558c49c4b72aa82d142e8ced2566e8b96354a8057aa887ff0300002cb55832349f63c9755d7419925f75561264e54b5481d939ffff790000d4b7093e6972ededfa34923502e43cfa148cf5ae88577329c5d417cb5db367436e7d4dbf801050bbdef0c605627955eca0334e63b024b33ae7a6000000000000000000000000e18b356ca5e873e9b02e2f2ce5f324f9df617f8fab2113bed7054291b0fd00cf56995ec3151815b1998c9d6d24aa5e8de4b0263fa220bddccd44dd0090fd0e3ab60d265a05af4b60e40969f3fc5990e51b885dc9cb8c12ca6de5d4970d494f4d50119a3671dc9562a2296022767f7a059c74a069286fa9b49f670ddb38bfe31377955cdf8e77f9f4652c3ac63b6cfcca9f47bcbbc59fa62b2ff4a21cb43479e407cb00b7c2e719a2982bddd0dc90f9cd53e78f0ecf3476b09137510c0ddb6f902759be07c1c095412b63cf3975939846ecff9906effbcf78deba0442c9d040034a33c360e9137e8dc3a652f025208aa7eab080fa7e75a405aceb6600b40ef4b56bbaefcc9ce2b3a0963c00c2e930616a90ba082dba70047d727e73d3966439f63978656ceb5d3ff7e56535f7e44b05c710c45764a2a69150ac7201bc8991468cd519941655132574e5701fa159822d8eb43380d13d86783ba1c33bcfc0194af35df75ae49e1b7a42b22fe7dbd0ff1907bae441605754a50d02597c1e31376a544cdae3fb8c2e983bc06b6cbbb5a047ef769e7d0d44b8b838594981d721353ce3a9b1b4e62f2dd97c17f8895ca5a304fb49e08496e86d5c18ee2ba1bb8ff8bec7f4d414223089643e251801458de3e15f014ae8d1d9ff400406812fb8d5a425aef8559761f0fa946d4de98278e84fbfb61b4493781fd91a30b497095d2dcb0660f4036d3869a7668e93309c00000000000000000000000093252dbdd7dcdb449f1fe0a5bf78e4d3c71de12b158ddb375a5f04a6acb91c834926278b97a2af7e8cf661af430c30e3b6e3bd092ce089cdd3731851fdbf0fb6fb4c8054a33d06ff8cc3ab2ae0dc2d66c8e1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xd3, 0xfffffffffffffe64, &(0x7f0000000040)="b90703600000f007049e0ff086dd1fffffe10ec53308633a77fbac141441e0022001be3e7d2a2002ff", 0x0, 0x104, 0xa000000, 0x0, 0xfeb9, &(0x7f0000000640)="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", &(0x7f0000000100)}, 0x28) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x5, 0x7, 0xfc, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext={0x1, 0xac6}, 0x2, 0x17cd, 0x4, 0x5, 0x200, 0x900000, 0x4000, 0x0, 0x4}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x9) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = syz_clone(0x28000800, 0x0, 0x0, &(0x7f0000000d00), 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x9, 0x0, 0x1, 0x1f, 0x0, 0xfffffffffffff800, 0x4011, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x20, 0x578, 0xd80, 0x3b84668625df2020, 0x2, 0x3, 0xffff, 0x0, 0x2, 0x0, 0x5}, r2, 0xb, 0xffffffffffffffff, 0xb) perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x3f, 0x0, 0x4d, 0x6, 0x0, 0x3, 0x2000, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x1, 0x8000000000000000, 0x9, 0x9, 0x9f6f, 0x7, 0x3, 0x0, 0x3f}, r0, 0x4, 0xffffffffffffffff, 0x8) 18:32:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 18:32:08 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x15) [ 1009.051890][ T9326] Bluetooth: hci4: command 0x0419 tx timeout [ 1009.288934][T14330] mac80211_hwsim hwsim51 : renamed from wlan1 18:32:08 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4, 0x200}, 0x0, 0x3, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000001f00)='ip60\xb7\xb5\x04F\x13\x87\xa1\xe3d\xbd|\x95\xb7\x13i\xe3\xa0\\XJ~\xdaW\xe0\x03\xaa\xcd\x12\x91\x18\x15\xd1\xd5\xfbB\xd0\xe2\xfdS\x94.\x8f{(\xf9\x1f\xa6I\n\x17WE\x15\x1c\xabX>\x7f`\xde\xdb.\'\x9fpH\x0467\x9d\x01\xfe<\x02\x83\x99 \xfc^\xcb:\xcds\x89X\xcb\xd18\xb4\xea\x98\a\xeaB\xd4\x1e\xd0PB\x91\x15\xd3\xb8\xaf \xb9\xb3b\xff\xaa\x9d\x81e\x00\x00\x00\x00\x00\x00\x00\x00&\xe1;t\x82\x96\xe0Y\xe0\x85VG\a\x00\x00\x00\xd6\x9d\x0f\x98\xefY5\xd2\xb7\x1e\xfa/\xc7isq\x9f\xeb\xf1\xd8l`\x06O\x81-\xdd\xfe\x02\xe2\xa8o\x1fRf\x18\fI\x99\xa6G\xc9\x86\xf1\xc3?%\xc7\xeb\xe2\vP\x00]\xc4\x11N\xbe\xc8\xed\xa5\x83\xd4\xc1\x00\xfa#O\xb6gR#\x19\xa9\xdf\x14\x1fc\x17.\xa0\xdd\xbf\x91)!\x9f\x98u\x85\xec>\xf6*\xbc\xaas\xd3\xae\xe6\x01\xeb\'\xc0\xd1e-$\x13K\x1ce\xd4*vX\xce?\xcf:\xe5\x88W[^l]>\x9a\xe8\xda?\xfb\xce\xa9+T\xea\xfe-\xac\xb88S_\x0f3sk\xfb\x04\xc6&\x939\x8b@\xac\x90\xae\x9a\xdf\x9c\t\xb3\f\x7f&\xf7\xad\xc2\xcc\xd5\xd9+\xf2\x8ce\x94\\\xb7(e\xcb\xe9\xe7\x02\xcd\xd76\xa4P\xe2T\xa6O\xca\t\x00b\x94\xa4>+J\x12\xebK\xb1\xda \xac\xc1o\xfad\xa8\xe4w\xd3\xd4\x8d\xf0\xe7N_\x94\xfb\xe1\xe2\xac}\x87\xfewv\xf2\xc4y}a\xf7\xd4{kQ\x9a\xa6\x00\x00\x00\x00\x00\x00') r2 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000552d, 0x30414, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x80}, 0xba21, 0x3b, 0x7d, 0x0, 0x4, 0x101, 0x745c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x5, 0x6, 0x4e, 0x2, 0x0, 0xfe, 0x0, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000400)}, 0x0, 0x6, 0xf, 0x0, 0x9, 0x5026, 0xfff, 0x0, 0x1}, 0xffffffffffffffff, 0x9, r2, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'dummy0\x00', 0x10}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) socketpair(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x10}) bpf$ITER_CREATE(0x21, &(0x7f00000003c0)={r1}, 0x8) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000001a00)={0x0, &(0x7f0000000100)}) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000019c0), 0xfffffffffffffdd7) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000700)=""/212, 0xd4}, {&(0x7f00000005c0)=""/101, 0x65}, {&(0x7f0000000880)=""/244, 0xf4}], 0x3, &(0x7f0000000040)=""/9, 0x9}, 0x10121) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000001c80)='!&\v\x13\xb0s\xc1\xb1=\x1bN^]>.(\t\xdb>|\xf1\x16\xf43x\x1e\xcem\xf8(\xd0\xfe\xf1\xec\x00\x00I\x85\xa8\xbaw\xb0]\'*XOJ`\x8cO,y\'B\x17\xcb\xa3\xd8?\xa11\xcd\x11\xfeK\xca\xd6\xc4\x12\xeb4T\xd6\x00A1*@\xe5\xabe\x04\xed\xa1S>\xdeY\xd6&\xaf\xc0\xff\a\xcc]\xc3Ta7,\xed\xb3\xab\x86\x94\xcb\xc10>#\xefE\xb0k\x00\x82\x8c\xa4\x8a?\x02a\x14\xdc\xee\x9aSh:K>#\xaf\x98\x84\xa0t\xec\xcb\xe7\x82\xed\xd2]\xcb\xe4\xfe\xe2\xec\xa7\xd7c?\xbe\xe57\xd5\x91Lh\xc7B2\xe8\xc7\xf5S\xd6fe\a\x84\x11tI%;\x01\x84\xcb\xa2\xe8\xcf`a\x9c\x92Ce\xf6\xbf\tU\xaa`\xa1\x12\x04\xd2\xd8\xd5\xd3\xf9Z\xf4\xea\aj\xabhl\x90\n\xa3\xc7V9}\x9eg\x9b\x15\x01n\x88L\x84\x10\x8b)\xc5\xaa\xdf\xd6X\xce\x9f\xd3\xa9\xc8\'\xad\xcd\x15\xe8\x81d\xfb\xffd\xde\vm\xc7\xe88\x84\vkhW9\xe3\x00\x1b\x15f\xda!\nd\x1d\x9b,\xbb\xce\x03\v\xe6\x99\x10u\xca\x1c\x1eH\xe9\x96\xe0\x891\xf3\nP\x0e\xf3\xa1Rk5\xfb\xc0\xc1\xd2\b\xa6\x89\'\x8b\xd0\xb6\xb5\x15\xb6\x89`\x9b\x96\xa7\x01G\xd8\xe6\xda\xea\x14){d\x1b\xdfms\a\x02>\xbf\xa4XWN\xf7\x7f53\xed\xed\x96;f\xd4\xf5\xc7\xaf\a\xb4\xcf\xc17\x00\x00\x00\x00\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$TUNGETFILTER(r6, 0x801054db, &(0x7f00000009c0)=""/4096) write$cgroup_int(r5, &(0x7f00000002c0), 0x12) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0x4, 0x0, 0x0, 0x4, 0x0, 0x8000007, 0x73dc0ac7e45ff080, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1fdc}, 0x4100a, 0x5, 0x88, 0x0, 0x1b, 0x7, 0x202, 0x0, 0x400007, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8923, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x20000, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, &(0x7f0000001a40)='\xa3\x16\x85\x1e \xb4\x19\x00\xccj\xa2\xb7+\x04pp\xa4Q\x84\xf8\x0f}S\xd9\x8c\'\xa9\x95\x9d\x83\x91$\x87\xe4\x18\xbb\x17\xe8!\x9c\t%?\xca\xe8\xe4\x1a\x8a\x83\x8ci\xbd\xf6\x84\xa2\xe1\xaeg\xf0\x1a\xcdM\xea`6Q\xec\xbc\xb1D\xe0w\xae\x14\xcf\xf3\xb72\x87\xfb\xa8\xd6\x1d\xdc\x9a\x93_\x1f\x90\x05\x8c\xbc\f\xd8\xad\xc9@.\x8d\x18z\x03O\xd2h\xbeGE\a\xa7\xe2\x1doU5\xa5\xa5\xfff@\xc5\xf2S\xe6\x1eXX\xc9-[\xf3*\x8e\x8c/\xa8\x87>\xee\xb7\xf7\xa5\x9fI\xd9\"') sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="99301a7ae4cae582fbaee282fc8c08ae307cf2ea3d5b21b6140479c62b2e2625960f93ad88e3313737c0b9d42f995a5265170829e5835f42e3474b9173b2a273f544fb", 0x43}], 0x1, &(0x7f00000029c0)=ANY=[@ANYRES64=r4, @ANYRES16=r7, @ANYRES8, @ANYBLOB="581b986505bdde225cf49fdce210a801278bd10cb15e481826a87a1741c34d7c9ac2fd68d43cb5d6a1a75d1849b25c0b93a0a59a3ac9640752000000003ea60a5bddf53ed7de375f322985b26c64f601040000000000000c6837f5b07a0a0180666d3b35eb824df7a5d056c4714ec90149db915ab4c86ba94700ba6d92ad2fb44faf643a152be2b6034b787235830900d982c982e737668b555181877374499fc64fda3b2e30ecd4f4ad6fb620539b4ef39c77b4dbd79076f9199f57532eec6ad0022c4aad48912edda3f705be55d0c6eecacbd2411df131a6eeaba101b7776b0300ed3eb07bf99467ec6294910700001a77f9a11e2e2499f6cc17443299c537f74b683d5b001787376570aaa8477229a49698779070f1b21a91cb7c3f4d602684ec43290ce155362b465e31b4df2b12e0e8305047952cebc1ab7936ce0fcc4bb4e828e319096364040080c489337f5307fedf89e12fd3ff4d1ce36dcfc4cf0b07b824702b3b7e74df37397be10aa38f9e05476ed3c04f7103cc01000000825f52076b1185d6c83e0521d3ee1aac1447fc7a3d1cff5bc6785d534e61fdd6fc25464f1e5d249404b5eef4720a322aa28222f7fae1dcc9ebfa0640469cfbc4d22ef0e3b355a50aa63bf462a609a25c0bd58177ba79e1d7e1990b3baa6503c5e88ffa310d42b1dbc9c315f73593010068743709dab20a5f1bce01040000443900e665a42be042fd5ab4eae4dfe5ee08ee9e0c860633060df3a1b453d1ed43cd6d9f19689ae9010000002b688437fef8e78c65ade1eac848898a77424f913590ee946a7e4e64378d5da9896c0da37178ee33c33c48f23f17ef18fef97be93802c51753aead1ffdf6f9a7161296511f476626793523b248ede7060cec85480a5d37d8a2e01c9a47eeddeef1cd0000000000000000e7172d00fda8492b05460000008fc32d03009903eaf74814891900000000edb27e923339f867efacf30d3db322b03b3db94b915d4b335948d5404257675bf9afa63f7e73cadaa83089103289bd36dfbe14ff00244fd3cf30cc009a86174b4a28152f7d6dab17fb411b60bef427bec2c5bcf04906c646cc76a1b580d2dfdf6e78cb631b411f137a71cc7c1a98ac5fea8ffcb6113e875c9db0b92c2a9d6977212278788c641ab36399a4ba742ee9cdb2d6ce8cff0f1cb1b3a16238bc606dc455ef0700003c4e447ada5754f47b8fb11dad07172d038c4a56dca72a305f9018d9017dc49f8c81515a7eb60129b01b960c3dbbb49d64acf3eaa8bb12ea3f6f3895d5ba23d4ee7c94d2a81c9b0cef9280012d18c6e46be14bfa7e18da102a93d166ea3b232fd5fef28d8dbe75ebea65327774e31fd310be8fff907deb158de53da2c281b1e51c15e55e67ade8b37ddcd86c070b113b32607b5cc20474c2392491c9087dd47ec67c2ebda1f1df118dfd7663ae3c31d3f78cb55890786c1088a8f8b7bc1cc2d5f084fd22121737ff8e5b06a347f6d128be911d532de9a4d7543f07ada7cfa84a7e590f2fde6f716491e26830f2a62a64768eeb898ed5a908ced46e20b9349c6b6aea571adc1bc7a938292a2ceabf188852a568e8867e2fd12608376ea647d50eb23bce49cc000a9585e353c92eb9fbd8a59e5d30d3003bbd70000000000000000000", @ANYRES16=r4], 0x128}, 0x40) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x1fffffffffffd, 0x12) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x6) 18:32:08 executing program 3: openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000c80), 0x2, 0x0) 18:32:08 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8d}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:32:09 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40755, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0xa0, r1}, 0x38) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x7}, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x1, 0xb, 0x32a, 0x0, 0x2, 0x0, 0x5, 0x0, 0x1}, 0x0, 0x0, r0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) 18:32:10 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x90ffffff}, [@alu={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:32:11 executing program 1: gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)) 18:32:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 18:32:11 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x15) 18:32:11 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4, 0x200}, 0x0, 0x3, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000001f00)='ip60\xb7\xb5\x04F\x13\x87\xa1\xe3d\xbd|\x95\xb7\x13i\xe3\xa0\\XJ~\xdaW\xe0\x03\xaa\xcd\x12\x91\x18\x15\xd1\xd5\xfbB\xd0\xe2\xfdS\x94.\x8f{(\xf9\x1f\xa6I\n\x17WE\x15\x1c\xabX>\x7f`\xde\xdb.\'\x9fpH\x0467\x9d\x01\xfe<\x02\x83\x99 \xfc^\xcb:\xcds\x89X\xcb\xd18\xb4\xea\x98\a\xeaB\xd4\x1e\xd0PB\x91\x15\xd3\xb8\xaf \xb9\xb3b\xff\xaa\x9d\x81e\x00\x00\x00\x00\x00\x00\x00\x00&\xe1;t\x82\x96\xe0Y\xe0\x85VG\a\x00\x00\x00\xd6\x9d\x0f\x98\xefY5\xd2\xb7\x1e\xfa/\xc7isq\x9f\xeb\xf1\xd8l`\x06O\x81-\xdd\xfe\x02\xe2\xa8o\x1fRf\x18\fI\x99\xa6G\xc9\x86\xf1\xc3?%\xc7\xeb\xe2\vP\x00]\xc4\x11N\xbe\xc8\xed\xa5\x83\xd4\xc1\x00\xfa#O\xb6gR#\x19\xa9\xdf\x14\x1fc\x17.\xa0\xdd\xbf\x91)!\x9f\x98u\x85\xec>\xf6*\xbc\xaas\xd3\xae\xe6\x01\xeb\'\xc0\xd1e-$\x13K\x1ce\xd4*vX\xce?\xcf:\xe5\x88W[^l]>\x9a\xe8\xda?\xfb\xce\xa9+T\xea\xfe-\xac\xb88S_\x0f3sk\xfb\x04\xc6&\x939\x8b@\xac\x90\xae\x9a\xdf\x9c\t\xb3\f\x7f&\xf7\xad\xc2\xcc\xd5\xd9+\xf2\x8ce\x94\\\xb7(e\xcb\xe9\xe7\x02\xcd\xd76\xa4P\xe2T\xa6O\xca\t\x00b\x94\xa4>+J\x12\xebK\xb1\xda \xac\xc1o\xfad\xa8\xe4w\xd3\xd4\x8d\xf0\xe7N_\x94\xfb\xe1\xe2\xac}\x87\xfewv\xf2\xc4y}a\xf7\xd4{kQ\x9a\xa6\x00\x00\x00\x00\x00\x00') r2 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000552d, 0x30414, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x80}, 0xba21, 0x3b, 0x7d, 0x0, 0x4, 0x101, 0x745c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x5, 0x6, 0x4e, 0x2, 0x0, 0xfe, 0x0, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000400)}, 0x0, 0x6, 0xf, 0x0, 0x9, 0x5026, 0xfff, 0x0, 0x1}, 0xffffffffffffffff, 0x9, r2, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'dummy0\x00', 0x10}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) socketpair(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x10}) bpf$ITER_CREATE(0x21, &(0x7f00000003c0)={r1}, 0x8) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000001a00)={0x0, &(0x7f0000000100)}) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000019c0), 0xfffffffffffffdd7) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000700)=""/212, 0xd4}, {&(0x7f00000005c0)=""/101, 0x65}, {&(0x7f0000000880)=""/244, 0xf4}], 0x3, &(0x7f0000000040)=""/9, 0x9}, 0x10121) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000001c80)='!&\v\x13\xb0s\xc1\xb1=\x1bN^]>.(\t\xdb>|\xf1\x16\xf43x\x1e\xcem\xf8(\xd0\xfe\xf1\xec\x00\x00I\x85\xa8\xbaw\xb0]\'*XOJ`\x8cO,y\'B\x17\xcb\xa3\xd8?\xa11\xcd\x11\xfeK\xca\xd6\xc4\x12\xeb4T\xd6\x00A1*@\xe5\xabe\x04\xed\xa1S>\xdeY\xd6&\xaf\xc0\xff\a\xcc]\xc3Ta7,\xed\xb3\xab\x86\x94\xcb\xc10>#\xefE\xb0k\x00\x82\x8c\xa4\x8a?\x02a\x14\xdc\xee\x9aSh:K>#\xaf\x98\x84\xa0t\xec\xcb\xe7\x82\xed\xd2]\xcb\xe4\xfe\xe2\xec\xa7\xd7c?\xbe\xe57\xd5\x91Lh\xc7B2\xe8\xc7\xf5S\xd6fe\a\x84\x11tI%;\x01\x84\xcb\xa2\xe8\xcf`a\x9c\x92Ce\xf6\xbf\tU\xaa`\xa1\x12\x04\xd2\xd8\xd5\xd3\xf9Z\xf4\xea\aj\xabhl\x90\n\xa3\xc7V9}\x9eg\x9b\x15\x01n\x88L\x84\x10\x8b)\xc5\xaa\xdf\xd6X\xce\x9f\xd3\xa9\xc8\'\xad\xcd\x15\xe8\x81d\xfb\xffd\xde\vm\xc7\xe88\x84\vkhW9\xe3\x00\x1b\x15f\xda!\nd\x1d\x9b,\xbb\xce\x03\v\xe6\x99\x10u\xca\x1c\x1eH\xe9\x96\xe0\x891\xf3\nP\x0e\xf3\xa1Rk5\xfb\xc0\xc1\xd2\b\xa6\x89\'\x8b\xd0\xb6\xb5\x15\xb6\x89`\x9b\x96\xa7\x01G\xd8\xe6\xda\xea\x14){d\x1b\xdfms\a\x02>\xbf\xa4XWN\xf7\x7f53\xed\xed\x96;f\xd4\xf5\xc7\xaf\a\xb4\xcf\xc17\x00\x00\x00\x00\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$TUNGETFILTER(r6, 0x801054db, &(0x7f00000009c0)=""/4096) write$cgroup_int(r5, &(0x7f00000002c0), 0x12) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0x4, 0x0, 0x0, 0x4, 0x0, 0x8000007, 0x73dc0ac7e45ff080, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1fdc}, 0x4100a, 0x5, 0x88, 0x0, 0x1b, 0x7, 0x202, 0x0, 0x400007, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8923, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x20000, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, &(0x7f0000001a40)='\xa3\x16\x85\x1e \xb4\x19\x00\xccj\xa2\xb7+\x04pp\xa4Q\x84\xf8\x0f}S\xd9\x8c\'\xa9\x95\x9d\x83\x91$\x87\xe4\x18\xbb\x17\xe8!\x9c\t%?\xca\xe8\xe4\x1a\x8a\x83\x8ci\xbd\xf6\x84\xa2\xe1\xaeg\xf0\x1a\xcdM\xea`6Q\xec\xbc\xb1D\xe0w\xae\x14\xcf\xf3\xb72\x87\xfb\xa8\xd6\x1d\xdc\x9a\x93_\x1f\x90\x05\x8c\xbc\f\xd8\xad\xc9@.\x8d\x18z\x03O\xd2h\xbeGE\a\xa7\xe2\x1doU5\xa5\xa5\xfff@\xc5\xf2S\xe6\x1eXX\xc9-[\xf3*\x8e\x8c/\xa8\x87>\xee\xb7\xf7\xa5\x9fI\xd9\"') sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="99301a7ae4cae582fbaee282fc8c08ae307cf2ea3d5b21b6140479c62b2e2625960f93ad88e3313737c0b9d42f995a5265170829e5835f42e3474b9173b2a273f544fb", 0x43}], 0x1, &(0x7f00000029c0)=ANY=[@ANYRES64=r4, @ANYRES16=r7, @ANYRES8, @ANYBLOB="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", @ANYRES16=r4], 0x128}, 0x40) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x1fffffffffffd, 0x12) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x6) 18:32:11 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000021c0)='./cgroup/syz1\x00', 0x200002, 0x0) 18:32:11 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000004a0877fd0000000007000000f0ffffff95"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:32:11 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x9, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:32:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) 18:32:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 18:32:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=@bloom_filter={0x1e, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) 18:32:11 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x15) 18:32:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) 18:32:13 executing program 1: syz_clone(0x21000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 18:32:13 executing program 3: bpf$BPF_TASK_FD_QUERY(0x3, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) syz_clone(0xc0208400, &(0x7f0000000040)="51b255f857f1a2a2caaa098cf28bc8f3f35930ea6411e9cddcb6fa33694f9ddb39ccfbd10dc31c5cdf896580d48fa78c992ae8ec9fba8e3b72adcdb94108b6d69640e8833854f7009bd63a229bb4c25f", 0x50, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000340)) syz_clone(0x200000, &(0x7f00000004c0)="9d40edb5b9d4ede01e5affee30b1f9a0373716be811b80ffb7938ad61efedf4e643f12fbc2d3966668051de6e072224a7b81903b6fa77d7b185bb6798b768d86c1446483192103cc0b6f832ef50109a139479711bd7a8b3ef87611b08961f89fd9847f552fce8b4e67fe57ecdfd03f520b9bbc764760dffd617356b597685b59d4b38113e02767a7e50b7899d688820383944acae4c82296fab0384939138e2fe6b916d42b9d85e6d3fd1478e965a1f769fb1107b5e996792f3ae776d7f3b8c1e9b230c197d2fd4c60d017649de2094a8fec8ad629b30661a8467abace76b3ea1e78ff0809e662436f", 0xe9, &(0x7f0000000280), &(0x7f00000005c0), &(0x7f0000000600)="e97c05f8cc7c6bfbc180b94ad15fbf0dff5924be361e118f2127") r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000cc0)={r1}, 0x8) close(0xffffffffffffffff) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000cc0)={r2}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r2, 0x0, 0x25, 0x4}, 0x10) openat$cgroup_procs(r1, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000c40)='syz0\x00', 0x1ff) r3 = getpid() r4 = syz_clone(0xc0208400, &(0x7f0000000040)="51b255f857f1a2a2caaa098cf28bc8f3f35930ea6411e9cddcb6fa33694f9ddb39ccfbd10dc31c5cdf896580d48fa78c992ae8ec9fba8e3b72adcdb94108b6d69640e8833854f7009bd63a229bb4c25f", 0x50, 0x0, 0x0, &(0x7f0000000340)="77955450614ab5f462edb70ffd283542a861d551cd6cd77fe739753f538d2924a917899392852cbc79425e710c6be148e4a773b287a9f769a3e83e2c5f6ca6295204408e1960ed68a5425f1fc3a552150e01b4a9ce91be966defa8871a88bc892d274e7f320af81792cdda8e947957ac991287ef0207cecb83b4b6530ad83519604f3caf1a9038d29aa7d62cab09d44d4622140bbce3a35b577997f4f91573bb0f6a7f4fc56c61097874b72cb4020e19ccc69abfed7e7889dcf920ecbbe10ae9a6179fa4c3607646f897872d331c3cf15cca47694ad968d79ada03dd17998693317276d198c9404e") write$cgroup_pid(r1, &(0x7f0000000200)=r4, 0x12) r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000cc0)={r5}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d40)={r6, 0x0, 0x0, 0x1f, &(0x7f0000000d00)}, 0x20) write$cgroup_type(r6, &(0x7f0000000c00), 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={r3, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000cc0)={r7}, 0x8) r9 = syz_clone(0x44800, &(0x7f0000000140)="60865f60a02d1e23c709e00463ce784c1db2b98084e341a5cf431ccc8d4bbe6a5c1d91c5447666cc18b036889f5efaef9b56229a", 0x34, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000280)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r9, r8, 0x0, 0x4, &(0x7f00000002c0)='*/\'\x00'}, 0x30) 18:32:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 18:32:13 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4, 0x200}, 0x0, 0x3, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000001f00)='ip60\xb7\xb5\x04F\x13\x87\xa1\xe3d\xbd|\x95\xb7\x13i\xe3\xa0\\XJ~\xdaW\xe0\x03\xaa\xcd\x12\x91\x18\x15\xd1\xd5\xfbB\xd0\xe2\xfdS\x94.\x8f{(\xf9\x1f\xa6I\n\x17WE\x15\x1c\xabX>\x7f`\xde\xdb.\'\x9fpH\x0467\x9d\x01\xfe<\x02\x83\x99 \xfc^\xcb:\xcds\x89X\xcb\xd18\xb4\xea\x98\a\xeaB\xd4\x1e\xd0PB\x91\x15\xd3\xb8\xaf \xb9\xb3b\xff\xaa\x9d\x81e\x00\x00\x00\x00\x00\x00\x00\x00&\xe1;t\x82\x96\xe0Y\xe0\x85VG\a\x00\x00\x00\xd6\x9d\x0f\x98\xefY5\xd2\xb7\x1e\xfa/\xc7isq\x9f\xeb\xf1\xd8l`\x06O\x81-\xdd\xfe\x02\xe2\xa8o\x1fRf\x18\fI\x99\xa6G\xc9\x86\xf1\xc3?%\xc7\xeb\xe2\vP\x00]\xc4\x11N\xbe\xc8\xed\xa5\x83\xd4\xc1\x00\xfa#O\xb6gR#\x19\xa9\xdf\x14\x1fc\x17.\xa0\xdd\xbf\x91)!\x9f\x98u\x85\xec>\xf6*\xbc\xaas\xd3\xae\xe6\x01\xeb\'\xc0\xd1e-$\x13K\x1ce\xd4*vX\xce?\xcf:\xe5\x88W[^l]>\x9a\xe8\xda?\xfb\xce\xa9+T\xea\xfe-\xac\xb88S_\x0f3sk\xfb\x04\xc6&\x939\x8b@\xac\x90\xae\x9a\xdf\x9c\t\xb3\f\x7f&\xf7\xad\xc2\xcc\xd5\xd9+\xf2\x8ce\x94\\\xb7(e\xcb\xe9\xe7\x02\xcd\xd76\xa4P\xe2T\xa6O\xca\t\x00b\x94\xa4>+J\x12\xebK\xb1\xda \xac\xc1o\xfad\xa8\xe4w\xd3\xd4\x8d\xf0\xe7N_\x94\xfb\xe1\xe2\xac}\x87\xfewv\xf2\xc4y}a\xf7\xd4{kQ\x9a\xa6\x00\x00\x00\x00\x00\x00') r2 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000552d, 0x30414, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x80}, 0xba21, 0x3b, 0x7d, 0x0, 0x4, 0x101, 0x745c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x5, 0x6, 0x4e, 0x2, 0x0, 0xfe, 0x0, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000400)}, 0x0, 0x6, 0xf, 0x0, 0x9, 0x5026, 0xfff, 0x0, 0x1}, 0xffffffffffffffff, 0x9, r2, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'dummy0\x00', 0x10}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) socketpair(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x10}) bpf$ITER_CREATE(0x21, &(0x7f00000003c0)={r1}, 0x8) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000001a00)={0x0, &(0x7f0000000100)}) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000019c0), 0xfffffffffffffdd7) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000700)=""/212, 0xd4}, {&(0x7f00000005c0)=""/101, 0x65}, {&(0x7f0000000880)=""/244, 0xf4}], 0x3, &(0x7f0000000040)=""/9, 0x9}, 0x10121) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000001c80)='!&\v\x13\xb0s\xc1\xb1=\x1bN^]>.(\t\xdb>|\xf1\x16\xf43x\x1e\xcem\xf8(\xd0\xfe\xf1\xec\x00\x00I\x85\xa8\xbaw\xb0]\'*XOJ`\x8cO,y\'B\x17\xcb\xa3\xd8?\xa11\xcd\x11\xfeK\xca\xd6\xc4\x12\xeb4T\xd6\x00A1*@\xe5\xabe\x04\xed\xa1S>\xdeY\xd6&\xaf\xc0\xff\a\xcc]\xc3Ta7,\xed\xb3\xab\x86\x94\xcb\xc10>#\xefE\xb0k\x00\x82\x8c\xa4\x8a?\x02a\x14\xdc\xee\x9aSh:K>#\xaf\x98\x84\xa0t\xec\xcb\xe7\x82\xed\xd2]\xcb\xe4\xfe\xe2\xec\xa7\xd7c?\xbe\xe57\xd5\x91Lh\xc7B2\xe8\xc7\xf5S\xd6fe\a\x84\x11tI%;\x01\x84\xcb\xa2\xe8\xcf`a\x9c\x92Ce\xf6\xbf\tU\xaa`\xa1\x12\x04\xd2\xd8\xd5\xd3\xf9Z\xf4\xea\aj\xabhl\x90\n\xa3\xc7V9}\x9eg\x9b\x15\x01n\x88L\x84\x10\x8b)\xc5\xaa\xdf\xd6X\xce\x9f\xd3\xa9\xc8\'\xad\xcd\x15\xe8\x81d\xfb\xffd\xde\vm\xc7\xe88\x84\vkhW9\xe3\x00\x1b\x15f\xda!\nd\x1d\x9b,\xbb\xce\x03\v\xe6\x99\x10u\xca\x1c\x1eH\xe9\x96\xe0\x891\xf3\nP\x0e\xf3\xa1Rk5\xfb\xc0\xc1\xd2\b\xa6\x89\'\x8b\xd0\xb6\xb5\x15\xb6\x89`\x9b\x96\xa7\x01G\xd8\xe6\xda\xea\x14){d\x1b\xdfms\a\x02>\xbf\xa4XWN\xf7\x7f53\xed\xed\x96;f\xd4\xf5\xc7\xaf\a\xb4\xcf\xc17\x00\x00\x00\x00\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$TUNGETFILTER(r6, 0x801054db, &(0x7f00000009c0)=""/4096) write$cgroup_int(r5, &(0x7f00000002c0), 0x12) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0x4, 0x0, 0x0, 0x4, 0x0, 0x8000007, 0x73dc0ac7e45ff080, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1fdc}, 0x4100a, 0x5, 0x88, 0x0, 0x1b, 0x7, 0x202, 0x0, 0x400007, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8923, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x20000, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, &(0x7f0000001a40)='\xa3\x16\x85\x1e \xb4\x19\x00\xccj\xa2\xb7+\x04pp\xa4Q\x84\xf8\x0f}S\xd9\x8c\'\xa9\x95\x9d\x83\x91$\x87\xe4\x18\xbb\x17\xe8!\x9c\t%?\xca\xe8\xe4\x1a\x8a\x83\x8ci\xbd\xf6\x84\xa2\xe1\xaeg\xf0\x1a\xcdM\xea`6Q\xec\xbc\xb1D\xe0w\xae\x14\xcf\xf3\xb72\x87\xfb\xa8\xd6\x1d\xdc\x9a\x93_\x1f\x90\x05\x8c\xbc\f\xd8\xad\xc9@.\x8d\x18z\x03O\xd2h\xbeGE\a\xa7\xe2\x1doU5\xa5\xa5\xfff@\xc5\xf2S\xe6\x1eXX\xc9-[\xf3*\x8e\x8c/\xa8\x87>\xee\xb7\xf7\xa5\x9fI\xd9\"') sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="99301a7ae4cae582fbaee282fc8c08ae307cf2ea3d5b21b6140479c62b2e2625960f93ad88e3313737c0b9d42f995a5265170829e5835f42e3474b9173b2a273f544fb", 0x43}], 0x1, &(0x7f00000029c0)=ANY=[@ANYRES64=r4, @ANYRES16=r7, @ANYRES8, @ANYBLOB="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", @ANYRES16=r4], 0x128}, 0x40) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x1fffffffffffd, 0x12) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x6) 18:32:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x15) 18:32:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) 18:32:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="85", 0x1}, {&(0x7f00000002c0)="c8", 0x1}, {&(0x7f00000001c0)='Y', 0x1}], 0x3}, 0x0) 18:32:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x15) 18:32:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x470}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={0xffffffffffffffff, 0x13, 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f0000000540)='memory.numa_stat\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) close(r5) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0xd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9}, 0x2, 0x7, 0x7, 0x1, 0x2, 0x4, 0x1f, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x8, 0xa2, &(0x7f0000000640)=""/162, 0x41000, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000002c0)={0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000040)) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a06, 0x17da) r6 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0x804, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x7f, 0x4, 0x3f, 0x0, 0x0, 0xa0006, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x2}, 0x900, 0x0, 0x3, 0x2, 0x8, 0xa1, 0x6, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1, r6, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair(0x0, 0x8, 0x4, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000600), 0x2, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000400)) 18:32:13 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5421, &(0x7f0000000000)='ip6gre0\x00') 18:32:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) 18:32:13 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$TUNSETFILTEREBPF(r0, 0xb701, 0x0) 18:32:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x15) [ 1014.936035][ T27] audit: type=1800 audit(1673721134.342:2): pid=14443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1183 res=0 errno=0 18:32:16 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x470}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={0xffffffffffffffff, 0x13, 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f0000000540)='memory.numa_stat\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) close(r5) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0xd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9}, 0x2, 0x7, 0x7, 0x1, 0x2, 0x4, 0x1f, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000bf42ef01000000000d04fcff0d000000185280000d000000000000000001210030bc5893bec71e00040077e60fac1913dabfa19becfc5e430b4ad00c04828d0a5ff4e50aaa52c4186bfdb85777de096c505c504e8945500b81cdb283c4228a015b02b068ee5e97933d5402f4b338f3d13847e103049fd3af72f6a14dfd24c39e24a089223cf8fbaa88678462e7dfb2d22fea4302afd379b0ed19bf10f17672f8e6aff1cbf9cebeed82f2bf096a7c2a9cf1aa01f675a0f970f68ee05ea5a31f646d3b8ede4b5f9b7edb45fea15fcc4f188bcb65ae01820664b5e5577805e00a78d9ad3465e6a8000000000000000000000000000000000000a079bbba0a96fef6b80a999477a199ec2ab5af31abbef63c7f2be5ca0c39bc79e82e244cec1c3980c67f128ce9440762add1276109f730b0ca72ce0d14f36eb8d7d77639c5a009104c39b2ffcbda84b178181b07880e07912471ff4eef885ee617ef16a88a3a804609b430693c3b5d2ada52e1700cba6052164bb9b25f638725469e560f9785e9ce15f8fcd07e805a85f090"], &(0x7f0000000240)='GPL\x00', 0x8, 0xa2, &(0x7f0000000640)=""/162, 0x41000, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000002c0)={0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000040)) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a06, 0x17da) r6 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0x804, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x7f, 0x4, 0x3f, 0x0, 0x0, 0xa0006, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x2}, 0x900, 0x0, 0x3, 0x2, 0x8, 0xa1, 0x6, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1, r6, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair(0x0, 0x8, 0x4, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000600), 0x2, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000400)) 18:32:16 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000200)=@framed={{}, [@jmp={0x4, 0x0, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0xbc, &(0x7f00000000c0)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:32:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) 18:32:16 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x15) 18:32:16 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c000000}, [@jmp={0x5, 0x0, 0x6}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0xbc, &(0x7f00000000c0)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:32:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x470}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={0xffffffffffffffff, 0x13, 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f0000000540)='memory.numa_stat\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) close(r5) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0xd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9}, 0x2, 0x7, 0x7, 0x1, 0x2, 0x4, 0x1f, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x8, 0xa2, &(0x7f0000000640)=""/162, 0x41000, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000002c0)={0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000040)) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a06, 0x17da) r6 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0x804, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x7f, 0x4, 0x3f, 0x0, 0x0, 0xa0006, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x2}, 0x900, 0x0, 0x3, 0x2, 0x8, 0xa1, 0x6, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1, r6, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair(0x0, 0x8, 0x4, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000600), 0x2, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000400)) 18:32:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) 18:32:16 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x15) 18:32:16 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000200)=@framed={{}, [@jmp={0x4, 0x0, 0x8}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0xbc, &(0x7f00000000c0)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:32:16 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000200)=@framed={{}, [@jmp={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb000000}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0xbc, &(0x7f00000000c0)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:32:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) 18:32:16 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000200)=@framed={{}, [@jmp={0x5, 0x0, 0x5, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0xbc, &(0x7f00000000c0)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1017.999116][ T27] audit: type=1800 audit(1673721137.402:3): pid=14459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1179 res=0 errno=0 18:32:17 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@call], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:32:17 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000200)=@framed={{}, [@jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x63000000}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0xbc, &(0x7f00000000c0)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:32:17 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x15) 18:32:17 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x3) 18:32:17 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func={0x3}]}, {0x0, [0x0, 0x0, 0x61, 0x2e]}}, &(0x7f0000000100)=""/206, 0x2a, 0xce, 0x1}, 0x20) 18:32:17 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440), 0x8, 0x10, 0x0}, 0x80) 18:32:17 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x15) 18:32:17 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0x5, &(0x7f0000000300)=ANY=[@ANYRES16], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xcb, &(0x7f0000000080)=""/203, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, &(0x7f00000001c0)={0x5}, 0x10, 0xffffffffffffffff}, 0x1f) 18:32:17 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:32:17 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x3) 18:32:17 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000580)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 18:32:17 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x3) 18:32:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000000100)=""/161, 0xfffffffffffffee5}, {&(0x7f00000001c0)=""/65, 0x41}], 0x3, &(0x7f0000000280)=[@cred={{0x1c}}], 0x20}, 0x0) 18:32:17 executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x15) 18:32:17 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000100)=@framed={{}, [@alu={0x4, 0x1, 0xb}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:32:17 executing program 1: bpf$MAP_CREATE(0xb, &(0x7f0000000200)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 18:32:17 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x7}]}]}}, &(0x7f0000000740)=""/167, 0x32, 0xa7, 0x1}, 0x20) 18:32:17 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x76, 0x0, 0x49}]}}, &(0x7f0000000100)=""/228, 0x2a, 0xe4, 0x4}, 0x20) 18:32:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) 18:32:17 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000001c4860102417d6f4990533b815409476a54dc97be2d4c695333365b85ffba6706cb80bb3c01f1bc42698d2920c97c52ce2627a5badb9a81707e1d9ef56573339f3ace8f8fc6b315e8161d002e181065365f4eae98c4df8f027533a7d207f1aaa4e5fe47df06c3dc1c65176cab754722370cca9f5bf0750437efff6fdbd5f000512df2f95e03000000ee737036b3ed5a1ec305b8d2052fcd201a0c351a153201198721ed56cb039a9c1dadac066dc706a3d57b3366ef3615eda510aebf5852c98eb68df7ad44f2ae7e38d965ad9b82a4370cbb385bd9b3ac480bcc5ea06f1e1ba9d6d2d5eeefba69e6a787592d8c0915ea1f62e9d7ce05eb9e74c19f92"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r0, 0x2}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x8, 0x10, &(0x7f0000000400)={0x0, 0xc, 0x10001}, 0x10, 0x2ddb6, 0xffffffffffffffff, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) perf_event_open(&(0x7f0000000b00)={0x5d68161f4854039, 0x80, 0x20, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x2) openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) 18:32:17 executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x15) 18:32:17 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x0, 0x2}, {0x3}, {}]}, @enum]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000200)=""/157, 0x4c, 0x9d, 0x1}, 0x20) 18:32:17 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x101000, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000740)={0x1, &(0x7f0000000700)=[{0x13, 0x4, 0x4, 0x40}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2110, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000005c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x74, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:32:18 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xcc0, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f00cd0fae0e08e2632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x4000, 0x60000000, 0x2c3, 0xd17e91c4eaae85fe}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) 18:32:18 executing program 5: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000340)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 18:32:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x15) 18:32:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) 18:32:18 executing program 1: bpf$MAP_CREATE(0x9, &(0x7f0000000200)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 18:32:18 executing program 5: bpf$MAP_CREATE(0x21, &(0x7f0000000440)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 18:32:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) 18:32:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x15) 18:32:18 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x1, &(0x7f0000000100)=@raw=[@alu], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:32:18 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:32:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) 18:32:18 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x0, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r1, 0x700, 0x0}, 0x10) 18:32:18 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xcc0, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f00cd0fae0e08e2632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x4000, 0x60000000, 0x2c3, 0xd17e91c4eaae85fe}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) 18:32:18 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000380)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0xbe}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:32:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x15) 18:32:18 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x6, 0x3fe}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000100), 0x619, r0}, 0x38) 18:32:18 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x6, 0x6, 0x7}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000080), 0x0}, 0x20) 18:32:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) 18:32:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xcc0, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f00cd0fae0e08e2632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x4000, 0x60000000, 0x2c3, 0xd17e91c4eaae85fe}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) 18:32:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) 18:32:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x15) 18:32:18 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}]}}, &(0x7f00000003c0)=""/204, 0x2a, 0xcc, 0x1}, 0x20) 18:32:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) 18:32:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x15) 18:32:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xcc0, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f00cd0fae0e08e2632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x4000, 0x60000000, 0x2c3, 0xd17e91c4eaae85fe}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) 18:32:19 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x7fffffff, [{0x0, 0x1}, {}]}]}}, &(0x7f0000000a00)=""/246, 0x3e, 0xf6, 0x1}, 0x20) 18:32:19 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 18:32:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) 18:32:19 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@func_proto, @volatile, @array]}}, &(0x7f0000000780)=""/140, 0x4a, 0x8c, 0x1}, 0x20) 18:32:19 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x15) 18:32:19 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x15) 18:32:19 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:32:19 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x1, &(0x7f0000000100)=@raw=[@kfunc], &(0x7f0000000180)='GPL\x00', 0x5, 0xaf, &(0x7f00000001c0)=""/175, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:32:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) 18:32:19 executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x9, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x80) 18:32:19 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x15) 18:32:19 executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x48) 18:32:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) 18:32:19 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x0, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r1, 0x38, &(0x7f0000000180)={&(0x7f00000000c0)=""/127, 0xffffffba, 0x0, 0x0}}, 0x10) 18:32:19 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10}]}}, &(0x7f00000003c0)=""/204, 0x2a, 0xcc, 0x1}, 0x20) 18:32:19 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="8520000003"], &(0x7f0000000900)='GPL\x00', 0x6, 0xb6, &(0x7f0000000940)=""/182, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:32:19 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x15) 18:32:19 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x61]}}, &(0x7f00000000c0)=""/216, 0x2c, 0xd8, 0x1}, 0x20) 18:32:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) 18:32:19 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00', 0x5, 0xa4, &(0x7f0000000100)=""/164, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:32:19 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:32:19 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x15) 18:32:19 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x4}]}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000001340)=""/4096, 0x31, 0x1000, 0x1}, 0x20) 18:32:19 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @int]}}, &(0x7f00000012c0)=""/186, 0x56, 0xba, 0x1}, 0x20) 18:32:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) 18:32:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 18:32:19 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:32:19 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x15) 18:32:20 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000100)=@raw=[@map_idx_val, @kfunc], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:32:20 executing program 3: gettid() r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid_for_children\x00') r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) recvmsg$unix(r1, &(0x7f00000004c0)={&(0x7f0000000080), 0x6e, &(0x7f0000000340)=[{&(0x7f0000000100)=""/160, 0xa0}, {&(0x7f00000001c0)=""/228, 0xe4}, {&(0x7f00000002c0)=""/83, 0x53}], 0x3, &(0x7f0000000380)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}, 0x6000) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000017c0)={&(0x7f0000000500)="04af62fe433f746a7f50c64506a419c6725e196fb01f6ba61baae1a7cf15a64a7f3ef208a603a9c561ddd0105074243c9806a3b0a03cfe1d9a025245118aab02aebb501576deff204d6514e22571e91611d17ea6eaf0d0c4b3d29c5b22b23674e61c77f37f14e9de80e75bba07b4c31f310bbf387fd4653c9f1376c1ab0ce325d7949c280b2e0e5a5d", &(0x7f00000005c0)=""/247, &(0x7f00000006c0)="276036e2395436732b1b7d4875306fe1bd0086fefbeebd8f5781f07f5b0844ce5431700e7b54c5c292601e9aaaa63db10df5202c5933f6ab81845f9b28a0746226c6348feff8eac61c203850ca9149ae7ebdf2e69632f82f44e858683fbf10a79ac93bf5ed9accf1ab4902fa37d0fd5b362179a61b8e5f8144757b4c1d2361a5c671dcf4a94ebb45e2a661e7af4359acc18b668bb8777a1d976ab46608cb6b4f191972a575f6325344cef8734cc74309e0fdb248ad0720a8b06a6343cbf760cb72991d21aca46e4551b7aba9c1", &(0x7f00000007c0)="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", 0x0, r4}, 0x38) r17 = gettid() syz_open_procfs$namespace(r17, &(0x7f0000001800)='ns/net\x00') r18 = syz_clone(0x10240000, &(0x7f0000001840)="0d6754bb03062f3705779b0cee02b79bd4d3d0bace8dff8ca141dffcb915a1b2cd68157eb2329627ad13aa929fd35550c3362ca22c7207f8b8e45ecff9e4", 0x3e, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900)="b7a1e8354576b732d57f0d0dbb7a2b0ed4ba20b75e1b06b7f8cc9f5d2efbaf0f3f30cd51242cbc0d68716bdba2a8d671342d01b184b3033eda4cccb49011da9d8b162b10d9428056f23e14cc566bfd8818a4ceae7642e1bdc509ea7180917f67d0d02b9459611541125652ea4943e5f0c42b8f757285c238b7bdb9ddd2cceb95d289b365ba69abfefc078d4f8fecc5a09e5d99001f9a2d5326bf06758b89754ee33e4f3eae24661a686caa9c8a5a8c732adfbeb93a340278f3571484d2956fde121f8ed4959534a43d473a7c1ce1ed40e144a3cc26fe5d91abba03bcda74a08bc8c1a64c8cc68961d40d1a624371cc") r19 = perf_event_open$cgroup(&(0x7f0000001a40)={0x2, 0x80, 0x7, 0x7, 0x40, 0xa8, 0x0, 0x7, 0x0, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x3, @perf_bp={&(0x7f0000001a00), 0x2}, 0x41c3, 0x1, 0x7, 0x3, 0x4, 0x6, 0x9, 0x0, 0xfffffffe, 0x0, 0x2}, r6, 0x7, r4, 0x5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001b00)={r18, r19, 0x0, 0x14, &(0x7f0000001ac0)='ns/pid_for_children\x00'}, 0x30) r20 = openat$cgroup_ro(r8, &(0x7f0000001b40)='io.stat\x00', 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001b80)={r16, r15, 0x0, r20}, 0x10) r21 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x1e, 0x7, &(0x7f0000001bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x80}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xf}]}, &(0x7f0000001c00)='syzkaller\x00', 0x227, 0xcf, &(0x7f0000001c40)=""/207, 0x41100, 0x1, '\x00', 0x0, 0x13, r7, 0x8, &(0x7f0000001d40)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001d80)={0x3, 0x8, 0x0, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001dc0)=[r10, 0xffffffffffffffff, r13, r6, r8]}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001e80)={r10, r4, 0x4, r21}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001f40)={r1, 0x58, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r24 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002140)={0x6, 0x9, &(0x7f0000001fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffdf2, 0x0, 0x0, 0x0, 0xec5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x20000}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}, @generic={0x3f, 0x2, 0x0, 0xfff9, 0xfff}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000002040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000002080)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000020c0)={0x3, 0xc, 0x3f, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002100)=[r12, r15]}, 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000021c0)={&(0x7f0000001f80)='./file0\x00', r24}, 0x10) r25 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x18, 0xe, &(0x7f0000002200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa5e9, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xa6}, @initr0={0x18, 0x0, 0x0, 0x0, 0xbb0, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, r5}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xc}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}]}, &(0x7f0000002280)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4, '\x00', r23, 0x0, r7, 0x8, &(0x7f00000022c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000002300)={0x9, 0xe, 0xffffffff, 0x6b27f163}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002340)=[r14, r11, r9, r3, r24, r11]}, 0x80) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002400)={@cgroup=r11, r25, 0x19}, 0x10) r26 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002680)={r22, 0x8, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000002700)={0x13, 0xe, &(0x7f0000002440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x9}, [@exit, @jmp={0x5, 0x0, 0x9, 0xb, 0x9, 0xffffffffffffffe0, 0x4}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @ldst={0x3, 0x1, 0x0, 0x0, 0x9, 0x40}, @initr0={0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2b}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0x5c}, @call={0x85, 0x0, 0x0, 0x16}]}, &(0x7f00000024c0)='syzkaller\x00', 0x1ff, 0xfc, &(0x7f0000002500)=""/252, 0x41100, 0x1e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f0000002600)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000002640)={0x3, 0xc, 0xffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000026c0)=[r11, r13, r11, r26]}, 0x80) syz_open_procfs$namespace(r2, &(0x7f0000002780)='ns/user\x00') bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000027c0)={0x0, r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002bc0)={0x1, 0x58, &(0x7f0000002b40)}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002fc0), 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003080)={r22, 0x509, 0x10}, 0xc) 18:32:20 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x3) 18:32:20 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:32:20 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x3f80000}}, @struct={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x61, 0x5f]}}, &(0x7f0000000240)=""/4096, 0x47, 0x1000, 0x1}, 0x20) 18:32:20 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x0, [], 0x74}}, &(0x7f0000000240)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 18:32:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x15) 18:32:20 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f00000001c0)=""/176, 0x26, 0xb0, 0x1}, 0x20) 18:32:20 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x3, &(0x7f0000000f00)=ANY=[@ANYBLOB="1800000000040000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:32:20 executing program 1: socketpair(0x2, 0x3, 0x7, &(0x7f0000000040)) 18:32:20 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x3) 18:32:20 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:32:20 executing program 0: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = syz_clone(0x49120000, &(0x7f0000000380), 0x0, &(0x7f0000000400), 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) perf_event_open(0x0, r1, 0x7, 0xffffffffffffffff, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001ac0), 0x10) 18:32:20 executing program 1: ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x777c, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000000}, 0x131e0, 0x0, 0x1b9, 0x4, 0x3, 0x4, 0xfffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xa080, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x1, @perf_config_ext={0x1f, 0x3}, 0x7e80e1c2d2e3b595, 0x7, 0x4, 0x0, 0xffff, 0x2, 0x6, 0x0, 0x6, 0x0, 0x752}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r0, 0x25, 0xf002100}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) r1 = openat$cgroup_ro(r0, &(0x7f0000000400)='cgroup.events\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="f97d1abe8f463a8707651db544956e943ddbe2c42cc368ccb0d865", 0x1b}, {&(0x7f00000004c0)="af2aac5b4762884c06f01d68bfd7d875f492eb413269b8f59ca2dd5527becae09871be79a564a33e6e7f9d3bda0341b515b5b62f2fede43bc8785f1d3d6f1bee7737e1040871f9d7b50c42a846783962", 0x50}, {&(0x7f0000000600)="534dd01c4ec977ad47394cc409d503423891d59081a58ee83a4402c583fe458eb9f1fc7f4b0ac623052ee24648fb8ce671d44c9c0d98073701e03f66ddcf86c8daa8461b9624ab47a2823601b3d4839e1a583e55b8f608657292eae03a68877c8fb0fb9c10debc488ec5ae51a23fd714b6f10dd02a2c67fee581fb4d670aa64c3f5007d9af4ebef722cdcbda735895314032d25ef126024ced66104db1c4a7a4099196060f65043c1da4e7e69bc7b68d37dddaf33de536264679d0b6ab21663a83a736410bbd959b30d4ca1c924f30eecb988bcc904f7e653f407d3a43b694d369561bb9da76cc0cd7a334b90418fdd1a98820ddab4c10817e6192c168", 0xfd}, {&(0x7f0000000780)="3ad7c9fea12a7f7d6f73c37a364928a21728376958cb118b0835dadafd5f2ed85ff7cdc826ce56900abae2239b7802d1ae7a367d1df47328141ab0517e74ad6ca74326b6fdf27e89acf25f680b2f6d4192dc56403a646c1db26a5f842628a22bdce6ea402304f65f46551e71a6ffbf1ab9bab9310b9cfe4d265bb3f055fed97d5768655aced6a2ea8f0c782de36e5e4093d6214cc270438c857fcad11378c8fb531870ee4a5a01457e4859996453d7c9b83bf168d0b0ca64ebe1ed36103ea44656f11c55cb6f3b1119197b9d6b3f26209697345b12fe6acada3cdd51", 0xdc}], 0x4, &(0x7f0000000880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2b}}, @ip_ttl={{0x14, 0x0, 0x2, 0x711}}, @ip_ttl={{0x14, 0x0, 0x2, 0x360f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x684}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}], 0xb0}, 0x407c8c4) socketpair(0x1a, 0x3, 0x8d5, &(0x7f0000000280)) openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000300)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x82, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0x10094, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3a69, 0x4, @perf_config_ext={0x2, 0x35f}, 0xbdde, 0xd2c, 0x60, 0x3, 0x3f, 0x86, 0x8005, 0x0, 0x6, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x738c0480, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='memory.events.local\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) 18:32:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x15) 18:32:20 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@struct={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000240)=""/4096, 0x2d, 0x1000, 0x1}, 0x20) 18:32:20 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:32:20 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x3) 18:32:20 executing program 3: mkdir(&(0x7f0000001880)='./file0\x00', 0x0) [ 1021.068237][T14670] bridge0: port 3(veth0_to_bond) entered disabled state [ 1021.075802][T14670] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.084173][T14670] bridge0: port 1(bridge_slave_0) entered disabled state 18:32:20 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:32:20 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x882, 0x0) 18:32:20 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:32:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 18:32:20 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 18:32:20 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xc}]}}, &(0x7f0000000240)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 18:32:21 executing program 1: ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x777c, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000000}, 0x131e0, 0x0, 0x1b9, 0x4, 0x3, 0x4, 0xfffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xa080, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x1, @perf_config_ext={0x1f, 0x3}, 0x7e80e1c2d2e3b595, 0x7, 0x4, 0x0, 0xffff, 0x2, 0x6, 0x0, 0x6, 0x0, 0x752}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r0, 0x25, 0xf002100}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) r1 = openat$cgroup_ro(r0, &(0x7f0000000400)='cgroup.events\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="f97d1abe8f463a8707651db544956e943ddbe2c42cc368ccb0d865", 0x1b}, {&(0x7f00000004c0)="af2aac5b4762884c06f01d68bfd7d875f492eb413269b8f59ca2dd5527becae09871be79a564a33e6e7f9d3bda0341b515b5b62f2fede43bc8785f1d3d6f1bee7737e1040871f9d7b50c42a846783962", 0x50}, {&(0x7f0000000600)="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", 0xfd}, {&(0x7f0000000780)="3ad7c9fea12a7f7d6f73c37a364928a21728376958cb118b0835dadafd5f2ed85ff7cdc826ce56900abae2239b7802d1ae7a367d1df47328141ab0517e74ad6ca74326b6fdf27e89acf25f680b2f6d4192dc56403a646c1db26a5f842628a22bdce6ea402304f65f46551e71a6ffbf1ab9bab9310b9cfe4d265bb3f055fed97d5768655aced6a2ea8f0c782de36e5e4093d6214cc270438c857fcad11378c8fb531870ee4a5a01457e4859996453d7c9b83bf168d0b0ca64ebe1ed36103ea44656f11c55cb6f3b1119197b9d6b3f26209697345b12fe6acada3cdd51", 0xdc}], 0x4, &(0x7f0000000880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2b}}, @ip_ttl={{0x14, 0x0, 0x2, 0x711}}, @ip_ttl={{0x14, 0x0, 0x2, 0x360f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x684}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}], 0xb0}, 0x407c8c4) socketpair(0x1a, 0x3, 0x8d5, &(0x7f0000000280)) openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000300)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x82, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0x10094, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3a69, 0x4, @perf_config_ext={0x2, 0x35f}, 0xbdde, 0xd2c, 0x60, 0x3, 0x3f, 0x86, 0x8005, 0x0, 0x6, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x738c0480, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='memory.events.local\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) 18:32:21 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00'}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 18:32:21 executing program 3: ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x777c, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000000}, 0x131e0, 0x0, 0x1b9, 0x4, 0x3, 0x4, 0xfffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff, 0x25, 0xf002100}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) socketpair(0x1, 0x2, 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000400)='cgroup.events\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2b}}, @ip_ttl={{0x14, 0x0, 0x2, 0x711}}, @ip_ttl={{0x14, 0x0, 0x2, 0x360f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x684}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}], 0xb0}, 0x407c8c4) socketpair(0x1a, 0x3, 0x8d5, &(0x7f0000000280)) openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x2, 0x1, 0x40, 0xc5, 0x0, 0x80000000, 0xc010, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x6}, 0x8, 0x6, 0x4, 0x2, 0x7a, 0x4, 0x4, 0x0, 0x80, 0x0, 0x1}, 0xffffffffffffffff, 0x2, r1, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000300)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x82, 0x0, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x10094, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3a69, 0x4, @perf_config_ext={0x2, 0x35f}, 0xbdde, 0xd2c, 0x60, 0x3, 0x3f, 0x86, 0x8005, 0x0, 0x6, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x738c0480, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='memory.events.local\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) 18:32:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 18:32:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 18:32:21 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00'}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 18:32:21 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.empty_time\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) r2 = openat$cgroup(r0, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r2, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(r3, 0x0, 0x7a05, 0x1700) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000003c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x2, 0x6}, 0x160, 0x89, 0xfff, 0x4, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x24}, 0x0, 0x1, r4, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xaedc0adf936e8213, @perf_config_ext={0x0, 0x7fffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x800000000000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086607, &(0x7f0000000000)) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000008c0)="e55d105f622502e6b93339e24bcc87b7166a9ef940585fcffac28ad37257218ccb40bd5654ab597924e57cfc7e183799908e58b7db444d1f40", &(0x7f0000001c00)=""/244}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000010000000444750b8400008520000005000000950000000023080000000000004621d2e38bd2645c99bf7e17c42e09a25d8876ec5f206cae253bcca9f8de41f8f4e1cbe035e4475dec9549ed3204110520ba57e95de154225a0f79d1f5552d71ff7f000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40e00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x5, 0xd71f, 0x7}, 0x10}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) write$cgroup_int(r6, &(0x7f0000000400)=0x8257, 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b409000000000000f3dc3207611144000000000085100000020000008500000007000000950000000000000095000010"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0}, 0x70) 18:32:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 18:32:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 18:32:21 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00'}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 18:32:21 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:32:21 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@struct={0x7, 0x0, 0x0, 0xc}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000240)=""/4096, 0x2d, 0x1000, 0x1}, 0x20) 18:32:22 executing program 1: ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x777c, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000000}, 0x131e0, 0x0, 0x1b9, 0x4, 0x3, 0x4, 0xfffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000400)='cgroup.events\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x407c8c4) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000300)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x82, 0x0, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x10094, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3a69, 0x4, @perf_config_ext={0x0, 0x35f}, 0xbdde, 0xd2c, 0x60, 0x3, 0x3f, 0x86, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x738c0480, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events.local\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:32:22 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:32:22 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0x0, 0x341b, 0x18}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x62e97f80e2e1fa60, 0x3, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0x3, 0x5, 0x6, 0xfffffffffffffff0, 0xfffffffffffffff0}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000080)='GPL\x00', 0xfff, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x2, 0xff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, r0, r1]}, 0x80) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x5}, 0x0, 0x7}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x3) gettid() r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001500)='cpuset.mem_hardwall\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='memory.stat\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x9, &(0x7f0000000e40)=ANY=[@ANYBLOB="18000000f5040000000000ffffffffffffff7f0008000000000000000002000098460000feffffff000000000000000018170000", @ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001380)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, r4, r3]}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000b80), 0x12) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000001280)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x16\x17\xd6\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x00') perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x91201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000003c0), 0x2}, 0x84, 0x3f, 0x400, 0x0, 0x88}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000a40)='ns/cgroup\x00') openat$cgroup_ro(r2, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000b00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000640)=""/63, 0x3f}, {&(0x7f0000001900)=""/134, 0x86}, {&(0x7f0000000540)=""/57, 0x39}, {&(0x7f0000000980)=""/178, 0xb2}, {&(0x7f00000011c0)=""/179, 0xb3}], 0x5, &(0x7f0000000d40)=""/253, 0xfd}, 0x12062) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8923, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5 [ 1023.689345][T14747] dump_stack_lvl+0xd1/0x138 [ 1023.693965][T14747] dump_header+0x10b/0x85f [ 1023.698408][T14747] oom_kill_process.cold+0x10/0x15 [ 1023.703547][T14747] out_of_memory+0x35c/0x14a0 [ 1023.708252][T14747] ? oom_killer_disable+0x280/0x280 [ 1023.713471][T14747] ? mark_held_locks+0x9f/0xe0 [ 1023.718260][T14747] mem_cgroup_out_of_memory+0x206/0x270 [ 1023.723831][T14747] ? mem_cgroup_margin+0x130/0x130 [ 1023.728992][T14747] memory_max_write+0x2f9/0x3c0 [ 1023.733858][T14747] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1023.739968][T14747] ? lock_release+0x810/0x810 [ 1023.744671][T14747] cgroup_file_write+0x1e2/0x770 [ 1023.749625][T14747] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1023.755704][T14747] ? kill_css+0x370/0x370 [ 1023.760047][T14747] ? __virt_addr_valid+0x61/0x2e0 [ 1023.765097][T14747] ? kill_css+0x370/0x370 [ 1023.769442][T14747] kernfs_fop_write_iter+0x3f1/0x600 [ 1023.774761][T14747] vfs_write+0x9ed/0xdd0 [ 1023.779019][T14747] ? kernel_write+0x630/0x630 [ 1023.783719][T14747] ? __fget_files+0x26a/0x440 [ 1023.788421][T14747] ksys_write+0x12b/0x250 [ 1023.792760][T14747] ? __ia32_sys_read+0xb0/0xb0 [ 1023.797555][T14747] ? syscall_enter_from_user_mode+0x30/0xb0 [ 1023.803462][T14747] do_syscall_64+0x39/0xb0 [ 1023.807909][T14747] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1023.813813][T14747] RIP: 0033:0x7f4ee748c0c9 [ 1023.818232][T14747] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1023.837847][T14747] RSP: 002b:00007f4ee81b8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1023.846272][T14747] RAX: ffffffffffffffda RBX: 00007f4ee75abf80 RCX: 00007f4ee748c0c9 [ 1023.854252][T14747] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 1023.862226][T14747] RBP: 00007f4ee74e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1023.870199][T14747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1023.878189][T14747] R13: 00007ffd5e7b4baf R14: 00007f4ee81b8300 R15: 0000000000022000 [ 1023.886191][T14747] [ 1023.925810][T14747] memory: usage 10888kB, limit 0kB, failcnt 163 [ 1023.934688][T14747] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1023.977858][T14747] Memory cgroup stats for /syz3: [ 1023.978091][T14747] anon 151552 [ 1023.978091][T14747] file 10498048 [ 1023.978091][T14747] kernel 487424 [ 1023.978091][T14747] kernel_stack 32768 [ 1023.978091][T14747] pagetables 77824 [ 1023.978091][T14747] sec_pagetables 0 [ 1023.978091][T14747] percpu 64 [ 1023.978091][T14747] sock 0 [ 1023.978091][T14747] vmalloc 0 [ 1023.978091][T14747] shmem 10473472 [ 1023.978091][T14747] zswap 0 [ 1023.978091][T14747] zswapped 0 [ 1023.978091][T14747] file_mapped 233472 [ 1023.978091][T14747] file_dirty 24576 [ 1023.978091][T14747] file_writeback 0 [ 1023.978091][T14747] swapcached 0 [ 1023.978091][T14747] anon_thp 0 [ 1023.978091][T14747] file_thp 0 [ 1023.978091][T14747] shmem_thp 0 [ 1023.978091][T14747] inactive_anon 151552 [ 1023.978091][T14747] active_anon 10473472 [ 1023.978091][T14747] inactive_file 8192 [ 1023.978091][T14747] active_file 16384 [ 1023.978091][T14747] unevictable 0 [ 1023.978091][T14747] slab_reclaimable 68592 [ 1023.978091][T14747] slab_unreclaimable 278320 [ 1024.250746][T14747] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13831,uid=0 [ 1024.293486][T14747] Memory cgroup out of memory: Killed process 13831 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1026.525348][T12946] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.681937][T12946] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.872032][T12946] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.990303][T12946] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 18:32:28 executing program 1: ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x777c, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000000}, 0x131e0, 0x0, 0x1b9, 0x4, 0x3, 0x4, 0xfffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000400)='cgroup.events\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x407c8c4) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000300)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x82, 0x0, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x10094, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3a69, 0x4, @perf_config_ext={0x0, 0x35f}, 0xbdde, 0xd2c, 0x60, 0x3, 0x3f, 0x86, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x738c0480, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events.local\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:32:28 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:32:28 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.empty_time\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) r2 = openat$cgroup(r0, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r2, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(r3, 0x0, 0x7a05, 0x1700) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000003c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x2, 0x6}, 0x160, 0x89, 0xfff, 0x4, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x24}, 0x0, 0x1, r4, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xaedc0adf936e8213, @perf_config_ext={0x0, 0x7fffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x800000000000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086607, &(0x7f0000000000)) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000008c0)="e55d105f622502e6b93339e24bcc87b7166a9ef940585fcffac28ad37257218ccb40bd5654ab597924e57cfc7e183799908e58b7db444d1f40", &(0x7f0000001c00)=""/244}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000010000000444750b8400008520000005000000950000000023080000000000004621d2e38bd2645c99bf7e17c42e09a25d8876ec5f206cae253bcca9f8de41f8f4e1cbe035e4475dec9549ed3204110520ba57e95de154225a0f79d1f5552d71ff7f000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40e00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x5, 0xd71f, 0x7}, 0x10}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) write$cgroup_int(r6, &(0x7f0000000400)=0x8257, 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b409000000000000f3dc3207611144000000000085100000020000008500000007000000950000000000000095000010"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0}, 0x70) 18:32:28 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x2) 18:32:28 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) r5 = gettid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r6}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r5, r7, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x80, 0x4, 0x0, 0x6, 0x0, 0xfffffffffffffff9, 0x8686, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}, 0x10844, 0x100000000, 0x1be, 0x8, 0x4, 0xce2, 0x1, 0x0, 0xfffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000040)='\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x100, 0x445, 0x3, 0x110, r8, 0x9, '\x00', 0x0, r3, 0x4, 0x4, 0x1, 0xc}, 0x48) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 18:32:28 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0x0, 0x341b, 0x18}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x62e97f80e2e1fa60, 0x3, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0x3, 0x5, 0x6, 0xfffffffffffffff0, 0xfffffffffffffff0}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000080)='GPL\x00', 0xfff, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x2, 0xff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, r0, r1]}, 0x80) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x5}, 0x0, 0x7}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x3) gettid() r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001500)='cpuset.mem_hardwall\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='memory.stat\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x9, &(0x7f0000000e40)=ANY=[@ANYBLOB="18000000f5040000000000ffffffffffffff7f0008000000000000000002000098460000feffffff000000000000000018170000", @ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001380)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, r4, r3]}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000b80), 0x12) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000001280)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x16\x17\xd6\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x00') perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x91201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000003c0), 0x2}, 0x84, 0x3f, 0x400, 0x0, 0x88}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000a40)='ns/cgroup\x00') openat$cgroup_ro(r2, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000b00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000640)=""/63, 0x3f}, {&(0x7f0000001900)=""/134, 0x86}, {&(0x7f0000000540)=""/57, 0x39}, {&(0x7f0000000980)=""/178, 0xb2}, {&(0x7f00000011c0)=""/179, 0xb3}], 0x5, &(0x7f0000000d40)=""/253, 0xfd}, 0x12062) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8923, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5 9 [ 1031.598940][ T5109] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1031.614130][ T4387] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1031.622305][ T4387] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1031.629535][ T4387] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1033.186569][T14839] chnl_net:caif_netlink_parms(): no params data found [ 1033.682375][ T4387] Bluetooth: hci3: command 0x0409 tx timeout [ 1033.695441][T14839] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.712998][T14839] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.739863][T14839] device bridge_slave_0 entered promiscuous mode [ 1034.001511][T14839] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.008639][T14839] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.016933][T14839] device bridge_slave_1 entered promiscuous mode [ 1034.114253][T14839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1034.193187][T14839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.447898][T14839] team0: Port device team_slave_0 added [ 1034.525872][T14839] team0: Port device team_slave_1 added [ 1034.632793][T14839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.688313][T14839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.789377][T14839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.833508][T14839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.840480][T14839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.960251][T14839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1035.164612][T14839] device hsr_slave_0 entered promiscuous mode [ 1035.192089][T14839] device hsr_slave_1 entered promiscuous mode [ 1035.221401][T14839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1035.228984][T14839] Cannot create hsr debugfs directory [ 1035.766018][ T4387] Bluetooth: hci3: command 0x041b tx timeout [ 1037.862125][ T4387] Bluetooth: hci3: command 0x040f tx timeout 18:32:38 executing program 1: ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x777c, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000000}, 0x131e0, 0x0, 0x1b9, 0x4, 0x3, 0x4, 0xfffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000400)='cgroup.events\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x407c8c4) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000300)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x82, 0x0, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x10094, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3a69, 0x4, @perf_config_ext={0x0, 0x35f}, 0xbdde, 0xd2c, 0x60, 0x3, 0x3f, 0x86, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x738c0480, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events.local\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:32:38 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:32:38 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x2) 18:32:38 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0x0, 0x341b, 0x18}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x62e97f80e2e1fa60, 0x3, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0x3, 0x5, 0x6, 0xfffffffffffffff0, 0xfffffffffffffff0}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000080)='GPL\x00', 0xfff, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x2, 0xff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, r0, r1]}, 0x80) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x5}, 0x0, 0x7}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x3) gettid() r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001500)='cpuset.mem_hardwall\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='memory.stat\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x9, &(0x7f0000000e40)=ANY=[@ANYBLOB="18000000f5040000000000ffffffffffffff7f0008000000000000000002000098460000feffffff000000000000000018170000", @ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001380)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, r4, r3]}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000b80), 0x12) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000001280)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x16\x17\xd6\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x00') perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x91201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000003c0), 0x2}, 0x84, 0x3f, 0x400, 0x0, 0x88}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000a40)='ns/cgroup\x00') openat$cgroup_ro(r2, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000b00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000640)=""/63, 0x3f}, {&(0x7f0000001900)=""/134, 0x86}, {&(0x7f0000000540)=""/57, 0x39}, {&(0x7f0000000980)=""/178, 0xb2}, {&(0x7f00000011c0)=""/179, 0xb3}], 0x5, &(0x7f0000000d40)=""/253, 0xfd}, 0x12062) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8923, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5 [ 1047.848220][T14952] dump_stack_lvl+0xd1/0x138 [ 1047.852851][T14952] dump_header+0x10b/0x85f [ 1047.857313][T14952] oom_kill_process.cold+0x10/0x15 [ 1047.862475][T14952] out_of_memory+0x35c/0x14a0 [ 1047.867220][T14952] ? oom_killer_disable+0x280/0x280 [ 1047.872466][T14952] ? mark_held_locks+0x9f/0xe0 [ 1047.877270][T14952] mem_cgroup_out_of_memory+0x206/0x270 [ 1047.882858][T14952] ? mem_cgroup_margin+0x130/0x130 [ 1047.888027][T14952] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 1047.893869][T14952] memory_max_write+0x2f9/0x3c0 [ 1047.898752][T14952] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1047.904848][T14952] ? lock_release+0x810/0x810 [ 1047.909558][T14952] cgroup_file_write+0x1e2/0x770 [ 1047.914532][T14952] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1047.920629][T14952] ? kill_css+0x370/0x370 [ 1047.924994][T14952] ? __virt_addr_valid+0x61/0x2e0 [ 1047.930075][T14952] ? kill_css+0x370/0x370 [ 1047.934434][T14952] kernfs_fop_write_iter+0x3f1/0x600 [ 1047.939766][T14952] vfs_write+0x9ed/0xdd0 [ 1047.944047][T14952] ? kernel_write+0x630/0x630 [ 1047.948757][T14952] ? __fget_files+0x26a/0x440 [ 1047.953502][T14952] ksys_write+0x12b/0x250 [ 1047.957868][T14952] ? __ia32_sys_read+0xb0/0xb0 [ 1047.962661][T14952] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1047.968590][T14952] do_syscall_64+0x39/0xb0 [ 1047.973044][T14952] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1047.978970][T14952] RIP: 0033:0x7f769928c0c9 [ 1047.983412][T14952] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1048.003052][T14952] RSP: 002b:00007f7699f4d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1048.011502][T14952] RAX: ffffffffffffffda RBX: 00007f76993abf80 RCX: 00007f769928c0c9 [ 1048.019494][T14952] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 1048.027497][T14952] RBP: 00007f76992e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1048.035491][T14952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1048.043493][T14952] R13: 00007fff7686b4bf R14: 00007f7699f4d300 R15: 0000000000022000 [ 1048.051513][T14952] [ 1048.211388][T14952] memory: usage 10656kB, limit 0kB, failcnt 163 [ 1048.232503][T14952] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1048.714425][T14952] Memory cgroup stats for /syz3: [ 1048.714664][T14952] anon 118784 [ 1048.714664][T14952] file 10485760 [ 1048.714664][T14952] kernel 270336 [ 1048.714664][T14952] kernel_stack 32768 [ 1048.714664][T14952] pagetables 77824 [ 1048.714664][T14952] sec_pagetables 0 [ 1048.714664][T14952] percpu 208 [ 1048.714664][T14952] sock 0 [ 1048.714664][T14952] vmalloc 4096 [ 1048.714664][T14952] shmem 10473472 [ 1048.714664][T14952] zswap 0 [ 1048.714664][T14952] zswapped 0 [ 1048.714664][T14952] file_mapped 233472 [ 1048.714664][T14952] file_dirty 12288 [ 1048.714664][T14952] file_writeback 0 [ 1048.714664][T14952] swapcached 0 [ 1048.714664][T14952] anon_thp 0 [ 1048.714664][T14952] file_thp 0 [ 1048.714664][T14952] shmem_thp 0 [ 1048.714664][T14952] inactive_anon 118784 [ 1048.714664][T14952] active_anon 10473472 [ 1048.714664][T14952] inactive_file 4096 [ 1048.714664][T14952] active_file 8192 [ 1048.714664][T14952] unevictable 0 [ 1048.714664][T14952] slab_reclaimable 48440 [ 1048.714664][T14952] slab_unreclaimable 79152 [ 1048.897886][T14952] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14951,uid=0 [ 1048.959421][T14952] Memory cgroup out of memory: Killed process 14952 (syz-executor.3) total-vm:56588kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 18:32:48 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) r1 = gettid() syz_open_procfs$namespace(r1, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_bp, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_clone(0x5c000480, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, r2, 0x0, 0xfffffffffffffd46, &(0x7f0000000340)='bridge\xcd\xb6'}, 0x30) perf_event_open$cgroup(0x0, r0, 0x1, r2, 0x0) [ 1049.261866][T14839] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1049.301948][T14839] CPU: 0 PID: 14839 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1049.312398][T14839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1049.322473][T14839] Call Trace: [ 1049.325762][T14839] [ 1049.328705][T14839] dump_stack_lvl+0xd1/0x138 [ 1049.333327][T14839] dump_header+0x10b/0x85f [ 1049.337781][T14839] oom_kill_process.cold+0x10/0x15 [ 1049.342935][T14839] out_of_memory+0x35c/0x14a0 [ 1049.347649][T14839] ? find_held_lock+0x2d/0x110 [ 1049.352450][T14839] ? oom_killer_disable+0x280/0x280 [ 1049.357683][T14839] ? find_held_lock+0x2d/0x110 [ 1049.362483][T14839] mem_cgroup_out_of_memory+0x206/0x270 [ 1049.368073][T14839] ? mem_cgroup_margin+0x130/0x130 [ 1049.373218][T14839] ? lock_downgrade+0x6e0/0x6e0 [ 1049.378108][T14839] try_charge_memcg+0xefb/0x12f0 [ 1049.383078][T14839] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1049.389085][T14839] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1049.394843][T14839] ? lock_downgrade+0x6e0/0x6e0 [ 1049.399721][T14839] ? lock_downgrade+0x6e0/0x6e0 [ 1049.404609][T14839] __memcg_kmem_charge_page+0x16e/0x3b0 [ 1049.410182][T14839] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 1049.416378][T14839] copy_process+0x4e3/0x7520 [ 1049.421017][T14839] ? _raw_spin_unlock+0x28/0x40 [ 1049.425895][T14839] ? wp_page_reuse+0x197/0x570 [ 1049.430688][T14839] ? do_wp_page+0x844/0x3370 [ 1049.435313][T14839] ? __cleanup_sighand+0xb0/0xb0 [ 1049.440273][T14839] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1049.445682][T14839] ? rwlock_bug.part.0+0x90/0x90 [ 1049.450652][T14839] ? lock_chain_count+0x20/0x20 [ 1049.455527][T14839] kernel_clone+0xeb/0x990 [ 1049.459971][T14839] ? create_io_thread+0xf0/0xf0 [ 1049.464856][T14839] ? find_held_lock+0x2d/0x110 [ 1049.469670][T14839] __do_sys_clone+0xba/0x100 [ 1049.474292][T14839] ? kernel_clone+0x990/0x990 [ 1049.479029][T14839] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1049.484977][T14839] do_syscall_64+0x39/0xb0 [ 1049.489445][T14839] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1049.495361][T14839] RIP: 0033:0x7f7699289dfb [ 1049.499836][T14839] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1049.519472][T14839] RSP: 002b:00007fff7686b700 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1049.527920][T14839] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7699289dfb [ 1049.535916][T14839] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1049.543906][T14839] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555556ef400 [ 1049.551892][T14839] R10: 00005555556ef6d0 R11: 0000000000000246 R12: 0000000000000001 [ 1049.559881][T14839] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff7686b7e0 [ 1049.567911][T14839] [ 1049.676676][T14839] memory: usage 10408kB, limit 0kB, failcnt 196 [ 1049.695585][T14839] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1049.709616][T14839] Memory cgroup stats for /syz3: [ 1049.709814][T14839] anon 40960 [ 1049.709814][T14839] file 10485760 [ 1049.709814][T14839] kernel 122880 [ 1049.709814][T14839] kernel_stack 0 [ 1049.709814][T14839] pagetables 8192 [ 1049.709814][T14839] sec_pagetables 0 [ 1049.709814][T14839] percpu 64 [ 1049.709814][T14839] sock 0 [ 1049.709814][T14839] vmalloc 0 [ 1049.709814][T14839] shmem 10473472 [ 1049.709814][T14839] zswap 0 [ 1049.709814][T14839] zswapped 0 [ 1049.709814][T14839] file_mapped 200704 [ 1049.709814][T14839] file_dirty 12288 [ 1049.709814][T14839] file_writeback 0 [ 1049.709814][T14839] swapcached 0 [ 1049.709814][T14839] anon_thp 0 [ 1049.709814][T14839] file_thp 0 [ 1049.709814][T14839] shmem_thp 0 [ 1049.709814][T14839] inactive_anon 40960 [ 1049.709814][T14839] active_anon 10473472 [ 1049.709814][T14839] inactive_file 8192 [ 1049.709814][T14839] active_file 4096 [ 1049.709814][T14839] unevictable 0 [ 1049.709814][T14839] slab_reclaimable 35128 [ 1049.709814][T14839] slab_unreclaimable 54168 [ 1049.709814][T14839] slab 89296 [ 1049.823973][T14839] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14839,uid=0 [ 1049.847452][T14839] Memory cgroup out of memory: Killed process 14839 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1050.462289][T12946] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.577768][T12946] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.802294][T12946] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.030291][T12946] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.697121][T12946] device hsr_slave_0 left promiscuous mode [ 1052.740382][T12946] device hsr_slave_1 left promiscuous mode [ 1052.752192][T12946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1052.759606][T12946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1052.800019][T12946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1052.824167][T12946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1052.858990][T12946] device bridge_slave_1 left promiscuous mode [ 1052.889901][T12946] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.929762][T12946] device bridge_slave_0 left promiscuous mode [ 1052.947393][T12946] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.001031][T12946] device veth1_macvtap left promiscuous mode [ 1053.024577][T12946] device veth0_macvtap left promiscuous mode [ 1053.030707][T12946] device veth1_vlan left promiscuous mode [ 1053.044853][T12946] device veth0_vlan left promiscuous mode [ 1053.924688][T12946] team0 (unregistering): Port device team_slave_1 removed [ 1053.959984][T12946] team0 (unregistering): Port device team_slave_0 removed [ 1054.032368][T12946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1054.144309][T12946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1054.163056][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.169373][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.339405][T12946] bond0 (unregistering): Released all slaves 18:33:14 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:33:14 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x2) 18:33:14 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000004000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0x1, 0x18}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x6, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f00000001c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000380)="ec31ec", 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0x66, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff68, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x62, 0xa0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffe75, 0x0, 0x0, 0x0, 0xfffffffffffffee8, 0x10, 0x8, 0x0, 0x0}}, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="580000000080a77d671e13f7dad50523bb326192cb4bd954c4360e00000000000000000000000000000000950000000000000000010000003f000051000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0xc, 0x0, 0x404}, 0x10}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x39, 0x0}}, 0xffffffffffffff60) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x777c, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000280), 0x1}, 0x131e0, 0x0, 0x1b9, 0x4, 0x3, 0x4, 0xfffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x3) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r4, 0x5, 0xf002100}, 0x10) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x7, 0xac, 0x80, 0x20, 0x0, 0x1000, 0x20, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1}, 0x1489, 0x4, 0x1ff, 0x0, 0x9, 0x3, 0x6, 0x0, 0x8, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r5, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cgroup.events\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) socketpair(0x0, 0xa, 0x1, &(0x7f0000000240)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) 18:33:14 executing program 1: ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x777c, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000000}, 0x131e0, 0x0, 0x1b9, 0x4, 0x3, 0x4, 0xfffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000400)='cgroup.events\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x407c8c4) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000300)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x82, 0x0, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x10094, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3a69, 0x4, @perf_config_ext={0x0, 0x35f}, 0xbdde, 0xd2c, 0x60, 0x3, 0x3f, 0x86, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x738c0480, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events.local\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:33:14 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040), 0x12) 18:33:14 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) r5 = gettid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r6}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r5, r7, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x80, 0x4, 0x0, 0x6, 0x0, 0xfffffffffffffff9, 0x8686, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}, 0x10844, 0x100000000, 0x1be, 0x8, 0x4, 0xce2, 0x1, 0x0, 0xfffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000040)='\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x100, 0x445, 0x3, 0x110, r8, 0x9, '\x00', 0x0, r3, 0x4, 0x4, 0x1, 0xc}, 0x48) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 18:33:14 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x2) 18:33:14 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:33:14 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0x2) [ 1075.172204][T15315] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.180400][T15315] bridge0: port 1(bridge_slave_0) entered disabled state 18:33:14 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0x2) 18:33:14 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) [ 1075.437676][T15325] device bridge_slave_1 left promiscuous mode [ 1075.461573][T15325] bridge0: port 2(bridge_slave_1) entered disabled state 18:33:14 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0x2) 18:33:15 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) [ 1075.524202][T15325] device bridge_slave_0 left promiscuous mode [ 1075.559289][T15325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.706763][T15311] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 18:33:15 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000004000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0x1, 0x18}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x6, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f00000001c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000380)="ec31ec", 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0x66, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff68, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x62, 0xa0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffe75, 0x0, 0x0, 0x0, 0xfffffffffffffee8, 0x10, 0x8, 0x0, 0x0}}, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="580000000080a77d671e13f7dad50523bb326192cb4bd954c4360e00000000000000000000000000000000950000000000000000010000003f000051000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0xc, 0x0, 0x404}, 0x10}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x39, 0x0}}, 0xffffffffffffff60) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x777c, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000280), 0x1}, 0x131e0, 0x0, 0x1b9, 0x4, 0x3, 0x4, 0xfffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x3) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r4, 0x5, 0xf002100}, 0x10) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x7, 0xac, 0x80, 0x20, 0x0, 0x1000, 0x20, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1}, 0x1489, 0x4, 0x1ff, 0x0, 0x9, 0x3, 0x6, 0x0, 0x8, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r5, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cgroup.events\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) socketpair(0x0, 0xa, 0x1, &(0x7f0000000240)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) 18:33:15 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x2) [ 1075.812151][T15311] CPU: 0 PID: 15311 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1075.822623][T15311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1075.832703][T15311] Call Trace: [ 1075.835999][T15311] [ 1075.838949][T15311] dump_stack_lvl+0xd1/0x138 [ 1075.843573][T15311] dump_header+0x10b/0x85f [ 1075.848038][T15311] oom_kill_process.cold+0x10/0x15 [ 1075.853197][T15311] out_of_memory+0x35c/0x14a0 [ 1075.857928][T15311] ? oom_killer_disable+0x280/0x280 [ 1075.863181][T15311] ? find_held_lock+0x2d/0x110 [ 1075.868004][T15311] mem_cgroup_out_of_memory+0x206/0x270 [ 1075.873590][T15311] ? mem_cgroup_margin+0x130/0x130 [ 1075.878741][T15311] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1075.884582][T15311] memory_max_write+0x2f9/0x3c0 [ 1075.889447][T15311] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1075.895528][T15311] ? lock_release+0x810/0x810 [ 1075.900218][T15311] cgroup_file_write+0x1e2/0x770 [ 1075.905173][T15311] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1075.911251][T15311] ? kill_css+0x370/0x370 [ 1075.915597][T15311] ? __virt_addr_valid+0x61/0x2e0 [ 1075.920647][T15311] ? kill_css+0x370/0x370 [ 1075.924988][T15311] kernfs_fop_write_iter+0x3f1/0x600 [ 1075.930300][T15311] vfs_write+0x9ed/0xdd0 [ 1075.934555][T15311] ? kernel_write+0x630/0x630 [ 1075.939248][T15311] ? __fget_files+0x26a/0x440 [ 1075.943982][T15311] ksys_write+0x12b/0x250 [ 1075.948320][T15311] ? __ia32_sys_read+0xb0/0xb0 [ 1075.953099][T15311] ? syscall_enter_from_user_mode+0x30/0xb0 [ 1075.959020][T15311] do_syscall_64+0x39/0xb0 [ 1075.963452][T15311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1075.969394][T15311] RIP: 0033:0x7f207608c0c9 [ 1075.973813][T15311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1075.993450][T15311] RSP: 002b:00007f2076db2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1076.001872][T15311] RAX: ffffffffffffffda RBX: 00007f20761abf80 RCX: 00007f207608c0c9 [ 1076.009851][T15311] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 1076.017826][T15311] RBP: 00007f20760e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1076.025801][T15311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1076.033773][T15311] R13: 00007ffc290224cf R14: 00007f2076db2300 R15: 0000000000022000 [ 1076.041771][T15311] [ 1076.254934][T15311] memory: usage 8640kB, limit 0kB, failcnt 136 [ 1076.268921][T15311] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1076.289267][T15311] Memory cgroup stats for /syz0: [ 1076.289498][T15311] anon 147456 [ 1076.289498][T15311] file 8359936 [ 1076.289498][T15311] kernel 339968 [ 1076.289498][T15311] kernel_stack 65536 [ 1076.289498][T15311] pagetables 77824 [ 1076.289498][T15311] sec_pagetables 0 [ 1076.289498][T15311] percpu 208 [ 1076.289498][T15311] sock 0 [ 1076.289498][T15311] vmalloc 4096 [ 1076.289498][T15311] shmem 8359936 [ 1076.289498][T15311] zswap 0 [ 1076.289498][T15311] zswapped 0 [ 1076.289498][T15311] file_mapped 217088 [ 1076.289498][T15311] file_dirty 0 [ 1076.289498][T15311] file_writeback 0 [ 1076.289498][T15311] swapcached 0 [ 1076.289498][T15311] anon_thp 0 [ 1076.289498][T15311] file_thp 0 [ 1076.289498][T15311] shmem_thp 0 [ 1076.289498][T15311] inactive_anon 147456 [ 1076.289498][T15311] active_anon 8359936 [ 1076.289498][T15311] inactive_file 0 [ 1076.289498][T15311] active_file 0 [ 1076.289498][T15311] unevictable 0 [ 1076.289498][T15311] slab_reclaimable 45464 [ 1076.289498][T15311] slab_unreclaimable 116344 [ 1076.289498][T15311] slab 161808 [ 1076.400993][T15311] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=15308,uid=0 [ 1076.426419][T15311] Memory cgroup out of memory: Killed process 15308 (syz-executor.0) total-vm:56588kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 1076.721696][ T4387] Bluetooth: hci0: command 0x0406 tx timeout [ 1077.761527][ T9326] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1077.769964][ T5109] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1077.789205][ T5109] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1077.797048][ T5109] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1077.804642][ T5109] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1078.241601][T15364] chnl_net:caif_netlink_parms(): no params data found 18:33:17 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x2) 18:33:17 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000004000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0x1, 0x18}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x6, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f00000001c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000380)="ec31ec", 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0x66, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff68, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x62, 0xa0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffe75, 0x0, 0x0, 0x0, 0xfffffffffffffee8, 0x10, 0x8, 0x0, 0x0}}, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="580000000080a77d671e13f7dad50523bb326192cb4bd954c4360e00000000000000000000000000000000950000000000000000010000003f000051000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0xc, 0x0, 0x404}, 0x10}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x39, 0x0}}, 0xffffffffffffff60) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x777c, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000280), 0x1}, 0x131e0, 0x0, 0x1b9, 0x4, 0x3, 0x4, 0xfffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x3) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r4, 0x5, 0xf002100}, 0x10) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x7, 0xac, 0x80, 0x20, 0x0, 0x1000, 0x20, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1}, 0x1489, 0x4, 0x1ff, 0x0, 0x9, 0x3, 0x6, 0x0, 0x8, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r5, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cgroup.events\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) socketpair(0x0, 0xa, 0x1, &(0x7f0000000240)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) [ 1078.436472][T15364] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.445954][T15364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.459975][T15364] device bridge_slave_0 entered promiscuous mode [ 1078.474974][T15364] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.483455][T15364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.502212][T15364] device bridge_slave_1 entered promiscuous mode [ 1078.582658][T15364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1078.619223][T15364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1078.670469][T15364] team0: Port device team_slave_0 added [ 1078.687959][T15364] team0: Port device team_slave_1 added [ 1078.758162][T15364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1078.765614][T15364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1078.802931][T15364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1078.830147][T15364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1078.845403][T15364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1078.881034][T15364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1078.948331][T15364] device hsr_slave_0 entered promiscuous mode [ 1078.963387][T15364] device hsr_slave_1 entered promiscuous mode [ 1078.970087][T15364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1078.986168][T15364] Cannot create hsr debugfs directory [ 1079.851399][ T5109] Bluetooth: hci3: command 0x0409 tx timeout [ 1079.923872][T15364] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1079.933992][T15364] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1079.944315][T15364] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1079.960233][T15364] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1080.053383][T15364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1080.068355][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1080.076726][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1080.088817][T15364] 8021q: adding VLAN 0 to HW filter on device team0 [ 1080.100515][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1080.111052][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1080.127546][ T9320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.134717][ T9320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1080.166327][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1080.174843][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1080.183635][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1080.192669][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.199778][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1080.208016][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1080.217870][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1080.226934][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1080.246871][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1080.255068][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1080.264469][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1080.273256][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1080.286184][T15364] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1080.299008][T15364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1080.309528][T12859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1080.320875][T12859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1080.609188][T15364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1080.618514][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1080.627330][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1080.660654][T12859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1080.678222][T12859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1080.710784][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1080.720115][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1080.729786][T15364] device veth0_vlan entered promiscuous mode [ 1080.740976][T12859] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1080.751225][T12859] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1080.769275][T15364] device veth1_vlan entered promiscuous mode [ 1080.808009][T12859] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1080.817189][T12859] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1080.826560][T12859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1080.835673][T12859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1080.846364][T15364] device veth0_macvtap entered promiscuous mode [ 1080.859397][T15364] device veth1_macvtap entered promiscuous mode [ 1080.876400][T15364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.888846][T15364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.909885][T15364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.920731][T15364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.940281][T15364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.950987][T15364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.961530][T15364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.973656][T15364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.993444][T15364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.004131][T15364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.015726][T15364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1081.024944][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1081.033795][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1081.042823][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1081.053115][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1081.071880][T15364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.091506][T15364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.112451][T15364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.123657][T15364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.134647][T15364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.145331][T15364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.155405][T15364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.166107][T15364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.178689][T15364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.189361][T15364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.201782][T15364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1081.210491][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1081.219524][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1081.236967][T15364] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.251224][T15364] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.260164][T15364] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.269049][T15364] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.390229][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.402042][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.411197][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1081.460541][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.476964][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.489570][T12859] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:33:20 executing program 3: ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x777c, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000000}, 0x131e0, 0x0, 0x1b9, 0x4, 0x3, 0x4, 0xfffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x0, 0xb, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x1, @perf_config_ext={0x1f, 0x3}, 0x7e80e1c2d2e3b595, 0x7, 0x4, 0x0, 0xffff, 0x2, 0x6, 0x0, 0x6, 0x0, 0x752}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r0, 0x25, 0xf002100}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) r1 = openat$cgroup_ro(r0, &(0x7f0000000400)='cgroup.events\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="f97d1abe8f463a8707651db544956e943ddbe2c42cc368ccb0d865", 0x1b}, {&(0x7f00000004c0)="af2aac5b4762884c06f01d68bfd7d875f492eb413269b8f59ca2dd5527becae09871be79a564a33e6e7f9d3bda0341b515b5b62f2fede43bc8785f1d3d6f1bee7737e1040871f9d7b50c42a846783962", 0x50}, {&(0x7f0000000600)="534dd01c4ec977ad47394cc409d503423891d59081a58ee83a4402c583fe458eb9f1fc7f4b0ac623052ee24648fb8ce671d44c9c0d98073701e03f66ddcf86c8daa8461b9624ab47a2823601b3d4839e1a583e55b8f608657292eae03a68877c8fb0fb9c10debc488ec5ae51a23fd714b6f10dd02a2c67fee581fb4d670aa64c3f5007d9af4ebef722cdcbda735895314032d25ef126024ced66104db1c4a7a4099196060f65043c1da4e7e69bc7b68d37dddaf33de536264679d0b6ab21663a83a736410bbd959b30d4ca1c924f30eecb988bcc904f7e653f407d3a43b694d369561bb9da76cc0cd7a334b90418fdd1a98820ddab4c10817e6192c168", 0xfd}, {&(0x7f0000000780)="3ad7c9fea12a7f7d6f73c37a364928a21728376958cb118b0835dadafd5f2ed85ff7cdc826ce56900abae2239b7802d1ae7a367d1df47328141ab0517e74ad6ca74326b6fdf27e89acf25f680b2f6d4192dc56403a646c1db26a5f842628a22bdce6ea402304f65f46551e71a6ffbf1ab9bab9310b9cfe4d265bb3f055fed97d5768655aced6a2ea8f0c782de36e5e4093d6214cc270438c857fcad11378c8fb531870ee4a5a01457e4859996453d7c9b83bf168d0b0ca64ebe1ed36103ea44656f11c55cb6f3b1119197b9d6b3f26209697345b12fe6acada3cdd51", 0xdc}], 0x4, &(0x7f0000000880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2b}}, @ip_ttl={{0x14, 0x0, 0x2, 0x711}}, @ip_ttl={{0x14, 0x0, 0x2, 0x360f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x684}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}], 0xb0}, 0x407c8c4) socketpair(0x1a, 0x3, 0x8d5, &(0x7f0000000280)) openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000300)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x82, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0x10094, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3a69, 0x4, @perf_config_ext={0x2, 0x35f}, 0xbdde, 0xd2c, 0x60, 0x3, 0x3f, 0x86, 0x8005, 0x0, 0x6, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x738c0480, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='memory.events.local\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) 18:33:20 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:33:20 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000004000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0x1, 0x18}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x6, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f00000001c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000380)="ec31ec", 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0x66, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff68, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x62, 0xa0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffe75, 0x0, 0x0, 0x0, 0xfffffffffffffee8, 0x10, 0x8, 0x0, 0x0}}, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="580000000080a77d671e13f7dad50523bb326192cb4bd954c4360e00000000000000000000000000000000950000000000000000010000003f000051000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0xc, 0x0, 0x404}, 0x10}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x39, 0x0}}, 0xffffffffffffff60) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x777c, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000280), 0x1}, 0x131e0, 0x0, 0x1b9, 0x4, 0x3, 0x4, 0xfffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x3) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r4, 0x5, 0xf002100}, 0x10) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x7, 0xac, 0x80, 0x20, 0x0, 0x1000, 0x20, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1}, 0x1489, 0x4, 0x1ff, 0x0, 0x9, 0x3, 0x6, 0x0, 0x8, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r5, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cgroup.events\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) socketpair(0x0, 0xa, 0x1, &(0x7f0000000240)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) 18:33:20 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) 18:33:20 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x2) 18:33:20 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000004000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="820956072ebaf87cbaa10fef2184f14d806005905259a9beea3b206c493cc81c3572f71cfff8c2e0f4a0298b27cb35f7792869e8bc7f718a4729a29b71f88dc511551aa3250bef0884ebd4673ab5e91958c7ea1958ed195128365c672c133489ea603d97a07776bbed038e6566c9de0985885c0200000094f13be07763a7c6fe7360af37905b15c81d4d675494eb8b7a2a49fdb9af830cad981098a0cf83cdc3993970a149a2bdfd0900000000000000d05ad88111f2c5ae01e9f865d7e43846b52e9144296607635aaa7a216477ff07000073635d878c92b85d3b4047287c8234c0d8dc091920a0f919a945df03c17521a3b980fa674043b02b7cc4959e90ff796f1f1d676192e4e13b00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0x1, 0x18}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x6, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f00000001c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000380)="ec31ec", 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0x66, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff68, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x62, 0xa0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffe75, 0x0, 0x0, 0x0, 0xfffffffffffffee8, 0x10, 0x8, 0x0, 0x0}}, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="580000000080a77d671e13f7dad50523bb326192cb4bd954c4360e00000000000000000000000000000000950000000000000000010000003f000051000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0xc, 0x0, 0x404}, 0x10}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x39, 0x0}}, 0xffffffffffffff60) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x777c, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000280), 0x1}, 0x131e0, 0x0, 0x1b9, 0x4, 0x3, 0x4, 0xfffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x3) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r4, 0x5, 0xf002100}, 0x10) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x7, 0xac, 0x80, 0x20, 0x0, 0x1000, 0x20, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1}, 0x1489, 0x4, 0x1ff, 0x0, 0x9, 0x3, 0x6, 0x0, 0x8, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r5, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cgroup.events\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) socketpair(0x0, 0xa, 0x1, &(0x7f0000000240)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) [ 1081.617648][T14127] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 1081.667315][T14127] CPU: 1 PID: 14127 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1081.677858][T14127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1081.687941][T14127] Call Trace: [ 1081.691239][T14127] [ 1081.694190][T14127] dump_stack_lvl+0xd1/0x138 [ 1081.698833][T14127] dump_header+0x10b/0x85f [ 1081.703296][T14127] oom_kill_process.cold+0x10/0x15 [ 1081.708461][T14127] out_of_memory+0x35c/0x14a0 [ 1081.713181][T14127] ? find_held_lock+0x2d/0x110 [ 1081.717987][T14127] ? oom_killer_disable+0x280/0x280 [ 1081.723243][T14127] ? find_held_lock+0x2d/0x110 [ 1081.728060][T14127] mem_cgroup_out_of_memory+0x206/0x270 [ 1081.733645][T14127] ? mem_cgroup_margin+0x130/0x130 [ 1081.738791][T14127] ? lock_downgrade+0x6e0/0x6e0 [ 1081.743689][T14127] try_charge_memcg+0xefb/0x12f0 [ 1081.748673][T14127] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1081.754682][T14127] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1081.760448][T14127] ? lock_downgrade+0x6e0/0x6e0 [ 1081.765343][T14127] ? lock_downgrade+0x6e0/0x6e0 [ 1081.770216][T14127] ? rcu_read_unlock+0x9/0x60 [ 1081.774945][T14127] obj_cgroup_charge+0x2af/0x5e0 [ 1081.779921][T14127] ? copy_process+0x3aa/0x7520 [ 1081.784715][T14127] kmem_cache_alloc_node+0xb7/0x460 [ 1081.789944][T14127] copy_process+0x3aa/0x7520 [ 1081.794562][T14127] ? _raw_spin_unlock+0x28/0x40 [ 1081.799432][T14127] ? wp_page_reuse+0x197/0x570 [ 1081.804229][T14127] ? do_wp_page+0x844/0x3370 [ 1081.808850][T14127] ? __cleanup_sighand+0xb0/0xb0 [ 1081.813810][T14127] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1081.819199][T14127] ? rwlock_bug.part.0+0x90/0x90 [ 1081.824149][T14127] ? lock_chain_count+0x20/0x20 [ 1081.829012][T14127] kernel_clone+0xeb/0x990 [ 1081.833440][T14127] ? create_io_thread+0xf0/0xf0 [ 1081.838305][T14127] ? find_held_lock+0x2d/0x110 [ 1081.843095][T14127] __do_sys_clone+0xba/0x100 [ 1081.847697][T14127] ? kernel_clone+0x990/0x990 [ 1081.852399][T14127] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1081.858307][T14127] do_syscall_64+0x39/0xb0 [ 1081.862739][T14127] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1081.868638][T14127] RIP: 0033:0x7f2076089dfb [ 1081.873064][T14127] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1081.892684][T14127] RSP: 002b:00007ffc29022710 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1081.901103][T14127] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2076089dfb [ 1081.909076][T14127] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 18:33:21 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)) 18:33:21 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x2) 18:33:21 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) [ 1081.917051][T14127] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555ff0400 [ 1081.925024][T14127] R10: 0000555555ff06d0 R11: 0000000000000246 R12: 0000000000000001 [ 1081.932996][T14127] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc290227f0 [ 1081.940990][T14127] [ 1081.944913][ T5109] Bluetooth: hci1: command 0x0406 tx timeout [ 1081.952227][ T5109] Bluetooth: hci3: command 0x041b tx timeout 18:33:21 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:33:21 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x2) [ 1082.013090][T15478] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.021415][T15478] bridge0: port 1(bridge_slave_0) entered disabled state 18:33:21 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x2) [ 1082.293157][T14127] memory: usage 8328kB, limit 0kB, failcnt 155 [ 1082.338437][T14127] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1082.357226][T14127] Memory cgroup stats for /syz0: [ 1082.357453][T14127] anon 49152 [ 1082.357453][T14127] file 8359936 [ 1082.357453][T14127] kernel 118784 [ 1082.357453][T14127] kernel_stack 0 [ 1082.357453][T14127] pagetables 8192 [ 1082.357453][T14127] sec_pagetables 0 [ 1082.357453][T14127] percpu 0 [ 1082.357453][T14127] sock 0 [ 1082.357453][T14127] vmalloc 0 [ 1082.357453][T14127] shmem 8359936 [ 1082.357453][T14127] zswap 0 [ 1082.357453][T14127] zswapped 0 [ 1082.357453][T14127] file_mapped 180224 [ 1082.357453][T14127] file_dirty 0 [ 1082.357453][T14127] file_writeback 0 [ 1082.357453][T14127] swapcached 0 [ 1082.357453][T14127] anon_thp 0 [ 1082.357453][T14127] file_thp 0 [ 1082.357453][T14127] shmem_thp 0 [ 1082.357453][T14127] inactive_anon 49152 [ 1082.357453][T14127] active_anon 8359936 [ 1082.357453][T14127] inactive_file 0 [ 1082.357453][T14127] active_file 0 [ 1082.357453][T14127] unevictable 0 [ 1082.357453][T14127] slab_reclaimable 28920 [ 1082.357453][T14127] slab_unreclaimable 69488 [ 1082.357453][T14127] slab 98408 [ 1082.456580][T14127] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=14127,uid=0 [ 1082.475031][T14127] Memory cgroup out of memory: Killed process 14127 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1082.840217][ T34] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.934464][ T34] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.059606][ T34] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.213226][ T34] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.001708][ T5109] Bluetooth: hci3: command 0x040f tx timeout [ 1084.235405][ T34] device hsr_slave_0 left promiscuous mode [ 1084.259150][ T34] device hsr_slave_1 left promiscuous mode [ 1084.281653][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1084.293675][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1084.313856][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1084.331415][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1084.350812][ T34] device bridge_slave_1 left promiscuous mode [ 1084.366199][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.390609][ T34] device bridge_slave_0 left promiscuous mode [ 1084.396974][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.428584][ T34] device veth1_macvtap left promiscuous mode [ 1084.434780][ T34] device veth0_macvtap left promiscuous mode [ 1084.440909][ T34] device veth1_vlan left promiscuous mode [ 1084.471708][ T34] device veth0_vlan left promiscuous mode [ 1084.962188][ T34] team0 (unregistering): Port device team_slave_1 removed [ 1084.990520][ T34] team0 (unregistering): Port device team_slave_0 removed [ 1085.019142][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1085.051604][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1085.173299][ T34] bond0 (unregistering): Released all slaves 18:33:24 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x2) 18:33:24 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x4, 0x3ffff, 0x2}, 0x48) 18:33:24 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:33:24 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:33:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x1d}) ioctl$TUNSETNOCSUM(r0, 0x400454d8, 0x0) 18:33:24 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000004000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0x1, 0x18}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x6, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f00000001c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000380)="ec31ec", 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0x66, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff68, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x62, 0xa0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffe75, 0x0, 0x0, 0x0, 0xfffffffffffffee8, 0x10, 0x8, 0x0, 0x0}}, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="580000000080a77d671e13f7dad50523bb326192cb4bd954c4360e00000000000000000000000000000000950000000000000000010000003f000051000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0xc, 0x0, 0x404}, 0x10}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x39, 0x0}}, 0xffffffffffffff60) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x777c, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000280), 0x1}, 0x131e0, 0x0, 0x1b9, 0x4, 0x3, 0x4, 0xfffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x3) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r4, 0x5, 0xf002100}, 0x10) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x7, 0xac, 0x80, 0x20, 0x0, 0x1000, 0x20, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1}, 0x1489, 0x4, 0x1ff, 0x0, 0x9, 0x3, 0x6, 0x0, 0x8, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r5, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cgroup.events\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) socketpair(0x0, 0xa, 0x1, &(0x7f0000000240)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) 18:33:24 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x2) 18:33:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0x32}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 18:33:25 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:33:25 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000180)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000c50000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='ext4_request_blocks\x00'}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x23000) 18:33:25 executing program 3: write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000180)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x23000) 18:33:25 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000a) 18:33:25 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x2) 18:33:25 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f000000000000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:33:25 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x2) 18:33:25 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000180)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000c50000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='ext4_request_blocks\x00'}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x23000) 18:33:25 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x40047459, 0x2000000a) [ 1086.081681][ T5109] Bluetooth: hci3: command 0x0419 tx timeout [ 1087.874773][ T4387] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1087.882653][ T4387] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1087.894665][ T4387] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1087.903468][ T4387] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1087.910752][ T4387] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1088.110553][T15624] chnl_net:caif_netlink_parms(): no params data found [ 1088.201142][T15624] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.216355][T15624] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.227718][T15624] device bridge_slave_0 entered promiscuous mode [ 1088.242117][T15624] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.249415][T15624] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.265971][T15624] device bridge_slave_1 entered promiscuous mode [ 1088.298223][T15624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.309927][T15624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.342677][T15624] team0: Port device team_slave_0 added [ 1088.350882][T15624] team0: Port device team_slave_1 added [ 1088.377876][T15624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1088.384991][T15624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1088.412026][T15624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1088.424835][T15624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1088.432077][T15624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1088.460868][T15624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1088.515924][T15624] device hsr_slave_0 entered promiscuous mode [ 1088.530826][T15624] device hsr_slave_1 entered promiscuous mode [ 1088.538005][T15624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1088.546031][T15624] Cannot create hsr debugfs directory [ 1089.031188][T15624] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1089.041198][T15624] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1089.051408][T15624] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1089.066160][T15624] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1089.162724][T15624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1089.188210][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1089.202420][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1089.213614][T15624] 8021q: adding VLAN 0 to HW filter on device team0 [ 1089.250035][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1089.259497][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1089.277457][ T6622] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.284627][ T6622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.305614][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1089.317069][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1089.327330][ T6622] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.334500][ T6622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1089.343525][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1089.361949][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1089.369967][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1089.379216][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1089.388921][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1089.412253][T15624] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1089.423570][T15624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1089.436529][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1089.445550][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1089.454268][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1089.463363][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1089.472288][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1089.484968][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1089.713955][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1089.722673][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1089.736363][T15624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1089.761113][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1089.772123][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1089.796821][T15624] device veth0_vlan entered promiscuous mode [ 1089.804019][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1089.813572][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1089.826865][T15624] device veth1_vlan entered promiscuous mode [ 1089.836351][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1089.847416][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1089.864408][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1089.897771][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1089.906659][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1089.915827][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1089.924427][ T5109] Bluetooth: hci2: command 0x0409 tx timeout [ 1089.935618][T15624] device veth0_macvtap entered promiscuous mode [ 1089.948548][T15624] device veth1_macvtap entered promiscuous mode [ 1089.966296][T15624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.977841][T15624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.988122][T15624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.999663][T15624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.015233][T15624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1090.026268][T15624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.037138][T15624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1090.047830][T15624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.058046][T15624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1090.068788][T15624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.080330][T15624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1090.090532][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1090.099547][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1090.107881][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1090.116821][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1090.127599][T15624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1090.143214][T15624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.153692][T15624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1090.164572][T15624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.174789][T15624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1090.185892][T15624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.195953][T15624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1090.206697][T15624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.217848][T15624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1090.228840][T15624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.250446][T15624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1090.259224][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1090.268255][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1090.282910][T15624] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.300377][T15624] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.309305][T15624] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.340328][T15624] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.423031][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.431049][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.465220][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1090.483150][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.491175][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.514248][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1090.584066][T15696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.592363][T15696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.700056][T15696] device bridge_slave_1 left promiscuous mode [ 1090.706964][T15696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.729974][T15696] device bridge_slave_0 left promiscuous mode [ 1090.742256][T15696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.003134][ T4387] Bluetooth: hci2: command 0x041b tx timeout [ 1092.082419][ T4387] Bluetooth: hci5: command 0x0406 tx timeout 18:33:32 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000004000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0x1, 0x18}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x6, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f00000001c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000380)="ec31ec", 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0x66, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff68, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x62, 0xa0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffe75, 0x0, 0x0, 0x0, 0xfffffffffffffee8, 0x10, 0x8, 0x0, 0x0}}, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="580000000080a77d671e13f7dad50523bb326192cb4bd954c4360e00000000000000000000000000000000950000000000000000010000003f000051000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0xc, 0x0, 0x404}, 0x10}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x39, 0x0}}, 0xffffffffffffff60) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x777c, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000280), 0x1}, 0x131e0, 0x0, 0x1b9, 0x4, 0x3, 0x4, 0xfffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x3) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r4, 0x5, 0xf002100}, 0x10) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x7, 0xac, 0x80, 0x20, 0x0, 0x1000, 0x20, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1}, 0x1489, 0x4, 0x1ff, 0x0, 0x9, 0x3, 0x6, 0x0, 0x8, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r5, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cgroup.events\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) socketpair(0x0, 0xa, 0x1, &(0x7f0000000240)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) 18:33:32 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x2) 18:33:32 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f000000000000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:33:32 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000a) 18:33:32 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10c, 0x10c, 0x6, [@typedef={0xe, 0x0, 0x0, 0x8, 0x4}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x49, 0x0, 0x23, 0x4}, @enum={0xb, 0x4, 0x0, 0x6, 0x4, [{0x8, 0x7}, {0x6, 0x8}, {0x2, 0x6}, {0x7, 0x20}]}, @var={0x3, 0x0, 0x0, 0xe, 0x2, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x6e3c}}, @enum={0xc, 0x7, 0x0, 0x6, 0x4, [{0x10, 0x3}, {0xe, 0xf6}, {0xb, 0x400}, {0x4, 0x6}, {0xd, 0x20}, {0xe, 0x9}, {0x3, 0xfffff000}]}, @const={0xe, 0x0, 0x0, 0xa, 0x4}, @enum={0x4, 0x5, 0x0, 0x6, 0x4, [{0xd, 0x3}, {0x3, 0xfff}, {0xf, 0xf39}, {0xf, 0x3010ff71}, {0x4, 0x4}]}, @fwd={0x4}, @ptr={0x9, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x2e, 0x0, 0x0, 0x2e]}}, &(0x7f0000000640)=""/186, 0x12a, 0xba}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x9, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0x3, 0x5, 0xb, 0x50, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x2, 0x6, 0x4, 0x8, 0xffffffffffffffff}, @generic={0xd7, 0x3, 0xc, 0x9, 0x3}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x380}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x6}], &(0x7f0000000040)='GPL\x00', 0x4, 0xe0, &(0x7f0000000380)=""/224, 0x41000, 0x1a, '\x00', r1, 0xf, r2, 0x8, &(0x7f0000000700)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x7, 0x81, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0xb3, 0xe, 0x40000000, &(0x7f0000000280)="5f39868de2639b12c1a2ff010602", 0x0, 0x1df, 0x11, 0x0, 0x0, 0x0, 0x0}, 0x48) 18:33:32 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x2000000a) 18:33:32 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x2) 18:33:32 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f000000000000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:33:32 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r4 = gettid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r5}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, r6, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='\x00') write$cgroup_int(r1, &(0x7f0000000600), 0x12) 18:33:32 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0x2) 18:33:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter, 0x48) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x4010744d, 0x2000000a) 18:33:32 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000a) 18:33:32 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000a) 18:33:32 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:33:32 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0x2) 18:33:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter, 0x48) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x4010744d, 0x2000000a) 18:33:33 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000180)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x23000) 18:33:33 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0x2) 18:33:33 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:33:33 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000a) 18:33:33 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r4 = gettid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r5}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, r6, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='\x00') write$cgroup_int(r1, &(0x7f0000000600), 0x12) 18:33:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter, 0x48) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x4010744d, 0x2000000a) 18:33:33 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000180)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x23000) 18:33:33 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, 0x0, 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x2) 18:33:33 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:33:33 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000a) 18:33:33 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, 0x0, 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x2) 18:33:33 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000a) [ 1094.081514][ T4387] Bluetooth: hci2: command 0x040f tx timeout 18:33:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter, 0x48) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x4010744d, 0x2000000a) 18:33:33 executing program 1: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x8004745a, 0x2000000a) 18:33:33 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, 0x0, 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x2) 18:33:33 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d0000008500000023"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) [ 1094.216303][T13326] syz-executor.2 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 1094.276265][T13326] CPU: 0 PID: 13326 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1094.286729][T13326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1094.296807][T13326] Call Trace: [ 1094.300109][T13326] [ 1094.303068][T13326] dump_stack_lvl+0xd1/0x138 [ 1094.307741][T13326] dump_header+0x10b/0x85f [ 1094.312198][T13326] oom_kill_process.cold+0x10/0x15 [ 1094.317344][T13326] out_of_memory+0x35c/0x14a0 [ 1094.322045][T13326] ? find_held_lock+0x2d/0x110 [ 1094.326829][T13326] ? oom_killer_disable+0x280/0x280 [ 1094.332047][T13326] ? find_held_lock+0x2d/0x110 [ 1094.336845][T13326] mem_cgroup_out_of_memory+0x206/0x270 [ 1094.342408][T13326] ? mem_cgroup_margin+0x130/0x130 [ 1094.347533][T13326] ? lock_downgrade+0x6e0/0x6e0 [ 1094.352407][T13326] try_charge_memcg+0xefb/0x12f0 [ 1094.357359][T13326] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1094.363345][T13326] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1094.369088][T13326] ? lock_downgrade+0x6e0/0x6e0 [ 1094.373963][T13326] obj_cgroup_charge+0x2af/0x5e0 [ 1094.378915][T13326] kmem_cache_alloc_lru+0x145/0x760 [ 1094.384115][T13326] ? ext4_alloc_inode+0x28/0x680 [ 1094.389063][T13326] ? tomoyo_path_number_perm+0x242/0x570 [ 1094.394772][T13326] ? ext4_free_in_core_inode+0x70/0x70 [ 1094.400238][T13326] ext4_alloc_inode+0x28/0x680 [ 1094.405009][T13326] ? ext4_free_in_core_inode+0x70/0x70 [ 1094.410483][T13326] alloc_inode+0x61/0x230 [ 1094.414833][T13326] new_inode+0x2b/0x280 [ 1094.419014][T13326] __ext4_new_inode+0x399/0x57d0 [ 1094.423964][T13326] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1094.429797][T13326] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 1094.435377][T13326] ext4_mkdir+0x33e/0xb20 [ 1094.439731][T13326] ? ext4_init_new_dir+0x4c0/0x4c0 [ 1094.444854][T13326] ? bpf_lsm_inode_permission+0x9/0x10 [ 1094.450379][T13326] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1094.455419][T13326] vfs_mkdir+0x48d/0x740 [ 1094.459680][T13326] do_mkdirat+0x27b/0x2f0 [ 1094.464033][T13326] ? __ia32_sys_mknod+0xb0/0xb0 [ 1094.468907][T13326] ? getname_flags.part.0+0x1dd/0x4f0 [ 1094.474299][T13326] __x64_sys_mkdirat+0x119/0x170 [ 1094.479256][T13326] do_syscall_64+0x39/0xb0 [ 1094.483690][T13326] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1094.489592][T13326] RIP: 0033:0x7f23ac48b0e7 [ 1094.494038][T13326] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1094.513668][T13326] RSP: 002b:00007ffe03192dc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000102 [ 1094.522090][T13326] RAX: ffffffffffffffda RBX: 00007ffe03192e50 RCX: 00007f23ac48b0e7 [ 1094.530071][T13326] RDX: 00000000000001ff RSI: 00007ffe03192e50 RDI: 00000000ffffff9c [ 1094.538045][T13326] RBP: 00007ffe03192e2c R08: 0000000000000000 R09: 0000000000000004 [ 1094.546028][T13326] R10: 00007ffe03192b66 R11: 0000000000000202 R12: 0000000000000032 [ 1094.554008][T13326] R13: 000000000010b118 R14: 0000000000000010 R15: 00007ffe03192e90 [ 1094.562004][T13326] [ 1094.741337][T13326] memory: usage 10404kB, limit 0kB, failcnt 86 [ 1094.748364][T13326] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1094.764175][T13326] Memory cgroup stats for /syz2: [ 1094.764575][T13326] anon 49152 [ 1094.764575][T13326] file 10481664 [ 1094.764575][T13326] kernel 122880 [ 1094.764575][T13326] kernel_stack 0 [ 1094.764575][T13326] pagetables 8192 [ 1094.764575][T13326] sec_pagetables 0 [ 1094.764575][T13326] percpu 0 [ 1094.764575][T13326] sock 0 [ 1094.764575][T13326] vmalloc 0 [ 1094.764575][T13326] shmem 10473472 [ 1094.764575][T13326] zswap 0 [ 1094.764575][T13326] zswapped 0 [ 1094.764575][T13326] file_mapped 188416 [ 1094.764575][T13326] file_dirty 0 [ 1094.764575][T13326] file_writeback 0 [ 1094.764575][T13326] swapcached 0 [ 1094.764575][T13326] anon_thp 0 [ 1094.764575][T13326] file_thp 0 [ 1094.764575][T13326] shmem_thp 0 [ 1094.764575][T13326] inactive_anon 49152 [ 1094.764575][T13326] active_anon 10473472 [ 1094.764575][T13326] inactive_file 0 [ 1094.764575][T13326] active_file 8192 [ 1094.764575][T13326] unevictable 0 [ 1094.764575][T13326] slab_reclaimable 34976 [ 1094.764575][T13326] slab_unreclaimable 69488 [ 1094.764575][T13326] slab 104464 [ 1094.864409][T13326] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=13326,uid=0 [ 1094.882005][T13326] Memory cgroup out of memory: Killed process 13326 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 18:33:34 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r4 = gettid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r5}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, r6, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='\x00') write$cgroup_int(r1, &(0x7f0000000600), 0x12) 18:33:34 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000180)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x23000) 18:33:34 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x2) 18:33:34 executing program 1: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x8004745a, 0x2000000a) 18:33:34 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d0000008500000023"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:33:34 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r4 = gettid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r5}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, r6, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='\x00') write$cgroup_int(r1, &(0x7f0000000600), 0x12) 18:33:34 executing program 1: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x8004745a, 0x2000000a) [ 1095.180674][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 18:33:34 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x2) 18:33:34 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d0000008500000023"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:33:34 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000a) 18:33:34 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000180)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x23000) 18:33:34 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x2) [ 1095.662274][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 18:33:35 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r4 = gettid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r5}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, r6, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='\x00') write$cgroup_int(r1, &(0x7f0000000600), 0x12) 18:33:35 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d00000085000000230000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:33:35 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000a) 18:33:35 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, 0x0, 0x0) 18:33:35 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, 0x0, 0x0) [ 1095.856140][T15873] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1095.942726][T15873] CPU: 0 PID: 15873 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1095.953191][T15873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1095.963262][T15873] Call Trace: [ 1095.966583][T15873] [ 1095.969533][T15873] dump_stack_lvl+0xd1/0x138 [ 1095.974166][T15873] dump_header+0x10b/0x85f [ 1095.978645][T15873] oom_kill_process.cold+0x10/0x15 [ 1095.983820][T15873] out_of_memory+0x35c/0x14a0 [ 1095.988560][T15873] ? oom_killer_disable+0x280/0x280 [ 1095.993806][T15873] ? mark_held_locks+0x9f/0xe0 [ 1095.998609][T15873] mem_cgroup_out_of_memory+0x206/0x270 [ 1096.004195][T15873] ? mem_cgroup_margin+0x130/0x130 [ 1096.009379][T15873] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 1096.015232][T15873] memory_max_write+0x2f9/0x3c0 [ 1096.020123][T15873] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1096.026224][T15873] ? lock_release+0x810/0x810 [ 1096.030941][T15873] cgroup_file_write+0x1e2/0x770 [ 1096.035919][T15873] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1096.042065][T15873] ? kill_css+0x370/0x370 [ 1096.046435][T15873] ? __virt_addr_valid+0x61/0x2e0 [ 1096.051511][T15873] ? kill_css+0x370/0x370 [ 1096.055872][T15873] kernfs_fop_write_iter+0x3f1/0x600 [ 1096.061202][T15873] vfs_write+0x9ed/0xdd0 [ 1096.065483][T15873] ? kernel_write+0x630/0x630 [ 1096.070197][T15873] ? __fget_files+0x26a/0x440 [ 1096.074912][T15873] ksys_write+0x12b/0x250 [ 1096.079267][T15873] ? __ia32_sys_read+0xb0/0xb0 [ 1096.084060][T15873] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1096.089999][T15873] do_syscall_64+0x39/0xb0 [ 1096.094461][T15873] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1096.100383][T15873] RIP: 0033:0x7f6563e8c0c9 [ 1096.104817][T15873] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1096.124471][T15873] RSP: 002b:00007f6564b4a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1096.132890][T15873] RAX: ffffffffffffffda RBX: 00007f6563fabf80 RCX: 00007f6563e8c0c9 [ 1096.140887][T15873] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 1096.148868][T15873] RBP: 00007f6563ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1096.156869][T15873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1096.164840][T15873] R13: 00007ffdffc2af8f R14: 00007f6564b4a300 R15: 0000000000022000 [ 1096.172834][T15873] [ 1096.186843][ T4387] Bluetooth: hci2: command 0x0419 tx timeout [ 1096.242540][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.344137][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.510948][T15873] memory: usage 10692kB, limit 0kB, failcnt 232 [ 1096.517556][T15873] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1096.524925][T15873] Memory cgroup stats for /syz3: [ 1096.525158][T15873] anon 139264 [ 1096.525158][T15873] file 10485760 [ 1096.525158][T15873] kernel 323584 [ 1096.525158][T15873] kernel_stack 65536 [ 1096.525158][T15873] pagetables 77824 [ 1096.525158][T15873] sec_pagetables 0 [ 1096.525158][T15873] percpu 208 [ 1096.525158][T15873] sock 0 [ 1096.525158][T15873] vmalloc 4096 [ 1096.525158][T15873] shmem 10473472 [ 1096.525158][T15873] zswap 0 [ 1096.525158][T15873] zswapped 0 [ 1096.525158][T15873] file_mapped 233472 [ 1096.525158][T15873] file_dirty 0 [ 1096.525158][T15873] file_writeback 0 [ 1096.525158][T15873] swapcached 0 [ 1096.525158][T15873] anon_thp 0 [ 1096.525158][T15873] file_thp 0 [ 1096.525158][T15873] shmem_thp 0 [ 1096.525158][T15873] inactive_anon 139264 [ 1096.525158][T15873] active_anon 10473472 [ 1096.525158][T15873] inactive_file 8192 [ 1096.525158][T15873] active_file 4096 [ 1096.525158][T15873] unevictable 0 [ 1096.525158][T15873] slab_reclaimable 42016 [ 1096.525158][T15873] slab_unreclaimable 103672 18:33:36 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000140), 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffec0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x0, 0x0, 0x0, 0x81, 0x1c2c}, 0x48) perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x59, 0x0, 0x8, 0x94080, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300), 0xa}, 0x200, 0x8, 0x1, 0x2, 0xffffffffffffffff, 0xffff, 0x7, 0x0, 0x68b8}, r1, 0x1, r0, 0x6) [ 1096.838048][T15873] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15870,uid=0 [ 1096.860979][T15873] Memory cgroup out of memory: Killed process 15873 (syz-executor.3) total-vm:56588kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 18:33:36 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d00000085000000230000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:33:36 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000a) 18:33:36 executing program 0: perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x4, [@typedef={0x0, 0x0, 0x0, 0x8, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x23}, @var={0x3, 0x0, 0x0, 0xe, 0x2, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x1, 0x6e3c}}, @enum={0x0, 0x3, 0x0, 0x6, 0x4, [{0x0, 0xf6}, {}, {}]}, @const={0x0, 0x0, 0x0, 0xa, 0x4}, @enum={0x4, 0x5, 0x0, 0x6, 0x4, [{0xd, 0x3}, {0x3, 0xfff}, {0xf, 0xf39}, {}, {0x4, 0x4}]}, @fwd={0x4}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000640)=""/186, 0xd0, 0xba}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 18:33:36 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, 0x0, 0x0) 18:33:36 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d00000085000000230000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:33:36 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000a) [ 1097.025947][T15364] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1097.111523][T15364] CPU: 0 PID: 15364 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1097.121987][T15364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1097.132059][T15364] Call Trace: [ 1097.135353][T15364] [ 1097.138303][T15364] dump_stack_lvl+0xd1/0x138 [ 1097.142915][T15364] dump_header+0x10b/0x85f [ 1097.147354][T15364] oom_kill_process.cold+0x10/0x15 [ 1097.152486][T15364] out_of_memory+0x35c/0x14a0 [ 1097.157185][T15364] ? find_held_lock+0x2d/0x110 [ 1097.161969][T15364] ? oom_killer_disable+0x280/0x280 [ 1097.167188][T15364] ? find_held_lock+0x2d/0x110 [ 1097.171973][T15364] mem_cgroup_out_of_memory+0x206/0x270 [ 1097.177539][T15364] ? mem_cgroup_margin+0x130/0x130 [ 1097.182676][T15364] ? lock_downgrade+0x6e0/0x6e0 [ 1097.187548][T15364] try_charge_memcg+0xefb/0x12f0 [ 1097.192501][T15364] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1097.198488][T15364] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1097.204229][T15364] ? lock_downgrade+0x6e0/0x6e0 [ 1097.209089][T15364] ? lock_downgrade+0x6e0/0x6e0 [ 1097.213962][T15364] __memcg_kmem_charge_page+0x16e/0x3b0 [ 1097.219523][T15364] __alloc_pages+0x1f3/0x5b0 [ 1097.224128][T15364] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 1097.230913][T15364] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1097.236922][T15364] alloc_pages+0x1aa/0x270 [ 1097.241352][T15364] pte_alloc_one+0x1a/0x230 [ 1097.245868][T15364] __pte_alloc+0x6d/0x260 [ 1097.250210][T15364] ? pmd_install+0x160/0x160 [ 1097.254820][T15364] copy_page_range+0x17a8/0x3b40 [ 1097.259811][T15364] ? mas_store+0x206/0x2e0 [ 1097.264243][T15364] ? handle_mm_fault+0x850/0x850 [ 1097.269208][T15364] ? up_write+0x1b0/0x520 [ 1097.273559][T15364] dup_mmap+0xc10/0x10b0 [ 1097.277823][T15364] ? replace_mm_exe_file+0x4b0/0x4b0 [ 1097.283154][T15364] ? lock_downgrade+0x6e0/0x6e0 [ 1097.288027][T15364] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1097.293872][T15364] ? mm_init+0x8e0/0xc10 [ 1097.298128][T15364] copy_process+0x440f/0x7520 [ 1097.302835][T15364] ? _raw_spin_unlock+0x28/0x40 [ 1097.307703][T15364] ? wp_page_reuse+0x197/0x570 [ 1097.312496][T15364] ? __cleanup_sighand+0xb0/0xb0 [ 1097.317487][T15364] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1097.322894][T15364] ? rwlock_bug.part.0+0x90/0x90 [ 1097.327843][T15364] ? lock_chain_count+0x20/0x20 [ 1097.332715][T15364] kernel_clone+0xeb/0x990 [ 1097.337144][T15364] ? create_io_thread+0xf0/0xf0 [ 1097.342010][T15364] ? find_held_lock+0x2d/0x110 [ 1097.346799][T15364] __do_sys_clone+0xba/0x100 [ 1097.351405][T15364] ? kernel_clone+0x990/0x990 [ 1097.356123][T15364] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1097.362032][T15364] do_syscall_64+0x39/0xb0 [ 1097.366498][T15364] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1097.372402][T15364] RIP: 0033:0x7f6563e89dfb [ 1097.376832][T15364] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1097.396446][T15364] RSP: 002b:00007ffdffc2b1d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1097.404865][T15364] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6563e89dfb [ 1097.412839][T15364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1097.420815][T15364] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555759400 [ 1097.428787][T15364] R10: 00005555557596d0 R11: 0000000000000246 R12: 0000000000000001 [ 1097.436764][T15364] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffdffc2b2b0 [ 1097.444757][T15364] [ 1097.476417][T15364] memory: usage 10504kB, limit 0kB, failcnt 260 [ 1097.494532][T15364] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1097.506057][T15364] Memory cgroup stats for /syz3: [ 1097.506319][T15364] anon 40960 [ 1097.506319][T15364] file 10485760 [ 1097.506319][T15364] kernel 229376 [ 1097.506319][T15364] kernel_stack 32768 [ 1097.506319][T15364] pagetables 40960 [ 1097.506319][T15364] sec_pagetables 0 [ 1097.506319][T15364] percpu 128 [ 1097.506319][T15364] sock 0 [ 1097.506319][T15364] vmalloc 0 [ 1097.506319][T15364] shmem 10473472 [ 1097.506319][T15364] zswap 0 [ 1097.506319][T15364] zswapped 0 [ 1097.506319][T15364] file_mapped 200704 [ 1097.506319][T15364] file_dirty 0 [ 1097.506319][T15364] file_writeback 0 [ 1097.506319][T15364] swapcached 0 [ 1097.506319][T15364] anon_thp 0 [ 1097.506319][T15364] file_thp 0 [ 1097.506319][T15364] shmem_thp 0 [ 1097.506319][T15364] inactive_anon 40960 [ 1097.506319][T15364] active_anon 10473472 [ 1097.506319][T15364] inactive_file 0 [ 1097.506319][T15364] active_file 12288 [ 1097.506319][T15364] unevictable 0 [ 1097.506319][T15364] slab_reclaimable 33584 [ 1097.506319][T15364] slab_unreclaimable 94528 [ 1097.506319][T15364] slab 128112 [ 1097.638725][T15364] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15364,uid=0 [ 1097.655636][T15364] Memory cgroup out of memory: Killed process 15364 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1098.213703][ T11] device hsr_slave_0 left promiscuous mode [ 1098.220115][ T11] device hsr_slave_1 left promiscuous mode [ 1098.230429][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1098.238516][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1098.256205][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1098.269134][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1098.290323][ T11] device veth1_macvtap left promiscuous mode [ 1098.299112][ T11] device veth0_macvtap left promiscuous mode [ 1098.314707][ T11] device veth1_vlan left promiscuous mode [ 1098.320581][ T11] device veth0_vlan left promiscuous mode [ 1098.661031][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1098.686652][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1098.709456][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1098.749025][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1098.929824][ T11] bond0 (unregistering): Released all slaves [ 1099.076351][ T5109] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1099.085188][ T5109] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1099.093310][ T5109] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1099.121465][ T5109] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1099.129046][ T5109] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1099.136438][ T5109] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1099.370931][T15956] chnl_net:caif_netlink_parms(): no params data found [ 1099.488402][T15956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.495705][T15956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.504338][T15956] device bridge_slave_0 entered promiscuous mode [ 1099.514227][T15956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.521986][T15956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.530106][T15956] device bridge_slave_1 entered promiscuous mode [ 1099.567736][T15956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1099.581153][T15956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1099.613855][T15956] team0: Port device team_slave_0 added [ 1099.631796][T15956] team0: Port device team_slave_1 added [ 1099.670089][T15956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1099.691332][T15956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1099.723002][T15956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1099.743565][T15956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1099.750564][T15956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1099.821415][T15956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1099.905184][T15956] device hsr_slave_0 entered promiscuous mode [ 1099.932417][T15956] device hsr_slave_1 entered promiscuous mode [ 1099.951367][T15956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1099.958945][T15956] Cannot create hsr debugfs directory [ 1100.647419][T15956] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1100.681107][T15956] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1100.712243][T15956] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1100.744264][T15956] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1100.907407][T15956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1100.938887][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1100.947825][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1100.965019][T15956] 8021q: adding VLAN 0 to HW filter on device team0 [ 1100.992983][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1101.002143][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1101.010631][T13513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.017782][T13513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1101.061592][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1101.069645][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1101.092061][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1101.101166][T13513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.108318][T13513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1101.141616][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1101.150393][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1101.195320][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1101.203704][ T5109] Bluetooth: hci0: command 0x0409 tx timeout [ 1101.212319][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1101.231894][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1101.258165][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1101.276672][T15956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1101.296122][T15956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1101.314919][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1101.324032][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1101.342093][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1101.802476][T15956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1101.810309][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1101.819891][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1101.840797][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1101.850293][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1101.909923][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.939374][T15956] device veth0_vlan entered promiscuous mode [ 1101.948727][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1101.957949][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1102.011948][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.055217][T15956] device veth1_vlan entered promiscuous mode [ 1102.070972][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1102.087489][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1102.098583][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1102.172952][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.228329][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1102.242210][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1102.253566][T15956] device veth0_macvtap entered promiscuous mode [ 1102.325822][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.383637][T15956] device veth1_macvtap entered promiscuous mode [ 1102.426170][T15956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1102.447345][T15956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.460410][T15956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1102.476676][T15956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.491157][T15956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1102.516141][T15956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.539080][T15956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1102.557346][T15956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.572148][T15956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1102.589637][T15956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.603081][T15956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1102.625603][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1102.635603][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1102.644379][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1102.661956][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1102.672594][T15956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1102.685064][T15956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.695748][T15956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1102.706674][T15956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.716823][T15956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1102.729718][T15956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.740592][T15956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1102.759477][T15956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.769438][T15956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1102.780141][T15956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.792551][T15956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1102.806638][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1102.817354][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1102.846775][T15956] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.861691][T15956] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.870473][T15956] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.881566][T15956] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.066593][T12946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.083948][T12946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.122913][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1103.132972][T12946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.140999][T12946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.167778][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1103.281516][ T5109] Bluetooth: hci0: command 0x041b tx timeout [ 1103.573897][T16033] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1103.584827][T16033] CPU: 0 PID: 16033 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1103.595277][T16033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1103.605337][T16033] Call Trace: [ 1103.608662][T16033] [ 1103.611596][T16033] dump_stack_lvl+0xd1/0x138 [ 1103.616206][T16033] dump_header+0x10b/0x85f [ 1103.620646][T16033] oom_kill_process.cold+0x10/0x15 [ 1103.625780][T16033] out_of_memory+0x35c/0x14a0 [ 1103.630484][T16033] ? oom_killer_disable+0x280/0x280 [ 1103.635699][T16033] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1103.641870][T16033] ? preempt_schedule_thunk+0x1a/0x20 [ 1103.647269][T16033] mem_cgroup_out_of_memory+0x206/0x270 [ 1103.652834][T16033] ? mem_cgroup_margin+0x130/0x130 [ 1103.657987][T16033] memory_max_write+0x2f9/0x3c0 [ 1103.662849][T16033] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1103.668934][T16033] ? lock_release+0x810/0x810 [ 1103.673624][T16033] cgroup_file_write+0x1e2/0x770 [ 1103.678584][T16033] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1103.684659][T16033] ? kill_css+0x370/0x370 [ 1103.689006][T16033] ? __virt_addr_valid+0x61/0x2e0 [ 1103.694056][T16033] ? kill_css+0x370/0x370 [ 1103.698396][T16033] kernfs_fop_write_iter+0x3f1/0x600 [ 1103.703706][T16033] vfs_write+0x9ed/0xdd0 [ 1103.707964][T16033] ? kernel_write+0x630/0x630 [ 1103.712656][T16033] ? __fget_files+0x26a/0x440 [ 1103.717362][T16033] ksys_write+0x12b/0x250 [ 1103.721703][T16033] ? __ia32_sys_read+0xb0/0xb0 [ 1103.726481][T16033] ? syscall_enter_from_user_mode+0x30/0xb0 [ 1103.732401][T16033] do_syscall_64+0x39/0xb0 [ 1103.736833][T16033] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1103.742740][T16033] RIP: 0033:0x7fc50b88c0c9 [ 1103.747160][T16033] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1103.766775][T16033] RSP: 002b:00007fc50c5b3168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1103.775196][T16033] RAX: ffffffffffffffda RBX: 00007fc50b9abf80 RCX: 00007fc50b88c0c9 [ 1103.783176][T16033] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 1103.791149][T16033] RBP: 00007fc50b8e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1103.799123][T16033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1103.807099][T16033] R13: 00007fff26f092cf R14: 00007fc50c5b3300 R15: 0000000000022000 [ 1103.815093][T16033] [ 1103.830923][T16033] memory: usage 10664kB, limit 0kB, failcnt 104 [ 1103.857868][T16033] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1103.868439][T16033] Memory cgroup stats for /syz2: [ 1103.872862][T16033] anon 118784 [ 1103.872862][T16033] file 10473472 [ 1103.872862][T16033] kernel 303104 [ 1103.872862][T16033] kernel_stack 65536 [ 1103.872862][T16033] pagetables 77824 [ 1103.872862][T16033] sec_pagetables 0 [ 1103.872862][T16033] percpu 208 [ 1103.872862][T16033] sock 0 [ 1103.872862][T16033] vmalloc 4096 [ 1103.872862][T16033] shmem 10473472 [ 1103.872862][T16033] zswap 0 [ 1103.872862][T16033] zswapped 0 [ 1103.872862][T16033] file_mapped 233472 [ 1103.872862][T16033] file_dirty 0 [ 1103.872862][T16033] file_writeback 0 [ 1103.872862][T16033] swapcached 0 [ 1103.872862][T16033] anon_thp 0 [ 1103.872862][T16033] file_thp 0 [ 1103.872862][T16033] shmem_thp 0 [ 1103.872862][T16033] inactive_anon 118784 [ 1103.872862][T16033] active_anon 10473472 [ 1103.872862][T16033] inactive_file 0 [ 1103.872862][T16033] active_file 0 [ 1103.872862][T16033] unevictable 0 [ 1103.872862][T16033] slab_reclaimable 52848 [ 1103.872862][T16033] slab_unreclaimable 78504 [ 1103.872862][T16033] slab 131352 18:33:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000580)={'ipvlan0\x00'}) 18:33:43 executing program 0: recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffec0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0c0583b, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.self_freezing\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.io_serviced\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x17, 0x0, 0xf4b, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x48) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000003c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, 0x0, 0x0, &(0x7f0000000840)=[@ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80}}], 0x68}, 0x40000) 18:33:43 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d0000008500000023000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:33:43 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000a) 18:33:43 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x10) r3 = gettid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r5, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='\x00') 18:33:43 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x5, 0x1ff, 0x84}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000680), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000800)={&(0x7f00000005c0), 0x0, &(0x7f0000000680), &(0x7f0000000740), 0x6c, r0}, 0x38) [ 1103.975631][T16033] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=16032,uid=0 [ 1103.996473][T16033] Memory cgroup out of memory: Killed process 16032 (syz-executor.2) total-vm:56588kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 18:33:43 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x5f]}}, &(0x7f00000000c0)=""/4096, 0x2c, 0x1000, 0x1}, 0x20) 18:33:43 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000a) 18:33:43 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d0000008500000023000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:33:43 executing program 0: perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x62, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1104.190982][T15956] syz-executor.2 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=0 [ 1104.242875][T15956] CPU: 0 PID: 15956 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1104.253343][T15956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1104.263399][T15956] Call Trace: [ 1104.266677][T15956] [ 1104.269610][T15956] dump_stack_lvl+0xd1/0x138 [ 1104.274217][T15956] dump_header+0x10b/0x85f [ 1104.278654][T15956] oom_kill_process.cold+0x10/0x15 [ 1104.283780][T15956] out_of_memory+0x35c/0x14a0 [ 1104.288476][T15956] ? find_held_lock+0x2d/0x110 [ 1104.293270][T15956] ? oom_killer_disable+0x280/0x280 [ 1104.298506][T15956] ? find_held_lock+0x2d/0x110 [ 1104.303292][T15956] mem_cgroup_out_of_memory+0x206/0x270 [ 1104.308880][T15956] ? mem_cgroup_margin+0x130/0x130 [ 1104.314027][T15956] ? lock_downgrade+0x6e0/0x6e0 [ 1104.318917][T15956] try_charge_memcg+0xefb/0x12f0 [ 1104.323873][T15956] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1104.329870][T15956] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1104.335602][T15956] ? lock_downgrade+0x6e0/0x6e0 [ 1104.340455][T15956] ? lock_downgrade+0x6e0/0x6e0 [ 1104.345309][T15956] ? rcu_read_unlock+0x9/0x60 [ 1104.350003][T15956] obj_cgroup_charge+0x2af/0x5e0 [ 1104.354950][T15956] __kmem_cache_alloc_node+0xb2/0x430 [ 1104.360352][T15956] ? kvmalloc_node+0xa2/0x1a0 [ 1104.365045][T15956] ? kvmalloc_node+0xa2/0x1a0 [ 1104.369735][T15956] __kmalloc_node+0x4d/0xd0 [ 1104.374273][T15956] kvmalloc_node+0xa2/0x1a0 [ 1104.378797][T15956] alloc_fdtable+0xf4/0x2a0 [ 1104.383308][T15956] dup_fd+0x722/0xcb0 [ 1104.387299][T15956] copy_process+0x24ea/0x7520 [ 1104.391981][T15956] ? _raw_spin_unlock+0x28/0x40 [ 1104.396837][T15956] ? wp_page_reuse+0x197/0x570 [ 1104.401629][T15956] ? __cleanup_sighand+0xb0/0xb0 [ 1104.406569][T15956] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1104.411952][T15956] ? rwlock_bug.part.0+0x90/0x90 [ 1104.416918][T15956] ? lock_chain_count+0x20/0x20 [ 1104.421775][T15956] kernel_clone+0xeb/0x990 [ 1104.426201][T15956] ? create_io_thread+0xf0/0xf0 [ 1104.431061][T15956] ? find_held_lock+0x2d/0x110 [ 1104.435843][T15956] __do_sys_clone+0xba/0x100 [ 1104.440445][T15956] ? kernel_clone+0x990/0x990 [ 1104.445140][T15956] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1104.451045][T15956] do_syscall_64+0x39/0xb0 [ 1104.455472][T15956] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1104.461374][T15956] RIP: 0033:0x7fc50b889dfb [ 1104.465804][T15956] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1104.485428][T15956] RSP: 002b:00007fff26f09510 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1104.493857][T15956] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc50b889dfb [ 1104.501831][T15956] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1104.509800][T15956] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555746f400 [ 1104.517772][T15956] R10: 000055555746f6d0 R11: 0000000000000246 R12: 0000000000000001 [ 1104.525752][T15956] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff26f095f0 [ 1104.533746][T15956] 18:33:44 executing program 4: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a40)={@cgroup, 0xffffffffffffffff, 0x6}, 0x10) 18:33:44 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000a) 18:33:44 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d0000008500000023000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:33:44 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000a) 18:33:44 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x5, 0x1ff, 0x84}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000680)="95bc87932983c4092eddc6975d65d3ef91ffc8bc64dca53a524f99529e94182a873c310ea23c6e526745cfbe6541bf69ff72e352810c44d8498f15f56f2e421a6bd202f3ff8769d4fd8509d785935823f504e2", 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000800)={&(0x7f00000005c0), &(0x7f0000000600)=""/116, &(0x7f0000000680), &(0x7f0000000740), 0x6c, r0}, 0x38) 18:33:44 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) [ 1105.029520][T15956] memory: usage 10412kB, limit 0kB, failcnt 142 [ 1105.037122][T15956] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1105.053969][T15956] Memory cgroup stats for /syz2: [ 1105.054167][T15956] anon 45056 [ 1105.054167][T15956] file 10473472 [ 1105.054167][T15956] kernel 143360 [ 1105.054167][T15956] kernel_stack 32768 [ 1105.054167][T15956] pagetables 8192 [ 1105.054167][T15956] sec_pagetables 0 [ 1105.054167][T15956] percpu 64 [ 1105.054167][T15956] sock 0 [ 1105.054167][T15956] vmalloc 0 [ 1105.054167][T15956] shmem 10473472 [ 1105.054167][T15956] zswap 0 [ 1105.054167][T15956] zswapped 0 [ 1105.054167][T15956] file_mapped 188416 [ 1105.054167][T15956] file_dirty 0 [ 1105.054167][T15956] file_writeback 0 [ 1105.054167][T15956] swapcached 0 [ 1105.054167][T15956] anon_thp 0 [ 1105.054167][T15956] file_thp 0 [ 1105.054167][T15956] shmem_thp 0 [ 1105.054167][T15956] inactive_anon 45056 [ 1105.054167][T15956] active_anon 10473472 [ 1105.054167][T15956] inactive_file 0 [ 1105.054167][T15956] active_file 0 [ 1105.054167][T15956] unevictable 0 [ 1105.054167][T15956] slab_reclaimable 36304 [ 1105.054167][T15956] slab_unreclaimable 52984 [ 1105.054167][T15956] slab 89288 [ 1105.197627][ T11] device hsr_slave_0 left promiscuous mode [ 1105.212019][ T11] device hsr_slave_1 left promiscuous mode [ 1105.222479][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1105.240149][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1105.265242][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1105.275483][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1105.284926][ T11] device bridge_slave_1 left promiscuous mode [ 1105.291174][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.301481][ T11] device bridge_slave_0 left promiscuous mode [ 1105.307712][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.315642][T15956] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=15956,uid=0 [ 1105.336718][ T11] device veth1_macvtap left promiscuous mode [ 1105.343051][ T11] device veth0_macvtap left promiscuous mode [ 1105.349176][ T11] device veth1_vlan left promiscuous mode [ 1105.355613][T15956] Memory cgroup out of memory: Killed process 15956 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1105.363170][ T5109] Bluetooth: hci0: command 0x040f tx timeout [ 1105.379486][ T11] device veth0_vlan left promiscuous mode [ 1105.609493][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1105.628798][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1105.641619][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1105.654684][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1105.720863][ T11] bond0 (unregistering): Released all slaves [ 1106.828510][ T4387] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1106.841539][ T4387] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1106.849340][ T4387] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1106.857305][ T4387] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1106.865152][ T4387] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1106.872601][ T4387] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1107.242528][T16100] chnl_net:caif_netlink_parms(): no params data found [ 1107.435804][T16100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.451453][T16100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.459615][T16100] device bridge_slave_0 entered promiscuous mode [ 1107.473826][T16100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.480993][T16100] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.492371][T16100] device bridge_slave_1 entered promiscuous mode [ 1107.542678][T16100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1107.563902][T16100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1107.643101][T16100] team0: Port device team_slave_0 added [ 1107.694292][T16100] team0: Port device team_slave_1 added [ 1107.761903][T16100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1107.769015][T16100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1107.796082][T16100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1107.809525][T16100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1107.817424][T16100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1107.845239][T16100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1107.893394][T16100] device hsr_slave_0 entered promiscuous mode [ 1107.900306][T16100] device hsr_slave_1 entered promiscuous mode [ 1107.911084][T16100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1107.918784][T16100] Cannot create hsr debugfs directory 18:33:47 executing program 0: syz_clone(0x64800000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1108.179553][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.489714][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.652135][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.821652][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.961569][ T4387] Bluetooth: hci0: command 0x0409 tx timeout [ 1109.023606][T16100] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1109.050088][T16100] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1109.068439][T16100] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1109.110052][T16100] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1109.264611][T16100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1109.288699][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1109.298233][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1109.313611][T16100] 8021q: adding VLAN 0 to HW filter on device team0 [ 1109.324660][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1109.333909][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1109.342739][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.349839][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1109.382970][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1109.399489][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1109.408898][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1109.426885][T12962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.434063][T12962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.449740][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1109.458811][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1109.476013][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1109.499652][T16100] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1109.524718][T16100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1109.558563][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1109.570597][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1109.579885][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1109.597732][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1109.609420][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1109.628972][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1109.656876][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1109.911328][ T11] device hsr_slave_0 left promiscuous mode [ 1109.928557][ T11] device hsr_slave_1 left promiscuous mode [ 1109.951840][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1109.959259][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1109.978438][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1109.986018][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1109.997128][ T11] device bridge_slave_1 left promiscuous mode [ 1110.004250][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.013617][ T11] device bridge_slave_0 left promiscuous mode [ 1110.019846][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.042531][ T11] device veth1_macvtap left promiscuous mode [ 1110.048594][ T11] device veth0_macvtap left promiscuous mode [ 1110.061794][ T11] device veth1_vlan left promiscuous mode [ 1110.067667][ T11] device veth0_vlan left promiscuous mode [ 1110.292535][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1110.307602][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1110.319898][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1110.337600][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1110.397675][ T11] bond0 (unregistering): Released all slaves [ 1110.454940][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1110.462927][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1110.475253][T16100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1110.535522][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1110.545230][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1110.598034][T16100] device veth0_vlan entered promiscuous mode [ 1110.614372][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1110.630811][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1110.645057][T16100] device veth1_vlan entered promiscuous mode [ 1110.669637][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1110.677975][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1110.686385][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1110.718173][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1110.727709][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1110.739321][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1110.759823][T16100] device veth0_macvtap entered promiscuous mode [ 1110.802991][T16100] device veth1_macvtap entered promiscuous mode [ 1110.833580][T16100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.861953][T16100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.883420][T16100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.901403][T16100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.911227][T16100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.941308][T16100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.951142][T16100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.993650][T16100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.012741][T16100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1111.023502][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1111.032348][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1111.040906][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1111.051459][ T4387] Bluetooth: hci0: command 0x041b tx timeout [ 1111.065428][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1111.080068][T16100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1111.098776][T16100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.111077][T16100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1111.121955][T16100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.132349][T16100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1111.142846][T16100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.152955][T16100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1111.163848][T16100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.175445][T16100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1111.184433][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1111.194031][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1111.207773][T16100] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.221883][T16100] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.230602][T16100] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.240393][T16100] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.363796][ T1070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.390883][ T1070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.414885][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.417544][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1111.430956][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.470829][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:33:51 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c06830e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d076feafa22f0610a70f2bdf4000200000000b0c2c1254f0963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b5887437a172ebc02a740694298b79dc194e533583412dff048fc21f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be033c9d2f972cc93c1c13caec04a367c24a9fb6a6991ddb737d527d6acb15426415b6e8b14f822e86067a5e991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54f45b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb7830a246c3b2f60000fc4deb8eda1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7033be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc3a4763948a1cbc10348ef2ac3781b847611fcb0a26acafdd6d9ab05865fcf7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a9384762deebab9ff44f531bb81c53f16d80f51006cbc71570a5e272b223425e09dc6b6cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d28484e15dc4320e4f85c16a8fbffadf8214d6d24cabe17ad4135d8872935ce0e6a468fd20fa4461d1d67b234feac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c1044ef221973432ccc7e62b151e3898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f4815237c3aa356217738898a16ba603439f6eaad8e70b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x6, 0x401, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000100), 0x619, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 18:33:51 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x10) r3 = gettid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r5, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='\x00') 18:33:51 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000a) 18:33:51 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x5, 0x1ff, 0x84}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={&(0x7f0000000340)="236e8e4bf9dd147f3537718df086b2c9226d7d66ae1b48342d4c577fc1efed9ed9f4496c3a56ceea3297c7d2f4ba1d558f26ec89da2e39fcd5a740e317660805ec05c6710e798d71945164446e7c99d4573fd421f3ac629716ebaf40548b9472b0e0a5a24e", &(0x7f0000000280)=""/10, &(0x7f00000002c0)="39ab7e97b2de81d5e6d43b0807f0795e0535518cc920c3eca32bcdc180f00d3a439450bf148f714b4197d2e92c69c04298dfd32e277b29a1d3013e", &(0x7f0000000500)="d9e8b55fd3b252797144d64f2b3792dc5fec0256f1b3f73a5d31f2756dfd207b84895e5a43e12669ecba0c6df8d3b7804dbadd2853d0fe0cfd075ac1ea0b16d77ba8d76f91144a5461f086d51240aa5b8501bb1be2931717d03a51754ec868bb0a92aca6256fce8ca02ef762b362277bcf3008e92a5cf7a88d35f68a265c5ea60583b4e24ec170b78c1295eee91d7d08904d1fb3f76872a5e5a070291d7c27c82567637edc8d3d58b65e691ceaa047b2dea2688e2171f359054dd93c"}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000680)="95bc87932983c4092eddc6975d65d3ef91ffc8bc64dca53a524f99529e94182a873c310ea23c6e526745cfbe6541bf69ff72e352810c44d8498f15f56f2e421a6bd202f3ff8769d4fd8509d785935823f504e25944f44ea37d5b61912e9375b812472b", 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000800)={&(0x7f00000005c0), &(0x7f0000000600)=""/116, &(0x7f0000000680), &(0x7f0000000740), 0x6c, r0}, 0x38) 18:33:51 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:33:51 executing program 0: syz_clone(0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340)="1308da20aae9237c88bd700511c0090b5f088b7a1ed5a65f17f3de7a4a8787407ef28696ffdfa24f061fd48a7c287b188de0cf987d5ab588a03c805c18fb16d9e5fd60b5073550c3e77e50b00e6e86d1022bc36948e2f34ec2d01cbd9c3786e5152557648f0101ced9d30f79066e5f259abde5") syz_clone(0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000680), &(0x7f00000006c0), 0x0) 18:33:51 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x8004745a, 0x2000000a) 18:33:51 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:33:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002680), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvtap0\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1) 18:33:51 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r0, 0x4) 18:33:51 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:33:51 executing program 3: socketpair(0x1b, 0x0, 0x0, 0x0) 18:33:51 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x8004745a, 0x2000000a) [ 1113.122517][ T4387] Bluetooth: hci0: command 0x040f tx timeout [ 1113.844053][ T5109] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1113.859121][ T5109] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1113.867492][ T5109] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1113.875813][ T5109] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1113.888002][ T5109] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1113.895690][ T5109] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1114.203596][T16265] chnl_net:caif_netlink_parms(): no params data found [ 1114.380282][T16265] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.412189][T16265] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.450407][T16265] device bridge_slave_0 entered promiscuous mode [ 1114.472432][T16265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.479596][T16265] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.510637][T16265] device bridge_slave_1 entered promiscuous mode [ 1114.601691][T16265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1114.626433][T16265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1114.676023][T16265] team0: Port device team_slave_0 added [ 1114.693419][T16265] team0: Port device team_slave_1 added [ 1114.761211][T16265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1114.768348][T16265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1114.850117][T16265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1114.882175][T16265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1114.889151][T16265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1114.972930][T16265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.068289][T16265] device hsr_slave_0 entered promiscuous mode [ 1115.100159][T16265] device hsr_slave_1 entered promiscuous mode [ 1115.121933][T16265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1115.130422][T16265] Cannot create hsr debugfs directory [ 1115.202235][ T5109] Bluetooth: hci0: command 0x0419 tx timeout [ 1115.602657][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.608994][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.917728][T16265] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1115.924950][ T5109] Bluetooth: hci3: command 0x0409 tx timeout [ 1115.945135][T16265] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1115.965010][T16265] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1115.983622][T16265] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1116.114547][T16265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1116.129773][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1116.138791][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1116.151501][T16265] 8021q: adding VLAN 0 to HW filter on device team0 [ 1116.162563][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1116.171771][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1116.180244][ T6622] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.187409][ T6622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1116.216145][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1116.224726][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1116.234628][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1116.244383][T12962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.251546][T12962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1116.259845][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1116.268882][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1116.277983][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1116.287694][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1116.304156][T16265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1116.318452][T16265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1116.335964][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1116.344706][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1116.354558][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1116.363593][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1116.372448][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1116.384902][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1116.621080][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1116.629293][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1116.651696][T16265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1116.679211][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1116.688825][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1116.713104][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1116.731559][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1116.741238][T16265] device veth0_vlan entered promiscuous mode [ 1116.752348][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1116.760161][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1116.770948][T16265] device veth1_vlan entered promiscuous mode [ 1116.799653][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1116.808526][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1116.817599][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1116.826516][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1116.837903][T16265] device veth0_macvtap entered promiscuous mode [ 1116.851710][T16265] device veth1_macvtap entered promiscuous mode [ 1116.882259][T16265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.901150][T16265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.911692][T16265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.931610][T16265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.949764][T16265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.960417][T16265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.981679][T16265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.998913][T16265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.010321][T16265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1117.027669][T16265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.041376][T16265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1117.052030][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1117.060199][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1117.069410][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1117.087525][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1117.103273][T16265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.117487][T16265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.128221][T16265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.139046][T16265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.149194][T16265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.159935][T16265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.170254][T16265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.181826][T16265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.192103][T16265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.203291][T16265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.214925][T16265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1117.226506][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1117.242260][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1117.257360][T16265] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.266643][T16265] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.276490][T16265] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.286328][T16265] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.404120][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.431358][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.441898][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1117.451802][ T5227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.459821][ T5227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.486426][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:33:57 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x10) r3 = gettid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r5, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='\x00') 18:33:57 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f0000000140)=""/234, 0x36, 0xea, 0x1}, 0x20) 18:33:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x1}, {0xc}, {0xc, 0x4}]}]}}, &(0x7f0000000140)=""/234, 0x3e, 0xea, 0x1}, 0x20) 18:33:57 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:33:57 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x3}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000280)=""/229, 0x29, 0xe5, 0x1}, 0x20) 18:33:57 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x8004745a, 0x2000000a) 18:33:57 executing program 4: recvmsg$unix(0xffffffffffffffff, 0x0, 0xa8f012e9a37d169a) 18:33:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0x10, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)=""/234, 0x1a, 0xea, 0x1}, 0x20) 18:33:57 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:33:57 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) 18:33:57 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x0) 18:33:57 executing program 0: bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x60, &(0x7f0000000580)=""/96, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0xff, 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) 18:33:57 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r3 = gettid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r5, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 18:33:57 executing program 4: ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x777c, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000000}, 0x131e0, 0x0, 0x1b9, 0x4, 0x3, 0x4, 0xfffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r0, 0x25, 0xf002100}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(r0, &(0x7f0000000400)='cgroup.events\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000080)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="f97d1abe8f463a8707651db544956e943ddbe2c42cc368ccb0d865", 0x1b}, {&(0x7f00000004c0)="af2aac5b4762884c06f01d68bfd7d875f492eb413269b8f59ca2dd5527becae09871be79a564a33e6e7f9d3bda0341b515b5b62f2fede43bc8785f1d3d6f1bee7737e1040871f9d7b50c42a846783962", 0x50}, {&(0x7f0000000600)="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", 0xfd}, {&(0x7f0000000780)="3ad7c9fea12a7f7d6f73c37a364928a21728376958cb118b0835dadafd5f2ed85ff7cdc826ce56900abae2239b7802d1ae7a367d1df47328141ab0517e74ad6ca74326b6fdf27e89acf25f680b2f6d4192dc56403a646c1db26a5f842628a22bdce6ea402304f65f46551e71a6ffbf1ab9bab9310b9cfe4d265bb3f0", 0x7c}], 0x4, &(0x7f0000000880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2b}}, @ip_ttl={{0x14, 0x0, 0x2, 0x711}}, @ip_ttl={{0x14, 0x0, 0x2, 0x360f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x684}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}], 0xb0}, 0x407c8c4) socketpair(0x1a, 0x3, 0x8d5, &(0x7f0000000280)) openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x2, 0x1, 0x40, 0xc5, 0x0, 0x80000000, 0xc010, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x6}, 0x8, 0x6, 0x4, 0x2, 0x7a, 0x4, 0x4, 0x0, 0x80, 0x0, 0x1}, 0xffffffffffffffff, 0x2, r2, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000300)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x82, 0x0, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x10094, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3a69, 0x4, @perf_config_ext={0x2, 0x35f}, 0xbdde, 0xd2c, 0x60, 0x3, 0x3f, 0x86, 0x8005, 0x0, 0x6, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x738c0480, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='memory.events.local\x00', 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) 18:33:57 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:33:57 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000fc0), 0xc) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="b9078b72e7a3f007049e9a6d86dd", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 18:33:57 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x0) [ 1118.001386][ T5109] Bluetooth: hci3: command 0x041b tx timeout [ 1118.125676][T16377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.134143][T16377] bridge0: port 1(bridge_slave_0) entered disabled state 18:33:57 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0x19, 0x4, 0x4, 0x841b, 0x4}, 0x48) 18:33:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) recvmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x160) 18:33:57 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:33:57 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x0) [ 1118.325306][T16385] device bridge_slave_1 left promiscuous mode [ 1118.358000][T16385] bridge0: port 2(bridge_slave_1) entered disabled state 18:33:57 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0xff, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001440)={&(0x7f0000000440)='block_bio_remap\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) 18:33:57 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x36, &(0x7f0000000000)='/proc/nys/net/ipv4\x00\x00s/sle\xf44.\xab%nN\xd4\xa2\x88\x00\xd1\x1d=\x11\xc8\xdd\x15\xcc\xd2\xf1\x80\xd2\x88r\x84V1\xbb'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 18:33:57 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) [ 1118.506546][T16385] device bridge_slave_0 left promiscuous mode [ 1118.562192][T16385] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.600991][T16372] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1118.667221][T16372] CPU: 1 PID: 16372 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1118.677684][T16372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1118.687784][T16372] Call Trace: [ 1118.691088][T16372] [ 1118.694045][T16372] dump_stack_lvl+0xd1/0x138 [ 1118.698682][T16372] dump_header+0x10b/0x85f [ 1118.703149][T16372] oom_kill_process.cold+0x10/0x15 [ 1118.708312][T16372] out_of_memory+0x35c/0x14a0 [ 1118.713045][T16372] ? lockdep_hardirqs_on+0x7d/0x100 [ 1118.718295][T16372] ? oom_killer_disable+0x280/0x280 [ 1118.723540][T16372] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 1118.729237][T16372] mem_cgroup_out_of_memory+0x206/0x270 [ 1118.734839][T16372] ? mem_cgroup_margin+0x130/0x130 [ 1118.740029][T16372] memory_max_write+0x2f9/0x3c0 [ 1118.744928][T16372] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1118.751040][T16372] ? lock_release+0x810/0x810 [ 1118.755774][T16372] cgroup_file_write+0x1e2/0x770 [ 1118.760731][T16372] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1118.766816][T16372] ? kill_css+0x370/0x370 [ 1118.771156][T16372] ? __virt_addr_valid+0x61/0x2e0 [ 1118.776205][T16372] ? kill_css+0x370/0x370 [ 1118.780549][T16372] kernfs_fop_write_iter+0x3f1/0x600 [ 1118.785859][T16372] vfs_write+0x9ed/0xdd0 [ 1118.790125][T16372] ? kernel_write+0x630/0x630 [ 1118.794816][T16372] ? __fget_files+0x26a/0x440 [ 1118.799516][T16372] ksys_write+0x12b/0x250 [ 1118.803858][T16372] ? __ia32_sys_read+0xb0/0xb0 [ 1118.808638][T16372] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1118.814559][T16372] do_syscall_64+0x39/0xb0 [ 1118.818991][T16372] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1118.824893][T16372] RIP: 0033:0x7fad2a48c0c9 [ 1118.829321][T16372] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1118.848932][T16372] RSP: 002b:00007fad2b1b7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1118.857353][T16372] RAX: ffffffffffffffda RBX: 00007fad2a5abf80 RCX: 00007fad2a48c0c9 [ 1118.865337][T16372] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 1118.873321][T16372] RBP: 00007fad2a4e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1118.881296][T16372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1118.889271][T16372] R13: 00007ffe7a2e346f R14: 00007fad2b1b7300 R15: 0000000000022000 [ 1118.897272][T16372] [ 1119.027691][T16372] memory: usage 10660kB, limit 0kB, failcnt 159 [ 1119.095480][T16372] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1119.112190][T16372] Memory cgroup stats for /syz2: [ 1119.112440][T16372] anon 143360 [ 1119.112440][T16372] file 10473472 [ 1119.112440][T16372] kernel 266240 [ 1119.112440][T16372] kernel_stack 32768 [ 1119.112440][T16372] pagetables 77824 [ 1119.112440][T16372] sec_pagetables 0 [ 1119.112440][T16372] percpu 208 [ 1119.112440][T16372] sock 0 [ 1119.112440][T16372] vmalloc 4096 [ 1119.112440][T16372] shmem 10473472 [ 1119.112440][T16372] zswap 0 [ 1119.112440][T16372] zswapped 0 [ 1119.112440][T16372] file_mapped 233472 [ 1119.112440][T16372] file_dirty 0 [ 1119.112440][T16372] file_writeback 0 [ 1119.112440][T16372] swapcached 0 [ 1119.112440][T16372] anon_thp 0 [ 1119.112440][T16372] file_thp 0 [ 1119.112440][T16372] shmem_thp 0 [ 1119.112440][T16372] inactive_anon 143360 [ 1119.112440][T16372] active_anon 10473472 [ 1119.112440][T16372] inactive_file 0 [ 1119.112440][T16372] active_file 0 [ 1119.112440][T16372] unevictable 0 [ 1119.112440][T16372] slab_reclaimable 48736 [ 1119.112440][T16372] slab_unreclaimable 75912 [ 1119.112440][T16372] slab 124648 [ 1119.216622][T16372] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=16265,uid=0 [ 1119.245045][T16372] Memory cgroup out of memory: Killed process 16265 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 18:34:01 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r3 = gettid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r5, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 18:34:01 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00'}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:34:01 executing program 1: recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff000}], 0x1}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffec0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0c0583b, &(0x7f0000000000)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)={0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 18:34:01 executing program 3: openat$cgroup(0xffffffffffffffff, &(0x7f0000000f40)='syz1\x00', 0x200002, 0x0) 18:34:01 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0xff, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001440)={&(0x7f0000000440)='block_bio_remap\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) 18:34:01 executing program 4: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffec0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0c0583b, &(0x7f0000000000)) close(0xffffffffffffffff) 18:34:01 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x83577e5f7d9b6d10, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) 18:34:01 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00'}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 18:34:01 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x48) 18:34:01 executing program 1: recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff000}], 0x1}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffec0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0c0583b, &(0x7f0000000000)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)={0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 18:34:01 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x83577e5f7d9b6d10, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) 18:34:01 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00'}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) [ 1122.232716][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 18:34:01 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r3 = gettid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r5, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 18:34:01 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:34:01 executing program 0: recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff000}], 0x1}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffec0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0c0583b, &(0x7f0000000000)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)={0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 18:34:01 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x83577e5f7d9b6d10, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) 18:34:01 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x1a518) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 18:34:01 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 1122.478221][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 18:34:01 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x83577e5f7d9b6d10, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) 18:34:01 executing program 4: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 18:34:02 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) write$cgroup_int(r2, &(0x7f0000000200), 0x43408) 18:34:02 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 18:34:02 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe00000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8305b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b69819782748b376358c33c9753bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1061b973ef07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34faf7851b290feb3045a1b622f20c438842835e81c3573af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f500d3e021d1cb53aa78302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b60000000000969872556aac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a010b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc167bc7f5f4c67600a6ade3deb1f200abe1f753b54678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8b7d23aef9db5f421985c8e37fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82aeb9827193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcaa2357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c422be6ecc1be5dce8133fc32f68ea86a2df1e76fe26dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c9b54cfd6df9b0c1a10f489f300f4bb92235c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b52dd585a3a1c99aea42e57db652e2f1f101dcda28be23b94aced024505ce3dec8428a984b6dbe9878bcd1c0773c5bbc8755b06b80d333af06b8ea1f25fd232188e66ac83510"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xe04, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 18:34:02 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x83577e5f7d9b6d10, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x9) [ 1122.680686][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.813691][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.421030][T16518] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1123.461529][T16518] CPU: 1 PID: 16518 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1123.471995][T16518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1123.482062][T16518] Call Trace: [ 1123.485345][T16518] [ 1123.488285][T16518] dump_stack_lvl+0xd1/0x138 [ 1123.492941][T16518] dump_header+0x10b/0x85f [ 1123.497417][T16518] oom_kill_process.cold+0x10/0x15 [ 1123.502557][T16518] out_of_memory+0x35c/0x14a0 [ 1123.507253][T16518] ? lockdep_hardirqs_on+0x7d/0x100 [ 1123.512471][T16518] ? oom_killer_disable+0x280/0x280 [ 1123.517695][T16518] ? mem_cgroup_out_of_memory+0x199/0x270 [ 1123.523446][T16518] mem_cgroup_out_of_memory+0x206/0x270 [ 1123.529013][T16518] ? mem_cgroup_margin+0x130/0x130 [ 1123.534161][T16518] memory_max_write+0x2f9/0x3c0 [ 1123.539034][T16518] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1123.545117][T16518] ? lock_release+0x810/0x810 [ 1123.549809][T16518] cgroup_file_write+0x1e2/0x770 [ 1123.554859][T16518] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1123.560937][T16518] ? kill_css+0x370/0x370 [ 1123.565281][T16518] ? __virt_addr_valid+0x61/0x2e0 [ 1123.570339][T16518] ? kill_css+0x370/0x370 [ 1123.574684][T16518] kernfs_fop_write_iter+0x3f1/0x600 [ 1123.579992][T16518] vfs_write+0x9ed/0xdd0 [ 1123.584249][T16518] ? kernel_write+0x630/0x630 [ 1123.588941][T16518] ? __fget_files+0x26a/0x440 [ 1123.593642][T16518] ksys_write+0x12b/0x250 [ 1123.597982][T16518] ? __ia32_sys_read+0xb0/0xb0 [ 1123.602758][T16518] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1123.608678][T16518] do_syscall_64+0x39/0xb0 [ 1123.613112][T16518] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1123.619017][T16518] RIP: 0033:0x7f94c748c0c9 [ 1123.623439][T16518] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1123.643053][T16518] RSP: 002b:00007f94c8105168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1123.651478][T16518] RAX: ffffffffffffffda RBX: 00007f94c75abf80 RCX: 00007f94c748c0c9 [ 1123.659459][T16518] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000004 [ 1123.667434][T16518] RBP: 00007f94c74e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1123.675411][T16518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1123.683417][T16518] R13: 00007fff0ddda81f R14: 00007f94c8105300 R15: 0000000000022000 [ 1123.691414][T16518] [ 1123.702750][T16518] memory: usage 10740kB, limit 0kB, failcnt 36 [ 1123.708944][T16518] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1123.729023][T16518] Memory cgroup stats for /syz4: [ 1123.729223][T16518] anon 139264 [ 1123.729223][T16518] file 10489856 [ 1123.729223][T16518] kernel 335872 [ 1123.729223][T16518] kernel_stack 32768 [ 1123.729223][T16518] pagetables 77824 [ 1123.729223][T16518] sec_pagetables 0 [ 1123.729223][T16518] percpu 64 [ 1123.729223][T16518] sock 0 [ 1123.729223][T16518] vmalloc 0 [ 1123.729223][T16518] shmem 10473472 [ 1123.729223][T16518] zswap 0 [ 1123.729223][T16518] zswapped 0 [ 1123.729223][T16518] file_mapped 299008 [ 1123.729223][T16518] file_dirty 0 [ 1123.729223][T16518] file_writeback 0 [ 1123.729223][T16518] swapcached 0 [ 1123.729223][T16518] anon_thp 0 [ 1123.729223][T16518] file_thp 0 [ 1123.729223][T16518] shmem_thp 0 [ 1123.729223][T16518] inactive_anon 139264 [ 1123.729223][T16518] active_anon 10473472 [ 1123.729223][T16518] inactive_file 8192 [ 1123.729223][T16518] active_file 8192 [ 1123.729223][T16518] unevictable 0 [ 1123.729223][T16518] slab_reclaimable 42680 [ 1123.729223][T16518] slab_unreclaimable 153720 [ 1123.830728][T16518] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16515,uid=0 [ 1123.857172][T16518] Memory cgroup out of memory: Killed process 16518 (syz-executor.4) total-vm:54540kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1124.392394][ T9] device hsr_slave_0 left promiscuous mode [ 1124.400245][ T9] device hsr_slave_1 left promiscuous mode [ 1124.418637][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1124.427720][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1124.446568][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1124.459876][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1124.477949][ T9] device bridge_slave_1 left promiscuous mode [ 1124.490008][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.507490][ T9] device bridge_slave_0 left promiscuous mode [ 1124.516524][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.538555][ T9] device veth1_macvtap left promiscuous mode [ 1124.549523][ T9] device veth0_macvtap left promiscuous mode [ 1124.555700][ T9] device veth1_vlan left promiscuous mode [ 1124.561910][ T9] device veth0_vlan left promiscuous mode [ 1124.730498][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1124.747151][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1124.758624][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1124.773590][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1124.839056][ T9] bond0 (unregistering): Released all slaves [ 1125.340886][ T4387] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1125.355589][ T4387] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1125.367910][ T4387] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1125.375889][ T4387] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1125.386474][ T4387] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1125.747592][T16564] chnl_net:caif_netlink_parms(): no params data found [ 1125.898928][T16564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.922053][T16564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.933441][T16564] device bridge_slave_0 entered promiscuous mode [ 1125.952787][T16564] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.959948][T16564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.968841][T16564] device bridge_slave_1 entered promiscuous mode [ 1126.013531][T16564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1126.043794][T16564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1126.110157][T16564] team0: Port device team_slave_0 added [ 1126.121239][T16564] team0: Port device team_slave_1 added [ 1126.189987][T16564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1126.214047][T16564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1126.250529][T16564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1126.276576][T16564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1126.291746][T16564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1126.348490][T16564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1126.413580][T16564] device hsr_slave_0 entered promiscuous mode [ 1126.429808][T16564] device hsr_slave_1 entered promiscuous mode [ 1126.459648][T16564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1126.467972][T16564] Cannot create hsr debugfs directory [ 1127.188147][T16564] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1127.200857][T16564] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1127.223567][T16564] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1127.233599][T16564] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1127.347815][T16564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1127.384777][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1127.400243][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1127.411879][T16564] 8021q: adding VLAN 0 to HW filter on device team0 [ 1127.424517][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1127.434743][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1127.442926][ T4387] Bluetooth: hci3: command 0x0409 tx timeout [ 1127.450603][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.457759][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1127.486322][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1127.494860][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1127.503956][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1127.512544][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.519648][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1127.527869][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1127.536886][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1127.546462][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1127.556325][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1127.572355][T16564] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1127.585915][T16564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1127.602046][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1127.610010][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1127.619593][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1127.629122][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1127.637708][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1127.649913][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1127.931297][ T4387] Bluetooth: hci4: command 0x0406 tx timeout [ 1127.958395][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1127.966397][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1127.981197][T16564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1128.021968][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1128.037743][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1128.065910][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1128.074920][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1128.085727][T16564] device veth0_vlan entered promiscuous mode [ 1128.094065][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1128.102323][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1128.115786][T16564] device veth1_vlan entered promiscuous mode [ 1128.141986][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1128.150551][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1128.159272][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1128.169051][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1128.180260][T16564] device veth0_macvtap entered promiscuous mode [ 1128.195830][T16564] device veth1_macvtap entered promiscuous mode [ 1128.212758][T16564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1128.224648][T16564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.235278][T16564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1128.247870][T16564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.276012][T16564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1128.291138][T16564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.305064][T16564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1128.319805][T16564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.329788][T16564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1128.341986][T16564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.354057][T16564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1128.364025][T16564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1128.375112][T16564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.394002][T16564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1128.415091][T16564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.429280][T16564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1128.441753][T16564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.451809][T16564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1128.463247][T16564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.473327][T16564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1128.484827][T16564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.496193][T16564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1128.505503][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1128.520382][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1128.528950][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1128.539726][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1128.550113][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1128.561809][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1128.580093][T16564] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.589694][T16564] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.599281][T16564] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.608533][T16564] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.693847][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1128.709539][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1128.750679][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1128.759203][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1128.775363][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1128.790278][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1129.144369][T16632] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1129.156173][T16632] CPU: 0 PID: 16632 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1129.166623][T16632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1129.176685][T16632] Call Trace: [ 1129.179967][T16632] [ 1129.182922][T16632] dump_stack_lvl+0xd1/0x138 [ 1129.187577][T16632] dump_header+0x10b/0x85f [ 1129.192021][T16632] oom_kill_process.cold+0x10/0x15 [ 1129.197160][T16632] out_of_memory+0x35c/0x14a0 [ 1129.201867][T16632] ? oom_killer_disable+0x280/0x280 [ 1129.207084][T16632] ? mark_held_locks+0x9f/0xe0 [ 1129.211864][T16632] mem_cgroup_out_of_memory+0x206/0x270 [ 1129.217432][T16632] ? mem_cgroup_margin+0x130/0x130 [ 1129.222578][T16632] ? _raw_spin_unlock_irqrestore+0x5b/0x70 [ 1129.228427][T16632] memory_max_write+0x2f9/0x3c0 [ 1129.233302][T16632] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1129.239383][T16632] ? lock_release+0x810/0x810 [ 1129.244072][T16632] cgroup_file_write+0x1e2/0x770 [ 1129.249025][T16632] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1129.255103][T16632] ? kill_css+0x370/0x370 [ 1129.259447][T16632] ? __virt_addr_valid+0x61/0x2e0 [ 1129.264506][T16632] ? kill_css+0x370/0x370 [ 1129.268858][T16632] kernfs_fop_write_iter+0x3f1/0x600 [ 1129.274171][T16632] vfs_write+0x9ed/0xdd0 [ 1129.278460][T16632] ? kernel_write+0x630/0x630 [ 1129.283152][T16632] ? __fget_files+0x26a/0x440 [ 1129.287855][T16632] ksys_write+0x12b/0x250 [ 1129.292234][T16632] ? __ia32_sys_read+0xb0/0xb0 [ 1129.297013][T16632] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1129.302923][T16632] do_syscall_64+0x39/0xb0 [ 1129.307396][T16632] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1129.313326][T16632] RIP: 0033:0x7f832788c0c9 [ 1129.317755][T16632] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1129.337372][T16632] RSP: 002b:00007f832858d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1129.345795][T16632] RAX: ffffffffffffffda RBX: 00007f83279abf80 RCX: 00007f832788c0c9 [ 1129.353773][T16632] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 1129.361747][T16632] RBP: 00007f83278e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1129.369726][T16632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1129.377708][T16632] R13: 00007ffd7960474f R14: 00007f832858d300 R15: 0000000000022000 [ 1129.385705][T16632] [ 1129.401073][T16632] memory: usage 10656kB, limit 0kB, failcnt 159 [ 1129.417265][T16632] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1129.426840][T16632] Memory cgroup stats for /syz2: [ 1129.429494][T16632] anon 118784 [ 1129.429494][T16632] file 10477568 [ 1129.429494][T16632] kernel 303104 [ 1129.429494][T16632] kernel_stack 65536 [ 1129.429494][T16632] pagetables 77824 [ 1129.429494][T16632] sec_pagetables 0 [ 1129.429494][T16632] percpu 208 [ 1129.429494][T16632] sock 0 [ 1129.429494][T16632] vmalloc 4096 [ 1129.429494][T16632] shmem 10473472 [ 1129.429494][T16632] zswap 0 [ 1129.429494][T16632] zswapped 0 [ 1129.429494][T16632] file_mapped 233472 [ 1129.429494][T16632] file_dirty 0 [ 1129.429494][T16632] file_writeback 0 [ 1129.429494][T16632] swapcached 0 [ 1129.429494][T16632] anon_thp 0 [ 1129.429494][T16632] file_thp 0 [ 1129.429494][T16632] shmem_thp 0 [ 1129.429494][T16632] inactive_anon 118784 [ 1129.429494][T16632] active_anon 10473472 [ 1129.429494][T16632] inactive_file 0 [ 1129.429494][T16632] active_file 4096 [ 1129.429494][T16632] unevictable 0 [ 1129.429494][T16632] slab_reclaimable 50128 [ 1129.429494][T16632] slab_unreclaimable 78504 [ 1129.526253][ T4387] Bluetooth: hci3: command 0x041b tx timeout 18:34:09 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r4 = gettid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r5}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, r6, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='\x00') write$cgroup_int(r1, &(0x7f0000000600), 0x12) 18:34:09 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 18:34:09 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x83577e5f7d9b6d10, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x9) 18:34:09 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xe04, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 18:34:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000000)=""/148, 0x26, 0x94, 0x1}, 0x20) 18:34:09 executing program 4: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1129.541799][T16632] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=16631,uid=0 [ 1129.558873][T16632] Memory cgroup out of memory: Killed process 16631 (syz-executor.2) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1129.609528][T13573] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 1129.633220][T13573] CPU: 0 PID: 13573 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1129.643667][T13573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1129.653740][T13573] Call Trace: [ 1129.657037][T13573] [ 1129.659991][T13573] dump_stack_lvl+0xd1/0x138 [ 1129.664622][T13573] dump_header+0x10b/0x85f [ 1129.669082][T13573] oom_kill_process.cold+0x10/0x15 [ 1129.674236][T13573] out_of_memory+0x35c/0x14a0 [ 1129.678940][T13573] ? find_held_lock+0x2d/0x110 [ 1129.683722][T13573] ? oom_killer_disable+0x280/0x280 [ 1129.688943][T13573] ? find_held_lock+0x2d/0x110 [ 1129.693723][T13573] mem_cgroup_out_of_memory+0x206/0x270 [ 1129.699287][T13573] ? mem_cgroup_margin+0x130/0x130 [ 1129.704417][T13573] ? lock_downgrade+0x6e0/0x6e0 [ 1129.709288][T13573] try_charge_memcg+0xefb/0x12f0 [ 1129.714245][T13573] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1129.720231][T13573] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1129.725966][T13573] ? lock_downgrade+0x6e0/0x6e0 [ 1129.730823][T13573] ? lock_downgrade+0x6e0/0x6e0 [ 1129.735680][T13573] ? rcu_read_unlock+0x9/0x60 [ 1129.740386][T13573] obj_cgroup_charge+0x2af/0x5e0 [ 1129.745339][T13573] ? copy_process+0x3aa/0x7520 [ 1129.750111][T13573] kmem_cache_alloc_node+0xb7/0x460 [ 1129.755321][T13573] copy_process+0x3aa/0x7520 [ 1129.759920][T13573] ? _raw_spin_unlock+0x28/0x40 [ 1129.764803][T13573] ? wp_page_reuse+0x197/0x570 [ 1129.769579][T13573] ? do_wp_page+0x844/0x3370 [ 1129.774194][T13573] ? __cleanup_sighand+0xb0/0xb0 [ 1129.779137][T13573] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1129.784543][T13573] ? rwlock_bug.part.0+0x90/0x90 [ 1129.789499][T13573] ? lock_chain_count+0x20/0x20 [ 1129.794388][T13573] kernel_clone+0xeb/0x990 [ 1129.798817][T13573] ? create_io_thread+0xf0/0xf0 [ 1129.803683][T13573] ? find_held_lock+0x2d/0x110 [ 1129.808477][T13573] __do_sys_clone+0xba/0x100 [ 1129.813084][T13573] ? kernel_clone+0x990/0x990 [ 1129.817783][T13573] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1129.823726][T13573] do_syscall_64+0x39/0xb0 [ 1129.828159][T13573] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1129.834060][T13573] RIP: 0033:0x7f94c7489dfb [ 1129.838477][T13573] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1129.858089][T13573] RSP: 002b:00007fff0dddaa60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1129.866507][T13573] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f94c7489dfb [ 1129.874483][T13573] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1129.882457][T13573] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556896400 [ 1129.890444][T13573] R10: 00005555568966d0 R11: 0000000000000246 R12: 0000000000000001 [ 1129.898425][T13573] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff0dddab40 [ 1129.906425][T13573] 18:34:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x1) 18:34:09 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000002380)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100010000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)=0xe0ffffff) bpf$ITER_CREATE(0x21, &(0x7f0000002480), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x204d, &(0x7f00000005c0)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)=[0x0, 0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={0xffffffffffffffff, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x300, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000000a00), 0x0, &(0x7f00000022c0)}, 0x0) syz_clone(0x40062000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)) 18:34:09 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x83577e5f7d9b6d10, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x9) 18:34:09 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 18:34:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x1) 18:34:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x1) [ 1130.430616][T13573] memory: usage 10408kB, limit 0kB, failcnt 55 [ 1130.438635][T13573] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1130.446052][T13573] Memory cgroup stats for /syz4: [ 1130.446264][T13573] anon 45056 [ 1130.446264][T13573] file 10489856 [ 1130.446264][T13573] kernel 122880 [ 1130.446264][T13573] kernel_stack 0 [ 1130.446264][T13573] pagetables 8192 [ 1130.446264][T13573] sec_pagetables 0 [ 1130.446264][T13573] percpu 0 [ 1130.446264][T13573] sock 0 [ 1130.446264][T13573] vmalloc 0 [ 1130.446264][T13573] shmem 10473472 [ 1130.446264][T13573] zswap 0 [ 1130.446264][T13573] zswapped 0 [ 1130.446264][T13573] file_mapped 266240 [ 1130.446264][T13573] file_dirty 0 [ 1130.446264][T13573] file_writeback 0 [ 1130.446264][T13573] swapcached 0 [ 1130.446264][T13573] anon_thp 0 [ 1130.446264][T13573] file_thp 0 [ 1130.446264][T13573] shmem_thp 0 [ 1130.446264][T13573] inactive_anon 45056 [ 1130.446264][T13573] active_anon 10473472 [ 1130.446264][T13573] inactive_file 0 [ 1130.446264][T13573] active_file 16384 [ 1130.446264][T13573] unevictable 0 [ 1130.446264][T13573] slab_reclaimable 35576 [ 1130.446264][T13573] slab_unreclaimable 69488 [ 1130.446264][T13573] slab 105064 [ 1130.555407][T13573] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=13573,uid=0 [ 1130.591478][T13573] Memory cgroup out of memory: Killed process 13573 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1130.648629][T16564] syz-executor.2 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=0 [ 1130.677595][T16564] CPU: 0 PID: 16564 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1130.688046][T16564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1130.698145][T16564] Call Trace: [ 1130.701449][T16564] [ 1130.704402][T16564] dump_stack_lvl+0xd1/0x138 [ 1130.709041][T16564] dump_header+0x10b/0x85f [ 1130.713498][T16564] oom_kill_process.cold+0x10/0x15 [ 1130.718665][T16564] out_of_memory+0x35c/0x14a0 [ 1130.723394][T16564] ? oom_killer_disable+0x280/0x280 [ 1130.728636][T16564] ? find_held_lock+0x2d/0x110 [ 1130.733442][T16564] mem_cgroup_out_of_memory+0x206/0x270 [ 1130.739025][T16564] ? mem_cgroup_margin+0x130/0x130 [ 1130.744174][T16564] ? lock_downgrade+0x6e0/0x6e0 [ 1130.749067][T16564] try_charge_memcg+0xefb/0x12f0 [ 1130.754038][T16564] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1130.760047][T16564] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1130.765826][T16564] ? lock_downgrade+0x6e0/0x6e0 [ 1130.770708][T16564] ? lock_downgrade+0x6e0/0x6e0 [ 1130.775586][T16564] ? rcu_read_unlock+0x9/0x60 [ 1130.780313][T16564] obj_cgroup_charge+0x2af/0x5e0 [ 1130.785288][T16564] ? __alloc_file+0x21/0x270 [ 1130.789921][T16564] kmem_cache_alloc+0xb5/0x430 [ 1130.794725][T16564] __alloc_file+0x21/0x270 [ 1130.799175][T16564] alloc_empty_file+0x71/0x170 [ 1130.804019][T16564] path_openat+0xe1/0x2a50 [ 1130.808477][T16564] ? ___slab_alloc+0x9df/0x1400 [ 1130.813360][T16564] ? path_lookupat+0x840/0x840 [ 1130.818169][T16564] do_filp_open+0x1ba/0x410 [ 1130.822706][T16564] ? may_open_dev+0xf0/0xf0 [ 1130.827244][T16564] ? find_held_lock+0x2d/0x110 [ 1130.832065][T16564] ? do_raw_spin_lock+0x124/0x2b0 [ 1130.837115][T16564] ? rwlock_bug.part.0+0x90/0x90 [ 1130.842089][T16564] ? _raw_spin_unlock+0x28/0x40 [ 1130.846970][T16564] ? alloc_fd+0x2d8/0x6d0 [ 1130.851346][T16564] do_sys_openat2+0x16d/0x4c0 [ 1130.856049][T16564] ? path_umount+0x6b8/0x10b0 [ 1130.860758][T16564] ? putname+0x102/0x140 [ 1130.865034][T16564] ? build_open_flags+0x6f0/0x6f0 [ 1130.870088][T16564] ? may_mount+0xa0/0xa0 [ 1130.874376][T16564] __x64_sys_openat+0x143/0x1f0 [ 1130.879252][T16564] ? __ia32_sys_open+0x1c0/0x1c0 [ 1130.884231][T16564] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1130.890171][T16564] do_syscall_64+0x39/0xb0 [ 1130.894622][T16564] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1130.900541][T16564] RIP: 0033:0x7f832788bc38 [ 1130.904984][T16564] Code: 24 18 31 c0 41 83 e2 40 75 40 89 f0 25 00 00 41 00 3d 00 00 41 00 74 32 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 40 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 1130.924617][T16564] RSP: 002b:00007ffd79603840 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 1130.933067][T16564] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f832788bc38 [ 1130.941065][T16564] RDX: 0000000000090800 RSI: 00007ffd79604a30 RDI: 00000000ffffff9c [ 1130.949056][T16564] RBP: 00007ffd79604a0c R08: 0000000000090800 R09: 00007ffd79604a30 [ 1130.957057][T16564] R10: 0000000000000000 R11: 0000000000000287 R12: 00007f83278e6b24 [ 1130.965051][T16564] R13: 00007ffd79604a30 R14: 000000000000000e R15: 00007ffd79604a70 [ 1130.973083][T16564] [ 1131.079112][T16564] memory: usage 10372kB, limit 0kB, failcnt 178 [ 1131.130189][T16564] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1131.144941][T16564] Memory cgroup stats for /syz2: [ 1131.145147][T16564] anon 36864 [ 1131.145147][T16564] file 10477568 [ 1131.145147][T16564] kernel 106496 [ 1131.145147][T16564] kernel_stack 0 [ 1131.145147][T16564] pagetables 8192 [ 1131.145147][T16564] sec_pagetables 0 [ 1131.145147][T16564] percpu 64 [ 1131.145147][T16564] sock 0 [ 1131.145147][T16564] vmalloc 0 [ 1131.145147][T16564] shmem 10473472 [ 1131.145147][T16564] zswap 0 [ 1131.145147][T16564] zswapped 0 [ 1131.145147][T16564] file_mapped 188416 [ 1131.145147][T16564] file_dirty 0 [ 1131.145147][T16564] file_writeback 0 [ 1131.145147][T16564] swapcached 0 [ 1131.145147][T16564] anon_thp 0 [ 1131.145147][T16564] file_thp 0 [ 1131.145147][T16564] shmem_thp 0 [ 1131.145147][T16564] inactive_anon 36864 [ 1131.145147][T16564] active_anon 10473472 [ 1131.145147][T16564] inactive_file 0 [ 1131.145147][T16564] active_file 4096 [ 1131.145147][T16564] unevictable 0 [ 1131.145147][T16564] slab_reclaimable 41696 [ 1131.145147][T16564] slab_unreclaimable 44080 [ 1131.145147][T16564] slab 85776 [ 1131.271567][T16564] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=16564,uid=0 [ 1131.288151][T16564] Memory cgroup out of memory: Killed process 16564 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1131.750964][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.091623][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.425115][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.689290][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 18:34:13 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r4 = gettid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r5}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, r6, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='\x00') write$cgroup_int(r1, &(0x7f0000000600), 0x12) 18:34:13 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 18:34:13 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x83577e5f7d9b6d10, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0x9) 18:34:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x1) 18:34:13 executing program 4: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 18:34:13 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000003800ff0f0000000000000000850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 18:34:13 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x83577e5f7d9b6d10, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0x9) [ 1134.826477][ T9] device hsr_slave_0 left promiscuous mode [ 1134.862942][ T9] device hsr_slave_1 left promiscuous mode [ 1134.906534][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1134.921622][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1134.972028][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1134.979453][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1135.072864][ T9] device veth1_macvtap left promiscuous mode [ 1135.111382][ T9] device veth0_macvtap left promiscuous mode [ 1135.117543][ T9] device veth1_vlan left promiscuous mode [ 1135.171515][ T9] device veth0_vlan left promiscuous mode [ 1135.995397][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1136.019545][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1136.061513][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1136.108441][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1136.305937][ T9] bond0 (unregistering): Released all slaves [ 1137.296669][ T5109] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1137.305812][ T5109] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1137.313891][ T5109] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1137.333373][ T9326] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1137.340941][ T9326] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1137.349665][ T9326] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1137.854390][T16734] chnl_net:caif_netlink_parms(): no params data found [ 1138.180422][T16734] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.191500][T16734] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.199649][T16734] device bridge_slave_0 entered promiscuous mode [ 1138.273802][T16734] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.280988][T16734] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.331477][T16734] device bridge_slave_1 entered promiscuous mode [ 1138.423292][T16734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1138.520227][T16734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1138.636896][T16734] team0: Port device team_slave_0 added [ 1138.672276][T16734] team0: Port device team_slave_1 added [ 1138.771651][T16734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1138.779548][T16734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1138.912176][T16734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1138.989731][T16734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1139.021889][T16734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1139.091444][T16734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1139.353813][T16734] device hsr_slave_0 entered promiscuous mode [ 1139.376222][T16734] device hsr_slave_1 entered promiscuous mode [ 1139.423170][T16734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1139.430767][T16734] Cannot create hsr debugfs directory [ 1139.441395][ T9326] Bluetooth: hci3: command 0x0409 tx timeout [ 1140.763471][T16734] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1140.822265][T16734] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1140.870542][T16734] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1140.926076][T16734] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1141.200429][T16734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1141.262368][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1141.270220][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1141.310515][T16734] 8021q: adding VLAN 0 to HW filter on device team0 [ 1141.382471][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.412973][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1141.433682][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1141.451805][T13013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.458913][T13013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1141.532951][ T9326] Bluetooth: hci3: command 0x041b tx timeout [ 1141.576293][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.661761][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1141.669758][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1141.709758][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1141.734805][ T6622] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.741966][ T6622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1141.765624][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1141.790791][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1141.808570][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1141.820459][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1141.859721][T16734] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1141.921389][T16734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1142.105610][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.149673][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1142.158196][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1142.182301][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1142.210877][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1142.252051][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1142.362332][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.608073][T12859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1143.349981][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1143.358159][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1143.379017][T16734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1143.611732][ T9326] Bluetooth: hci3: command 0x040f tx timeout [ 1144.204457][ T9] device hsr_slave_0 left promiscuous mode [ 1144.222462][ T9] device hsr_slave_1 left promiscuous mode [ 1144.251052][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1144.263978][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1144.283847][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1144.301305][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1144.348658][ T9] device bridge_slave_1 left promiscuous mode [ 1144.358958][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.377368][ T9] device bridge_slave_0 left promiscuous mode [ 1144.391583][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.464103][ T9] device veth1_macvtap left promiscuous mode [ 1144.470184][ T9] device veth0_macvtap left promiscuous mode [ 1144.501436][ T9] device veth1_vlan left promiscuous mode [ 1144.507304][ T9] device veth0_vlan left promiscuous mode [ 1145.320474][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1145.375429][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1145.424742][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1145.503222][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1145.681345][ T9326] Bluetooth: hci3: command 0x0419 tx timeout [ 1145.806033][ T9] bond0 (unregistering): Released all slaves [ 1145.942345][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1145.951768][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1145.966103][T16734] device veth0_vlan entered promiscuous mode [ 1145.976089][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1146.072941][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1146.144379][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1146.204440][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1146.266955][T16734] device veth1_vlan entered promiscuous mode [ 1146.377162][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1146.400224][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1146.408818][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1146.449860][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1146.464278][T16734] device veth0_macvtap entered promiscuous mode [ 1146.512108][T16734] device veth1_macvtap entered promiscuous mode [ 1146.596825][T16734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.640341][T16734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.670576][T16734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.689934][T16734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.716441][T16734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.734075][T16734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.763870][T16734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.791286][T16734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.841035][T16734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1146.872261][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1146.921788][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1146.930101][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1146.952319][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1147.003707][T16734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1147.024805][T16734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.063907][T16734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1147.131289][T16734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.141137][T16734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1147.190366][T16734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.316939][T16734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1147.360928][T16734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.389795][T16734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1147.416916][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1147.442674][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1147.553239][T16734] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.592745][T16734] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.602891][T16734] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.611695][T16734] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.790603][ T5227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1147.820469][ T5227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1147.863906][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1147.897599][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1147.929199][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1147.962717][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1148.393050][T16827] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1148.453552][T16827] CPU: 1 PID: 16827 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1148.464061][T16827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1148.474160][T16827] Call Trace: [ 1148.477465][T16827] [ 1148.480420][T16827] dump_stack_lvl+0xd1/0x138 [ 1148.485057][T16827] dump_header+0x10b/0x85f [ 1148.489532][T16827] oom_kill_process.cold+0x10/0x15 [ 1148.494697][T16827] out_of_memory+0x35c/0x14a0 [ 1148.499435][T16827] ? oom_killer_disable+0x280/0x280 [ 1148.504682][T16827] ? mark_held_locks+0x9f/0xe0 [ 1148.509491][T16827] mem_cgroup_out_of_memory+0x206/0x270 [ 1148.515095][T16827] ? mem_cgroup_margin+0x130/0x130 [ 1148.520275][T16827] memory_max_write+0x2f9/0x3c0 [ 1148.525165][T16827] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1148.531275][T16827] ? lock_release+0x810/0x810 [ 1148.536036][T16827] cgroup_file_write+0x1e2/0x770 [ 1148.541026][T16827] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1148.547132][T16827] ? kill_css+0x370/0x370 [ 1148.551498][T16827] ? __virt_addr_valid+0x61/0x2e0 [ 1148.556566][T16827] ? kill_css+0x370/0x370 [ 1148.560912][T16827] kernfs_fop_write_iter+0x3f1/0x600 [ 1148.566225][T16827] vfs_write+0x9ed/0xdd0 [ 1148.570486][T16827] ? kernel_write+0x630/0x630 [ 1148.575183][T16827] ? __fget_files+0x26a/0x440 [ 1148.579888][T16827] ksys_write+0x12b/0x250 [ 1148.584250][T16827] ? __ia32_sys_read+0xb0/0xb0 [ 1148.589031][T16827] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1148.594945][T16827] do_syscall_64+0x39/0xb0 [ 1148.599381][T16827] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1148.605325][T16827] RIP: 0033:0x7f7517e8c0c9 [ 1148.609748][T16827] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1148.629381][T16827] RSP: 002b:00007f7518bbf168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1148.637803][T16827] RAX: ffffffffffffffda RBX: 00007f7517fabf80 RCX: 00007f7517e8c0c9 [ 1148.645784][T16827] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000004 [ 1148.653762][T16827] RBP: 00007f7517ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1148.661737][T16827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1148.669713][T16827] R13: 00007ffc2889dd9f R14: 00007f7518bbf300 R15: 0000000000022000 [ 1148.677711][T16827] [ 1148.711518][T16827] memory: usage 10648kB, limit 0kB, failcnt 72 [ 1148.761189][T16827] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1148.792998][T16827] Memory cgroup stats for /syz4: [ 1148.794740][T16827] anon 114688 [ 1148.794740][T16827] file 10477568 [ 1148.794740][T16827] kernel 286720 [ 1148.794740][T16827] kernel_stack 65536 [ 1148.794740][T16827] pagetables 77824 [ 1148.794740][T16827] sec_pagetables 0 [ 1148.794740][T16827] percpu 64 [ 1148.794740][T16827] sock 0 [ 1148.794740][T16827] vmalloc 0 [ 1148.794740][T16827] shmem 10473472 [ 1148.794740][T16827] zswap 0 [ 1148.794740][T16827] zswapped 0 [ 1148.794740][T16827] file_mapped 299008 [ 1148.794740][T16827] file_dirty 0 [ 1148.794740][T16827] file_writeback 0 [ 1148.794740][T16827] swapcached 0 [ 1148.794740][T16827] anon_thp 0 [ 1148.794740][T16827] file_thp 0 [ 1148.794740][T16827] shmem_thp 0 [ 1148.794740][T16827] inactive_anon 114688 [ 1148.794740][T16827] active_anon 10473472 [ 1148.794740][T16827] inactive_file 0 [ 1148.794740][T16827] active_file 4096 [ 1148.794740][T16827] unevictable 0 [ 1148.794740][T16827] slab_reclaimable 41720 [ 1148.794740][T16827] slab_unreclaimable 73752 [ 1148.794740][T16827] slab 115472 [ 1149.261963][T16827] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16734,uid=0 [ 1149.325952][T16827] Memory cgroup out of memory: Killed process 16734 (syz-executor.4) total-vm:50568kB, anon-rss:328kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1151.337432][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.482809][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.589205][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.799267][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.212337][ T9] device hsr_slave_0 left promiscuous mode [ 1153.239502][ T9] device hsr_slave_1 left promiscuous mode [ 1153.262745][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1153.270158][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1153.314196][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1153.345416][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1153.368661][ T9] device bridge_slave_1 left promiscuous mode [ 1153.396980][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.435022][ T9] device bridge_slave_0 left promiscuous mode [ 1153.441310][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.501589][ T9] device veth1_macvtap left promiscuous mode [ 1153.507682][ T9] device veth0_macvtap left promiscuous mode [ 1153.540000][ T9] device veth1_vlan left promiscuous mode [ 1153.558590][ T9] device veth0_vlan left promiscuous mode [ 1154.160825][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1154.179509][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1154.207742][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1154.237588][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1154.366104][ T9] bond0 (unregistering): Released all slaves 18:34:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000002380)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100010000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)=0xe0ffffff) bpf$ITER_CREATE(0x21, &(0x7f0000002480), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x204d, &(0x7f00000005c0)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)=[0x0, 0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={0xffffffffffffffff, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x300, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000000a00), 0x0, &(0x7f00000022c0)}, 0x0) syz_clone(0x40062000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)) 18:34:37 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x83577e5f7d9b6d10, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0x9) 18:34:37 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1000000}]}]}}, &(0x7f0000001280)=""/132, 0x2e, 0x84, 0x1}, 0x20) 18:34:37 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000780)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480), 0x8, 0x10, &(0x7f00000004c0), 0x10}, 0xa8) 18:34:37 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r4 = gettid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r5}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, r6, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='\x00') write$cgroup_int(r1, &(0x7f0000000600), 0x12) 18:34:37 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x18}, 0x48) 18:34:37 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x13, 0x10, 0x3, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x20) 18:34:37 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0xf}]}}, &(0x7f0000000040)=""/182, 0x26, 0xb6, 0x1}, 0x20) 18:34:37 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) 18:34:37 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000300)=""/164, 0x30, 0xa4, 0x1}, 0x20) 18:34:37 executing program 5: ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x777c, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000000}, 0x131e0, 0x0, 0x1b9, 0x4, 0x3, 0x4, 0xfffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f0000000440)={0x2, 0x80, 0x1, 0x0, 0xb, 0x81, 0x0, 0x3, 0xa080, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x1, @perf_config_ext={0x1f, 0x3}, 0x7e80e1c2d2e3b595, 0x7, 0x4, 0x0, 0xffff, 0x2, 0x6, 0x0, 0x6, 0x0, 0x752}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r0, 0x25, 0xf002100}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) r1 = openat$cgroup_ro(r0, &(0x7f0000000400)='cgroup.events\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="f97d1abe8f463a8707651db544956e943ddbe2c42cc368ccb0d865", 0x1b}, {&(0x7f00000004c0)="af2aac5b4762884c06f01d68bfd7d875f492eb413269b8f59ca2dd5527becae09871be79a564a33e6e7f9d3bda0341b515b5b62f2fede43bc8785f1d3d6f1bee7737e1040871f9d7b50c42a846783962", 0x50}, {&(0x7f0000000600)="534dd01c4ec977ad47394cc409d503423891d59081a58ee83a4402c583fe458eb9f1fc7f4b0ac623052ee24648fb8ce671d44c9c0d98073701e03f66ddcf86c8daa8461b9624ab47a2823601b3d4839e1a583e55b8f608657292eae03a68877c8fb0fb9c10debc488ec5ae51a23fd714b6f10dd02a2c67fee581fb4d670aa64c3f5007d9af4ebef722cdcbda735895314032d25ef126024ced66104db1c4a7a4099196060f65043c1da4e7e69bc7b68d37dddaf33de536264679d0b6ab21663a83a736410bbd959b30d4ca1c924f30eecb988bcc904f7e653f407d3a43b694d369561bb9da76cc0cd7a334b90418fdd1a98820ddab4c10817e6192c168", 0xfd}, {&(0x7f0000000780)="3ad7c9fea12a7f7d6f73c37a364928a21728376958cb118b0835dadafd5f2ed85ff7cdc826ce56900abae2239b7802d1ae7a367d1df47328141ab0517e74ad6ca74326b6fdf27e89acf25f680b2f6d4192dc56403a646c1db26a5f842628a22bdce6ea402304f65f46551e71a6ffbf1ab9bab9310b9cfe4d265bb3f055fed97d5768655aced6a2ea8f0c782de36e5e4093d6214cc270438c857fcad11378c8fb531870ee4a5a01457e4859996453d7c9b83bf168d0b0ca64ebe1ed36103ea44656f11c55cb6f3b1119197b9d6b3f26209697345b12fe6acada3cdd51", 0xdc}], 0x4, &(0x7f0000000880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2b}}, @ip_ttl={{0x14, 0x0, 0x2, 0x711}}, @ip_ttl={{0x14, 0x0, 0x2, 0x360f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x684}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}], 0xb0}, 0x407c8c4) socketpair(0x1a, 0x3, 0x8d5, &(0x7f0000000280)) openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000300)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x82, 0x0, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x10094, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3a69, 0x4, @perf_config_ext={0x2, 0x35f}, 0xbdde, 0xd2c, 0x60, 0x3, 0x3f, 0x86, 0x8005, 0x0, 0x6, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x738c0480, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='memory.events.local\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) 18:34:37 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) [ 1158.053770][T16931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.062227][T16931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.620891][ T9326] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1160.629888][ T9326] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1160.645710][ T9326] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1160.653982][ T9326] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1160.661875][ T9326] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1160.669223][ T9326] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1161.596919][ T4387] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1161.606392][ T4387] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1161.615977][ T4387] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1161.623836][ T4387] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1161.631108][ T4387] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1161.756070][T16969] chnl_net:caif_netlink_parms(): no params data found [ 1162.165647][T16969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.181814][T16969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.227782][T16969] device bridge_slave_0 entered promiscuous mode [ 1162.243030][T16969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.260913][T16969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.299301][T16969] device bridge_slave_1 entered promiscuous mode [ 1162.479716][T16969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1162.533348][T16982] chnl_net:caif_netlink_parms(): no params data found [ 1162.579511][T16969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1162.721995][ T9326] Bluetooth: hci3: command 0x0409 tx timeout [ 1162.827910][T16969] team0: Port device team_slave_0 added [ 1162.952321][T16969] team0: Port device team_slave_1 added [ 1162.958287][T16982] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.981831][T16982] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.989929][T16982] device bridge_slave_0 entered promiscuous mode [ 1163.118278][T16982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.131816][T16982] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.139960][T16982] device bridge_slave_1 entered promiscuous mode [ 1163.186606][T16969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1163.201792][T16969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1163.298517][T16969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1163.432122][T16969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1163.439090][T16969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1163.567954][T16969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1163.622728][T16982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1163.672215][T16982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1163.692193][ T9326] Bluetooth: hci5: command 0x0409 tx timeout [ 1163.846338][T16969] device hsr_slave_0 entered promiscuous mode [ 1163.886012][T16969] device hsr_slave_1 entered promiscuous mode [ 1163.953016][T16969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1163.960600][T16969] Cannot create hsr debugfs directory [ 1164.000863][T16982] team0: Port device team_slave_0 added [ 1164.057676][T16982] team0: Port device team_slave_1 added [ 1164.196497][T16982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1164.229058][T16982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1164.307667][T16982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1164.360686][T16982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1164.378531][T16982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1164.469282][T16982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1164.684022][T16982] device hsr_slave_0 entered promiscuous mode [ 1164.711749][T16982] device hsr_slave_1 entered promiscuous mode [ 1164.726670][T16982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1164.761529][T16982] Cannot create hsr debugfs directory [ 1164.806335][ T9326] Bluetooth: hci3: command 0x041b tx timeout [ 1165.771525][ T9326] Bluetooth: hci5: command 0x041b tx timeout [ 1166.881388][ T9326] Bluetooth: hci3: command 0x040f tx timeout [ 1167.379420][T16969] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1167.427880][T16969] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1167.455361][T16969] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1167.512111][T16969] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1167.623365][T16982] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1167.662638][T16982] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1167.714267][T16982] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1167.760795][T16982] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1167.842358][ T5109] Bluetooth: hci5: command 0x040f tx timeout [ 1167.869922][T16969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1167.925003][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1167.960442][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1167.973130][T16969] 8021q: adding VLAN 0 to HW filter on device team0 [ 1168.082274][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1168.090977][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1168.118609][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.125764][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1168.154933][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1168.179395][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1168.189665][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.196818][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1168.302067][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1168.310875][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1168.482754][T16969] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1168.511353][T16969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1168.550791][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1168.572807][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1168.633076][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1168.754330][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1168.814105][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1168.873829][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1168.916894][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1168.928186][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1168.936456][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1168.947219][T16982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1168.961421][ T5109] Bluetooth: hci3: command 0x0419 tx timeout [ 1169.082166][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1169.112868][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1169.145297][T16982] 8021q: adding VLAN 0 to HW filter on device team0 [ 1169.182471][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1169.202279][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1169.241577][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.248683][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1169.330778][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1169.339401][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1169.391103][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1169.414687][T13513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.421829][T13513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1169.470029][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1169.499285][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1169.553502][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1169.572484][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1169.695547][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1169.759079][T16982] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1169.814661][T16982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1169.838965][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1169.850427][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1169.872132][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1169.880563][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1169.901207][T16969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1169.925350][ T9326] Bluetooth: hci5: command 0x0419 tx timeout [ 1169.942346][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1169.950066][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1170.051589][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1170.734169][T16982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1170.743216][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1170.750676][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1170.822906][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1170.833185][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1170.872911][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1170.881197][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1171.066185][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1171.192029][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1171.200934][T16982] device veth0_vlan entered promiscuous mode [ 1171.261053][T16982] device veth1_vlan entered promiscuous mode [ 1171.374864][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1171.388875][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1171.437184][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1171.455099][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1171.494550][T16969] device veth0_vlan entered promiscuous mode [ 1171.507979][T16982] device veth0_macvtap entered promiscuous mode [ 1171.544430][T16969] device veth1_vlan entered promiscuous mode [ 1171.584632][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1171.597364][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1171.610201][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1171.627716][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1171.639233][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1171.658873][T16982] device veth1_macvtap entered promiscuous mode [ 1171.703050][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1171.719882][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1171.728263][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1171.756580][T16969] device veth0_macvtap entered promiscuous mode [ 1171.784779][T16982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1171.805495][T16982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1171.819668][T16982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1171.840014][T16982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1171.861716][T16982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1171.879768][T16982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1171.901707][T16982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1171.919734][T16982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1171.948960][T16982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1171.961113][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1171.979128][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1171.989839][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1172.008960][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1172.027350][T16969] device veth1_macvtap entered promiscuous mode [ 1172.052508][T16982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1172.073218][T16982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.090940][T16982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1172.110707][T16982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.129486][T16982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1172.140334][T16982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.163876][T16982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1172.183106][T16982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.199943][T16982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1172.216918][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1172.233298][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1172.250064][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1172.273010][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1172.298370][T16982] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.324556][T16982] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.339181][T16982] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.351108][T16982] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.375832][T16969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1172.398788][T16969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.419451][T16969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1172.438832][T16969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.449884][T16969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1172.469603][T16969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.480518][T16969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1172.501518][T16969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.519054][T16969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1172.540173][T16969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.564470][T16969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1172.609729][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1172.623218][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1172.649562][T16969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1172.674335][T16969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.693331][T16969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1172.709339][T16969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.731445][T16969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1172.749361][T16969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.759846][T16969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1172.782347][T16969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.800790][T16969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1172.819844][T16969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.839914][T16969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1172.880360][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1172.892151][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1172.923658][T16969] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.951388][T16969] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.960121][T16969] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.988952][T16969] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.137285][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.212595][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.270368][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1173.285556][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.322536][ T5227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.348982][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.357499][ T5227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.405793][T12859] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1173.423061][T12859] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1173.511856][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.519894][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.589624][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1173.912328][T17079] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1173.935938][T17079] CPU: 0 PID: 17079 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1173.946402][T17079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1173.956489][T17079] Call Trace: [ 1173.959784][T17079] [ 1173.962739][T17079] dump_stack_lvl+0xd1/0x138 [ 1173.967368][T17079] dump_header+0x10b/0x85f [ 1173.971827][T17079] oom_kill_process.cold+0x10/0x15 [ 1173.976983][T17079] out_of_memory+0x35c/0x14a0 [ 1173.981708][T17079] ? lockdep_hardirqs_on+0x7d/0x100 [ 1173.986943][T17079] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1173.993135][T17079] ? oom_killer_disable+0x280/0x280 [ 1173.998390][T17079] mem_cgroup_out_of_memory+0x206/0x270 [ 1174.003975][T17079] ? mem_cgroup_margin+0x130/0x130 [ 1174.009159][T17079] ? _raw_spin_unlock_irqrestore+0x5b/0x70 [ 1174.015008][T17079] memory_max_write+0x2f9/0x3c0 [ 1174.019900][T17079] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1174.026000][T17079] ? lock_release+0x810/0x810 [ 1174.030712][T17079] cgroup_file_write+0x1e2/0x770 [ 1174.035685][T17079] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1174.041790][T17079] ? kill_css+0x370/0x370 [ 1174.046179][T17079] ? __virt_addr_valid+0x61/0x2e0 [ 1174.051263][T17079] ? kill_css+0x370/0x370 [ 1174.055623][T17079] kernfs_fop_write_iter+0x3f1/0x600 [ 1174.060954][T17079] vfs_write+0x9ed/0xdd0 [ 1174.065231][T17079] ? kernel_write+0x630/0x630 [ 1174.069942][T17079] ? __fget_files+0x26a/0x440 [ 1174.074665][T17079] ksys_write+0x12b/0x250 [ 1174.079021][T17079] ? __ia32_sys_read+0xb0/0xb0 [ 1174.083821][T17079] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1174.089752][T17079] do_syscall_64+0x39/0xb0 [ 1174.094218][T17079] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1174.100145][T17079] RIP: 0033:0x7f5ebc88c0c9 [ 1174.104583][T17079] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1174.124231][T17079] RSP: 002b:00007f5ebd62b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1174.132673][T17079] RAX: ffffffffffffffda RBX: 00007f5ebc9abf80 RCX: 00007f5ebc88c0c9 [ 1174.140669][T17079] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 1174.148669][T17079] RBP: 00007f5ebc8e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1174.156661][T17079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1174.164653][T17079] R13: 00007ffc1818050f R14: 00007f5ebd62b300 R15: 0000000000022000 [ 1174.172670][T17079] [ 1174.228264][T17079] memory: usage 10648kB, limit 0kB, failcnt 195 [ 1174.237667][T17079] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1174.259871][T17079] Memory cgroup stats for /syz2: [ 1174.260786][T17079] anon 118784 [ 1174.260786][T17079] file 10473472 [ 1174.260786][T17079] kernel 311296 [ 1174.260786][T17079] kernel_stack 65536 [ 1174.260786][T17079] pagetables 81920 [ 1174.260786][T17079] sec_pagetables 0 [ 1174.260786][T17079] percpu 208 [ 1174.260786][T17079] sock 0 [ 1174.260786][T17079] vmalloc 4096 [ 1174.260786][T17079] shmem 10473472 [ 1174.260786][T17079] zswap 0 [ 1174.260786][T17079] zswapped 0 [ 1174.260786][T17079] file_mapped 233472 [ 1174.260786][T17079] file_dirty 0 [ 1174.260786][T17079] file_writeback 0 [ 1174.260786][T17079] swapcached 0 [ 1174.260786][T17079] anon_thp 0 [ 1174.260786][T17079] file_thp 0 [ 1174.260786][T17079] shmem_thp 0 [ 1174.260786][T17079] inactive_anon 118784 [ 1174.260786][T17079] active_anon 10473472 [ 1174.260786][T17079] inactive_file 0 [ 1174.260786][T17079] active_file 0 [ 1174.260786][T17079] unevictable 0 [ 1174.260786][T17079] slab_reclaimable 49888 [ 1174.260786][T17079] slab_unreclaimable 78504 [ 1174.260786][T17079] slab 128392 [ 1174.383708][T17079] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17078,uid=0 [ 1174.417330][T17079] Memory cgroup out of memory: Killed process 17079 (syz-executor.2) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 1174.459385][T16982] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1174.469427][T16982] CPU: 1 PID: 16982 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1174.479866][T16982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1174.489937][T16982] Call Trace: [ 1174.493233][T16982] [ 1174.496180][T16982] dump_stack_lvl+0xd1/0x138 [ 1174.500790][T16982] dump_header+0x10b/0x85f [ 1174.505229][T16982] oom_kill_process.cold+0x10/0x15 [ 1174.510363][T16982] out_of_memory+0x35c/0x14a0 [ 1174.515106][T16982] ? find_held_lock+0x2d/0x110 [ 1174.519892][T16982] ? oom_killer_disable+0x280/0x280 [ 1174.525116][T16982] ? find_held_lock+0x2d/0x110 [ 1174.529899][T16982] mem_cgroup_out_of_memory+0x206/0x270 [ 1174.535474][T16982] ? mem_cgroup_margin+0x130/0x130 [ 1174.540613][T16982] ? lock_downgrade+0x6e0/0x6e0 [ 1174.545486][T16982] try_charge_memcg+0xefb/0x12f0 [ 1174.550439][T16982] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1174.556460][T16982] ? lock_downgrade+0x6e0/0x6e0 [ 1174.561335][T16982] charge_memcg+0x90/0x3b0 [ 1174.565777][T16982] __mem_cgroup_charge+0x2b/0x90 [ 1174.570735][T16982] ? _compound_head+0x5d/0x150 [ 1174.575539][T16982] __handle_mm_fault+0x187d/0x3c90 [ 1174.580676][T16982] ? vm_iomap_memory+0x190/0x190 [ 1174.585653][T16982] handle_mm_fault+0x1b6/0x850 [ 1174.590441][T16982] do_user_addr_fault+0x475/0x1210 [ 1174.595574][T16982] ? rcu_read_lock_sched_held+0x3e/0x70 [ 1174.601143][T16982] exc_page_fault+0x98/0x170 [ 1174.605748][T16982] asm_exc_page_fault+0x26/0x30 [ 1174.610611][T16982] RIP: 0033:0x7f5ebc85a7d5 [ 1174.615033][T16982] Code: e8 4b 8d 0c 2f 48 8b 6c 24 18 48 39 d3 48 89 4b 60 0f 95 c2 48 83 c8 01 0f b6 d2 48 c1 e2 02 4c 09 ea 48 83 ca 01 49 89 57 08 <48> 89 41 08 49 83 c7 10 eb b3 48 8d 3d 6a 0d 0a 00 e8 75 c9 ff ff [ 1174.634652][T16982] RSP: 002b:00007ffc1817f4b0 EFLAGS: 00010206 [ 1174.640744][T16982] RAX: 00000000000187c1 RBX: 00007f5ebc9885e0 RCX: 0000555555e74840 [ 1174.648722][T16982] RDX: 0000000000008041 RSI: 0000000000000000 RDI: 0000000000000004 [ 1174.656702][T16982] RBP: 0000000000008030 R08: 0000000000000003 R09: 00007f5ebc988640 [ 1174.664677][T16982] R10: 0000000000000231 R11: 0000000000000000 R12: 0000000000000802 [ 1174.672655][T16982] R13: 0000000000008040 R14: 0000000000000804 R15: 0000555555e6c800 [ 1174.680650][T16982] [ 1174.698141][T16982] memory: usage 10400kB, limit 0kB, failcnt 214 [ 1174.704815][T16982] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1174.712256][T16982] Memory cgroup stats for /syz2: [ 1174.712461][T16982] anon 36864 [ 1174.712461][T16982] file 10473472 [ 1174.712461][T16982] kernel 131072 [ 1174.712461][T16982] kernel_stack 0 [ 1174.712461][T16982] pagetables 8192 [ 1174.712461][T16982] sec_pagetables 0 [ 1174.712461][T16982] percpu 208 [ 1174.712461][T16982] sock 0 [ 1174.712461][T16982] vmalloc 4096 [ 1174.712461][T16982] shmem 10473472 [ 1174.712461][T16982] zswap 0 [ 1174.712461][T16982] zswapped 0 [ 1174.712461][T16982] file_mapped 188416 [ 1174.712461][T16982] file_dirty 0 [ 1174.712461][T16982] file_writeback 0 [ 1174.712461][T16982] swapcached 0 [ 1174.712461][T16982] anon_thp 0 [ 1174.712461][T16982] file_thp 0 [ 1174.712461][T16982] shmem_thp 0 [ 1174.712461][T16982] inactive_anon 36864 [ 1174.712461][T16982] active_anon 10473472 [ 1174.712461][T16982] inactive_file 0 [ 1174.712461][T16982] active_file 0 [ 1174.712461][T16982] unevictable 0 [ 1174.712461][T16982] slab_reclaimable 48736 [ 1174.712461][T16982] slab_unreclaimable 56656 [ 1174.712461][T16982] slab 105392 [ 1174.817751][T16982] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=16982,uid=0 [ 1174.846683][T16982] Memory cgroup out of memory: Killed process 16982 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1175.244325][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.482098][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.683965][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.842195][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.101038][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.107440][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.501980][ T9] device hsr_slave_0 left promiscuous mode [ 1177.526808][ T9] device hsr_slave_1 left promiscuous mode [ 1177.559434][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1177.567164][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1177.609518][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1177.634001][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1177.657871][ T9] device bridge_slave_1 left promiscuous mode [ 1177.672134][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.681067][ T9] device bridge_slave_0 left promiscuous mode [ 1177.699387][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.718226][ T9] device veth1_macvtap left promiscuous mode [ 1177.724402][ T9] device veth0_macvtap left promiscuous mode [ 1177.730530][ T9] device veth1_vlan left promiscuous mode [ 1177.736677][ T9] device veth0_vlan left promiscuous mode [ 1178.147781][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1178.179584][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1178.209640][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1178.266429][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1178.434723][ T9] bond0 (unregistering): Released all slaves 18:35:03 executing program 1: r0 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0x6c1012f2b7d18c3}) ioctl$TUNSETDEBUG(r0, 0x801054db, 0x0) 18:35:03 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xda00) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0xc0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x7, 0x0, 0x5}, r1, 0xf, 0xffffffffffffffff, 0x8) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) 18:35:03 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) 18:35:03 executing program 5: ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x777c, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000000}, 0x131e0, 0x0, 0x1b9, 0x4, 0x3, 0x4, 0xfffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f0000000440)={0x2, 0x80, 0x1, 0x0, 0xb, 0x81, 0x0, 0x3, 0xa080, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x1, @perf_config_ext={0x1f, 0x3}, 0x7e80e1c2d2e3b595, 0x7, 0x4, 0x0, 0xffff, 0x2, 0x6, 0x0, 0x6, 0x0, 0x752}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r0, 0x25, 0xf002100}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) r1 = openat$cgroup_ro(r0, &(0x7f0000000400)='cgroup.events\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="f97d1abe8f463a8707651db544956e943ddbe2c42cc368ccb0d865", 0x1b}, {&(0x7f00000004c0)="af2aac5b4762884c06f01d68bfd7d875f492eb413269b8f59ca2dd5527becae09871be79a564a33e6e7f9d3bda0341b515b5b62f2fede43bc8785f1d3d6f1bee7737e1040871f9d7b50c42a846783962", 0x50}, {&(0x7f0000000600)="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", 0xfd}, {&(0x7f0000000780)="3ad7c9fea12a7f7d6f73c37a364928a21728376958cb118b0835dadafd5f2ed85ff7cdc826ce56900abae2239b7802d1ae7a367d1df47328141ab0517e74ad6ca74326b6fdf27e89acf25f680b2f6d4192dc56403a646c1db26a5f842628a22bdce6ea402304f65f46551e71a6ffbf1ab9bab9310b9cfe4d265bb3f055fed97d5768655aced6a2ea8f0c782de36e5e4093d6214cc270438c857fcad11378c8fb531870ee4a5a01457e4859996453d7c9b83bf168d0b0ca64ebe1ed36103ea44656f11c55cb6f3b1119197b9d6b3f26209697345b12fe6acada3cdd51", 0xdc}], 0x4, &(0x7f0000000880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2b}}, @ip_ttl={{0x14, 0x0, 0x2, 0x711}}, @ip_ttl={{0x14, 0x0, 0x2, 0x360f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x684}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}], 0xb0}, 0x407c8c4) socketpair(0x1a, 0x3, 0x8d5, &(0x7f0000000280)) openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000300)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x82, 0x0, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x10094, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3a69, 0x4, @perf_config_ext={0x2, 0x35f}, 0xbdde, 0xd2c, 0x60, 0x3, 0x3f, 0x86, 0x8005, 0x0, 0x6, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x738c0480, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='memory.events.local\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) 18:35:03 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6gretap0\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454dc, &(0x7f0000000040)=0x1) 18:35:03 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r4 = gettid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r5}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, r6, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='\x00') write$cgroup_int(r1, &(0x7f0000000600), 0x12) 18:35:03 executing program 4: r0 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x20}) 18:35:03 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) 18:35:03 executing program 1: r0 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0x6c1012f2b7d18c3}) ioctl$TUNSETDEBUG(r0, 0x801054db, 0x0) 18:35:04 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x0, 0x401, 0x3ba}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r0, 0x4) 18:35:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc01047d0, &(0x7f0000000640)={'pim6reg\x00'}) 18:35:04 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) 18:35:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000002380)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1803, 0x4, @perf_bp={&(0x7f0000000280)}, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100010000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x18, 0x0, &(0x7f0000000200)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x1, 0x1000, &(0x7f0000000d80)=""/4096, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002080)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)=0xe0ffffff) bpf$ITER_CREATE(0x21, &(0x7f0000002480), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x204d, &(0x7f00000005c0)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)={&(0x7f0000000000)='./file0\x00'}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)=[0x0, 0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x3, 0x565e4ff5, 0x0, 0x0, 0x11, 0xffffffffffffffff, 0x0, '\x00', r1, r0, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r2, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x300, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xc, 0x0, 0x0, &(0x7f0000000a80)='GPL\x00', 0x0, 0x77, &(0x7f0000000ac0)=""/119, 0x41000, 0x15, '\x00', r1, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0x0, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="9520000004000000a0c5e3a5fcffffff4d810c001000000018260000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f00000020c0)={0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000024c0)=[0xffffffffffffffff]}, 0x80) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000001f40), 0x6e, &(0x7f0000000a00), 0x0, &(0x7f00000022c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000c00)={0x3, 0x80, 0x9, 0x8, 0x4, 0x0, 0x0, 0x1, 0xc5c14172516d3239, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xffff, 0x4, 0x0, 0x20008001, 0x0, 0xff, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) syz_clone(0x40062000, 0x0, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)) 18:35:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x894c, 0x0) 18:35:04 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) 18:35:04 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x385901, 0x0) 18:35:04 executing program 4: syz_clone(0x0, &(0x7f0000000640), 0x0, 0x0, 0x0, &(0x7f00000007c0)) [ 1187.650175][ T9326] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1187.663153][ T9326] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1187.672318][ T9326] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1187.681521][ T9326] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1187.688963][ T9326] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1188.486724][T17226] chnl_net:caif_netlink_parms(): no params data found [ 1188.693237][T17226] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.700434][T17226] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.711825][T17226] device bridge_slave_0 entered promiscuous mode [ 1188.797133][T17226] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.807526][T17226] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.825855][T17226] device bridge_slave_1 entered promiscuous mode [ 1188.883819][T17226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1189.048352][T17226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1189.120404][T17226] team0: Port device team_slave_0 added [ 1189.154944][T17226] team0: Port device team_slave_1 added [ 1189.248618][T17226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1189.305306][T17226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1189.399204][T17226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1189.479226][T17226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1189.507010][T17226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1189.621314][T17226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1189.727338][T17226] device hsr_slave_0 entered promiscuous mode [ 1189.742571][T17226] device hsr_slave_1 entered promiscuous mode [ 1189.761705][ T9326] Bluetooth: hci5: command 0x0409 tx timeout [ 1189.777567][T17226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1189.804307][T17226] Cannot create hsr debugfs directory [ 1191.691213][T17226] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1191.762421][T17226] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1191.809879][T17226] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1191.841565][ T9326] Bluetooth: hci5: command 0x041b tx timeout [ 1191.861778][T17226] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1192.171768][T17226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1192.223649][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1192.232891][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1192.255262][T17226] 8021q: adding VLAN 0 to HW filter on device team0 [ 1192.295734][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1192.312558][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1192.341791][ T9320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.348906][ T9320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1192.442123][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1192.472523][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1192.491585][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1192.500640][ T9320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.507793][ T9320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1192.550048][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1192.587460][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1192.632300][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1192.694013][T17226] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1192.756646][T17226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1192.810616][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1192.829203][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1192.866942][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1192.906946][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1192.932276][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1192.940667][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1193.010026][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1193.641219][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1193.648781][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1193.676743][T17226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1193.739801][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1193.762296][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1193.802658][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1193.810934][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1193.854229][T17226] device veth0_vlan entered promiscuous mode [ 1193.882624][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1193.890867][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1193.911534][T17226] device veth1_vlan entered promiscuous mode [ 1193.921849][ T9326] Bluetooth: hci5: command 0x040f tx timeout [ 1193.982047][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1193.990146][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1194.010833][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1194.049639][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1194.074409][T17226] device veth0_macvtap entered promiscuous mode [ 1194.109008][T17226] device veth1_macvtap entered promiscuous mode [ 1194.165525][T17226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1194.194607][T17226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.216242][T17226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1194.294015][T17226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.341391][T17226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1194.362967][T17226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.452706][T17226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1194.535974][T17226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.576859][T17226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1194.618289][T17226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.638471][T17226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1194.656577][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1194.674150][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1194.689171][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1194.717469][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1194.744468][T17226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1194.765252][T17226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.779695][T17226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1194.819158][T17226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.839170][T17226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1194.871955][T17226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.921429][T17226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1194.940924][T17226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.951121][T17226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1194.996282][T17226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.040737][T17226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1195.069065][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1195.082299][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1195.103295][T17226] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.129880][T17226] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.147210][T17226] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.168083][T17226] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.377200][ T5227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1195.427133][ T5227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.472724][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1195.482203][ T5227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1195.490234][ T5227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.534502][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1195.927069][T17302] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1195.969294][T17302] CPU: 0 PID: 17302 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1195.979760][T17302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1195.989846][T17302] Call Trace: [ 1195.993146][T17302] [ 1195.996102][T17302] dump_stack_lvl+0xd1/0x138 [ 1196.000730][T17302] dump_header+0x10b/0x85f [ 1196.005195][T17302] oom_kill_process.cold+0x10/0x15 [ 1196.010356][T17302] out_of_memory+0x35c/0x14a0 [ 1196.015095][T17302] ? oom_killer_disable+0x280/0x280 [ 1196.020360][T17302] mem_cgroup_out_of_memory+0x206/0x270 [ 1196.025949][T17302] ? mem_cgroup_margin+0x130/0x130 [ 1196.031123][T17302] memory_max_write+0x2f9/0x3c0 [ 1196.036019][T17302] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1196.042123][T17302] ? lock_release+0x810/0x810 [ 1196.046834][T17302] cgroup_file_write+0x1e2/0x770 [ 1196.051814][T17302] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1196.057909][T17302] ? kill_css+0x370/0x370 [ 1196.062271][T17302] ? __virt_addr_valid+0x61/0x2e0 [ 1196.067347][T17302] ? kill_css+0x370/0x370 [ 1196.071719][T17302] kernfs_fop_write_iter+0x3f1/0x600 [ 1196.077056][T17302] vfs_write+0x9ed/0xdd0 [ 1196.081345][T17302] ? kernel_write+0x630/0x630 [ 1196.086067][T17302] ? __fget_files+0x26a/0x440 [ 1196.090792][T17302] ksys_write+0x12b/0x250 [ 1196.095152][T17302] ? __ia32_sys_read+0xb0/0xb0 [ 1196.099992][T17302] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1196.105922][T17302] do_syscall_64+0x39/0xb0 [ 1196.110377][T17302] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1196.116298][T17302] RIP: 0033:0x7f2ebcc8c0c9 [ 1196.120735][T17302] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1196.140383][T17302] RSP: 002b:00007f2ebda81168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1196.148825][T17302] RAX: ffffffffffffffda RBX: 00007f2ebcdabf80 RCX: 00007f2ebcc8c0c9 [ 1196.156820][T17302] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 1196.164811][T17302] RBP: 00007f2ebcce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1196.172804][T17302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1196.180794][T17302] R13: 00007fffce0a58ff R14: 00007f2ebda81300 R15: 0000000000022000 [ 1196.188814][T17302] [ 1196.201408][ T9326] Bluetooth: hci5: command 0x0419 tx timeout [ 1196.238019][T17302] memory: usage 10660kB, limit 0kB, failcnt 214 [ 1196.247981][T17302] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1196.256421][T17302] Memory cgroup stats for /syz2: [ 1196.257621][T17302] anon 118784 [ 1196.257621][T17302] file 10473472 [ 1196.257621][T17302] kernel 311296 [ 1196.257621][T17302] kernel_stack 65536 [ 1196.257621][T17302] pagetables 81920 [ 1196.257621][T17302] sec_pagetables 0 [ 1196.257621][T17302] percpu 208 [ 1196.257621][T17302] sock 0 [ 1196.257621][T17302] vmalloc 4096 [ 1196.257621][T17302] shmem 10473472 [ 1196.257621][T17302] zswap 0 [ 1196.257621][T17302] zswapped 0 [ 1196.257621][T17302] file_mapped 233472 [ 1196.257621][T17302] file_dirty 0 [ 1196.257621][T17302] file_writeback 0 [ 1196.257621][T17302] swapcached 0 [ 1196.257621][T17302] anon_thp 0 [ 1196.257621][T17302] file_thp 0 [ 1196.257621][T17302] shmem_thp 0 [ 1196.257621][T17302] inactive_anon 118784 [ 1196.257621][T17302] active_anon 10473472 [ 1196.257621][T17302] inactive_file 0 [ 1196.257621][T17302] active_file 0 [ 1196.257621][T17302] unevictable 0 [ 1196.257621][T17302] slab_reclaimable 53616 [ 1196.257621][T17302] slab_unreclaimable 78504 [ 1196.257621][T17302] slab 132120 [ 1196.365149][T17302] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17301,uid=0 [ 1196.406981][T17302] Memory cgroup out of memory: Killed process 17301 (syz-executor.2) total-vm:54540kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 18:35:16 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r4 = gettid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r5}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, r6, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='\x00') write$cgroup_int(r1, &(0x7f0000000600), 0x12) 18:35:16 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) 18:35:16 executing program 1: syz_clone(0x0, &(0x7f0000000640)="ba", 0x1, 0x0, 0x0, 0x0) 18:35:16 executing program 4: syz_clone(0x0, &(0x7f0000000640), 0x0, &(0x7f0000000740), &(0x7f0000000780), 0x0) 18:35:16 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xc3, &(0x7f0000000180)=""/195, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:35:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000380)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) [ 1196.831581][T17226] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1196.871444][T17226] CPU: 0 PID: 17226 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1196.881906][T17226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1196.891982][T17226] Call Trace: [ 1196.895274][T17226] [ 1196.898232][T17226] dump_stack_lvl+0xd1/0x138 [ 1196.902861][T17226] dump_header+0x10b/0x85f [ 1196.907337][T17226] oom_kill_process.cold+0x10/0x15 [ 1196.912502][T17226] out_of_memory+0x35c/0x14a0 [ 1196.917226][T17226] ? find_held_lock+0x2d/0x110 [ 1196.922026][T17226] ? oom_killer_disable+0x280/0x280 [ 1196.927263][T17226] ? find_held_lock+0x2d/0x110 [ 1196.932074][T17226] mem_cgroup_out_of_memory+0x206/0x270 [ 1196.937683][T17226] ? mem_cgroup_margin+0x130/0x130 [ 1196.942829][T17226] ? lock_downgrade+0x6e0/0x6e0 [ 1196.947723][T17226] try_charge_memcg+0xefb/0x12f0 [ 1196.952708][T17226] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1196.958713][T17226] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1196.964468][T17226] ? lock_downgrade+0x6e0/0x6e0 [ 1196.969346][T17226] ? lock_downgrade+0x6e0/0x6e0 [ 1196.974234][T17226] obj_cgroup_charge+0x2af/0x5e0 [ 1196.979214][T17226] kmem_cache_alloc_lru+0x145/0x760 [ 1196.984437][T17226] ? sock_alloc_inode+0x27/0x1d0 [ 1196.989424][T17226] sock_alloc_inode+0x27/0x1d0 [ 1196.994253][T17226] ? sock_free_inode+0x30/0x30 [ 1196.999046][T17226] alloc_inode+0x61/0x230 [ 1197.003418][T17226] new_inode_pseudo+0x17/0x80 [ 1197.008129][T17226] sock_alloc+0x40/0x260 [ 1197.012402][T17226] __sock_create+0xbd/0x790 [ 1197.016951][T17226] __sys_socket+0x133/0x250 [ 1197.021487][T17226] ? __sys_socket_file+0x1f0/0x1f0 [ 1197.026646][T17226] __x64_sys_socket+0x73/0xb0 [ 1197.031354][T17226] do_syscall_64+0x39/0xb0 [ 1197.035809][T17226] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1197.041739][T17226] RIP: 0033:0x7f2ebcc8d747 [ 1197.046174][T17226] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1197.065847][T17226] RSP: 002b:00007fffce0a5478 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 1197.074298][T17226] RAX: ffffffffffffffda RBX: 00007fffce0a5be0 RCX: 00007f2ebcc8d747 18:35:16 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) [ 1197.082297][T17226] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 1197.090288][T17226] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007fffce0a59f0 [ 1197.098277][T17226] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 1197.106271][T17226] R13: 0000000000123ef2 R14: 000000000000000e R15: 00007fffce0a5c20 [ 1197.114283][T17226] [ 1197.498371][T17226] memory: usage 10372kB, limit 0kB, failcnt 233 [ 1197.513220][T17226] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1197.520097][T17226] Memory cgroup stats for /syz2: [ 1197.520315][T17226] anon 40960 [ 1197.520315][T17226] file 10473472 [ 1197.520315][T17226] kernel 106496 [ 1197.520315][T17226] kernel_stack 0 [ 1197.520315][T17226] pagetables 8192 [ 1197.520315][T17226] sec_pagetables 0 [ 1197.520315][T17226] percpu 64 [ 1197.520315][T17226] sock 0 [ 1197.520315][T17226] vmalloc 0 [ 1197.520315][T17226] shmem 10473472 [ 1197.520315][T17226] zswap 0 [ 1197.520315][T17226] zswapped 0 [ 1197.520315][T17226] file_mapped 188416 [ 1197.520315][T17226] file_dirty 0 [ 1197.520315][T17226] file_writeback 0 [ 1197.520315][T17226] swapcached 0 [ 1197.520315][T17226] anon_thp 0 [ 1197.520315][T17226] file_thp 0 [ 1197.520315][T17226] shmem_thp 0 [ 1197.520315][T17226] inactive_anon 40960 [ 1197.520315][T17226] active_anon 10473472 [ 1197.520315][T17226] inactive_file 0 [ 1197.520315][T17226] active_file 0 [ 1197.520315][T17226] unevictable 0 [ 1197.520315][T17226] slab_reclaimable 37992 [ 1197.520315][T17226] slab_unreclaimable 44080 [ 1197.520315][T17226] slab 82072 [ 1197.646574][T17226] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17226,uid=0 [ 1197.676984][T17226] Memory cgroup out of memory: Killed process 17226 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1197.719786][T17226] socket: no more sockets [ 1198.142162][ T34] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.473668][ T34] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.912379][ T34] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.131197][ T34] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.522455][ T34] device hsr_slave_0 left promiscuous mode [ 1200.542030][ T34] device hsr_slave_1 left promiscuous mode [ 1200.581815][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1200.589230][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1200.617595][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1200.646386][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1200.672943][ T34] device bridge_slave_1 left promiscuous mode [ 1200.679191][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.705211][ T34] device bridge_slave_0 left promiscuous mode [ 1200.729905][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.775546][ T34] device veth1_macvtap left promiscuous mode [ 1200.807263][ T34] device veth0_macvtap left promiscuous mode [ 1200.832078][ T34] device veth1_vlan left promiscuous mode [ 1200.837931][ T34] device veth0_vlan left promiscuous mode [ 1201.610537][ T34] team0 (unregistering): Port device team_slave_1 removed [ 1201.682983][ T34] team0 (unregistering): Port device team_slave_0 removed [ 1201.731930][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1201.777751][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1202.020617][ T34] bond0 (unregistering): Released all slaves 18:35:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000002380)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1803, 0x4, @perf_bp={&(0x7f0000000280)}, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100010000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x18, 0x0, &(0x7f0000000200)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x1, 0x1000, &(0x7f0000000d80)=""/4096, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002080)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)=0xe0ffffff) bpf$ITER_CREATE(0x21, &(0x7f0000002480), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x204d, &(0x7f00000005c0)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)={&(0x7f0000000000)='./file0\x00'}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)=[0x0, 0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x3, 0x565e4ff5, 0x0, 0x0, 0x11, 0xffffffffffffffff, 0x0, '\x00', r1, r0, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r2, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x300, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xc, 0x0, 0x0, &(0x7f0000000a80)='GPL\x00', 0x0, 0x77, &(0x7f0000000ac0)=""/119, 0x41000, 0x15, '\x00', r1, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0x0, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="9520000004000000a0c5e3a5fcffffff4d810c001000000018260000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f00000020c0)={0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000024c0)=[0xffffffffffffffff]}, 0x80) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000001f40), 0x6e, &(0x7f0000000a00), 0x0, &(0x7f00000022c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000c00)={0x3, 0x80, 0x9, 0x8, 0x4, 0x0, 0x0, 0x1, 0xc5c14172516d3239, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xffff, 0x4, 0x0, 0x20008001, 0x0, 0xff, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) syz_clone(0x40062000, 0x0, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)) 18:35:34 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) 18:35:34 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r4 = gettid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r5}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, r6, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='\x00') write$cgroup_int(r1, &(0x7f0000000600), 0x12) 18:35:34 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000100)='cgroup.subtree_control\x00'}, 0x30) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, r1, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)=':&\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) close(r0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'wlan0\x00'}) 18:35:34 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000170000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x0, 0xb, r1}, 0x14) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc020660b, &(0x7f0000000040)) 18:35:34 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) 18:35:34 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x83577e5f7d9b6d10, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) 18:35:34 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) 18:35:34 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)=ANY=[@ANYBLOB]) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x0, 0xc0, 0xfb, 0x20, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3fad, 0xfe}, 0x10200, 0x6, 0x1c000000, 0x1, 0x0, 0x0, 0xe34, 0x0, 0x3, 0x0, 0x7}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r1}, 0x38) 18:35:34 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x83577e5f7d9b6d10, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) 18:35:34 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)=':&\x00') perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x80, 0x9, 0x93, 0x1, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfffffffb, 0x1, @perf_bp={&(0x7f0000000180), 0xf}, 0x8000, 0x0, 0x0, 0x1, 0x4, 0x0, 0x8001, 0x0, 0xae8, 0x0, 0x1f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000740), 0x48) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0x87, 0x4, 0x7, 0x0, 0x0, 0x68f, 0xcd90c, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x51481134e7dab46b, 0x0, 0x5, 0x3, 0x588, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0, 0xb, 0xffffffffffffffff, 0x8) 18:35:34 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000170000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x0, 0xb, r1}, 0x14) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc020660b, &(0x7f0000000040)) [ 1214.961548][ T5109] Bluetooth: hci2: command 0x0406 tx timeout 18:35:34 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1217.022986][ T9326] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1217.030735][ T9326] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1217.052235][ T9326] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1217.059814][ T9326] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1217.067455][ T9326] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1217.430624][T17646] chnl_net:caif_netlink_parms(): no params data found [ 1217.567610][T17646] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.581421][T17646] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.589639][T17646] device bridge_slave_0 entered promiscuous mode [ 1217.623588][T17646] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.652204][T17646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.660342][T17646] device bridge_slave_1 entered promiscuous mode [ 1217.720703][T17646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1217.743795][T17646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1217.803896][T17646] team0: Port device team_slave_0 added [ 1217.812400][T17646] team0: Port device team_slave_1 added [ 1217.856126][T17646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1217.870954][T17646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1217.907269][T17646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1217.929093][T17646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1217.938892][T17646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1217.972947][T17646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1218.038798][T17646] device hsr_slave_0 entered promiscuous mode [ 1218.045856][T17646] device hsr_slave_1 entered promiscuous mode [ 1218.057695][T17646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1218.066305][T17646] Cannot create hsr debugfs directory [ 1218.512211][T17646] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1218.522239][T17646] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1218.532490][T17646] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1218.542418][T17646] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1218.669815][T17646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1218.699802][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1218.712174][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1218.723528][T17646] 8021q: adding VLAN 0 to HW filter on device team0 [ 1218.745869][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1218.755792][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1218.765074][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.772256][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1218.794201][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1218.803033][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1218.812659][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1218.821092][ T897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.828239][ T897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1218.836587][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1218.845753][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1218.855545][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1218.874561][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1218.882814][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1218.892145][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1218.900525][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1218.914154][T17646] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1218.928673][T17646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1218.937989][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1218.947073][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1219.121520][ T9326] Bluetooth: hci5: command 0x0409 tx timeout [ 1219.255879][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1219.273888][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1219.294481][T17646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1219.314474][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1219.325795][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1219.345067][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1219.353282][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1219.370706][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1219.378561][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1219.388120][T17646] device veth0_vlan entered promiscuous mode [ 1219.398712][T17646] device veth1_vlan entered promiscuous mode [ 1219.418738][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1219.430639][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1219.438814][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1219.452710][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1219.464383][T17646] device veth0_macvtap entered promiscuous mode [ 1219.475749][T17646] device veth1_macvtap entered promiscuous mode [ 1219.488134][T17646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1219.498954][T17646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.509095][T17646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1219.519714][T17646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.530576][T17646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1219.541075][T17646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.551113][T17646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1219.561933][T17646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.574702][T17646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1219.585226][T17646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.596787][T17646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1219.607232][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1219.615717][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1219.624029][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1219.633023][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1219.643794][T17646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1219.654685][T17646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.664833][T17646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1219.677360][T17646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.689033][T17646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1219.699631][T17646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.709607][T17646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1219.720751][T17646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.730679][T17646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1219.741174][T17646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.752754][T17646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1219.760475][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1219.769118][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1219.782611][T17646] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.791431][T17646] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.800112][T17646] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.809209][T17646] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.870132][T12946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1219.884888][T12946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1219.896971][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1219.910477][T12946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1219.919778][T12946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1219.929840][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1220.060844][T17703] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1220.071692][T17703] CPU: 1 PID: 17703 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1220.082142][T17703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1220.092209][T17703] Call Trace: [ 1220.095491][T17703] [ 1220.098429][T17703] dump_stack_lvl+0xd1/0x138 [ 1220.103044][T17703] dump_header+0x10b/0x85f [ 1220.107498][T17703] oom_kill_process.cold+0x10/0x15 [ 1220.112636][T17703] out_of_memory+0x35c/0x14a0 [ 1220.117377][T17703] ? oom_killer_disable+0x280/0x280 [ 1220.122628][T17703] ? mark_held_locks+0x9f/0xe0 [ 1220.127409][T17703] mem_cgroup_out_of_memory+0x206/0x270 [ 1220.132976][T17703] ? mem_cgroup_margin+0x130/0x130 [ 1220.138127][T17703] memory_max_write+0x2f9/0x3c0 [ 1220.142989][T17703] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1220.149080][T17703] ? cgroup_file_write+0x8e/0x770 [ 1220.154126][T17703] cgroup_file_write+0x1e2/0x770 [ 1220.159080][T17703] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1220.165156][T17703] ? kill_css+0x370/0x370 [ 1220.169498][T17703] ? __virt_addr_valid+0x61/0x2e0 [ 1220.174550][T17703] ? kill_css+0x370/0x370 [ 1220.178892][T17703] kernfs_fop_write_iter+0x3f1/0x600 [ 1220.184215][T17703] vfs_write+0x9ed/0xdd0 [ 1220.188501][T17703] ? kernel_write+0x630/0x630 [ 1220.193233][T17703] ? __fget_files+0x26a/0x440 [ 1220.197944][T17703] ksys_write+0x12b/0x250 [ 1220.202320][T17703] ? __ia32_sys_read+0xb0/0xb0 [ 1220.207096][T17703] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1220.213012][T17703] do_syscall_64+0x39/0xb0 [ 1220.217447][T17703] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1220.223353][T17703] RIP: 0033:0x7fe904e8c0c9 [ 1220.227784][T17703] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1220.247398][T17703] RSP: 002b:00007fe905bc0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1220.255822][T17703] RAX: ffffffffffffffda RBX: 00007fe904fabf80 RCX: 00007fe904e8c0c9 [ 1220.263799][T17703] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 1220.271773][T17703] RBP: 00007fe904ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1220.279748][T17703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1220.287733][T17703] R13: 00007ffee6072c7f R14: 00007fe905bc0300 R15: 0000000000022000 [ 1220.295733][T17703] [ 1220.305686][T17703] memory: usage 10648kB, limit 0kB, failcnt 250 [ 1220.313925][T17703] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1220.321268][T17703] Memory cgroup stats for /syz2: [ 1220.325020][T17703] anon 114688 [ 1220.325020][T17703] file 10473472 [ 1220.325020][T17703] kernel 307200 [ 1220.325020][T17703] kernel_stack 65536 [ 1220.325020][T17703] pagetables 77824 [ 1220.325020][T17703] sec_pagetables 0 [ 1220.325020][T17703] percpu 208 [ 1220.325020][T17703] sock 0 [ 1220.325020][T17703] vmalloc 4096 [ 1220.325020][T17703] shmem 10473472 [ 1220.325020][T17703] zswap 0 [ 1220.325020][T17703] zswapped 0 [ 1220.325020][T17703] file_mapped 233472 [ 1220.325020][T17703] file_dirty 0 [ 1220.325020][T17703] file_writeback 0 [ 1220.325020][T17703] swapcached 0 [ 1220.325020][T17703] anon_thp 0 [ 1220.325020][T17703] file_thp 0 [ 1220.325020][T17703] shmem_thp 0 [ 1220.325020][T17703] inactive_anon 77824 [ 1220.325020][T17703] active_anon 10473472 [ 1220.325020][T17703] inactive_file 0 [ 1220.325020][T17703] active_file 0 [ 1220.325020][T17703] unevictable 0 [ 1220.325020][T17703] slab_reclaimable 54920 [ 1220.325020][T17703] slab_unreclaimable 78504 [ 1220.325020][T17703] slab 133424 [ 1220.429189][T17703] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17702,uid=0 18:35:39 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) gettid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r4}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='\x00') write$cgroup_int(r1, &(0x7f0000000600), 0x12) 18:35:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x0, 0x0, 0x9}, 0x48) 18:35:39 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x83577e5f7d9b6d10, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) 18:35:39 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000000c40)) 18:35:39 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000004c0)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:35:39 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mkdir(&(0x7f00000005c0)='./file0/file0\x00', 0x0) [ 1220.446190][T17703] Memory cgroup out of memory: Killed process 17702 (syz-executor.2) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 18:35:39 executing program 1: socketpair(0x10, 0x3, 0x0, &(0x7f0000000080)) 18:35:39 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mkdir(&(0x7f00000005c0)='./file0/file0\x00', 0x0) 18:35:39 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20000000, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) getpid() syz_clone(0x61000000, &(0x7f0000000000)='+', 0x1, &(0x7f0000000200), 0x0, &(0x7f0000000280)="94cd263f1eace399c144fcdfcb9cac07d5e8b03eb0051fc30c8a8e4aca358dfb54f092eac8e0398c124b30963e2794c53614d38e6344cf08116a230dbca85e11d22102219b4de87e51d9e1fa2fd1eb5dae2a0b2b9567f0616a10") syz_open_procfs$namespace(r0, 0x0) 18:35:39 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x83577e5f7d9b6d10, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0x9) [ 1220.566140][T17646] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1220.594375][T17646] CPU: 0 PID: 17646 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1220.604832][T17646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1220.614906][T17646] Call Trace: [ 1220.618205][T17646] [ 1220.621162][T17646] dump_stack_lvl+0xd1/0x138 [ 1220.625796][T17646] dump_header+0x10b/0x85f [ 1220.630300][T17646] oom_kill_process.cold+0x10/0x15 [ 1220.635459][T17646] out_of_memory+0x35c/0x14a0 [ 1220.640186][T17646] ? find_held_lock+0x2d/0x110 [ 1220.644994][T17646] ? oom_killer_disable+0x280/0x280 [ 1220.650235][T17646] ? find_held_lock+0x2d/0x110 [ 1220.655042][T17646] mem_cgroup_out_of_memory+0x206/0x270 [ 1220.660622][T17646] ? mem_cgroup_margin+0x130/0x130 [ 1220.665756][T17646] ? lock_downgrade+0x6e0/0x6e0 [ 1220.670630][T17646] try_charge_memcg+0xefb/0x12f0 [ 1220.675591][T17646] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1220.681585][T17646] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1220.687330][T17646] ? lock_downgrade+0x6e0/0x6e0 [ 1220.692211][T17646] obj_cgroup_charge+0x2af/0x5e0 [ 1220.697168][T17646] kmem_cache_alloc_lru+0x145/0x760 [ 1220.702371][T17646] ? __d_alloc+0x32/0x980 [ 1220.706722][T17646] __d_alloc+0x32/0x980 [ 1220.710899][T17646] d_alloc+0x4e/0x240 [ 1220.714898][T17646] __lookup_hash+0xc8/0x180 [ 1220.719419][T17646] filename_create+0x1d6/0x4a0 [ 1220.724203][T17646] ? filename_parentat+0x5a0/0x5a0 [ 1220.729326][T17646] ? lock_downgrade+0x6e0/0x6e0 [ 1220.734192][T17646] ? __virt_addr_valid+0x61/0x2e0 [ 1220.739233][T17646] ? __phys_addr+0xc8/0x140 [ 1220.743760][T17646] do_mkdirat+0x9d/0x2f0 [ 1220.748026][T17646] ? __ia32_sys_mknod+0xb0/0xb0 [ 1220.752902][T17646] ? getname_flags.part.0+0x1dd/0x4f0 [ 1220.758297][T17646] __x64_sys_mkdirat+0x119/0x170 [ 1220.763287][T17646] do_syscall_64+0x39/0xb0 [ 1220.767723][T17646] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1220.773625][T17646] RIP: 0033:0x7fe904e8b0e7 [ 1220.778048][T17646] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1220.797671][T17646] RSP: 002b:00007ffee6072ed8 EFLAGS: 00000206 ORIG_RAX: 0000000000000102 [ 1220.806096][T17646] RAX: ffffffffffffffda RBX: 00007ffee6072f60 RCX: 00007fe904e8b0e7 [ 1220.814074][T17646] RDX: 00000000000001ff RSI: 00007ffee6072f60 RDI: 00000000ffffff9c [ 1220.822048][T17646] RBP: 00007ffee6072f3c R08: 0000000000000000 R09: 0000000000000003 [ 1220.830020][T17646] R10: 00007ffee6072c77 R11: 0000000000000206 R12: 0000000000000032 [ 1220.838019][T17646] R13: 0000000000129d81 R14: 000000000000000e R15: 00007ffee6072fa0 [ 1220.846014][T17646] 18:35:40 executing program 4: perf_event_open$cgroup(&(0x7f0000004440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1220.863248][T17646] memory: usage 10368kB, limit 0kB, failcnt 269 [ 1220.869528][T17646] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1220.933200][T17646] Memory cgroup stats for /syz2: [ 1220.933431][T17646] anon 40960 [ 1220.933431][T17646] file 10473472 [ 1220.933431][T17646] kernel 102400 [ 1220.933431][T17646] kernel_stack 0 [ 1220.933431][T17646] pagetables 8192 [ 1220.933431][T17646] sec_pagetables 0 [ 1220.933431][T17646] percpu 64 [ 1220.933431][T17646] sock 0 [ 1220.933431][T17646] vmalloc 0 [ 1220.933431][T17646] shmem 10473472 [ 1220.933431][T17646] zswap 0 [ 1220.933431][T17646] zswapped 0 [ 1220.933431][T17646] file_mapped 188416 [ 1220.933431][T17646] file_dirty 0 18:35:40 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x83577e5f7d9b6d10, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0x9) [ 1220.933431][T17646] file_writeback 0 [ 1220.933431][T17646] swapcached 0 [ 1220.933431][T17646] anon_thp 0 [ 1220.933431][T17646] file_thp 0 [ 1220.933431][T17646] shmem_thp 0 [ 1220.933431][T17646] inactive_anon 40960 [ 1220.933431][T17646] active_anon 10473472 [ 1220.933431][T17646] inactive_file 0 [ 1220.933431][T17646] active_file 0 [ 1220.933431][T17646] unevictable 0 [ 1220.933431][T17646] slab_reclaimable 35416 [ 1220.933431][T17646] slab_unreclaimable 44080 [ 1220.933431][T17646] slab 79496 [ 1221.104018][T17646] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17646,uid=0 [ 1221.138551][T17646] Memory cgroup out of memory: Killed process 17646 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1221.202064][ T9326] Bluetooth: hci5: command 0x041b tx timeout 18:35:44 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) gettid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r4}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='\x00') write$cgroup_int(r1, &(0x7f0000000600), 0x12) 18:35:44 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mkdir(&(0x7f00000005c0)='./file0/file0\x00', 0x0) 18:35:44 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x200081, 0x0) 18:35:44 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) 18:35:44 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x83577e5f7d9b6d10, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0x9) 18:35:44 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20000000, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) getpid() syz_clone(0x61000000, &(0x7f0000000000)='+', 0x1, &(0x7f0000000200), 0x0, &(0x7f0000000280)="94cd263f1eace399c144fcdfcb9cac07d5e8b03eb0051fc30c8a8e4aca358dfb54f092eac8e0398c124b30963e2794c53614d38e6344cf08116a230dbca85e11d22102219b4de87e51d9e1fa2fd1eb5dae2a0b2b9567f0616a10") syz_open_procfs$namespace(r0, 0x0) 18:35:44 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x83577e5f7d9b6d10, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, 0x0, 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) 18:35:44 executing program 4: bpf$PROG_LOAD_XDP(0x6, &(0x7f0000000300)={0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:35:44 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mkdir(&(0x7f00000005c0)='./file0/file0\x00', 0x0) [ 1225.271500][ T34] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 18:35:44 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000980)="b0ff04c66b0d698cb89e2fe088ca1f74ffff10602000630277fbac141414e000126a46647b79", 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) 18:35:44 executing program 4: bpf$BPF_GET_BTF_INFO(0x8, 0x0, 0x0) 18:35:44 executing program 0: syz_clone(0x224200, 0x0, 0x0, 0x0, 0x0, 0x0) 18:35:45 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x83577e5f7d9b6d10, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, 0x0, 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) 18:35:45 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) gettid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r4}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='\x00') write$cgroup_int(r1, &(0x7f0000000600), 0x12) 18:35:45 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff}, 0x80) 18:35:45 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001680)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x100}, 0x1) 18:35:45 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000700)) [ 1225.762024][ T34] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 18:35:45 executing program 5: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800a0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 18:35:45 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80001, 0x0) 18:35:45 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x62, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) [ 1225.923720][ T34] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 18:35:45 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x83577e5f7d9b6d10, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, 0x0, 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) 18:35:45 executing program 1: syz_clone(0x30813180, 0x0, 0x0, 0x0, 0x0, 0x0) 18:35:45 executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000540)=':', &(0x7f0000000640)="10"}, 0x48) 18:35:45 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002e00)={0x6, 0x0, 0x0, &(0x7f0000002c40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:35:45 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x83577e5f7d9b6d10, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x9) [ 1226.823541][ T34] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.748505][ T34] device hsr_slave_0 left promiscuous mode [ 1227.762183][ T34] device hsr_slave_1 left promiscuous mode [ 1227.773860][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1227.791555][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1227.813743][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1227.821164][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1227.843560][ T34] device bridge_slave_1 left promiscuous mode [ 1227.849794][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.882810][ T34] device bridge_slave_0 left promiscuous mode [ 1227.889032][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.919468][ T34] device veth1_macvtap left promiscuous mode [ 1227.941369][ T34] device veth0_macvtap left promiscuous mode [ 1227.947504][ T34] device veth1_vlan left promiscuous mode [ 1227.961632][ T34] device veth0_vlan left promiscuous mode [ 1228.428401][ T9326] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1228.436499][ T9326] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1228.445378][ T9326] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1228.456407][ T9326] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1228.474907][ T9326] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1228.509052][ T34] team0 (unregistering): Port device team_slave_1 removed [ 1228.521049][ T34] team0 (unregistering): Port device team_slave_0 removed [ 1228.534300][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1228.547045][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1228.612356][ T34] bond0 (unregistering): Released all slaves [ 1228.900205][T17808] chnl_net:caif_netlink_parms(): no params data found [ 1228.991190][T17808] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.999225][T17808] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.007740][T17808] device bridge_slave_0 entered promiscuous mode [ 1229.031512][T17808] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.038678][T17808] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.062476][T17808] device bridge_slave_1 entered promiscuous mode [ 1229.115979][T17808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1229.145353][T17808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1229.195414][T17808] team0: Port device team_slave_0 added [ 1229.213673][T17808] team0: Port device team_slave_1 added [ 1229.272904][T17808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1229.279871][T17808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1229.317739][T17808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1229.330597][T17808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1229.337809][T17808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1229.369601][T17808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1229.446308][T17808] device hsr_slave_0 entered promiscuous mode [ 1229.462951][T17808] device hsr_slave_1 entered promiscuous mode [ 1229.471745][T17808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1229.479325][T17808] Cannot create hsr debugfs directory [ 1230.156154][T17808] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1230.185223][T17808] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1230.204440][T17808] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1230.234121][T17808] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1230.321448][ T9326] Bluetooth: hci0: command 0x0406 tx timeout [ 1230.345773][T17808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1230.368653][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1230.382033][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1230.425645][T17808] 8021q: adding VLAN 0 to HW filter on device team0 [ 1230.440519][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1230.457826][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1230.468003][T13513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.475161][T13513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1230.513523][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1230.530858][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1230.540224][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1230.557221][T10893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.561417][ T9326] Bluetooth: hci5: command 0x0409 tx timeout [ 1230.564342][T10893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1230.588357][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1230.622224][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1230.640195][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1230.662993][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1230.691022][T17808] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1230.731331][T17808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1230.754069][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1230.766288][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1230.782089][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1230.790639][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1230.820747][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1230.836616][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1231.292177][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1231.299650][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1231.317563][T17808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1231.394694][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1231.412180][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1231.439881][T17808] device veth0_vlan entered promiscuous mode [ 1231.447191][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1231.457762][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1231.482749][T17808] device veth1_vlan entered promiscuous mode [ 1231.489657][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1231.500833][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1231.512589][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1231.556432][T17808] device veth0_macvtap entered promiscuous mode [ 1231.568818][T17808] device veth1_macvtap entered promiscuous mode [ 1231.576531][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1231.585385][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1231.594069][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1231.603181][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1231.610994][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1231.630135][T17808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1231.640769][T17808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.650781][T17808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1231.665109][T17808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.675096][T17808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1231.685940][T17808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.700356][T17808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1231.710960][T17808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.721350][T17808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1231.731850][T17808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.742563][T17808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1231.751209][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1231.760883][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1231.785980][T17808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1231.797960][T17808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.808194][T17808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1231.819154][T17808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.829363][T17808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1231.840067][T17808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.861884][T17808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1231.879079][T17808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.892501][T17808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1231.911589][T17808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.933302][T17808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1231.942359][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1231.951067][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1231.979653][T17808] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.989526][T17808] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.999235][T17808] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.009896][T17808] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.101771][ T1070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.109796][ T1070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.164703][ T1070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.173536][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1232.183450][ T1070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.194681][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1232.613144][T17876] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1232.633371][T17876] CPU: 1 PID: 17876 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1232.643831][T17876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1232.650239][ T9326] Bluetooth: hci5: command 0x041b tx timeout [ 1232.653883][T17876] Call Trace: [ 1232.653894][T17876] [ 1232.653905][T17876] dump_stack_lvl+0xd1/0x138 [ 1232.653945][T17876] dump_header+0x10b/0x85f [ 1232.675513][T17876] oom_kill_process.cold+0x10/0x15 [ 1232.680676][T17876] out_of_memory+0x35c/0x14a0 [ 1232.685412][T17876] ? oom_killer_disable+0x280/0x280 [ 1232.690651][T17876] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1232.696839][T17876] ? preempt_schedule_thunk+0x1a/0x20 [ 1232.702268][T17876] mem_cgroup_out_of_memory+0x206/0x270 [ 1232.707862][T17876] ? mem_cgroup_margin+0x130/0x130 [ 1232.713029][T17876] memory_max_write+0x2f9/0x3c0 [ 1232.717895][T17876] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1232.723983][T17876] ? lock_release+0x810/0x810 [ 1232.728679][T17876] cgroup_file_write+0x1e2/0x770 [ 1232.733640][T17876] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1232.739718][T17876] ? kill_css+0x370/0x370 [ 1232.744061][T17876] ? __virt_addr_valid+0x61/0x2e0 [ 1232.749114][T17876] ? kill_css+0x370/0x370 [ 1232.753458][T17876] kernfs_fop_write_iter+0x3f1/0x600 [ 1232.758768][T17876] vfs_write+0x9ed/0xdd0 [ 1232.763029][T17876] ? kernel_write+0x630/0x630 [ 1232.767722][T17876] ? __fget_files+0x26a/0x440 [ 1232.772685][T17876] ksys_write+0x12b/0x250 [ 1232.777024][T17876] ? __ia32_sys_read+0xb0/0xb0 [ 1232.781799][T17876] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1232.787718][T17876] do_syscall_64+0x39/0xb0 [ 1232.792155][T17876] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1232.798063][T17876] RIP: 0033:0x7f6c5fa8c0c9 [ 1232.802485][T17876] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1232.822098][T17876] RSP: 002b:00007f6c60738168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1232.830522][T17876] RAX: ffffffffffffffda RBX: 00007f6c5fbabf80 RCX: 00007f6c5fa8c0c9 [ 1232.838500][T17876] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 1232.846478][T17876] RBP: 00007f6c5fae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1232.854451][T17876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1232.862427][T17876] R13: 00007ffeb71be2df R14: 00007f6c60738300 R15: 0000000000022000 [ 1232.870423][T17876] [ 1232.903938][T17876] memory: usage 10656kB, limit 0kB, failcnt 286 [ 1232.910538][T17876] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1232.927599][T17876] Memory cgroup stats for /syz2: [ 1232.930597][T17876] anon 118784 [ 1232.930597][T17876] file 10473472 [ 1232.930597][T17876] kernel 307200 [ 1232.930597][T17876] kernel_stack 65536 [ 1232.930597][T17876] pagetables 77824 [ 1232.930597][T17876] sec_pagetables 0 [ 1232.930597][T17876] percpu 208 [ 1232.930597][T17876] sock 0 [ 1232.930597][T17876] vmalloc 4096 [ 1232.930597][T17876] shmem 10473472 [ 1232.930597][T17876] zswap 0 [ 1232.930597][T17876] zswapped 0 [ 1232.930597][T17876] file_mapped 233472 [ 1232.930597][T17876] file_dirty 0 [ 1232.930597][T17876] file_writeback 0 [ 1232.930597][T17876] swapcached 0 [ 1232.930597][T17876] anon_thp 0 [ 1232.930597][T17876] file_thp 0 [ 1232.930597][T17876] shmem_thp 0 [ 1232.930597][T17876] inactive_anon 118784 [ 1232.930597][T17876] active_anon 10473472 [ 1232.930597][T17876] inactive_file 0 [ 1232.930597][T17876] active_file 0 [ 1232.930597][T17876] unevictable 0 [ 1232.930597][T17876] slab_reclaimable 54920 [ 1232.930597][T17876] slab_unreclaimable 78504 [ 1232.930597][T17876] slab 133424 18:35:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'gretap0\x00'}) 18:35:52 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x11, 0x8, &(0x7f0000001ac0)=ANY=[@ANYBLOB="1800000082ffff04000000182400000876270fac"], &(0x7f0000001780)='syzkaller\x00', 0x3, 0xbc, &(0x7f00000017c0)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:35:52 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x83577e5f7d9b6d10, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x9) 18:35:52 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002e00)={0x6, 0x3, &(0x7f0000002c00)=@framed, &(0x7f0000002c40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:35:52 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000c40)={0x0, 0xb}, 0x10, 0x299df, 0xffffffffffffffff, 0x0, &(0x7f0000000c80)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_clone(0x8000000, 0x0, 0x3a, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid_for_children\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000f00)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 18:35:52 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r4 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='\x00') write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 1233.172810][T17876] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17874,uid=0 [ 1233.198558][T17876] Memory cgroup out of memory: Killed process 17876 (syz-executor.2) total-vm:54540kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 18:35:52 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x83577e5f7d9b6d10, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x9) 18:35:52 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000002c0000000000000007"], &(0x7f0000000680)=""/4096, 0x4b, 0x1000, 0x1}, 0x20) 18:35:52 executing program 5: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 18:35:52 executing program 4: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) socketpair(0xf, 0xa, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x2120) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001b40)={&(0x7f0000001b00)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001c00)) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000002080)=""/146, 0x92}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000002580)='cpu.pressure\x00', 0x2, 0x0) syz_clone(0x1000, &(0x7f00000025c0)="e5fd8e631133c58d4d1c7849c549b9258a7266438e2d500f507086a6f8dfc74a85df9f2c745d3c8fb855464a9a8691b9e2d34f89690c65c9512c3aec6fb1219d9ff9468c6687d9fed33279466777097516e7c041965879dcb5e0c1f4af57a3ecd4404e7cc02301ecbcf5e0c39cadc30911aa62a66de6fe9c8edc31059e93eb12d1022c78914559ba2bfd9ab81abdba8e478cc7232d8f124e86633e93a1c8ea6106a8ead0f470a6ca3bdb7d2eea58849dbc729c909bf74ed32c6a17047d92a898545b6c1b5e55574b2aee3efed3f85db42c72422b73304ce6eef484270fc6b45d9a80cd96c5", 0xe5, &(0x7f00000026c0), &(0x7f0000002700), &(0x7f0000002740)="2beb0844ea1b51a0751528e1eb8bdc1ef2a3dbcb9b53d9c930153993611edfc7cece1f7d8245afd4730eca616c3e028684cf8105188226bad450e1e21dcea6ddfd31feb62bae6806bbbdb7fa83c903490330225af0bd6fb842b401fd158d4d87b526528f287cd408350403d98c313967a9dba996f899f5631778af77d919c55ff03cf672702c0595881ee4a450603ddeb820fe6b70083387ade072389e92ca2c4fe1aaba3487a33565d65871ccffb5933037a67b587a90cfb69c105d819d946f7061d2") openat$tun(0xffffffffffffff9c, &(0x7f0000002e80), 0x44001, 0x0) perf_event_open$cgroup(&(0x7f0000004440)={0x2, 0x80, 0x8, 0xff, 0x7, 0x9, 0x0, 0x7, 0x8003, 0x6, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x1, 0x8}, 0x412, 0x3, 0x200, 0x9, 0x6, 0x6, 0x0, 0x0, 0x8001, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004740)={0x6, 0xb, &(0x7f00000044c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@func, @alu={0x3, 0x1, 0x7, 0x4, 0x9, 0x1, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x1, 0x4, 0x0, 0x1, 0x40, 0x4}, @jmp={0x5, 0x1, 0x6, 0x6, 0xb, 0x3, 0x8}]}, &(0x7f0000004540)='GPL\x00', 0x3, 0x3d, &(0x7f0000004580)=""/61, 0x41000, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000046c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000004700)={0x5, 0x7, 0x40, 0x8}, 0x10}, 0x80) [ 1233.377097][T17808] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 18:35:52 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x83577e5f7d9b6d10, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, 0x0, 0x0) 18:35:52 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="e3", 0x1}, {&(0x7f0000000100)='m', 0x1}], 0x2, &(0x7f0000000840)=[@ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @dev}}}], 0x38}, 0x2008840) [ 1233.432285][T17808] CPU: 0 PID: 17808 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1233.442746][T17808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1233.452825][T17808] Call Trace: [ 1233.456124][T17808] [ 1233.459074][T17808] dump_stack_lvl+0xd1/0x138 [ 1233.463708][T17808] dump_header+0x10b/0x85f [ 1233.468174][T17808] oom_kill_process.cold+0x10/0x15 [ 1233.473341][T17808] out_of_memory+0x35c/0x14a0 [ 1233.478067][T17808] ? find_held_lock+0x2d/0x110 [ 1233.482875][T17808] ? oom_killer_disable+0x280/0x280 [ 1233.488116][T17808] ? find_held_lock+0x2d/0x110 [ 1233.492927][T17808] mem_cgroup_out_of_memory+0x206/0x270 [ 1233.498514][T17808] ? mem_cgroup_margin+0x130/0x130 [ 1233.503643][T17808] ? lock_downgrade+0x6e0/0x6e0 [ 1233.508517][T17808] try_charge_memcg+0xefb/0x12f0 [ 1233.513471][T17808] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1233.519464][T17808] ? lock_downgrade+0x6e0/0x6e0 [ 1233.524335][T17808] charge_memcg+0x90/0x3b0 [ 1233.528770][T17808] __mem_cgroup_charge+0x2b/0x90 [ 1233.533715][T17808] ? _compound_head+0x5d/0x150 [ 1233.538497][T17808] __handle_mm_fault+0x187d/0x3c90 [ 1233.543629][T17808] ? vm_iomap_memory+0x190/0x190 [ 1233.548605][T17808] handle_mm_fault+0x1b6/0x850 [ 1233.553388][T17808] do_user_addr_fault+0x475/0x1210 [ 1233.558514][T17808] ? rcu_read_lock_sched_held+0x3e/0x70 [ 1233.564077][T17808] exc_page_fault+0x98/0x170 [ 1233.568676][T17808] asm_exc_page_fault+0x26/0x30 [ 1233.573798][T17808] RIP: 0033:0x7f6c5fa4a28d [ 1233.578222][T17808] Code: 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 41 57 41 56 49 89 d6 41 55 49 89 f5 41 54 49 89 fc 53 48 81 ec 28 05 00 00 <89> 8d 38 fb ff ff 64 48 8b 04 25 28 00 00 00 48 89 45 c8 48 c7 c0 [ 1233.597834][T17808] RSP: 002b:00007ffeb71bcc70 EFLAGS: 00010202 [ 1233.603907][T17808] RAX: 00000000fbad8001 RBX: 0000000000000000 RCX: 0000000000000000 [ 1233.611878][T17808] RDX: 00007ffeb71bd360 RSI: 00007f6c5fae6b43 RDI: 00007ffeb71bd1e0 [ 1233.619849][T17808] RBP: 00007ffeb71bd1c0 R08: 0000000000000000 R09: 00007ffeb71bd2d0 18:35:53 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x8, 0x4, 0x3}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001980)={r0, &(0x7f00000018c0), 0x0}, 0x20) 18:35:53 executing program 4: socketpair(0x2, 0x3, 0x0, &(0x7f0000004040)) [ 1233.627827][T17808] R10: 0000000000000231 R11: 0000000000000293 R12: 00007ffeb71bd1e0 [ 1233.635804][T17808] R13: 00007f6c5fae6b43 R14: 00007ffeb71bd360 R15: 00007ffeb71bd360 [ 1233.643795][T17808] 18:35:53 executing program 0: socketpair(0x26, 0x0, 0x0, &(0x7f0000000800)) 18:35:53 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x83577e5f7d9b6d10, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, 0x0, 0x0) 18:35:53 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000), 0xffffffffffffff17) [ 1234.288329][T17808] memory: usage 10376kB, limit 0kB, failcnt 315 [ 1234.301748][T17808] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1234.308626][T17808] Memory cgroup stats for /syz2: [ 1234.308859][T17808] anon 40960 [ 1234.308859][T17808] file 10473472 [ 1234.308859][T17808] kernel 110592 [ 1234.308859][T17808] kernel_stack 0 [ 1234.308859][T17808] pagetables 8192 [ 1234.308859][T17808] sec_pagetables 0 [ 1234.308859][T17808] percpu 64 [ 1234.308859][T17808] sock 0 [ 1234.308859][T17808] vmalloc 0 [ 1234.308859][T17808] shmem 10473472 [ 1234.308859][T17808] zswap 0 [ 1234.308859][T17808] zswapped 0 [ 1234.308859][T17808] file_mapped 188416 [ 1234.308859][T17808] file_dirty 0 [ 1234.308859][T17808] file_writeback 0 [ 1234.308859][T17808] swapcached 0 [ 1234.308859][T17808] anon_thp 0 [ 1234.308859][T17808] file_thp 0 [ 1234.308859][T17808] shmem_thp 0 [ 1234.308859][T17808] inactive_anon 40960 [ 1234.308859][T17808] active_anon 10473472 [ 1234.308859][T17808] inactive_file 0 [ 1234.308859][T17808] active_file 0 [ 1234.308859][T17808] unevictable 0 [ 1234.308859][T17808] slab_reclaimable 43528 [ 1234.308859][T17808] slab_unreclaimable 44728 [ 1234.308859][T17808] slab 88256 [ 1234.522326][T17808] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17808,uid=0 [ 1234.551364][T17808] Memory cgroup out of memory: Killed process 17808 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 18:35:56 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r4 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='\x00') write$cgroup_int(r1, &(0x7f0000000600), 0x12) 18:35:56 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r4 = gettid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r5}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, r6, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='\x00') write$cgroup_int(r1, &(0x7f0000000600), 0x12) 18:35:56 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x83577e5f7d9b6d10, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, 0x0, 0x0) 18:35:56 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r4 = gettid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r5}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, r6, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='\x00') write$cgroup_int(r1, &(0x7f0000000600), 0x12) 18:35:56 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r4 = gettid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r5}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, r6, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='\x00') write$cgroup_int(r1, &(0x7f0000000600), 0x12) 18:35:56 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r4 = gettid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r5}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, r6, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='\x00') write$cgroup_int(r1, &(0x7f0000000600), 0x12) 18:35:57 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r3 = gettid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r5, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 1237.807397][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.141854][T17947] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1238.174058][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.215999][T17947] CPU: 1 PID: 17947 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1238.226457][T17947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1238.236534][T17947] Call Trace: [ 1238.239830][T17947] [ 1238.242786][T17947] dump_stack_lvl+0xd1/0x138 [ 1238.247420][T17947] dump_header+0x10b/0x85f [ 1238.251901][T17947] oom_kill_process.cold+0x10/0x15 [ 1238.257065][T17947] out_of_memory+0x35c/0x14a0 [ 1238.261795][T17947] ? oom_killer_disable+0x280/0x280 [ 1238.267038][T17947] ? mark_held_locks+0x9f/0xe0 [ 1238.271844][T17947] mem_cgroup_out_of_memory+0x206/0x270 [ 1238.277435][T17947] ? mem_cgroup_margin+0x130/0x130 [ 1238.282607][T17947] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 1238.288458][T17947] memory_max_write+0x2f9/0x3c0 [ 1238.293349][T17947] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1238.299456][T17947] ? lock_release+0x810/0x810 [ 1238.304172][T17947] cgroup_file_write+0x1e2/0x770 [ 1238.309148][T17947] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1238.315247][T17947] ? kill_css+0x370/0x370 [ 1238.319605][T17947] ? __virt_addr_valid+0x61/0x2e0 [ 1238.324682][T17947] ? kill_css+0x370/0x370 [ 1238.329044][T17947] kernfs_fop_write_iter+0x3f1/0x600 [ 1238.334384][T17947] vfs_write+0x9ed/0xdd0 [ 1238.338663][T17947] ? kernel_write+0x630/0x630 [ 1238.343384][T17947] ? __fget_files+0x26a/0x440 [ 1238.348109][T17947] ksys_write+0x12b/0x250 [ 1238.352472][T17947] ? __ia32_sys_read+0xb0/0xb0 [ 1238.357271][T17947] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1238.363212][T17947] do_syscall_64+0x39/0xb0 [ 1238.367670][T17947] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1238.373593][T17947] RIP: 0033:0x7f4f05a8c0c9 [ 1238.378036][T17947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1238.397670][T17947] RSP: 002b:00007f4f06763168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1238.406115][T17947] RAX: ffffffffffffffda RBX: 00007f4f05babf80 RCX: 00007f4f05a8c0c9 [ 1238.414113][T17947] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 1238.422109][T17947] RBP: 00007f4f05ae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1238.430107][T17947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1238.438106][T17947] R13: 00007ffde559ed8f R14: 00007f4f06763300 R15: 0000000000022000 [ 1238.446136][T17947] [ 1238.487014][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.493388][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 18:35:58 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r3 = gettid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r5, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 18:35:58 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r3 = gettid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r5, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 18:35:58 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r4 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='\x00') write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 1238.774999][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.801485][T17947] memory: usage 10660kB, limit 0kB, failcnt 72 [ 1238.808016][T17947] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1238.821337][T17947] Memory cgroup stats for /syz4: [ 1238.833087][T17947] anon 143360 [ 1238.833087][T17947] file 10473472 [ 1238.833087][T17947] kernel 299008 [ 1238.833087][T17947] kernel_stack 65536 [ 1238.833087][T17947] pagetables 77824 [ 1238.833087][T17947] sec_pagetables 0 [ 1238.833087][T17947] percpu 208 [ 1238.833087][T17947] sock 0 [ 1238.833087][T17947] vmalloc 4096 [ 1238.833087][T17947] shmem 10473472 [ 1238.833087][T17947] zswap 0 [ 1238.833087][T17947] zswapped 0 [ 1238.833087][T17947] file_mapped 299008 18:35:58 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r3 = gettid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r5, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 1238.833087][T17947] file_dirty 0 [ 1238.833087][T17947] file_writeback 0 [ 1238.833087][T17947] swapcached 0 [ 1238.833087][T17947] anon_thp 0 [ 1238.833087][T17947] file_thp 0 [ 1238.833087][T17947] shmem_thp 0 [ 1238.833087][T17947] inactive_anon 143360 [ 1238.833087][T17947] active_anon 10473472 [ 1238.833087][T17947] inactive_file 0 [ 1238.833087][T17947] active_file 0 [ 1238.833087][T17947] unevictable 0 [ 1238.833087][T17947] slab_reclaimable 41360 [ 1238.833087][T17947] slab_unreclaimable 78504 [ 1238.833087][T17947] slab 119864 18:35:58 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x10) r3 = gettid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r5, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='\x00') [ 1239.030284][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.075923][T17947] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17945,uid=0 [ 1239.111516][T17947] Memory cgroup out of memory: Killed process 17947 (syz-executor.4) total-vm:56588kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 1239.162030][T13356] syz-executor.1 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=0 [ 1239.193406][T13356] CPU: 1 PID: 13356 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1239.203858][T13356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1239.213937][T13356] Call Trace: [ 1239.217235][T13356] [ 1239.220185][T13356] dump_stack_lvl+0xd1/0x138 [ 1239.224816][T13356] dump_header+0x10b/0x85f [ 1239.229284][T13356] oom_kill_process.cold+0x10/0x15 [ 1239.234441][T13356] out_of_memory+0x35c/0x14a0 [ 1239.239164][T13356] ? oom_killer_disable+0x280/0x280 [ 1239.244400][T13356] ? find_held_lock+0x2d/0x110 [ 1239.249212][T13356] mem_cgroup_out_of_memory+0x206/0x270 [ 1239.254804][T13356] ? mem_cgroup_margin+0x130/0x130 [ 1239.259951][T13356] ? lock_downgrade+0x6e0/0x6e0 [ 1239.264845][T13356] try_charge_memcg+0xefb/0x12f0 [ 1239.269820][T13356] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1239.275833][T13356] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1239.281596][T13356] ? lock_downgrade+0x6e0/0x6e0 [ 1239.286479][T13356] ? lock_downgrade+0x6e0/0x6e0 [ 1239.291355][T13356] ? rcu_read_unlock+0x9/0x60 [ 1239.296077][T13356] obj_cgroup_charge+0x2af/0x5e0 [ 1239.301042][T13356] ? __alloc_file+0x21/0x270 [ 1239.305661][T13356] kmem_cache_alloc+0xb5/0x430 18:35:58 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x10) r3 = gettid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r5, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='\x00') [ 1239.310454][T13356] __alloc_file+0x21/0x270 [ 1239.314903][T13356] alloc_empty_file+0x71/0x170 [ 1239.319702][T13356] path_openat+0xe1/0x2a50 [ 1239.324169][T13356] ? path_lookupat+0x840/0x840 [ 1239.328980][T13356] do_filp_open+0x1ba/0x410 [ 1239.333512][T13356] ? may_open_dev+0xf0/0xf0 [ 1239.338041][T13356] ? find_held_lock+0x2d/0x110 [ 1239.342850][T13356] ? do_raw_spin_lock+0x124/0x2b0 [ 1239.347905][T13356] ? rwlock_bug.part.0+0x90/0x90 [ 1239.352880][T13356] ? _raw_spin_unlock+0x28/0x40 [ 1239.357756][T13356] ? alloc_fd+0x2d8/0x6d0 [ 1239.362129][T13356] do_sys_openat2+0x16d/0x4c0 [ 1239.366829][T13356] ? path_umount+0x6b8/0x10b0 [ 1239.371536][T13356] ? putname+0x102/0x140 [ 1239.375812][T13356] ? build_open_flags+0x6f0/0x6f0 [ 1239.380867][T13356] ? xfd_validate_state+0x5d/0x180 [ 1239.386014][T13356] __x64_sys_openat+0x143/0x1f0 [ 1239.390891][T13356] ? __ia32_sys_open+0x1c0/0x1c0 [ 1239.395858][T13356] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1239.401788][T13356] do_syscall_64+0x39/0xb0 [ 1239.406236][T13356] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1239.412156][T13356] RIP: 0033:0x7f414688bc38 [ 1239.416590][T13356] Code: 24 18 31 c0 41 83 e2 40 75 40 89 f0 25 00 00 41 00 3d 00 00 41 00 74 32 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 40 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 1239.436216][T13356] RSP: 002b:00007fff34a098e0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 1239.444653][T13356] RAX: ffffffffffffffda RBX: 00000000000000f2 RCX: 00007f414688bc38 [ 1239.452637][T13356] RDX: 0000000000090800 RSI: 00007fff34a0aad0 RDI: 00000000ffffff9c [ 1239.460626][T13356] RBP: 00007fff34a0aaac R08: 0000000000090800 R09: 00007fff34a0aad0 [ 1239.468614][T13356] R10: 0000000000000000 R11: 0000000000000287 R12: 00007f41468e6b24 [ 1239.476601][T13356] R13: 00007fff34a0aad0 R14: 000000000000000f R15: 00007fff34a0ab10 [ 1239.484609][T13356] [ 1239.494201][T13356] memory: usage 10356kB, limit 0kB, failcnt 95 [ 1239.500390][T13356] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1239.543392][T13356] Memory cgroup stats for /syz1: [ 1239.543594][T13356] anon 45056 [ 1239.543594][T13356] file 10473472 [ 1239.543594][T13356] kernel 86016 [ 1239.543594][T13356] kernel_stack 0 [ 1239.543594][T13356] pagetables 8192 [ 1239.543594][T13356] sec_pagetables 0 [ 1239.543594][T13356] percpu 0 [ 1239.543594][T13356] sock 0 [ 1239.543594][T13356] vmalloc 0 [ 1239.543594][T13356] shmem 10473472 [ 1239.543594][T13356] zswap 0 [ 1239.543594][T13356] zswapped 0 [ 1239.543594][T13356] file_mapped 200704 [ 1239.543594][T13356] file_dirty 0 [ 1239.543594][T13356] file_writeback 0 [ 1239.543594][T13356] swapcached 0 [ 1239.543594][T13356] anon_thp 0 [ 1239.543594][T13356] file_thp 0 [ 1239.543594][T13356] shmem_thp 0 [ 1239.543594][T13356] inactive_anon 45056 [ 1239.543594][T13356] active_anon 10473472 [ 1239.543594][T13356] inactive_file 0 [ 1239.543594][T13356] active_file 0 [ 1239.543594][T13356] unevictable 0 [ 1239.543594][T13356] slab_reclaimable 33464 [ 1239.543594][T13356] slab_unreclaimable 32296 [ 1239.543594][T13356] slab 65760 [ 1239.647424][T13356] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13356,uid=0 [ 1239.676541][T13356] Memory cgroup out of memory: Killed process 13356 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1239.704004][T15624] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1239.725892][T15624] CPU: 0 PID: 15624 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1239.736338][T15624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1239.746395][T15624] Call Trace: [ 1239.749673][T15624] [ 1239.752606][T15624] dump_stack_lvl+0xd1/0x138 [ 1239.757211][T15624] dump_header+0x10b/0x85f [ 1239.761647][T15624] oom_kill_process.cold+0x10/0x15 [ 1239.766779][T15624] out_of_memory+0x35c/0x14a0 [ 1239.771479][T15624] ? oom_killer_disable+0x280/0x280 [ 1239.776693][T15624] ? find_held_lock+0x2d/0x110 [ 1239.781476][T15624] mem_cgroup_out_of_memory+0x206/0x270 [ 1239.787035][T15624] ? mem_cgroup_margin+0x130/0x130 [ 1239.792158][T15624] ? lock_downgrade+0x6e0/0x6e0 [ 1239.797025][T15624] try_charge_memcg+0xefb/0x12f0 [ 1239.801974][T15624] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1239.807961][T15624] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1239.813695][T15624] ? lock_downgrade+0x6e0/0x6e0 [ 1239.818569][T15624] obj_cgroup_charge+0x2af/0x5e0 [ 1239.823517][T15624] kmem_cache_alloc_lru+0x145/0x760 [ 1239.828726][T15624] ? __d_alloc+0x32/0x980 [ 1239.833069][T15624] __d_alloc+0x32/0x980 [ 1239.837238][T15624] d_alloc+0x4e/0x240 [ 1239.841231][T15624] __lookup_hash+0xc8/0x180 [ 1239.845754][T15624] filename_create+0x1d6/0x4a0 [ 1239.850529][T15624] ? filename_parentat+0x5a0/0x5a0 [ 1239.855650][T15624] ? lock_downgrade+0x6e0/0x6e0 [ 1239.860508][T15624] ? __virt_addr_valid+0x61/0x2e0 [ 1239.865545][T15624] ? __phys_addr+0xc8/0x140 [ 1239.870064][T15624] do_mkdirat+0x9d/0x2f0 [ 1239.874324][T15624] ? __ia32_sys_mknod+0xb0/0xb0 [ 1239.879191][T15624] ? getname_flags.part.0+0x1dd/0x4f0 [ 1239.884578][T15624] __x64_sys_mkdirat+0x119/0x170 [ 1239.889531][T15624] do_syscall_64+0x39/0xb0 [ 1239.893967][T15624] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1239.899864][T15624] RIP: 0033:0x7ff63708b0e7 [ 1239.904281][T15624] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1239.923897][T15624] RSP: 002b:00007ffe69610a48 EFLAGS: 00000206 ORIG_RAX: 0000000000000102 [ 1239.932322][T15624] RAX: ffffffffffffffda RBX: 00007ffe69610ad0 RCX: 00007ff63708b0e7 [ 1239.940296][T15624] RDX: 00000000000001ff RSI: 00007ffe69610ad0 RDI: 00000000ffffff9c [ 1239.948272][T15624] RBP: 00007ffe69610aac R08: 0000000000000000 R09: 0000000000000004 [ 1239.956244][T15624] R10: 00007ffe696107e6 R11: 0000000000000206 R12: 0000000000000032 [ 1239.964215][T15624] R13: 000000000012e5e3 R14: 000000000000000f R15: 00007ffe69610b10 [ 1239.972204][T15624] [ 1239.986609][T15624] memory: usage 8304kB, limit 0kB, failcnt 201 [ 1239.995928][T15624] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1240.013248][T15624] Memory cgroup stats for /syz0: [ 1240.013405][T15624] anon 61440 [ 1240.013405][T15624] file 8364032 [ 1240.013405][T15624] kernel 77824 [ 1240.013405][T15624] kernel_stack 0 [ 1240.013405][T15624] pagetables 8192 [ 1240.013405][T15624] sec_pagetables 0 [ 1240.013405][T15624] percpu 0 [ 1240.013405][T15624] sock 0 [ 1240.013405][T15624] vmalloc 0 [ 1240.013405][T15624] shmem 8359936 [ 1240.013405][T15624] zswap 0 [ 1240.013405][T15624] zswapped 0 [ 1240.013405][T15624] file_mapped 180224 [ 1240.013405][T15624] file_dirty 0 [ 1240.013405][T15624] file_writeback 0 [ 1240.013405][T15624] swapcached 0 [ 1240.013405][T15624] anon_thp 0 [ 1240.013405][T15624] file_thp 0 [ 1240.013405][T15624] shmem_thp 0 [ 1240.013405][T15624] inactive_anon 61440 [ 1240.013405][T15624] active_anon 8359936 [ 1240.013405][T15624] inactive_file 0 [ 1240.013405][T15624] active_file 4096 [ 1240.013405][T15624] unevictable 0 [ 1240.013405][T15624] slab_reclaimable 26584 [ 1240.013405][T15624] slab_unreclaimable 32296 [ 1240.013405][T15624] slab 58880 [ 1240.123353][T15624] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=15624,uid=0 [ 1240.146697][T15624] Memory cgroup out of memory: Killed process 15624 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1240.199498][T16100] syz-executor.3 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 1240.223088][T16100] CPU: 1 PID: 16100 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1240.233534][T16100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1240.243611][T16100] Call Trace: [ 1240.246913][T16100] [ 1240.249866][T16100] dump_stack_lvl+0xd1/0x138 [ 1240.254500][T16100] dump_header+0x10b/0x85f [ 1240.258962][T16100] oom_kill_process.cold+0x10/0x15 [ 1240.264124][T16100] out_of_memory+0x35c/0x14a0 [ 1240.268856][T16100] ? oom_killer_disable+0x280/0x280 [ 1240.274098][T16100] ? find_held_lock+0x2d/0x110 [ 1240.278905][T16100] mem_cgroup_out_of_memory+0x206/0x270 [ 1240.284495][T16100] ? mem_cgroup_margin+0x130/0x130 [ 1240.289650][T16100] ? lock_downgrade+0x6e0/0x6e0 [ 1240.294560][T16100] try_charge_memcg+0xefb/0x12f0 [ 1240.299545][T16100] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1240.305558][T16100] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1240.311327][T16100] ? lock_downgrade+0x6e0/0x6e0 [ 1240.316229][T16100] obj_cgroup_charge+0x2af/0x5e0 [ 1240.321203][T16100] kmem_cache_alloc_lru+0x145/0x760 [ 1240.326425][T16100] ? ext4_alloc_inode+0x28/0x680 [ 1240.331398][T16100] ? ext4_free_in_core_inode+0x70/0x70 [ 1240.336890][T16100] ext4_alloc_inode+0x28/0x680 [ 1240.341695][T16100] ? ext4_free_in_core_inode+0x70/0x70 [ 1240.347186][T16100] alloc_inode+0x61/0x230 [ 1240.351558][T16100] iget_locked+0x1bb/0x700 [ 1240.356020][T16100] __ext4_iget+0x3af/0x4230 [ 1240.360586][T16100] ? ext4_get_projid+0x190/0x190 [ 1240.365556][T16100] ? ext4_fname_prepare_lookup+0x163/0x200 [ 1240.371397][T16100] ? ext4_fname_setup_filename+0x110/0x110 [ 1240.377267][T16100] ? rcu_read_lock_sched_held+0x3e/0x70 [ 1240.382861][T16100] ext4_lookup+0x387/0x700 [ 1240.387309][T16100] ? ext4_resetent+0x2d0/0x2d0 [ 1240.392133][T16100] __lookup_slow+0x24c/0x460 [ 1240.396769][T16100] ? __lookup_hash+0x180/0x180 [ 1240.401573][T16100] ? scarlett2_usb_get_mix+0x2f6/0x318 [ 1240.407086][T16100] ? scarlett2_usb_get_mix+0x2f6/0x318 [ 1240.412589][T16100] ? lookup_fast+0x14e/0x520 [ 1240.417219][T16100] walk_component+0x33f/0x5a0 [ 1240.421935][T16100] path_lookupat+0x1ba/0x840 [ 1240.426568][T16100] filename_lookup+0x1d2/0x590 [ 1240.431376][T16100] ? may_linkat+0x500/0x500 [ 1240.435910][T16100] ? __might_fault+0xd9/0x180 [ 1240.440633][T16100] ? __phys_addr_symbol+0x30/0x70 [ 1240.445702][T16100] ? __check_object_size+0x2e2/0x5a0 [ 1240.451030][T16100] ? strncpy_from_user+0x28b/0x3c0 [ 1240.456182][T16100] ? getname_flags.part.0+0x1dd/0x4f0 [ 1240.461604][T16100] user_path_at_empty+0x46/0x60 [ 1240.466502][T16100] __x64_sys_umount+0xfc/0x190 [ 1240.471302][T16100] ? path_umount+0x10b0/0x10b0 [ 1240.476105][T16100] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1240.482046][T16100] do_syscall_64+0x39/0xb0 [ 1240.486502][T16100] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1240.492426][T16100] RIP: 0033:0x7fa2bfc8d537 [ 1240.496868][T16100] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1240.516499][T16100] RSP: 002b:00007ffddf4cbc08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1240.524940][T16100] RAX: ffffffffffffffda RBX: 000000000000005a RCX: 00007fa2bfc8d537 [ 1240.532939][T16100] RDX: 00007ffddf4cbcdd RSI: 000000000000000a RDI: 00007ffddf4cbcd0 [ 1240.540942][T16100] RBP: 00007ffddf4cbcd0 R08: 00000000ffffffff R09: 00007ffddf4cbaa0 [ 1240.548938][T16100] R10: 0000555555afe853 R11: 0000000000000246 R12: 00007fa2bfce6b24 [ 1240.556931][T16100] R13: 00007ffddf4ccd90 R14: 0000555555afe810 R15: 00007ffddf4ccdd0 [ 1240.564951][T16100] [ 1240.592944][T16100] memory: usage 10364kB, limit 0kB, failcnt 296 [ 1240.600552][T16100] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1240.607615][T16100] Memory cgroup stats for /syz3: [ 1240.607858][T16100] anon 40960 [ 1240.607858][T16100] file 10477568 [ 1240.607858][T16100] kernel 94208 [ 1240.607858][T16100] kernel_stack 0 [ 1240.607858][T16100] pagetables 8192 [ 1240.607858][T16100] sec_pagetables 0 [ 1240.607858][T16100] percpu 0 [ 1240.607858][T16100] sock 0 [ 1240.607858][T16100] vmalloc 0 18:36:00 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r3 = gettid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r5, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 1240.607858][T16100] shmem 10473472 [ 1240.607858][T16100] zswap 0 [ 1240.607858][T16100] zswapped 0 [ 1240.607858][T16100] file_mapped 200704 [ 1240.607858][T16100] file_dirty 0 [ 1240.607858][T16100] file_writeback 0 [ 1240.607858][T16100] swapcached 0 [ 1240.607858][T16100] anon_thp 0 [ 1240.607858][T16100] file_thp 0 [ 1240.607858][T16100] shmem_thp 0 [ 1240.607858][T16100] inactive_anon 40960 [ 1240.607858][T16100] active_anon 10473472 [ 1240.607858][T16100] inactive_file 0 [ 1240.607858][T16100] active_file 4096 [ 1240.607858][T16100] unevictable 0 [ 1240.607858][T16100] slab_reclaimable 42016 [ 1240.607858][T16100] slab_unreclaimable 32944 [ 1240.607858][T16100] slab 74960 [ 1240.798798][T16100] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16100,uid=0 [ 1240.867704][T16100] Memory cgroup out of memory: Killed process 16100 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1240.899916][T14183] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1240.927838][T14183] CPU: 1 PID: 14183 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1240.938286][T14183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1240.948356][T14183] Call Trace: [ 1240.951653][T14183] [ 1240.954602][T14183] dump_stack_lvl+0xd1/0x138 [ 1240.959231][T14183] dump_header+0x10b/0x85f [ 1240.963688][T14183] oom_kill_process.cold+0x10/0x15 [ 1240.968846][T14183] out_of_memory+0x35c/0x14a0 [ 1240.973570][T14183] ? oom_killer_disable+0x280/0x280 [ 1240.978806][T14183] ? find_held_lock+0x2d/0x110 [ 1240.983607][T14183] mem_cgroup_out_of_memory+0x206/0x270 [ 1240.989193][T14183] ? mem_cgroup_margin+0x130/0x130 [ 1240.994339][T14183] ? lock_downgrade+0x6e0/0x6e0 [ 1240.999228][T14183] try_charge_memcg+0xefb/0x12f0 [ 1241.004199][T14183] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1241.010209][T14183] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1241.015966][T14183] ? lock_downgrade+0x6e0/0x6e0 [ 1241.020845][T14183] ? lock_downgrade+0x6e0/0x6e0 [ 1241.025741][T14183] __memcg_kmem_charge_page+0x16e/0x3b0 [ 1241.031319][T14183] __alloc_pages+0x1f3/0x5b0 [ 1241.035944][T14183] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 1241.042753][T14183] ? memcg_slab_post_alloc_hook+0x249/0x480 [ 1241.048698][T14183] alloc_pages+0x1aa/0x270 [ 1241.053156][T14183] __get_free_pages+0xc/0x40 [ 1241.057770][T14183] pgd_alloc+0x29/0x260 [ 1241.061965][T14183] mm_init+0x63b/0xc10 [ 1241.066069][T14183] copy_process+0x43f6/0x7520 [ 1241.070774][T14183] ? _raw_spin_unlock+0x28/0x40 [ 1241.075655][T14183] ? wp_page_reuse+0x197/0x570 [ 1241.080462][T14183] ? __cleanup_sighand+0xb0/0xb0 [ 1241.085423][T14183] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1241.090832][T14183] ? rwlock_bug.part.0+0x90/0x90 [ 1241.095795][T14183] ? lock_chain_count+0x20/0x20 [ 1241.100678][T14183] kernel_clone+0xeb/0x990 [ 1241.105126][T14183] ? create_io_thread+0xf0/0xf0 [ 1241.110013][T14183] ? find_held_lock+0x2d/0x110 [ 1241.114822][T14183] __do_sys_clone+0xba/0x100 [ 1241.119440][T14183] ? kernel_clone+0x990/0x990 [ 1241.124166][T14183] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1241.130101][T14183] do_syscall_64+0x39/0xb0 [ 1241.134555][T14183] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1241.140472][T14183] RIP: 0033:0x7f2875889dfb [ 1241.144909][T14183] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1241.164533][T14183] RSP: 002b:00007ffd2fb736b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1241.172969][T14183] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2875889dfb [ 1241.180953][T14183] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1241.188939][T14183] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555e61400 [ 1241.196930][T14183] R10: 0000555555e616d0 R11: 0000000000000246 R12: 0000000000000001 [ 1241.204918][T14183] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd2fb73790 [ 1241.212929][T14183] [ 1241.247797][T14183] memory: usage 10456kB, limit 0kB, failcnt 244 [ 1241.260642][T14183] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1241.269021][T14183] Memory cgroup stats for /syz5: [ 1241.269186][T14183] anon 49152 [ 1241.269186][T14183] file 10473472 [ 1241.269186][T14183] kernel 180224 [ 1241.269186][T14183] kernel_stack 32768 [ 1241.269186][T14183] pagetables 8192 [ 1241.269186][T14183] sec_pagetables 0 [ 1241.269186][T14183] percpu 0 18:36:00 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r3 = gettid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r5, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 1241.269186][T14183] sock 0 [ 1241.269186][T14183] vmalloc 0 [ 1241.269186][T14183] shmem 10465280 [ 1241.269186][T14183] zswap 0 [ 1241.269186][T14183] zswapped 0 [ 1241.269186][T14183] file_mapped 180224 [ 1241.269186][T14183] file_dirty 0 [ 1241.269186][T14183] file_writeback 0 [ 1241.269186][T14183] swapcached 0 [ 1241.269186][T14183] anon_thp 0 [ 1241.269186][T14183] file_thp 0 [ 1241.269186][T14183] shmem_thp 0 [ 1241.269186][T14183] inactive_anon 49152 [ 1241.269186][T14183] active_anon 10465280 [ 1241.269186][T14183] inactive_file 4096 [ 1241.269186][T14183] active_file 4096 [ 1241.269186][T14183] unevictable 0 [ 1241.269186][T14183] slab_reclaimable 37760 [ 1241.269186][T14183] slab_unreclaimable 91504 [ 1241.269186][T14183] slab 129264 [ 1241.405692][T14183] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=14183,uid=0 [ 1241.410507][ T5109] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1241.430506][T14183] Memory cgroup out of memory: Killed process 14183 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1241.430662][ T5109] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1241.461823][ T5109] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1241.470338][ T5109] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1241.481355][T16969] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1241.493680][ T4387] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1241.502490][ T4387] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1241.531432][T16969] CPU: 0 PID: 16969 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1241.541886][T16969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1241.551959][T16969] Call Trace: [ 1241.555244][T16969] [ 1241.558177][T16969] dump_stack_lvl+0xd1/0x138 [ 1241.562787][T16969] dump_header+0x10b/0x85f [ 1241.567228][T16969] oom_kill_process.cold+0x10/0x15 [ 1241.572359][T16969] out_of_memory+0x35c/0x14a0 [ 1241.577063][T16969] ? oom_killer_disable+0x280/0x280 [ 1241.582281][T16969] ? find_held_lock+0x2d/0x110 [ 1241.587068][T16969] mem_cgroup_out_of_memory+0x206/0x270 [ 1241.592636][T16969] ? mem_cgroup_margin+0x130/0x130 [ 1241.597766][T16969] ? lock_downgrade+0x6e0/0x6e0 [ 1241.602644][T16969] try_charge_memcg+0xefb/0x12f0 [ 1241.607598][T16969] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1241.613587][T16969] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1241.619325][T16969] ? lock_downgrade+0x6e0/0x6e0 [ 1241.624202][T16969] obj_cgroup_charge+0x2af/0x5e0 [ 1241.629153][T16969] ? vm_area_dup+0x7d/0x380 [ 1241.633664][T16969] kmem_cache_alloc+0xb5/0x430 [ 1241.638451][T16969] vm_area_dup+0x7d/0x380 [ 1241.642798][T16969] ? copy_page_range+0x1dfe/0x3b40 [ 1241.647932][T16969] ? mas_wr_modify+0x2da/0x16d0 [ 1241.652809][T16969] ? mas_next_nentry+0x610/0xab0 [ 1241.657775][T16969] ? vm_area_alloc+0x100/0x100 [ 1241.662563][T16969] ? percpu_counter_add_batch+0xc1/0x180 [ 1241.668277][T16969] ? __vm_enough_memory+0x188/0x390 [ 1241.673489][T16969] ? security_vm_enough_memory_mm+0x89/0xb0 [ 1241.679427][T16969] dup_mmap+0x655/0x10b0 [ 1241.683694][T16969] ? replace_mm_exe_file+0x4b0/0x4b0 [ 1241.688986][T16969] ? lock_downgrade+0x6e0/0x6e0 [ 1241.693851][T16969] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1241.699689][T16969] ? mm_init+0x8e0/0xc10 [ 1241.703947][T16969] copy_process+0x440f/0x7520 [ 1241.708633][T16969] ? _raw_spin_unlock+0x28/0x40 [ 1241.713492][T16969] ? wp_page_reuse+0x197/0x570 [ 1241.718283][T16969] ? __cleanup_sighand+0xb0/0xb0 [ 1241.723226][T16969] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1241.728616][T16969] ? rwlock_bug.part.0+0x90/0x90 [ 1241.733567][T16969] ? lock_chain_count+0x20/0x20 [ 1241.738432][T16969] kernel_clone+0xeb/0x990 [ 1241.742861][T16969] ? create_io_thread+0xf0/0xf0 [ 1241.747729][T16969] ? find_held_lock+0x2d/0x110 [ 1241.752521][T16969] __do_sys_clone+0xba/0x100 [ 1241.757123][T16969] ? kernel_clone+0x990/0x990 [ 1241.761833][T16969] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1241.767749][T16969] do_syscall_64+0x39/0xb0 [ 1241.772185][T16969] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1241.778088][T16969] RIP: 0033:0x7f4f05a89dfb [ 1241.782508][T16969] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1241.802127][T16969] RSP: 002b:00007ffde559efd0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1241.810551][T16969] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4f05a89dfb [ 1241.818536][T16969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1241.826520][T16969] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555941400 [ 1241.834585][T16969] R10: 00005555559416d0 R11: 0000000000000246 R12: 0000000000000001 [ 1241.842561][T16969] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffde559f0b0 [ 1241.850557][T16969] [ 1241.947608][T16969] memory: usage 10428kB, limit 0kB, failcnt 91 [ 1241.980233][T16969] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1241.990430][T16969] Memory cgroup stats for /syz4: [ 1241.990720][T16969] anon 45056 [ 1241.990720][T16969] file 10477568 [ 1241.990720][T16969] kernel 155648 [ 1241.990720][T16969] kernel_stack 32768 [ 1241.990720][T16969] pagetables 16384 [ 1241.990720][T16969] sec_pagetables 0 [ 1241.990720][T16969] percpu 64 [ 1241.990720][T16969] sock 0 [ 1241.990720][T16969] vmalloc 0 [ 1241.990720][T16969] shmem 10473472 [ 1241.990720][T16969] zswap 0 [ 1241.990720][T16969] zswapped 0 [ 1241.990720][T16969] file_mapped 266240 [ 1241.990720][T16969] file_dirty 0 [ 1241.990720][T16969] file_writeback 0 [ 1241.990720][T16969] swapcached 0 [ 1241.990720][T16969] anon_thp 0 [ 1241.990720][T16969] file_thp 0 [ 1241.990720][T16969] shmem_thp 0 [ 1241.990720][T16969] inactive_anon 45056 [ 1241.990720][T16969] active_anon 10473472 [ 1241.990720][T16969] inactive_file 0 [ 1241.990720][T16969] active_file 4096 [ 1241.990720][T16969] unevictable 0 [ 1241.990720][T16969] slab_reclaimable 34856 [ 1241.990720][T16969] slab_unreclaimable 54096 [ 1241.990720][T16969] slab 88952 [ 1242.087888][T16969] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16969,uid=0 18:36:01 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x10) r3 = gettid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r5, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='\x00') [ 1242.124589][T16969] Memory cgroup out of memory: Killed process 16969 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 18:36:01 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r3 = gettid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r5, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 18:36:01 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x10) r3 = gettid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r5, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='\x00') 18:36:01 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r3 = gettid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r5, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 18:36:01 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x10) r3 = gettid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r5, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='\x00') [ 1242.673506][ T11] device hsr_slave_0 left promiscuous mode [ 1242.728797][ T11] device hsr_slave_1 left promiscuous mode [ 1242.738018][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1242.765944][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1242.804941][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1242.822676][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1242.862523][ T11] device bridge_slave_1 left promiscuous mode [ 1242.899276][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.920537][ T11] device bridge_slave_0 left promiscuous mode [ 1242.938059][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.992248][ T11] device veth1_macvtap left promiscuous mode [ 1242.998304][ T11] device veth0_macvtap left promiscuous mode [ 1243.029726][ T11] device veth1_vlan left promiscuous mode [ 1243.035673][ T11] device veth0_vlan left promiscuous mode [ 1243.521646][ T4387] Bluetooth: hci1: command 0x0409 tx timeout [ 1243.645925][ T9326] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1243.653751][ T9326] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1243.670119][ T9326] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1243.683126][ T9326] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1243.691655][ T9326] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1243.786995][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1243.871930][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1243.933242][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1243.959293][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1244.163005][ T11] bond0 (unregistering): Released all slaves [ 1244.296270][ T9326] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1244.306080][ T9326] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1244.352808][ T9326] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1244.369010][ T9326] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1244.376343][ T9326] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1244.574870][T17982] chnl_net:caif_netlink_parms(): no params data found [ 1245.083453][ T9326] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1245.092180][ T9326] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1245.100122][ T9326] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1245.108214][ T9326] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1245.118331][T12869] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1245.132085][T12869] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1245.152134][T12869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1245.161539][T12869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1245.169091][T12869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1245.178772][T12869] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1245.187244][T12869] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1245.196901][T12869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1245.261971][T17982] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.269141][T17982] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.289437][T12869] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1245.298307][T12869] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1245.307690][T12869] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1245.315742][T12869] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1245.322976][T17982] device bridge_slave_0 entered promiscuous mode [ 1245.329859][T12869] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1245.337465][T12869] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1245.394263][T18011] chnl_net:caif_netlink_parms(): no params data found [ 1245.459935][T17982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.477122][T17982] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.502424][T17982] device bridge_slave_1 entered promiscuous mode [ 1245.542496][T18003] chnl_net:caif_netlink_parms(): no params data found [ 1245.601511][T12869] Bluetooth: hci1: command 0x041b tx timeout [ 1245.726391][T17982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1245.756370][T18011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.764094][T12869] Bluetooth: hci0: command 0x0409 tx timeout [ 1245.787508][T18011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.807306][T18011] device bridge_slave_0 entered promiscuous mode [ 1245.845353][T18011] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.861407][T18011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.873316][T18011] device bridge_slave_1 entered promiscuous mode [ 1245.957562][T17982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1246.120088][T18011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1246.169171][T17982] team0: Port device team_slave_0 added [ 1246.188884][T18011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1246.270240][T17982] team0: Port device team_slave_1 added [ 1246.337483][T18011] team0: Port device team_slave_0 added [ 1246.349417][T18003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.368751][T18003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.401724][ T5109] Bluetooth: hci2: command 0x0409 tx timeout [ 1246.411156][T18003] device bridge_slave_0 entered promiscuous mode [ 1246.465093][T18011] team0: Port device team_slave_1 added [ 1246.509658][T18003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.524235][T18003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.546156][T18003] device bridge_slave_1 entered promiscuous mode [ 1246.696707][T17982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1246.705622][T17982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1246.744573][T17982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1246.794064][T18011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1246.801030][T18011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1246.860960][T18011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1246.876729][T18003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1246.915702][T17982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1246.924178][T17982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.011357][T17982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1247.040322][T18011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1247.047515][T18011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.075213][T18011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1247.120133][T18003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1247.201818][ T5109] Bluetooth: hci3: command 0x0409 tx timeout [ 1247.281392][ T5109] Bluetooth: hci4: command 0x0409 tx timeout [ 1247.299651][T18011] device hsr_slave_0 entered promiscuous mode [ 1247.306705][T18011] device hsr_slave_1 entered promiscuous mode [ 1247.313490][T18011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1247.324695][T18011] Cannot create hsr debugfs directory [ 1247.333683][T18031] chnl_net:caif_netlink_parms(): no params data found [ 1247.357981][T18003] team0: Port device team_slave_0 added [ 1247.363933][ T5109] Bluetooth: hci5: command 0x0409 tx timeout [ 1247.384095][T18029] chnl_net:caif_netlink_parms(): no params data found [ 1247.428766][T18003] team0: Port device team_slave_1 added [ 1247.440901][T17982] device hsr_slave_0 entered promiscuous mode [ 1247.449749][T17982] device hsr_slave_1 entered promiscuous mode [ 1247.458059][T17982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1247.465818][T17982] Cannot create hsr debugfs directory [ 1247.636311][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.649650][T18003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1247.657105][T18003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.691331][T12869] Bluetooth: hci1: command 0x040f tx timeout [ 1247.697471][T18003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1247.711003][T18003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1247.733505][T18003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.777392][T18003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1247.811214][T18033] chnl_net:caif_netlink_parms(): no params data found [ 1247.851474][T12869] Bluetooth: hci0: command 0x041b tx timeout [ 1247.859935][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.979289][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.109567][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.138826][T18031] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.157029][T18031] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.173985][T18031] device bridge_slave_0 entered promiscuous mode [ 1248.200309][T18029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.212042][T18029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.221757][T18029] device bridge_slave_0 entered promiscuous mode [ 1248.234539][T18003] device hsr_slave_0 entered promiscuous mode [ 1248.250821][T18003] device hsr_slave_1 entered promiscuous mode [ 1248.271977][T18003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1248.279541][T18003] Cannot create hsr debugfs directory [ 1248.340046][T18031] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.348900][T18031] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.373924][T18031] device bridge_slave_1 entered promiscuous mode [ 1248.403879][T18029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.410973][T18029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.432524][T18029] device bridge_slave_1 entered promiscuous mode [ 1248.481547][T12869] Bluetooth: hci2: command 0x041b tx timeout [ 1248.538328][T18033] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.545653][T18033] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.554235][T18033] device bridge_slave_0 entered promiscuous mode [ 1248.565535][T18033] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.572770][T18033] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.580914][T18033] device bridge_slave_1 entered promiscuous mode [ 1248.623618][T18011] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.656542][T18031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1248.721876][T18029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1248.804721][T18031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1248.860422][T18011] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.907745][T18029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1249.086136][T18011] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.127604][T18033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1249.202092][T18011] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.291569][T12869] Bluetooth: hci3: command 0x041b tx timeout [ 1249.304779][T18031] team0: Port device team_slave_0 added [ 1249.314019][T18029] team0: Port device team_slave_0 added [ 1249.326033][T18033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1249.371699][ T5109] Bluetooth: hci4: command 0x041b tx timeout [ 1249.382811][T18029] team0: Port device team_slave_1 added [ 1249.400926][T18031] team0: Port device team_slave_1 added [ 1249.425904][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.441544][ T5109] Bluetooth: hci5: command 0x041b tx timeout [ 1249.707685][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.735303][T18033] team0: Port device team_slave_0 added [ 1249.762772][ T5109] Bluetooth: hci1: command 0x0419 tx timeout [ 1249.821939][T18029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1249.828904][T18029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1249.891390][T18029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1249.912901][T18031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1249.919867][T18031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1249.961284][ T5109] Bluetooth: hci0: command 0x040f tx timeout [ 1250.001346][T18031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1250.024358][T18033] team0: Port device team_slave_1 added [ 1250.123917][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.275272][T18029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1250.301463][T18029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1250.381440][T18029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1250.432841][T18031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1250.439807][T18031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1250.531304][T18031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1250.571590][ T5109] Bluetooth: hci2: command 0x040f tx timeout [ 1250.693745][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.751439][T18033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1250.758411][T18033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1250.851373][T18033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1250.897090][T18033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1250.921392][T18033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1250.991409][T18033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1251.361509][ T5109] Bluetooth: hci3: command 0x040f tx timeout [ 1251.369411][T18031] device hsr_slave_0 entered promiscuous mode [ 1251.401638][T18031] device hsr_slave_1 entered promiscuous mode [ 1251.431411][T18031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1251.438996][T18031] Cannot create hsr debugfs directory [ 1251.451431][ T5109] Bluetooth: hci4: command 0x040f tx timeout [ 1251.531548][ T5109] Bluetooth: hci5: command 0x040f tx timeout [ 1251.543908][T18029] device hsr_slave_0 entered promiscuous mode [ 1251.561870][T18029] device hsr_slave_1 entered promiscuous mode [ 1251.581521][T18029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1251.589098][T18029] Cannot create hsr debugfs directory [ 1251.628835][T18033] device hsr_slave_0 entered promiscuous mode [ 1251.652160][T18033] device hsr_slave_1 entered promiscuous mode [ 1251.661800][T18033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1251.669386][T18033] Cannot create hsr debugfs directory [ 1251.962922][T18011] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1252.011353][ T5109] Bluetooth: hci0: command 0x0419 tx timeout [ 1252.094745][T18011] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1252.156285][T18011] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1252.238058][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.280471][T18011] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1252.342991][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.477587][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.627117][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.641575][ T5109] Bluetooth: hci2: command 0x0419 tx timeout [ 1252.724786][T18011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1252.793668][T18011] 8021q: adding VLAN 0 to HW filter on device team0 [ 1252.801924][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1252.809762][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1252.861198][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1252.883951][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1252.901968][T12947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1252.909065][T12947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1252.979466][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1253.000729][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1253.012188][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1253.021113][T10893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.028257][T10893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1253.036994][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1253.046119][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1253.056994][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1253.098594][T18011] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1253.161681][T18011] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1253.252586][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.293071][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1253.301094][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1253.319302][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1253.339637][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1253.352368][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1253.360798][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1253.370589][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1253.451535][ T5109] Bluetooth: hci3: command 0x0419 tx timeout [ 1253.531456][ T5109] Bluetooth: hci4: command 0x0419 tx timeout [ 1253.611625][ T5109] Bluetooth: hci5: command 0x0419 tx timeout [ 1253.703616][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.835040][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.033752][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.383524][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1254.402106][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1254.426704][T18011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1254.500109][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1254.525367][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1254.577364][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1254.608751][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1254.619476][T18011] device veth0_vlan entered promiscuous mode [ 1254.631924][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1254.639705][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1254.662720][T18011] device veth1_vlan entered promiscuous mode [ 1254.731059][T18011] device veth0_macvtap entered promiscuous mode [ 1254.777014][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1254.790275][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1254.800294][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1254.809260][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1254.853437][T17982] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1255.025577][T18011] device veth1_macvtap entered promiscuous mode [ 1255.043042][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1255.051201][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1255.074221][T17982] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1255.225609][T17982] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1255.256354][T17982] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1255.384990][T18011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1255.396965][T18011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.421660][T18011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1255.448182][T18011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.465591][T18011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1255.486359][T18011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.506160][T18011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1255.527747][T18011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.560213][T18011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1255.591288][T18011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.612683][T18011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1255.673401][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1255.712062][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1255.853420][T18011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.886123][T18011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.911086][T18011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.924297][T18011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.952350][T18011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.971278][T18011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.012185][T18011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1256.041436][T18011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.052954][T18011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1256.081960][T18011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.102851][T18011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1256.280989][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1256.293737][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1256.339735][T18011] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.349573][T18011] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.358684][T18011] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.368786][T18011] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.837349][T17982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1256.971617][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1256.991752][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1257.003374][T17982] 8021q: adding VLAN 0 to HW filter on device team0 [ 1257.036057][T18003] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1257.180666][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1257.201280][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1257.249525][T18003] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1257.290319][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1257.312199][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1257.331853][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1257.351882][T12962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.359006][T12962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1257.451625][T18003] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1257.513594][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1257.531730][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1257.546603][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1257.569678][ T6622] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.576830][ T6622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1257.584924][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1257.593902][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1257.611619][T18003] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1257.661969][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1257.670370][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1257.678530][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1257.694253][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1257.714602][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1257.742170][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1257.750540][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1257.826139][T17982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1257.872593][T17982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1257.907702][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1257.916421][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1257.950401][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1258.299254][T18181] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1258.331494][T18181] CPU: 1 PID: 18181 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1258.341965][T18181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1258.352051][T18181] Call Trace: [ 1258.353453][T18003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1258.355330][T18181] [ 1258.355343][T18181] dump_stack_lvl+0xd1/0x138 [ 1258.369478][T18181] dump_header+0x10b/0x85f [ 1258.373945][T18181] oom_kill_process.cold+0x10/0x15 [ 1258.379111][T18181] out_of_memory+0x35c/0x14a0 [ 1258.383855][T18181] ? oom_killer_disable+0x280/0x280 [ 1258.389112][T18181] mem_cgroup_out_of_memory+0x206/0x270 [ 1258.394709][T18181] ? mem_cgroup_margin+0x130/0x130 [ 1258.399895][T18181] memory_max_write+0x2f9/0x3c0 [ 1258.403759][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1258.404766][T18181] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1258.418037][T18181] ? lock_release+0x810/0x810 [ 1258.422299][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1258.422730][T18181] cgroup_file_write+0x1e2/0x770 [ 1258.434870][T18181] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1258.440974][T18181] ? kill_css+0x370/0x370 [ 1258.445347][T18181] ? kill_css+0x370/0x370 [ 1258.449695][T18181] kernfs_fop_write_iter+0x3f1/0x600 [ 1258.455006][T18181] vfs_write+0x9ed/0xdd0 [ 1258.459266][T18181] ? kernel_write+0x630/0x630 [ 1258.463962][T18181] ? __fget_files+0x26a/0x440 [ 1258.468671][T18181] ksys_write+0x12b/0x250 [ 1258.473014][T18181] ? __ia32_sys_read+0xb0/0xb0 [ 1258.477792][T18181] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1258.483709][T18181] do_syscall_64+0x39/0xb0 [ 1258.488149][T18181] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1258.494055][T18181] RIP: 0033:0x7fdf9628c0c9 [ 1258.498483][T18181] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1258.518100][T18181] RSP: 002b:00007fdf96fba168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1258.526537][T18181] RAX: ffffffffffffffda RBX: 00007fdf963abf80 RCX: 00007fdf9628c0c9 [ 1258.534519][T18181] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 1258.542497][T18181] RBP: 00007fdf962e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1258.550475][T18181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1258.558462][T18181] R13: 00007ffcd59e5fcf R14: 00007fdf96fba300 R15: 0000000000022000 [ 1258.566463][T18181] [ 1258.576894][T18003] 8021q: adding VLAN 0 to HW filter on device team0 [ 1258.632268][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1258.641186][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1258.652404][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.659562][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1258.715656][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1258.729647][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1258.768203][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1258.794825][T13013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.801979][T13013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1258.822973][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1258.838746][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1259.021488][T18181] memory: usage 8604kB, limit 0kB, failcnt 218 [ 1259.027849][T18181] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1259.051810][T18181] Memory cgroup stats for /syz0: [ 1259.052007][T18181] anon 118784 [ 1259.052007][T18181] file 8359936 [ 1259.052007][T18181] kernel 278528 [ 1259.052007][T18181] kernel_stack 32768 [ 1259.052007][T18181] pagetables 77824 [ 1259.052007][T18181] sec_pagetables 0 [ 1259.052007][T18181] percpu 64 [ 1259.052007][T18181] sock 0 [ 1259.052007][T18181] vmalloc 0 [ 1259.052007][T18181] shmem 8359936 [ 1259.052007][T18181] zswap 0 [ 1259.052007][T18181] zswapped 0 [ 1259.052007][T18181] file_mapped 217088 [ 1259.052007][T18181] file_dirty 0 [ 1259.052007][T18181] file_writeback 0 [ 1259.052007][T18181] swapcached 0 [ 1259.052007][T18181] anon_thp 0 [ 1259.052007][T18181] file_thp 0 [ 1259.052007][T18181] shmem_thp 0 [ 1259.052007][T18181] inactive_anon 118784 [ 1259.052007][T18181] active_anon 8359936 [ 1259.052007][T18181] inactive_file 0 [ 1259.052007][T18181] active_file 0 [ 1259.052007][T18181] unevictable 0 [ 1259.052007][T18181] slab_reclaimable 41352 [ 1259.052007][T18181] slab_unreclaimable 97872 [ 1259.052007][T18181] slab 139224 18:36:18 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x10) r3 = gettid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r5, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='\x00') [ 1259.200894][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1259.209103][T18181] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=18180,uid=0 [ 1259.210624][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1259.227463][T18181] Memory cgroup out of memory: Killed process 18181 (syz-executor.0) total-vm:56588kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1259.282292][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1259.290158][T18011] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1259.303319][T18011] CPU: 0 PID: 18011 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1259.304446][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1259.313743][T18011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1259.313759][T18011] Call Trace: [ 1259.313767][T18011] [ 1259.313782][T18011] dump_stack_lvl+0xd1/0x138 [ 1259.313820][T18011] dump_header+0x10b/0x85f [ 1259.313864][T18011] oom_kill_process.cold+0x10/0x15 [ 1259.313906][T18011] out_of_memory+0x35c/0x14a0 [ 1259.313949][T18011] ? find_held_lock+0x2d/0x110 [ 1259.313985][T18011] ? oom_killer_disable+0x280/0x280 [ 1259.314027][T18011] ? find_held_lock+0x2d/0x110 [ 1259.338698][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1259.342573][T18011] mem_cgroup_out_of_memory+0x206/0x270 [ 1259.342616][T18011] ? mem_cgroup_margin+0x130/0x130 [ 1259.342650][T18011] ? lock_downgrade+0x6e0/0x6e0 [ 1259.342698][T18011] try_charge_memcg+0xefb/0x12f0 [ 1259.342734][T18011] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1259.347680][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1259.352224][T18011] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1259.352266][T18011] ? lock_downgrade+0x6e0/0x6e0 [ 1259.352296][T18011] ? lock_downgrade+0x6e0/0x6e0 [ 1259.352341][T18011] __memcg_kmem_charge_page+0x16e/0x3b0 [ 1259.352375][T18011] __alloc_pages+0x1f3/0x5b0 [ 1259.352404][T18011] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 1259.445841][T18011] ? lock_chain_count+0x20/0x20 [ 1259.450725][T18011] alloc_pages+0x1aa/0x270 [ 1259.455160][T18011] pte_alloc_one+0x1a/0x230 [ 1259.459683][T18011] __pte_alloc+0x6d/0x260 [ 1259.464031][T18011] ? pmd_install+0x160/0x160 [ 1259.468643][T18011] copy_page_range+0x17a8/0x3b40 [ 1259.473629][T18011] ? mas_store+0x206/0x2e0 [ 1259.478058][T18011] ? handle_mm_fault+0x850/0x850 [ 1259.483033][T18011] ? up_write+0x1b0/0x520 [ 1259.487388][T18011] dup_mmap+0xc10/0x10b0 [ 1259.491650][T18011] ? replace_mm_exe_file+0x4b0/0x4b0 [ 1259.496947][T18011] ? lock_downgrade+0x6e0/0x6e0 [ 1259.501812][T18011] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1259.507646][T18011] ? mm_init+0x8e0/0xc10 [ 1259.511898][T18011] copy_process+0x440f/0x7520 [ 1259.516583][T18011] ? _raw_spin_unlock+0x28/0x40 [ 1259.521444][T18011] ? wp_page_reuse+0x197/0x570 [ 1259.526241][T18011] ? __cleanup_sighand+0xb0/0xb0 [ 1259.531196][T18011] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1259.536599][T18011] ? rwlock_bug.part.0+0x90/0x90 [ 1259.541548][T18011] ? lock_chain_count+0x20/0x20 [ 1259.546415][T18011] kernel_clone+0xeb/0x990 [ 1259.550846][T18011] ? create_io_thread+0xf0/0xf0 [ 1259.555713][T18011] ? find_held_lock+0x2d/0x110 [ 1259.560508][T18011] __do_sys_clone+0xba/0x100 [ 1259.565110][T18011] ? kernel_clone+0x990/0x990 [ 1259.569811][T18011] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1259.575723][T18011] do_syscall_64+0x39/0xb0 [ 1259.580161][T18011] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1259.586065][T18011] RIP: 0033:0x7fdf96289dfb [ 1259.590484][T18011] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1259.610098][T18011] RSP: 002b:00007ffcd59e6210 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1259.618517][T18011] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdf96289dfb [ 1259.626495][T18011] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1259.634469][T18011] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555672a400 [ 1259.642446][T18011] R10: 000055555672a6d0 R11: 0000000000000246 R12: 0000000000000001 [ 1259.650424][T18011] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffcd59e62f0 [ 1259.658421][T18011] [ 1259.666626][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1259.679731][T18011] memory: usage 8444kB, limit 0kB, failcnt 237 [ 1259.683723][T18003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1259.687322][T18011] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1259.700220][T18011] Memory cgroup stats for /syz0: [ 1259.700424][T18011] anon 40960 [ 1259.700424][T18011] file 8359936 [ 1259.700424][T18011] kernel 204800 [ 1259.700424][T18011] kernel_stack 32768 [ 1259.700424][T18011] pagetables 24576 [ 1259.700424][T18011] sec_pagetables 0 [ 1259.700424][T18011] percpu 128 [ 1259.700424][T18011] sock 0 [ 1259.700424][T18011] vmalloc 0 [ 1259.700424][T18011] shmem 8359936 [ 1259.700424][T18011] zswap 0 [ 1259.700424][T18011] zswapped 0 [ 1259.700424][T18011] file_mapped 180224 [ 1259.700424][T18011] file_dirty 0 [ 1259.700424][T18011] file_writeback 0 [ 1259.700424][T18011] swapcached 0 [ 1259.700424][T18011] anon_thp 0 [ 1259.700424][T18011] file_thp 0 [ 1259.700424][T18011] shmem_thp 0 [ 1259.700424][T18011] inactive_anon 40960 [ 1259.700424][T18011] active_anon 8359936 [ 1259.700424][T18011] inactive_file 0 [ 1259.700424][T18011] active_file 0 [ 1259.700424][T18011] unevictable 0 [ 1259.700424][T18011] slab_reclaimable 28920 [ 1259.700424][T18011] slab_unreclaimable 97464 [ 1259.700424][T18011] slab 126384 [ 1259.811178][T18011] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=18011,uid=0 [ 1259.843222][T17982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1259.855263][T18011] Memory cgroup out of memory: Killed process 18011 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1259.894171][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1259.904318][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1260.134952][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1260.147182][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1260.210479][T17982] device veth0_vlan entered promiscuous mode [ 1260.242195][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1260.250512][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1260.282998][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1260.290999][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1260.388137][T17982] device veth1_vlan entered promiscuous mode [ 1260.421542][T18029] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1260.463922][T18029] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1260.570259][T18029] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1260.751702][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1260.765876][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1260.851638][T18029] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1260.933865][T17982] device veth0_macvtap entered promiscuous mode [ 1261.023328][T18003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1261.084237][T17982] device veth1_macvtap entered promiscuous mode [ 1261.091924][T12859] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1261.113373][T12859] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1261.141746][T12859] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1261.171770][T12859] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1261.230801][ T11] device hsr_slave_0 left promiscuous mode [ 1261.253556][ T11] device hsr_slave_1 left promiscuous mode [ 1261.260186][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1261.268054][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1261.282341][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1261.289766][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1261.299661][ T11] device bridge_slave_1 left promiscuous mode [ 1261.306199][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.315500][ T11] device bridge_slave_0 left promiscuous mode [ 1261.322184][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.348986][ T11] device hsr_slave_0 left promiscuous mode [ 1261.359573][ T11] device hsr_slave_1 left promiscuous mode [ 1261.382328][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1261.389769][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1261.413681][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1261.421105][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1261.448283][ T11] device bridge_slave_1 left promiscuous mode [ 1261.455264][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.472073][ T11] device bridge_slave_0 left promiscuous mode [ 1261.478302][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.531430][ T11] device hsr_slave_0 left promiscuous mode [ 1261.539551][ T11] device hsr_slave_1 left promiscuous mode [ 1261.546573][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1261.554719][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1261.564721][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1261.572395][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1261.580717][ T11] device bridge_slave_1 left promiscuous mode [ 1261.587019][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.602951][ T11] device bridge_slave_0 left promiscuous mode [ 1261.609103][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.623112][ T11] device hsr_slave_0 left promiscuous mode [ 1261.630613][ T11] device hsr_slave_1 left promiscuous mode [ 1261.637158][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1261.644762][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1261.655938][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1261.663810][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1261.680420][ T11] device hsr_slave_0 left promiscuous mode [ 1261.687366][ T11] device hsr_slave_1 left promiscuous mode [ 1261.693861][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1261.701304][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1261.709644][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1261.717492][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1261.727112][ T11] device veth0_to_bond left promiscuous mode [ 1261.733421][ T11] bridge0: port 3(veth0_to_bond) entered disabled state [ 1261.741722][ T11] device bridge_slave_1 left promiscuous mode [ 1261.747869][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.756063][ T11] device bridge_slave_0 left promiscuous mode [ 1261.764538][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.789604][ T11] device veth1_macvtap left promiscuous mode [ 1261.795821][ T11] device veth0_macvtap left promiscuous mode [ 1261.802074][ T11] device veth1_vlan left promiscuous mode [ 1261.807868][ T11] device veth0_vlan left promiscuous mode [ 1261.816446][ T11] device veth1_macvtap left promiscuous mode [ 1261.822846][ T11] device veth0_macvtap left promiscuous mode [ 1261.829010][ T11] device veth1_vlan left promiscuous mode [ 1261.834914][ T11] device veth0_vlan left promiscuous mode [ 1261.842069][ T11] device veth1_macvtap left promiscuous mode [ 1261.848126][ T11] device veth0_macvtap left promiscuous mode [ 1261.855743][ T11] device veth1_vlan left promiscuous mode [ 1261.861689][ T11] device veth0_vlan left promiscuous mode [ 1261.869301][ T11] device veth1_macvtap left promiscuous mode [ 1261.876933][ T11] device veth0_macvtap left promiscuous mode [ 1261.883152][ T11] device veth1_vlan left promiscuous mode [ 1261.888939][ T11] device veth0_vlan left promiscuous mode [ 1261.897584][ T11] device veth1_macvtap left promiscuous mode [ 1261.903727][ T11] device veth0_macvtap left promiscuous mode [ 1261.909786][ T11] device veth1_vlan left promiscuous mode [ 1261.915910][ T11] device veth0_vlan left promiscuous mode [ 1262.497750][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1262.515103][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1262.528941][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1262.548730][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1262.619543][ T11] bond0 (unregistering): Released all slaves [ 1262.748884][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1262.761137][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1262.776164][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1262.788919][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1262.870040][ T11] bond0 (unregistering): Released all slaves [ 1263.007694][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1263.026365][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1263.037466][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1263.055816][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1263.132446][ T11] bond0 (unregistering): Released all slaves [ 1263.268175][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1263.280282][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1263.292055][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1263.309209][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1263.378195][ T11] bond0 (unregistering): Released all slaves [ 1263.479462][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1263.495714][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1263.517593][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1263.535866][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1263.606219][ T11] bond0 (unregistering): Released all slaves [ 1263.704835][T17982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1263.715421][T17982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.726290][T17982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1263.787810][T18003] device veth0_vlan entered promiscuous mode [ 1263.805082][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1263.821918][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1263.830665][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1263.862012][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1263.870772][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1263.892137][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1263.906274][T17982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1263.931298][T17982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.952679][T17982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1263.972994][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1263.980863][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1264.002491][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1264.017784][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1264.059199][T18029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1264.097047][T18003] device veth1_vlan entered promiscuous mode [ 1264.113830][T17982] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.141695][T17982] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.150426][T17982] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.171303][T17982] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.205120][T18029] 8021q: adding VLAN 0 to HW filter on device team0 [ 1264.244372][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1264.253933][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1264.262319][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1264.310560][T18033] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1264.325179][T18033] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1264.373124][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1264.391234][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1264.415800][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1264.435536][T12962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.442699][T12962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1264.461222][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1264.470309][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1264.492453][T12962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.499568][T12962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1264.521804][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1264.530688][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1264.554634][T12859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1264.576344][T18003] device veth0_macvtap entered promiscuous mode [ 1264.625056][T18033] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1264.644811][T18033] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1264.690843][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1264.704642][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1264.730438][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1264.745812][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1264.769060][T18003] device veth1_macvtap entered promiscuous mode [ 1264.832969][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1264.861772][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1264.869727][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1264.912653][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1264.932886][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1264.961153][T18003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1264.981317][T18003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.991153][T18003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1265.015058][T18003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.037907][T18003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1265.080832][T18003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1265.111364][T18003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.121182][T18003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1265.131957][T18003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.152902][T18003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1265.168177][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1265.181785][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1265.190554][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1265.200232][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1265.222052][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1265.230742][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1265.262852][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1265.289940][T18003] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.304745][T18003] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.321419][T18003] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.330151][T18003] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.362406][T18031] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1265.382692][T18031] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1265.421955][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.429955][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.462288][T18031] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1265.499895][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1265.534038][T18031] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1265.573841][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.612983][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.634420][T18033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1265.672783][T12946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.680804][T12946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.722568][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1265.733799][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1265.763539][T18033] 8021q: adding VLAN 0 to HW filter on device team0 [ 1265.794866][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1265.812109][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1265.892860][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1265.911952][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1265.921221][T10893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.928394][T10893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1265.952058][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1265.977505][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1266.012255][T10893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.019365][T10893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1266.051894][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1266.096658][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1266.111946][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1266.152129][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1266.198300][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1266.241866][T12946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.249942][T12946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.273298][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1266.286852][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1266.325054][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1266.337681][T18261] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1266.351612][T18261] CPU: 1 PID: 18261 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1266.362060][T18261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1266.372137][T18261] Call Trace: [ 1266.375440][T18261] [ 1266.378396][T18261] dump_stack_lvl+0xd1/0x138 [ 1266.383019][T18261] dump_header+0x10b/0x85f [ 1266.387440][T18261] oom_kill_process.cold+0x10/0x15 [ 1266.392556][T18261] out_of_memory+0x35c/0x14a0 [ 1266.397238][T18261] ? oom_killer_disable+0x280/0x280 [ 1266.402444][T18261] ? mark_held_locks+0x9f/0xe0 [ 1266.407234][T18261] mem_cgroup_out_of_memory+0x206/0x270 [ 1266.412797][T18261] ? mem_cgroup_margin+0x130/0x130 [ 1266.417930][T18261] memory_max_write+0x2f9/0x3c0 [ 1266.422792][T18261] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1266.428884][T18261] cgroup_file_write+0x1e2/0x770 [ 1266.433819][T18261] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1266.439878][T18261] ? kill_css+0x370/0x370 [ 1266.444210][T18261] ? kill_css+0x370/0x370 [ 1266.448544][T18261] kernfs_fop_write_iter+0x3f1/0x600 [ 1266.453859][T18261] vfs_write+0x9ed/0xdd0 [ 1266.458100][T18261] ? kernel_write+0x630/0x630 [ 1266.462807][T18261] ? __fget_light+0xd7/0x270 [ 1266.467422][T18261] ksys_write+0x12b/0x250 [ 1266.471754][T18261] ? __ia32_sys_read+0xb0/0xb0 [ 1266.476524][T18261] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1266.482421][T18261] do_syscall_64+0x39/0xb0 [ 1266.486840][T18261] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1266.492728][T18261] RIP: 0033:0x7f60f8a8c0c9 [ 1266.497142][T18261] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1266.516751][T18261] RSP: 002b:00007f60f988b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1266.525169][T18261] RAX: ffffffffffffffda RBX: 00007f60f8babf80 RCX: 00007f60f8a8c0c9 [ 1266.533137][T18261] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 1266.541102][T18261] RBP: 00007f60f8ae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1266.549072][T18261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1266.557052][T18261] R13: 00007ffcea4b534f R14: 00007f60f988b300 R15: 0000000000022000 [ 1266.565033][T18261] [ 1266.575318][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1266.596616][T18261] memory: usage 10656kB, limit 0kB, failcnt 332 [ 1266.599424][T18031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1266.608686][T18261] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1266.617996][T18261] Memory cgroup stats for /syz2: [ 1266.653890][T18261] anon 118784 [ 1266.653890][T18261] file 10473472 [ 1266.653890][T18261] kernel 311296 [ 1266.653890][T18261] kernel_stack 65536 [ 1266.653890][T18261] pagetables 81920 [ 1266.653890][T18261] sec_pagetables 0 [ 1266.653890][T18261] percpu 208 [ 1266.653890][T18261] sock 0 [ 1266.653890][T18261] vmalloc 4096 [ 1266.653890][T18261] shmem 10473472 [ 1266.653890][T18261] zswap 0 [ 1266.653890][T18261] zswapped 0 [ 1266.653890][T18261] file_mapped 233472 [ 1266.653890][T18261] file_dirty 0 [ 1266.653890][T18261] file_writeback 0 [ 1266.653890][T18261] swapcached 0 [ 1266.653890][T18261] anon_thp 0 [ 1266.653890][T18261] file_thp 0 [ 1266.653890][T18261] shmem_thp 0 [ 1266.653890][T18261] inactive_anon 118784 [ 1266.653890][T18261] active_anon 10473472 [ 1266.653890][T18261] inactive_file 0 [ 1266.653890][T18261] active_file 0 [ 1266.653890][T18261] unevictable 0 [ 1266.653890][T18261] slab_reclaimable 49504 [ 1266.653890][T18261] slab_unreclaimable 77856 [ 1266.653890][T18261] slab 127360 [ 1266.785731][T18033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1266.808001][T18033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1266.837677][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1266.847191][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1266.870665][T18261] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=18260,uid=0 [ 1266.910422][T18261] Memory cgroup out of memory: Killed process 18260 (syz-executor.2) total-vm:54540kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 1266.929343][T18031] 8021q: adding VLAN 0 to HW filter on device team0 [ 1266.967630][T18029] 8021q: adding VLAN 0 to HW filter on device batadv0 18:36:26 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='\x00') write$cgroup_int(r1, &(0x7f0000000600), 0x12) 18:36:26 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x10) r3 = gettid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r5, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='\x00') [ 1267.015720][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1267.042694][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1267.050474][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1267.117691][T18268] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1267.141684][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1267.155136][T18268] CPU: 0 PID: 18268 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1267.165595][T18268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1267.175670][T18268] Call Trace: [ 1267.178969][T18268] [ 1267.181924][T18268] dump_stack_lvl+0xd1/0x138 [ 1267.186559][T18268] dump_header+0x10b/0x85f [ 1267.191025][T18268] oom_kill_process.cold+0x10/0x15 [ 1267.192342][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1267.196166][T18268] out_of_memory+0x35c/0x14a0 [ 1267.208934][T18268] ? oom_killer_disable+0x280/0x280 [ 1267.214156][T18268] ? mark_held_locks+0x9f/0xe0 [ 1267.218942][T18268] mem_cgroup_out_of_memory+0x206/0x270 [ 1267.224510][T18268] ? mem_cgroup_margin+0x130/0x130 [ 1267.229660][T18268] memory_max_write+0x2f9/0x3c0 [ 1267.234525][T18268] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1267.240608][T18268] ? lock_release+0x810/0x810 [ 1267.245300][T18268] cgroup_file_write+0x1e2/0x770 [ 1267.250255][T18268] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1267.256335][T18268] ? kill_css+0x370/0x370 [ 1267.260681][T18268] ? __virt_addr_valid+0x61/0x2e0 [ 1267.265734][T18268] ? kill_css+0x370/0x370 [ 1267.270076][T18268] kernfs_fop_write_iter+0x3f1/0x600 [ 1267.275387][T18268] vfs_write+0x9ed/0xdd0 [ 1267.279646][T18268] ? kernel_write+0x630/0x630 [ 1267.284361][T18268] ksys_write+0x12b/0x250 [ 1267.288705][T18268] ? __ia32_sys_read+0xb0/0xb0 [ 1267.293482][T18268] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1267.299395][T18268] do_syscall_64+0x39/0xb0 [ 1267.303833][T18268] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1267.309737][T18268] RIP: 0033:0x7fca4928c0c9 [ 1267.314158][T18268] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1267.333779][T18268] RSP: 002b:00007fca4a000168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1267.342203][T18268] RAX: ffffffffffffffda RBX: 00007fca493abf80 RCX: 00007fca4928c0c9 [ 1267.350184][T18268] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 1267.358168][T18268] RBP: 00007fca492e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1267.366149][T18268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1267.374125][T18268] R13: 00007fffce49296f R14: 00007fca4a000300 R15: 0000000000022000 [ 1267.382121][T18268] [ 1267.421181][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1267.441691][T18268] memory: usage 10668kB, limit 0kB, failcnt 112 [ 1267.448774][T18268] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1267.466994][ T9300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.474150][ T9300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1267.492557][T18268] Memory cgroup stats for /syz1: [ 1267.513850][T18268] anon 118784 [ 1267.513850][T18268] file 10473472 [ 1267.513850][T18268] kernel 331776 [ 1267.513850][T18268] kernel_stack 65536 [ 1267.513850][T18268] pagetables 81920 [ 1267.513850][T18268] sec_pagetables 0 [ 1267.513850][T18268] percpu 208 [ 1267.513850][T18268] sock 0 [ 1267.513850][T18268] vmalloc 4096 [ 1267.513850][T18268] shmem 10473472 [ 1267.513850][T18268] zswap 0 [ 1267.513850][T18268] zswapped 0 [ 1267.513850][T18268] file_mapped 233472 [ 1267.513850][T18268] file_dirty 0 [ 1267.513850][T18268] file_writeback 0 [ 1267.513850][T18268] swapcached 0 [ 1267.513850][T18268] anon_thp 0 [ 1267.513850][T18268] file_thp 0 [ 1267.513850][T18268] shmem_thp 0 [ 1267.513850][T18268] inactive_anon 118784 [ 1267.513850][T18268] active_anon 10473472 [ 1267.513850][T18268] inactive_file 0 [ 1267.513850][T18268] active_file 0 [ 1267.513850][T18268] unevictable 0 [ 1267.513850][T18268] slab_reclaimable 44472 [ 1267.513850][T18268] slab_unreclaimable 105216 [ 1267.513850][T18268] slab 149688 [ 1267.642411][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1267.674049][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1267.693119][ T9300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.700258][ T9300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1267.736818][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1267.803055][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1267.810960][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1267.850378][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1267.883956][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1267.914069][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1267.944613][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1267.971863][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1268.000638][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1268.023060][T18031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1268.053306][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1268.141585][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1268.149054][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1268.168871][T18033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1268.198409][T18268] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18267,uid=0 [ 1268.260460][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1268.278165][T12947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1268.337452][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1268.346848][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1268.367447][T18033] device veth0_vlan entered promiscuous mode [ 1268.402208][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1268.409992][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1268.435705][T18033] device veth1_vlan entered promiscuous mode [ 1268.474774][T18268] Memory cgroup out of memory: Killed process 18267 (syz-executor.1) total-vm:56588kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 1268.540864][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1268.563468][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1268.574652][T17982] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1268.623475][T17982] CPU: 0 PID: 17982 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1268.633929][T17982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1268.643999][T17982] Call Trace: [ 1268.647292][T17982] [ 1268.650240][T17982] dump_stack_lvl+0xd1/0x138 [ 1268.652503][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1268.654845][T17982] dump_header+0x10b/0x85f [ 1268.667170][T17982] oom_kill_process.cold+0x10/0x15 [ 1268.672325][T17982] out_of_memory+0x35c/0x14a0 [ 1268.677054][T17982] ? oom_killer_disable+0x280/0x280 [ 1268.682297][T17982] ? find_held_lock+0x2d/0x110 [ 1268.687100][T17982] mem_cgroup_out_of_memory+0x206/0x270 [ 1268.692686][T17982] ? mem_cgroup_margin+0x130/0x130 [ 1268.697828][T17982] ? lock_downgrade+0x6e0/0x6e0 [ 1268.702722][T17982] try_charge_memcg+0xefb/0x12f0 [ 1268.707698][T17982] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1268.713705][T17982] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1268.719467][T17982] ? lock_downgrade+0x6e0/0x6e0 [ 1268.721980][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1268.724327][T17982] ? lock_downgrade+0x6e0/0x6e0 [ 1268.724355][T17982] ? rcu_read_unlock+0x9/0x60 [ 1268.724400][T17982] obj_cgroup_charge+0x2af/0x5e0 [ 1268.724433][T17982] ? sk_prot_alloc+0x5f/0x290 [ 1268.724457][T17982] kmem_cache_alloc+0xb5/0x430 [ 1268.724481][T17982] ? inet_create+0x324/0xea0 [ 1268.724533][T17982] sk_prot_alloc+0x5f/0x290 [ 1268.724559][T17982] sk_alloc+0x3a/0x7a0 [ 1268.724598][T17982] inet_create+0x399/0xea0 [ 1268.773901][T17982] __sock_create+0x359/0x790 [ 1268.778537][T17982] __sys_socket+0x133/0x250 [ 1268.783080][T17982] ? __sys_socket_file+0x1f0/0x1f0 [ 1268.783976][T18033] device veth0_macvtap entered promiscuous mode [ 1268.788216][T17982] __x64_sys_socket+0x73/0xb0 [ 1268.799155][T17982] do_syscall_64+0x39/0xb0 [ 1268.803606][T17982] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1268.809531][T17982] RIP: 0033:0x7f60f8a8d747 [ 1268.813968][T17982] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1268.833599][T17982] RSP: 002b:00007ffcea4b4eb8 EFLAGS: 00000206 ORIG_RAX: 0000000000000029 [ 1268.842037][T17982] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f60f8a8d747 [ 1268.850038][T17982] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 1268.858030][T17982] RBP: 00007ffcea4b4ee0 R08: 0000000000000000 R09: ffffffffff000000 [ 1268.866021][T17982] R10: 0000000000000010 R11: 0000000000000206 R12: 0000000000000032 [ 1268.874010][T17982] R13: 0000000000135497 R14: 000000000000000f R15: 00007f60f8b85d20 [ 1268.882022][T17982] [ 1268.941535][T17982] memory: usage 10376kB, limit 0kB, failcnt 372 [ 1268.948014][T17982] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1268.963824][T18033] device veth1_macvtap entered promiscuous mode [ 1268.969813][T17982] Memory cgroup stats for /syz2: [ 1268.970439][T17982] anon 45056 [ 1268.970439][T17982] file 10473472 [ 1268.970439][T17982] kernel 106496 [ 1268.970439][T17982] kernel_stack 0 [ 1268.970439][T17982] pagetables 8192 [ 1268.970439][T17982] sec_pagetables 0 [ 1268.970439][T17982] percpu 64 [ 1268.970439][T17982] sock 0 [ 1268.970439][T17982] vmalloc 0 [ 1268.970439][T17982] shmem 10473472 [ 1268.970439][T17982] zswap 0 [ 1268.970439][T17982] zswapped 0 [ 1268.970439][T17982] file_mapped 188416 [ 1268.970439][T17982] file_dirty 0 [ 1268.970439][T17982] file_writeback 0 [ 1268.970439][T17982] swapcached 0 [ 1268.970439][T17982] anon_thp 0 [ 1268.970439][T17982] file_thp 0 [ 1268.970439][T17982] shmem_thp 0 [ 1268.970439][T17982] inactive_anon 45056 [ 1268.970439][T17982] active_anon 10473472 [ 1268.970439][T17982] inactive_file 0 [ 1268.970439][T17982] active_file 0 [ 1268.970439][T17982] unevictable 0 [ 1268.970439][T17982] slab_reclaimable 41224 [ 1268.970439][T17982] slab_unreclaimable 44080 [ 1268.970439][T17982] slab 85304 [ 1268.980886][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 18:36:28 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r4 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='\x00') write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 1269.080686][T17982] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17982,uid=0 [ 1269.143930][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1269.150963][T17982] Memory cgroup out of memory: Killed process 17982 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1269.160855][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1269.169267][T18003] syz-executor.1 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=0 [ 1269.209300][T18003] CPU: 1 PID: 18003 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1269.213805][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1269.219724][T18003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1269.237851][T18003] Call Trace: [ 1269.241149][T18003] [ 1269.244100][T18003] dump_stack_lvl+0xd1/0x138 [ 1269.248725][T18003] dump_header+0x10b/0x85f [ 1269.253187][T18003] oom_kill_process.cold+0x10/0x15 [ 1269.258345][T18003] out_of_memory+0x35c/0x14a0 [ 1269.263064][T18003] ? oom_killer_disable+0x280/0x280 [ 1269.268284][T18003] ? find_held_lock+0x2d/0x110 [ 1269.273069][T18003] mem_cgroup_out_of_memory+0x206/0x270 [ 1269.278633][T18003] ? mem_cgroup_margin+0x130/0x130 [ 1269.283757][T18003] ? lock_downgrade+0x6e0/0x6e0 [ 1269.288628][T18003] try_charge_memcg+0xefb/0x12f0 [ 1269.293582][T18003] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1269.299571][T18003] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1269.305308][T18003] ? lock_downgrade+0x6e0/0x6e0 [ 1269.310164][T18003] ? lock_downgrade+0x6e0/0x6e0 [ 1269.315020][T18003] ? rcu_read_unlock+0x9/0x60 [ 1269.319722][T18003] obj_cgroup_charge+0x2af/0x5e0 [ 1269.324674][T18003] __kmem_cache_alloc_node+0xb2/0x430 [ 1269.330050][T18003] ? kvmalloc_node+0xa2/0x1a0 [ 1269.334754][T18003] ? kvmalloc_node+0xa2/0x1a0 [ 1269.339447][T18003] __kmalloc_node+0x4d/0xd0 [ 1269.343975][T18003] kvmalloc_node+0xa2/0x1a0 [ 1269.348502][T18003] xt_alloc_table_info+0x40/0xa0 [ 1269.353460][T18003] do_ip6t_set_ctl+0x514/0xb30 [ 1269.358231][T18003] ? trace_contention_end+0x153/0x1e0 [ 1269.363620][T18003] ? __mutex_lock+0x231/0x1360 [ 1269.368391][T18003] ? compat_do_replace.constprop.0+0x410/0x410 [ 1269.374562][T18003] ? wait_for_completion_io_timeout+0x20/0x20 [ 1269.380637][T18003] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1269.386038][T18003] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 1269.392035][T18003] nf_setsockopt+0x87/0xe0 [ 1269.396461][T18003] ipv6_setsockopt+0x12b/0x190 [ 1269.401238][T18003] tcp_setsockopt+0x9f/0x100 [ 1269.405849][T18003] ? sock_common_recvmsg+0x190/0x190 [ 1269.411142][T18003] __sys_setsockopt+0x2c6/0x5b0 [ 1269.416009][T18003] ? __ia32_sys_recv+0x100/0x100 [ 1269.420963][T18003] ? up_write+0x520/0x520 [ 1269.425316][T18003] ? handle_mm_fault+0x25b/0x850 [ 1269.430283][T18003] __x64_sys_setsockopt+0xbe/0x160 [ 1269.435409][T18003] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1269.441315][T18003] do_syscall_64+0x39/0xb0 [ 1269.445746][T18003] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1269.451644][T18003] RIP: 0033:0x7fca4928d71a [ 1269.456063][T18003] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1269.475677][T18003] RSP: 002b:00007fffce4924d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1269.484098][T18003] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 00007fca4928d71a [ 1269.492071][T18003] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1269.500045][T18003] RBP: 00007fffce492500 R08: 0000000000000558 R09: fefefefefeff646b [ 1269.508021][T18003] R10: 00007fca49384940 R11: 0000000000000206 R12: 00007fffce492560 [ 1269.515993][T18003] R13: 0000000000000003 R14: 00007fffce4924fc R15: 00007fca493848e0 [ 1269.523986][T18003] [ 1269.543662][T18003] memory: usage 10440kB, limit 0kB, failcnt 131 [ 1269.553020][T18003] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1269.568625][T18003] Memory cgroup stats for /syz1: [ 1269.568816][T18003] anon 40960 [ 1269.568816][T18003] file 10473472 [ 1269.568816][T18003] kernel 135168 [ 1269.568816][T18003] kernel_stack 0 [ 1269.568816][T18003] pagetables 8192 [ 1269.568816][T18003] sec_pagetables 0 [ 1269.568816][T18003] percpu 64 [ 1269.568816][T18003] sock 0 [ 1269.568816][T18003] vmalloc 0 [ 1269.568816][T18003] shmem 10473472 [ 1269.568816][T18003] zswap 0 [ 1269.568816][T18003] zswapped 0 [ 1269.568816][T18003] file_mapped 200704 [ 1269.568816][T18003] file_dirty 0 [ 1269.568816][T18003] file_writeback 0 [ 1269.568816][T18003] swapcached 0 [ 1269.568816][T18003] anon_thp 0 [ 1269.568816][T18003] file_thp 0 [ 1269.568816][T18003] shmem_thp 0 [ 1269.568816][T18003] inactive_anon 40960 [ 1269.568816][T18003] active_anon 10473472 [ 1269.568816][T18003] inactive_file 0 [ 1269.568816][T18003] active_file 0 [ 1269.568816][T18003] unevictable 0 [ 1269.568816][T18003] slab_reclaimable 40808 [ 1269.568816][T18003] slab_unreclaimable 78280 [ 1269.568816][T18003] slab 119088 [ 1269.571142][T18033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1269.579170][T18003] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 1269.671768][T18033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.693680][T18033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1269.721964][T18033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.748317][T18033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1269.774615][T18033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.792939][T18033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1269.824008][T18031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1269.838802][T18029] device veth0_vlan entered promiscuous mode [ 1269.857624][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1269.873488][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1269.892141][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1269.900126][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1269.909030][T18003] ,cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18003,uid=0 [ 1269.929032][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1269.952353][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1269.961746][T18003] Memory cgroup out of memory: Killed process 18003 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1269.963080][T18033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1270.051628][T18033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.091316][T18033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1270.113428][T18033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.132289][T18033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1270.143049][T18033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.154687][T18033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1270.225349][T12869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1270.237302][T12869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1270.263005][T12869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1270.272235][T12869] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1270.279556][T12869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1270.290038][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1270.304639][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1270.316671][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 18:36:29 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='\x00') write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 1270.329323][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1270.350176][T18029] device veth1_vlan entered promiscuous mode [ 1270.414820][T18033] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.431476][T18033] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.440199][T18033] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.471296][T18033] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 18:36:30 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r4 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='\x00') write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 1270.637561][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1270.653866][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 18:36:30 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_vmscan_lru_shrink_inactive\x00', r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='\x00') write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 1270.758716][T18029] device veth0_macvtap entered promiscuous mode [ 1270.847097][T18029] device veth1_macvtap entered promiscuous mode [ 1270.895312][T12946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.930049][T12946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.962709][T18029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 18:36:30 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r4 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='\x00') write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 1271.014694][T18029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.067523][T18029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1271.122846][T18029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.163977][T18029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1271.215293][T18029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.251295][T18029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1271.271325][T18029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.303834][T18029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1271.322065][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1271.330306][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1271.362210][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1271.376300][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1271.399314][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1271.463303][T18029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1271.491526][T18029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.521230][T18029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1271.532689][T18029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.554582][T18029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1271.590636][T18029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.637929][T18029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1271.648500][T18029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.674193][T18029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1271.694055][ T1070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.703370][ T1070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.710749][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1271.735056][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1271.751931][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1271.760485][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1271.792034][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1271.871021][T18029] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.924392][T18029] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.941320][T18029] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.950043][T18029] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.026149][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1272.047557][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1272.107878][T18031] device veth0_vlan entered promiscuous mode [ 1272.137319][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1272.147656][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 18:36:31 executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) [ 1272.240183][T18031] device veth1_vlan entered promiscuous mode [ 1272.321489][ T5109] Bluetooth: hci1: command 0x0409 tx timeout [ 1272.342958][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1272.353341][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 18:36:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x15) [ 1272.373919][T12946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1272.391287][T12946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1272.441771][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1272.450379][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1272.492619][T18031] device veth0_macvtap entered promiscuous mode [ 1272.557891][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1272.569410][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1272.593342][T18031] device veth1_macvtap entered promiscuous mode [ 1272.613293][T18310] chnl_net:caif_netlink_parms(): no params data found [ 1272.626202][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1272.660614][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1272.689040][T18031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1272.731297][T18031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.741122][T18031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1272.781300][T18031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.791148][T18031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1272.816145][T18031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.833064][T18031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1272.852105][T18031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.871008][T18031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1272.905246][T18031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.941058][T18031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1272.959460][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1272.992031][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1273.000726][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1273.087475][T12869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1273.095857][T12869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1273.103879][T12869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1273.111812][T12869] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1273.119044][T12869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1273.146449][T18031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1273.181292][T18031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.191122][T18031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1273.219016][T18031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.239414][T18031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1273.253064][T18031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.271370][T18031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1273.310378][T18031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.341377][T18031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1273.352385][T18031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.364095][T18031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1273.435626][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1273.448466][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1273.482604][T18031] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.498377][T18031] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.519221][T18031] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.528342][T18031] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.700422][T18351] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1273.734828][T18351] CPU: 1 PID: 18351 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1273.745293][T18351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1273.755369][T18351] Call Trace: [ 1273.758664][T18351] [ 1273.761616][T18351] dump_stack_lvl+0xd1/0x138 [ 1273.766258][T18351] dump_header+0x10b/0x85f [ 1273.770730][T18351] oom_kill_process.cold+0x10/0x15 [ 1273.775894][T18351] out_of_memory+0x35c/0x14a0 [ 1273.780626][T18351] ? oom_killer_disable+0x280/0x280 [ 1273.785879][T18351] mem_cgroup_out_of_memory+0x206/0x270 [ 1273.791466][T18351] ? mem_cgroup_margin+0x130/0x130 [ 1273.796642][T18351] memory_max_write+0x2f9/0x3c0 [ 1273.801530][T18351] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1273.807635][T18351] ? lock_release+0x810/0x810 [ 1273.812347][T18351] cgroup_file_write+0x1e2/0x770 [ 1273.817322][T18351] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1273.823422][T18351] ? kill_css+0x370/0x370 [ 1273.827792][T18351] ? __virt_addr_valid+0x61/0x2e0 [ 1273.832873][T18351] ? kill_css+0x370/0x370 [ 1273.837241][T18351] kernfs_fop_write_iter+0x3f1/0x600 [ 1273.842579][T18351] vfs_write+0x9ed/0xdd0 [ 1273.846855][T18351] ? kernel_write+0x630/0x630 [ 1273.851552][T18351] ? __fget_files+0x26a/0x440 [ 1273.856255][T18351] ksys_write+0x12b/0x250 [ 1273.860593][T18351] ? __ia32_sys_read+0xb0/0xb0 [ 1273.865370][T18351] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1273.871284][T18351] do_syscall_64+0x39/0xb0 [ 1273.875721][T18351] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1273.881625][T18351] RIP: 0033:0x7fe56748c0c9 [ 1273.886053][T18351] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1273.905667][T18351] RSP: 002b:00007fe56817d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1273.914090][T18351] RAX: ffffffffffffffda RBX: 00007fe5675ac050 RCX: 00007fe56748c0c9 [ 1273.922065][T18351] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 1273.930040][T18351] RBP: 00007fe5674e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1273.938017][T18351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1273.945993][T18351] R13: 00007fff76c8e9bf R14: 00007fe56817d300 R15: 0000000000022000 [ 1273.953989][T18351] [ 1273.968560][T18351] memory: usage 10688kB, limit 0kB, failcnt 261 [ 1273.973023][ T5109] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1273.975268][T18351] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1273.989388][T18351] Memory cgroup stats for /syz5: [ 1273.989580][T18351] anon 122880 [ 1273.989580][T18351] file 10469376 [ 1273.989580][T18351] kernel 344064 [ 1273.989580][T18351] kernel_stack 98304 [ 1273.989580][T18351] pagetables 77824 [ 1273.989580][T18351] sec_pagetables 0 [ 1273.989580][T18351] percpu 208 [ 1273.989580][T18351] sock 0 [ 1273.989580][T18351] vmalloc 4096 [ 1273.989580][T18351] shmem 10465280 [ 1273.989580][T18351] zswap 0 [ 1273.989580][T18351] zswapped 0 [ 1273.989580][T18351] file_mapped 225280 [ 1273.989580][T18351] file_dirty 0 [ 1273.989580][T18351] file_writeback 0 [ 1273.989580][T18351] swapcached 0 [ 1273.989580][T18351] anon_thp 0 [ 1273.989580][T18351] file_thp 0 [ 1273.989580][T18351] shmem_thp 0 [ 1273.989580][T18351] inactive_anon 122880 [ 1273.989580][T18351] active_anon 10465280 [ 1273.989580][T18351] inactive_file 0 [ 1273.989580][T18351] active_file 4096 [ 1273.989580][T18351] unevictable 0 [ 1273.989580][T18351] slab_reclaimable 47728 [ 1273.989580][T18351] slab_unreclaimable 86544 [ 1273.989853][ T5109] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1273.996967][T18351] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 1274.094639][ T5109] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1274.110232][T18351] ,cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=18348,uid=0 [ 1274.111650][T18310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.128687][T18310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.136200][ T5109] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1274.144859][ T5109] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1274.153777][T18351] Memory cgroup out of memory: Killed process 18348 (syz-executor.5) total-vm:56720kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1274.156910][T18310] device bridge_slave_0 entered promiscuous mode [ 1274.171226][ T5109] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 18:36:33 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x0, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000009000000184b000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x5, &(0x7f0000000200)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @exit, @exit], &(0x7f0000000280)='GPL\x00', 0x4, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x80) [ 1274.242556][T18310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.249667][T18310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.280670][T18310] device bridge_slave_1 entered promiscuous mode [ 1274.334812][T18029] syz-executor.5 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=0 [ 1274.352228][T18029] CPU: 0 PID: 18029 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1274.362677][T18029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1274.372751][T18029] Call Trace: [ 1274.376039][T18029] [ 1274.378972][T18029] dump_stack_lvl+0xd1/0x138 [ 1274.383579][T18029] dump_header+0x10b/0x85f [ 1274.388016][T18029] oom_kill_process.cold+0x10/0x15 [ 1274.393147][T18029] out_of_memory+0x35c/0x14a0 [ 1274.397848][T18029] ? find_held_lock+0x2d/0x110 [ 1274.402629][T18029] ? oom_killer_disable+0x280/0x280 [ 1274.407855][T18029] ? find_held_lock+0x2d/0x110 [ 1274.412641][T18029] mem_cgroup_out_of_memory+0x206/0x270 [ 1274.418211][T18029] ? mem_cgroup_margin+0x130/0x130 [ 1274.423335][T18029] ? lock_downgrade+0x6e0/0x6e0 [ 1274.428205][T18029] try_charge_memcg+0xefb/0x12f0 [ 1274.433159][T18029] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1274.439146][T18029] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 1274.444884][T18029] ? lock_downgrade+0x6e0/0x6e0 [ 1274.449741][T18029] ? lock_downgrade+0x6e0/0x6e0 [ 1274.454597][T18029] ? rcu_read_unlock+0x9/0x60 [ 1274.459303][T18029] obj_cgroup_charge+0x2af/0x5e0 [ 1274.464261][T18029] __kmem_cache_alloc_node+0xb2/0x430 [ 1274.469640][T18029] ? kvmalloc_node+0xa2/0x1a0 [ 1274.474343][T18029] ? kvmalloc_node+0xa2/0x1a0 [ 1274.479027][T18029] __kmalloc_node+0x4d/0xd0 [ 1274.483548][T18029] kvmalloc_node+0xa2/0x1a0 [ 1274.488066][T18029] xt_alloc_table_info+0x40/0xa0 [ 1274.493023][T18029] do_ipt_set_ctl+0x514/0xb10 [ 1274.497761][T18029] ? trace_contention_end+0x153/0x1e0 [ 1274.503150][T18029] ? __mutex_lock+0x231/0x1360 [ 1274.507927][T18029] ? compat_do_replace.constprop.0+0x400/0x400 [ 1274.514092][T18029] ? do_ip_setsockopt+0x231/0x3a10 [ 1274.519234][T18029] ? wait_for_completion_io_timeout+0x20/0x20 [ 1274.525329][T18029] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1274.530736][T18029] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 1274.536731][T18029] nf_setsockopt+0x87/0xe0 [ 1274.541163][T18029] ip_setsockopt+0xf2/0x110 [ 1274.545680][T18029] tcp_setsockopt+0x9f/0x100 [ 1274.550289][T18029] ? sock_common_recvmsg+0x190/0x190 [ 1274.555580][T18029] __sys_setsockopt+0x2c6/0x5b0 [ 1274.560453][T18029] ? __ia32_sys_recv+0x100/0x100 [ 1274.565406][T18029] ? up_write+0x520/0x520 [ 1274.569750][T18029] ? handle_mm_fault+0x25b/0x850 [ 1274.574714][T18029] __x64_sys_setsockopt+0xbe/0x160 [ 1274.579842][T18029] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1274.585744][T18029] do_syscall_64+0x39/0xb0 [ 1274.590179][T18029] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1274.596081][T18029] RIP: 0033:0x7fe56748d71a [ 1274.600499][T18029] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1274.620113][T18029] RSP: 002b:00007fff76c8e528 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 1274.628535][T18029] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe56748d71a [ 1274.636507][T18029] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 1274.644480][T18029] RBP: 00007fff76c8e550 R08: 00000000000002d8 R09: ffffffffff000000 [ 1274.652456][T18029] R10: 00007fe567585d80 R11: 0000000000000202 R12: 00007fff76c8e5b0 [ 1274.660432][T18029] R13: 0000000000000003 R14: 00007fff76c8e54c R15: 00007fe567585d20 [ 1274.668435][T18029] [ 1274.674696][T12869] Bluetooth: hci1: command 0x041b tx timeout [ 1274.680817][T18029] memory: usage 10372kB, limit 0kB, failcnt 283 [ 1274.695700][T18029] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1274.698830][T18310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1274.702839][T18029] Memory cgroup stats for /syz5: [ 1274.712020][T18029] anon 36864 [ 1274.712020][T18029] file 10469376 [ 1274.712020][T18029] kernel 110592 [ 1274.712020][T18029] kernel_stack 0 [ 1274.712020][T18029] pagetables 8192 [ 1274.712020][T18029] sec_pagetables 0 [ 1274.712020][T18029] percpu 64 [ 1274.712020][T18029] sock 0 [ 1274.712020][T18029] vmalloc 0 [ 1274.712020][T18029] shmem 10465280 [ 1274.712020][T18029] zswap 0 [ 1274.712020][T18029] zswapped 0 [ 1274.712020][T18029] file_mapped 180224 [ 1274.712020][T18029] file_dirty 0 [ 1274.712020][T18029] file_writeback 0 [ 1274.712020][T18029] swapcached 0 [ 1274.712020][T18029] anon_thp 0 [ 1274.712020][T18029] file_thp 0 [ 1274.712020][T18029] shmem_thp 0 [ 1274.712020][T18029] inactive_anon 36864 [ 1274.712020][T18029] active_anon 10465280 [ 1274.712020][T18029] inactive_file 0 [ 1274.712020][T18029] active_file 4096 [ 1274.712020][T18029] unevictable 0 [ 1274.712020][T18029] slab_reclaimable 43304 [ 1274.712020][T18029] slab_unreclaimable 49816 [ 1274.712020][T18029] slab 93120 [ 1274.814800][T18029] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=18029,uid=0 [ 1274.841498][T18029] Memory cgroup out of memory: Killed process 18029 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1274.875521][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1274.903394][T18310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1274.942709][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.018321][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1275.032630][T18310] team0: Port device team_slave_0 added [ 1275.075277][T18310] team0: Port device team_slave_1 added [ 1275.096323][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.168549][T18310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1275.176740][T18310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1275.191552][ T1070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1275.202944][T18310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1275.210796][T12869] Bluetooth: hci0: command 0x0409 tx timeout [ 1275.223274][T18310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1275.235922][ T1070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.244268][T18310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1275.351324][T18310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1275.416774][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.457024][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1275.513447][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.692297][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 18:36:35 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x0, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x6, &(0x7f0000000200)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @ldst, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @exit, @exit], &(0x7f0000000280)='GPL\x00', 0x4, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) 18:36:35 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x0, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000009000000184b000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x6, &(0x7f0000000200)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @ldst, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @exit, @exit], &(0x7f0000000280)='GPL\x00', 0x4, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:36:35 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x0, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000009000000184b000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x5, &(0x7f0000000200)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @exit, @exit], &(0x7f0000000280)='GPL\x00', 0x4, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x80) [ 1275.840405][T18340] chnl_net:caif_netlink_parms(): no params data found [ 1276.020981][T18310] device hsr_slave_0 entered promiscuous mode [ 1276.048138][T18310] device hsr_slave_1 entered promiscuous mode [ 1276.242329][ T5109] Bluetooth: hci2: command 0x0409 tx timeout [ 1276.363351][T18354] chnl_net:caif_netlink_parms(): no params data found [ 1276.425771][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.602144][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.651844][T18340] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.658956][T18340] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.702568][T18340] device bridge_slave_0 entered promiscuous mode [ 1276.716341][T18340] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.723619][ T5109] Bluetooth: hci1: command 0x040f tx timeout [ 1276.750285][T18340] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.782417][T18340] device bridge_slave_1 entered promiscuous mode [ 1276.819730][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.939619][T18340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1276.963724][T18340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1276.998332][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.074279][T18310] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.195374][T18310] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.254911][T18340] team0: Port device team_slave_0 added [ 1277.281538][ T5109] Bluetooth: hci0: command 0x041b tx timeout [ 1277.322986][T18340] team0: Port device team_slave_1 added [ 1277.359318][T18310] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.383749][T18354] bridge0: port 1(bridge_slave_0) entered blocking state [ 1277.391940][T18354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.400629][T18354] device bridge_slave_0 entered promiscuous mode [ 1277.453443][T18354] bridge0: port 2(bridge_slave_1) entered blocking state [ 1277.460549][T18354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.482889][T18354] device bridge_slave_1 entered promiscuous mode [ 1277.552165][T18310] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.666747][T18354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1277.692053][T18340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1277.699018][T18340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1277.801348][T18340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1277.833313][T18340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1277.871363][T18340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1277.941486][T18340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1277.969786][T18354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1277.991121][T18310] ------------[ cut here ]------------ [ 1278.000026][T18310] DEBUG_LOCKS_WARN_ON(mutex_is_locked(lock)) [ 1278.000106][T18310] WARNING: CPU: 0 PID: 18310 at kernel/locking/mutex-debug.c:102 mutex_destroy+0xc1/0x100 [ 1278.042411][T18310] Modules linked in: [ 1278.046359][T18310] CPU: 0 PID: 18310 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1278.060451][T18340] device hsr_slave_0 entered promiscuous mode [ 1278.071492][T18310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1278.083113][T18340] device hsr_slave_1 entered promiscuous mode [ 1278.090878][T18310] RIP: 0010:mutex_destroy+0xc1/0x100 [ 1278.096917][T18340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1278.102510][T18310] Code: 03 0f b6 14 11 38 d0 7c 04 84 d2 75 3f 8b 05 2e 22 10 0d 85 c0 75 92 48 c7 c6 00 47 4c 8a 48 c7 c7 40 47 4c 8a e8 ef 80 5c 08 <0f> 0b e9 78 ff ff ff 48 c7 c7 00 8a c0 91 e8 2c 64 6c 00 e9 5d ff [ 1278.124077][T18340] Cannot create hsr debugfs directory [ 1278.127676][T18354] team0: Port device team_slave_0 added [ 1278.130145][T18310] RSP: 0018:ffffc90003aefa20 EFLAGS: 00010286 [ 1278.149506][T18310] RAX: 0000000000000000 RBX: ffff88804f8e12d0 RCX: 0000000000000000 [ 1278.158061][T18310] RDX: ffff888028d49d40 RSI: ffffffff8166710c RDI: fffff5200075df36 [ 1278.164960][T12869] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1278.169666][T18310] RBP: ffff88804f8e1000 R08: 0000000000000005 R09: 0000000000000000 [ 1278.181564][T12869] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1278.184095][T18310] R10: 0000000080000000 R11: 0000000000000001 R12: ffff88801fafa000 [ 1278.197054][T18310] R13: ffff88801fafa078 R14: ffffffff8d7af2c0 R15: 0000000000000000 [ 1278.197288][T12869] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1278.212366][T18310] FS: 0000555555f7e400(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 1278.221455][T18310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1278.228162][T18310] CR2: 00007fc545db4050 CR3: 000000004057d000 CR4: 00000000003506e0 [ 1278.238414][T12869] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1278.245613][T18310] DR0: 0000000020000400 DR1: 0000000000000000 DR2: 0000000000000000 [ 1278.254160][T18310] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 1278.262265][T12869] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1278.269324][T18310] Call Trace: [ 1278.272704][T18310] [ 1278.275681][T12869] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1278.282711][T18310] devlink_free+0x83/0x510 [ 1278.287365][T18310] nsim_drv_remove+0x158/0x1d0 [ 1278.288644][T18354] team0: Port device team_slave_1 added [ 1278.309011][T18310] ? nsim_num_vf+0x50/0x50 [ 1278.313508][T18310] device_remove+0xc8/0x170 [ 1278.318069][T18310] device_release_driver_internal+0x4a5/0x700 [ 1278.324321][T18310] ? put_device+0x1f/0x30 [ 1278.328720][T18310] bus_remove_device+0x2e7/0x5a0 [ 1278.331306][ T5109] Bluetooth: hci2: command 0x041b tx timeout [ 1278.333717][T18310] device_del+0x4f7/0xc80 [ 1278.344162][T18310] ? __device_link_del+0x380/0x380 [ 1278.349630][T18310] device_unregister+0x1e/0xc0 [ 1278.354505][T18310] del_device_store+0x34e/0x470 [ 1278.359402][T18310] ? nsim_bus_probe+0x20/0x20 [ 1278.364161][T18310] ? nsim_bus_probe+0x20/0x20 [ 1278.368886][T18310] ? sysfs_file_ops+0x1c0/0x1c0 [ 1278.373873][T18310] bus_attr_store+0x76/0xa0 [ 1278.378417][T18310] ? bus_attr_show+0x90/0x90 [ 1278.383085][T18310] sysfs_kf_write+0x114/0x170 [ 1278.387808][T18310] kernfs_fop_write_iter+0x3f1/0x600 [ 1278.393216][T18310] vfs_write+0x9ed/0xdd0 [ 1278.397502][T18310] ? kernel_write+0x630/0x630 [ 1278.405652][T18310] ? build_open_flags+0x6f0/0x6f0 [ 1278.410703][T18310] ? __fget_light+0x20a/0x270 [ 1278.415451][T18310] ksys_write+0x12b/0x250 [ 1278.419800][T18310] ? __ia32_sys_read+0xb0/0xb0 [ 1278.424637][T18310] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1278.430570][T18310] do_syscall_64+0x39/0xb0 [ 1278.435279][T18310] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1278.441217][T18310] RIP: 0033:0x7f9f9d23de4f [ 1278.445916][T18310] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1278.466163][T18310] RSP: 002b:00007ffd0f24bee0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1278.474783][T18310] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f9f9d23de4f [ 1278.483513][T18310] RDX: 0000000000000001 RSI: 00007ffd0f24bf30 RDI: 0000000000000005 [ 1278.492935][T18310] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007ffd0f24be80 [ 1278.500955][T18310] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f9f9d2e76fe [ 1278.509203][T18310] R13: 00007ffd0f24bf30 R14: 0000000000000000 R15: 00007ffd0f24c600 [ 1278.518452][T18310] [ 1278.518937][T18354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1278.531280][T18310] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1278.534193][T18354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1278.534221][T18354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1278.574894][T18310] CPU: 1 PID: 18310 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00329-g1c48391bc673 #0 [ 1278.585319][T18310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1278.595386][T18310] Call Trace: [ 1278.598673][T18310] [ 1278.601610][T18310] dump_stack_lvl+0xd1/0x138 [ 1278.606229][T18310] panic+0x2cc/0x626 [ 1278.610171][T18310] ? panic_print_sys_info.part.0+0x110/0x110 [ 1278.616188][T18310] ? mutex_destroy+0xc1/0x100 [ 1278.620894][T18310] check_panic_on_warn.cold+0x19/0x35 [ 1278.626297][T18310] __warn+0xf2/0x1a0 [ 1278.630209][T18310] ? __wake_up_klogd.part.0+0x99/0xf0 [ 1278.635612][T18310] ? mutex_destroy+0xc1/0x100 [ 1278.640311][T18310] report_bug+0x1c0/0x210 [ 1278.644660][T18310] handle_bug+0x3c/0x70 [ 1278.648847][T18310] exc_invalid_op+0x18/0x50 [ 1278.653378][T18310] asm_exc_invalid_op+0x1a/0x20 [ 1278.658245][T18310] RIP: 0010:mutex_destroy+0xc1/0x100 [ 1278.663557][T18310] Code: 03 0f b6 14 11 38 d0 7c 04 84 d2 75 3f 8b 05 2e 22 10 0d 85 c0 75 92 48 c7 c6 00 47 4c 8a 48 c7 c7 40 47 4c 8a e8 ef 80 5c 08 <0f> 0b e9 78 ff ff ff 48 c7 c7 00 8a c0 91 e8 2c 64 6c 00 e9 5d ff [ 1278.683181][T18310] RSP: 0018:ffffc90003aefa20 EFLAGS: 00010286 [ 1278.689259][T18310] RAX: 0000000000000000 RBX: ffff88804f8e12d0 RCX: 0000000000000000 [ 1278.697242][T18310] RDX: ffff888028d49d40 RSI: ffffffff8166710c RDI: fffff5200075df36 [ 1278.705232][T18310] RBP: ffff88804f8e1000 R08: 0000000000000005 R09: 0000000000000000 [ 1278.713213][T18310] R10: 0000000080000000 R11: 0000000000000001 R12: ffff88801fafa000 [ 1278.721195][T18310] R13: ffff88801fafa078 R14: ffffffff8d7af2c0 R15: 0000000000000000 [ 1278.729183][T18310] ? vprintk+0x8c/0xa0 [ 1278.733274][T18310] devlink_free+0x83/0x510 [ 1278.737714][T18310] nsim_drv_remove+0x158/0x1d0 [ 1278.742501][T18310] ? nsim_num_vf+0x50/0x50 [ 1278.746943][T18310] device_remove+0xc8/0x170 [ 1278.751462][T18310] device_release_driver_internal+0x4a5/0x700 [ 1278.757549][T18310] ? put_device+0x1f/0x30 [ 1278.761903][T18310] bus_remove_device+0x2e7/0x5a0 [ 1278.766862][T18310] device_del+0x4f7/0xc80 [ 1278.771220][T18310] ? __device_link_del+0x380/0x380 [ 1278.776360][T18310] device_unregister+0x1e/0xc0 [ 1278.781145][T18310] del_device_store+0x34e/0x470 [ 1278.785988][T18310] ? nsim_bus_probe+0x20/0x20 [ 1278.790656][T18310] ? nsim_bus_probe+0x20/0x20 [ 1278.795323][T18310] ? sysfs_file_ops+0x1c0/0x1c0 [ 1278.800163][T18310] bus_attr_store+0x76/0xa0 [ 1278.804656][T18310] ? bus_attr_show+0x90/0x90 [ 1278.809235][T18310] sysfs_kf_write+0x114/0x170 [ 1278.813903][T18310] kernfs_fop_write_iter+0x3f1/0x600 [ 1278.819179][T18310] vfs_write+0x9ed/0xdd0 [ 1278.823407][T18310] ? kernel_write+0x630/0x630 [ 1278.828070][T18310] ? build_open_flags+0x6f0/0x6f0 [ 1278.833078][T18310] ? __fget_light+0x20a/0x270 [ 1278.837742][T18310] ksys_write+0x12b/0x250 [ 1278.842068][T18310] ? __ia32_sys_read+0xb0/0xb0 [ 1278.846848][T18310] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1278.846859][T12869] Bluetooth: hci1: command 0x0419 tx timeout [ 1278.846879][T18310] do_syscall_64+0x39/0xb0 [ 1278.846909][T18310] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1278.846933][T18310] RIP: 0033:0x7f9f9d23de4f [ 1278.846951][T18310] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1278.846970][T18310] RSP: 002b:00007ffd0f24bee0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1278.846991][T18310] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f9f9d23de4f [ 1278.847005][T18310] RDX: 0000000000000001 RSI: 00007ffd0f24bf30 RDI: 0000000000000005 [ 1278.847018][T18310] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007ffd0f24be80 [ 1278.847031][T18310] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f9f9d2e76fe [ 1278.847044][T18310] R13: 00007ffd0f24bf30 R14: 0000000000000000 R15: 00007ffd0f24c600 [ 1278.847066][T18310] [ 1278.852894][T18310] Kernel Offset: disabled [ 1278.948453][T18310] Rebooting in 86400 seconds..