CHANGE): veth0: link becomes ready [ 1732.180936][T30225] 8021q: adding VLAN 0 to HW filter on device team0 [ 1732.208139][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1732.232223][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1732.240903][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1732.248209][ T5092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1732.289984][T30197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1732.304873][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1732.314901][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1732.324539][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1732.333327][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 1732.340461][ T5093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1732.348495][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1732.358364][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1732.368432][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1732.376451][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1732.404581][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1732.418236][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1732.430344][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1732.447958][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1732.481792][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1732.492581][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1732.501199][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1732.510511][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1732.520972][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1732.530214][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1732.539473][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1732.549386][T30225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1732.584906][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1732.594404][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1732.612992][T30197] veth0_vlan: entered promiscuous mode [ 1732.629514][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1732.638374][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1732.650895][T30197] veth1_vlan: entered promiscuous mode [ 1732.699577][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1732.709517][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1732.734892][T30197] veth0_macvtap: entered promiscuous mode [ 1732.757621][T30197] veth1_macvtap: entered promiscuous mode [ 1732.788634][T30197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1732.804922][T30197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.815613][T30197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1732.827912][T30197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.840123][T30197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1732.861997][T30197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1732.881395][T30197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.901476][T30197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1732.921358][T30197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.942107][T30197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1732.949546][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1732.975464][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1732.985376][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1732.994718][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1733.004465][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1733.013780][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1733.027803][T30197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1733.039352][T30197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1733.049036][T30197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1733.058971][T30197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1733.080976][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1733.093891][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1733.117665][T30225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1733.210498][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1733.223463][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1733.266176][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1733.277291][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1733.289065][T30225] veth0_vlan: entered promiscuous mode [ 1733.297660][ T5909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1733.310164][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1733.318694][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1733.326390][ T5909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1733.339914][T30225] veth1_vlan: entered promiscuous mode [ 1733.361702][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1733.370081][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1733.409988][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1733.420217][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1733.433812][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1733.444037][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1733.461495][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1733.470269][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1733.488887][T30225] veth0_macvtap: entered promiscuous mode [ 1733.515478][T30225] veth1_macvtap: entered promiscuous mode [ 1733.578279][T30225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1733.588893][T30225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1733.600795][T30225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1733.611694][T30225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1733.638521][T30225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1733.650308][T30225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1733.666336][T30225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1733.675158][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1733.691886][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1733.700481][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1733.709497][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1733.733615][T30225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1733.746396][T30225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1733.757170][T30225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1733.772150][T30225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1733.791392][T30225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1733.815673][T30225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1733.839868][T30225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1733.871830][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1733.886524][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1733.917579][T30225] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1733.938003][T30225] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1733.966088][T30225] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1733.979541][T30225] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.210454][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1734.257524][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1734.337876][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1734.377784][T30454] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1734.390621][T20447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1734.407200][T20447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1734.416541][T30454] CPU: 1 PID: 30454 Comm: syz-executor.2 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1734.426701][T30454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1734.436817][T30454] Call Trace: [ 1734.440152][T30454] [ 1734.443141][T30454] dump_stack_lvl+0x136/0x150 [ 1734.447920][T30454] dump_header+0x10a/0xd70 [ 1734.452445][T30454] oom_kill_process+0x25d/0x600 [ 1734.457409][T30454] out_of_memory+0x35c/0x1660 [ 1734.462200][T30454] ? oom_killer_disable+0x2b0/0x2b0 [ 1734.467503][T30454] ? kernfs_notify+0x1ac/0x410 [ 1734.472541][T30454] mem_cgroup_out_of_memory+0x206/0x270 [ 1734.478163][T30454] ? mem_cgroup_margin+0x130/0x130 [ 1734.483372][T30454] memory_max_write+0x2f9/0x3c0 [ 1734.488306][T30454] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1734.494456][T30454] ? lock_sync+0x190/0x190 [ 1734.498955][T30454] cgroup_file_write+0x1e2/0x7b0 [ 1734.503959][T30454] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1734.510102][T30454] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1734.515555][T30454] ? __virt_addr_valid+0x61/0x2e0 [ 1734.520684][T30454] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1734.526124][T30454] kernfs_fop_write_iter+0x3f1/0x600 [ 1734.531485][T30454] vfs_write+0x9ee/0xe10 [ 1734.535802][T30454] ? kernel_write+0x670/0x670 [ 1734.537850][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1734.540528][T30454] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1734.553958][T30454] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1734.560246][T30454] ksys_write+0x12b/0x250 [ 1734.564682][T30454] ? __ia32_sys_read+0xb0/0xb0 [ 1734.569531][T30454] ? syscall_enter_from_user_mode+0x26/0x80 [ 1734.575532][T30454] do_syscall_64+0x39/0xb0 [ 1734.580020][T30454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1734.586003][T30454] RIP: 0033:0x7f3cd668c169 [ 1734.590478][T30454] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1734.610159][T30454] RSP: 002b:00007f3cd7369168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1734.618647][T30454] RAX: ffffffffffffffda RBX: 00007f3cd67abf80 RCX: 00007f3cd668c169 [ 1734.626682][T30454] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 1734.634722][T30454] RBP: 00007f3cd66e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1734.642764][T30454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1734.650802][T30454] R13: 00007fff09df690f R14: 00007f3cd7369300 R15: 0000000000022000 [ 1734.658858][T30454] [ 1734.684571][T30454] memory: usage 596kB, limit 0kB, failcnt 1308 [ 1734.690818][T30454] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1734.708108][T30454] Memory cgroup stats for /syz2: [ 1734.708397][T30454] anon 118784 [ 1734.708397][T30454] file 204800 [ 1734.708397][T30454] kernel 245760 [ 1734.708397][T30454] kernel_stack 32768 [ 1734.708397][T30454] pagetables 77824 [ 1734.708397][T30454] sec_pagetables 0 [ 1734.708397][T30454] percpu 64 [ 1734.708397][T30454] sock 0 [ 1734.708397][T30454] vmalloc 0 [ 1734.708397][T30454] shmem 204800 [ 1734.708397][T30454] zswap 0 [ 1734.708397][T30454] zswapped 0 [ 1734.708397][T30454] file_mapped 204800 [ 1734.708397][T30454] file_dirty 0 [ 1734.708397][T30454] file_writeback 0 [ 1734.708397][T30454] swapcached 0 [ 1734.708397][T30454] anon_thp 0 [ 1734.708397][T30454] file_thp 0 [ 1734.708397][T30454] shmem_thp 0 [ 1734.708397][T30454] inactive_anon 163840 [ 1734.708397][T30454] active_anon 159744 [ 1734.708397][T30454] inactive_file 0 [ 1734.708397][T30454] active_file 0 [ 1734.708397][T30454] unevictable 0 [ 1734.708397][T30454] slab_reclaimable 19208 [ 1734.708397][T30454] slab_unreclaimable 82304 [ 1734.708397][T30454] slab 101512 [ 1734.708397][T30454] workingset_refault_anon 0 [ 1734.708397][T30454] workingset_refault_file 0 [ 1734.708397][T30454] workingset_activate_anon 0 [ 1734.708397][T30454] workingset_activate_file 0 [ 1734.708397][T30454] workingset_restore_anon 0 [ 1734.708397][T30454] workingset_restore_file 0 [ 1734.708397][T30454] workingset_nodereclaim 2 [ 1734.708397][T30454] pgscan 398 [ 1734.708397][T30454] pgsteal 65 [ 1734.708397][T30454] pgscan_kswapd 0 [ 1734.708397][T30454] pgscan_direct 398 [ 1734.708397][T30454] pgscan_khugepaged 0 [ 1734.708397][T30454] pgsteal_kswapd 0 [ 1734.708397][T30454] pgsteal_direct 65 [ 1734.708397][T30454] pgsteal_khugepaged 0 [ 1734.708397][T30454] pgfault 34119 [ 1734.708397][T30454] pgmajfault 0 [ 1734.708397][T30454] pgrefill 3648 [ 1734.708397][T30454] pgactivate 333 [ 1734.708397][T30454] pgdeactivate 0 [ 1734.708397][T30454] pglazyfree 0 [ 1734.708397][T30454] pglazyfreed 0 [ 1734.708397][T30454] zswpin 0 [ 1734.708397][T30454] zswpout 0 [ 1734.708397][T30454] thp_fault_alloc 0 03:33:54 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:33:54 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x0, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1734.921609][T30454] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30452,uid=0 [ 1734.944401][T30454] Memory cgroup out of memory: Killed process 30454 (syz-executor.2) total-vm:54680kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 03:33:54 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000180), 0x12) 03:33:54 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:33:54 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r2, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r3, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r1, 0xe, r3, 0x1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180), 0x12) 03:33:54 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r2, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r3, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r1, 0xe, r3, 0x1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180), 0x12) [ 1735.175789][T30197] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1735.284346][T30197] CPU: 0 PID: 30197 Comm: syz-executor.2 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1735.294510][T30197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1735.304619][T30197] Call Trace: [ 1735.307939][T30197] [ 1735.310923][T30197] dump_stack_lvl+0x136/0x150 [ 1735.311292][ T1216] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.315656][T30197] dump_header+0x10a/0xd70 [ 1735.326385][T30197] oom_kill_process+0x25d/0x600 [ 1735.331317][T30197] out_of_memory+0x35c/0x1660 [ 1735.333300][ T1216] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.336047][T30197] ? find_held_lock+0x2d/0x110 [ 1735.347113][T30197] ? oom_killer_disable+0x2b0/0x2b0 [ 1735.352386][T30197] ? rcu_read_unlock+0x9/0x60 [ 1735.357129][T30197] ? find_held_lock+0x2d/0x110 [ 1735.361949][T30197] mem_cgroup_out_of_memory+0x206/0x270 [ 1735.367550][T30197] ? mem_cgroup_margin+0x130/0x130 [ 1735.372741][T30197] ? lock_downgrade+0x690/0x690 [ 1735.377670][T30197] try_charge_memcg+0xf9b/0x13b0 03:33:54 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000180), 0x12) [ 1735.382677][T30197] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1735.388724][T30197] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1735.394502][T30197] ? lock_downgrade+0x690/0x690 [ 1735.399417][T30197] ? lock_downgrade+0x690/0x690 [ 1735.404324][T30197] ? rcu_read_unlock+0x9/0x60 [ 1735.409177][T30197] obj_cgroup_charge+0x2af/0x5e0 [ 1735.414184][T30197] ? dup_fd+0x8d/0xcf0 [ 1735.418308][T30197] kmem_cache_alloc+0xb1/0x3b0 [ 1735.423152][T30197] dup_fd+0x8d/0xcf0 [ 1735.427207][T30197] ? apparmor_task_alloc+0x2bf/0x3b0 [ 1735.432655][T30197] ? bpf_lsm_task_alloc+0x9/0x10 [ 1735.437666][T30197] ? security_task_alloc+0xe4/0x250 [ 1735.442941][T30197] copy_process+0x25cc/0x7580 [ 1735.447684][T30197] ? _raw_spin_unlock+0x28/0x40 [ 1735.452691][T30197] ? wp_page_reuse+0x197/0x570 [ 1735.457615][T30197] ? pidfd_prepare+0x80/0x80 [ 1735.462265][T30197] ? lock_sync+0x190/0x190 [ 1735.466848][T30197] ? do_raw_spin_lock+0x124/0x2b0 [ 1735.471939][T30197] ? spin_bug+0x1c0/0x1c0 [ 1735.476325][T30197] ? lock_downgrade+0x690/0x690 [ 1735.481245][T30197] kernel_clone+0xeb/0x890 [ 1735.485751][T30197] ? create_io_thread+0xe0/0xe0 [ 1735.490669][T30197] ? vm_iomap_memory+0x190/0x190 [ 1735.495677][T30197] ? find_held_lock+0x2d/0x110 [ 1735.500512][T30197] __do_sys_clone+0xba/0x100 [ 1735.505254][T30197] ? kernel_clone+0x890/0x890 [ 1735.510016][T30197] ? syscall_enter_from_user_mode+0x26/0x80 [ 1735.515977][T30197] do_syscall_64+0x39/0xb0 [ 1735.520423][T30197] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1735.526359][T30197] RIP: 0033:0x7f3cd6689e9b [ 1735.530801][T30197] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1735.550614][T30197] RSP: 002b:00007fff09df6b50 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1735.559061][T30197] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3cd6689e9b [ 1735.567057][T30197] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1735.575076][T30197] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555726a400 [ 1735.583088][T30197] R10: 000055555726a6d0 R11: 0000000000000246 R12: 0000000000000001 [ 1735.591171][T30197] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff09df6c30 [ 1735.599185][T30197] 03:33:55 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000180), 0x12) 03:33:55 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1735.774697][T30197] memory: usage 356kB, limit 0kB, failcnt 1334 [ 1735.780940][T30197] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1735.811006][T30197] Memory cgroup stats for /syz2: [ 1735.812160][T30197] anon 40960 [ 1735.812160][T30197] file 204800 [ 1735.812160][T30197] kernel 118784 [ 1735.812160][T30197] kernel_stack 32768 [ 1735.812160][T30197] pagetables 8192 [ 1735.812160][T30197] sec_pagetables 0 [ 1735.812160][T30197] percpu 64 [ 1735.812160][T30197] sock 0 [ 1735.812160][T30197] vmalloc 0 [ 1735.812160][T30197] shmem 204800 [ 1735.812160][T30197] zswap 0 [ 1735.812160][T30197] zswapped 0 [ 1735.812160][T30197] file_mapped 204800 [ 1735.812160][T30197] file_dirty 0 [ 1735.812160][T30197] file_writeback 0 [ 1735.812160][T30197] swapcached 0 [ 1735.812160][T30197] anon_thp 0 [ 1735.812160][T30197] file_thp 0 [ 1735.812160][T30197] shmem_thp 0 [ 1735.812160][T30197] inactive_anon 163840 [ 1735.812160][T30197] active_anon 81920 [ 1735.812160][T30197] inactive_file 0 [ 1735.812160][T30197] active_file 0 [ 1735.812160][T30197] unevictable 0 [ 1735.812160][T30197] slab_reclaimable 12352 [ 1735.812160][T30197] slab_unreclaimable 52264 [ 1735.812160][T30197] slab 64616 [ 1735.812160][T30197] workingset_refault_anon 0 [ 1735.812160][T30197] workingset_refault_file 0 [ 1735.812160][T30197] workingset_activate_anon 0 [ 1735.812160][T30197] workingset_activate_file 0 [ 1735.812160][T30197] workingset_restore_anon 0 [ 1735.812160][T30197] workingset_restore_file 0 [ 1735.812160][T30197] workingset_nodereclaim 2 [ 1735.812160][T30197] pgscan 398 [ 1735.812160][T30197] pgsteal 65 [ 1735.812160][T30197] pgscan_kswapd 0 [ 1735.812160][T30197] pgscan_direct 398 [ 1735.812160][T30197] pgscan_khugepaged 0 [ 1735.812160][T30197] pgsteal_kswapd 0 [ 1735.812160][T30197] pgsteal_direct 65 [ 1735.812160][T30197] pgsteal_khugepaged 0 [ 1735.812160][T30197] pgfault 34130 [ 1735.812160][T30197] pgmajfault 0 [ 1735.812160][T30197] pgrefill 3648 [ 1735.812160][T30197] pgactivate 333 [ 1735.812160][T30197] pgdeactivate 0 [ 1735.812160][T30197] pglazyfree 0 [ 1735.812160][T30197] pglazyfreed 0 [ 1735.812160][T30197] zswpin 0 [ 1735.812160][T30197] zswpout 0 [ 1735.812160][T30197] thp_fault_alloc 0 03:33:55 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r3 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r3, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r2, 0xe, r4, 0x1) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 03:33:55 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 03:33:55 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1736.510863][T30197] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30197,uid=0 [ 1736.546127][T30197] Memory cgroup out of memory: Killed process 30197 (syz-executor.2) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1736.590267][T30500] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1736.654358][T30500] CPU: 1 PID: 30500 Comm: syz-executor.4 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1736.664522][T30500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1736.674638][T30500] Call Trace: [ 1736.677960][T30500] [ 1736.680932][T30500] dump_stack_lvl+0x136/0x150 [ 1736.685678][T30500] dump_header+0x10a/0xd70 [ 1736.690172][T30500] oom_kill_process+0x25d/0x600 [ 1736.695099][T30500] out_of_memory+0x35c/0x1660 [ 1736.699861][T30500] ? oom_killer_disable+0x2b0/0x2b0 [ 1736.705134][T30500] ? kernfs_notify+0x1ac/0x410 [ 1736.709969][T30500] mem_cgroup_out_of_memory+0x206/0x270 [ 1736.715582][T30500] ? mem_cgroup_margin+0x130/0x130 [ 1736.720776][T30500] memory_max_write+0x2f9/0x3c0 [ 1736.725697][T30500] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1736.731839][T30500] ? lock_sync+0x190/0x190 [ 1736.736317][T30500] cgroup_file_write+0x1e2/0x7b0 [ 1736.741331][T30500] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1736.747489][T30500] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1736.752913][T30500] ? __virt_addr_valid+0x61/0x2e0 [ 1736.758040][T30500] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1736.763473][T30500] kernfs_fop_write_iter+0x3f1/0x600 [ 1736.768828][T30500] vfs_write+0x9ee/0xe10 [ 1736.773144][T30500] ? kernel_write+0x670/0x670 [ 1736.777895][T30500] ? __fget_files+0x26a/0x480 [ 1736.782658][T30500] ksys_write+0x12b/0x250 [ 1736.787058][T30500] ? __ia32_sys_read+0xb0/0xb0 [ 1736.791888][T30500] ? syscall_enter_from_user_mode+0x26/0x80 [ 1736.797867][T30500] do_syscall_64+0x39/0xb0 [ 1736.802338][T30500] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1736.808343][T30500] RIP: 0033:0x7fe90388c169 [ 1736.812818][T30500] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1736.832479][T30500] RSP: 002b:00007fe904532168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1736.840973][T30500] RAX: ffffffffffffffda RBX: 00007fe9039ac050 RCX: 00007fe90388c169 [ 1736.849082][T30500] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 1736.857110][T30500] RBP: 00007fe9038e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1736.865330][T30500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1736.873354][T30500] R13: 00007ffc8adc917f R14: 00007fe904532300 R15: 0000000000022000 [ 1736.881407][T30500] [ 1737.016515][T30500] memory: usage 8620kB, limit 0kB, failcnt 919 [ 1737.083071][T30500] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1737.097095][T30500] Memory cgroup stats for /syz4: [ 1737.097386][T30500] anon 143360 [ 1737.097386][T30500] file 8351744 [ 1737.097386][T30500] kernel 331776 [ 1737.097386][T30500] kernel_stack 98304 [ 1737.097386][T30500] pagetables 77824 [ 1737.097386][T30500] sec_pagetables 0 [ 1737.097386][T30500] percpu 64 [ 1737.097386][T30500] sock 0 [ 1737.097386][T30500] vmalloc 0 [ 1737.097386][T30500] shmem 8351744 [ 1737.097386][T30500] zswap 0 [ 1737.097386][T30500] zswapped 0 [ 1737.097386][T30500] file_mapped 225280 [ 1737.097386][T30500] file_dirty 0 [ 1737.097386][T30500] file_writeback 0 [ 1737.097386][T30500] swapcached 0 [ 1737.097386][T30500] anon_thp 0 [ 1737.097386][T30500] file_thp 0 [ 1737.097386][T30500] shmem_thp 0 [ 1737.097386][T30500] inactive_anon 16384 [ 1737.097386][T30500] active_anon 8478720 [ 1737.097386][T30500] inactive_file 0 [ 1737.097386][T30500] active_file 0 [ 1737.097386][T30500] unevictable 0 [ 1737.097386][T30500] slab_reclaimable 45736 [ 1737.097386][T30500] slab_unreclaimable 81656 [ 1737.097386][T30500] slab 127392 [ 1737.097386][T30500] workingset_refault_anon 0 [ 1737.097386][T30500] workingset_refault_file 0 [ 1737.097386][T30500] workingset_activate_anon 0 [ 1737.097386][T30500] workingset_activate_file 0 [ 1737.097386][T30500] workingset_restore_anon 0 [ 1737.097386][T30500] workingset_restore_file 0 [ 1737.097386][T30500] workingset_nodereclaim 0 [ 1737.097386][T30500] pgscan 464 [ 1737.097386][T30500] pgsteal 89 [ 1737.097386][T30500] pgscan_kswapd 0 [ 1737.097386][T30500] pgscan_direct 464 [ 1737.097386][T30500] pgscan_khugepaged 0 [ 1737.097386][T30500] pgsteal_kswapd 0 [ 1737.097386][T30500] pgsteal_direct 89 [ 1737.097386][T30500] pgsteal_khugepaged 0 [ 1737.097386][T30500] pgfault 52198 [ 1737.097386][T30500] pgmajfault 0 [ 1737.097386][T30500] pgrefill 2546 [ 1737.097386][T30500] pgactivate 179 [ 1737.097386][T30500] pgdeactivate 0 [ 1737.097386][T30500] pglazyfree 0 [ 1737.097386][T30500] pglazyfreed 0 [ 1737.097386][T30500] zswpin 0 [ 1737.097386][T30500] zswpout 0 [ 1737.097386][T30500] thp_fault_alloc 0 [ 1737.311696][T30500] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=29801,uid=0 [ 1737.359858][T30500] Memory cgroup out of memory: Killed process 29801 (syz-executor.4) total-vm:50576kB, anon-rss:360kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1737.739840][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1737.754623][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1737.765249][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1737.773616][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1737.780956][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1738.138951][T30513] chnl_net:caif_netlink_parms(): no params data found 03:33:57 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1738.277807][T20447] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.545593][T20447] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.727247][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1738.744585][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1738.754085][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1738.761969][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1738.769276][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1738.809290][T20447] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.838239][T30513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1738.848590][T30513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1738.860300][T30513] bridge_slave_0: entered allmulticast mode [ 1738.873297][T30513] bridge_slave_0: entered promiscuous mode [ 1738.898427][T20447] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.961626][T30513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1738.968788][T30513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1739.001716][T30513] bridge_slave_1: entered allmulticast mode [ 1739.008842][T30513] bridge_slave_1: entered promiscuous mode [ 1739.157873][T30513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1739.244353][T30513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1739.394801][T30513] team0: Port device team_slave_0 added [ 1739.468728][T30513] team0: Port device team_slave_1 added [ 1739.561754][T30513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1739.568842][T30513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1739.626080][T30513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1739.662210][T30532] chnl_net:caif_netlink_parms(): no params data found [ 1739.679592][T30513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1739.687005][T30513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1739.721888][T30513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1739.861457][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 1739.894717][T30513] hsr_slave_0: entered promiscuous mode [ 1739.910181][T30513] hsr_slave_1: entered promiscuous mode [ 1739.917168][T30532] bridge0: port 1(bridge_slave_0) entered blocking state [ 1739.930968][T30532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.938453][T30532] bridge_slave_0: entered allmulticast mode [ 1739.948607][T30532] bridge_slave_0: entered promiscuous mode [ 1739.981088][T30532] bridge0: port 2(bridge_slave_1) entered blocking state [ 1739.989234][T30532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1739.997046][T30532] bridge_slave_1: entered allmulticast mode [ 1740.005282][T30532] bridge_slave_1: entered promiscuous mode [ 1740.082696][T30532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1740.112511][T30532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1740.239579][T30532] team0: Port device team_slave_0 added [ 1740.259690][T30532] team0: Port device team_slave_1 added [ 1740.355876][T30532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1740.368376][T30532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1740.418603][T30532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1740.555593][T30532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1740.568095][T30532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1740.644529][T30532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1740.806469][T20447] hsr_slave_0: left promiscuous mode [ 1740.821548][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 1740.829341][T20447] hsr_slave_1: left promiscuous mode [ 1740.837560][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1740.845330][T20447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1740.858576][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1740.867024][T20447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1740.883677][T20447] bridge_slave_1: left allmulticast mode [ 1740.889578][T20447] bridge_slave_1: left promiscuous mode [ 1740.901629][T20447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1740.910702][T20447] bridge_slave_0: left allmulticast mode [ 1740.924715][T20447] bridge_slave_0: left promiscuous mode [ 1740.930487][T20447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1740.945079][T20447] veth1_macvtap: left promiscuous mode [ 1740.950652][T20447] veth0_macvtap: left promiscuous mode [ 1740.957485][T20447] veth1_vlan: left promiscuous mode [ 1740.962960][T20447] veth0_vlan: left promiscuous mode [ 1741.356289][T20447] team0 (unregistering): Port device team_slave_1 removed [ 1741.375208][T20447] team0 (unregistering): Port device team_slave_0 removed [ 1741.391990][T20447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1741.410419][T20447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1741.520221][T20447] bond0 (unregistering): Released all slaves [ 1741.715156][T30532] hsr_slave_0: entered promiscuous mode [ 1741.729712][T30532] hsr_slave_1: entered promiscuous mode [ 1741.736165][T30532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1741.753289][T30532] Cannot create hsr debugfs directory [ 1741.941550][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 1742.901350][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 1743.794479][T20447] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.976944][T20447] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.031401][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 1744.157839][T20447] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.394531][T20447] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.981508][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 1745.271161][T20447] hsr_slave_0: left promiscuous mode [ 1745.277768][T20447] hsr_slave_1: left promiscuous mode [ 1745.284340][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1745.293432][T20447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1745.304084][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1745.311686][T20447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1745.322414][T20447] bridge_slave_1: left allmulticast mode [ 1745.328124][T20447] bridge_slave_1: left promiscuous mode [ 1745.334416][T20447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1745.343898][T20447] bridge_slave_0: left allmulticast mode [ 1745.349598][T20447] bridge_slave_0: left promiscuous mode [ 1745.356102][T20447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1745.371267][T20447] veth1_macvtap: left promiscuous mode [ 1745.376890][T20447] veth0_macvtap: left promiscuous mode [ 1745.383557][T20447] veth1_vlan: left promiscuous mode [ 1745.388912][T20447] veth0_vlan: left promiscuous mode [ 1746.101372][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 1746.471227][T20447] team0 (unregistering): Port device team_slave_1 removed [ 1746.506315][T20447] team0 (unregistering): Port device team_slave_0 removed [ 1746.529185][T20447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1746.548548][T20447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1746.671069][T20447] bond0 (unregistering): Released all slaves [ 1747.061486][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 1748.555107][T30532] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1748.569591][T30532] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1748.608608][T30532] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1748.634836][T30532] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1748.697407][T30513] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1748.721829][T30513] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1748.738838][T30513] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1748.763295][T30513] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1748.843732][T30532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1748.877469][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1748.886136][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1748.914078][T30532] 8021q: adding VLAN 0 to HW filter on device team0 [ 1748.935556][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1748.944665][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1748.955617][T26287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1748.962833][T26287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1748.975353][T30513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1748.990374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1748.998537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1749.007564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1749.016487][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1749.023640][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1749.032024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1749.052997][T30513] 8021q: adding VLAN 0 to HW filter on device team0 [ 1749.063200][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1749.071041][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1749.079724][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1749.108143][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1749.118491][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1749.138866][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1749.148251][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1749.157683][T26719] bridge0: port 1(bridge_slave_0) entered blocking state [ 1749.164847][T26719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1749.186609][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1749.195051][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1749.206366][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1749.218854][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1749.230740][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1749.245349][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1749.254142][T26719] bridge0: port 2(bridge_slave_1) entered blocking state [ 1749.261434][T26719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1749.269858][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1749.278529][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1749.297083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1749.306314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1749.315710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1749.324521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1749.337740][T30532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1749.373691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1749.393559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1749.407600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1749.416953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1749.431178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1749.440638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1749.454940][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1749.471721][T30513] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1749.485898][T30513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1749.496754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1749.505891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1749.731991][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1749.739563][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1749.756538][T30532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1749.795885][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1749.807503][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1749.840595][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1749.849853][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1749.861819][T30532] veth0_vlan: entered promiscuous mode [ 1749.880820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1749.889625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1749.914679][T30532] veth1_vlan: entered promiscuous mode [ 1749.936806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1749.945282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1749.968705][T30513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1749.988872][T30532] veth0_macvtap: entered promiscuous mode [ 1750.026219][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1750.052511][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1750.079734][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1750.094581][T30532] veth1_macvtap: entered promiscuous mode [ 1750.138028][T30532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1750.161899][T30532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.191380][T30532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1750.210152][T30532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.233395][T30532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1750.243464][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1750.260943][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1750.283782][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1750.295702][T30532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1750.306951][T30532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.319060][T30532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1750.329961][T30532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.342306][T30532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1750.357378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1750.372291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1750.392323][T30532] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.401202][T30532] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.416929][T30532] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.435108][T30532] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.561497][ T9979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1750.569795][ T9979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1750.601555][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1750.643844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1750.653005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1750.672603][ T9979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1750.680896][ T9979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1750.705874][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1750.715717][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1750.724895][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1750.734976][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1750.743487][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1750.756073][T30513] veth0_vlan: entered promiscuous mode [ 1750.778229][T30513] veth1_vlan: entered promiscuous mode [ 1750.835455][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1750.848574][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1750.863799][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1750.882512][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1750.925131][T30513] veth0_macvtap: entered promiscuous mode [ 1750.936674][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1750.948596][T30513] veth1_macvtap: entered promiscuous mode [ 1751.002380][T30513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1751.023101][T30513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1751.051694][T30513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1751.062525][T30513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1751.073232][T30513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1751.084257][T30513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1751.096429][T30513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1751.110291][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1751.125714][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1751.139760][T30513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1751.154366][T30513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1751.164292][T30513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1751.174867][T30513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1751.185084][T30513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1751.195707][T30513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1751.213882][T30513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1751.234333][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1751.249208][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1751.263866][T30513] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.280063][T30513] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.290043][T30513] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.304877][T30513] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.392913][ T9979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1751.402850][ T9979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1751.436510][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1751.449882][ T9979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1751.458151][ T9979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1751.476953][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1752.047233][T30785] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1752.059258][T30785] CPU: 0 PID: 30785 Comm: syz-executor.5 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1752.069412][T30785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1752.079528][T30785] Call Trace: [ 1752.082860][T30785] [ 1752.085844][T30785] dump_stack_lvl+0x136/0x150 [ 1752.090595][T30785] dump_header+0x10a/0xd70 [ 1752.095097][T30785] oom_kill_process+0x25d/0x600 [ 1752.100004][T30785] out_of_memory+0x35c/0x1660 [ 1752.104741][T30785] ? lockdep_hardirqs_on+0x7d/0x100 [ 1752.109983][T30785] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1752.116454][T30785] ? oom_killer_disable+0x2b0/0x2b0 [ 1752.121711][T30785] mem_cgroup_out_of_memory+0x206/0x270 [ 1752.127301][T30785] ? mem_cgroup_margin+0x130/0x130 [ 1752.132471][T30785] memory_max_write+0x2f9/0x3c0 [ 1752.137363][T30785] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1752.143473][T30785] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1752.149583][T30785] ? cgroup_file_write+0x192/0x7b0 [ 1752.154738][T30785] cgroup_file_write+0x1e2/0x7b0 [ 1752.159709][T30785] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1752.165847][T30785] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1752.171272][T30785] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1752.176723][T30785] kernfs_fop_write_iter+0x3f1/0x600 [ 1752.182056][T30785] vfs_write+0x9ee/0xe10 [ 1752.186349][T30785] ? kernel_write+0x670/0x670 [ 1752.191074][T30785] ? __fget_files+0x26a/0x480 [ 1752.195808][T30785] ksys_write+0x12b/0x250 [ 1752.200185][T30785] ? __ia32_sys_read+0xb0/0xb0 [ 1752.204995][T30785] ? syscall_enter_from_user_mode+0x26/0x80 [ 1752.210936][T30785] do_syscall_64+0x39/0xb0 [ 1752.215383][T30785] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1752.221365][T30785] RIP: 0033:0x7f1aed48c169 [ 1752.225821][T30785] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1752.245559][T30785] RSP: 002b:00007f1aee11d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1752.254022][T30785] RAX: ffffffffffffffda RBX: 00007f1aed5abf80 RCX: 00007f1aed48c169 [ 1752.262022][T30785] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 1752.270019][T30785] RBP: 00007f1aed4e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1752.278016][T30785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1752.286015][T30785] R13: 00007ffd54d50b0f R14: 00007f1aee11d300 R15: 0000000000022000 [ 1752.294050][T30785] [ 1752.338410][T30785] memory: usage 600kB, limit 0kB, failcnt 2179 [ 1752.348125][T30785] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1752.356301][T30785] Memory cgroup stats for /syz5: [ 1752.359553][T30785] anon 110592 [ 1752.359553][T30785] file 229376 [ 1752.359553][T30785] kernel 262144 [ 1752.359553][T30785] kernel_stack 65536 [ 1752.359553][T30785] pagetables 77824 [ 1752.359553][T30785] sec_pagetables 0 [ 1752.359553][T30785] percpu 64 [ 1752.359553][T30785] sock 0 [ 1752.359553][T30785] vmalloc 0 [ 1752.359553][T30785] shmem 229376 [ 1752.359553][T30785] zswap 0 [ 1752.359553][T30785] zswapped 0 [ 1752.359553][T30785] file_mapped 221184 [ 1752.359553][T30785] file_dirty 0 [ 1752.359553][T30785] file_writeback 0 [ 1752.359553][T30785] swapcached 0 [ 1752.359553][T30785] anon_thp 0 [ 1752.359553][T30785] file_thp 0 [ 1752.359553][T30785] shmem_thp 0 [ 1752.359553][T30785] inactive_anon 0 [ 1752.359553][T30785] active_anon 339968 [ 1752.359553][T30785] inactive_file 0 [ 1752.359553][T30785] active_file 0 [ 1752.359553][T30785] unevictable 0 [ 1752.359553][T30785] slab_reclaimable 16032 [ 1752.359553][T30785] slab_unreclaimable 74136 [ 1752.359553][T30785] slab 90168 [ 1752.359553][T30785] workingset_refault_anon 0 [ 1752.359553][T30785] workingset_refault_file 0 [ 1752.359553][T30785] workingset_activate_anon 0 [ 1752.359553][T30785] workingset_activate_file 0 [ 1752.359553][T30785] workingset_restore_anon 0 [ 1752.359553][T30785] workingset_restore_file 0 [ 1752.359553][T30785] workingset_nodereclaim 0 [ 1752.359553][T30785] pgscan 117 [ 1752.359553][T30785] pgsteal 13 [ 1752.359553][T30785] pgscan_kswapd 0 [ 1752.359553][T30785] pgscan_direct 117 [ 1752.359553][T30785] pgscan_khugepaged 0 [ 1752.359553][T30785] pgsteal_kswapd 0 [ 1752.359553][T30785] pgsteal_direct 13 [ 1752.359553][T30785] pgsteal_khugepaged 0 [ 1752.359553][T30785] pgfault 9444 [ 1752.359553][T30785] pgmajfault 0 [ 1752.359553][T30785] pgrefill 301 [ 1752.359553][T30785] pgactivate 104 [ 1752.359553][T30785] pgdeactivate 0 [ 1752.359553][T30785] pglazyfree 0 [ 1752.359553][T30785] pglazyfreed 0 [ 1752.359553][T30785] zswpin 0 [ 1752.359553][T30785] zswpout 0 [ 1752.359553][T30785] thp_fault_alloc 0 [ 1752.557036][T30785] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30784,uid=0 [ 1752.586313][T30785] Memory cgroup out of memory: Killed process 30784 (syz-executor.5) total-vm:54548kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 03:34:12 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x0, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:34:12 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 03:34:12 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:34:12 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r3 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r3, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r2, 0xe, r4, 0x1) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 03:34:12 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:34:12 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r2, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r3, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r1, 0xe, r3, 0x1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180), 0x12) [ 1752.776902][T30513] syz-executor.5 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=0 [ 1752.805409][T30513] CPU: 1 PID: 30513 Comm: syz-executor.5 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1752.815652][T30513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1752.825734][T30513] Call Trace: [ 1752.829030][T30513] [ 1752.831985][T30513] dump_stack_lvl+0x136/0x150 [ 1752.836713][T30513] dump_header+0x10a/0xd70 [ 1752.841272][T30513] oom_kill_process+0x25d/0x600 [ 1752.846283][T30513] out_of_memory+0x35c/0x1660 [ 1752.851028][T30513] ? find_held_lock+0x2d/0x110 [ 1752.855831][T30513] ? oom_killer_disable+0x2b0/0x2b0 [ 1752.861072][T30513] ? rcu_read_unlock+0x9/0x60 [ 1752.865799][T30513] ? find_held_lock+0x2d/0x110 [ 1752.870602][T30513] mem_cgroup_out_of_memory+0x206/0x270 [ 1752.876180][T30513] ? mem_cgroup_margin+0x130/0x130 [ 1752.881333][T30513] ? lock_downgrade+0x690/0x690 [ 1752.886241][T30513] try_charge_memcg+0xf9b/0x13b0 [ 1752.891227][T30513] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1752.897250][T30513] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1752.903002][T30513] ? lock_downgrade+0x690/0x690 [ 1752.907895][T30513] ? lock_downgrade+0x690/0x690 [ 1752.912784][T30513] ? rcu_read_unlock+0x9/0x60 [ 1752.917521][T30513] obj_cgroup_charge+0x2af/0x5e0 [ 1752.922504][T30513] __kmem_cache_alloc_node+0xa3/0x320 [ 1752.927911][T30513] ? kvmalloc_node+0xa2/0x1a0 [ 1752.932634][T30513] ? kvmalloc_node+0xa2/0x1a0 [ 1752.937350][T30513] __kmalloc_node+0x51/0x1a0 [ 1752.941986][T30513] kvmalloc_node+0xa2/0x1a0 [ 1752.946529][T30513] xt_alloc_table_info+0x40/0xa0 [ 1752.951604][T30513] do_ip6t_set_ctl+0x514/0xb30 [ 1752.956406][T30513] ? __mutex_lock+0x231/0x1350 [ 1752.961227][T30513] ? compat_do_replace.constprop.0+0x410/0x410 [ 1752.967434][T30513] ? wait_for_completion_io_timeout+0x20/0x20 [ 1752.973557][T30513] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 1752.979579][T30513] nf_setsockopt+0x87/0xe0 [ 1752.984032][T30513] ipv6_setsockopt+0x12b/0x190 [ 1752.988830][T30513] tcp_setsockopt+0x9f/0x100 [ 1752.993485][T30513] ? sock_common_recvmsg+0x190/0x190 [ 1752.998813][T30513] __sys_setsockopt+0x2c6/0x5b0 [ 1753.003703][T30513] ? __ia32_sys_recv+0x100/0x100 [ 1753.008674][T30513] ? up_write+0x520/0x520 [ 1753.013032][T30513] ? handle_mm_fault+0x397/0x9c0 [ 1753.018027][T30513] __x64_sys_setsockopt+0xbe/0x160 [ 1753.023174][T30513] ? syscall_enter_from_user_mode+0x26/0x80 [ 1753.029109][T30513] do_syscall_64+0x39/0xb0 [ 1753.033558][T30513] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1753.039501][T30513] RIP: 0033:0x7f1aed48d7ba [ 1753.043938][T30513] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1753.063582][T30513] RSP: 002b:00007ffd54d50678 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1753.072026][T30513] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 00007f1aed48d7ba [ 1753.080030][T30513] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1753.088027][T30513] RBP: 00007ffd54d506a0 R08: 0000000000000558 R09: fefefefefefeff64 [ 1753.096028][T30513] R10: 00007f1aed585940 R11: 0000000000000206 R12: 00007ffd54d50700 [ 1753.104031][T30513] R13: 0000000000000003 R14: 00007ffd54d5069c R15: 00007f1aed5858e0 [ 1753.112051][T30513] 03:34:12 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1753.460091][T30513] memory: usage 344kB, limit 0kB, failcnt 2198 [ 1753.480239][T30513] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1753.510502][T30513] Memory cgroup stats for /syz5: [ 1753.510986][T30513] anon 40960 [ 1753.510986][T30513] file 229376 [ 1753.510986][T30513] kernel 81920 [ 1753.510986][T30513] kernel_stack 0 [ 1753.510986][T30513] pagetables 8192 [ 1753.510986][T30513] sec_pagetables 0 [ 1753.510986][T30513] percpu 64 [ 1753.510986][T30513] sock 0 [ 1753.510986][T30513] vmalloc 0 [ 1753.510986][T30513] shmem 229376 [ 1753.510986][T30513] zswap 0 [ 1753.510986][T30513] zswapped 0 [ 1753.510986][T30513] file_mapped 221184 [ 1753.510986][T30513] file_dirty 0 [ 1753.510986][T30513] file_writeback 0 [ 1753.510986][T30513] swapcached 0 [ 1753.510986][T30513] anon_thp 0 [ 1753.510986][T30513] file_thp 0 [ 1753.510986][T30513] shmem_thp 0 [ 1753.510986][T30513] inactive_anon 0 [ 1753.510986][T30513] active_anon 270336 [ 1753.510986][T30513] inactive_file 0 [ 1753.510986][T30513] active_file 0 [ 1753.510986][T30513] unevictable 0 [ 1753.510986][T30513] slab_reclaimable 10720 [ 1753.510986][T30513] slab_unreclaimable 48256 [ 1753.510986][T30513] slab 58976 [ 1753.510986][T30513] workingset_refault_anon 0 [ 1753.510986][T30513] workingset_refault_file 0 [ 1753.510986][T30513] workingset_activate_anon 0 [ 1753.510986][T30513] workingset_activate_file 0 [ 1753.510986][T30513] workingset_restore_anon 0 [ 1753.510986][T30513] workingset_restore_file 0 [ 1753.510986][T30513] workingset_nodereclaim 0 [ 1753.510986][T30513] pgscan 117 [ 1753.510986][T30513] pgsteal 13 [ 1753.510986][T30513] pgscan_kswapd 0 [ 1753.510986][T30513] pgscan_direct 117 [ 1753.510986][T30513] pgscan_khugepaged 0 [ 1753.510986][T30513] pgsteal_kswapd 0 [ 1753.510986][T30513] pgsteal_direct 13 [ 1753.510986][T30513] pgsteal_khugepaged 0 [ 1753.510986][T30513] pgfault 9455 [ 1753.510986][T30513] pgmajfault 0 [ 1753.510986][T30513] pgrefill 301 [ 1753.510986][T30513] pgactivate 104 [ 1753.510986][T30513] pgdeactivate 0 [ 1753.510986][T30513] pglazyfree 0 [ 1753.510986][T30513] pglazyfreed 0 [ 1753.510986][T30513] zswpin 0 [ 1753.510986][T30513] zswpout 0 [ 1753.510986][T30513] thp_fault_alloc 0 [ 1753.722328][T30513] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30513,uid=0 03:34:13 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r2, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r3, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r1, 0xe, r3, 0x1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180), 0x12) 03:34:13 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r3 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r3, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r2, 0xe, r4, 0x1) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1753.766855][T30513] Memory cgroup out of memory: Killed process 30513 (syz-executor.5) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 03:34:13 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 03:34:13 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:34:13 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r3 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r3, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r2, 0xe, r4, 0x1) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1755.119322][T18508] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1755.128715][T18508] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1755.138342][T18508] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1755.155420][T18508] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1755.163062][T18508] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1755.395424][T30836] chnl_net:caif_netlink_parms(): no params data found [ 1755.470745][T30836] bridge0: port 1(bridge_slave_0) entered blocking state [ 1755.485033][T30836] bridge0: port 1(bridge_slave_0) entered disabled state [ 1755.495671][T30836] bridge_slave_0: entered allmulticast mode [ 1755.508350][T30836] bridge_slave_0: entered promiscuous mode [ 1755.520527][T30836] bridge0: port 2(bridge_slave_1) entered blocking state [ 1755.536021][T30836] bridge0: port 2(bridge_slave_1) entered disabled state [ 1755.551742][T30836] bridge_slave_1: entered allmulticast mode [ 1755.558931][T30836] bridge_slave_1: entered promiscuous mode [ 1755.602865][T30836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1755.616186][T30836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1755.653586][T30836] team0: Port device team_slave_0 added [ 1755.664320][T30836] team0: Port device team_slave_1 added [ 1755.699480][T30836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1755.707330][T30836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1755.734238][T30836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1755.747378][T30836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1755.754487][T30836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1755.808932][T30836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1755.895817][T30836] hsr_slave_0: entered promiscuous mode [ 1755.907897][T30836] hsr_slave_1: entered promiscuous mode [ 1755.920443][T30836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1755.955199][T30836] Cannot create hsr debugfs directory 03:34:15 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x0, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:34:15 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1756.260629][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1756.271644][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1756.279677][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1756.294399][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1756.308604][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1756.319570][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1756.663956][T27855] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.852425][T27855] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.025762][T27855] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.221447][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 1757.326264][T27855] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.632049][T30868] chnl_net:caif_netlink_parms(): no params data found [ 1757.723269][T30868] bridge0: port 1(bridge_slave_0) entered blocking state [ 1757.731174][T30868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1757.738917][T30868] bridge_slave_0: entered allmulticast mode [ 1757.746447][T30868] bridge_slave_0: entered promiscuous mode [ 1757.765160][T30868] bridge0: port 2(bridge_slave_1) entered blocking state [ 1757.772526][T30868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1757.779859][T30868] bridge_slave_1: entered allmulticast mode [ 1757.787821][T30868] bridge_slave_1: entered promiscuous mode [ 1757.829277][T30868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1757.841913][T30868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1757.909116][T30868] team0: Port device team_slave_0 added [ 1757.920347][T30868] team0: Port device team_slave_1 added [ 1757.965477][T30868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1757.980136][T30868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1758.014909][T30868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1758.044175][T30868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1758.051190][T30868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1758.095982][T30868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1758.194842][T30868] hsr_slave_0: entered promiscuous mode [ 1758.211728][T30868] hsr_slave_1: entered promiscuous mode [ 1758.218326][T30868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1758.234436][T30868] Cannot create hsr debugfs directory [ 1758.421637][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 1758.560093][T27855] hsr_slave_0: left promiscuous mode [ 1758.566251][T27855] hsr_slave_1: left promiscuous mode [ 1758.580971][T27855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1758.589920][T27855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1758.609625][T27855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1758.626198][T27855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1758.646513][T27855] bridge_slave_1: left allmulticast mode [ 1758.656112][T27855] bridge_slave_1: left promiscuous mode [ 1758.667758][T27855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1758.688849][T27855] bridge_slave_0: left allmulticast mode [ 1758.700846][T27855] bridge_slave_0: left promiscuous mode [ 1758.715090][T27855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1758.737839][T27855] veth1_macvtap: left promiscuous mode [ 1758.749101][T27855] veth0_macvtap: left promiscuous mode [ 1758.759242][T27855] veth1_vlan: left promiscuous mode [ 1758.768560][T27855] veth0_vlan: left promiscuous mode [ 1759.046549][T27855] team0 (unregistering): Port device team_slave_1 removed [ 1759.066943][T27855] team0 (unregistering): Port device team_slave_0 removed [ 1759.081692][T27855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1759.097100][T27855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1759.175705][T27855] bond0 (unregistering): Released all slaves [ 1759.310241][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 1760.511662][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 1761.387568][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 1761.723988][T30868] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1761.753424][T30868] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1761.766040][T30868] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1761.784132][T30868] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1761.827870][T30836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1761.848341][T30836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1761.860838][T30836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1761.880424][T30836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1762.002112][T30868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1762.045755][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1762.054626][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1762.085886][T30868] 8021q: adding VLAN 0 to HW filter on device team0 [ 1762.109424][T30836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1762.135766][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1762.148344][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1762.165248][T12463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1762.172646][T12463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1762.191839][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1762.201005][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1762.217559][T12463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1762.224965][T12463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1762.267369][T30836] 8021q: adding VLAN 0 to HW filter on device team0 [ 1762.293909][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1762.309134][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1762.318424][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1762.333604][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1762.347612][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1762.360814][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1762.378164][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1762.416475][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1762.425262][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1762.434402][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1762.445420][ T4744] bridge0: port 1(bridge_slave_0) entered blocking state [ 1762.452694][ T4744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1762.461930][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1762.478126][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1762.487244][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1762.503717][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1762.513054][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1762.522476][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1762.531121][ T4744] bridge0: port 2(bridge_slave_1) entered blocking state [ 1762.538324][ T4744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1762.546979][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1762.556730][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1762.574312][T30868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1762.591825][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 1762.608724][T30868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1762.645247][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1762.661086][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1762.683561][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1762.698296][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1762.709710][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1762.725596][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1762.737640][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1762.778098][T30836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1762.795927][T30836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1762.810943][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1762.831036][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1762.846967][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1762.857080][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1762.866317][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1762.881852][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1763.128727][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1763.136949][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1763.156294][T30868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1763.204622][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1763.213189][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1763.239047][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1763.248700][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1763.264433][T30836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1763.299074][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1763.315690][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1763.327529][T30868] veth0_vlan: entered promiscuous mode [ 1763.341112][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1763.350310][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1763.371176][T30868] veth1_vlan: entered promiscuous mode [ 1763.427730][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1763.439406][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1763.455623][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1763.468947][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1763.474415][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 1763.488086][T30868] veth0_macvtap: entered promiscuous mode [ 1763.508023][T30868] veth1_macvtap: entered promiscuous mode [ 1763.557550][T30868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1763.583056][T30868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1763.628303][T30868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1763.657622][T30868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1763.687752][T30868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1763.699732][T30868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1763.720422][T30868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1763.741506][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1763.749879][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1763.765868][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1763.777765][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1763.797274][T30868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1763.817344][T30868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1763.830049][T30868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1763.848956][T30868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1763.858945][T30868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1763.880421][T30868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1763.892167][T30868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1763.904526][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1763.915006][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1763.934513][T30868] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.945988][T30868] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.957404][T30868] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.966544][T30868] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.997238][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1764.008101][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1764.045872][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1764.055135][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1764.064708][T30836] veth0_vlan: entered promiscuous mode [ 1764.097105][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1764.125235][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1764.191059][T30836] veth1_vlan: entered promiscuous mode [ 1764.204899][ T9979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1764.241871][ T9979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1764.259464][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1764.288550][ T9979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1764.304186][ T9979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1764.314182][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1764.324529][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1764.338173][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1764.350021][T30836] veth0_macvtap: entered promiscuous mode [ 1764.364275][T30836] veth1_macvtap: entered promiscuous mode [ 1764.433885][T30836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1764.445369][T30836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1764.462928][T30836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1764.478157][T30836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1764.491031][T30836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1764.509087][T30836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1764.547951][T30836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1764.558669][T30836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1764.571792][T30836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1764.582466][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1764.594309][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1764.619741][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1764.649621][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1764.671360][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 1764.707913][T30836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1764.726071][T30836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1764.737204][T30836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1764.751216][T30836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1764.761522][T30836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1764.772520][T30836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1764.782817][T30836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1764.793815][T30836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1764.808382][T30836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1764.851754][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1764.873400][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1764.904321][T30836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.936414][T30836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.959522][T30836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.993532][T30836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1765.196354][ T9979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1765.215437][ T9979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1765.238663][T31058] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1765.252168][T31058] CPU: 0 PID: 31058 Comm: syz-executor.2 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1765.262325][T31058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1765.272452][T31058] Call Trace: [ 1765.275781][T31058] [ 1765.278761][T31058] dump_stack_lvl+0x136/0x150 [ 1765.283511][T31058] dump_header+0x10a/0xd70 [ 1765.288017][T31058] oom_kill_process+0x25d/0x600 [ 1765.292960][T31058] out_of_memory+0x35c/0x1660 [ 1765.297738][T31058] ? oom_killer_disable+0x2b0/0x2b0 [ 1765.303015][T31058] ? kernfs_notify+0x1ac/0x410 [ 1765.307884][T31058] ? find_held_lock+0x2d/0x110 [ 1765.312724][T31058] mem_cgroup_out_of_memory+0x206/0x270 [ 1765.315715][ T5909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1765.318310][T31058] ? mem_cgroup_margin+0x130/0x130 [ 1765.318366][T31058] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1765.327373][ T5909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1765.331503][T31058] memory_max_write+0x2f9/0x3c0 [ 1765.331557][T31058] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1765.331608][T31058] ? lock_sync+0x190/0x190 [ 1765.360191][T31058] cgroup_file_write+0x1e2/0x7b0 [ 1765.365200][T31058] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1765.371352][T31058] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1765.376788][T31058] ? __virt_addr_valid+0x61/0x2e0 [ 1765.381905][T31058] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1765.387345][T31058] kernfs_fop_write_iter+0x3f1/0x600 [ 1765.392720][T31058] vfs_write+0x9ee/0xe10 [ 1765.397048][T31058] ? kernel_write+0x670/0x670 [ 1765.401835][T31058] ksys_write+0x12b/0x250 [ 1765.406249][T31058] ? __ia32_sys_read+0xb0/0xb0 [ 1765.411112][T31058] do_syscall_64+0x39/0xb0 [ 1765.415601][T31058] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1765.421583][T31058] RIP: 0033:0x7fa87e68c169 [ 1765.426066][T31058] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1765.445742][T31058] RSP: 002b:00007fa87f44d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1765.454236][T31058] RAX: ffffffffffffffda RBX: 00007fa87e7abf80 RCX: 00007fa87e68c169 [ 1765.462273][T31058] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 1765.470306][T31058] RBP: 00007fa87e6e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1765.478426][T31058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1765.486457][T31058] R13: 00007fffe15fb76f R14: 00007fa87f44d300 R15: 0000000000022000 [ 1765.494526][T31058] [ 1765.500154][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1765.509110][T31058] memory: usage 588kB, limit 0kB, failcnt 1351 [ 1765.515606][T31058] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1765.515950][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1765.522546][T31058] Memory cgroup stats for /syz2: [ 1765.522825][T31058] anon 114688 [ 1765.522825][T31058] file 204800 [ 1765.522825][T31058] kernel 237568 [ 1765.522825][T31058] kernel_stack 32768 [ 1765.522825][T31058] pagetables 86016 [ 1765.522825][T31058] sec_pagetables 0 [ 1765.522825][T31058] percpu 64 [ 1765.522825][T31058] sock 0 [ 1765.522825][T31058] vmalloc 0 [ 1765.522825][T31058] shmem 204800 [ 1765.522825][T31058] zswap 0 [ 1765.522825][T31058] zswapped 0 [ 1765.522825][T31058] file_mapped 204800 [ 1765.522825][T31058] file_dirty 0 [ 1765.522825][T31058] file_writeback 0 [ 1765.522825][T31058] swapcached 0 [ 1765.522825][T31058] anon_thp 0 [ 1765.522825][T31058] file_thp 0 [ 1765.522825][T31058] shmem_thp 0 [ 1765.522825][T31058] inactive_anon 163840 [ 1765.522825][T31058] active_anon 155648 [ 1765.522825][T31058] inactive_file 0 [ 1765.522825][T31058] active_file 0 [ 1765.522825][T31058] unevictable 0 [ 1765.522825][T31058] slab_reclaimable 19592 [ 1765.522825][T31058] slab_unreclaimable 74136 [ 1765.522825][T31058] slab 93728 [ 1765.522825][T31058] workingset_refault_anon 0 [ 1765.522825][T31058] workingset_refault_file 0 [ 1765.522825][T31058] workingset_activate_anon 0 [ 1765.522825][T31058] workingset_activate_file 0 [ 1765.522825][T31058] workingset_restore_anon 0 [ 1765.522825][T31058] workingset_restore_file 0 [ 1765.522825][T31058] workingset_nodereclaim 2 [ 1765.522825][T31058] pgscan 398 [ 1765.522825][T31058] pgsteal 65 [ 1765.522825][T31058] pgscan_kswapd 0 [ 1765.522825][T31058] pgscan_direct 398 [ 1765.522825][T31058] pgscan_khugepaged 0 [ 1765.522825][T31058] pgsteal_kswapd 0 [ 1765.522825][T31058] pgsteal_direct 65 [ 1765.522825][T31058] pgsteal_khugepaged 0 [ 1765.522825][T31058] pgfault 34194 [ 1765.522825][T31058] pgmajfault 0 [ 1765.522825][T31058] pgrefill 3648 [ 1765.522825][T31058] pgactivate 333 [ 1765.522825][T31058] pgdeactivate 0 [ 1765.522825][T31058] pglazyfree 0 [ 1765.522825][T31058] pglazyfreed 0 [ 1765.522825][T31058] zswpin 0 [ 1765.522825][T31058] zswpout 0 [ 1765.522825][T31058] thp_fault_alloc 0 [ 1765.721635][T31058] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=31057,uid=0 [ 1765.737372][T31058] Memory cgroup out of memory: Killed process 31058 (syz-executor.2) total-vm:54548kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 1765.801706][T30868] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1765.823432][T30868] CPU: 0 PID: 30868 Comm: syz-executor.2 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1765.833758][T30868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1765.843945][T30868] Call Trace: [ 1765.847261][T30868] [ 1765.850302][T30868] dump_stack_lvl+0x136/0x150 [ 1765.855017][T30868] dump_header+0x10a/0xd70 [ 1765.859507][T30868] oom_kill_process+0x25d/0x600 [ 1765.864501][T30868] out_of_memory+0x35c/0x1660 [ 1765.869400][T30868] ? find_held_lock+0x2d/0x110 [ 1765.874198][T30868] ? oom_killer_disable+0x2b0/0x2b0 [ 1765.879439][T30868] ? rcu_read_unlock+0x9/0x60 [ 1765.884164][T30868] ? find_held_lock+0x2d/0x110 [ 1765.888961][T30868] mem_cgroup_out_of_memory+0x206/0x270 [ 1765.894537][T30868] ? mem_cgroup_margin+0x130/0x130 [ 1765.899673][T30868] ? lock_downgrade+0x690/0x690 [ 1765.904661][T30868] try_charge_memcg+0xf9b/0x13b0 [ 1765.909641][T30868] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1765.915666][T30868] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1765.921418][T30868] ? lock_downgrade+0x690/0x690 [ 1765.926320][T30868] ? lock_downgrade+0x690/0x690 [ 1765.931226][T30868] obj_cgroup_charge+0x2af/0x5e0 [ 1765.936210][T30868] ? __d_alloc+0x32/0x980 [ 1765.940578][T30868] kmem_cache_alloc_lru+0x142/0x600 [ 1765.945820][T30868] ? print_usage_bug.part.0+0x660/0x660 [ 1765.951411][T30868] __d_alloc+0x32/0x980 [ 1765.955603][T30868] ? __lock_acquire+0x1916/0x5df0 [ 1765.960675][T30868] d_alloc+0x4e/0x240 [ 1765.964701][T30868] d_alloc_parallel+0xe8/0x1530 [ 1765.969688][T30868] ? __lock_acquire+0x1916/0x5df0 [ 1765.974840][T30868] ? __d_lookup_rcu+0x4e0/0x4e0 [ 1765.979743][T30868] ? lockdep_init_map_type+0x21e/0x810 [ 1765.985242][T30868] ? lockdep_init_map_type+0x21e/0x810 [ 1765.990752][T30868] __lookup_slow+0x193/0x460 [ 1765.995388][T30868] ? __lookup_hash+0x180/0x180 [ 1766.000203][T30868] ? lock_sync+0x190/0x190 [ 1766.004652][T30868] ? lockref_get_not_dead+0x6a/0x80 [ 1766.009915][T30868] walk_component+0x33f/0x5a0 [ 1766.014623][T30868] path_lookupat+0x1ba/0x840 [ 1766.019250][T30868] filename_lookup+0x1d2/0x590 [ 1766.024045][T30868] ? may_linkat+0x3b0/0x3b0 [ 1766.028576][T30868] ? __might_fault+0xe2/0x190 [ 1766.033321][T30868] ? __phys_addr_symbol+0x30/0x70 [ 1766.038396][T30868] ? __check_object_size+0x323/0x730 [ 1766.043747][T30868] ? strncpy_from_user+0x28b/0x3d0 [ 1766.048932][T30868] ? getname_flags.part.0+0x1dd/0x4f0 [ 1766.054368][T30868] user_path_at_empty+0x46/0x60 [ 1766.059264][T30868] __x64_sys_umount+0xfc/0x190 [ 1766.064081][T30868] ? path_umount+0x10b0/0x10b0 [ 1766.068905][T30868] ? syscall_enter_from_user_mode+0x26/0x80 [ 1766.074859][T30868] do_syscall_64+0x39/0xb0 [ 1766.079304][T30868] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1766.085240][T30868] RIP: 0033:0x7fa87e68d5d7 [ 1766.089683][T30868] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1766.109322][T30868] RSP: 002b:00007fffe15fa8c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1766.117762][T30868] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fa87e68d5d7 [ 1766.125755][T30868] RDX: 00007fffe15fa99e RSI: 000000000000000a RDI: 00007fffe15fa990 [ 1766.133758][T30868] RBP: 00007fffe15fa990 R08: 00000000ffffffff R09: 00007fffe15fa760 [ 1766.141838][T30868] R10: 00005555559ef853 R11: 0000000000000246 R12: 00007fa87e6e6cdc [ 1766.149832][T30868] R13: 00007fffe15fba50 R14: 00005555559ef810 R15: 00007fffe15fba90 [ 1766.157843][T30868] [ 1766.304390][T30868] memory: usage 324kB, limit 0kB, failcnt 1370 [ 1766.310637][T30868] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1766.317915][T30868] Memory cgroup stats for /syz2: [ 1766.318169][T30868] anon 40960 [ 1766.318169][T30868] file 204800 [ 1766.318169][T30868] kernel 86016 [ 1766.318169][T30868] kernel_stack 0 [ 1766.318169][T30868] pagetables 8192 [ 1766.318169][T30868] sec_pagetables 0 [ 1766.318169][T30868] percpu 64 [ 1766.318169][T30868] sock 0 [ 1766.318169][T30868] vmalloc 0 [ 1766.318169][T30868] shmem 204800 [ 1766.318169][T30868] zswap 0 [ 1766.318169][T30868] zswapped 0 [ 1766.318169][T30868] file_mapped 204800 [ 1766.318169][T30868] file_dirty 0 [ 1766.318169][T30868] file_writeback 0 [ 1766.318169][T30868] swapcached 0 [ 1766.318169][T30868] anon_thp 0 [ 1766.318169][T30868] file_thp 0 [ 1766.318169][T30868] shmem_thp 0 [ 1766.318169][T30868] inactive_anon 163840 [ 1766.318169][T30868] active_anon 81920 [ 1766.318169][T30868] inactive_file 0 [ 1766.318169][T30868] active_file 0 [ 1766.318169][T30868] unevictable 0 [ 1766.318169][T30868] slab_reclaimable 15304 [ 1766.318169][T30868] slab_unreclaimable 44984 [ 1766.318169][T30868] slab 60288 [ 1766.318169][T30868] workingset_refault_anon 0 [ 1766.318169][T30868] workingset_refault_file 0 [ 1766.318169][T30868] workingset_activate_anon 0 [ 1766.318169][T30868] workingset_activate_file 0 [ 1766.318169][T30868] workingset_restore_anon 0 [ 1766.318169][T30868] workingset_restore_file 0 [ 1766.318169][T30868] workingset_nodereclaim 2 [ 1766.318169][T30868] pgscan 398 [ 1766.318169][T30868] pgsteal 65 [ 1766.318169][T30868] pgscan_kswapd 0 [ 1766.318169][T30868] pgscan_direct 398 [ 1766.318169][T30868] pgscan_khugepaged 0 [ 1766.318169][T30868] pgsteal_kswapd 0 [ 1766.318169][T30868] pgsteal_direct 65 [ 1766.318169][T30868] pgsteal_khugepaged 0 [ 1766.318169][T30868] pgfault 34197 [ 1766.318169][T30868] pgmajfault 0 [ 1766.318169][T30868] pgrefill 3648 [ 1766.318169][T30868] pgactivate 333 [ 1766.318169][T30868] pgdeactivate 0 [ 1766.318169][T30868] pglazyfree 0 [ 1766.318169][T30868] pglazyfreed 0 [ 1766.318169][T30868] zswpin 0 [ 1766.318169][T30868] zswpout 0 [ 1766.318169][T30868] thp_fault_alloc 0 [ 1766.516198][T30868] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30868,uid=0 [ 1766.628046][T30868] Memory cgroup out of memory: Killed process 30868 (syz-executor.2) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1766.790545][T31071] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1766.802958][T31071] CPU: 0 PID: 31071 Comm: syz-executor.4 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1766.813209][T31071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1766.823406][T31071] Call Trace: [ 1766.826733][T31071] [ 1766.829713][T31071] dump_stack_lvl+0x136/0x150 [ 1766.834549][T31071] dump_header+0x10a/0xd70 [ 1766.839143][T31071] oom_kill_process+0x25d/0x600 [ 1766.844453][T31071] out_of_memory+0x35c/0x1660 [ 1766.849320][T31071] ? oom_killer_disable+0x2b0/0x2b0 [ 1766.854625][T31071] mem_cgroup_out_of_memory+0x206/0x270 [ 1766.860328][T31071] ? mem_cgroup_margin+0x130/0x130 [ 1766.865525][T31071] memory_max_write+0x2f9/0x3c0 [ 1766.870453][T31071] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1766.876605][T31071] ? lock_sync+0x190/0x190 [ 1766.881107][T31071] cgroup_file_write+0x1e2/0x7b0 [ 1766.886110][T31071] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1766.892255][T31071] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1766.897706][T31071] ? __virt_addr_valid+0x61/0x2e0 [ 1766.902822][T31071] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1766.908255][T31071] kernfs_fop_write_iter+0x3f1/0x600 [ 1766.913623][T31071] vfs_write+0x9ee/0xe10 [ 1766.917996][T31071] ? kernel_write+0x670/0x670 [ 1766.922758][T31071] ? __fget_files+0x26a/0x480 [ 1766.927531][T31071] ksys_write+0x12b/0x250 [ 1766.931951][T31071] ? __ia32_sys_read+0xb0/0xb0 [ 1766.936794][T31071] ? syscall_enter_from_user_mode+0x26/0x80 [ 1766.942860][T31071] do_syscall_64+0x39/0xb0 [ 1766.947423][T31071] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1766.953397][T31071] RIP: 0033:0x7fc8dfe8c169 [ 1766.957867][T31071] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1766.977715][T31071] RSP: 002b:00007fc8e0b37168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1766.986214][T31071] RAX: ffffffffffffffda RBX: 00007fc8dffabf80 RCX: 00007fc8dfe8c169 [ 1766.994269][T31071] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 1767.002387][T31071] RBP: 00007fc8dfee7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1767.010501][T31071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1767.018573][T31071] R13: 00007fffb60a0d5f R14: 00007fc8e0b37300 R15: 0000000000022000 [ 1767.026602][T31071] [ 1767.037966][T31071] memory: usage 8564kB, limit 0kB, failcnt 932 [ 1767.046591][T31071] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1767.060039][T31071] Memory cgroup stats for /syz4: [ 1767.060324][T31071] anon 114688 [ 1767.060324][T31071] file 8351744 [ 1767.060324][T31071] kernel 290816 [ 1767.060324][T31071] kernel_stack 65536 [ 1767.060324][T31071] pagetables 77824 [ 1767.060324][T31071] sec_pagetables 0 [ 1767.060324][T31071] percpu 64 [ 1767.060324][T31071] sock 0 [ 1767.060324][T31071] vmalloc 0 [ 1767.060324][T31071] shmem 8351744 [ 1767.060324][T31071] zswap 0 [ 1767.060324][T31071] zswapped 0 [ 1767.060324][T31071] file_mapped 225280 [ 1767.060324][T31071] file_dirty 0 [ 1767.060324][T31071] file_writeback 0 [ 1767.060324][T31071] swapcached 0 [ 1767.060324][T31071] anon_thp 0 [ 1767.060324][T31071] file_thp 0 [ 1767.060324][T31071] shmem_thp 0 [ 1767.060324][T31071] inactive_anon 16384 [ 1767.060324][T31071] active_anon 8450048 [ 1767.060324][T31071] inactive_file 0 [ 1767.060324][T31071] active_file 0 [ 1767.060324][T31071] unevictable 0 [ 1767.060324][T31071] slab_reclaimable 49496 [ 1767.060324][T31071] slab_unreclaimable 74136 [ 1767.060324][T31071] slab 123632 [ 1767.060324][T31071] workingset_refault_anon 0 [ 1767.060324][T31071] workingset_refault_file 0 [ 1767.060324][T31071] workingset_activate_anon 0 [ 1767.060324][T31071] workingset_activate_file 0 [ 1767.060324][T31071] workingset_restore_anon 0 [ 1767.060324][T31071] workingset_restore_file 0 [ 1767.060324][T31071] workingset_nodereclaim 0 [ 1767.060324][T31071] pgscan 464 [ 1767.060324][T31071] pgsteal 89 [ 1767.060324][T31071] pgscan_kswapd 0 [ 1767.060324][T31071] pgscan_direct 464 [ 1767.060324][T31071] pgscan_khugepaged 0 [ 1767.060324][T31071] pgsteal_kswapd 0 [ 1767.060324][T31071] pgsteal_direct 89 [ 1767.060324][T31071] pgsteal_khugepaged 0 [ 1767.060324][T31071] pgfault 52266 [ 1767.060324][T31071] pgmajfault 0 [ 1767.060324][T31071] pgrefill 2546 [ 1767.060324][T31071] pgactivate 179 [ 1767.060324][T31071] pgdeactivate 0 [ 1767.060324][T31071] pglazyfree 0 [ 1767.060324][T31071] pglazyfreed 0 [ 1767.060324][T31071] zswpin 0 [ 1767.060324][T31071] zswpout 0 [ 1767.060324][T31071] thp_fault_alloc 0 [ 1767.261000][T31071] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=30836,uid=0 [ 1767.277306][T31071] Memory cgroup out of memory: Killed process 30836 (syz-executor.4) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 03:34:28 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:34:28 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r3 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r3, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r2, 0xe, r4, 0x1) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 03:34:28 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 03:34:28 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:34:28 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x0, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:34:28 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1768.575961][T30225] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 1768.593250][T30225] CPU: 0 PID: 30225 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1768.603421][T30225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1768.613534][T30225] Call Trace: [ 1768.616853][T30225] [ 1768.619824][T30225] dump_stack_lvl+0x136/0x150 [ 1768.624559][T30225] dump_header+0x10a/0xd70 [ 1768.629059][T30225] oom_kill_process+0x25d/0x600 [ 1768.633964][T30225] out_of_memory+0x35c/0x1660 [ 1768.638694][T30225] ? find_held_lock+0x2d/0x110 [ 1768.643521][T30225] ? oom_killer_disable+0x2b0/0x2b0 [ 1768.648797][T30225] ? rcu_read_unlock+0x9/0x60 [ 1768.653526][T30225] ? find_held_lock+0x2d/0x110 [ 1768.658325][T30225] mem_cgroup_out_of_memory+0x206/0x270 [ 1768.663923][T30225] ? mem_cgroup_margin+0x130/0x130 [ 1768.669157][T30225] ? lock_downgrade+0x690/0x690 [ 1768.674143][T30225] try_charge_memcg+0xf9b/0x13b0 [ 1768.679127][T30225] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1768.685146][T30225] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1768.690985][T30225] ? lock_downgrade+0x690/0x690 [ 1768.695876][T30225] ? lock_downgrade+0x690/0x690 [ 1768.700763][T30225] ? rcu_read_unlock+0x9/0x60 [ 1768.705495][T30225] obj_cgroup_charge+0x2af/0x5e0 [ 1768.710472][T30225] ? copy_process+0x3c0/0x7580 [ 1768.715274][T30225] kmem_cache_alloc_node+0xa8/0x3e0 [ 1768.720512][T30225] copy_process+0x3c0/0x7580 [ 1768.725137][T30225] ? _raw_spin_unlock+0x28/0x40 [ 1768.730112][T30225] ? wp_page_reuse+0x197/0x570 [ 1768.734918][T30225] ? do_wp_page+0x4be/0x3570 [ 1768.739555][T30225] ? pidfd_prepare+0x80/0x80 [ 1768.744180][T30225] ? lock_sync+0x190/0x190 [ 1768.748632][T30225] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1768.754053][T30225] ? do_raw_spin_lock+0x124/0x2b0 [ 1768.759116][T30225] ? spin_bug+0x1c0/0x1c0 [ 1768.763484][T30225] ? lock_downgrade+0x690/0x690 [ 1768.768389][T30225] kernel_clone+0xeb/0x890 [ 1768.772846][T30225] ? create_io_thread+0xe0/0xe0 [ 1768.777736][T30225] ? vm_iomap_memory+0x190/0x190 [ 1768.782750][T30225] ? find_held_lock+0x2d/0x110 [ 1768.787559][T30225] __do_sys_clone+0xba/0x100 [ 1768.792187][T30225] ? kernel_clone+0x890/0x890 [ 1768.796914][T30225] ? syscall_enter_from_user_mode+0x26/0x80 [ 1768.802869][T30225] do_syscall_64+0x39/0xb0 [ 1768.807325][T30225] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1768.813276][T30225] RIP: 0033:0x7f56b0689e9b [ 1768.817746][T30225] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1768.837655][T30225] RSP: 002b:00007ffd9bdfe970 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1768.846111][T30225] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f56b0689e9b [ 1768.854117][T30225] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1768.862111][T30225] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555557007400 [ 1768.870125][T30225] R10: 00005555570076d0 R11: 0000000000000246 R12: 0000000000000001 [ 1768.878118][T30225] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd9bdfea50 [ 1768.886132][T30225] [ 1769.083821][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.121465][T30225] memory: usage 10344kB, limit 0kB, failcnt 670 [ 1769.128645][T30225] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1769.162004][T30225] Memory cgroup stats for /syz1: [ 1769.162297][T30225] anon 40960 [ 1769.162297][T30225] file 10461184 [ 1769.162297][T30225] kernel 90112 [ 1769.162297][T30225] kernel_stack 0 [ 1769.162297][T30225] pagetables 8192 [ 1769.162297][T30225] sec_pagetables 0 [ 1769.162297][T30225] percpu 0 [ 1769.162297][T30225] sock 0 [ 1769.162297][T30225] vmalloc 0 [ 1769.162297][T30225] shmem 10457088 [ 1769.162297][T30225] zswap 0 [ 1769.162297][T30225] zswapped 0 [ 1769.162297][T30225] file_mapped 229376 [ 1769.162297][T30225] file_dirty 4096 [ 1769.162297][T30225] file_writeback 0 [ 1769.162297][T30225] swapcached 0 [ 1769.162297][T30225] anon_thp 0 [ 1769.162297][T30225] file_thp 0 [ 1769.162297][T30225] shmem_thp 0 [ 1769.162297][T30225] inactive_anon 2097152 [ 1769.162297][T30225] active_anon 8400896 [ 1769.162297][T30225] inactive_file 0 [ 1769.162297][T30225] active_file 4096 [ 1769.162297][T30225] unevictable 0 [ 1769.162297][T30225] slab_reclaimable 39320 [ 1769.162297][T30225] slab_unreclaimable 32296 [ 1769.162297][T30225] slab 71616 [ 1769.162297][T30225] workingset_refault_anon 0 [ 1769.162297][T30225] workingset_refault_file 3 [ 1769.162297][T30225] workingset_activate_anon 0 [ 1769.162297][T30225] workingset_activate_file 0 [ 1769.162297][T30225] workingset_restore_anon 0 [ 1769.162297][T30225] workingset_restore_file 1 [ 1769.162297][T30225] workingset_nodereclaim 0 [ 1769.162297][T30225] pgscan 134 [ 1769.162297][T30225] pgsteal 58 [ 1769.162297][T30225] pgscan_kswapd 0 [ 1769.162297][T30225] pgscan_direct 134 [ 1769.162297][T30225] pgscan_khugepaged 0 [ 1769.162297][T30225] pgsteal_kswapd 0 [ 1769.162297][T30225] pgsteal_direct 58 [ 1769.162297][T30225] pgsteal_khugepaged 0 [ 1769.162297][T30225] pgfault 36917 [ 1769.162297][T30225] pgmajfault 0 [ 1769.162297][T30225] pgrefill 724 [ 1769.162297][T30225] pgactivate 76 [ 1769.162297][T30225] pgdeactivate 0 [ 1769.162297][T30225] pglazyfree 0 [ 1769.162297][T30225] pglazyfreed 0 [ 1769.162297][T30225] zswpin 0 [ 1769.162297][T30225] zswpout 0 [ 1769.162297][T30225] thp_fault_alloc 0 03:34:29 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1769.500239][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.655473][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.773865][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 03:34:29 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1769.831429][T30225] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=30225,uid=0 [ 1769.910834][T30225] Memory cgroup out of memory: Killed process 30225 (syz-executor.1) total-vm:50576kB, anon-rss:404kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:0 03:34:29 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:34:29 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r3 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r3, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r2, 0xe, r4, 0x1) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1770.258326][T31141] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1770.301327][T31141] CPU: 0 PID: 31141 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1770.311588][T31141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1770.321687][T31141] Call Trace: [ 1770.324996][T31141] [ 1770.327956][T31141] dump_stack_lvl+0x136/0x150 [ 1770.332696][T31141] dump_header+0x10a/0xd70 [ 1770.337181][T31141] oom_kill_process+0x25d/0x600 [ 1770.342093][T31141] out_of_memory+0x35c/0x1660 [ 1770.346829][T31141] ? oom_killer_disable+0x2b0/0x2b0 [ 1770.352077][T31141] ? kernfs_notify+0x1ac/0x410 [ 1770.356993][T31141] ? find_held_lock+0x2d/0x110 [ 1770.361818][T31141] mem_cgroup_out_of_memory+0x206/0x270 [ 1770.367414][T31141] ? mem_cgroup_margin+0x130/0x130 [ 1770.372588][T31141] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1770.378460][T31141] memory_max_write+0x2f9/0x3c0 [ 1770.383839][T31141] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1770.389952][T31141] ? lock_sync+0x190/0x190 [ 1770.394442][T31141] cgroup_file_write+0x1e2/0x7b0 [ 1770.399536][T31141] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1770.405672][T31141] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1770.411112][T31141] ? __virt_addr_valid+0x61/0x2e0 [ 1770.416213][T31141] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1770.421627][T31141] kernfs_fop_write_iter+0x3f1/0x600 [ 1770.427011][T31141] vfs_write+0x9ee/0xe10 [ 1770.431334][T31141] ? kernel_write+0x670/0x670 [ 1770.436067][T31141] ? __fget_files+0x26a/0x480 [ 1770.440813][T31141] ksys_write+0x12b/0x250 [ 1770.445184][T31141] ? __ia32_sys_read+0xb0/0xb0 [ 1770.450022][T31141] ? syscall_enter_from_user_mode+0x26/0x80 [ 1770.455969][T31141] do_syscall_64+0x39/0xb0 [ 1770.460414][T31141] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1770.466352][T31141] RIP: 0033:0x7f297b48c169 [ 1770.470792][T31141] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1770.490515][T31141] RSP: 002b:00007f297c25b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1770.498962][T31141] RAX: ffffffffffffffda RBX: 00007f297b5ac050 RCX: 00007f297b48c169 [ 1770.507139][T31141] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 1770.515153][T31141] RBP: 00007f297b4e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1770.523160][T31141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1770.531193][T31141] R13: 00007ffdb994eddf R14: 00007f297c25b300 R15: 0000000000022000 [ 1770.539222][T31141] 03:34:30 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1770.601528][T31141] memory: usage 8612kB, limit 0kB, failcnt 925 [ 1770.617591][T31141] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1770.701566][T31141] Memory cgroup stats for /syz0: [ 1770.701851][T31141] anon 143360 [ 1770.701851][T31141] file 8327168 [ 1770.701851][T31141] kernel 331776 [ 1770.701851][T31141] kernel_stack 98304 [ 1770.701851][T31141] pagetables 81920 [ 1770.701851][T31141] sec_pagetables 0 [ 1770.701851][T31141] percpu 64 [ 1770.701851][T31141] sock 0 [ 1770.701851][T31141] vmalloc 0 [ 1770.701851][T31141] shmem 8327168 [ 1770.701851][T31141] zswap 0 [ 1770.701851][T31141] zswapped 0 [ 1770.701851][T31141] file_mapped 229376 [ 1770.701851][T31141] file_dirty 0 03:34:30 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1770.701851][T31141] file_writeback 0 [ 1770.701851][T31141] swapcached 0 [ 1770.701851][T31141] anon_thp 0 [ 1770.701851][T31141] file_thp 0 [ 1770.701851][T31141] shmem_thp 0 [ 1770.701851][T31141] inactive_anon 8327168 [ 1770.701851][T31141] active_anon 143360 [ 1770.701851][T31141] inactive_file 0 [ 1770.701851][T31141] active_file 0 [ 1770.701851][T31141] unevictable 0 [ 1770.701851][T31141] slab_reclaimable 38552 [ 1770.701851][T31141] slab_unreclaimable 82304 [ 1770.701851][T31141] slab 120856 [ 1770.701851][T31141] workingset_refault_anon 0 [ 1770.701851][T31141] workingset_refault_file 0 [ 1770.701851][T31141] workingset_activate_anon 0 [ 1770.701851][T31141] workingset_activate_file 0 [ 1770.701851][T31141] workingset_restore_anon 0 [ 1770.701851][T31141] workingset_restore_file 0 [ 1770.701851][T31141] workingset_nodereclaim 0 [ 1770.701851][T31141] pgscan 193 [ 1770.701851][T31141] pgsteal 68 [ 1770.701851][T31141] pgscan_kswapd 0 [ 1770.701851][T31141] pgscan_direct 193 [ 1770.701851][T31141] pgscan_khugepaged 0 [ 1770.701851][T31141] pgsteal_kswapd 0 [ 1770.701851][T31141] pgsteal_direct 68 [ 1770.701851][T31141] pgsteal_khugepaged 0 [ 1770.701851][T31141] pgfault 37180 [ 1770.701851][T31141] pgmajfault 0 [ 1770.701851][T31141] pgrefill 1411 [ 1770.701851][T31141] pgactivate 115 [ 1770.701851][T31141] pgdeactivate 0 [ 1770.701851][T31141] pglazyfree 0 [ 1770.701851][T31141] pglazyfreed 0 [ 1770.701851][T31141] zswpin 0 [ 1770.701851][T31141] zswpout 0 [ 1770.701851][T31141] thp_fault_alloc 0 03:34:30 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1771.112268][T31141] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=30179,uid=0 03:34:30 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1771.242440][T31141] Memory cgroup out of memory: Killed process 30179 (syz-executor.0) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 03:34:31 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:34:31 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1771.731840][T18508] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1771.742073][T18508] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1771.771811][T18508] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1771.779664][T18508] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1771.789970][T18508] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1772.347084][T31159] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1772.363169][T31159] CPU: 1 PID: 31159 Comm: syz-executor.3 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1772.373412][T31159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1772.383526][T31159] Call Trace: [ 1772.386853][T31159] [ 1772.389828][T31159] dump_stack_lvl+0x136/0x150 [ 1772.394574][T31159] dump_header+0x10a/0xd70 [ 1772.399169][T31159] oom_kill_process+0x25d/0x600 [ 1772.404194][T31159] out_of_memory+0x35c/0x1660 [ 1772.408959][T31159] ? lockdep_hardirqs_on+0x7d/0x100 [ 1772.414249][T31159] ? oom_killer_disable+0x2b0/0x2b0 [ 1772.419540][T31159] ? mem_cgroup_out_of_memory+0x199/0x270 [ 1772.425352][T31159] mem_cgroup_out_of_memory+0x206/0x270 [ 1772.430948][T31159] ? mem_cgroup_margin+0x130/0x130 [ 1772.436110][T31159] memory_max_write+0x2f9/0x3c0 [ 1772.441059][T31159] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1772.447177][T31159] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1772.453395][T31159] ? lockdep_hardirqs_on+0x7d/0x100 [ 1772.458643][T31159] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1772.464861][T31159] cgroup_file_write+0x1e2/0x7b0 [ 1772.469838][T31159] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1772.475948][T31159] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1772.481357][T31159] ? lock_is_held_type+0x103/0x140 [ 1772.486515][T31159] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1772.491924][T31159] kernfs_fop_write_iter+0x3f1/0x600 [ 1772.497256][T31159] vfs_write+0x9ee/0xe10 [ 1772.501587][T31159] ? kernel_write+0x670/0x670 [ 1772.506315][T31159] ? __fget_files+0x26a/0x480 [ 1772.511051][T31159] ksys_write+0x12b/0x250 [ 1772.515422][T31159] ? __ia32_sys_read+0xb0/0xb0 [ 1772.520241][T31159] do_syscall_64+0x39/0xb0 [ 1772.524691][T31159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1772.530629][T31159] RIP: 0033:0x7f255808c169 [ 1772.535070][T31159] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1772.554706][T31159] RSP: 002b:00007f2558da2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1772.563325][T31159] RAX: ffffffffffffffda RBX: 00007f25581abf80 RCX: 00007f255808c169 [ 1772.571325][T31159] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 1772.579322][T31159] RBP: 00007f25580e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1772.587334][T31159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1772.595330][T31159] R13: 00007ffe083bb6cf R14: 00007f2558da2300 R15: 0000000000022000 [ 1772.603347][T31159] [ 1772.648342][T31159] memory: usage 8584kB, limit 0kB, failcnt 639 [ 1772.659274][T31159] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1772.685185][T31159] Memory cgroup stats for /syz3: [ 1772.685467][T31159] anon 135168 [ 1772.685467][T31159] file 8347648 [ 1772.685467][T31159] kernel 249856 [ 1772.685467][T31159] kernel_stack 32768 [ 1772.685467][T31159] pagetables 77824 [ 1772.685467][T31159] sec_pagetables 0 [ 1772.685467][T31159] percpu 64 [ 1772.685467][T31159] sock 0 [ 1772.685467][T31159] vmalloc 0 [ 1772.685467][T31159] shmem 8347648 [ 1772.685467][T31159] zswap 0 [ 1772.685467][T31159] zswapped 0 [ 1772.685467][T31159] file_mapped 274432 [ 1772.685467][T31159] file_dirty 0 [ 1772.685467][T31159] file_writeback 0 [ 1772.685467][T31159] swapcached 0 [ 1772.685467][T31159] anon_thp 0 [ 1772.685467][T31159] file_thp 0 [ 1772.685467][T31159] shmem_thp 0 [ 1772.685467][T31159] inactive_anon 245760 [ 1772.685467][T31159] active_anon 8237056 [ 1772.685467][T31159] inactive_file 0 [ 1772.685467][T31159] active_file 0 [ 1772.685467][T31159] unevictable 0 [ 1772.685467][T31159] slab_reclaimable 36152 [ 1772.685467][T31159] slab_unreclaimable 73488 [ 1772.685467][T31159] slab 109640 [ 1772.685467][T31159] workingset_refault_anon 0 [ 1772.685467][T31159] workingset_refault_file 0 [ 1772.685467][T31159] workingset_activate_anon 0 [ 1772.685467][T31159] workingset_activate_file 0 [ 1772.685467][T31159] workingset_restore_anon 0 [ 1772.685467][T31159] workingset_restore_file 0 [ 1772.685467][T31159] workingset_nodereclaim 0 [ 1772.685467][T31159] pgscan 208 [ 1772.685467][T31159] pgsteal 99 [ 1772.685467][T31159] pgscan_kswapd 0 [ 1772.685467][T31159] pgscan_direct 208 [ 1772.685467][T31159] pgscan_khugepaged 0 [ 1772.685467][T31159] pgsteal_kswapd 0 [ 1772.685467][T31159] pgsteal_direct 99 [ 1772.685467][T31159] pgsteal_khugepaged 0 [ 1772.685467][T31159] pgfault 37709 [ 1772.685467][T31159] pgmajfault 0 [ 1772.685467][T31159] pgrefill 475 [ 1772.685467][T31159] pgactivate 89 [ 1772.685467][T31159] pgdeactivate 0 [ 1772.685467][T31159] pglazyfree 0 [ 1772.685467][T31159] pglazyfreed 0 [ 1772.685467][T31159] zswpin 0 [ 1772.685467][T31159] zswpout 0 [ 1772.685467][T31159] thp_fault_alloc 0 [ 1773.034018][T31155] chnl_net:caif_netlink_parms(): no params data found [ 1773.105187][T31159] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=30532,uid=0 [ 1773.211122][ T46] hsr_slave_0: left promiscuous mode [ 1773.244094][T31159] Memory cgroup out of memory: Killed process 30532 (syz-executor.3) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1773.276419][ T46] hsr_slave_1: left promiscuous mode [ 1773.288361][T18508] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1773.297436][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1773.311402][T18508] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1773.319161][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1773.327234][T18508] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1773.335624][T18508] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1773.343724][T18508] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1773.351732][T18508] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1773.378668][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1773.389608][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1773.406599][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1773.415824][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1773.427197][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1773.434889][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1773.442899][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1773.445181][ T46] bridge_slave_1: left allmulticast mode [ 1773.456665][ T46] bridge_slave_1: left promiscuous mode [ 1773.468530][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 1773.477792][ T46] bridge_slave_0: left allmulticast mode [ 1773.483762][ T46] bridge_slave_0: left promiscuous mode [ 1773.489888][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 1773.503382][ T46] veth1_macvtap: left promiscuous mode [ 1773.508943][ T46] veth0_macvtap: left promiscuous mode [ 1773.514856][ T46] veth1_vlan: left promiscuous mode [ 1773.520322][ T46] veth0_vlan: left promiscuous mode [ 1773.738815][ T46] team0 (unregistering): Port device team_slave_1 removed [ 1773.758439][ T46] team0 (unregistering): Port device team_slave_0 removed [ 1773.771650][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1773.790708][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1773.861788][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 1773.881527][ T46] bond0 (unregistering): Released all slaves [ 1774.056850][T31155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1774.064869][T31155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.075802][T31155] bridge_slave_0: entered allmulticast mode [ 1774.083553][T31155] bridge_slave_0: entered promiscuous mode [ 1774.109048][T31155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1774.116417][T31155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1774.125127][T31155] bridge_slave_1: entered allmulticast mode [ 1774.132374][T31155] bridge_slave_1: entered promiscuous mode [ 1774.227965][T31155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1774.284462][T31155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1774.528874][T31155] team0: Port device team_slave_0 added [ 1774.620420][T31155] team0: Port device team_slave_1 added [ 1774.716582][T31181] chnl_net:caif_netlink_parms(): no params data found [ 1774.806291][T31155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1774.819277][T31155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1774.861386][T31155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1774.895803][T31155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1774.911354][T31155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1774.972974][T31155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1775.012997][T31179] chnl_net:caif_netlink_parms(): no params data found [ 1775.170468][T31155] hsr_slave_0: entered promiscuous mode [ 1775.193364][T31155] hsr_slave_1: entered promiscuous mode [ 1775.336424][T31181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1775.343795][T31181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1775.351045][T31181] bridge_slave_0: entered allmulticast mode [ 1775.358734][T31181] bridge_slave_0: entered promiscuous mode [ 1775.367682][T31181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1775.375863][T31181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1775.382051][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 1775.383938][T31181] bridge_slave_1: entered allmulticast mode [ 1775.396924][T31181] bridge_slave_1: entered promiscuous mode [ 1775.461464][T18508] Bluetooth: hci3: command 0x0409 tx timeout [ 1775.485213][T31179] bridge0: port 1(bridge_slave_0) entered blocking state [ 1775.505575][T31179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1775.520230][T31179] bridge_slave_0: entered allmulticast mode [ 1775.538749][T31179] bridge_slave_0: entered promiscuous mode [ 1775.564712][T31181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1775.596162][T31179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1775.613207][T31179] bridge0: port 2(bridge_slave_1) entered disabled state [ 1775.620483][T31179] bridge_slave_1: entered allmulticast mode [ 1775.638754][T31179] bridge_slave_1: entered promiscuous mode [ 1775.671739][T31181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1775.808407][T31179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1775.883670][T31181] team0: Port device team_slave_0 added [ 1775.892684][T31179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1775.928545][T31181] team0: Port device team_slave_1 added [ 1775.941429][T18508] Bluetooth: hci0: command 0x041b tx timeout [ 1776.544279][T31179] team0: Port device team_slave_0 added [ 1776.551104][T31181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1776.570862][T31181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1776.621307][T31181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1776.756576][T31179] team0: Port device team_slave_1 added [ 1776.764051][T31181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1776.771036][T31181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1776.798525][T31181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1776.973818][T31179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1776.980825][T31179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1777.038425][T31179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1777.087693][T31179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1777.095170][T31179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1777.132319][T31179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1777.191047][T31181] hsr_slave_0: entered promiscuous mode [ 1777.197940][T31181] hsr_slave_1: entered promiscuous mode [ 1777.204773][T31181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1777.212782][T31181] Cannot create hsr debugfs directory [ 1777.248249][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.353889][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.383321][T31179] hsr_slave_0: entered promiscuous mode [ 1777.401423][T31179] hsr_slave_1: entered promiscuous mode [ 1777.407793][T31179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1777.416252][T31179] Cannot create hsr debugfs directory [ 1777.461487][T18508] Bluetooth: hci2: command 0x041b tx timeout [ 1777.537498][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.552014][T18508] Bluetooth: hci3: command 0x041b tx timeout [ 1777.680638][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.925970][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.008322][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.031384][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 1778.093708][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.166979][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.381473][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.523954][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.654447][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.762679][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.959170][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1779.027609][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1779.079953][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1779.182352][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1779.551478][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 1779.621501][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 1780.102907][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 1781.345499][ T46] hsr_slave_0: left promiscuous mode [ 1781.351920][ T46] hsr_slave_1: left promiscuous mode [ 1781.357971][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1781.367498][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1781.377844][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1781.387006][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1781.398953][ T46] bridge_slave_1: left allmulticast mode [ 1781.410325][ T46] bridge_slave_1: left promiscuous mode [ 1781.420012][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 1781.431431][ T46] bridge_slave_0: left allmulticast mode [ 1781.440237][ T46] bridge_slave_0: left promiscuous mode [ 1781.447502][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 1781.463381][ T46] hsr_slave_0: left promiscuous mode [ 1781.469661][ T46] hsr_slave_1: left promiscuous mode [ 1781.486438][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1781.500700][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1781.513606][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1781.521083][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1781.539999][ T46] bridge_slave_1: left allmulticast mode [ 1781.550282][ T46] bridge_slave_1: left promiscuous mode [ 1781.565242][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 1781.579738][ T46] bridge_slave_0: left allmulticast mode [ 1781.589679][ T46] bridge_slave_0: left promiscuous mode [ 1781.601100][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 1781.621422][T18508] Bluetooth: hci2: command 0x0419 tx timeout [ 1781.629735][ T46] hsr_slave_0: left promiscuous mode [ 1781.636326][ T46] hsr_slave_1: left promiscuous mode [ 1781.642500][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1781.649987][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1781.659996][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1781.667688][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1781.677656][ T46] bridge_slave_1: left allmulticast mode [ 1781.683598][ T46] bridge_slave_1: left promiscuous mode [ 1781.689361][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 1781.698762][ T46] bridge_slave_0: left allmulticast mode [ 1781.704719][T18508] Bluetooth: hci3: command 0x0419 tx timeout [ 1781.711156][ T46] bridge_slave_0: left promiscuous mode [ 1781.717069][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 1781.730922][ T46] hsr_slave_0: left promiscuous mode [ 1781.737205][ T46] hsr_slave_1: left promiscuous mode [ 1781.743370][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1781.750830][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1781.760462][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1781.768133][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1781.778488][ T46] bridge_slave_1: left allmulticast mode [ 1781.784440][ T46] bridge_slave_1: left promiscuous mode [ 1781.790206][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 1781.799829][ T46] bridge_slave_0: left allmulticast mode [ 1781.814956][ T46] bridge_slave_0: left promiscuous mode [ 1781.820733][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 1781.866891][ T46] veth1_macvtap: left promiscuous mode [ 1781.878969][ T46] veth0_macvtap: left promiscuous mode [ 1781.887300][ T46] veth1_vlan: left promiscuous mode [ 1781.899203][ T46] veth0_vlan: left promiscuous mode [ 1781.909480][ T46] veth1_macvtap: left promiscuous mode [ 1781.924798][ T46] veth0_macvtap: left promiscuous mode [ 1781.930471][ T46] veth1_vlan: left promiscuous mode [ 1781.945857][ T46] veth0_vlan: left promiscuous mode [ 1781.957465][ T46] veth1_macvtap: left promiscuous mode [ 1781.968246][ T46] veth0_macvtap: left promiscuous mode [ 1781.978041][ T46] veth1_vlan: left promiscuous mode [ 1781.988852][ T46] veth0_vlan: left promiscuous mode [ 1782.000788][ T46] veth1_macvtap: left promiscuous mode [ 1782.015634][ T46] veth0_macvtap: left promiscuous mode [ 1782.027148][ T46] veth1_vlan: left promiscuous mode [ 1782.038474][ T46] veth0_vlan: left promiscuous mode [ 1782.633163][ T46] team0 (unregistering): Port device team_slave_1 removed [ 1782.648584][ T46] team0 (unregistering): Port device team_slave_0 removed [ 1782.665596][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1782.685927][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1782.769470][ T46] bond0 (unregistering): Released all slaves [ 1782.928988][ T46] team0 (unregistering): Port device team_slave_1 removed [ 1782.945675][ T46] team0 (unregistering): Port device team_slave_0 removed [ 1782.960052][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1782.976758][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1783.055717][ T46] bond0 (unregistering): Released all slaves [ 1783.239521][ T46] team0 (unregistering): Port device team_slave_1 removed [ 1783.256063][ T46] team0 (unregistering): Port device team_slave_0 removed [ 1783.268780][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1783.290477][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1783.380351][ T46] bond0 (unregistering): Released all slaves [ 1783.544434][ T46] team0 (unregistering): Port device team_slave_1 removed [ 1783.562496][ T46] team0 (unregistering): Port device team_slave_0 removed [ 1783.577021][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1783.592676][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1783.672674][ T46] bond0 (unregistering): Released all slaves [ 1786.645174][T31155] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1786.659259][T31155] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1786.698437][T31155] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1786.709917][T31155] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1786.824631][T31155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1786.842296][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1786.850318][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1786.899643][T31155] 8021q: adding VLAN 0 to HW filter on device team0 [ 1786.914588][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1786.933056][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1786.952819][T26718] bridge0: port 1(bridge_slave_0) entered blocking state [ 1786.959990][T26718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1787.003252][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1787.023095][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1787.033675][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1787.052267][ T5656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1787.059535][ T5656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1787.082197][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1787.101996][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1787.156292][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1787.166430][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1787.176000][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1787.184807][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1787.194582][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1787.203181][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1787.212027][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1787.220419][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1787.229227][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1787.238963][T31155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1787.681846][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1787.689407][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1787.742398][T31155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1787.806823][T31179] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1787.848444][T31179] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1787.876961][T31179] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1787.896667][T31179] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1787.969178][T31181] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1787.992708][T31181] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1788.019783][T31181] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1788.055041][T31181] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1788.148427][T31179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1788.193828][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1788.203069][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1788.224696][T31179] 8021q: adding VLAN 0 to HW filter on device team0 [ 1788.251527][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1788.260380][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1788.272895][T26719] bridge0: port 1(bridge_slave_0) entered blocking state [ 1788.280061][T26719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1788.288557][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1788.297772][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1788.306847][T26719] bridge0: port 2(bridge_slave_1) entered blocking state [ 1788.314066][T26719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1788.323347][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1788.365290][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1788.375371][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1788.386873][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1788.397044][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1788.411741][T31181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1788.430300][T31179] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1788.445572][T31179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1788.463537][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1788.472007][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1788.480754][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1788.491346][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1788.499918][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1788.509171][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1788.517757][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1788.557107][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1788.565795][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1788.574909][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1788.586551][T31181] 8021q: adding VLAN 0 to HW filter on device team0 [ 1788.614218][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1788.628089][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1788.637673][T26719] bridge0: port 1(bridge_slave_0) entered blocking state [ 1788.644889][T26719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1788.657219][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1788.666494][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1788.707098][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1788.715988][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1788.725413][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1788.735409][ T5656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1788.742612][ T5656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1788.751588][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1788.760729][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1788.769749][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1788.782932][T31155] veth0_vlan: entered promiscuous mode [ 1788.796388][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1788.816601][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1788.832850][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1788.866615][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1788.886681][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1788.905289][T31155] veth1_vlan: entered promiscuous mode [ 1788.938634][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1788.952402][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1788.960678][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1788.970595][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1788.979991][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1788.989334][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1789.017709][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1789.026532][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1789.040418][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1789.049046][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1789.070499][T31155] veth0_macvtap: entered promiscuous mode [ 1789.080942][T31181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1789.093226][T31179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1789.100501][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1789.126702][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1789.150985][T31155] veth1_macvtap: entered promiscuous mode [ 1789.170068][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1789.183458][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1789.213341][T31155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1789.222291][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1789.241316][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1789.254885][T31155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1789.274529][T31155] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.291192][T31155] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.300679][T31155] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.310517][T31155] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.331958][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1789.341063][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1789.470636][ T5180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1789.502489][ T5180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1789.537559][T20447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1789.539573][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1789.564272][T20447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1789.595062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1789.759343][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1789.787165][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1789.848139][T31181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1789.938582][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1789.952723][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1790.034302][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1790.055673][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1790.092176][T31482] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1790.094963][T31181] veth0_vlan: entered promiscuous mode [ 1790.104365][T31482] CPU: 0 PID: 31482 Comm: syz-executor.5 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1790.118707][T31482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1790.128820][T31482] Call Trace: [ 1790.132181][T31482] [ 1790.135159][T31482] dump_stack_lvl+0x136/0x150 [ 1790.139917][T31482] dump_header+0x10a/0xd70 [ 1790.140336][T31181] veth1_vlan: entered promiscuous mode [ 1790.144396][T31482] oom_kill_process+0x25d/0x600 [ 1790.144458][T31482] out_of_memory+0x35c/0x1660 [ 1790.159534][T31482] ? lockdep_hardirqs_on+0x7d/0x100 [ 1790.164912][T31482] ? oom_killer_disable+0x2b0/0x2b0 [ 1790.170193][T31482] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 1790.175876][T31482] mem_cgroup_out_of_memory+0x206/0x270 [ 1790.181463][T31482] ? mem_cgroup_margin+0x130/0x130 [ 1790.186625][T31482] memory_max_write+0x2f9/0x3c0 [ 1790.191519][T31482] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1790.197654][T31482] ? lock_sync+0x190/0x190 [ 1790.202118][T31482] cgroup_file_write+0x1e2/0x7b0 [ 1790.207103][T31482] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1790.213212][T31482] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1790.218634][T31482] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1790.224045][T31482] kernfs_fop_write_iter+0x3f1/0x600 [ 1790.229380][T31482] vfs_write+0x9ee/0xe10 [ 1790.233773][T31482] ? kernel_write+0x670/0x670 [ 1790.238600][T31482] ? __fget_files+0x26a/0x480 [ 1790.243360][T31482] ksys_write+0x12b/0x250 [ 1790.247739][T31482] ? __ia32_sys_read+0xb0/0xb0 [ 1790.252554][T31482] ? syscall_enter_from_user_mode+0x26/0x80 [ 1790.258503][T31482] do_syscall_64+0x39/0xb0 [ 1790.262955][T31482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1790.268894][T31482] RIP: 0033:0x7f36f2a8c169 [ 1790.273424][T31482] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1790.293072][T31482] RSP: 002b:00007f36f37a3168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1790.302039][T31482] RAX: ffffffffffffffda RBX: 00007f36f2babf80 RCX: 00007f36f2a8c169 [ 1790.310037][T31482] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 1790.318033][T31482] RBP: 00007f36f2ae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1790.326031][T31482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1790.334026][T31482] R13: 00007ffcc27c3e8f R14: 00007f36f37a3300 R15: 0000000000022000 [ 1790.342054][T31482] [ 1790.361101][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1790.374213][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1790.382867][T31482] memory: usage 608kB, limit 0kB, failcnt 2215 [ 1790.390528][T31482] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1790.394324][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1790.399133][T31482] Memory cgroup stats for /syz5: [ 1790.413770][T31482] anon 114688 [ 1790.413770][T31482] file 229376 [ 1790.413770][T31482] kernel 266240 [ 1790.413770][T31482] kernel_stack 65536 [ 1790.413770][T31482] pagetables 77824 [ 1790.413770][T31482] sec_pagetables 0 [ 1790.413770][T31482] percpu 64 [ 1790.413770][T31482] sock 0 [ 1790.413770][T31482] vmalloc 0 [ 1790.413770][T31482] shmem 229376 [ 1790.413770][T31482] zswap 0 [ 1790.413770][T31482] zswapped 0 [ 1790.413770][T31482] file_mapped 221184 [ 1790.413770][T31482] file_dirty 0 [ 1790.413770][T31482] file_writeback 0 [ 1790.413770][T31482] swapcached 0 [ 1790.413770][T31482] anon_thp 0 [ 1790.413770][T31482] file_thp 0 [ 1790.413770][T31482] shmem_thp 0 [ 1790.413770][T31482] inactive_anon 0 [ 1790.413770][T31482] active_anon 344064 [ 1790.413770][T31482] inactive_file 0 [ 1790.413770][T31482] active_file 0 [ 1790.413770][T31482] unevictable 0 [ 1790.413770][T31482] slab_reclaimable 16032 [ 1790.413770][T31482] slab_unreclaimable 74136 [ 1790.413770][T31482] slab 90168 [ 1790.413770][T31482] workingset_refault_anon 0 [ 1790.413770][T31482] workingset_refault_file 0 [ 1790.413770][T31482] workingset_activate_anon 0 [ 1790.413770][T31482] workingset_activate_file 0 [ 1790.413770][T31482] workingset_restore_anon 0 [ 1790.413770][T31482] workingset_restore_file 0 [ 1790.413770][T31482] workingset_nodereclaim 0 [ 1790.413770][T31482] pgscan 117 [ 1790.413770][T31482] pgsteal 13 [ 1790.413770][T31482] pgscan_kswapd 0 [ 1790.413770][T31482] pgscan_direct 117 [ 1790.413770][T31482] pgscan_khugepaged 0 [ 1790.413770][T31482] pgsteal_kswapd 0 [ 1790.413770][T31482] pgsteal_direct 13 [ 1790.413770][T31482] pgsteal_khugepaged 0 [ 1790.413770][T31482] pgfault 9518 [ 1790.413770][T31482] pgmajfault 0 [ 1790.413770][T31482] pgrefill 301 [ 1790.413770][T31482] pgactivate 104 [ 1790.413770][T31482] pgdeactivate 0 [ 1790.413770][T31482] pglazyfree 0 [ 1790.413770][T31482] pglazyfreed 0 [ 1790.413770][T31482] zswpin 0 [ 1790.413770][T31482] zswpout 0 [ 1790.413770][T31482] thp_fault_alloc 0 [ 1790.460212][T31179] veth0_vlan: entered promiscuous mode [ 1790.624119][T31482] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=31481,uid=0 [ 1790.672203][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1790.680596][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1790.695053][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1790.705912][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 03:34:50 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x0, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:34:50 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1790.717356][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1790.738952][T31482] Memory cgroup out of memory: Killed process 31481 (syz-executor.5) total-vm:54548kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 1790.739018][T31179] veth1_vlan: entered promiscuous mode [ 1790.814485][T31155] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1790.830724][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1790.839004][T31155] CPU: 0 PID: 31155 Comm: syz-executor.5 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1790.849233][T31155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1790.859524][T31155] Call Trace: [ 1790.862901][T31155] [ 1790.865883][T31155] dump_stack_lvl+0x136/0x150 [ 1790.870727][T31155] dump_header+0x10a/0xd70 [ 1790.872524][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1790.875202][T31155] oom_kill_process+0x25d/0x600 [ 1790.887430][T31155] out_of_memory+0x35c/0x1660 [ 1790.892182][T31155] ? find_held_lock+0x2d/0x110 [ 1790.897007][T31155] ? oom_killer_disable+0x2b0/0x2b0 [ 1790.902291][T31155] ? rcu_read_unlock+0x9/0x60 [ 1790.904121][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1790.907059][T31155] ? find_held_lock+0x2d/0x110 [ 1790.919374][T31155] mem_cgroup_out_of_memory+0x206/0x270 [ 1790.924979][T31155] ? mem_cgroup_margin+0x130/0x130 [ 1790.930143][T31155] ? lock_downgrade+0x690/0x690 [ 1790.935072][T31155] try_charge_memcg+0xf9b/0x13b0 [ 1790.940093][T31155] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1790.942238][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1790.946112][T31155] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1790.946158][T31155] ? lock_downgrade+0x690/0x690 [ 1790.964262][T31155] ? lock_downgrade+0x690/0x690 [ 1790.969185][T31155] ? rcu_read_unlock+0x9/0x60 [ 1790.973947][T31155] obj_cgroup_charge+0x2af/0x5e0 [ 1790.974992][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1790.978949][T31155] ? sk_prot_alloc+0x5f/0x290 [ 1790.991586][T31155] kmem_cache_alloc+0xb1/0x3b0 [ 1790.996409][T31155] ? inet_create+0x324/0xfa0 [ 1791.001065][T31155] sk_prot_alloc+0x5f/0x290 [ 1791.005641][T31155] sk_alloc+0x3a/0x7f0 [ 1791.009776][T31155] inet_create+0x399/0xfa0 [ 1791.014262][T31155] __sock_create+0x380/0x850 [ 1791.018923][T31155] __sys_socket+0x133/0x250 [ 1791.023489][T31155] ? __sys_socket_file+0x1d0/0x1d0 [ 1791.028671][T31155] __x64_sys_socket+0x73/0xb0 [ 1791.029339][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1791.033394][T31155] do_syscall_64+0x39/0xb0 [ 1791.033429][T31155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1791.033480][T31155] RIP: 0033:0x7f36f2a8d7e7 [ 1791.033506][T31155] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1791.033538][T31155] RSP: 002b:00007ffcc27c3a08 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 1791.033572][T31155] RAX: ffffffffffffffda RBX: 00007ffcc27c4170 RCX: 00007f36f2a8d7e7 [ 1791.033597][T31155] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 1791.033617][T31155] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffcc27c3f80 [ 1791.108430][T31155] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 1791.116451][T31155] R13: 00000000001b4bfa R14: 0000000000000014 R15: 00007ffcc27c41b0 [ 1791.124497][T31155] [ 1791.142635][T31155] memory: usage 340kB, limit 0kB, failcnt 2234 [ 1791.148989][T31155] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1791.156740][T31155] Memory cgroup stats for /syz5: [ 1791.156996][T31155] anon 40960 [ 1791.156996][T31155] file 229376 [ 1791.156996][T31155] kernel 77824 [ 1791.156996][T31155] kernel_stack 0 [ 1791.156996][T31155] pagetables 8192 [ 1791.156996][T31155] sec_pagetables 0 [ 1791.156996][T31155] percpu 64 [ 1791.156996][T31155] sock 0 [ 1791.156996][T31155] vmalloc 0 [ 1791.156996][T31155] shmem 229376 [ 1791.156996][T31155] zswap 0 [ 1791.156996][T31155] zswapped 0 [ 1791.156996][T31155] file_mapped 221184 [ 1791.156996][T31155] file_dirty 0 [ 1791.156996][T31155] file_writeback 0 [ 1791.156996][T31155] swapcached 0 [ 1791.156996][T31155] anon_thp 0 [ 1791.156996][T31155] file_thp 0 [ 1791.156996][T31155] shmem_thp 0 [ 1791.156996][T31155] inactive_anon 0 [ 1791.156996][T31155] active_anon 270336 [ 1791.156996][T31155] inactive_file 0 [ 1791.156996][T31155] active_file 0 [ 1791.156996][T31155] unevictable 0 [ 1791.156996][T31155] slab_reclaimable 11104 [ 1791.156996][T31155] slab_unreclaimable 44984 [ 1791.156996][T31155] slab 56088 [ 1791.156996][T31155] workingset_refault_anon 0 [ 1791.156996][T31155] workingset_refault_file 0 [ 1791.156996][T31155] workingset_activate_anon 0 [ 1791.156996][T31155] workingset_activate_file 0 [ 1791.156996][T31155] workingset_restore_anon 0 [ 1791.156996][T31155] workingset_restore_file 0 [ 1791.156996][T31155] workingset_nodereclaim 0 [ 1791.156996][T31155] pgscan 117 [ 1791.156996][T31155] pgsteal 13 [ 1791.156996][T31155] pgscan_kswapd 0 [ 1791.156996][T31155] pgscan_direct 117 [ 1791.156996][T31155] pgscan_khugepaged 0 [ 1791.156996][T31155] pgsteal_kswapd 0 [ 1791.156996][T31155] pgsteal_direct 13 [ 1791.156996][T31155] pgsteal_khugepaged 0 [ 1791.156996][T31155] pgfault 9524 [ 1791.156996][T31155] pgmajfault 0 [ 1791.156996][T31155] pgrefill 301 [ 1791.156996][T31155] pgactivate 104 [ 1791.156996][T31155] pgdeactivate 0 [ 1791.156996][T31155] pglazyfree 0 [ 1791.156996][T31155] pglazyfreed 0 [ 1791.156996][T31155] zswpin 0 [ 1791.156996][T31155] zswpout 0 [ 1791.156996][T31155] thp_fault_alloc 0 [ 1791.174344][T31181] veth0_macvtap: entered promiscuous mode [ 1791.518241][T31179] veth0_macvtap: entered promiscuous mode [ 1791.528188][T31181] veth1_macvtap: entered promiscuous mode [ 1791.538932][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1791.538944][T31155] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset= [ 1791.548439][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1791.548607][T31155] syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=31155,uid=0 [ 1791.575510][T31179] veth1_macvtap: entered promiscuous mode [ 1791.586452][T31155] Memory cgroup out of memory: Killed process 31155 (syz-executor.5) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1791.606290][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1791.616133][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1791.650103][T31179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1791.667781][T31179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1791.680349][T31179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1791.711932][T31181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1791.723871][T31181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1791.734347][T31181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1791.745158][T31181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1791.757224][T31181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1791.766067][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1791.775026][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1791.784311][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1791.793910][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1791.811658][T31181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1791.830625][T31181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1791.842567][T31181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1791.852506][T31179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1791.863472][T31179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1791.874680][T31179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1791.885429][T31179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1791.899012][T31179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1791.907215][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1791.916369][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1791.925540][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1791.934483][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1791.947348][T31181] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1791.958014][T31181] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1791.967567][T31181] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1791.976733][T31181] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.005368][T31179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.015059][T31179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.024319][T31179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.034030][T31179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.183742][T20447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1792.207586][ T5180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1792.226159][T20447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1792.237458][ T9979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1792.245747][ T5180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1792.250244][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1792.278429][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1792.287093][ T9979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1792.302016][ T5180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1792.310245][ T5180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1792.320786][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1792.337164][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1792.714225][T31508] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1792.749269][T31508] CPU: 0 PID: 31508 Comm: syz-executor.2 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1792.759484][T31508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1792.769678][T31508] Call Trace: [ 1792.772999][T31508] [ 1792.775985][T31508] dump_stack_lvl+0x136/0x150 [ 1792.780850][T31508] dump_header+0x10a/0xd70 [ 1792.785357][T31508] oom_kill_process+0x25d/0x600 [ 1792.790297][T31508] out_of_memory+0x35c/0x1660 [ 1792.795063][T31508] ? oom_killer_disable+0x2b0/0x2b0 [ 1792.800335][T31508] ? kernfs_notify+0x1ac/0x410 [ 1792.805193][T31508] mem_cgroup_out_of_memory+0x206/0x270 [ 1792.810807][T31508] ? mem_cgroup_margin+0x130/0x130 [ 1792.816002][T31508] memory_max_write+0x2f9/0x3c0 [ 1792.820936][T31508] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1792.827080][T31508] ? lock_sync+0x190/0x190 [ 1792.831572][T31508] cgroup_file_write+0x1e2/0x7b0 [ 1792.836577][T31508] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1792.842718][T31508] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1792.848154][T31508] ? __virt_addr_valid+0x61/0x2e0 [ 1792.853275][T31508] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1792.858706][T31508] kernfs_fop_write_iter+0x3f1/0x600 [ 1792.864074][T31508] vfs_write+0x9ee/0xe10 [ 1792.868547][T31508] ? kernel_write+0x670/0x670 [ 1792.873272][T31508] ? __fget_files+0x26a/0x480 [ 1792.878006][T31508] ksys_write+0x12b/0x250 [ 1792.882387][T31508] ? __ia32_sys_read+0xb0/0xb0 [ 1792.887194][T31508] ? syscall_enter_from_user_mode+0x26/0x80 [ 1792.893138][T31508] do_syscall_64+0x39/0xb0 [ 1792.897591][T31508] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1792.903624][T31508] RIP: 0033:0x7f496b68c169 [ 1792.908087][T31508] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1792.927817][T31508] RSP: 002b:00007f496c3cc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1792.936264][T31508] RAX: ffffffffffffffda RBX: 00007f496b7ac050 RCX: 00007f496b68c169 [ 1792.944351][T31508] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 1792.952347][T31508] RBP: 00007f496b6e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1792.960343][T31508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1792.968359][T31508] R13: 00007ffde903863f R14: 00007f496c3cc300 R15: 0000000000022000 [ 1792.976380][T31508] [ 1793.008899][T31508] memory: usage 616kB, limit 0kB, failcnt 1387 [ 1793.016003][T31508] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1793.027103][T31508] Memory cgroup stats for /syz2: [ 1793.027404][T31508] anon 118784 [ 1793.027404][T31508] file 204800 [ 1793.027404][T31508] kernel 307200 [ 1793.027404][T31508] kernel_stack 98304 [ 1793.027404][T31508] pagetables 77824 [ 1793.027404][T31508] sec_pagetables 0 [ 1793.027404][T31508] percpu 64 [ 1793.027404][T31508] sock 0 [ 1793.027404][T31508] vmalloc 0 [ 1793.027404][T31508] shmem 204800 [ 1793.027404][T31508] zswap 0 [ 1793.027404][T31508] zswapped 0 [ 1793.027404][T31508] file_mapped 204800 [ 1793.027404][T31508] file_dirty 0 [ 1793.027404][T31508] file_writeback 0 [ 1793.027404][T31508] swapcached 0 [ 1793.027404][T31508] anon_thp 0 [ 1793.027404][T31508] file_thp 0 [ 1793.027404][T31508] shmem_thp 0 [ 1793.027404][T31508] inactive_anon 163840 [ 1793.027404][T31508] active_anon 159744 [ 1793.027404][T31508] inactive_file 0 [ 1793.027404][T31508] active_file 0 [ 1793.027404][T31508] unevictable 0 [ 1793.027404][T31508] slab_reclaimable 19592 [ 1793.027404][T31508] slab_unreclaimable 82304 [ 1793.027404][T31508] slab 101896 [ 1793.027404][T31508] workingset_refault_anon 0 [ 1793.027404][T31508] workingset_refault_file 0 [ 1793.027404][T31508] workingset_activate_anon 0 [ 1793.027404][T31508] workingset_activate_file 0 [ 1793.027404][T31508] workingset_restore_anon 0 [ 1793.027404][T31508] workingset_restore_file 0 [ 1793.027404][T31508] workingset_nodereclaim 2 [ 1793.027404][T31508] pgscan 398 [ 1793.027404][T31508] pgsteal 65 [ 1793.027404][T31508] pgscan_kswapd 0 [ 1793.027404][T31508] pgscan_direct 398 [ 1793.027404][T31508] pgscan_khugepaged 0 [ 1793.027404][T31508] pgsteal_kswapd 0 [ 1793.027404][T31508] pgsteal_direct 65 [ 1793.027404][T31508] pgsteal_khugepaged 0 [ 1793.027404][T31508] pgfault 34261 [ 1793.027404][T31508] pgmajfault 0 [ 1793.027404][T31508] pgrefill 3648 [ 1793.027404][T31508] pgactivate 333 [ 1793.027404][T31508] pgdeactivate 0 [ 1793.027404][T31508] pglazyfree 0 [ 1793.027404][T31508] pglazyfreed 0 [ 1793.027404][T31508] zswpin 0 [ 1793.027404][T31508] zswpout 0 [ 1793.027404][T31508] thp_fault_alloc 0 03:34:52 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:34:52 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:34:52 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1793.628880][T31508] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=31503,uid=0 [ 1793.665712][T31508] Memory cgroup out of memory: Killed process 31503 (syz-executor.2) total-vm:54680kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 03:34:53 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1793.749260][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1793.763179][T31179] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 03:34:53 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x0, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1793.801515][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1793.812496][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1793.822722][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1793.830141][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1793.863090][T31179] CPU: 0 PID: 31179 Comm: syz-executor.4 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1793.873425][T31179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1793.883533][T31179] Call Trace: [ 1793.886864][T31179] [ 1793.889837][T31179] dump_stack_lvl+0x136/0x150 [ 1793.894589][T31179] dump_header+0x10a/0xd70 [ 1793.899088][T31179] oom_kill_process+0x25d/0x600 [ 1793.904017][T31179] out_of_memory+0x35c/0x1660 [ 1793.908777][T31179] ? oom_killer_disable+0x2b0/0x2b0 [ 1793.914058][T31179] ? rcu_read_unlock+0x9/0x60 [ 1793.918822][T31179] ? find_held_lock+0x2d/0x110 [ 1793.923663][T31179] mem_cgroup_out_of_memory+0x206/0x270 [ 1793.929268][T31179] ? mem_cgroup_margin+0x130/0x130 [ 1793.934431][T31179] ? lock_downgrade+0x690/0x690 [ 1793.939365][T31179] try_charge_memcg+0xf9b/0x13b0 [ 1793.944378][T31179] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1793.950426][T31179] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1793.956210][T31179] ? lock_downgrade+0x690/0x690 [ 1793.961130][T31179] ? lock_downgrade+0x690/0x690 [ 1793.966053][T31179] __memcg_kmem_charge_page+0x16e/0x3c0 [ 1793.971666][T31179] __alloc_pages+0x1f3/0x4a0 [ 1793.976323][T31179] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1793.983180][T31179] ? copy_page_range+0x1bc0/0x3930 [ 1793.988372][T31179] alloc_pages+0x1aa/0x270 [ 1793.992854][T31179] get_zeroed_page+0x14/0x40 [ 1793.997515][T31179] __pud_alloc+0x3b/0x180 [ 1794.001924][T31179] copy_page_range+0x1d18/0x3930 [ 1794.006943][T31179] ? mas_wr_modify+0x999/0x16d0 [ 1794.011883][T31179] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 1794.017862][T31179] ? mas_store+0x275/0x3a0 [ 1794.022379][T31179] ? handle_mm_fault+0x9c0/0x9c0 [ 1794.027393][T31179] ? down_write+0x14f/0x200 [ 1794.031980][T31179] dup_mmap+0xcfd/0x1480 [ 1794.036301][T31179] ? replace_mm_exe_file+0x4b0/0x4b0 [ 1794.041649][T31179] ? lock_downgrade+0x690/0x690 [ 1794.046576][T31179] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1794.052469][T31179] ? __raw_spin_lock_init+0x3a/0x110 [ 1794.057824][T31179] ? mm_init+0x9e6/0xd50 [ 1794.062136][T31179] copy_process+0x4611/0x7580 [ 1794.066867][T31179] ? _raw_spin_unlock+0x28/0x40 [ 1794.071780][T31179] ? wp_page_reuse+0x197/0x570 [ 1794.076622][T31179] ? pidfd_prepare+0x80/0x80 [ 1794.081300][T31179] ? lock_sync+0x190/0x190 [ 1794.085780][T31179] ? do_raw_spin_lock+0x124/0x2b0 [ 1794.090867][T31179] ? spin_bug+0x1c0/0x1c0 [ 1794.095258][T31179] ? lock_downgrade+0x690/0x690 [ 1794.100200][T31179] kernel_clone+0xeb/0x890 [ 1794.104774][T31179] ? create_io_thread+0xe0/0xe0 [ 1794.109690][T31179] ? count_memcg_event_mm.part.0+0x2f3/0x330 [ 1794.115741][T31179] ? vm_iomap_memory+0x190/0x190 [ 1794.120845][T31179] ? find_held_lock+0x2d/0x110 [ 1794.125682][T31179] __do_sys_clone+0xba/0x100 [ 1794.130342][T31179] ? kernel_clone+0x890/0x890 [ 1794.135109][T31179] ? syscall_enter_from_user_mode+0x26/0x80 [ 1794.141079][T31179] do_syscall_64+0x39/0xb0 [ 1794.145554][T31179] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1794.151607][T31179] RIP: 0033:0x7f75dae89e9b [ 1794.156087][T31179] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1794.175759][T31179] RSP: 002b:00007ffc518c8b60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1794.184235][T31179] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f75dae89e9b [ 1794.192255][T31179] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1794.200281][T31179] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555614e400 [ 1794.208309][T31179] R10: 000055555614e6d0 R11: 0000000000000246 R12: 0000000000000001 [ 1794.216423][T31179] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc518c8c40 [ 1794.224475][T31179] [ 1794.283489][T19199] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 03:34:53 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x0, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1794.394451][T31179] memory: usage 8352kB, limit 0kB, failcnt 968 [ 1794.400834][T31179] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1794.443533][T31179] Memory cgroup stats for /syz4: [ 1794.443799][T31179] anon 36864 [ 1794.443799][T31179] file 8351744 [ 1794.443799][T31179] kernel 163840 [ 1794.443799][T31179] kernel_stack 32768 [ 1794.443799][T31179] pagetables 16384 [ 1794.443799][T31179] sec_pagetables 0 [ 1794.443799][T31179] percpu 64 [ 1794.443799][T31179] sock 0 [ 1794.443799][T31179] vmalloc 0 [ 1794.443799][T31179] shmem 8351744 [ 1794.443799][T31179] zswap 0 [ 1794.443799][T31179] zswapped 0 [ 1794.443799][T31179] file_mapped 192512 [ 1794.443799][T31179] file_dirty 0 [ 1794.443799][T31179] file_writeback 0 [ 1794.443799][T31179] swapcached 0 [ 1794.443799][T31179] anon_thp 0 [ 1794.443799][T31179] file_thp 0 [ 1794.443799][T31179] shmem_thp 0 [ 1794.443799][T31179] inactive_anon 16384 [ 1794.443799][T31179] active_anon 8372224 [ 1794.443799][T31179] inactive_file 0 [ 1794.443799][T31179] active_file 0 [ 1794.443799][T31179] unevictable 0 [ 1794.443799][T31179] slab_reclaimable 42256 [ 1794.443799][T31179] slab_unreclaimable 55104 [ 1794.443799][T31179] slab 97360 [ 1794.443799][T31179] workingset_refault_anon 0 [ 1794.443799][T31179] workingset_refault_file 0 [ 1794.443799][T31179] workingset_activate_anon 0 [ 1794.443799][T31179] workingset_activate_file 0 [ 1794.443799][T31179] workingset_restore_anon 0 [ 1794.443799][T31179] workingset_restore_file 0 [ 1794.443799][T31179] workingset_nodereclaim 0 [ 1794.443799][T31179] pgscan 464 [ 1794.443799][T31179] pgsteal 89 [ 1794.443799][T31179] pgscan_kswapd 0 [ 1794.443799][T31179] pgscan_direct 464 [ 1794.443799][T31179] pgscan_khugepaged 0 [ 1794.443799][T31179] pgsteal_kswapd 0 [ 1794.443799][T31179] pgsteal_direct 89 [ 1794.443799][T31179] pgsteal_khugepaged 0 [ 1794.443799][T31179] pgfault 52340 [ 1794.443799][T31179] pgmajfault 0 [ 1794.443799][T31179] pgrefill 2546 [ 1794.443799][T31179] pgactivate 179 [ 1794.443799][T31179] pgdeactivate 0 [ 1794.443799][T31179] pglazyfree 0 [ 1794.443799][T31179] pglazyfreed 0 [ 1794.443799][T31179] zswpin 0 [ 1794.443799][T31179] zswpout 0 [ 1794.443799][T31179] thp_fault_alloc 0 [ 1794.667736][T19199] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.755158][T19199] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.869415][T19199] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1795.021376][T31179] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=31179,uid=0 [ 1795.070822][T31179] Memory cgroup out of memory: Killed process 31179 (syz-executor.4) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1795.133377][T31181] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1795.190853][T31181] CPU: 1 PID: 31181 Comm: syz-executor.2 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1795.201016][T31181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1795.211127][T31181] Call Trace: [ 1795.214465][T31181] [ 1795.217447][T31181] dump_stack_lvl+0x136/0x150 [ 1795.222188][T31181] dump_header+0x10a/0xd70 [ 1795.226711][T31181] oom_kill_process+0x25d/0x600 [ 1795.231668][T31181] out_of_memory+0x35c/0x1660 [ 1795.236520][T31181] ? oom_killer_disable+0x2b0/0x2b0 [ 1795.241804][T31181] ? rcu_read_unlock+0x9/0x60 [ 1795.246561][T31181] ? find_held_lock+0x2d/0x110 [ 1795.251480][T31181] mem_cgroup_out_of_memory+0x206/0x270 [ 1795.257088][T31181] ? mem_cgroup_margin+0x130/0x130 [ 1795.262256][T31181] ? lock_downgrade+0x690/0x690 [ 1795.267190][T31181] try_charge_memcg+0xf9b/0x13b0 [ 1795.272199][T31181] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1795.278247][T31181] ? rcu_read_unlock+0x9/0x60 [ 1795.282992][T31181] ? lock_downgrade+0x690/0x690 [ 1795.287916][T31181] charge_memcg+0x90/0x3b0 [ 1795.292397][T31181] __mem_cgroup_charge+0x2b/0x90 [ 1795.297411][T31181] ? copy_mc_to_kernel+0x3e/0x90 [ 1795.302426][T31181] do_wp_page+0x8eb/0x3570 [ 1795.306928][T31181] ? lock_sync+0x190/0x190 [ 1795.311403][T31181] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1795.316849][T31181] ? do_raw_spin_lock+0x124/0x2b0 [ 1795.321935][T31181] ? spin_bug+0x1c0/0x1c0 [ 1795.326318][T31181] ? lock_downgrade+0x690/0x690 [ 1795.331247][T31181] __handle_mm_fault+0x2017/0x3f60 [ 1795.336444][T31181] ? vm_iomap_memory+0x190/0x190 [ 1795.341510][T31181] handle_mm_fault+0x2ba/0x9c0 [ 1795.346354][T31181] do_user_addr_fault+0x47e/0x1240 [ 1795.351625][T31181] ? rcu_is_watching+0x12/0xb0 [ 1795.356461][T31181] exc_page_fault+0x98/0x170 [ 1795.361239][T31181] asm_exc_page_fault+0x26/0x30 [ 1795.366167][T31181] RIP: 0033:0x7f496b65b62a [ 1795.370633][T31181] Code: 44 89 c8 87 07 83 f8 01 7e d5 45 31 d2 ba 01 00 00 00 be 81 00 00 00 89 d8 0f 05 eb c2 0f 1f 00 c3 0f 1f 80 00 00 00 00 31 c0 <87> 05 48 f8 c7 00 83 f8 01 7e c9 45 31 d2 ba 01 00 00 00 be 81 00 [ 1795.390478][T31181] RSP: 002b:00007ffde9038870 EFLAGS: 00010246 [ 1795.396603][T31181] RAX: 0000000000000000 RBX: 00000000000000ca RCX: 00007f496b689e9b [ 1795.404620][T31181] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f496b7895e0 [ 1795.412642][T31181] RBP: 0000000000000001 R08: 00007f496b7895e0 R09: 0000000000000000 [ 1795.420663][T31181] R10: 00005555558916d0 R11: 0000000000000246 R12: 0000000000000001 [ 1795.428685][T31181] R13: 0000000000000006 R14: 0000000000000001 R15: 00007ffde9038960 [ 1795.436738][T31181] [ 1795.465396][T31181] memory: usage 452kB, limit 0kB, failcnt 1442 [ 1795.473810][T31181] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1795.481872][T31181] Memory cgroup stats for /syz2: [ 1795.482127][T31181] anon 53248 [ 1795.482127][T31181] file 204800 [ 1795.482127][T31181] kernel 204800 [ 1795.482127][T31181] kernel_stack 32768 [ 1795.482127][T31181] pagetables 57344 [ 1795.482127][T31181] sec_pagetables 0 [ 1795.482127][T31181] percpu 128 [ 1795.482127][T31181] sock 0 [ 1795.482127][T31181] vmalloc 0 [ 1795.482127][T31181] shmem 204800 [ 1795.482127][T31181] zswap 0 [ 1795.482127][T31181] zswapped 0 [ 1795.482127][T31181] file_mapped 204800 [ 1795.482127][T31181] file_dirty 0 [ 1795.482127][T31181] file_writeback 0 [ 1795.482127][T31181] swapcached 0 [ 1795.482127][T31181] anon_thp 0 [ 1795.482127][T31181] file_thp 0 [ 1795.482127][T31181] shmem_thp 0 [ 1795.482127][T31181] inactive_anon 163840 [ 1795.482127][T31181] active_anon 94208 [ 1795.482127][T31181] inactive_file 0 [ 1795.482127][T31181] active_file 0 [ 1795.482127][T31181] unevictable 0 [ 1795.482127][T31181] slab_reclaimable 12352 [ 1795.482127][T31181] slab_unreclaimable 73280 [ 1795.482127][T31181] slab 85632 [ 1795.482127][T31181] workingset_refault_anon 0 [ 1795.482127][T31181] workingset_refault_file 0 [ 1795.482127][T31181] workingset_activate_anon 0 [ 1795.482127][T31181] workingset_activate_file 0 [ 1795.482127][T31181] workingset_restore_anon 0 [ 1795.482127][T31181] workingset_restore_file 0 [ 1795.482127][T31181] workingset_nodereclaim 2 [ 1795.482127][T31181] pgscan 398 [ 1795.482127][T31181] pgsteal 65 [ 1795.482127][T31181] pgscan_kswapd 0 [ 1795.482127][T31181] pgscan_direct 398 [ 1795.482127][T31181] pgscan_khugepaged 0 [ 1795.482127][T31181] pgsteal_kswapd 0 [ 1795.482127][T31181] pgsteal_direct 65 [ 1795.482127][T31181] pgsteal_khugepaged 0 [ 1795.482127][T31181] pgfault 34279 [ 1795.482127][T31181] pgmajfault 0 [ 1795.482127][T31181] pgrefill 3648 [ 1795.482127][T31181] pgactivate 333 [ 1795.482127][T31181] pgdeactivate 0 [ 1795.482127][T31181] pglazyfree 0 [ 1795.482127][T31181] pglazyfreed 0 [ 1795.482127][T31181] zswpin 0 [ 1795.482127][T31181] zswpout 0 [ 1795.482127][T31181] thp_fault_alloc 0 [ 1795.834016][T31181] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=31181,uid=0 [ 1795.863710][T31182] Bluetooth: hci0: command 0x0409 tx timeout [ 1795.901517][T31181] Memory cgroup out of memory: Killed process 31181 (syz-executor.2) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 03:34:55 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1796.059732][T31518] chnl_net:caif_netlink_parms(): no params data found [ 1796.067374][T18508] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1796.077625][T18508] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1796.089630][T18508] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1796.098682][T18508] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1796.110081][T18508] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1796.119659][T18508] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1796.240165][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1796.251189][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1796.260234][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1796.271096][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1796.278881][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1796.287903][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 03:34:56 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:34:56 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1796.743490][ T1216] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.749980][ T1216] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.001848][T31518] bridge0: port 1(bridge_slave_0) entered blocking state [ 1797.009036][T31518] bridge0: port 1(bridge_slave_0) entered disabled state [ 1797.017023][T31182] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1797.031752][T31182] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1797.040695][T31182] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1797.048464][T31518] bridge_slave_0: entered allmulticast mode [ 1797.055838][T31182] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1797.063252][T31182] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 03:34:56 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1797.103922][T31518] bridge_slave_0: entered promiscuous mode [ 1797.156341][T31518] bridge0: port 2(bridge_slave_1) entered blocking state [ 1797.171887][T31518] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.179180][T31518] bridge_slave_1: entered allmulticast mode [ 1797.213852][T31518] bridge_slave_1: entered promiscuous mode [ 1797.486199][T31518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1797.543018][T31518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1797.628918][T31535] chnl_net:caif_netlink_parms(): no params data found [ 1797.686042][T31531] chnl_net:caif_netlink_parms(): no params data found [ 1797.720707][T31518] team0: Port device team_slave_0 added [ 1797.775929][T31518] team0: Port device team_slave_1 added [ 1797.942046][T31182] Bluetooth: hci0: command 0x041b tx timeout [ 1797.953967][T31518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1797.960973][T31518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1797.997419][T31518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1798.089882][T31518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1798.097485][T31518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1798.125291][T31518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1798.181403][T31182] Bluetooth: hci1: command 0x0409 tx timeout [ 1798.189857][T19199] hsr_slave_0: left promiscuous mode [ 1798.199292][T19199] hsr_slave_1: left promiscuous mode [ 1798.222103][T19199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1798.229582][T19199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1798.254230][T19199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1798.273817][T19199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1798.288649][T19199] bridge_slave_1: left allmulticast mode [ 1798.296991][T19199] bridge_slave_1: left promiscuous mode [ 1798.307779][T19199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1798.318527][T19199] bridge_slave_0: left allmulticast mode [ 1798.341580][T19199] bridge_slave_0: left promiscuous mode [ 1798.347381][T19199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1798.356410][T31182] Bluetooth: hci2: command 0x0409 tx timeout [ 1798.399750][T19199] veth1_macvtap: left promiscuous mode [ 1798.414669][T19199] veth0_macvtap: left promiscuous mode [ 1798.420413][T19199] veth1_vlan: left promiscuous mode [ 1798.438044][T19199] veth0_vlan: left promiscuous mode [ 1798.523184][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1798.537368][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1798.547438][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1798.555776][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1798.565794][T18508] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1798.573291][T18508] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1798.857641][T19199] team0 (unregistering): Port device team_slave_1 removed [ 1798.878923][T19199] team0 (unregistering): Port device team_slave_0 removed [ 1798.890289][T31182] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1798.900019][T31182] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1798.909398][T19199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1798.918585][T31182] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1798.927341][T31182] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1798.936268][T31182] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1798.943715][T31182] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1798.951144][T19199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1799.050182][T19199] bond0 (unregistering): Released all slaves [ 1799.090365][T31531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1799.097592][T31531] bridge0: port 1(bridge_slave_0) entered disabled state [ 1799.110262][T31531] bridge_slave_0: entered allmulticast mode [ 1799.117357][T31531] bridge_slave_0: entered promiscuous mode [ 1799.141585][T18508] Bluetooth: hci3: command 0x0409 tx timeout [ 1799.174667][T31531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1799.182691][T31531] bridge0: port 2(bridge_slave_1) entered disabled state [ 1799.189943][T31531] bridge_slave_1: entered allmulticast mode [ 1799.198203][T31531] bridge_slave_1: entered promiscuous mode [ 1799.233920][T31535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1799.241081][T31535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1799.248613][T31535] bridge_slave_0: entered allmulticast mode [ 1799.255546][T31535] bridge_slave_0: entered promiscuous mode [ 1799.271126][T31550] chnl_net:caif_netlink_parms(): no params data found [ 1799.304313][T31531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1799.322926][T31535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1799.330139][T31535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1799.338133][T31535] bridge_slave_1: entered allmulticast mode [ 1799.351022][T31535] bridge_slave_1: entered promiscuous mode [ 1799.415188][T31531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1799.460083][T31535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1799.477110][T31518] hsr_slave_0: entered promiscuous mode [ 1799.485224][T31518] hsr_slave_1: entered promiscuous mode [ 1799.509286][T31531] team0: Port device team_slave_0 added [ 1799.547725][T31535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1799.582828][T31535] team0: Port device team_slave_0 added [ 1799.595496][T31531] team0: Port device team_slave_1 added [ 1799.631092][T31535] team0: Port device team_slave_1 added [ 1799.706975][T31531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1799.714127][T31531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1799.740215][T31531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1799.779026][T31535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1799.786264][T31535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1799.812387][T31535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1799.825446][T31535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1799.832869][T31535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1799.859113][T31535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1799.880825][T31531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1799.890267][T31531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1799.924527][T31531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1799.940363][T31550] bridge0: port 1(bridge_slave_0) entered blocking state [ 1799.953845][T31550] bridge0: port 1(bridge_slave_0) entered disabled state [ 1799.961095][T31550] bridge_slave_0: entered allmulticast mode [ 1799.973717][T31550] bridge_slave_0: entered promiscuous mode [ 1800.000506][T31550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1800.014382][T31550] bridge0: port 2(bridge_slave_1) entered disabled state [ 1800.021579][T18508] Bluetooth: hci0: command 0x040f tx timeout [ 1800.028015][T31550] bridge_slave_1: entered allmulticast mode [ 1800.045875][T31550] bridge_slave_1: entered promiscuous mode [ 1800.136291][T31550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1800.206536][T31550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1800.261692][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 1800.275621][T31535] hsr_slave_0: entered promiscuous mode [ 1800.288950][T31535] hsr_slave_1: entered promiscuous mode [ 1800.297018][T31535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1800.311668][T31535] Cannot create hsr debugfs directory [ 1800.421409][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 1800.445329][T31531] hsr_slave_0: entered promiscuous mode [ 1800.463088][T31531] hsr_slave_1: entered promiscuous mode [ 1800.499382][T31531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1800.521272][T31531] Cannot create hsr debugfs directory [ 1800.545786][T31550] team0: Port device team_slave_0 added [ 1800.650449][T31550] team0: Port device team_slave_1 added [ 1800.661401][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 1800.982026][ T48] Bluetooth: hci5: command 0x0409 tx timeout [ 1801.223086][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 1801.263568][T31550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1801.270584][T31550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1801.384978][T31550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1801.432354][T31550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1801.439457][T31550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1801.501337][T31550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1801.674899][T31582] chnl_net:caif_netlink_parms(): no params data found [ 1801.890605][T31585] chnl_net:caif_netlink_parms(): no params data found [ 1802.028357][T31550] hsr_slave_0: entered promiscuous mode [ 1802.035656][T31550] hsr_slave_1: entered promiscuous mode [ 1802.043288][T31550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1802.050915][T31550] Cannot create hsr debugfs directory [ 1802.101343][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 1802.322990][T31585] bridge0: port 1(bridge_slave_0) entered blocking state [ 1802.330162][T31585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1802.341632][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 1802.378780][T31585] bridge_slave_0: entered allmulticast mode [ 1802.402603][T31585] bridge_slave_0: entered promiscuous mode [ 1802.442215][T31582] bridge0: port 1(bridge_slave_0) entered blocking state [ 1802.449400][T31582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1802.481467][T31582] bridge_slave_0: entered allmulticast mode [ 1802.488625][T31582] bridge_slave_0: entered promiscuous mode [ 1802.502460][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 1802.622484][T19199] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1802.675309][T31585] bridge0: port 2(bridge_slave_1) entered blocking state [ 1802.701608][T31585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1802.708893][T31585] bridge_slave_1: entered allmulticast mode [ 1802.741634][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 1802.749662][T31585] bridge_slave_1: entered promiscuous mode [ 1802.779470][T31582] bridge0: port 2(bridge_slave_1) entered blocking state [ 1802.787227][T31582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1802.811935][T31582] bridge_slave_1: entered allmulticast mode [ 1802.832538][T31582] bridge_slave_1: entered promiscuous mode [ 1802.899310][T19199] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.061381][ T48] Bluetooth: hci5: command 0x041b tx timeout [ 1803.182542][T19199] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.204542][T31585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1803.238051][T31582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1803.295340][T19199] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.309370][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 1803.395407][T31585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1803.431098][T31582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1803.451415][T31518] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1803.640592][T31518] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1803.757771][T31518] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1803.803710][T31585] team0: Port device team_slave_0 added [ 1803.814523][T31582] team0: Port device team_slave_0 added [ 1803.833262][T31518] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1803.880428][T31585] team0: Port device team_slave_1 added [ 1803.890826][T31582] team0: Port device team_slave_1 added [ 1804.102263][T31585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1804.121973][T31585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1804.158536][T31585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1804.203810][T31585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1804.210825][T31585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1804.237704][T31585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1804.277509][T19199] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.297543][T31582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1804.305729][T31582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1804.332745][T31582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1804.404547][T19199] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.422612][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 1804.445681][T31582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1804.453720][T31582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1804.480557][T31582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1804.554914][T19199] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.581546][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 1804.646040][T31582] hsr_slave_0: entered promiscuous mode [ 1804.653585][T31582] hsr_slave_1: entered promiscuous mode [ 1804.660259][T31582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1804.668921][T31582] Cannot create hsr debugfs directory [ 1804.695360][T31585] hsr_slave_0: entered promiscuous mode [ 1804.712114][T31585] hsr_slave_1: entered promiscuous mode [ 1804.721985][T31585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1804.729599][T31585] Cannot create hsr debugfs directory [ 1804.793124][T19199] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.821407][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 1804.965672][T31518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1805.034309][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1805.052071][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1805.141605][ T48] Bluetooth: hci5: command 0x040f tx timeout [ 1805.176683][T31518] 8021q: adding VLAN 0 to HW filter on device team0 [ 1805.324325][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1805.339120][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1805.348353][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 1805.355548][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1805.363760][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1805.372864][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1805.381737][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 1805.383966][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 1805.395886][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1805.404457][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1805.551873][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1805.560623][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1805.569873][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1805.580148][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1805.589169][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1805.598188][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1805.607162][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1805.616144][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1805.625365][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1805.634463][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1805.668633][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1805.687694][T31518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1805.974454][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1805.982471][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1805.999735][T31518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1806.040023][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1806.049350][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1806.092594][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1806.101203][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1806.115288][T31518] veth0_vlan: entered promiscuous mode [ 1806.125960][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1806.137038][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1806.148946][T31518] veth1_vlan: entered promiscuous mode [ 1806.189005][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1806.198346][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1806.208648][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1806.217912][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1806.230260][T31518] veth0_macvtap: entered promiscuous mode [ 1806.256038][T31518] veth1_macvtap: entered promiscuous mode [ 1806.275780][T31518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1806.286527][T31518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1806.298346][T31518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1806.309150][T31518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1806.320954][T31518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1806.352920][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1806.363241][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1806.371834][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1806.380773][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1806.392835][T31518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1806.403734][T31518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1806.415104][T31518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1806.427217][T31518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1806.439118][T31518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1806.467816][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1806.480892][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1806.494340][T31518] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.504725][T31518] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.515750][T31518] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.524841][T31518] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.639851][ T5909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1806.663119][ T5909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1806.696625][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1806.710008][ T5909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1806.720835][ T5909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1806.733177][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1806.901408][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 1807.221515][ T48] Bluetooth: hci5: command 0x0419 tx timeout [ 1807.407767][T31654] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1807.421646][T31654] CPU: 1 PID: 31654 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1807.432061][T31654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1807.442170][T31654] Call Trace: [ 1807.445496][T31654] [ 1807.448479][T31654] dump_stack_lvl+0x136/0x150 [ 1807.453239][T31654] dump_header+0x10a/0xd70 [ 1807.457753][T31654] oom_kill_process+0x25d/0x600 [ 1807.462699][T31654] out_of_memory+0x35c/0x1660 [ 1807.467467][T31654] ? __traceiter_irq_enable+0xa0/0xa0 [ 1807.472934][T31654] ? oom_killer_disable+0x2b0/0x2b0 [ 1807.478220][T31654] ? mark_held_locks+0x9f/0xe0 [ 1807.483067][T31654] mem_cgroup_out_of_memory+0x206/0x270 [ 1807.488678][T31654] ? mem_cgroup_margin+0x130/0x130 [ 1807.493863][T31654] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 1807.499758][T31654] memory_max_write+0x2f9/0x3c0 [ 1807.504696][T31654] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1807.510937][T31654] ? lock_sync+0x190/0x190 [ 1807.515447][T31654] cgroup_file_write+0x1e2/0x7b0 [ 1807.520446][T31654] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1807.526596][T31654] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1807.532047][T31654] ? __virt_addr_valid+0x61/0x2e0 [ 1807.537169][T31654] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1807.542607][T31654] kernfs_fop_write_iter+0x3f1/0x600 [ 1807.547952][T31654] vfs_write+0x9ee/0xe10 [ 1807.552254][T31654] ? kernel_write+0x670/0x670 [ 1807.556988][T31654] ? __fget_files+0x26a/0x480 [ 1807.561724][T31654] ksys_write+0x12b/0x250 [ 1807.566106][T31654] ? __ia32_sys_read+0xb0/0xb0 [ 1807.570915][T31654] ? syscall_enter_from_user_mode+0x26/0x80 [ 1807.576902][T31654] do_syscall_64+0x39/0xb0 [ 1807.581369][T31654] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1807.587362][T31654] RIP: 0033:0x7fdf3628c169 [ 1807.591814][T31654] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1807.611473][T31654] RSP: 002b:00007fdf36fd1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1807.619924][T31654] RAX: ffffffffffffffda RBX: 00007fdf363abf80 RCX: 00007fdf3628c169 [ 1807.627929][T31654] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 1807.635943][T31654] RBP: 00007fdf362e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1807.643952][T31654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1807.651966][T31654] R13: 00007ffda273659f R14: 00007fdf36fd1300 R15: 0000000000022000 [ 1807.660001][T31654] [ 1807.737172][T31654] memory: usage 10620kB, limit 0kB, failcnt 687 [ 1807.744295][T31654] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1807.751518][T31654] Memory cgroup stats for /syz1: [ 1807.751790][T31654] anon 114688 [ 1807.751790][T31654] file 10461184 [ 1807.751790][T31654] kernel 290816 [ 1807.751790][T31654] kernel_stack 65536 [ 1807.751790][T31654] pagetables 77824 [ 1807.751790][T31654] sec_pagetables 0 [ 1807.751790][T31654] percpu 64 [ 1807.751790][T31654] sock 0 [ 1807.751790][T31654] vmalloc 0 [ 1807.751790][T31654] shmem 10457088 [ 1807.751790][T31654] zswap 0 [ 1807.751790][T31654] zswapped 0 [ 1807.751790][T31654] file_mapped 262144 [ 1807.751790][T31654] file_dirty 4096 [ 1807.751790][T31654] file_writeback 0 [ 1807.751790][T31654] swapcached 0 [ 1807.751790][T31654] anon_thp 0 [ 1807.751790][T31654] file_thp 0 [ 1807.751790][T31654] shmem_thp 0 [ 1807.751790][T31654] inactive_anon 8359936 [ 1807.751790][T31654] active_anon 2211840 [ 1807.751790][T31654] inactive_file 0 [ 1807.751790][T31654] active_file 4096 [ 1807.751790][T31654] unevictable 0 [ 1807.751790][T31654] slab_reclaimable 46560 [ 1807.751790][T31654] slab_unreclaimable 73488 [ 1807.751790][T31654] slab 120048 [ 1807.751790][T31654] workingset_refault_anon 0 [ 1807.751790][T31654] workingset_refault_file 3 [ 1807.751790][T31654] workingset_activate_anon 0 [ 1807.751790][T31654] workingset_activate_file 0 [ 1807.751790][T31654] workingset_restore_anon 0 [ 1807.751790][T31654] workingset_restore_file 1 [ 1807.751790][T31654] workingset_nodereclaim 0 [ 1807.751790][T31654] pgscan 134 [ 1807.751790][T31654] pgsteal 58 [ 1807.751790][T31654] pgscan_kswapd 0 [ 1807.751790][T31654] pgscan_direct 134 [ 1807.751790][T31654] pgscan_khugepaged 0 [ 1807.751790][T31654] pgsteal_kswapd 0 [ 1807.751790][T31654] pgsteal_direct 58 [ 1807.751790][T31654] pgsteal_khugepaged 0 [ 1807.751790][T31654] pgfault 36983 [ 1807.751790][T31654] pgmajfault 0 [ 1807.751790][T31654] pgrefill 757 [ 1807.751790][T31654] pgactivate 76 [ 1807.751790][T31654] pgdeactivate 0 [ 1807.751790][T31654] pglazyfree 0 [ 1807.751790][T31654] pglazyfreed 0 [ 1807.751790][T31654] zswpin 0 [ 1807.751790][T31654] zswpout 0 [ 1807.751790][T31654] thp_fault_alloc 0 [ 1807.961505][T31654] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=31653,uid=0 [ 1807.992471][T31654] Memory cgroup out of memory: Killed process 31654 (syz-executor.1) total-vm:54548kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:35:07 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1808.056093][T19199] hsr_slave_0: left promiscuous mode [ 1808.121608][T19199] hsr_slave_1: left promiscuous mode [ 1808.155338][T31518] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1808.171477][T19199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1808.176594][T31518] CPU: 0 PID: 31518 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1808.178947][T19199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1808.188974][T31518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1808.188995][T31518] Call Trace: [ 1808.189005][T31518] [ 1808.189017][T31518] dump_stack_lvl+0x136/0x150 [ 1808.189058][T31518] dump_header+0x10a/0xd70 [ 1808.189115][T31518] oom_kill_process+0x25d/0x600 [ 1808.189173][T31518] out_of_memory+0x35c/0x1660 [ 1808.189230][T31518] ? find_held_lock+0x2d/0x110 [ 1808.236167][T31518] ? oom_killer_disable+0x2b0/0x2b0 [ 1808.241429][T31518] ? rcu_read_unlock+0x9/0x60 [ 1808.246172][T31518] ? find_held_lock+0x2d/0x110 [ 1808.250986][T31518] mem_cgroup_out_of_memory+0x206/0x270 [ 1808.256571][T31518] ? mem_cgroup_margin+0x130/0x130 [ 1808.261713][T31518] ? lock_downgrade+0x690/0x690 [ 1808.266619][T31518] try_charge_memcg+0xf9b/0x13b0 [ 1808.271603][T31518] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1808.277736][T31518] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1808.283513][T31518] ? lock_downgrade+0x690/0x690 [ 1808.288423][T31518] ? lock_downgrade+0x690/0x690 [ 1808.293342][T31518] __memcg_kmem_charge_page+0x16e/0x3c0 [ 1808.298938][T31518] __alloc_pages+0x1f3/0x4a0 [ 1808.303571][T31518] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1808.310375][T31518] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1808.316408][T31518] ? print_usage_bug.part.0+0x660/0x660 [ 1808.322026][T31518] alloc_pages+0x1aa/0x270 [ 1808.326501][T31518] pte_alloc_one+0x1a/0x230 [ 1808.331054][T31518] __pte_alloc+0x6d/0x260 [ 1808.335427][T31518] ? pmd_install+0x160/0x160 [ 1808.340070][T31518] copy_page_range+0x151e/0x3930 [ 1808.345077][T31518] ? mas_wr_modify+0x9ae/0x16d0 [ 1808.349988][T31518] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 1808.355961][T31518] ? mas_store+0x275/0x3a0 [ 1808.360422][T31518] ? handle_mm_fault+0x9c0/0x9c0 [ 1808.365423][T31518] ? up_write+0x1b4/0x520 [ 1808.369807][T31518] dup_mmap+0xcfd/0x1480 [ 1808.374100][T31518] ? replace_mm_exe_file+0x4b0/0x4b0 [ 1808.379422][T31518] ? lock_downgrade+0x690/0x690 [ 1808.384413][T31518] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1808.390385][T31518] ? __raw_spin_lock_init+0x3a/0x110 [ 1808.395774][T31518] ? mm_init+0x9e6/0xd50 [ 1808.400068][T31518] copy_process+0x4611/0x7580 [ 1808.404794][T31518] ? _raw_spin_unlock+0x28/0x40 [ 1808.409697][T31518] ? wp_page_reuse+0x197/0x570 [ 1808.414524][T31518] ? pidfd_prepare+0x80/0x80 [ 1808.419149][T31518] ? lock_sync+0x190/0x190 [ 1808.423606][T31518] ? do_raw_spin_lock+0x124/0x2b0 [ 1808.428670][T31518] ? spin_bug+0x1c0/0x1c0 [ 1808.433033][T31518] ? lock_downgrade+0x690/0x690 [ 1808.437935][T31518] kernel_clone+0xeb/0x890 [ 1808.442393][T31518] ? create_io_thread+0xe0/0xe0 [ 1808.447311][T31518] ? vm_iomap_memory+0x190/0x190 [ 1808.452387][T31518] ? find_held_lock+0x2d/0x110 [ 1808.457193][T31518] __do_sys_clone+0xba/0x100 [ 1808.461823][T31518] ? kernel_clone+0x890/0x890 [ 1808.466557][T31518] ? syscall_enter_from_user_mode+0x26/0x80 [ 1808.472495][T31518] do_syscall_64+0x39/0xb0 [ 1808.477023][T31518] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1808.482959][T31518] RIP: 0033:0x7fdf36289e9b [ 1808.487399][T31518] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1808.507042][T31518] RSP: 002b:00007ffda27367e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1808.515494][T31518] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdf36289e9b [ 1808.523490][T31518] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1808.531522][T31518] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555566c0400 [ 1808.539538][T31518] R10: 00005555566c06d0 R11: 0000000000000246 R12: 0000000000000001 [ 1808.547572][T31518] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffda27368c0 [ 1808.555607][T31518] [ 1808.616559][T19199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1808.630924][T19199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1808.651151][T19199] bridge_slave_1: left allmulticast mode [ 1808.658747][T19199] bridge_slave_1: left promiscuous mode [ 1808.675363][T19199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1808.690919][T19199] bridge_slave_0: left allmulticast mode [ 1808.707365][T19199] bridge_slave_0: left promiscuous mode [ 1808.717351][T19199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1808.738707][T19199] hsr_slave_0: left promiscuous mode [ 1808.761028][T19199] hsr_slave_1: left promiscuous mode [ 1808.767559][T19199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1808.786387][T19199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1808.798873][T19199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1808.799242][T31518] memory: usage 10464kB, limit 0kB, failcnt 724 [ 1808.806976][T19199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1808.821468][T31518] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1808.823631][T19199] bridge_slave_1: left allmulticast mode [ 1808.828359][T31518] Memory cgroup stats for /syz1 [ 1808.834607][T19199] bridge_slave_1: left promiscuous mode [ 1808.844330][T31518] : [ 1808.845291][T31518] anon 45056 [ 1808.845291][T31518] file 10461184 [ 1808.845291][T31518] kernel 208896 [ 1808.845291][T31518] kernel_stack 32768 [ 1808.845291][T31518] pagetables 40960 [ 1808.845291][T31518] sec_pagetables 0 [ 1808.845291][T31518] percpu 128 [ 1808.845291][T31518] sock 0 [ 1808.845291][T31518] vmalloc 0 [ 1808.845291][T31518] shmem 10457088 [ 1808.845291][T31518] zswap 0 [ 1808.845291][T31518] zswapped 0 [ 1808.845291][T31518] file_mapped 229376 [ 1808.845291][T31518] file_dirty 4096 [ 1808.845291][T31518] file_writeback 0 [ 1808.845291][T31518] swapcached 0 [ 1808.845291][T31518] anon_thp 0 [ 1808.845291][T31518] file_thp 0 [ 1808.845291][T31518] shmem_thp 0 [ 1808.845291][T31518] inactive_anon 2142208 [ 1808.845291][T31518] active_anon 8359936 [ 1808.845291][T31518] inactive_file 0 [ 1808.845291][T31518] active_file 4096 [ 1808.845291][T31518] unevictable 0 [ 1808.845291][T31518] slab_reclaimable 40088 [ 1808.845291][T31518] slab_unreclaimable 69872 [ 1808.845291][T31518] slab 109960 [ 1808.845291][T31518] workingset_refault_anon 0 [ 1808.845291][T31518] workingset_refault_file 3 [ 1808.845291][T31518] workingset_activate_anon 0 [ 1808.845291][T31518] workingset_activate_file 0 [ 1808.845291][T31518] workingset_restore_anon 0 [ 1808.845291][T31518] workingset_restore_file 1 [ 1808.845291][T31518] workingset_nodereclaim 0 [ 1808.845291][T31518] pgscan 134 [ 1808.845291][T31518] pgsteal 58 [ 1808.845291][T31518] pgscan_kswapd 0 [ 1808.845291][T31518] pgscan_direct 134 [ 1808.845291][T31518] pgscan_khugepaged 0 [ 1808.845291][T31518] pgsteal_kswapd 0 [ 1808.845291][T31518] pgsteal_direct 58 [ 1808.845291][T31518] pgsteal_khugepaged 0 [ 1808.845291][T31518] pgfault 36995 [ 1808.845291][T31518] pgmajfault 0 [ 1808.845291][T31518] pgrefill 792 [ 1808.845291][T31518] pgactivate 76 [ 1808.845291][T31518] pgdeactivate 0 [ 1808.845291][T31518] pglazyfree 0 [ 1808.845291][T31518] pglazyfreed 0 [ 1808.845291][T31518] zswpin 0 [ 1808.845291][T31518] zswpout 0 [ 1808.845291][T31518] thp_fault_alloc 0 [ 1808.850266][T19199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1809.041952][T31518] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=31518,uid=0 [ 1809.042474][T19199] bridge_slave_0: left allmulticast mode [ 1809.064136][T19199] bridge_slave_0: left promiscuous mode [ 1809.069885][T19199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1809.075675][T31518] Memory cgroup out of memory: Killed process 31518 (syz-executor.1) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1809.114860][T19199] veth1_macvtap: left promiscuous mode [ 1809.120467][T19199] veth0_macvtap: left promiscuous mode [ 1809.126861][T19199] veth1_vlan: left promiscuous mode [ 1809.132406][T19199] veth0_vlan: left promiscuous mode [ 1809.160165][T19199] veth1_macvtap: left promiscuous mode [ 1809.166139][T19199] veth0_macvtap: left promiscuous mode [ 1809.173048][T19199] veth1_vlan: left promiscuous mode [ 1809.178412][T19199] veth0_vlan: left promiscuous mode [ 1809.530104][T19199] team0 (unregistering): Port device team_slave_1 removed [ 1809.545873][T19199] team0 (unregistering): Port device team_slave_0 removed [ 1809.559076][T19199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1809.576592][T19199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1809.662519][T19199] bond0 (unregistering): Released all slaves [ 1809.802887][T19199] team0 (unregistering): Port device team_slave_1 removed [ 1809.819814][T19199] team0 (unregistering): Port device team_slave_0 removed [ 1809.833509][T19199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1809.859757][T19199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1809.937604][T19199] bond0 (unregistering): Released all slaves 03:35:10 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 03:35:11 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1812.688751][T19199] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1812.816617][T31535] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1812.875914][T19199] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1812.905221][T31535] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1813.012152][T19199] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1813.051954][T31535] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1813.109847][T31535] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1813.192310][T19199] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1813.539530][T31535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1813.590444][T31535] 8021q: adding VLAN 0 to HW filter on device team0 [ 1813.608920][T18508] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1813.615780][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1813.626481][T31182] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1813.637409][T31182] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1813.647363][T31182] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1813.655768][T31182] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1813.669372][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1813.723510][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1813.740673][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1813.750424][T21106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1813.757643][T21106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1813.774328][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1813.792363][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1813.809987][T21106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1813.817214][T21106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1813.833479][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1813.845835][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1813.880104][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1813.923833][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1813.946150][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1813.960878][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1813.970244][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1813.998986][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1814.023671][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1814.033751][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1814.042777][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1814.051822][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1814.062201][T31535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1814.312095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1814.319664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1814.365809][T31535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1814.389547][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1814.399374][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1814.471641][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1814.486103][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1814.495813][T31535] veth0_vlan: entered promiscuous mode [ 1814.504304][T26547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1814.513857][T26547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1814.533577][T31535] veth1_vlan: entered promiscuous mode [ 1814.555338][T19199] hsr_slave_0: left promiscuous mode [ 1814.562912][T19199] hsr_slave_1: left promiscuous mode [ 1814.568912][T19199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1814.582049][T19199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1814.592675][T19199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1814.600151][T19199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1814.610056][T19199] bridge_slave_1: left allmulticast mode [ 1814.616176][T19199] bridge_slave_1: left promiscuous mode [ 1814.622356][T19199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1814.632129][T19199] bridge_slave_0: left allmulticast mode [ 1814.637830][T19199] bridge_slave_0: left promiscuous mode [ 1814.644332][T19199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1814.658757][T19199] veth1_macvtap: left promiscuous mode [ 1814.664592][T19199] veth0_macvtap: left promiscuous mode [ 1814.670322][T19199] veth1_vlan: left promiscuous mode [ 1814.676468][T19199] veth0_vlan: left promiscuous mode [ 1814.919746][T19199] team0 (unregistering): Port device team_slave_1 removed [ 1814.937219][T19199] team0 (unregistering): Port device team_slave_0 removed [ 1814.950749][T19199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1814.967666][T19199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1815.044022][T19199] bond0 (unregistering): Released all slaves [ 1815.113331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1815.126556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1815.188723][T26547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1815.207964][T26547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1815.222640][T31535] veth0_macvtap: entered promiscuous mode [ 1815.235659][T31535] veth1_macvtap: entered promiscuous mode [ 1815.269447][T31535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1815.284020][T26547] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1815.293473][T26547] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1815.312268][T26547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1815.328107][T26547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1815.343024][T31535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1815.366072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1815.383912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1815.402756][T31535] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.420715][T31535] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.430004][T31535] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.446723][T31535] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.559317][T20447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1815.588177][T20447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1815.621706][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1815.621928][ T5909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1815.665664][ T5909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1815.688729][T26547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1815.701774][T31182] Bluetooth: hci0: command 0x0409 tx timeout [ 1816.450412][T31784] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1816.462052][T31784] CPU: 1 PID: 31784 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1816.472185][T31784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1816.482381][T31784] Call Trace: [ 1816.485705][T31784] [ 1816.488698][T31784] dump_stack_lvl+0x136/0x150 [ 1816.493462][T31784] dump_header+0x10a/0xd70 [ 1816.497970][T31784] oom_kill_process+0x25d/0x600 [ 1816.502913][T31784] out_of_memory+0x35c/0x1660 [ 1816.507682][T31784] ? oom_killer_disable+0x2b0/0x2b0 [ 1816.513145][T31784] ? kernfs_notify+0x1ac/0x410 [ 1816.518006][T31784] mem_cgroup_out_of_memory+0x206/0x270 [ 1816.523615][T31784] ? mem_cgroup_margin+0x130/0x130 [ 1816.528804][T31784] memory_max_write+0x2f9/0x3c0 [ 1816.533735][T31784] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1816.539890][T31784] ? lock_sync+0x190/0x190 [ 1816.544389][T31784] cgroup_file_write+0x1e2/0x7b0 [ 1816.549389][T31784] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1816.555531][T31784] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1816.560953][T31784] ? __virt_addr_valid+0x61/0x2e0 [ 1816.566053][T31784] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1816.571478][T31784] kernfs_fop_write_iter+0x3f1/0x600 [ 1816.576841][T31784] vfs_write+0x9ee/0xe10 [ 1816.581132][T31784] ? kernel_write+0x670/0x670 [ 1816.585860][T31784] ? __fget_files+0x26a/0x480 [ 1816.590591][T31784] ksys_write+0x12b/0x250 [ 1816.594965][T31784] ? __ia32_sys_read+0xb0/0xb0 [ 1816.599778][T31784] ? syscall_enter_from_user_mode+0x30/0x80 [ 1816.605717][T31784] do_syscall_64+0x39/0xb0 [ 1816.610264][T31784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1816.616203][T31784] RIP: 0033:0x7f57de88c169 [ 1816.620644][T31784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1816.640290][T31784] RSP: 002b:00007f57df64d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1816.648741][T31784] RAX: ffffffffffffffda RBX: 00007f57de9abf80 RCX: 00007f57de88c169 [ 1816.656825][T31784] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 1816.664843][T31784] RBP: 00007f57de8e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1816.672927][T31784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1816.680966][T31784] R13: 00007ffe07cf0eff R14: 00007f57df64d300 R15: 0000000000022000 [ 1816.688986][T31784] [ 1816.708706][T31784] memory: usage 8540kB, limit 0kB, failcnt 925 [ 1816.733347][T31784] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1816.751369][T31784] Memory cgroup stats for /syz0: [ 1816.751639][T31784] anon 114688 [ 1816.751639][T31784] file 8327168 [ 1816.751639][T31784] kernel 290816 [ 1816.751639][T31784] kernel_stack 65536 [ 1816.751639][T31784] pagetables 81920 [ 1816.751639][T31784] sec_pagetables 0 [ 1816.751639][T31784] percpu 64 [ 1816.751639][T31784] sock 0 [ 1816.751639][T31784] vmalloc 0 [ 1816.751639][T31784] shmem 8327168 [ 1816.751639][T31784] zswap 0 [ 1816.751639][T31784] zswapped 0 [ 1816.751639][T31784] file_mapped 229376 [ 1816.751639][T31784] file_dirty 0 [ 1816.751639][T31784] file_writeback 0 [ 1816.751639][T31784] swapcached 0 [ 1816.751639][T31784] anon_thp 0 [ 1816.751639][T31784] file_thp 0 [ 1816.751639][T31784] shmem_thp 0 [ 1816.751639][T31784] inactive_anon 8327168 [ 1816.751639][T31784] active_anon 114688 [ 1816.751639][T31784] inactive_file 0 [ 1816.751639][T31784] active_file 0 [ 1816.751639][T31784] unevictable 0 [ 1816.751639][T31784] slab_reclaimable 41120 [ 1816.751639][T31784] slab_unreclaimable 74136 [ 1816.751639][T31784] slab 115256 [ 1816.751639][T31784] workingset_refault_anon 0 [ 1816.751639][T31784] workingset_refault_file 0 [ 1816.751639][T31784] workingset_activate_anon 0 [ 1816.751639][T31784] workingset_activate_file 0 [ 1816.751639][T31784] workingset_restore_anon 0 [ 1816.751639][T31784] workingset_restore_file 0 [ 1816.751639][T31784] workingset_nodereclaim 0 [ 1816.751639][T31784] pgscan 193 [ 1816.751639][T31784] pgsteal 68 [ 1816.751639][T31784] pgscan_kswapd 0 [ 1816.751639][T31784] pgscan_direct 193 [ 1816.751639][T31784] pgscan_khugepaged 0 [ 1816.751639][T31784] pgsteal_kswapd 0 [ 1816.751639][T31784] pgsteal_direct 68 [ 1816.751639][T31784] pgsteal_khugepaged 0 [ 1816.751639][T31784] pgfault 37248 [ 1816.751639][T31784] pgmajfault 0 [ 1816.751639][T31784] pgrefill 1411 [ 1816.751639][T31784] pgactivate 115 [ 1816.751639][T31784] pgdeactivate 0 [ 1816.751639][T31784] pglazyfree 0 [ 1816.751639][T31784] pglazyfreed 0 [ 1816.751639][T31784] zswpin 0 [ 1816.751639][T31784] zswpout 0 [ 1816.751639][T31784] thp_fault_alloc 0 [ 1817.063910][T31784] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=31783,uid=0 [ 1817.090126][T31784] Memory cgroup out of memory: Killed process 31783 (syz-executor.0) total-vm:54548kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 1817.781434][T31182] Bluetooth: hci0: command 0x041b tx timeout [ 1818.206810][T31531] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1818.398551][T31531] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1818.441538][T31748] chnl_net:caif_netlink_parms(): no params data found [ 1818.485834][T31531] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1818.569493][T31531] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1818.830437][T31748] bridge0: port 1(bridge_slave_0) entered blocking state [ 1818.838936][T31748] bridge0: port 1(bridge_slave_0) entered disabled state [ 1818.859469][T31748] bridge_slave_0: entered allmulticast mode [ 1818.868577][T31748] bridge_slave_0: entered promiscuous mode [ 1818.924954][T31748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1818.941802][T31748] bridge0: port 2(bridge_slave_1) entered disabled state [ 1818.949107][T31748] bridge_slave_1: entered allmulticast mode [ 1818.969399][T31748] bridge_slave_1: entered promiscuous mode [ 1819.119138][T31748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1819.139872][T31531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1819.154038][T31748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1819.199055][T31531] 8021q: adding VLAN 0 to HW filter on device team0 [ 1819.240158][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1819.252859][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1819.284117][T31748] team0: Port device team_slave_0 added [ 1819.292930][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1819.303063][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1819.314064][ T5656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1819.321501][ T5656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1819.329496][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1819.339627][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1819.350443][ T5656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1819.357661][ T5656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1819.367052][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1819.389975][T31748] team0: Port device team_slave_1 added [ 1819.420239][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1819.437538][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1819.448803][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1819.470677][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1819.597244][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1819.639030][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1819.649477][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1819.665366][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1819.692198][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1819.770413][T31748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1819.782167][T31748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1819.841340][T31748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1819.869423][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 1819.869877][T31531] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1819.889428][T31531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1819.935219][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1819.962196][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1819.971703][T31748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1819.978686][T31748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1820.018528][T31748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1820.325436][T31748] hsr_slave_0: entered promiscuous mode [ 1820.347925][T31748] hsr_slave_1: entered promiscuous mode [ 1820.583696][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1820.599250][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1820.612509][T31585] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1820.638295][T31531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1820.655821][T31585] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1820.692677][T31585] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1820.710791][T31585] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1820.760091][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1820.771876][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1820.831394][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1820.840111][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1820.855884][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1820.865799][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1820.887139][T31531] veth0_vlan: entered promiscuous mode [ 1820.894468][T31550] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1820.928857][T31531] veth1_vlan: entered promiscuous mode [ 1820.963081][T31550] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1821.009420][T31550] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1821.089459][T31531] veth0_macvtap: entered promiscuous mode [ 1821.232713][T31550] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1821.262238][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1821.270632][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1821.287728][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1821.298032][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1821.312271][T31582] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1821.448486][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1821.459228][T31582] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1821.491777][T31531] veth1_macvtap: entered promiscuous mode [ 1821.647513][T31582] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1821.685211][T31582] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1821.737978][T31585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1821.910687][T31585] 8021q: adding VLAN 0 to HW filter on device team0 [ 1821.924216][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1821.941528][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 1821.942794][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1821.982353][T31531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1822.018628][T31531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1822.053225][T31531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1822.103924][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1822.116087][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1822.143243][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1822.166261][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1822.178477][ T5656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1822.185730][ T5656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1822.202368][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1822.221520][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1822.242211][ T5656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1822.249374][ T5656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1822.261907][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1822.279726][T31531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1822.311318][T31531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1822.333133][T31531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1822.385926][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1822.394508][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1822.414380][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1822.435193][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1822.445301][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1822.455417][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1822.493945][T31531] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1822.509797][T31531] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1822.519062][T31531] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1822.528433][T31531] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1822.582782][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1822.602620][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1822.618944][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1822.628032][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1822.644946][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1822.679884][T31585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1822.705101][T31585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1822.729876][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1822.742488][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1822.850389][T31550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1822.967712][T31582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1822.997366][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1823.020307][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1823.081798][T31550] 8021q: adding VLAN 0 to HW filter on device team0 [ 1823.090754][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1823.100435][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1823.116549][T31582] 8021q: adding VLAN 0 to HW filter on device team0 [ 1823.163777][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1823.173545][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1823.192233][T26718] bridge0: port 1(bridge_slave_0) entered blocking state [ 1823.199399][T26718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1823.228829][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1823.252606][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1823.262233][T26718] bridge0: port 2(bridge_slave_1) entered blocking state [ 1823.269376][T26718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1823.277967][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1823.287492][T31748] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1823.331029][T31748] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1823.348309][T20447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1823.360539][T31748] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1823.369340][T20447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1823.392455][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1823.409529][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1823.419521][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1823.429330][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1823.438626][T22808] bridge0: port 1(bridge_slave_0) entered blocking state [ 1823.445862][T22808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1823.463278][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1823.478865][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1823.488367][T22808] bridge0: port 2(bridge_slave_1) entered blocking state [ 1823.495596][T22808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1823.539131][T31748] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1823.550820][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1823.560286][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1823.569917][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1823.580577][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1823.591424][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1823.600865][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1823.610591][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1823.618801][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1823.627309][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1823.636663][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1823.683370][T31585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1823.690849][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1823.700478][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1823.721179][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1823.730741][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1823.747665][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1823.756785][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1823.766448][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1823.775720][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1823.785014][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1823.794023][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1823.803009][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1823.827888][T31550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1823.855815][T19199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1823.862019][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1823.866425][T19199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1823.903626][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1823.922893][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1823.941703][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1823.950740][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1823.974345][T31582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1824.022365][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1824.106577][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1824.117240][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1824.142947][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1824.151157][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1824.182830][T31585] veth0_vlan: entered promiscuous mode [ 1824.285741][T31585] veth1_vlan: entered promiscuous mode [ 1824.450401][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1824.468875][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1824.512242][T31748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1824.523695][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1824.542906][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1824.586198][T31585] veth0_macvtap: entered promiscuous mode [ 1824.614237][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1824.653949][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1824.741782][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1824.761671][T31585] veth1_macvtap: entered promiscuous mode [ 1824.849007][T31748] 8021q: adding VLAN 0 to HW filter on device team0 [ 1824.859061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1824.893079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1824.900677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1824.937675][T31550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1824.985797][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1825.004132][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1825.020375][T31927] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1825.022120][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1825.037908][ T5093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1825.056569][T31927] CPU: 1 PID: 31927 Comm: syz-executor.3 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1825.066739][T31927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1825.077026][T31927] Call Trace: [ 1825.080360][T31927] [ 1825.081801][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1825.083317][T31927] dump_stack_lvl+0x136/0x150 [ 1825.096126][T31927] dump_header+0x10a/0xd70 [ 1825.100635][T31927] oom_kill_process+0x25d/0x600 [ 1825.105584][T31927] out_of_memory+0x35c/0x1660 [ 1825.110363][T31927] ? oom_killer_disable+0x2b0/0x2b0 [ 1825.115661][T31927] ? kernfs_notify+0x1ac/0x410 [ 1825.119787][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1825.120472][T31927] mem_cgroup_out_of_memory+0x206/0x270 [ 1825.129753][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 1825.134063][T31927] ? mem_cgroup_margin+0x130/0x130 [ 1825.134128][T31927] memory_max_write+0x2f9/0x3c0 [ 1825.141177][ T5093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1825.146229][T31927] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1825.164452][T31927] ? lock_sync+0x190/0x190 [ 1825.168918][T31927] cgroup_file_write+0x1e2/0x7b0 [ 1825.174327][T31927] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1825.180441][T31927] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1825.185855][T31927] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1825.191385][T31927] kernfs_fop_write_iter+0x3f1/0x600 [ 1825.196803][T31927] vfs_write+0x9ee/0xe10 [ 1825.201099][T31927] ? kernel_write+0x670/0x670 [ 1825.205829][T31927] ? __fget_light+0xcf/0x270 [ 1825.210465][T31927] ksys_write+0x12b/0x250 [ 1825.214834][T31927] ? __ia32_sys_read+0xb0/0xb0 [ 1825.219640][T31927] ? syscall_enter_from_user_mode+0x26/0x80 [ 1825.225581][T31927] do_syscall_64+0x39/0xb0 [ 1825.230028][T31927] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1825.235980][T31927] RIP: 0033:0x7fbfb128c169 [ 1825.240455][T31927] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1825.260205][T31927] RSP: 002b:00007fbfb1fea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1825.268651][T31927] RAX: ffffffffffffffda RBX: 00007fbfb13abf80 RCX: 00007fbfb128c169 [ 1825.276647][T31927] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 1825.284640][T31927] RBP: 00007fbfb12e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1825.292632][T31927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1825.300633][T31927] R13: 00007ffc7cac750f R14: 00007fbfb1fea300 R15: 0000000000022000 [ 1825.308861][T31927] [ 1825.326431][T31585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1825.355932][T31585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1825.368847][T31585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1825.392198][T31585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1825.412691][T31585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1825.468211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1825.477922][T31927] memory: usage 8596kB, limit 0kB, failcnt 639 [ 1825.487097][T31927] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1825.489111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1825.512455][T31927] Memory cgroup stats for [ 1825.512490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1825.512483][T31927] /syz3 [ 1825.518040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1825.543840][T31927] : [ 1825.544080][T31927] anon 118784 [ 1825.544080][T31927] file 8347648 [ 1825.544080][T31927] kernel 245760 [ 1825.544080][T31927] kernel_stack 32768 [ 1825.544080][T31927] pagetables 77824 [ 1825.544080][T31927] sec_pagetables 0 [ 1825.544080][T31927] percpu 64 [ 1825.544080][T31927] sock 0 [ 1825.544080][T31927] vmalloc 0 [ 1825.544080][T31927] shmem 8347648 [ 1825.544080][T31927] zswap 0 [ 1825.544080][T31927] zswapped 0 [ 1825.544080][T31927] file_mapped 274432 [ 1825.544080][T31927] file_dirty 0 [ 1825.544080][T31927] file_writeback 0 [ 1825.544080][T31927] swapcached 0 [ 1825.544080][T31927] anon_thp 0 [ 1825.544080][T31927] file_thp 0 [ 1825.544080][T31927] shmem_thp 0 [ 1825.544080][T31927] inactive_anon 245760 [ 1825.544080][T31927] active_anon 8220672 [ 1825.544080][T31927] inactive_file 0 [ 1825.544080][T31927] active_file 0 [ 1825.544080][T31927] unevictable 0 [ 1825.544080][T31927] slab_reclaimable 36152 [ 1825.544080][T31927] slab_unreclaimable 72408 [ 1825.544080][T31927] slab 108560 [ 1825.544080][T31927] workingset_refault_anon 0 [ 1825.544080][T31927] workingset_refault_file 0 [ 1825.544080][T31927] workingset_activate_anon 0 [ 1825.544080][T31927] workingset_activate_file 0 [ 1825.544080][T31927] workingset_restore_anon 0 [ 1825.544080][T31927] workingset_restore_file 0 [ 1825.544080][T31927] workingset_nodereclaim 0 [ 1825.544080][T31927] pgscan 208 [ 1825.544080][T31927] pgsteal 99 [ 1825.544080][T31927] pgscan_kswapd 0 [ 1825.544080][T31927] pgscan_direct 208 [ 1825.544080][T31927] pgscan_khugepaged 0 [ 1825.544080][T31927] pgsteal_kswapd 0 [ 1825.544080][T31927] pgsteal_direct 99 [ 1825.544080][T31927] pgsteal_khugepaged 0 [ 1825.544080][T31927] pgfault 37774 [ 1825.544080][T31927] pgmajfault 0 [ 1825.544080][T31927] pgrefill 475 [ 1825.544080][T31927] pgactivate 89 [ 1825.544080][T31927] pgdeactivate 0 [ 1825.544080][T31927] pglazyfree 0 [ 1825.544080][T31927] pglazyfreed 0 [ 1825.544080][T31927] zswpin 0 [ 1825.544080][T31927] zswpout 0 [ 1825.544080][T31927] thp_fault_alloc 0 [ 1825.548349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1825.754191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1825.758022][T31927] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=31926,uid=0 [ 1825.779058][T31927] Memory cgroup out of memory: Killed process 31927 (syz-executor.3) total-vm:54680kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1825.779462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1825.812487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1825.823143][T31585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1825.847271][T31585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 03:35:25 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:35:25 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1825.871286][T31585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1825.901879][T31535] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 1825.926359][T31585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1825.941631][T31535] CPU: 1 PID: 31535 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1825.951805][T31535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1825.961914][T31535] Call Trace: [ 1825.963199][T31585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1825.965206][T31535] [ 1825.965221][T31535] dump_stack_lvl+0x136/0x150 [ 1825.980111][T31535] dump_header+0x10a/0xd70 [ 1825.984623][T31535] oom_kill_process+0x25d/0x600 [ 1825.989569][T31535] out_of_memory+0x35c/0x1660 [ 1825.994424][T31535] ? find_held_lock+0x2d/0x110 [ 1825.999252][T31535] ? oom_killer_disable+0x2b0/0x2b0 [ 1826.004541][T31535] ? rcu_read_unlock+0x9/0x60 [ 1826.009376][T31535] ? find_held_lock+0x2d/0x110 [ 1826.014199][T31535] mem_cgroup_out_of_memory+0x206/0x270 [ 1826.019806][T31535] ? mem_cgroup_margin+0x130/0x130 [ 1826.024974][T31535] ? lock_downgrade+0x690/0x690 [ 1826.026936][T31582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1826.029876][T31535] try_charge_memcg+0xf9b/0x13b0 [ 1826.041636][T31535] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1826.047784][T31535] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1826.053568][T31535] ? lock_downgrade+0x690/0x690 [ 1826.058463][T31535] ? lock_downgrade+0x690/0x690 [ 1826.063351][T31535] ? rcu_read_unlock+0x9/0x60 [ 1826.068094][T31535] obj_cgroup_charge+0x2af/0x5e0 [ 1826.073075][T31535] ? copy_process+0x3c0/0x7580 [ 1826.077889][T31535] kmem_cache_alloc_node+0xa8/0x3e0 [ 1826.083141][T31535] copy_process+0x3c0/0x7580 [ 1826.087770][T31535] ? _raw_spin_unlock+0x28/0x40 [ 1826.092660][T31535] ? wp_page_reuse+0x197/0x570 [ 1826.097501][T31535] ? do_wp_page+0x4be/0x3570 [ 1826.102150][T31535] ? pidfd_prepare+0x80/0x80 [ 1826.106779][T31535] ? lock_sync+0x190/0x190 [ 1826.111233][T31535] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1826.116660][T31535] ? do_raw_spin_lock+0x124/0x2b0 [ 1826.121731][T31535] ? spin_bug+0x1c0/0x1c0 [ 1826.126182][T31535] ? lock_downgrade+0x690/0x690 [ 1826.131083][T31535] kernel_clone+0xeb/0x890 [ 1826.135543][T31535] ? create_io_thread+0xe0/0xe0 [ 1826.140435][T31535] ? vm_iomap_memory+0x190/0x190 [ 1826.145429][T31535] ? find_held_lock+0x2d/0x110 [ 1826.150254][T31535] __do_sys_clone+0xba/0x100 [ 1826.154891][T31535] ? kernel_clone+0x890/0x890 [ 1826.159619][T31535] ? syscall_enter_from_user_mode+0x26/0x80 [ 1826.165558][T31535] do_syscall_64+0x39/0xb0 [ 1826.170008][T31535] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1826.175943][T31535] RIP: 0033:0x7f57de889e9b [ 1826.180391][T31535] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1826.200029][T31535] RSP: 002b:00007ffe07cf1140 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1826.208561][T31535] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f57de889e9b [ 1826.216816][T31535] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1826.224813][T31535] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555694f400 [ 1826.232811][T31535] R10: 000055555694f6d0 R11: 0000000000000246 R12: 0000000000000001 [ 1826.240805][T31535] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe07cf1220 [ 1826.248816][T31535] [ 1826.258636][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1826.282409][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1826.319634][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1826.328934][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1826.349766][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1826.392392][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1826.401030][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1826.410333][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1826.419125][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1826.431909][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1826.443279][T31585] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.452290][T31585] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.461114][T31585] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.470358][T31585] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.490107][T31748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1826.601935][T31535] memory: usage 8256kB, limit 0kB, failcnt 944 [ 1826.608184][T31535] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1826.621307][T31535] Memory cgroup stats for /syz0: [ 1826.621569][T31535] anon 40960 [ 1826.621569][T31535] file 8327168 [ 1826.621569][T31535] kernel 81920 [ 1826.621569][T31535] kernel_stack 0 [ 1826.621569][T31535] pagetables 8192 [ 1826.621569][T31535] sec_pagetables 0 [ 1826.621569][T31535] percpu 0 [ 1826.621569][T31535] sock 0 [ 1826.621569][T31535] vmalloc 0 [ 1826.621569][T31535] shmem 8327168 [ 1826.621569][T31535] zswap 0 [ 1826.621569][T31535] zswapped 0 [ 1826.621569][T31535] file_mapped 221184 [ 1826.621569][T31535] file_dirty 0 [ 1826.621569][T31535] file_writeback 0 [ 1826.621569][T31535] swapcached 0 [ 1826.621569][T31535] anon_thp 0 [ 1826.621569][T31535] file_thp 0 [ 1826.621569][T31535] shmem_thp 0 [ 1826.621569][T31535] inactive_anon 8327168 [ 1826.621569][T31535] active_anon 40960 [ 1826.621569][T31535] inactive_file 0 [ 1826.621569][T31535] active_file 0 [ 1826.621569][T31535] unevictable 0 [ 1826.621569][T31535] slab_reclaimable 32080 [ 1826.621569][T31535] slab_unreclaimable 32296 [ 1826.621569][T31535] slab 64376 [ 1826.621569][T31535] workingset_refault_anon 0 [ 1826.621569][T31535] workingset_refault_file 0 [ 1826.621569][T31535] workingset_activate_anon 0 [ 1826.621569][T31535] workingset_activate_file 0 [ 1826.621569][T31535] workingset_restore_anon 0 [ 1826.621569][T31535] workingset_restore_file 0 [ 1826.621569][T31535] workingset_nodereclaim 0 [ 1826.621569][T31535] pgscan 193 [ 1826.621569][T31535] pgsteal 68 [ 1826.621569][T31535] pgscan_kswapd 0 [ 1826.621569][T31535] pgscan_direct 193 [ 1826.621569][T31535] pgscan_khugepaged 0 [ 1826.621569][T31535] pgsteal_kswapd 0 [ 1826.621569][T31535] pgsteal_direct 68 [ 1826.621569][T31535] pgsteal_khugepaged 0 [ 1826.621569][T31535] pgfault 37260 [ 1826.621569][T31535] pgmajfault 0 [ 1826.621569][T31535] pgrefill 1411 [ 1826.621569][T31535] pgactivate 115 [ 1826.621569][T31535] pgdeactivate 0 [ 1826.621569][T31535] pglazyfree 0 [ 1826.621569][T31535] pglazyfreed 0 [ 1826.621569][T31535] zswpin 0 [ 1826.621569][T31535] zswpout 0 [ 1826.621569][T31535] thp_fault_alloc 0 [ 1826.827695][T31535] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=31535,uid=0 [ 1826.872146][T31535] Memory cgroup out of memory: Killed process 31535 (syz-executor.0) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1826.992462][T31531] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1827.008655][T31531] CPU: 0 PID: 31531 Comm: syz-executor.3 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1827.018814][T31531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1827.028921][T31531] Call Trace: [ 1827.032236][T31531] [ 1827.035214][T31531] dump_stack_lvl+0x136/0x150 [ 1827.039957][T31531] dump_header+0x10a/0xd70 [ 1827.044448][T31531] oom_kill_process+0x25d/0x600 [ 1827.049346][T31531] out_of_memory+0x35c/0x1660 [ 1827.054082][T31531] ? oom_killer_disable+0x2b0/0x2b0 [ 1827.059334][T31531] ? rcu_read_unlock+0x9/0x60 [ 1827.064061][T31531] ? find_held_lock+0x2d/0x110 [ 1827.068861][T31531] mem_cgroup_out_of_memory+0x206/0x270 [ 1827.074440][T31531] ? mem_cgroup_margin+0x130/0x130 [ 1827.079578][T31531] ? lock_downgrade+0x690/0x690 [ 1827.084482][T31531] try_charge_memcg+0xf9b/0x13b0 [ 1827.089466][T31531] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1827.095572][T31531] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1827.101330][T31531] ? lock_downgrade+0x690/0x690 [ 1827.106222][T31531] ? lock_downgrade+0x690/0x690 [ 1827.111150][T31531] __memcg_kmem_charge_page+0x16e/0x3c0 [ 1827.116745][T31531] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 1827.122952][T31531] copy_process+0x4f9/0x7580 [ 1827.127583][T31531] ? _raw_spin_unlock+0x28/0x40 [ 1827.132473][T31531] ? wp_page_reuse+0x197/0x570 [ 1827.137281][T31531] ? do_wp_page+0x4be/0x3570 [ 1827.141923][T31531] ? pidfd_prepare+0x80/0x80 [ 1827.146555][T31531] ? lock_sync+0x190/0x190 [ 1827.151007][T31531] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1827.156424][T31531] ? do_raw_spin_lock+0x124/0x2b0 [ 1827.161485][T31531] ? spin_bug+0x1c0/0x1c0 [ 1827.165848][T31531] ? lock_downgrade+0x690/0x690 [ 1827.170742][T31531] kernel_clone+0xeb/0x890 [ 1827.175200][T31531] ? create_io_thread+0xe0/0xe0 [ 1827.180095][T31531] ? vm_iomap_memory+0x190/0x190 [ 1827.185078][T31531] ? find_held_lock+0x2d/0x110 [ 1827.189916][T31531] __do_sys_clone+0xba/0x100 [ 1827.194552][T31531] ? kernel_clone+0x890/0x890 [ 1827.199284][T31531] ? syscall_enter_from_user_mode+0x26/0x80 [ 1827.205397][T31531] do_syscall_64+0x39/0xb0 [ 1827.210016][T31531] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1827.215967][T31531] RIP: 0033:0x7fbfb1289e9b [ 1827.220426][T31531] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1827.240160][T31531] RSP: 002b:00007ffc7cac7750 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1827.248604][T31531] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbfb1289e9b [ 1827.256606][T31531] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1827.264602][T31531] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555742400 [ 1827.272694][T31531] R10: 00005555557426d0 R11: 0000000000000246 R12: 0000000000000001 [ 1827.280778][T31531] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc7cac7830 [ 1827.288795][T31531] [ 1827.301940][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1827.311127][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1827.343822][T31531] memory: usage 8344kB, limit 0kB, failcnt 662 [ 1827.350061][T31531] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1827.371347][T31531] Memory cgroup stats for /syz3: [ 1827.371606][T31531] anon 45056 [ 1827.371606][T31531] file 8347648 [ 1827.371606][T31531] kernel 114688 [ 1827.371606][T31531] kernel_stack 0 [ 1827.371606][T31531] pagetables 8192 [ 1827.371606][T31531] sec_pagetables 0 [ 1827.371606][T31531] percpu 64 [ 1827.371606][T31531] sock 0 [ 1827.371606][T31531] vmalloc 0 [ 1827.371606][T31531] shmem 8347648 [ 1827.371606][T31531] zswap 0 [ 1827.371606][T31531] zswapped 0 [ 1827.371606][T31531] file_mapped 245760 [ 1827.371606][T31531] file_dirty 0 [ 1827.371606][T31531] file_writeback 0 [ 1827.371606][T31531] swapcached 0 [ 1827.371606][T31531] anon_thp 0 [ 1827.371606][T31531] file_thp 0 [ 1827.371606][T31531] shmem_thp 0 [ 1827.371606][T31531] inactive_anon 245760 [ 1827.371606][T31531] active_anon 8146944 [ 1827.371606][T31531] inactive_file 0 [ 1827.371606][T31531] active_file 0 [ 1827.371606][T31531] unevictable 0 [ 1827.371606][T31531] slab_reclaimable 29680 [ 1827.371606][T31531] slab_unreclaimable 55848 [ 1827.371606][T31531] slab 85528 [ 1827.371606][T31531] workingset_refault_anon 0 [ 1827.371606][T31531] workingset_refault_file 0 [ 1827.371606][T31531] workingset_activate_anon 0 [ 1827.371606][T31531] workingset_activate_file 0 [ 1827.371606][T31531] workingset_restore_anon 0 [ 1827.371606][T31531] workingset_restore_file 0 [ 1827.371606][T31531] workingset_nodereclaim 0 [ 1827.371606][T31531] pgscan 208 [ 1827.371606][T31531] pgsteal 99 [ 1827.371606][T31531] pgscan_kswapd 0 [ 1827.371606][T31531] pgscan_direct 208 [ 1827.371606][T31531] pgscan_khugepaged 0 [ 1827.371606][T31531] pgsteal_kswapd 0 [ 1827.371606][T31531] pgsteal_direct 99 [ 1827.371606][T31531] pgsteal_khugepaged 0 [ 1827.371606][T31531] pgfault 37786 [ 1827.371606][T31531] pgmajfault 0 [ 1827.371606][T31531] pgrefill 475 [ 1827.371606][T31531] pgactivate 89 [ 1827.371606][T31531] pgdeactivate 0 [ 1827.371606][T31531] pglazyfree 0 [ 1827.371606][T31531] pglazyfreed 0 [ 1827.371606][T31531] zswpin 0 [ 1827.371606][T31531] zswpout 0 [ 1827.371606][T31531] thp_fault_alloc 0 [ 1827.395337][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1827.604775][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1827.627620][T31531] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=31531,uid=0 [ 1827.632987][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1827.651117][T31531] Memory cgroup out of memory: Killed process 31531 (syz-executor.3) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1827.679238][T31550] veth0_vlan: entered promiscuous mode [ 1827.723794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1827.731053][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1827.748859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1827.757449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1827.767280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1827.901952][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 03:35:27 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1827.991071][T31582] veth0_vlan: entered promiscuous mode 03:35:27 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1828.140186][T20447] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.219675][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1828.242424][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1828.253352][T31550] veth1_vlan: entered promiscuous mode [ 1828.268896][T31582] veth1_vlan: entered promiscuous mode [ 1828.285138][T19199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1828.301348][T19199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1828.353112][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1828.377604][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1828.399868][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1828.432242][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1828.440426][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1828.473281][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1828.510559][T20447] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.561106][T31748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1828.620458][T31550] veth0_macvtap: entered promiscuous mode [ 1828.643593][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1828.653020][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1828.682185][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1828.702662][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1828.822535][T20447] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.883136][T31550] veth1_macvtap: entered promiscuous mode [ 1829.102339][T20447] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1829.146187][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1829.162328][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1829.188051][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1829.316883][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1829.339309][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1829.402511][T31550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1829.434884][T31550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1829.469732][T31987] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1829.490767][T31550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1829.491453][T31987] CPU: 0 PID: 31987 Comm: syz-executor.2 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1829.511414][T31987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1829.521497][T31987] Call Trace: [ 1829.524813][T31987] [ 1829.527774][T31987] dump_stack_lvl+0x136/0x150 [ 1829.532500][T31987] dump_header+0x10a/0xd70 [ 1829.536977][T31987] oom_kill_process+0x25d/0x600 [ 1829.541906][T31987] out_of_memory+0x35c/0x1660 [ 1829.546646][T31987] ? oom_killer_disable+0x2b0/0x2b0 [ 1829.552085][T31987] ? kernfs_notify+0x1ac/0x410 [ 1829.556902][T31987] ? find_held_lock+0x2d/0x110 [ 1829.561716][T31987] mem_cgroup_out_of_memory+0x206/0x270 [ 1829.567317][T31987] ? mem_cgroup_margin+0x130/0x130 [ 1829.572479][T31987] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1829.578342][T31987] memory_max_write+0x2f9/0x3c0 [ 1829.583252][T31987] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1829.589365][T31987] ? lock_sync+0x190/0x190 [ 1829.593826][T31987] cgroup_file_write+0x1e2/0x7b0 [ 1829.598798][T31987] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1829.604908][T31987] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1829.610311][T31987] ? __virt_addr_valid+0x61/0x2e0 [ 1829.615387][T31987] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1829.620817][T31987] kernfs_fop_write_iter+0x3f1/0x600 [ 1829.626145][T31987] vfs_write+0x9ee/0xe10 [ 1829.630631][T31987] ? kernel_write+0x670/0x670 [ 1829.635352][T31987] ? __fget_files+0x26a/0x480 [ 1829.640152][T31987] ksys_write+0x12b/0x250 [ 1829.644529][T31987] ? __ia32_sys_read+0xb0/0xb0 [ 1829.649338][T31987] ? syscall_enter_from_user_mode+0x26/0x80 [ 1829.655277][T31987] do_syscall_64+0x39/0xb0 [ 1829.659814][T31987] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1829.665753][T31987] RIP: 0033:0x7fb93e68c169 [ 1829.670206][T31987] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1829.689938][T31987] RSP: 002b:00007fb93f482168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1829.698394][T31987] RAX: ffffffffffffffda RBX: 00007fb93e7abf80 RCX: 00007fb93e68c169 [ 1829.706402][T31987] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 1829.714423][T31987] RBP: 00007fb93e6e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1829.722432][T31987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1829.730439][T31987] R13: 00007ffe55394baf R14: 00007fb93f482300 R15: 0000000000022000 [ 1829.738635][T31987] [ 1829.768339][T31550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1829.795355][T31987] memory: usage 628kB, limit 0kB, failcnt 1476 [ 1829.801282][T31550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1829.809085][T31987] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1829.829789][T31987] Memory cgroup stats for /syz2: [ 1829.841274][T31550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1829.851943][T31987] anon 114688 [ 1829.851943][T31987] file 204800 [ 1829.851943][T31987] kernel 307200 [ 1829.851943][T31987] kernel_stack 98304 [ 1829.851943][T31987] pagetables 81920 [ 1829.851943][T31987] sec_pagetables 0 [ 1829.851943][T31987] percpu 64 [ 1829.851943][T31987] sock 0 [ 1829.851943][T31987] vmalloc 0 [ 1829.851943][T31987] shmem 204800 [ 1829.851943][T31987] zswap 0 [ 1829.851943][T31987] zswapped 0 [ 1829.851943][T31987] file_mapped 204800 [ 1829.851943][T31987] file_dirty 0 [ 1829.851943][T31987] file_writeback 0 [ 1829.851943][T31987] swapcached 0 [ 1829.851943][T31987] anon_thp 0 [ 1829.851943][T31987] file_thp 0 [ 1829.851943][T31987] shmem_thp 0 [ 1829.851943][T31987] inactive_anon 163840 [ 1829.851943][T31987] active_anon 155648 [ 1829.851943][T31987] inactive_file 0 [ 1829.851943][T31987] active_file 0 [ 1829.851943][T31987] unevictable 0 [ 1829.851943][T31987] slab_reclaimable 19592 [ 1829.851943][T31987] slab_unreclaimable 82952 [ 1829.851943][T31987] slab 102544 [ 1829.851943][T31987] workingset_refault_anon 0 [ 1829.851943][T31987] workingset_refault_file 0 [ 1829.851943][T31987] workingset_activate_anon 0 [ 1829.851943][T31987] workingset_activate_file 0 [ 1829.851943][T31987] workingset_restore_anon 0 [ 1829.851943][T31987] workingset_restore_file 0 [ 1829.851943][T31987] workingset_nodereclaim 2 [ 1829.851943][T31987] pgscan 398 [ 1829.851943][T31987] pgsteal 65 [ 1829.851943][T31987] pgscan_kswapd 0 [ 1829.851943][T31987] pgscan_direct 398 [ 1829.851943][T31987] pgscan_khugepaged 0 [ 1829.851943][T31987] pgsteal_kswapd 0 [ 1829.851943][T31987] pgsteal_direct 65 [ 1829.851943][T31987] pgsteal_khugepaged 0 [ 1829.851943][T31987] pgfault 34342 [ 1829.851943][T31987] pgmajfault 0 [ 1829.851943][T31987] pgrefill 3648 [ 1829.851943][T31987] pgactivate 333 [ 1829.851943][T31987] pgdeactivate 0 [ 1829.851943][T31987] pglazyfree 0 [ 1829.851943][T31987] pglazyfreed 0 [ 1829.851943][T31987] zswpin 0 [ 1829.851943][T31987] zswpout 0 [ 1829.851943][T31987] thp_fault_alloc 0 [ 1829.883624][T31550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1830.145027][T31582] veth0_macvtap: entered promiscuous mode [ 1830.154688][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1830.164519][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1830.173742][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1830.187240][T31550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1830.198165][T31550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.208460][T31987] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=31986,uid=0 [ 1830.224510][T31550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1830.241346][T31550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.258818][T31987] Memory cgroup out of memory: Killed process 31986 (syz-executor.2) total-vm:54680kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 1830.276733][T31550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1830.287319][T31550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.299235][T31550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1830.310486][T31582] veth1_macvtap: entered promiscuous mode [ 1830.323898][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1830.334559][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1830.354627][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1830.401683][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1830.449027][T31748] veth0_vlan: entered promiscuous mode [ 1830.457625][T31550] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1830.470158][T31550] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1830.479505][T31550] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1830.489309][T31550] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1830.500708][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1830.509830][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1830.547683][T31748] veth1_vlan: entered promiscuous mode [ 1830.565731][T31582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1830.577792][T31582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.589067][T31582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1830.601000][T31582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.612984][T31582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1830.623811][T31582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.634144][T31582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1830.647596][T31582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.660093][T31582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1830.731378][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1830.741018][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1830.755733][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1830.764872][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1830.779066][T31582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1830.793033][T31582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.803594][T31582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1830.814618][T31582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.863009][T31582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1830.881302][T31582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.891197][T31582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1830.959686][T31582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.984377][T31582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1831.026764][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1831.036441][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1831.056918][T31582] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.120318][T31582] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.131625][T31582] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.140480][T31582] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.169801][T31748] veth0_macvtap: entered promiscuous mode [ 1831.192981][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1831.209044][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1831.273620][T31748] veth1_macvtap: entered promiscuous mode [ 1831.306871][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1831.331198][T31748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1831.354028][T31748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.364900][T31748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1831.375942][T31748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.387855][T31748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1831.399134][T31748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.409675][T31748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1831.420587][T31748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.432425][T31748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1831.443162][T31748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.454920][T31748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1831.481621][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1831.498123][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1831.562346][T19199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1831.570529][T19199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1831.576009][T31748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1831.599768][T31748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.610083][T31748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1831.621151][T31748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.632062][T31748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1831.643068][T31748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.653251][T31748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1831.664075][T31748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.674361][T31748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1831.685663][T31748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.699880][T31748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1831.711180][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1831.720235][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1831.728949][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1831.759282][T31748] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.768929][T31748] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.777897][T31748] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.787790][T31748] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.842099][T27855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1831.850441][T27855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1831.905167][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1831.939436][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1831.952769][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1832.031454][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1832.150024][ T5909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1832.169524][T19199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1832.191402][T19199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1832.223988][ T5909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1832.246583][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1832.278550][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1832.325081][T19199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1832.401719][T19199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1832.487709][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1832.852223][T20447] hsr_slave_0: left promiscuous mode [ 1832.893313][T20447] hsr_slave_1: left promiscuous mode 03:35:32 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x0, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:35:32 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1832.944470][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1832.987482][T20447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1833.073490][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1833.116311][T20447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1833.118549][T31550] syz-executor.5 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 1833.193113][T20447] bridge_slave_1: left allmulticast mode [ 1833.243269][T20447] bridge_slave_1: left promiscuous mode [ 1833.271523][T31550] CPU: 1 PID: 31550 Comm: syz-executor.5 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1833.281689][T31550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1833.291797][T31550] Call Trace: [ 1833.295138][T31550] [ 1833.298121][T31550] dump_stack_lvl+0x136/0x150 [ 1833.302859][T31550] dump_header+0x10a/0xd70 [ 1833.307365][T31550] oom_kill_process+0x25d/0x600 [ 1833.310794][T20447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1833.312317][T31550] out_of_memory+0x35c/0x1660 [ 1833.312383][T31550] ? find_held_lock+0x2d/0x110 [ 1833.328953][T31550] ? oom_killer_disable+0x2b0/0x2b0 [ 1833.334241][T31550] ? rcu_read_unlock+0x9/0x60 [ 1833.338999][T31550] ? find_held_lock+0x2d/0x110 [ 1833.343843][T31550] mem_cgroup_out_of_memory+0x206/0x270 [ 1833.349453][T31550] ? mem_cgroup_margin+0x130/0x130 [ 1833.354628][T31550] ? lock_downgrade+0x690/0x690 [ 1833.359576][T31550] try_charge_memcg+0xf9b/0x13b0 [ 1833.364640][T31550] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1833.370694][T31550] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1833.376476][T31550] ? lock_downgrade+0x690/0x690 [ 1833.381400][T31550] ? lock_downgrade+0x690/0x690 [ 1833.386318][T31550] obj_cgroup_charge+0x2af/0x5e0 [ 1833.391309][T31550] ? ext4_alloc_inode+0x28/0x650 [ 1833.396287][T31550] kmem_cache_alloc_lru+0x142/0x600 [ 1833.401536][T31550] ? ext4_free_in_core_inode+0xb0/0xb0 [ 1833.407042][T31550] ext4_alloc_inode+0x28/0x650 [ 1833.411856][T31550] ? ext4_free_in_core_inode+0xb0/0xb0 [ 1833.417356][T31550] alloc_inode+0x61/0x230 [ 1833.421714][T31550] iget_locked+0x1bb/0x700 [ 1833.426167][T31550] __ext4_iget+0x3b2/0x4430 [ 1833.430744][T31550] ? ext4_get_projid+0x190/0x190 [ 1833.435713][T31550] ? ext4_fname_prepare_lookup+0x163/0x200 [ 1833.441568][T31550] ? ext4_fname_setup_filename+0x110/0x110 [ 1833.447432][T31550] ? rcu_is_watching+0x12/0xb0 [ 1833.452243][T31550] ext4_lookup+0x387/0x700 [ 1833.456705][T31550] ? ext4_resetent+0x2e0/0x2e0 [ 1833.461535][T31550] __lookup_slow+0x24c/0x460 [ 1833.466168][T31550] ? __lookup_hash+0x180/0x180 [ 1833.471072][T31550] ? lock_sync+0x190/0x190 [ 1833.475521][T31550] ? lockref_get_not_dead+0x6a/0x80 [ 1833.480781][T31550] walk_component+0x33f/0x5a0 [ 1833.485485][T31550] path_lookupat+0x1ba/0x840 [ 1833.490134][T31550] filename_lookup+0x1d2/0x590 [ 1833.494927][T31550] ? may_linkat+0x3b0/0x3b0 [ 1833.499456][T31550] ? __might_fault+0xe2/0x190 [ 1833.504180][T31550] ? __phys_addr_symbol+0x30/0x70 [ 1833.509246][T31550] ? __check_object_size+0x323/0x730 [ 1833.514582][T31550] ? strncpy_from_user+0x28b/0x3d0 [ 1833.519748][T31550] ? getname_flags.part.0+0x1dd/0x4f0 [ 1833.525158][T31550] user_path_at_empty+0x46/0x60 [ 1833.530058][T31550] __x64_sys_umount+0xfc/0x190 [ 1833.534871][T31550] ? path_umount+0x10b0/0x10b0 [ 1833.539679][T31550] ? syscall_enter_from_user_mode+0x26/0x80 [ 1833.545618][T31550] do_syscall_64+0x39/0xb0 [ 1833.550243][T31550] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1833.556181][T31550] RIP: 0033:0x7f09cc68d5d7 [ 1833.560623][T31550] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1833.580257][T31550] RSP: 002b:00007ffc78bd0b38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1833.588700][T31550] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f09cc68d5d7 [ 1833.596709][T31550] RDX: 00007ffc78bd0c0c RSI: 000000000000000a RDI: 00007ffc78bd0c00 [ 1833.604706][T31550] RBP: 00007ffc78bd0c00 R08: 00000000ffffffff R09: 00007ffc78bd09d0 [ 1833.612707][T31550] R10: 000055555557a873 R11: 0000000000000246 R12: 00007f09cc6e6cdc [ 1833.620720][T31550] R13: 00007ffc78bd1cc0 R14: 000055555557a810 R15: 00007ffc78bd1d00 [ 1833.628733][T31550] 03:35:33 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1833.664787][T20447] bridge_slave_0: left allmulticast mode [ 1833.670535][T20447] bridge_slave_0: left promiscuous mode [ 1833.699209][T20447] bridge0: port 1(bridge_slave_0) entered disabled state 03:35:33 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:35:33 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1833.755540][T20447] veth1_macvtap: left promiscuous mode [ 1833.761157][T20447] veth0_macvtap: left promiscuous mode [ 1833.791617][T20447] veth1_vlan: left promiscuous mode [ 1833.797010][T20447] veth0_vlan: left promiscuous mode [ 1833.874774][T31550] memory: usage 328kB, limit 0kB, failcnt 2270 [ 1833.881020][T31550] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1833.909863][T31550] Memory cgroup stats for /syz5: [ 1833.910146][T31550] anon 40960 [ 1833.910146][T31550] file 229376 [ 1833.910146][T31550] kernel 65536 [ 1833.910146][T31550] kernel_stack 0 [ 1833.910146][T31550] pagetables 8192 [ 1833.910146][T31550] sec_pagetables 0 [ 1833.910146][T31550] percpu 0 [ 1833.910146][T31550] sock 0 [ 1833.910146][T31550] vmalloc 0 [ 1833.910146][T31550] shmem 229376 [ 1833.910146][T31550] zswap 0 [ 1833.910146][T31550] zswapped 0 [ 1833.910146][T31550] file_mapped 221184 [ 1833.910146][T31550] file_dirty 0 [ 1833.910146][T31550] file_writeback 0 [ 1833.910146][T31550] swapcached 0 [ 1833.910146][T31550] anon_thp 0 [ 1833.910146][T31550] file_thp 0 [ 1833.910146][T31550] shmem_thp 0 [ 1833.910146][T31550] inactive_anon 0 [ 1833.910146][T31550] active_anon 270336 [ 1833.910146][T31550] inactive_file 0 [ 1833.910146][T31550] active_file 0 [ 1833.910146][T31550] unevictable 0 [ 1833.910146][T31550] slab_reclaimable 12512 [ 1833.910146][T31550] slab_unreclaimable 32944 [ 1833.910146][T31550] slab 45456 [ 1833.910146][T31550] workingset_refault_anon 0 [ 1833.910146][T31550] workingset_refault_file 0 [ 1833.910146][T31550] workingset_activate_anon 0 [ 1833.910146][T31550] workingset_activate_file 0 [ 1833.910146][T31550] workingset_restore_anon 0 [ 1833.910146][T31550] workingset_restore_file 0 [ 1833.910146][T31550] workingset_nodereclaim 0 [ 1833.910146][T31550] pgscan 117 [ 1833.910146][T31550] pgsteal 13 [ 1833.910146][T31550] pgscan_kswapd 0 [ 1833.910146][T31550] pgscan_direct 117 [ 1833.910146][T31550] pgscan_khugepaged 0 [ 1833.910146][T31550] pgsteal_kswapd 0 [ 1833.910146][T31550] pgsteal_direct 13 [ 1833.910146][T31550] pgsteal_khugepaged 0 [ 1833.910146][T31550] pgfault 9590 [ 1833.910146][T31550] pgmajfault 0 [ 1833.910146][T31550] pgrefill 301 [ 1833.910146][T31550] pgactivate 104 [ 1833.910146][T31550] pgdeactivate 0 [ 1833.910146][T31550] pglazyfree 0 [ 1833.910146][T31550] pglazyfreed 0 [ 1833.910146][T31550] zswpin 0 [ 1833.910146][T31550] zswpout 0 [ 1833.910146][T31550] thp_fault_alloc 0 03:35:33 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1834.609344][T31550] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=31550,uid=0 [ 1834.658436][T31550] Memory cgroup out of memory: Killed process 31550 (syz-executor.5) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1834.690287][T31582] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1834.738448][T31582] CPU: 1 PID: 31582 Comm: syz-executor.4 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1834.748703][T31582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1834.758818][T31582] Call Trace: [ 1834.762138][T31582] [ 1834.765119][T31582] dump_stack_lvl+0x136/0x150 [ 1834.769861][T31582] dump_header+0x10a/0xd70 [ 1834.774370][T31582] oom_kill_process+0x25d/0x600 [ 1834.779397][T31582] out_of_memory+0x35c/0x1660 [ 1834.784176][T31582] ? oom_killer_disable+0x2b0/0x2b0 [ 1834.789454][T31582] ? rcu_read_unlock+0x9/0x60 [ 1834.794215][T31582] ? find_held_lock+0x2d/0x110 [ 1834.799021][T31582] mem_cgroup_out_of_memory+0x206/0x270 [ 1834.804603][T31582] ? mem_cgroup_margin+0x130/0x130 [ 1834.809746][T31582] ? lock_downgrade+0x690/0x690 [ 1834.814650][T31582] try_charge_memcg+0xf9b/0x13b0 [ 1834.819634][T31582] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1834.825654][T31582] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1834.831407][T31582] ? lock_downgrade+0x690/0x690 [ 1834.836303][T31582] ? lock_downgrade+0x690/0x690 [ 1834.841210][T31582] __memcg_kmem_charge_page+0x16e/0x3c0 [ 1834.846807][T31582] __alloc_pages+0x1f3/0x4a0 [ 1834.851440][T31582] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1834.858356][T31582] ? copy_page_range+0x1bc0/0x3930 [ 1834.863520][T31582] alloc_pages+0x1aa/0x270 [ 1834.867980][T31582] get_zeroed_page+0x14/0x40 [ 1834.872606][T31582] __pud_alloc+0x3b/0x180 [ 1834.876986][T31582] copy_page_range+0x1d18/0x3930 [ 1834.881995][T31582] ? mas_wr_modify+0x999/0x16d0 [ 1834.886903][T31582] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 1834.892857][T31582] ? mas_store+0x275/0x3a0 [ 1834.897320][T31582] ? handle_mm_fault+0x9c0/0x9c0 [ 1834.902299][T31582] ? down_write+0x14f/0x200 [ 1834.906865][T31582] dup_mmap+0xcfd/0x1480 [ 1834.911159][T31582] ? replace_mm_exe_file+0x4b0/0x4b0 [ 1834.916487][T31582] ? lock_downgrade+0x690/0x690 [ 1834.921384][T31582] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1834.927266][T31582] ? __raw_spin_lock_init+0x3a/0x110 [ 1834.932593][T31582] ? mm_init+0x9e6/0xd50 [ 1834.936880][T31582] copy_process+0x4611/0x7580 [ 1834.941602][T31582] ? _raw_spin_unlock+0x28/0x40 [ 1834.946496][T31582] ? wp_page_reuse+0x197/0x570 [ 1834.951315][T31582] ? pidfd_prepare+0x80/0x80 [ 1834.955940][T31582] ? lock_sync+0x190/0x190 [ 1834.960399][T31582] ? do_raw_spin_lock+0x124/0x2b0 [ 1834.965475][T31582] ? spin_bug+0x1c0/0x1c0 [ 1834.969855][T31582] ? lock_downgrade+0x690/0x690 [ 1834.974772][T31582] kernel_clone+0xeb/0x890 [ 1834.979320][T31582] ? create_io_thread+0xe0/0xe0 [ 1834.984215][T31582] ? count_memcg_event_mm.part.0+0x2f3/0x330 [ 1834.990241][T31582] ? vm_iomap_memory+0x190/0x190 [ 1834.995268][T31582] ? find_held_lock+0x2d/0x110 [ 1835.000161][T31582] __do_sys_clone+0xba/0x100 [ 1835.004790][T31582] ? kernel_clone+0x890/0x890 [ 1835.009522][T31582] ? syscall_enter_from_user_mode+0x26/0x80 [ 1835.015467][T31582] do_syscall_64+0x39/0xb0 [ 1835.019914][T31582] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1835.025855][T31582] RIP: 0033:0x7fd60d689e9b [ 1835.030314][T31582] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1835.049954][T31582] RSP: 002b:00007fffca4a1230 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1835.058407][T31582] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd60d689e9b [ 1835.066410][T31582] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1835.074411][T31582] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555fe2400 [ 1835.082415][T31582] R10: 0000555555fe26d0 R11: 0000000000000246 R12: 0000000000000001 [ 1835.090414][T31582] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffca4a1310 [ 1835.098451][T31582] [ 1835.136213][T31582] memory: usage 8356kB, limit 0kB, failcnt 1004 [ 1835.151268][T31582] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1835.158209][T31582] Memory cgroup stats for /syz4: [ 1835.158450][T31582] anon 40960 [ 1835.158450][T31582] file 8351744 [ 1835.158450][T31582] kernel 163840 [ 1835.158450][T31582] kernel_stack 32768 [ 1835.158450][T31582] pagetables 16384 [ 1835.158450][T31582] sec_pagetables 0 [ 1835.158450][T31582] percpu 64 [ 1835.158450][T31582] sock 0 [ 1835.158450][T31582] vmalloc 0 [ 1835.158450][T31582] shmem 8351744 [ 1835.158450][T31582] zswap 0 [ 1835.158450][T31582] zswapped 0 [ 1835.158450][T31582] file_mapped 192512 [ 1835.158450][T31582] file_dirty 0 [ 1835.158450][T31582] file_writeback 0 [ 1835.158450][T31582] swapcached 0 [ 1835.158450][T31582] anon_thp 0 [ 1835.158450][T31582] file_thp 0 [ 1835.158450][T31582] shmem_thp 0 [ 1835.158450][T31582] inactive_anon 16384 [ 1835.158450][T31582] active_anon 8376320 [ 1835.158450][T31582] inactive_file 0 [ 1835.158450][T31582] active_file 0 [ 1835.158450][T31582] unevictable 0 [ 1835.158450][T31582] slab_reclaimable 42256 [ 1835.158450][T31582] slab_unreclaimable 55104 [ 1835.158450][T31582] slab 97360 [ 1835.158450][T31582] workingset_refault_anon 0 [ 1835.158450][T31582] workingset_refault_file 0 [ 1835.158450][T31582] workingset_activate_anon 0 [ 1835.158450][T31582] workingset_activate_file 0 [ 1835.158450][T31582] workingset_restore_anon 0 [ 1835.158450][T31582] workingset_restore_file 0 [ 1835.158450][T31582] workingset_nodereclaim 0 [ 1835.158450][T31582] pgscan 464 [ 1835.158450][T31582] pgsteal 89 [ 1835.158450][T31582] pgscan_kswapd 0 [ 1835.158450][T31582] pgscan_direct 464 [ 1835.158450][T31582] pgscan_khugepaged 0 [ 1835.158450][T31582] pgsteal_kswapd 0 [ 1835.158450][T31582] pgsteal_direct 89 [ 1835.158450][T31582] pgsteal_khugepaged 0 [ 1835.158450][T31582] pgfault 52417 [ 1835.158450][T31582] pgmajfault 0 [ 1835.158450][T31582] pgrefill 2546 [ 1835.158450][T31582] pgactivate 179 [ 1835.158450][T31582] pgdeactivate 0 [ 1835.158450][T31582] pglazyfree 0 [ 1835.158450][T31582] pglazyfreed 0 [ 1835.158450][T31582] zswpin 0 [ 1835.158450][T31582] zswpout 0 [ 1835.158450][T31582] thp_fault_alloc 0 [ 1835.349906][T31582] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=31582,uid=0 [ 1835.391269][T31582] Memory cgroup out of memory: Killed process 31582 (syz-executor.4) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1835.429964][T31585] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 1835.448317][T31585] CPU: 0 PID: 31585 Comm: syz-executor.2 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1835.458460][T31585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1835.468641][T31585] Call Trace: [ 1835.471940][T31585] [ 1835.474893][T31585] dump_stack_lvl+0x136/0x150 [ 1835.479601][T31585] dump_header+0x10a/0xd70 [ 1835.484164][T31585] oom_kill_process+0x25d/0x600 [ 1835.489150][T31585] out_of_memory+0x35c/0x1660 [ 1835.493879][T31585] ? oom_killer_disable+0x2b0/0x2b0 [ 1835.499131][T31585] ? rcu_read_unlock+0x9/0x60 [ 1835.503852][T31585] ? find_held_lock+0x2d/0x110 [ 1835.508648][T31585] mem_cgroup_out_of_memory+0x206/0x270 [ 1835.514226][T31585] ? mem_cgroup_margin+0x130/0x130 [ 1835.519364][T31585] ? lock_downgrade+0x690/0x690 [ 1835.524262][T31585] try_charge_memcg+0xf9b/0x13b0 [ 1835.529242][T31585] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1835.535281][T31585] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1835.541037][T31585] ? lock_downgrade+0x690/0x690 [ 1835.546012][T31585] ? lock_downgrade+0x690/0x690 [ 1835.550897][T31585] ? rcu_read_unlock+0x9/0x60 [ 1835.555635][T31585] obj_cgroup_charge+0x2af/0x5e0 [ 1835.560612][T31585] ? copy_process+0x3c0/0x7580 [ 1835.565499][T31585] kmem_cache_alloc_node+0xa8/0x3e0 [ 1835.570825][T31585] copy_process+0x3c0/0x7580 [ 1835.575450][T31585] ? _raw_spin_unlock+0x28/0x40 [ 1835.580443][T31585] ? wp_page_reuse+0x197/0x570 [ 1835.585265][T31585] ? do_wp_page+0x4be/0x3570 [ 1835.589902][T31585] ? pidfd_prepare+0x80/0x80 [ 1835.594538][T31585] ? lock_sync+0x190/0x190 [ 1835.598991][T31585] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1835.604409][T31585] ? do_raw_spin_lock+0x124/0x2b0 [ 1835.609470][T31585] ? spin_bug+0x1c0/0x1c0 [ 1835.613839][T31585] ? lock_downgrade+0x690/0x690 [ 1835.618748][T31585] kernel_clone+0xeb/0x890 [ 1835.623206][T31585] ? create_io_thread+0xe0/0xe0 [ 1835.628094][T31585] ? count_memcg_event_mm.part.0+0x2f3/0x330 [ 1835.634213][T31585] ? vm_iomap_memory+0x190/0x190 [ 1835.639196][T31585] ? find_held_lock+0x2d/0x110 [ 1835.643998][T31585] __do_sys_clone+0xba/0x100 [ 1835.648630][T31585] ? kernel_clone+0x890/0x890 [ 1835.653444][T31585] ? syscall_enter_from_user_mode+0x26/0x80 [ 1835.659827][T31585] do_syscall_64+0x39/0xb0 [ 1835.664360][T31585] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1835.670381][T31585] RIP: 0033:0x7fb93e689e9b [ 1835.674820][T31585] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1835.694452][T31585] RSP: 002b:00007ffe55394df0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1835.702983][T31585] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb93e689e9b [ 1835.710977][T31585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1835.718976][T31585] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555563b0400 [ 1835.726997][T31585] R10: 00005555563b06d0 R11: 0000000000000246 R12: 0000000000000001 [ 1835.735169][T31585] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe55394ed0 [ 1835.743185][T31585] [ 1835.777873][T20447] team0 (unregistering): Port device team_slave_1 removed [ 1835.840670][T31585] memory: usage 300kB, limit 0kB, failcnt 1495 [ 1835.849302][T20447] team0 (unregistering): Port device team_slave_0 removed [ 1835.860176][T31585] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1835.878235][T20447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1835.887012][T31585] Memory cgroup stats for /syz2: [ 1835.887279][T31585] anon 40960 [ 1835.887279][T31585] file 204800 [ 1835.887279][T31585] kernel 61440 [ 1835.887279][T31585] kernel_stack 0 [ 1835.887279][T31585] pagetables 8192 [ 1835.887279][T31585] sec_pagetables 0 [ 1835.887279][T31585] percpu 0 [ 1835.887279][T31585] sock 0 [ 1835.887279][T31585] vmalloc 0 [ 1835.887279][T31585] shmem 204800 [ 1835.887279][T31585] zswap 0 [ 1835.887279][T31585] zswapped 0 [ 1835.887279][T31585] file_mapped 204800 [ 1835.887279][T31585] file_dirty 0 [ 1835.887279][T31585] file_writeback 0 [ 1835.887279][T31585] swapcached 0 [ 1835.887279][T31585] anon_thp 0 [ 1835.887279][T31585] file_thp 0 [ 1835.887279][T31585] shmem_thp 0 [ 1835.887279][T31585] inactive_anon 163840 [ 1835.887279][T31585] active_anon 81920 [ 1835.887279][T31585] inactive_file 0 [ 1835.887279][T31585] active_file 0 [ 1835.887279][T31585] unevictable 0 [ 1835.887279][T31585] slab_reclaimable 12352 [ 1835.887279][T31585] slab_unreclaimable 32296 [ 1835.887279][T31585] slab 44648 [ 1835.887279][T31585] workingset_refault_anon 0 [ 1835.887279][T31585] workingset_refault_file 0 [ 1835.887279][T31585] workingset_activate_anon 0 [ 1835.887279][T31585] workingset_activate_file 0 [ 1835.887279][T31585] workingset_restore_anon 0 [ 1835.887279][T31585] workingset_restore_file 0 [ 1835.887279][T31585] workingset_nodereclaim 2 [ 1835.887279][T31585] pgscan 398 [ 1835.887279][T31585] pgsteal 65 [ 1835.887279][T31585] pgscan_kswapd 0 [ 1835.887279][T31585] pgscan_direct 398 [ 1835.887279][T31585] pgscan_khugepaged 0 [ 1835.887279][T31585] pgsteal_kswapd 0 [ 1835.887279][T31585] pgsteal_direct 65 [ 1835.887279][T31585] pgsteal_khugepaged 0 [ 1835.887279][T31585] pgfault 34355 [ 1835.887279][T31585] pgmajfault 0 [ 1835.887279][T31585] pgrefill 3648 [ 1835.887279][T31585] pgactivate 333 [ 1835.887279][T31585] pgdeactivate 0 [ 1835.887279][T31585] pglazyfree 0 [ 1835.887279][T31585] pglazyfreed 0 [ 1835.887279][T31585] zswpin 0 [ 1835.887279][T31585] zswpout 0 [ 1835.887279][T31585] thp_fault_alloc 0 [ 1836.091590][T20447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1836.143703][T31585] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=31585,uid=0 [ 1836.171375][T31585] Memory cgroup out of memory: Killed process 31585 (syz-executor.2) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1836.198588][T31748] syz-executor.1 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 1836.221337][T31748] CPU: 1 PID: 31748 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1836.231523][T31748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1836.241719][T31748] Call Trace: [ 1836.245023][T31748] [ 1836.247976][T31748] dump_stack_lvl+0x136/0x150 [ 1836.252692][T31748] dump_header+0x10a/0xd70 [ 1836.257244][T31748] oom_kill_process+0x25d/0x600 [ 1836.262140][T31748] out_of_memory+0x35c/0x1660 [ 1836.266871][T31748] ? oom_killer_disable+0x2b0/0x2b0 [ 1836.272138][T31748] ? rcu_read_unlock+0x9/0x60 [ 1836.276863][T31748] ? find_held_lock+0x2d/0x110 [ 1836.281665][T31748] mem_cgroup_out_of_memory+0x206/0x270 [ 1836.287245][T31748] ? mem_cgroup_margin+0x130/0x130 [ 1836.292388][T31748] ? lock_downgrade+0x690/0x690 [ 1836.297289][T31748] try_charge_memcg+0xf9b/0x13b0 [ 1836.302272][T31748] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1836.308292][T31748] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1836.314048][T31748] ? lock_downgrade+0x690/0x690 [ 1836.318958][T31748] ? lock_downgrade+0x690/0x690 [ 1836.323864][T31748] obj_cgroup_charge+0x2af/0x5e0 [ 1836.328845][T31748] ? ext4_alloc_inode+0x28/0x650 [ 1836.333842][T31748] kmem_cache_alloc_lru+0x142/0x600 [ 1836.339116][T31748] ? ext4_free_in_core_inode+0xb0/0xb0 [ 1836.344618][T31748] ext4_alloc_inode+0x28/0x650 [ 1836.349435][T31748] ? ext4_free_in_core_inode+0xb0/0xb0 [ 1836.354935][T31748] alloc_inode+0x61/0x230 [ 1836.359383][T31748] iget_locked+0x1bb/0x700 [ 1836.363836][T31748] __ext4_iget+0x3b2/0x4430 [ 1836.368395][T31748] ? ext4_get_projid+0x190/0x190 [ 1836.373372][T31748] ? ext4_fname_prepare_lookup+0x163/0x200 [ 1836.379242][T31748] ? ext4_fname_setup_filename+0x110/0x110 [ 1836.385168][T31748] ? rcu_is_watching+0x12/0xb0 [ 1836.389998][T31748] ext4_lookup+0x387/0x700 [ 1836.394640][T31748] ? ext4_resetent+0x2e0/0x2e0 [ 1836.399476][T31748] __lookup_slow+0x24c/0x460 [ 1836.404118][T31748] ? __lookup_hash+0x180/0x180 [ 1836.408937][T31748] ? lock_sync+0x190/0x190 [ 1836.413460][T31748] ? lockref_get_not_dead+0x6a/0x80 [ 1836.418724][T31748] walk_component+0x33f/0x5a0 [ 1836.423431][T31748] path_lookupat+0x1ba/0x840 [ 1836.428068][T31748] filename_lookup+0x1d2/0x590 [ 1836.433162][T31748] ? may_linkat+0x3b0/0x3b0 [ 1836.437723][T31748] ? __might_fault+0xe2/0x190 [ 1836.442856][T31748] ? __phys_addr_symbol+0x30/0x70 [ 1836.447943][T31748] ? __check_object_size+0x323/0x730 [ 1836.453338][T31748] ? strncpy_from_user+0x28b/0x3d0 [ 1836.458508][T31748] ? getname_flags.part.0+0x1dd/0x4f0 [ 1836.463923][T31748] user_path_at_empty+0x46/0x60 [ 1836.468812][T31748] __x64_sys_umount+0xfc/0x190 [ 1836.473621][T31748] ? path_umount+0x10b0/0x10b0 [ 1836.478429][T31748] ? syscall_enter_from_user_mode+0x26/0x80 [ 1836.484366][T31748] do_syscall_64+0x39/0xb0 [ 1836.488824][T31748] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1836.494756][T31748] RIP: 0033:0x7f80ad08d5d7 [ 1836.499228][T31748] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1836.518881][T31748] RSP: 002b:00007ffe21b3ad68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1836.527327][T31748] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f80ad08d5d7 [ 1836.535411][T31748] RDX: 00007ffe21b3ae3e RSI: 000000000000000a RDI: 00007ffe21b3ae30 [ 1836.543431][T31748] RBP: 00007ffe21b3ae30 R08: 00000000ffffffff R09: 00007ffe21b3ac00 [ 1836.551430][T31748] R10: 000055555572b8e3 R11: 0000000000000246 R12: 00007f80ad0e6cdc [ 1836.559426][T31748] R13: 00007ffe21b3bef0 R14: 000055555572b810 R15: 00007ffe21b3bf30 [ 1836.567444][T31748] [ 1836.631471][T31748] memory: usage 10356kB, limit 0kB, failcnt 777 [ 1836.637806][T31748] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1836.655253][T20447] bond0 (unregistering): Released all slaves [ 1836.661882][T31748] Memory cgroup stats for /syz1: [ 1836.662121][T31748] anon 40960 [ 1836.662121][T31748] file 10461184 [ 1836.662121][T31748] kernel 94208 [ 1836.662121][T31748] kernel_stack 0 [ 1836.662121][T31748] pagetables 8192 [ 1836.662121][T31748] sec_pagetables 0 [ 1836.662121][T31748] percpu 0 [ 1836.662121][T31748] sock 0 [ 1836.662121][T31748] vmalloc 0 [ 1836.662121][T31748] shmem 10457088 [ 1836.662121][T31748] zswap 0 [ 1836.662121][T31748] zswapped 0 [ 1836.662121][T31748] file_mapped 229376 [ 1836.662121][T31748] file_dirty 4096 [ 1836.662121][T31748] file_writeback 0 [ 1836.662121][T31748] swapcached 0 [ 1836.662121][T31748] anon_thp 0 [ 1836.662121][T31748] file_thp 0 [ 1836.662121][T31748] shmem_thp 0 [ 1836.662121][T31748] inactive_anon 2138112 [ 1836.662121][T31748] active_anon 8359936 [ 1836.662121][T31748] inactive_file 4096 [ 1836.662121][T31748] active_file 0 [ 1836.662121][T31748] unevictable 0 [ 1836.662121][T31748] slab_reclaimable 41240 [ 1836.662121][T31748] slab_unreclaimable 32944 [ 1836.662121][T31748] slab 74184 [ 1836.662121][T31748] workingset_refault_anon 0 [ 1836.662121][T31748] workingset_refault_file 3 [ 1836.662121][T31748] workingset_activate_anon 0 [ 1836.662121][T31748] workingset_activate_file 0 [ 1836.662121][T31748] workingset_restore_anon 0 [ 1836.662121][T31748] workingset_restore_file 1 [ 1836.662121][T31748] workingset_nodereclaim 0 [ 1836.662121][T31748] pgscan 159 [ 1836.662121][T31748] pgsteal 58 [ 1836.662121][T31748] pgscan_kswapd 0 [ 1836.662121][T31748] pgscan_direct 159 [ 1836.662121][T31748] pgscan_khugepaged 0 [ 1836.662121][T31748] pgsteal_kswapd 0 [ 1836.662121][T31748] pgsteal_direct 58 [ 1836.662121][T31748] pgsteal_khugepaged 0 [ 1836.662121][T31748] pgfault 37062 [ 1836.662121][T31748] pgmajfault 0 [ 1836.662121][T31748] pgrefill 809 [ 1836.662121][T31748] pgactivate 101 [ 1836.662121][T31748] pgdeactivate 0 [ 1836.662121][T31748] pglazyfree 0 [ 1836.662121][T31748] pglazyfreed 0 [ 1836.662121][T31748] zswpin 0 [ 1836.662121][T31748] zswpout 0 [ 1836.662121][T31748] thp_fault_alloc 0 [ 1836.864378][T31748] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1 [ 1836.864422][T31182] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1836.864656][T31748] ,mems_allowed=0-1 [ 1836.880437][T31182] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1836.891286][T31748] ,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=31748,uid=0 [ 1836.900268][T31182] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1836.900296][T31748] Memory cgroup out of memory: Killed process 31748 (syz-executor.1) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1836.939210][T18508] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1836.941510][T24089] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1836.956123][T12339] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1836.968105][T12339] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1836.981599][T12339] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1836.989986][T12339] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1837.009938][T18508] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1837.025025][T18508] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1837.033653][T18508] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 03:35:36 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:35:37 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:35:37 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x0, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:35:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 03:35:37 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x0, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:35:37 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:35:37 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1838.196764][T32050] chnl_net:caif_netlink_parms(): no params data found [ 1838.398490][T32052] chnl_net:caif_netlink_parms(): no params data found [ 1838.600306][T32050] bridge0: port 1(bridge_slave_0) entered blocking state [ 1838.611451][T32050] bridge0: port 1(bridge_slave_0) entered disabled state [ 1838.656275][T32050] bridge_slave_0: entered allmulticast mode [ 1838.689068][T32050] bridge_slave_0: entered promiscuous mode [ 1838.786140][T32050] bridge0: port 2(bridge_slave_1) entered blocking state [ 1838.811465][T32050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1838.844122][T32050] bridge_slave_1: entered allmulticast mode [ 1838.874719][T32050] bridge_slave_1: entered promiscuous mode [ 1839.037520][T32052] bridge0: port 1(bridge_slave_0) entered blocking state [ 1839.048957][T32052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1839.060671][T32052] bridge_slave_0: entered allmulticast mode [ 1839.071520][T12339] Bluetooth: hci2: command 0x0409 tx timeout [ 1839.079982][T32052] bridge_slave_0: entered promiscuous mode [ 1839.091958][T32050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1839.104561][T32052] bridge0: port 2(bridge_slave_1) entered blocking state [ 1839.121591][T32052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1839.132010][T32052] bridge_slave_1: entered allmulticast mode [ 1839.141455][T12339] Bluetooth: hci1: command 0x0409 tx timeout [ 1839.158417][T32052] bridge_slave_1: entered promiscuous mode [ 1839.185360][T32050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1839.353620][T32052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1839.406788][T32050] team0: Port device team_slave_0 added [ 1839.442159][T32050] team0: Port device team_slave_1 added [ 1839.450239][T32052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1839.600989][T32052] team0: Port device team_slave_0 added [ 1839.629892][T32050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1839.657667][T32050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1839.749896][T32050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1839.778303][T32052] team0: Port device team_slave_1 added [ 1839.842146][T32050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1839.849164][T32050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1839.945325][T32050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1840.035374][T18508] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1840.044873][T18508] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1840.053709][T18508] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1840.061720][T18508] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1840.069040][T18508] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1840.183462][T32052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1840.224216][T32052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1840.301488][T32052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1840.353185][T32050] hsr_slave_0: entered promiscuous mode [ 1840.371683][T32050] hsr_slave_1: entered promiscuous mode [ 1840.378106][T32050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1840.415108][T32050] Cannot create hsr debugfs directory [ 1840.425514][T32052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1840.441273][T32052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1840.501294][T32052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1840.732259][T12339] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1840.742813][T12339] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1840.752128][T12339] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1840.760011][T12339] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1840.768077][T12339] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1840.775534][T12339] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1840.842813][T12339] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1840.852635][T12339] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1840.860635][T12339] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1840.870277][T12339] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1840.878524][T12339] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1840.887521][T12339] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1840.966639][T32052] hsr_slave_0: entered promiscuous mode [ 1840.980804][T32052] hsr_slave_1: entered promiscuous mode [ 1840.988248][T32052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1840.997177][T32052] Cannot create hsr debugfs directory [ 1841.141737][T12339] Bluetooth: hci2: command 0x041b tx timeout [ 1841.222104][T12339] Bluetooth: hci1: command 0x041b tx timeout [ 1841.675356][T32105] chnl_net:caif_netlink_parms(): no params data found [ 1841.763203][T32050] ODEBUG: Out of memory. ODEBUG disabled [ 1841.922544][T20447] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1842.061353][T20447] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1842.101545][T12339] Bluetooth: hci0: command 0x0409 tx timeout [ 1842.147867][T32105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1842.167808][T32105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1842.175311][T32105] bridge_slave_0: entered allmulticast mode [ 1842.185602][T32105] bridge_slave_0: entered promiscuous mode [ 1842.200018][T32116] chnl_net:caif_netlink_parms(): no params data found [ 1842.243177][T20447] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1842.271005][T32105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1842.290250][T32105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1842.300194][T32105] bridge_slave_1: entered allmulticast mode [ 1842.317857][T32105] bridge_slave_1: entered promiscuous mode [ 1842.331651][T32112] chnl_net:caif_netlink_parms(): no params data found [ 1842.357629][T20447] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1842.438104][T32105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1842.511658][T32105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1842.658306][T32116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1842.672461][T32116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1842.679753][T32116] bridge_slave_0: entered allmulticast mode [ 1842.689526][T32116] bridge_slave_0: entered promiscuous mode [ 1842.702771][T32105] team0: Port device team_slave_0 added [ 1842.724394][T32112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1842.743094][T32112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1842.761521][T32112] bridge_slave_0: entered allmulticast mode [ 1842.768818][T32112] bridge_slave_0: entered promiscuous mode [ 1842.793174][T32116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1842.800351][T32116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1842.822238][T12339] Bluetooth: hci3: command 0x0409 tx timeout [ 1842.831768][T32116] bridge_slave_1: entered allmulticast mode [ 1842.851625][T32116] bridge_slave_1: entered promiscuous mode [ 1842.873367][T32105] team0: Port device team_slave_1 added [ 1842.893198][T32112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1842.900374][T32112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1842.921733][T32112] bridge_slave_1: entered allmulticast mode [ 1842.941479][T32112] bridge_slave_1: entered promiscuous mode [ 1842.981555][T12339] Bluetooth: hci4: command 0x0409 tx timeout [ 1843.093811][T32116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1843.124680][T20447] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1843.183956][T32105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1843.190985][T32105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1843.231338][T12339] Bluetooth: hci2: command 0x040f tx timeout [ 1843.251298][T32105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1843.275779][T32112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1843.296914][T32116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1843.301438][T12339] Bluetooth: hci1: command 0x040f tx timeout [ 1843.321155][T20447] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1843.340284][T32105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1843.365830][T32105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1843.399410][T32105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1843.416770][T32112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1843.444586][T20447] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1843.566183][T20447] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1843.604723][T32112] team0: Port device team_slave_0 added [ 1843.615802][T32116] team0: Port device team_slave_0 added [ 1843.663256][T32105] hsr_slave_0: entered promiscuous mode [ 1843.673951][T32105] hsr_slave_1: entered promiscuous mode [ 1843.680296][T32105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1843.701323][T32105] Cannot create hsr debugfs directory [ 1843.708316][T32116] team0: Port device team_slave_1 added [ 1843.763046][T32112] team0: Port device team_slave_1 added [ 1843.849094][T32116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1843.857360][T32116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1843.885048][T32116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1843.931004][T32112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1843.941394][T32112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1844.006272][T32112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1844.105808][T32116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1844.113503][T32116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1844.171295][T32116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1844.182256][T12339] Bluetooth: hci0: command 0x041b tx timeout [ 1844.242744][T32112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1844.249770][T32112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1844.291786][T32112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1844.426403][T32116] hsr_slave_0: entered promiscuous mode [ 1844.453007][T32116] hsr_slave_1: entered promiscuous mode [ 1844.459443][T32116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1844.468140][T32116] Cannot create hsr debugfs directory [ 1844.512494][T20447] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1844.687830][T20447] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1844.765822][T32112] hsr_slave_0: entered promiscuous mode [ 1844.782560][T32112] hsr_slave_1: entered promiscuous mode [ 1844.801515][T32112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1844.809150][T32112] Cannot create hsr debugfs directory [ 1844.901406][T12339] Bluetooth: hci3: command 0x041b tx timeout [ 1844.922442][T20447] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1845.009163][T20447] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1845.061395][T12339] Bluetooth: hci4: command 0x041b tx timeout [ 1845.301352][T12339] Bluetooth: hci2: command 0x0419 tx timeout [ 1845.381897][T12339] Bluetooth: hci1: command 0x0419 tx timeout [ 1845.443573][T20447] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1845.522047][T20447] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1845.622857][T20447] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1845.706620][T20447] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1845.937787][T20447] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1846.094296][T20447] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1846.174561][T20447] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1846.261717][T12339] Bluetooth: hci0: command 0x040f tx timeout [ 1846.276930][T20447] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1846.981405][T12339] Bluetooth: hci3: command 0x040f tx timeout [ 1847.141718][T12339] Bluetooth: hci4: command 0x040f tx timeout [ 1848.341868][T12339] Bluetooth: hci0: command 0x0419 tx timeout [ 1848.689030][T20447] hsr_slave_0: left promiscuous mode [ 1848.695191][T20447] hsr_slave_1: left promiscuous mode [ 1848.702366][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1848.709861][T20447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1848.720332][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1848.728426][T20447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1848.738380][T20447] bridge_slave_1: left allmulticast mode [ 1848.744750][T20447] bridge_slave_1: left promiscuous mode [ 1848.750507][T20447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1848.759878][T20447] bridge_slave_0: left allmulticast mode [ 1848.765999][T20447] bridge_slave_0: left promiscuous mode [ 1848.772257][T20447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1848.784420][T20447] hsr_slave_0: left promiscuous mode [ 1848.790304][T20447] hsr_slave_1: left promiscuous mode [ 1848.796511][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1848.807208][T20447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1848.817452][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1848.826176][T20447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1848.836162][T20447] bridge_slave_1: left allmulticast mode [ 1848.842507][T20447] bridge_slave_1: left promiscuous mode [ 1848.848268][T20447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1848.857531][T20447] bridge_slave_0: left allmulticast mode [ 1848.868844][T20447] bridge_slave_0: left promiscuous mode [ 1848.875185][T20447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1848.888454][T20447] hsr_slave_0: left promiscuous mode [ 1848.894700][T20447] hsr_slave_1: left promiscuous mode [ 1848.900787][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1848.909000][T20447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1848.919009][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1848.926837][T20447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1848.936880][T20447] bridge_slave_1: left allmulticast mode [ 1848.943081][T20447] bridge_slave_1: left promiscuous mode [ 1848.948768][T20447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1848.957911][T20447] bridge_slave_0: left allmulticast mode [ 1848.964106][T20447] bridge_slave_0: left promiscuous mode [ 1848.969880][T20447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1848.983175][T20447] hsr_slave_0: left promiscuous mode [ 1848.989143][T20447] hsr_slave_1: left promiscuous mode [ 1848.995775][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1849.003739][T20447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1849.013624][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1849.021542][T20447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1849.030269][T20447] bridge_slave_1: left allmulticast mode [ 1849.036629][T20447] bridge_slave_1: left promiscuous mode [ 1849.042990][T20447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1849.052275][T20447] bridge_slave_0: left allmulticast mode [ 1849.058331][T20447] bridge_slave_0: left promiscuous mode [ 1849.061466][T12339] Bluetooth: hci3: command 0x0419 tx timeout [ 1849.064818][T20447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1849.083672][T20447] hsr_slave_0: left promiscuous mode [ 1849.089462][T20447] hsr_slave_1: left promiscuous mode [ 1849.096019][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1849.104031][T20447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1849.113951][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1849.121670][T20447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1849.130521][T20447] bridge_slave_1: left allmulticast mode [ 1849.136948][T20447] bridge_slave_1: left promiscuous mode [ 1849.143150][T20447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1849.151784][T20447] bridge_slave_0: left allmulticast mode [ 1849.157664][T20447] bridge_slave_0: left promiscuous mode [ 1849.164171][T20447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1849.189297][T20447] veth1_macvtap: left promiscuous mode [ 1849.195040][T20447] veth0_macvtap: left promiscuous mode [ 1849.200631][T20447] veth1_vlan: left promiscuous mode [ 1849.206006][T20447] veth0_vlan: left promiscuous mode [ 1849.213096][T20447] veth1_macvtap: left promiscuous mode [ 1849.218652][T20447] veth0_macvtap: left promiscuous mode [ 1849.223624][T12339] Bluetooth: hci4: command 0x0419 tx timeout [ 1849.224759][T20447] veth1_vlan: left promiscuous mode [ 1849.235619][T20447] veth0_vlan: left promiscuous mode [ 1849.242989][T20447] veth1_macvtap: left promiscuous mode [ 1849.248524][T20447] veth0_macvtap: left promiscuous mode [ 1849.254184][T20447] veth1_vlan: left promiscuous mode [ 1849.259509][T20447] veth0_vlan: left promiscuous mode [ 1849.266547][T20447] veth1_macvtap: left promiscuous mode [ 1849.278900][T20447] veth0_macvtap: left promiscuous mode [ 1849.284723][T20447] veth1_vlan: left promiscuous mode [ 1849.290035][T20447] veth0_vlan: left promiscuous mode [ 1849.297227][T20447] veth1_macvtap: left promiscuous mode [ 1849.303032][T20447] veth0_macvtap: left promiscuous mode [ 1849.308692][T20447] veth1_vlan: left promiscuous mode [ 1849.314120][T20447] veth0_vlan: left promiscuous mode [ 1849.982498][T20447] team0 (unregistering): Port device team_slave_1 removed [ 1849.998489][T20447] team0 (unregistering): Port device team_slave_0 removed [ 1850.012899][T20447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1850.029342][T20447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1850.109045][T20447] bond0 (unregistering): Released all slaves [ 1850.263376][T20447] team0 (unregistering): Port device team_slave_1 removed [ 1850.278991][T20447] team0 (unregistering): Port device team_slave_0 removed [ 1850.294021][T20447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1850.316863][T20447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1850.398643][T20447] bond0 (unregistering): Released all slaves [ 1850.530546][T20447] team0 (unregistering): Port device team_slave_1 removed [ 1850.546648][T20447] team0 (unregistering): Port device team_slave_0 removed [ 1850.560524][T20447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1850.577758][T20447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1850.654853][T20447] bond0 (unregistering): Released all slaves [ 1850.785176][T20447] team0 (unregistering): Port device team_slave_1 removed [ 1850.799219][T20447] team0 (unregistering): Port device team_slave_0 removed [ 1850.815662][T20447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1850.832740][T20447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1850.910932][T20447] bond0 (unregistering): Released all slaves [ 1851.095030][T20447] team0 (unregistering): Port device team_slave_1 removed [ 1851.107934][T20447] team0 (unregistering): Port device team_slave_0 removed [ 1851.122645][T20447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1851.138153][T20447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1851.217200][T20447] bond0 (unregistering): Released all slaves [ 1854.542066][T32050] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1854.562350][T32050] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1854.579593][T32050] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1854.620127][T32050] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1854.833675][T32050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1854.870144][T32050] 8021q: adding VLAN 0 to HW filter on device team0 [ 1854.887705][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1854.896572][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1854.941638][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1854.950528][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1854.967598][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1854.974826][ T5093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1854.983839][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1854.992780][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1855.001963][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 1855.009188][ T5093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1855.031776][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1855.147219][T32052] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1855.159988][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1855.170340][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1855.180022][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1855.191879][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1855.200798][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1855.210568][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1855.228194][T32052] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1855.327450][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1855.352895][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1855.361726][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1855.375112][T32050] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1855.414966][T32050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1855.434639][T32052] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1855.464385][T32052] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1855.483903][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1855.503697][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1855.925871][T32052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1855.941972][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1855.950107][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1855.992275][T32052] 8021q: adding VLAN 0 to HW filter on device team0 [ 1856.015581][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1856.026047][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1856.051870][ T4744] bridge0: port 1(bridge_slave_0) entered blocking state [ 1856.059147][ T4744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1856.131266][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1856.139482][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1856.166112][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1856.187984][T22809] bridge0: port 2(bridge_slave_1) entered blocking state [ 1856.195269][T22809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1856.210804][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1856.220253][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1856.343918][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1856.362744][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1856.382086][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1856.389769][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1856.411776][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1856.420739][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1856.434806][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1856.452055][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1856.460710][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1856.469866][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1856.480958][T32050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1856.499098][T32052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1856.513384][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1856.562305][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1856.578972][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1856.596541][T32050] veth0_vlan: entered promiscuous mode [ 1856.631337][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1856.662258][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1856.680475][T32050] veth1_vlan: entered promiscuous mode [ 1856.729564][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1856.742412][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1856.750476][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1856.790940][T32050] veth0_macvtap: entered promiscuous mode [ 1856.860347][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1856.884742][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1856.898475][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1856.913335][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1856.926364][T32050] veth1_macvtap: entered promiscuous mode [ 1856.991368][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1856.999015][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1857.020034][T32116] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1857.032990][T32052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1857.052889][T32116] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1857.085587][T32116] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1857.115151][T32116] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1857.195798][T32050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1857.251406][T32050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1857.268823][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1857.278067][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1857.287558][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1857.296746][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1857.332611][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1857.347161][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1857.358850][T32050] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1857.387476][T32050] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1857.397347][T32050] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1857.424137][T32050] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1857.513732][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1857.527946][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1857.549132][T32052] veth0_vlan: entered promiscuous mode [ 1857.595118][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1857.603521][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1857.637689][T32052] veth1_vlan: entered promiscuous mode [ 1857.735097][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1857.744378][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1857.759943][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1857.769170][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1857.779818][ T5180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1857.801532][ T5180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1857.819627][T32052] veth0_macvtap: entered promiscuous mode [ 1857.833624][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1857.852190][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1857.874640][T32052] veth1_macvtap: entered promiscuous mode [ 1857.927839][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1857.937732][T32112] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1857.956347][T32052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1857.968161][T32052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1857.980827][T32052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1857.989946][T27855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1857.995696][T32116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1858.008111][T27855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1858.020954][T32112] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1858.034816][T32112] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1858.047284][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1858.056463][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1858.066606][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1858.078061][T32052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1858.096420][T32052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.116753][T32052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1858.136844][T32116] 8021q: adding VLAN 0 to HW filter on device team0 [ 1858.144062][T32112] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1858.183288][ T1216] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.189840][ T1216] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.234652][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1858.254463][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1858.270678][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1858.280415][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1858.292570][T32052] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.303428][T32052] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.312704][T32052] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.322152][T32052] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.392849][T32395] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1858.401163][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1858.420837][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1858.440842][T18437] bridge0: port 1(bridge_slave_0) entered blocking state [ 1858.448136][T18437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1858.448304][T32395] CPU: 1 PID: 32395 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1858.465378][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1858.465526][T32395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1858.483050][T32395] Call Trace: [ 1858.486373][T32395] [ 1858.489354][T32395] dump_stack_lvl+0x136/0x150 [ 1858.494109][T32395] dump_header+0x10a/0xd70 [ 1858.498701][T32395] oom_kill_process+0x25d/0x600 [ 1858.503646][T32395] out_of_memory+0x35c/0x1660 [ 1858.508514][T32395] ? oom_killer_disable+0x2b0/0x2b0 [ 1858.513987][T32395] ? find_held_lock+0x2d/0x110 [ 1858.518886][T32395] mem_cgroup_out_of_memory+0x206/0x270 [ 1858.524509][T32395] ? mem_cgroup_margin+0x130/0x130 [ 1858.529713][T32395] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1858.535613][T32395] memory_max_write+0x2f9/0x3c0 [ 1858.540555][T32395] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1858.546718][T32395] ? lock_sync+0x190/0x190 [ 1858.551220][T32395] cgroup_file_write+0x1e2/0x7b0 [ 1858.556324][T32395] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1858.562475][T32395] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1858.567929][T32395] ? __virt_addr_valid+0x61/0x2e0 [ 1858.573070][T32395] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1858.578515][T32395] kernfs_fop_write_iter+0x3f1/0x600 [ 1858.583884][T32395] vfs_write+0x9ee/0xe10 [ 1858.588217][T32395] ? kernel_write+0x670/0x670 [ 1858.592989][T32395] ? __fget_files+0x26a/0x480 [ 1858.597767][T32395] ksys_write+0x12b/0x250 [ 1858.602177][T32395] ? __ia32_sys_read+0xb0/0xb0 [ 1858.607023][T32395] ? syscall_enter_from_user_mode+0x26/0x80 [ 1858.613008][T32395] do_syscall_64+0x39/0xb0 [ 1858.617494][T32395] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1858.623517][T32395] RIP: 0033:0x7f9607c8c169 [ 1858.627993][T32395] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1858.647761][T32395] RSP: 002b:00007f96067dd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1858.656264][T32395] RAX: ffffffffffffffda RBX: 00007f9607dac050 RCX: 00007f9607c8c169 [ 1858.664387][T32395] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 1858.672418][T32395] RBP: 00007f9607ce7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1858.680886][T32395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1858.688917][T32395] R13: 00007fff6393c62f R14: 00007f96067dd300 R15: 0000000000022000 [ 1858.696979][T32395] [ 1858.758359][T32395] memory: usage 8580kB, limit 0kB, failcnt 972 [ 1858.768263][T32395] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1858.774843][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1858.779509][T32395] Memory cgroup stats for /syz0: [ 1858.783574][T32395] anon 118784 [ 1858.783574][T32395] file 8327168 [ 1858.783574][T32395] kernel 331776 [ 1858.783574][T32395] kernel_stack 98304 [ 1858.783574][T32395] pagetables 81920 [ 1858.783574][T32395] sec_pagetables 0 [ 1858.783574][T32395] percpu 64 [ 1858.783574][T32395] sock 0 [ 1858.783574][T32395] vmalloc 0 [ 1858.783574][T32395] shmem 8327168 [ 1858.783574][T32395] zswap 0 [ 1858.783574][T32395] zswapped 0 [ 1858.783574][T32395] file_mapped 229376 [ 1858.783574][T32395] file_dirty 0 [ 1858.783574][T32395] file_writeback 0 [ 1858.783574][T32395] swapcached 0 [ 1858.783574][T32395] anon_thp 0 [ 1858.783574][T32395] file_thp 0 [ 1858.783574][T32395] shmem_thp 0 [ 1858.783574][T32395] inactive_anon 8327168 [ 1858.783574][T32395] active_anon 118784 [ 1858.783574][T32395] inactive_file 0 [ 1858.783574][T32395] active_file 0 [ 1858.783574][T32395] unevictable 0 [ 1858.783574][T32395] slab_reclaimable 40352 [ 1858.783574][T32395] slab_unreclaimable 81656 [ 1858.783574][T32395] slab 122008 [ 1858.783574][T32395] workingset_refault_anon 0 [ 1858.783574][T32395] workingset_refault_file 0 [ 1858.783574][T32395] workingset_activate_anon 0 [ 1858.783574][T32395] workingset_activate_file 0 [ 1858.783574][T32395] workingset_restore_anon 0 [ 1858.783574][T32395] workingset_restore_file 0 [ 1858.783574][T32395] workingset_nodereclaim 0 [ 1858.783574][T32395] pgscan 193 [ 1858.783574][T32395] pgsteal 68 [ 1858.783574][T32395] pgscan_kswapd 0 [ 1858.783574][T32395] pgscan_direct 193 [ 1858.783574][T32395] pgscan_khugepaged 0 [ 1858.783574][T32395] pgsteal_kswapd 0 [ 1858.783574][T32395] pgsteal_direct 68 [ 1858.783574][T32395] pgsteal_khugepaged 0 [ 1858.783574][T32395] pgfault 37323 [ 1858.783574][T32395] pgmajfault 0 [ 1858.783574][T32395] pgrefill 1411 [ 1858.783574][T32395] pgactivate 115 [ 1858.783574][T32395] pgdeactivate 0 [ 1858.783574][T32395] pglazyfree 0 [ 1858.783574][T32395] pglazyfreed 0 [ 1858.783574][T32395] zswpin 0 [ 1858.783574][T32395] zswpout 0 [ 1858.783574][T32395] thp_fault_alloc 0 [ 1858.794093][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1858.980779][T26287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1858.988000][T26287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1858.999507][T32395] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=32393,uid=0 [ 1859.002179][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1859.024935][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1859.028044][T32395] Memory cgroup out of memory: Killed process 32393 (syz-executor.0) total-vm:54680kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 03:35:58 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:35:58 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1859.066187][T32105] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1859.111559][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1859.142554][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1859.150093][T32050] syz-executor.0 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=0 [ 1859.201471][T32050] CPU: 1 PID: 32050 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1859.211633][T32050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1859.213437][T32105] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1859.221711][T32050] Call Trace: [ 1859.221724][T32050] [ 1859.221736][T32050] dump_stack_lvl+0x136/0x150 [ 1859.221778][T32050] dump_header+0x10a/0xd70 [ 1859.221836][T32050] oom_kill_process+0x25d/0x600 [ 1859.221893][T32050] out_of_memory+0x35c/0x1660 [ 1859.221950][T32050] ? find_held_lock+0x2d/0x110 [ 1859.221995][T32050] ? oom_killer_disable+0x2b0/0x2b0 [ 1859.222051][T32050] ? rcu_read_unlock+0x9/0x60 [ 1859.222107][T32050] ? find_held_lock+0x2d/0x110 [ 1859.222147][T32050] mem_cgroup_out_of_memory+0x206/0x270 [ 1859.279186][T32050] ? mem_cgroup_margin+0x130/0x130 [ 1859.284358][T32050] ? lock_downgrade+0x690/0x690 [ 1859.289307][T32050] try_charge_memcg+0xf9b/0x13b0 [ 1859.294336][T32050] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1859.300389][T32050] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1859.306184][T32050] ? lock_downgrade+0x690/0x690 [ 1859.311285][T32050] ? lock_downgrade+0x690/0x690 [ 1859.316343][T32050] ? rcu_read_unlock+0x9/0x60 [ 1859.321107][T32050] obj_cgroup_charge+0x2af/0x5e0 [ 1859.326120][T32050] __kmem_cache_alloc_node+0xa3/0x320 [ 1859.331657][T32050] ? kvmalloc_node+0xa2/0x1a0 [ 1859.336425][T32050] ? kvmalloc_node+0xa2/0x1a0 [ 1859.341177][T32050] __kmalloc_node+0x51/0x1a0 [ 1859.345842][T32050] kvmalloc_node+0xa2/0x1a0 [ 1859.350419][T32050] xt_alloc_table_info+0x40/0xa0 [ 1859.355434][T32050] do_ip6t_set_ctl+0x514/0xb30 [ 1859.360260][T32050] ? __mutex_lock+0x231/0x1350 [ 1859.365093][T32050] ? compat_do_replace.constprop.0+0x410/0x410 [ 1859.371332][T32050] ? wait_for_completion_io_timeout+0x20/0x20 [ 1859.377492][T32050] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 1859.383647][T32050] nf_setsockopt+0x87/0xe0 [ 1859.388128][T32050] ipv6_setsockopt+0x12b/0x190 [ 1859.392953][T32050] tcp_setsockopt+0x9f/0x100 [ 1859.397622][T32050] ? sock_common_recvmsg+0x190/0x190 [ 1859.402983][T32050] __sys_setsockopt+0x2c6/0x5b0 [ 1859.407915][T32050] ? __ia32_sys_recv+0x100/0x100 [ 1859.413006][T32050] ? up_write+0x520/0x520 [ 1859.417410][T32050] ? handle_mm_fault+0x397/0x9c0 [ 1859.422443][T32050] __x64_sys_setsockopt+0xbe/0x160 [ 1859.427628][T32050] ? syscall_enter_from_user_mode+0x26/0x80 [ 1859.433593][T32050] do_syscall_64+0x39/0xb0 [ 1859.438076][T32050] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1859.444048][T32050] RIP: 0033:0x7f9607c8d7ba [ 1859.448683][T32050] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1859.468441][T32050] RSP: 002b:00007fff6393c198 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 1859.476958][T32050] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 00007f9607c8d7ba [ 1859.484984][T32050] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1859.493112][T32050] RBP: 00007fff6393c1c0 R08: 0000000000000558 R09: fefefefefefeff64 [ 1859.501236][T32050] R10: 00007f9607d85940 R11: 0000000000000202 R12: 00007fff6393c220 [ 1859.509438][T32050] R13: 0000000000000003 R14: 00007fff6393c1bc R15: 00007f9607d858e0 [ 1859.517482][T32050] [ 1859.523952][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1859.545262][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1859.582858][T32050] memory: usage 8288kB, limit 0kB, failcnt 991 [ 1859.587570][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1859.592780][T32050] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1859.612948][T32050] Memory cgroup stats for /syz0: [ 1859.613196][T32050] anon 45056 [ 1859.613196][T32050] file 8327168 [ 1859.613196][T32050] kernel 106496 [ 1859.613196][T32050] kernel_stack 0 [ 1859.613196][T32050] pagetables 8192 [ 1859.613196][T32050] sec_pagetables 0 [ 1859.613196][T32050] percpu 64 [ 1859.613196][T32050] sock 0 [ 1859.613196][T32050] vmalloc 0 [ 1859.613196][T32050] shmem 8327168 [ 1859.613196][T32050] zswap 0 [ 1859.613196][T32050] zswapped 0 [ 1859.613196][T32050] file_mapped 221184 [ 1859.613196][T32050] file_dirty 0 [ 1859.613196][T32050] file_writeback 0 [ 1859.613196][T32050] swapcached 0 [ 1859.613196][T32050] anon_thp 0 [ 1859.613196][T32050] file_thp 0 [ 1859.613196][T32050] shmem_thp 0 [ 1859.613196][T32050] inactive_anon 8327168 [ 1859.613196][T32050] active_anon 45056 [ 1859.613196][T32050] inactive_file 0 [ 1859.613196][T32050] active_file 0 [ 1859.613196][T32050] unevictable 0 [ 1859.613196][T32050] slab_reclaimable 38640 [ 1859.613196][T32050] slab_unreclaimable 50848 [ 1859.613196][T32050] slab 89488 [ 1859.613196][T32050] workingset_refault_anon 0 [ 1859.613196][T32050] workingset_refault_file 0 [ 1859.613196][T32050] workingset_activate_anon 0 [ 1859.613196][T32050] workingset_activate_file 0 [ 1859.613196][T32050] workingset_restore_anon 0 [ 1859.613196][T32050] workingset_restore_file 0 [ 1859.613196][T32050] workingset_nodereclaim 0 [ 1859.613196][T32050] pgscan 193 [ 1859.613196][T32050] pgsteal 68 [ 1859.613196][T32050] pgscan_kswapd 0 [ 1859.613196][T32050] pgscan_direct 193 [ 1859.613196][T32050] pgscan_khugepaged 0 [ 1859.613196][T32050] pgsteal_kswapd 0 [ 1859.613196][T32050] pgsteal_direct 68 [ 1859.613196][T32050] pgsteal_khugepaged 0 [ 1859.613196][T32050] pgfault 37330 [ 1859.613196][T32050] pgmajfault 0 [ 1859.613196][T32050] pgrefill 1411 [ 1859.613196][T32050] pgactivate 115 [ 1859.613196][T32050] pgdeactivate 0 [ 1859.613196][T32050] pglazyfree 0 [ 1859.613196][T32050] pglazyfreed 0 [ 1859.613196][T32050] zswpin 0 [ 1859.613196][T32050] zswpout 0 [ 1859.613196][T32050] thp_fault_alloc 0 [ 1859.829388][T32116] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1859.860622][T32116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1859.879193][T32105] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1859.887526][T32050] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=32050,uid=0 [ 1859.904299][T32050] Memory cgroup out of memory: Killed process 32050 (syz-executor.0) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1859.943576][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1859.958324][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1859.967654][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1859.977035][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1860.008026][T32105] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1860.036039][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1860.142158][T32112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1860.204685][T20447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1860.251986][T20447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1860.258787][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1860.283183][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1860.316906][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1860.359728][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1860.361748][T32112] 8021q: adding VLAN 0 to HW filter on device team0 [ 1860.380813][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1860.403606][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 03:36:00 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1860.466102][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1860.492029][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1860.507559][T26287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1860.514792][T26287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1860.528035][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1860.537324][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1860.546467][T26287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1860.553694][T26287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1860.751431][T27855] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.817622][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1860.829760][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1860.850451][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1860.896053][T32116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1860.980910][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1861.022283][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1861.033360][T32418] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1861.046322][T32418] CPU: 1 PID: 32418 Comm: syz-executor.3 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1861.056483][T32418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1861.066937][T32418] Call Trace: [ 1861.070242][T32418] [ 1861.073207][T32418] dump_stack_lvl+0x136/0x150 [ 1861.077926][T32418] dump_header+0x10a/0xd70 [ 1861.082401][T32418] oom_kill_process+0x25d/0x600 [ 1861.087308][T32418] out_of_memory+0x35c/0x1660 [ 1861.092034][T32418] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1861.098245][T32418] ? oom_killer_disable+0x2b0/0x2b0 [ 1861.103492][T32418] ? mem_cgroup_out_of_memory+0x199/0x270 [ 1861.109269][T32418] ? kasan_check_range+0xe2/0x190 [ 1861.114357][T32418] mem_cgroup_out_of_memory+0x206/0x270 [ 1861.119938][T32418] ? mem_cgroup_margin+0x130/0x130 [ 1861.125102][T32418] memory_max_write+0x2f9/0x3c0 [ 1861.129999][T32418] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1861.136300][T32418] ? cgroup_file_write+0x192/0x7b0 [ 1861.141548][T32418] cgroup_file_write+0x1e2/0x7b0 [ 1861.146523][T32418] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1861.152720][T32418] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1861.158218][T32418] ? __virt_addr_valid+0x61/0x2e0 [ 1861.163389][T32418] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1861.168796][T32418] kernfs_fop_write_iter+0x3f1/0x600 [ 1861.174129][T32418] vfs_write+0x9ee/0xe10 [ 1861.178425][T32418] ? kernel_write+0x670/0x670 [ 1861.183157][T32418] ? __fget_files+0x26a/0x480 [ 1861.187894][T32418] ksys_write+0x12b/0x250 [ 1861.192786][T32418] ? __ia32_sys_read+0xb0/0xb0 [ 1861.197612][T32418] ? syscall_enter_from_user_mode+0x26/0x80 [ 1861.203556][T32418] do_syscall_64+0x39/0xb0 [ 1861.208004][T32418] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1861.213943][T32418] RIP: 0033:0x7f9f8f08c169 [ 1861.218388][T32418] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1861.238028][T32418] RSP: 002b:00007f9f8fd70168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1861.246479][T32418] RAX: ffffffffffffffda RBX: 00007f9f8f1abf80 RCX: 00007f9f8f08c169 [ 1861.254482][T32418] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 1861.262495][T32418] RBP: 00007f9f8f0e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1861.270515][T32418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1861.278627][T32418] R13: 00007ffdb597190f R14: 00007f9f8fd70300 R15: 0000000000022000 [ 1861.286673][T32418] [ 1861.304045][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1861.329572][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1861.339327][T32418] memory: usage 8552kB, limit 0kB, failcnt 662 [ 1861.353349][T32418] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1861.353958][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1861.360890][T32418] Memory cgroup stats for /syz3: [ 1861.382664][T32418] anon 114688 [ 1861.382664][T32418] file 8347648 [ 1861.382664][T32418] kernel 278528 [ 1861.382664][T32418] kernel_stack 65536 [ 1861.382664][T32418] pagetables 77824 [ 1861.382664][T32418] sec_pagetables 0 [ 1861.382664][T32418] percpu 64 [ 1861.382664][T32418] sock 0 [ 1861.382664][T32418] vmalloc 0 [ 1861.382664][T32418] shmem 8347648 [ 1861.382664][T32418] zswap 0 [ 1861.382664][T32418] zswapped 0 [ 1861.382664][T32418] file_mapped 274432 [ 1861.382664][T32418] file_dirty 0 [ 1861.382664][T32418] file_writeback 0 [ 1861.382664][T32418] swapcached 0 [ 1861.382664][T32418] anon_thp 0 [ 1861.382664][T32418] file_thp 0 [ 1861.382664][T32418] shmem_thp 0 [ 1861.382664][T32418] inactive_anon 245760 [ 1861.382664][T32418] active_anon 8216576 [ 1861.382664][T32418] inactive_file 0 [ 1861.382664][T32418] active_file 0 [ 1861.382664][T32418] unevictable 0 [ 1861.382664][T32418] slab_reclaimable 35768 [ 1861.382664][T32418] slab_unreclaimable 73488 [ 1861.382664][T32418] slab 109256 [ 1861.382664][T32418] workingset_refault_anon 0 [ 1861.382664][T32418] workingset_refault_file 0 [ 1861.382664][T32418] workingset_activate_anon 0 [ 1861.382664][T32418] workingset_activate_file 0 [ 1861.382664][T32418] workingset_restore_anon 0 [ 1861.382664][T32418] workingset_restore_file 0 [ 1861.382664][T32418] workingset_nodereclaim 0 [ 1861.382664][T32418] pgscan 208 [ 1861.382664][T32418] pgsteal 99 [ 1861.382664][T32418] pgscan_kswapd 0 [ 1861.382664][T32418] pgscan_direct 208 [ 1861.382664][T32418] pgscan_khugepaged 0 [ 1861.382664][T32418] pgsteal_kswapd 0 [ 1861.382664][T32418] pgsteal_direct 99 [ 1861.382664][T32418] pgsteal_khugepaged 0 [ 1861.382664][T32418] pgfault 37848 [ 1861.382664][T32418] pgmajfault 0 [ 1861.382664][T32418] pgrefill 475 [ 1861.382664][T32418] pgactivate 89 [ 1861.382664][T32418] pgdeactivate 0 [ 1861.382664][T32418] pglazyfree 0 [ 1861.382664][T32418] pglazyfreed 0 [ 1861.382664][T32418] zswpin 0 [ 1861.382664][T32418] zswpout 0 [ 1861.382664][T32418] thp_fault_alloc 0 [ 1861.586819][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1861.622649][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 03:36:01 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:36:01 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1861.652060][T32418] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=32417,uid=0 [ 1861.657580][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1861.668609][T32418] Memory cgroup out of memory: Killed process 32418 (syz-executor.3) total-vm:54548kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1861.741548][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1861.755381][T32052] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1861.785909][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1861.804420][T32052] CPU: 1 PID: 32052 Comm: syz-executor.3 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1861.814669][T32052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1861.824784][T32052] Call Trace: [ 1861.828104][T32052] [ 1861.831085][T32052] dump_stack_lvl+0x136/0x150 [ 1861.835836][T32052] dump_header+0x10a/0xd70 [ 1861.838682][T32105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1861.840402][T32052] oom_kill_process+0x25d/0x600 [ 1861.851986][T32052] out_of_memory+0x35c/0x1660 [ 1861.856758][T32052] ? find_held_lock+0x2d/0x110 [ 1861.861675][T32052] ? oom_killer_disable+0x2b0/0x2b0 [ 1861.866964][T32052] ? rcu_read_unlock+0x9/0x60 [ 1861.871811][T32052] ? find_held_lock+0x2d/0x110 [ 1861.876640][T32052] mem_cgroup_out_of_memory+0x206/0x270 [ 1861.882238][T32052] ? mem_cgroup_margin+0x130/0x130 [ 1861.887379][T32052] ? lock_downgrade+0x690/0x690 [ 1861.892281][T32052] try_charge_memcg+0xf9b/0x13b0 [ 1861.897263][T32052] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1861.903282][T32052] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1861.909038][T32052] ? lock_downgrade+0x690/0x690 [ 1861.913927][T32052] ? lock_downgrade+0x690/0x690 [ 1861.918811][T32052] ? rcu_read_unlock+0x9/0x60 [ 1861.923542][T32052] obj_cgroup_charge+0x2af/0x5e0 [ 1861.928525][T32052] ? sk_prot_alloc+0x5f/0x290 [ 1861.933241][T32052] kmem_cache_alloc+0xb1/0x3b0 [ 1861.938034][T32052] ? inet_create+0x324/0xfa0 [ 1861.942658][T32052] sk_prot_alloc+0x5f/0x290 [ 1861.947204][T32052] sk_alloc+0x3a/0x7f0 [ 1861.951301][T32052] inet_create+0x399/0xfa0 [ 1861.955756][T32052] __sock_create+0x380/0x850 [ 1861.960386][T32052] __sys_socket+0x133/0x250 [ 1861.964925][T32052] ? __sys_socket_file+0x1d0/0x1d0 [ 1861.970083][T32052] __x64_sys_socket+0x73/0xb0 [ 1861.974801][T32052] do_syscall_64+0x39/0xb0 [ 1861.979263][T32052] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1861.985203][T32052] RIP: 0033:0x7f9f8f08d7e7 [ 1861.989643][T32052] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1862.009282][T32052] RSP: 002b:00007ffdb5971488 EFLAGS: 00000206 ORIG_RAX: 0000000000000029 [ 1862.017725][T32052] RAX: ffffffffffffffda RBX: 00007ffdb5971bf0 RCX: 00007f9f8f08d7e7 [ 1862.025811][T32052] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 1862.033804][T32052] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffdb5971a00 [ 1862.041796][T32052] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000032 [ 1862.049788][T32052] R13: 00000000001c617f R14: 0000000000000012 R15: 00007ffdb5971c30 [ 1862.057797][T32052] [ 1862.096584][T32112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1862.192211][T27855] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1862.254171][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1862.281583][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1862.289585][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1862.359734][T27855] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1862.436849][T32105] 8021q: adding VLAN 0 to HW filter on device team0 [ 1862.508693][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1862.537309][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1862.624135][T27855] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1862.707057][T18508] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1862.719427][T18508] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1862.726777][T32052] memory: usage 8288kB, limit 0kB, failcnt 681 [ 1862.735926][T18508] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1862.743754][T18508] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1862.758172][T32116] veth0_vlan: entered promiscuous mode [ 1862.764190][T18508] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1862.783484][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1862.792690][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1862.804081][T21106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1862.811282][T21106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1862.819609][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1862.828997][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1862.838303][T21106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1862.845494][T21106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1862.853614][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1862.862879][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1862.871583][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1862.897023][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1862.912149][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1862.920186][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1862.942071][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1862.994058][T32116] veth1_vlan: entered promiscuous mode [ 1863.011365][T32052] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1863.018305][T32052] Memory cgroup stats for /syz3: [ 1863.018556][T32052] anon 36864 [ 1863.018556][T32052] file 8347648 [ 1863.018556][T32052] kernel 98304 [ 1863.018556][T32052] kernel_stack 0 [ 1863.018556][T32052] pagetables 8192 [ 1863.018556][T32052] sec_pagetables 0 [ 1863.018556][T32052] percpu 64 [ 1863.018556][T32052] sock 0 [ 1863.018556][T32052] vmalloc 0 [ 1863.018556][T32052] shmem 8347648 [ 1863.018556][T32052] zswap 0 [ 1863.018556][T32052] zswapped 0 [ 1863.018556][T32052] file_mapped 245760 [ 1863.018556][T32052] file_dirty 0 [ 1863.018556][T32052] file_writeback 0 [ 1863.018556][T32052] swapcached 0 [ 1863.018556][T32052] anon_thp 0 [ 1863.018556][T32052] file_thp 0 [ 1863.018556][T32052] shmem_thp 0 [ 1863.018556][T32052] inactive_anon 245760 [ 1863.018556][T32052] active_anon 8138752 [ 1863.018556][T32052] inactive_file 0 [ 1863.018556][T32052] active_file 0 [ 1863.018556][T32052] unevictable 0 [ 1863.018556][T32052] slab_reclaimable 31224 [ 1863.018556][T32052] slab_unreclaimable 44984 [ 1863.018556][T32052] slab 76208 [ 1863.018556][T32052] workingset_refault_anon 0 [ 1863.018556][T32052] workingset_refault_file 0 [ 1863.018556][T32052] workingset_activate_anon 0 [ 1863.018556][T32052] workingset_activate_file 0 [ 1863.018556][T32052] workingset_restore_anon 0 [ 1863.018556][T32052] workingset_restore_file 0 [ 1863.018556][T32052] workingset_nodereclaim 0 [ 1863.018556][T32052] pgscan 208 [ 1863.018556][T32052] pgsteal 99 [ 1863.018556][T32052] pgscan_kswapd 0 [ 1863.018556][T32052] pgscan_direct 208 [ 1863.018556][T32052] pgscan_khugepaged 0 [ 1863.018556][T32052] pgsteal_kswapd 0 [ 1863.018556][T32052] pgsteal_direct 99 [ 1863.018556][T32052] pgsteal_khugepaged 0 [ 1863.018556][T32052] pgfault 37854 [ 1863.018556][T32052] pgmajfault 0 [ 1863.018556][T32052] pgrefill 475 [ 1863.018556][T32052] pgactivate 89 [ 1863.018556][T32052] pgdeactivate 0 [ 1863.018556][T32052] pglazyfree 0 [ 1863.018556][T32052] pglazyfreed 0 [ 1863.018556][T32052] zswpin 0 [ 1863.018556][T32052] zswpout 0 [ 1863.018556][T32052] thp_fault_alloc 0 [ 1863.256882][T32105] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1863.282344][T32105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1863.301007][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1863.318420][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1863.331050][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1863.341415][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1863.350258][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1863.359364][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1863.368984][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1863.377765][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1863.387611][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1863.396909][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1863.440336][T32052] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=32052,uid=0 [ 1863.460508][T32116] veth0_macvtap: entered promiscuous mode [ 1863.495565][T32052] Memory cgroup out of memory: Killed process 32052 (syz-executor.3) total-vm:50576kB, anon-rss:360kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1863.501453][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1863.531837][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1863.540144][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1863.550015][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1863.623776][T32116] veth1_macvtap: entered promiscuous mode [ 1863.631681][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1863.640349][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1863.650721][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1863.659325][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1863.815509][T32112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1863.856737][T32116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1863.895298][T32116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1863.923860][T32116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1863.939218][T32116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 03:36:03 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1863.969771][T32116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1864.014624][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1864.035331][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1864.068287][T32116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1864.119325][T32116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 03:36:03 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1864.170192][T32116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1864.181322][T32116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1864.194707][T32116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1864.242036][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1864.262879][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1864.295838][T32116] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.314951][T32116] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.349246][T32116] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.400096][T32116] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.521873][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1864.531044][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1864.719876][T32105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1864.829959][T18508] Bluetooth: hci1: command 0x0409 tx timeout [ 1864.896517][ T5909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1864.934647][ T5909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1864.975916][T32434] chnl_net:caif_netlink_parms(): no params data found [ 1864.998148][T12339] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1865.007343][T12339] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1865.018038][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1865.025800][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1865.033995][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1865.054292][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1865.234682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1865.252467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1865.329106][T32434] bridge0: port 1(bridge_slave_0) entered blocking state [ 1865.345131][T32434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1865.367309][T32434] bridge_slave_0: entered allmulticast mode [ 1865.382463][T32434] bridge_slave_0: entered promiscuous mode [ 1865.393785][ T5909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1865.422983][ T5909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1865.463367][T32434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1865.481060][T32434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1865.490015][T32434] bridge_slave_1: entered allmulticast mode [ 1865.504667][T32434] bridge_slave_1: entered promiscuous mode [ 1865.521121][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1865.531113][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1865.552256][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1865.576264][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1865.593601][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1865.701597][T32112] veth0_vlan: entered promiscuous mode [ 1865.729602][T32434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1865.771724][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1865.780678][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1865.802538][T32112] veth1_vlan: entered promiscuous mode 03:36:05 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1865.943723][T32434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1866.002378][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1866.011036][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 03:36:05 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1866.051893][T32105] veth0_vlan: entered promiscuous mode [ 1866.083891][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1866.094575][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1866.172048][T27855] hsr_slave_0: left promiscuous mode [ 1866.182092][T27855] hsr_slave_1: left promiscuous mode [ 1866.202526][T27855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1866.210123][T27855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1866.230009][T27855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1866.239439][T27855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1866.293573][T27855] bridge_slave_1: left allmulticast mode [ 1866.299289][T27855] bridge_slave_1: left promiscuous mode [ 1866.321448][T27855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1866.330298][T27855] bridge_slave_0: left allmulticast mode [ 1866.340338][T27855] bridge_slave_0: left promiscuous mode [ 1866.355867][T27855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1866.385770][T27855] veth1_macvtap: left promiscuous mode [ 1866.396260][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1866.406658][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1866.414783][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1866.424431][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1866.432074][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1866.439402][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1866.458189][T27855] veth0_macvtap: left promiscuous mode [ 1866.466576][T27855] veth1_vlan: left promiscuous mode [ 1866.473582][T27855] veth0_vlan: left promiscuous mode [ 1866.779283][T27855] team0 (unregistering): Port device team_slave_1 removed [ 1866.797119][T27855] team0 (unregistering): Port device team_slave_0 removed [ 1866.814302][T27855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1866.835211][T27855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1866.921232][T18508] Bluetooth: hci1: command 0x041b tx timeout [ 1866.940709][T27855] bond0 (unregistering): Released all slaves [ 1867.009100][T32112] veth0_macvtap: entered promiscuous mode [ 1867.061441][T18508] Bluetooth: hci2: command 0x0409 tx timeout [ 1867.089396][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1867.098859][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1867.114216][T32112] veth1_macvtap: entered promiscuous mode [ 1867.131177][T32105] veth1_vlan: entered promiscuous mode [ 1867.144054][T32434] team0: Port device team_slave_0 added [ 1867.171113][T32434] team0: Port device team_slave_1 added [ 1867.183308][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1867.302391][T32112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1867.314993][T32112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1867.325706][T32112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1867.336981][T32112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1867.348752][T32112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1867.383189][T32105] veth0_macvtap: entered promiscuous mode [ 1867.390484][T32434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1867.401295][T32434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1867.428429][T32434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1867.441126][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1867.457896][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1867.467295][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1867.476836][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1867.486812][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1867.497662][T32112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1867.516997][T32112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1867.530118][T32112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1867.548223][T32112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1867.582316][T32112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1867.602598][T32105] veth1_macvtap: entered promiscuous mode [ 1867.632820][T32434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1867.640543][T32434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1867.674240][T32434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1867.690423][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1867.699431][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1867.708714][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1867.835646][T32112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1867.857862][T32112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1867.871946][T32112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1867.880854][T32112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1867.923593][T32434] hsr_slave_0: entered promiscuous mode [ 1867.932425][T32434] hsr_slave_1: entered promiscuous mode [ 1868.006531][T32105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1868.033289][T32105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1868.051353][T32105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1868.080800][T32105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1868.109293][T32105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1868.124680][T32105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1868.143169][T32105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1868.205671][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1868.220466][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1868.234040][T32469] chnl_net:caif_netlink_parms(): no params data found [ 1868.255784][T32105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1868.273241][T32105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1868.287321][T32105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1868.307164][T32105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1868.319722][T32105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1868.334416][T32105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1868.352166][T32105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1868.404509][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1868.426918][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1868.511691][T18508] Bluetooth: hci5: command 0x0409 tx timeout [ 1868.563511][T32105] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1868.601318][T32105] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1868.610110][T32105] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1868.649337][T32105] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1868.981493][T18508] Bluetooth: hci1: command 0x040f tx timeout [ 1869.070935][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1869.101757][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1869.138807][T32469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1869.146719][T18508] Bluetooth: hci2: command 0x041b tx timeout [ 1869.155880][T32469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1869.181529][T32469] bridge_slave_0: entered allmulticast mode [ 1869.188740][T32469] bridge_slave_0: entered promiscuous mode [ 1869.227564][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1869.261394][T32507] chnl_net:caif_netlink_parms(): no params data found [ 1869.291826][T32469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1869.299010][T32469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1869.331661][T32469] bridge_slave_1: entered allmulticast mode [ 1869.338869][T32469] bridge_slave_1: entered promiscuous mode [ 1869.396433][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1869.445579][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1869.525095][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1869.828043][T32469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1869.875381][T20447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1869.888152][T20447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1870.164798][T32469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1870.347049][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1870.473028][T32568] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1870.503233][T32568] CPU: 1 PID: 32568 Comm: syz-executor.4 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1870.513481][T32568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1870.523594][T32568] Call Trace: [ 1870.526917][T32568] [ 1870.529892][T32568] dump_stack_lvl+0x136/0x150 [ 1870.534630][T32568] dump_header+0x10a/0xd70 [ 1870.539125][T32568] oom_kill_process+0x25d/0x600 [ 1870.544207][T32568] out_of_memory+0x35c/0x1660 [ 1870.548978][T32568] ? oom_killer_disable+0x2b0/0x2b0 [ 1870.554271][T32568] mem_cgroup_out_of_memory+0x206/0x270 [ 1870.559889][T32568] ? mem_cgroup_margin+0x130/0x130 [ 1870.565091][T32568] memory_max_write+0x2f9/0x3c0 [ 1870.570101][T32568] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1870.576239][T32568] ? lock_sync+0x190/0x190 [ 1870.580732][T32568] cgroup_file_write+0x1e2/0x7b0 [ 1870.585736][T32568] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1870.591968][T32568] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1870.597512][T32568] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1870.602953][T32568] kernfs_fop_write_iter+0x3f1/0x600 [ 1870.608313][T32568] vfs_write+0x9ee/0xe10 [ 1870.612656][T32568] ? kernel_write+0x670/0x670 [ 1870.617494][T32568] ? __fget_files+0x26a/0x480 [ 1870.622255][T32568] ksys_write+0x12b/0x250 [ 1870.626654][T32568] ? __ia32_sys_read+0xb0/0xb0 [ 1870.631491][T32568] ? syscall_enter_from_user_mode+0x26/0x80 [ 1870.637474][T32568] do_syscall_64+0x39/0xb0 [ 1870.641961][T32568] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1870.647937][T32568] RIP: 0033:0x7fec1f68c169 [ 1870.652400][T32568] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1870.672071][T32568] RSP: 002b:00007fec20349168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1870.680564][T32568] RAX: ffffffffffffffda RBX: 00007fec1f7abf80 RCX: 00007fec1f68c169 [ 1870.688581][T32568] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 1870.696611][T32568] RBP: 00007fec1f6e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1870.704639][T32568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1870.712671][T32568] R13: 00007ffe1ff5556f R14: 00007fec20349300 R15: 0000000000022000 [ 1870.720731][T32568] [ 1870.743292][T18508] Bluetooth: hci5: command 0x041b tx timeout [ 1870.756157][T32568] memory: usage 8572kB, limit 0kB, failcnt 1021 [ 1870.788629][T32568] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1870.809110][T32568] Memory cgroup stats for /syz4: [ 1870.809393][T32568] anon 114688 [ 1870.809393][T32568] file 8355840 [ 1870.809393][T32568] kernel 294912 [ 1870.809393][T32568] kernel_stack 65536 [ 1870.809393][T32568] pagetables 77824 [ 1870.809393][T32568] sec_pagetables 0 [ 1870.809393][T32568] percpu 64 [ 1870.809393][T32568] sock 0 [ 1870.809393][T32568] vmalloc 0 [ 1870.809393][T32568] shmem 8351744 [ 1870.809393][T32568] zswap 0 [ 1870.809393][T32568] zswapped 0 [ 1870.809393][T32568] file_mapped 225280 [ 1870.809393][T32568] file_dirty 0 [ 1870.809393][T32568] file_writeback 0 [ 1870.809393][T32568] swapcached 0 [ 1870.809393][T32568] anon_thp 0 [ 1870.809393][T32568] file_thp 0 [ 1870.809393][T32568] shmem_thp 0 [ 1870.809393][T32568] inactive_anon 16384 [ 1870.809393][T32568] active_anon 8450048 [ 1870.809393][T32568] inactive_file 4096 [ 1870.809393][T32568] active_file 0 [ 1870.809393][T32568] unevictable 0 [ 1870.809393][T32568] slab_reclaimable 49736 [ 1870.809393][T32568] slab_unreclaimable 74136 [ 1870.809393][T32568] slab 123872 [ 1870.809393][T32568] workingset_refault_anon 0 [ 1870.809393][T32568] workingset_refault_file 0 [ 1870.809393][T32568] workingset_activate_anon 0 [ 1870.809393][T32568] workingset_activate_file 0 [ 1870.809393][T32568] workingset_restore_anon 0 [ 1870.809393][T32568] workingset_restore_file 0 [ 1870.809393][T32568] workingset_nodereclaim 0 [ 1870.809393][T32568] pgscan 472 [ 1870.809393][T32568] pgsteal 89 [ 1870.809393][T32568] pgscan_kswapd 0 [ 1870.809393][T32568] pgscan_direct 472 [ 1870.809393][T32568] pgscan_khugepaged 0 [ 1870.809393][T32568] pgsteal_kswapd 0 [ 1870.809393][T32568] pgsteal_direct 89 [ 1870.809393][T32568] pgsteal_khugepaged 0 [ 1870.809393][T32568] pgfault 52483 [ 1870.809393][T32568] pgmajfault 0 [ 1870.809393][T32568] pgrefill 2546 [ 1870.809393][T32568] pgactivate 187 [ 1870.809393][T32568] pgdeactivate 0 [ 1870.809393][T32568] pglazyfree 0 [ 1870.809393][T32568] pglazyfreed 0 [ 1870.809393][T32568] zswpin 0 [ 1870.809393][T32568] zswpout 0 [ 1870.809393][T32568] thp_fault_alloc 0 [ 1871.071233][T18508] Bluetooth: hci1: command 0x0419 tx timeout [ 1871.221697][T18508] Bluetooth: hci2: command 0x040f tx timeout [ 1871.281076][T32568] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=32567,uid=0 [ 1871.343556][T32568] Memory cgroup out of memory: Killed process 32568 (syz-executor.4) total-vm:54548kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1871.478516][T32507] bridge0: port 1(bridge_slave_0) entered blocking state [ 1871.487775][T32507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1871.501053][T32507] bridge_slave_0: entered allmulticast mode [ 1871.517491][T32507] bridge_slave_0: entered promiscuous mode [ 1871.532162][T32507] bridge0: port 2(bridge_slave_1) entered blocking state [ 1871.539333][T32507] bridge0: port 2(bridge_slave_1) entered disabled state [ 1871.556031][T32507] bridge_slave_1: entered allmulticast mode [ 1871.567817][T32507] bridge_slave_1: entered promiscuous mode [ 1871.586441][T32469] team0: Port device team_slave_0 added [ 1871.778866][T32469] team0: Port device team_slave_1 added [ 1871.803866][T32507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1871.820448][T19199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1871.851388][T19199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1871.874079][T32507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1871.923241][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1872.020094][T32469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1872.028753][T32469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1872.068728][T32469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1872.123227][T32507] team0: Port device team_slave_0 added [ 1872.222652][T27855] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1872.296642][T32469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1872.310676][T32469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1872.408970][T32469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1872.499681][T32507] team0: Port device team_slave_1 added [ 1872.532168][T27855] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1872.586049][T32592] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1872.598289][T32592] CPU: 1 PID: 32592 Comm: syz-executor.5 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1872.608440][T32592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1872.618542][T32592] Call Trace: [ 1872.621844][T32592] [ 1872.624796][T32592] dump_stack_lvl+0x136/0x150 [ 1872.629510][T32592] dump_header+0x10a/0xd70 [ 1872.633982][T32592] oom_kill_process+0x25d/0x600 [ 1872.639232][T32592] out_of_memory+0x35c/0x1660 [ 1872.643967][T32592] ? oom_killer_disable+0x2b0/0x2b0 [ 1872.649217][T32592] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1872.655446][T32592] mem_cgroup_out_of_memory+0x206/0x270 [ 1872.661125][T32592] ? mem_cgroup_margin+0x130/0x130 [ 1872.666300][T32592] memory_max_write+0x2f9/0x3c0 [ 1872.671202][T32592] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1872.677356][T32592] ? mark_held_locks+0x9f/0xe0 [ 1872.682175][T32592] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1872.688384][T32592] cgroup_file_write+0x1e2/0x7b0 [ 1872.693361][T32592] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1872.699473][T32592] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1872.704887][T32592] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1872.710288][T32592] kernfs_fop_write_iter+0x3f1/0x600 [ 1872.715617][T32592] vfs_write+0x9ee/0xe10 [ 1872.719908][T32592] ? kernel_write+0x670/0x670 [ 1872.724629][T32592] ? __fget_files+0x26a/0x480 [ 1872.729364][T32592] ksys_write+0x12b/0x250 [ 1872.733743][T32592] ? __ia32_sys_read+0xb0/0xb0 [ 1872.738640][T32592] ? syscall_enter_from_user_mode+0x30/0x80 [ 1872.744576][T32592] do_syscall_64+0x39/0xb0 [ 1872.749024][T32592] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1872.754985][T32592] RIP: 0033:0x7f870ea8c169 [ 1872.759428][T32592] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1872.779075][T32592] RSP: 002b:00007f870f784168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1872.787537][T32592] RAX: ffffffffffffffda RBX: 00007f870ebabf80 RCX: 00007f870ea8c169 [ 1872.795562][T32592] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 1872.803558][T32592] RBP: 00007f870eae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1872.811556][T32592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1872.819556][T32592] R13: 00007fff2ac57b5f R14: 00007f870f784300 R15: 0000000000022000 [ 1872.827572][T32592] [ 1872.833396][T18508] Bluetooth: hci5: command 0x040f tx timeout [ 1872.891796][T32592] memory: usage 596kB, limit 0kB, failcnt 2287 [ 1872.931567][T32592] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1872.939402][T32592] Memory cgroup stats for /syz5: [ 1872.967704][T32592] anon 110592 [ 1872.967704][T32592] file 229376 [ 1872.967704][T32592] kernel 262144 [ 1872.967704][T32592] kernel_stack 65536 [ 1872.967704][T32592] pagetables 77824 [ 1872.967704][T32592] sec_pagetables 0 [ 1872.967704][T32592] percpu 64 [ 1872.967704][T32592] sock 0 [ 1872.967704][T32592] vmalloc 0 [ 1872.967704][T32592] shmem 229376 [ 1872.967704][T32592] zswap 0 [ 1872.967704][T32592] zswapped 0 [ 1872.967704][T32592] file_mapped 221184 [ 1872.967704][T32592] file_dirty 0 [ 1872.967704][T32592] file_writeback 0 [ 1872.967704][T32592] swapcached 0 [ 1872.967704][T32592] anon_thp 0 [ 1872.967704][T32592] file_thp 0 [ 1872.967704][T32592] shmem_thp 0 [ 1872.967704][T32592] inactive_anon 0 [ 1872.967704][T32592] active_anon 339968 [ 1872.967704][T32592] inactive_file 0 [ 1872.967704][T32592] active_file 0 [ 1872.967704][T32592] unevictable 0 [ 1872.967704][T32592] slab_reclaimable 16032 [ 1872.967704][T32592] slab_unreclaimable 74136 [ 1872.967704][T32592] slab 90168 [ 1872.967704][T32592] workingset_refault_anon 0 [ 1872.967704][T32592] workingset_refault_file 0 [ 1872.967704][T32592] workingset_activate_anon 0 [ 1872.967704][T32592] workingset_activate_file 0 [ 1872.967704][T32592] workingset_restore_anon 0 [ 1872.967704][T32592] workingset_restore_file 0 [ 1872.967704][T32592] workingset_nodereclaim 0 [ 1872.967704][T32592] pgscan 117 [ 1872.967704][T32592] pgsteal 13 [ 1872.967704][T32592] pgscan_kswapd 0 [ 1872.967704][T32592] pgscan_direct 117 [ 1872.967704][T32592] pgscan_khugepaged 0 [ 1872.967704][T32592] pgsteal_kswapd 0 [ 1872.967704][T32592] pgsteal_direct 13 [ 1872.967704][T32592] pgsteal_khugepaged 0 [ 1872.967704][T32592] pgfault 9653 [ 1872.967704][T32592] pgmajfault 0 [ 1872.967704][T32592] pgrefill 301 [ 1872.967704][T32592] pgactivate 104 [ 1872.967704][T32592] pgdeactivate 0 [ 1872.967704][T32592] pglazyfree 0 [ 1872.967704][T32592] pglazyfreed 0 [ 1872.967704][T32592] zswpin 0 [ 1872.967704][T32592] zswpout 0 [ 1872.967704][T32592] thp_fault_alloc 0 [ 1873.226024][T32507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1873.235460][T32507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1873.283668][T32592] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=32105,uid=0 [ 1873.301294][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 1873.309661][T32507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1873.316616][T32592] Memory cgroup out of memory: Killed process 32105 (syz-executor.5) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1873.364982][T32469] hsr_slave_0: entered promiscuous mode [ 1873.373117][T32469] hsr_slave_1: entered promiscuous mode [ 1873.391361][T32469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1873.399037][T32469] Cannot create hsr debugfs directory [ 1873.432785][T27855] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1873.455560][T32507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1873.471287][T32507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1873.506888][T32507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1873.521154][T32434] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1873.609168][T27855] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1873.637672][T32434] netdevsim netdevsim1 netdevsim1: renamed from eth1 03:36:13 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0x0, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:36:13 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:36:13 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1873.684097][T32434] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1873.720118][T32434] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1873.773967][T32507] hsr_slave_0: entered promiscuous mode [ 1873.778072][T32112] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 1873.811895][T32507] hsr_slave_1: entered promiscuous mode [ 1873.829175][T32507] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1873.830410][T32112] CPU: 0 PID: 32112 Comm: syz-executor.4 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1873.843523][T32507] Cannot create hsr debugfs directory [ 1873.846846][T32112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1873.846871][T32112] Call Trace: [ 1873.846881][T32112] [ 1873.868631][T32112] dump_stack_lvl+0x136/0x150 [ 1873.873379][T32112] dump_header+0x10a/0xd70 [ 1873.877981][T32112] oom_kill_process+0x25d/0x600 [ 1873.882921][T32112] out_of_memory+0x35c/0x1660 [ 1873.887684][T32112] ? find_held_lock+0x2d/0x110 [ 1873.892522][T32112] ? oom_killer_disable+0x2b0/0x2b0 [ 1873.897806][T32112] ? rcu_read_unlock+0x9/0x60 [ 1873.902568][T32112] ? find_held_lock+0x2d/0x110 [ 1873.907402][T32112] mem_cgroup_out_of_memory+0x206/0x270 [ 1873.913018][T32112] ? mem_cgroup_margin+0x130/0x130 [ 1873.918194][T32112] ? lock_downgrade+0x690/0x690 [ 1873.923133][T32112] try_charge_memcg+0xf9b/0x13b0 03:36:13 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0x0, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1873.928147][T32112] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1873.934202][T32112] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1873.939984][T32112] ? lock_downgrade+0x690/0x690 [ 1873.944996][T32112] ? lock_downgrade+0x690/0x690 [ 1873.949917][T32112] ? rcu_read_unlock+0x9/0x60 [ 1873.954781][T32112] obj_cgroup_charge+0x2af/0x5e0 [ 1873.959804][T32112] ? copy_process+0x3c0/0x7580 [ 1873.964641][T32112] kmem_cache_alloc_node+0xa8/0x3e0 [ 1873.969921][T32112] copy_process+0x3c0/0x7580 [ 1873.974580][T32112] ? _raw_spin_unlock+0x28/0x40 [ 1873.979505][T32112] ? wp_page_reuse+0x197/0x570 [ 1873.984349][T32112] ? do_wp_page+0x4be/0x3570 [ 1873.989026][T32112] ? pidfd_prepare+0x80/0x80 [ 1873.993802][T32112] ? lock_sync+0x190/0x190 [ 1873.998287][T32112] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1874.003731][T32112] ? do_raw_spin_lock+0x124/0x2b0 [ 1874.008816][T32112] ? spin_bug+0x1c0/0x1c0 [ 1874.013206][T32112] ? lock_downgrade+0x690/0x690 [ 1874.018132][T32112] kernel_clone+0xeb/0x890 [ 1874.022623][T32112] ? create_io_thread+0xe0/0xe0 [ 1874.027541][T32112] ? vm_iomap_memory+0x190/0x190 [ 1874.032553][T32112] ? find_held_lock+0x2d/0x110 [ 1874.037365][T32112] __do_sys_clone+0xba/0x100 [ 1874.041995][T32112] ? kernel_clone+0x890/0x890 [ 1874.046726][T32112] ? syscall_enter_from_user_mode+0x26/0x80 [ 1874.052663][T32112] do_syscall_64+0x39/0xb0 [ 1874.057110][T32112] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1874.063044][T32112] RIP: 0033:0x7fec1f689e9b [ 1874.067478][T32112] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1874.087134][T32112] RSP: 002b:00007ffe1ff557b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1874.095588][T32112] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fec1f689e9b [ 1874.103761][T32112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1874.111756][T32112] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556bda400 [ 1874.119834][T32112] R10: 0000555556bda6d0 R11: 0000000000000246 R12: 0000000000000001 [ 1874.127829][T32112] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe1ff55890 [ 1874.135840][T32112] [ 1874.744753][T32434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1874.804903][T32112] memory: usage 8300kB, limit 0kB, failcnt 1040 [ 1874.811425][T32112] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1874.820024][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1874.829173][T32112] Memory cgroup stats for /syz4: [ 1874.829422][T32112] anon 45056 [ 1874.829422][T32112] file 8359936 [ 1874.829422][T32112] kernel 94208 [ 1874.829422][T32112] kernel_stack 0 [ 1874.829422][T32112] pagetables 8192 [ 1874.829422][T32112] sec_pagetables 0 [ 1874.829422][T32112] percpu 0 [ 1874.829422][T32112] sock 0 [ 1874.829422][T32112] vmalloc 0 [ 1874.829422][T32112] shmem 8351744 [ 1874.829422][T32112] zswap 0 [ 1874.829422][T32112] zswapped 0 [ 1874.829422][T32112] file_mapped 192512 [ 1874.829422][T32112] file_dirty 4096 [ 1874.829422][T32112] file_writeback 0 [ 1874.829422][T32112] swapcached 0 [ 1874.829422][T32112] anon_thp 0 [ 1874.829422][T32112] file_thp 0 [ 1874.829422][T32112] shmem_thp 0 [ 1874.829422][T32112] inactive_anon 8380416 [ 1874.829422][T32112] active_anon 16384 [ 1874.829422][T32112] inactive_file 0 [ 1874.829422][T32112] active_file 8192 [ 1874.829422][T32112] unevictable 0 [ 1874.829422][T32112] slab_reclaimable 43504 [ 1874.829422][T32112] slab_unreclaimable 32296 [ 1874.829422][T32112] slab 75800 [ 1874.829422][T32112] workingset_refault_anon 0 [ 1874.829422][T32112] workingset_refault_file 0 [ 1874.829422][T32112] workingset_activate_anon 0 [ 1874.829422][T32112] workingset_activate_file 0 [ 1874.829422][T32112] workingset_restore_anon 0 [ 1874.829422][T32112] workingset_restore_file 0 [ 1874.829422][T32112] workingset_nodereclaim 0 [ 1874.829422][T32112] pgscan 508 [ 1874.829422][T32112] pgsteal 89 [ 1874.829422][T32112] pgscan_kswapd 0 [ 1874.829422][T32112] pgscan_direct 508 [ 1874.829422][T32112] pgscan_khugepaged 0 [ 1874.829422][T32112] pgsteal_kswapd 0 [ 1874.829422][T32112] pgsteal_direct 89 [ 1874.829422][T32112] pgsteal_khugepaged 0 [ 1874.829422][T32112] pgfault 52493 [ 1874.829422][T32112] pgmajfault 0 [ 1874.829422][T32112] pgrefill 2546 [ 1874.829422][T32112] pgactivate 223 [ 1874.829422][T32112] pgdeactivate 0 [ 1874.829422][T32112] pglazyfree 0 [ 1874.829422][T32112] pglazyfreed 0 [ 1874.829422][T32112] zswpin 0 [ 1874.829422][T32112] zswpout 0 [ 1874.829422][T32112] thp_fault_alloc 0 [ 1875.017634][T18508] Bluetooth: hci5: command 0x0419 tx timeout [ 1875.024180][T32112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=32112,uid=0 [ 1875.032241][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1875.052809][T32434] 8021q: adding VLAN 0 to HW filter on device team0 [ 1875.055520][T32112] Memory cgroup out of memory: Killed process 32112 (syz-executor.4) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1875.106929][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1875.129431][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1875.138613][T18437] bridge0: port 1(bridge_slave_0) entered blocking state [ 1875.145761][T18437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1875.202175][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1875.210387][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1875.220053][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1875.229560][ T5105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1875.236768][ T5105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1875.245286][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1875.262034][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1875.272863][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1875.284008][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1875.317033][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1875.325171][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1875.334864][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1875.344254][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1875.353128][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1875.361670][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1875.370126][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1875.402569][T32434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1875.741663][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1875.749259][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1875.774767][T32434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1875.847880][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1875.859243][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1875.921450][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1875.930019][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1875.954762][T27855] hsr_slave_0: left promiscuous mode [ 1875.969262][T27855] hsr_slave_1: left promiscuous mode [ 1875.975864][T27855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1876.010180][T27855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1876.043751][T27855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1876.051322][T27855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1876.073480][T27855] bridge_slave_1: left allmulticast mode [ 1876.079194][T27855] bridge_slave_1: left promiscuous mode [ 1876.105017][T27855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1876.113917][T27855] bridge_slave_0: left allmulticast mode [ 1876.119637][T27855] bridge_slave_0: left promiscuous mode [ 1876.147839][T27855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1876.191856][T18508] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1876.201970][T18508] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1876.209582][T27855] veth1_macvtap: left promiscuous mode [ 1876.209634][T18508] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1876.224240][T27855] veth0_macvtap: left promiscuous mode [ 1876.230061][T27855] veth1_vlan: left promiscuous mode [ 1876.230127][T18508] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1876.244984][T18508] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1876.252340][T18508] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1876.252551][T27855] veth0_vlan: left promiscuous mode [ 1876.686882][T27855] team0 (unregistering): Port device team_slave_1 removed [ 1876.720119][T27855] team0 (unregistering): Port device team_slave_0 removed [ 1876.749672][T27855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1876.779689][T27855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1876.880570][T27855] bond0 (unregistering): Released all slaves [ 1876.930153][T32434] veth0_vlan: entered promiscuous mode [ 1876.954917][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1876.963240][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1877.006560][T32434] veth1_vlan: entered promiscuous mode [ 1877.095348][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1877.112552][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1877.131495][T32434] veth0_macvtap: entered promiscuous mode [ 1877.141255][T32434] veth1_macvtap: entered promiscuous mode [ 1877.206814][T32434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1877.217603][T32434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1877.228317][T32434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1877.250241][T32434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1877.261011][T32434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1877.276246][T32434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1877.290669][T32434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1877.301076][T32434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1877.312469][T32434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1877.322812][T32434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1877.338296][T32434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1877.350055][T32434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1877.371340][T32434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1877.394597][T32434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1877.410843][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1877.422885][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1877.432081][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1877.440989][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1877.450474][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1877.460078][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1877.483529][T32434] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1877.493516][T32434] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1877.502777][T32434] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1877.511899][T32434] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1877.672990][T19199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1877.701168][T19199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1877.710164][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1877.723699][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1877.732583][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1877.753362][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1877.897964][T32655] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1877.922814][T32655] CPU: 1 PID: 32655 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1877.932978][T32655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1877.943093][T32655] Call Trace: [ 1877.946419][T32655] [ 1877.949397][T32655] dump_stack_lvl+0x136/0x150 [ 1877.954135][T32655] dump_header+0x10a/0xd70 [ 1877.958621][T32655] oom_kill_process+0x25d/0x600 [ 1877.963530][T32655] out_of_memory+0x35c/0x1660 [ 1877.968284][T32655] ? oom_killer_disable+0x2b0/0x2b0 [ 1877.973557][T32655] ? kernfs_notify+0x1ac/0x410 [ 1877.978372][T32655] mem_cgroup_out_of_memory+0x206/0x270 [ 1877.983963][T32655] ? mem_cgroup_margin+0x130/0x130 [ 1877.989130][T32655] memory_max_write+0x2f9/0x3c0 [ 1877.994052][T32655] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1878.000172][T32655] ? lock_sync+0x190/0x190 [ 1878.004637][T32655] cgroup_file_write+0x1e2/0x7b0 [ 1878.009608][T32655] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1878.015717][T32655] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1878.021126][T32655] ? __virt_addr_valid+0x61/0x2e0 [ 1878.026216][T32655] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1878.031629][T32655] kernfs_fop_write_iter+0x3f1/0x600 [ 1878.036983][T32655] vfs_write+0x9ee/0xe10 [ 1878.041276][T32655] ? kernel_write+0x670/0x670 [ 1878.046007][T32655] ? __fget_files+0x26a/0x480 [ 1878.050744][T32655] ksys_write+0x12b/0x250 [ 1878.055123][T32655] ? __ia32_sys_read+0xb0/0xb0 [ 1878.059959][T32655] ? syscall_enter_from_user_mode+0x26/0x80 [ 1878.065913][T32655] do_syscall_64+0x39/0xb0 [ 1878.070449][T32655] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1878.076399][T32655] RIP: 0033:0x7fa8e2a8c169 [ 1878.080843][T32655] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1878.100571][T32655] RSP: 002b:00007fa8e385e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1878.109030][T32655] RAX: ffffffffffffffda RBX: 00007fa8e2babf80 RCX: 00007fa8e2a8c169 [ 1878.117049][T32655] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 1878.125049][T32655] RBP: 00007fa8e2ae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1878.133047][T32655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1878.141070][T32655] R13: 00007ffd8bad531f R14: 00007fa8e385e300 R15: 0000000000022000 [ 1878.149104][T32655] [ 1878.294651][T32655] memory: usage 10624kB, limit 0kB, failcnt 785 [ 1878.314687][T32655] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1878.337440][T32655] Memory cgroup stats for /syz1: [ 1878.337734][T32655] anon 114688 [ 1878.337734][T32655] file 10461184 [ 1878.337734][T32655] kernel 294912 [ 1878.337734][T32655] kernel_stack 65536 [ 1878.337734][T32655] pagetables 81920 [ 1878.337734][T32655] sec_pagetables 0 [ 1878.337734][T32655] percpu 64 [ 1878.337734][T32655] sock 0 [ 1878.337734][T32655] vmalloc 0 [ 1878.337734][T32655] shmem 10457088 [ 1878.337734][T32655] zswap 0 [ 1878.337734][T32655] zswapped 0 [ 1878.337734][T32655] file_mapped 262144 [ 1878.337734][T32655] file_dirty 4096 [ 1878.337734][T32655] file_writeback 0 [ 1878.337734][T32655] swapcached 0 [ 1878.337734][T32655] anon_thp 0 [ 1878.337734][T32655] file_thp 0 [ 1878.337734][T32655] shmem_thp 0 [ 1878.337734][T32655] inactive_anon 2097152 [ 1878.337734][T32655] active_anon 8474624 [ 1878.337734][T32655] inactive_file 0 [ 1878.337734][T32655] active_file 4096 [ 1878.337734][T32655] unevictable 0 [ 1878.337734][T32655] slab_reclaimable 46176 [ 1878.337734][T32655] slab_unreclaimable 72840 [ 1878.337734][T32655] slab 119016 [ 1878.337734][T32655] workingset_refault_anon 0 [ 1878.337734][T32655] workingset_refault_file 3 [ 1878.337734][T32655] workingset_activate_anon 0 [ 1878.337734][T32655] workingset_activate_file 0 [ 1878.337734][T32655] workingset_restore_anon 0 [ 1878.337734][T32655] workingset_restore_file 1 [ 1878.337734][T32655] workingset_nodereclaim 0 [ 1878.337734][T32655] pgscan 159 [ 1878.337734][T32655] pgsteal 58 [ 1878.337734][T32655] pgscan_kswapd 0 [ 1878.337734][T32655] pgscan_direct 159 [ 1878.337734][T32655] pgscan_khugepaged 0 [ 1878.337734][T32655] pgsteal_kswapd 0 [ 1878.337734][T32655] pgsteal_direct 58 [ 1878.337734][T32655] pgsteal_khugepaged 0 [ 1878.337734][T32655] pgfault 37124 [ 1878.337734][T32655] pgmajfault 0 [ 1878.337734][T32655] pgrefill 833 [ 1878.337734][T32655] pgactivate 101 [ 1878.337734][T32655] pgdeactivate 0 [ 1878.337734][T32655] pglazyfree 0 [ 1878.337734][T32655] pglazyfreed 0 [ 1878.337734][T32655] zswpin 0 [ 1878.337734][T32655] zswpout 0 [ 1878.337734][T32655] thp_fault_alloc 0 [ 1878.361491][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 1878.538090][T32655] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=32434,uid=0 [ 1878.554050][T32655] Memory cgroup out of memory: Killed process 32434 (syz-executor.1) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 03:36:19 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 03:36:19 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:36:19 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1880.303961][T27855] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1880.582069][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 1880.635717][T27855] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1880.693214][T32469] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1880.716325][T32469] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1880.912237][T27855] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1880.960290][T32469] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1881.045695][T32617] chnl_net:caif_netlink_parms(): no params data found [ 1881.065623][T32469] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1881.106387][T27855] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1881.563456][T32617] bridge0: port 1(bridge_slave_0) entered blocking state [ 1881.570646][T32617] bridge0: port 1(bridge_slave_0) entered disabled state [ 1881.594417][T32617] bridge_slave_0: entered allmulticast mode [ 1881.611403][T32617] bridge_slave_0: entered promiscuous mode [ 1881.663710][T32469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1881.722587][T27855] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1881.764061][T32617] bridge0: port 2(bridge_slave_1) entered blocking state [ 1881.791528][T32617] bridge0: port 2(bridge_slave_1) entered disabled state [ 1881.798791][T32617] bridge_slave_1: entered allmulticast mode [ 1881.827582][T32617] bridge_slave_1: entered promiscuous mode [ 1881.882006][T32469] 8021q: adding VLAN 0 to HW filter on device team0 [ 1881.942155][T27855] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1882.006233][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1882.014385][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1882.102703][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1882.127343][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1882.136153][T32209] bridge0: port 1(bridge_slave_0) entered blocking state [ 1882.143364][T32209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1882.152587][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1882.162039][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1882.170767][T32209] bridge0: port 2(bridge_slave_1) entered blocking state [ 1882.177960][T32209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1882.188990][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1882.228892][T27855] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1882.316961][T32617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1882.352329][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1882.352397][T18508] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1882.367010][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1882.368756][T18508] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1882.385378][T18508] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1882.393214][T18508] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1882.400507][T18508] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1882.402106][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1882.448823][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1882.467689][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1882.479998][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1882.513726][T27855] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1882.570046][T32469] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1882.592286][T32469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1882.616375][T32617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1882.647372][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1882.655847][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1882.664213][T12339] Bluetooth: hci0: command 0x040f tx timeout [ 1882.682269][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1882.694276][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1882.703294][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1882.732812][T32617] team0: Port device team_slave_0 added [ 1882.751336][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1882.786450][T32617] team0: Port device team_slave_1 added [ 1882.853068][T32617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1882.860091][T32617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1882.921038][T32617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1882.966924][T32617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1882.998037][T32617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1883.070318][T32617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1883.195164][T27855] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1883.233195][T32617] hsr_slave_0: entered promiscuous mode [ 1883.252522][T32617] hsr_slave_1: entered promiscuous mode [ 1883.260240][T32617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1883.281462][T32617] Cannot create hsr debugfs directory [ 1883.317993][T27855] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1883.350077][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1883.362036][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1883.405647][T32469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1883.430214][T27855] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1883.504688][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1883.522123][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1883.558629][T27855] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1883.632640][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1883.652331][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1883.671647][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1883.679734][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1883.698630][T32469] veth0_vlan: entered promiscuous mode [ 1883.749701][T32469] veth1_vlan: entered promiscuous mode [ 1883.921694][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1883.932445][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1883.949072][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1883.972245][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1883.983627][T32469] veth0_macvtap: entered promiscuous mode [ 1884.005837][T32469] veth1_macvtap: entered promiscuous mode [ 1884.034329][T32469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1884.045382][T32469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.059104][T32469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1884.070493][T32469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.080829][T32469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1884.091795][T32469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.102306][T32469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1884.113187][T32469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.126746][T32469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1884.135853][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1884.153985][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1884.170261][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1884.181083][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1884.202758][T32469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1884.226139][T32469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.245377][T32469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1884.260130][T32469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.280923][T32469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1884.300611][T32469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.310969][T32469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1884.331740][T32469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.344148][T32469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1884.355616][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1884.365840][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1884.379282][T32469] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.390303][T32469] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.400169][T32469] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.409982][T32469] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.501574][T12339] Bluetooth: hci1: command 0x0409 tx timeout [ 1884.645146][T26995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1884.667500][T26995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1884.734141][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1884.751602][T12339] Bluetooth: hci0: command 0x0419 tx timeout [ 1884.804627][T19199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1884.820058][T19199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1884.893081][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1885.307398][ T315] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1885.322094][ T315] CPU: 1 PID: 315 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1885.332085][ T315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1885.342198][ T315] Call Trace: [ 1885.345529][ T315] [ 1885.348498][ T315] dump_stack_lvl+0x136/0x150 [ 1885.353241][ T315] dump_header+0x10a/0xd70 [ 1885.357764][ T315] oom_kill_process+0x25d/0x600 [ 1885.362761][ T315] out_of_memory+0x35c/0x1660 [ 1885.367520][ T315] ? lockdep_hardirqs_on+0x7d/0x100 [ 1885.372813][ T315] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1885.379102][ T315] ? oom_killer_disable+0x2b0/0x2b0 [ 1885.384373][ T315] mem_cgroup_out_of_memory+0x206/0x270 [ 1885.389981][ T315] ? mem_cgroup_margin+0x130/0x130 [ 1885.395166][ T315] memory_max_write+0x2f9/0x3c0 [ 1885.400072][ T315] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1885.406275][ T315] ? cgroup_file_write+0x192/0x7b0 [ 1885.411426][ T315] cgroup_file_write+0x1e2/0x7b0 [ 1885.416397][ T315] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1885.422592][ T315] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1885.428011][ T315] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1885.433417][ T315] kernfs_fop_write_iter+0x3f1/0x600 [ 1885.438748][ T315] vfs_write+0x9ee/0xe10 [ 1885.443150][ T315] ? kernel_write+0x670/0x670 [ 1885.447959][ T315] ? __fget_files+0x26a/0x480 [ 1885.452800][ T315] ksys_write+0x12b/0x250 [ 1885.457169][ T315] ? __ia32_sys_read+0xb0/0xb0 [ 1885.461982][ T315] ? syscall_enter_from_user_mode+0x30/0x80 [ 1885.467920][ T315] do_syscall_64+0x39/0xb0 [ 1885.472383][ T315] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1885.478319][ T315] RIP: 0033:0x7f8f99a8c169 [ 1885.482758][ T315] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1885.502503][ T315] RSP: 002b:00007f8f9a7e0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1885.510947][ T315] RAX: ffffffffffffffda RBX: 00007f8f99babf80 RCX: 00007f8f99a8c169 [ 1885.518982][ T315] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 1885.527003][ T315] RBP: 00007f8f99ae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1885.535032][ T315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1885.543030][ T315] R13: 00007ffe74b6086f R14: 00007f8f9a7e0300 R15: 0000000000022000 [ 1885.551047][ T315] [ 1885.582174][ T315] memory: usage 8532kB, limit 0kB, failcnt 991 [ 1885.589379][ T315] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1885.604489][ T315] Memory cgroup stats for /syz0: [ 1885.609191][ T315] anon 114688 [ 1885.609191][ T315] file 8327168 [ 1885.609191][ T315] kernel 282624 [ 1885.609191][ T315] kernel_stack 65536 [ 1885.609191][ T315] pagetables 77824 [ 1885.609191][ T315] sec_pagetables 0 [ 1885.609191][ T315] percpu 64 [ 1885.609191][ T315] sock 0 [ 1885.609191][ T315] vmalloc 0 [ 1885.609191][ T315] shmem 8327168 [ 1885.609191][ T315] zswap 0 [ 1885.609191][ T315] zswapped 0 [ 1885.609191][ T315] file_mapped 229376 [ 1885.609191][ T315] file_dirty 0 [ 1885.609191][ T315] file_writeback 0 [ 1885.609191][ T315] swapcached 0 [ 1885.609191][ T315] anon_thp 0 [ 1885.609191][ T315] file_thp 0 [ 1885.609191][ T315] shmem_thp 0 [ 1885.609191][ T315] inactive_anon 8327168 [ 1885.609191][ T315] active_anon 114688 [ 1885.609191][ T315] inactive_file 0 [ 1885.609191][ T315] active_file 0 [ 1885.609191][ T315] unevictable 0 [ 1885.609191][ T315] slab_reclaimable 41120 [ 1885.609191][ T315] slab_unreclaimable 74136 [ 1885.609191][ T315] slab 115256 [ 1885.609191][ T315] workingset_refault_anon 0 [ 1885.609191][ T315] workingset_refault_file 0 [ 1885.609191][ T315] workingset_activate_anon 0 [ 1885.609191][ T315] workingset_activate_file 0 [ 1885.609191][ T315] workingset_restore_anon 0 [ 1885.609191][ T315] workingset_restore_file 0 [ 1885.609191][ T315] workingset_nodereclaim 0 [ 1885.609191][ T315] pgscan 193 [ 1885.609191][ T315] pgsteal 68 [ 1885.609191][ T315] pgscan_kswapd 0 [ 1885.609191][ T315] pgscan_direct 193 [ 1885.609191][ T315] pgscan_khugepaged 0 [ 1885.609191][ T315] pgsteal_kswapd 0 [ 1885.609191][ T315] pgsteal_direct 68 [ 1885.609191][ T315] pgsteal_khugepaged 0 [ 1885.609191][ T315] pgfault 37392 [ 1885.609191][ T315] pgmajfault 0 [ 1885.609191][ T315] pgrefill 1411 [ 1885.609191][ T315] pgactivate 115 [ 1885.609191][ T315] pgdeactivate 0 [ 1885.609191][ T315] pglazyfree 0 [ 1885.609191][ T315] pglazyfreed 0 [ 1885.609191][ T315] zswpin 0 [ 1885.609191][ T315] zswpout 0 [ 1885.609191][ T315] thp_fault_alloc 0 [ 1885.808951][ T315] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=314,uid=0 03:36:25 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:36:25 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1885.824777][ T315] Memory cgroup out of memory: Killed process 314 (syz-executor.0) total-vm:54548kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1885.969009][T32469] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1885.983385][T32469] CPU: 1 PID: 32469 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1885.993714][T32469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1886.003813][T32469] Call Trace: [ 1886.007116][T32469] [ 1886.010067][T32469] dump_stack_lvl+0x136/0x150 [ 1886.014783][T32469] dump_header+0x10a/0xd70 [ 1886.019247][T32469] oom_kill_process+0x25d/0x600 [ 1886.024176][T32469] out_of_memory+0x35c/0x1660 [ 1886.028900][T32469] ? find_held_lock+0x2d/0x110 [ 1886.033698][T32469] ? oom_killer_disable+0x2b0/0x2b0 [ 1886.038959][T32469] ? rcu_read_unlock+0x9/0x60 [ 1886.043692][T32469] ? find_held_lock+0x2d/0x110 [ 1886.048576][T32469] mem_cgroup_out_of_memory+0x206/0x270 [ 1886.054155][T32469] ? mem_cgroup_margin+0x130/0x130 [ 1886.059294][T32469] ? lock_downgrade+0x690/0x690 [ 1886.064193][T32469] try_charge_memcg+0xf9b/0x13b0 [ 1886.069173][T32469] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1886.075200][T32469] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1886.081395][T32469] ? lock_downgrade+0x690/0x690 [ 1886.086286][T32469] ? lock_downgrade+0x690/0x690 [ 1886.091192][T32469] __memcg_kmem_charge_page+0x16e/0x3c0 [ 1886.096786][T32469] __alloc_pages+0x1f3/0x4a0 [ 1886.101426][T32469] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1886.108248][T32469] ? find_held_lock+0x2d/0x110 [ 1886.113072][T32469] ? lock_downgrade+0x690/0x690 [ 1886.117959][T32469] ? do_raw_spin_lock+0x124/0x2b0 [ 1886.123140][T32469] alloc_pages+0x1aa/0x270 [ 1886.127597][T32469] __pmd_alloc+0x3f/0x5d0 [ 1886.131968][T32469] ? __pud_alloc+0xe4/0x180 [ 1886.136518][T32469] copy_page_range+0x22e3/0x3930 [ 1886.141507][T32469] ? mas_wr_modify+0x999/0x16d0 [ 1886.146414][T32469] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 1886.152535][T32469] ? mas_store+0x275/0x3a0 [ 1886.156994][T32469] ? handle_mm_fault+0x9c0/0x9c0 [ 1886.161973][T32469] ? down_write+0x14f/0x200 [ 1886.166532][T32469] dup_mmap+0xcfd/0x1480 [ 1886.170821][T32469] ? replace_mm_exe_file+0x4b0/0x4b0 [ 1886.176148][T32469] ? lock_downgrade+0x690/0x690 [ 1886.181043][T32469] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1886.186927][T32469] ? __raw_spin_lock_init+0x3a/0x110 [ 1886.192254][T32469] ? mm_init+0x9e6/0xd50 [ 1886.196537][T32469] copy_process+0x4611/0x7580 [ 1886.201263][T32469] ? _raw_spin_unlock+0x28/0x40 [ 1886.206155][T32469] ? wp_page_reuse+0x197/0x570 [ 1886.210969][T32469] ? pidfd_prepare+0x80/0x80 [ 1886.215595][T32469] ? lock_sync+0x190/0x190 [ 1886.220059][T32469] ? do_raw_spin_lock+0x124/0x2b0 [ 1886.225149][T32469] ? spin_bug+0x1c0/0x1c0 [ 1886.229540][T32469] ? lock_downgrade+0x690/0x690 [ 1886.234454][T32469] kernel_clone+0xeb/0x890 [ 1886.238930][T32469] ? create_io_thread+0xe0/0xe0 [ 1886.243843][T32469] ? vm_iomap_memory+0x190/0x190 [ 1886.248876][T32469] ? find_held_lock+0x2d/0x110 [ 1886.253684][T32469] __do_sys_clone+0xba/0x100 [ 1886.258312][T32469] ? kernel_clone+0x890/0x890 [ 1886.263043][T32469] ? syscall_enter_from_user_mode+0x26/0x80 [ 1886.269023][T32469] do_syscall_64+0x39/0xb0 [ 1886.273484][T32469] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1886.279423][T32469] RIP: 0033:0x7f8f99a89e9b [ 1886.283883][T32469] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1886.303540][T32469] RSP: 002b:00007ffe74b60ab0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1886.311987][T32469] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8f99a89e9b [ 1886.320003][T32469] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1886.328019][T32469] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555557241400 [ 1886.336055][T32469] R10: 00005555572416d0 R11: 0000000000000246 R12: 0000000000000001 [ 1886.344085][T32469] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe74b60b90 [ 1886.352113][T32469] [ 1886.367023][T32469] memory: usage 8344kB, limit 0kB, failcnt 1018 [ 1886.376938][T32469] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1886.400889][T32469] Memory cgroup stats for /syz0: [ 1886.401154][T32469] anon 40960 [ 1886.401154][T32469] file 8327168 [ 1886.401154][T32469] kernel 176128 [ 1886.401154][T32469] kernel_stack 32768 [ 1886.401154][T32469] pagetables 16384 [ 1886.401154][T32469] sec_pagetables 0 [ 1886.401154][T32469] percpu 128 [ 1886.401154][T32469] sock 0 [ 1886.401154][T32469] vmalloc 0 [ 1886.401154][T32469] shmem 8327168 [ 1886.401154][T32469] zswap 0 [ 1886.401154][T32469] zswapped 0 [ 1886.401154][T32469] file_mapped 221184 [ 1886.401154][T32469] file_dirty 0 [ 1886.401154][T32469] file_writeback 0 [ 1886.401154][T32469] swapcached 0 [ 1886.401154][T32469] anon_thp 0 [ 1886.401154][T32469] file_thp 0 [ 1886.401154][T32469] shmem_thp 0 [ 1886.401154][T32469] inactive_anon 8327168 [ 1886.401154][T32469] active_anon 40960 [ 1886.401154][T32469] inactive_file 0 [ 1886.401154][T32469] active_file 0 [ 1886.401154][T32469] unevictable 0 [ 1886.401154][T32469] slab_reclaimable 32080 [ 1886.401154][T32469] slab_unreclaimable 67144 [ 1886.401154][T32469] slab 99224 [ 1886.401154][T32469] workingset_refault_anon 0 [ 1886.401154][T32469] workingset_refault_file 0 [ 1886.401154][T32469] workingset_activate_anon 0 [ 1886.401154][T32469] workingset_activate_file 0 [ 1886.401154][T32469] workingset_restore_anon 0 [ 1886.401154][T32469] workingset_restore_file 0 [ 1886.401154][T32469] workingset_nodereclaim 0 [ 1886.401154][T32469] pgscan 193 [ 1886.401154][T32469] pgsteal 68 [ 1886.401154][T32469] pgscan_kswapd 0 [ 1886.401154][T32469] pgscan_direct 193 [ 1886.401154][T32469] pgscan_khugepaged 0 [ 1886.401154][T32469] pgsteal_kswapd 0 [ 1886.401154][T32469] pgsteal_direct 68 [ 1886.401154][T32469] pgsteal_khugepaged 0 [ 1886.401154][T32469] pgfault 37406 [ 1886.401154][T32469] pgmajfault 0 [ 1886.401154][T32469] pgrefill 1411 [ 1886.401154][T32469] pgactivate 115 [ 1886.401154][T32469] pgdeactivate 0 [ 1886.401154][T32469] pglazyfree 0 [ 1886.401154][T32469] pglazyfreed 0 [ 1886.401154][T32469] zswpin 0 [ 1886.401154][T32469] zswpout 0 [ 1886.401154][T32469] thp_fault_alloc 0 [ 1886.592829][T12339] Bluetooth: hci1: command 0x041b tx timeout [ 1886.593253][T32469] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=32469,uid=0 [ 1886.615284][T32469] Memory cgroup out of memory: Killed process 32469 (syz-executor.0) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1887.100472][T27855] hsr_slave_0: left promiscuous mode [ 1887.107318][T27855] hsr_slave_1: left promiscuous mode [ 1887.113596][T27855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1887.121067][T27855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1887.140558][T27855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1887.150714][T27855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1887.169095][T27855] bridge_slave_1: left allmulticast mode [ 1887.177482][T27855] bridge_slave_1: left promiscuous mode [ 1887.189538][T27855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1887.208083][T27855] bridge_slave_0: left allmulticast mode [ 1887.216463][T27855] bridge_slave_0: left promiscuous mode [ 1887.229174][T27855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1887.255671][T27855] hsr_slave_0: left promiscuous mode [ 1887.268344][T27855] hsr_slave_1: left promiscuous mode [ 1887.277361][T27855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1887.293933][T27855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1887.310786][T27855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1887.320926][T27855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1887.339304][T27855] bridge_slave_1: left allmulticast mode [ 1887.347709][T27855] bridge_slave_1: left promiscuous mode [ 1887.360084][T27855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1887.378216][T27855] bridge_slave_0: left allmulticast mode [ 1887.389344][T27855] bridge_slave_0: left promiscuous mode [ 1887.404865][T27855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1887.427599][T27855] hsr_slave_0: left promiscuous mode [ 1887.439095][T27855] hsr_slave_1: left promiscuous mode [ 1887.449179][T27855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1887.471390][T27855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1887.480994][T27855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1887.500664][T27855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1887.519022][T27855] bridge_slave_1: left allmulticast mode [ 1887.524990][T27855] bridge_slave_1: left promiscuous mode [ 1887.530741][T27855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1887.539754][T27855] bridge_slave_0: left allmulticast mode [ 1887.545836][T27855] bridge_slave_0: left promiscuous mode [ 1887.551749][T27855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1887.573071][T27855] veth1_macvtap: left promiscuous mode [ 1887.578650][T27855] veth0_macvtap: left promiscuous mode [ 1887.584545][T27855] veth1_vlan: left promiscuous mode [ 1887.589895][T27855] veth0_vlan: left promiscuous mode [ 1887.597893][T27855] veth1_macvtap: left promiscuous mode [ 1887.603918][T27855] veth0_macvtap: left promiscuous mode [ 1887.609544][T27855] veth1_vlan: left promiscuous mode [ 1887.615102][T27855] veth0_vlan: left promiscuous mode [ 1887.623606][T27855] veth1_macvtap: left promiscuous mode [ 1887.629175][T27855] veth0_macvtap: left promiscuous mode [ 1887.634914][T27855] veth1_vlan: left promiscuous mode [ 1887.640257][T27855] veth0_vlan: left promiscuous mode [ 1888.504821][T27855] team0 (unregistering): Port device team_slave_1 removed [ 1888.521733][T27855] team0 (unregistering): Port device team_slave_0 removed [ 1888.537060][T27855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1888.554449][T27855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1888.661818][T12339] Bluetooth: hci1: command 0x040f tx timeout [ 1888.732683][T27855] bond0 (unregistering): Released all slaves [ 1889.040906][T27855] team0 (unregistering): Port device team_slave_1 removed [ 1889.073994][T27855] team0 (unregistering): Port device team_slave_0 removed [ 1889.100058][T27855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1889.127671][T27855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1889.290107][T27855] bond0 (unregistering): Released all slaves [ 1889.519903][T27855] team0 (unregistering): Port device team_slave_1 removed [ 1889.555102][T27855] team0 (unregistering): Port device team_slave_0 removed [ 1889.580061][T27855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1889.607634][T27855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1889.777982][T27855] bond0 (unregistering): Released all slaves [ 1890.751357][T12339] Bluetooth: hci1: command 0x0419 tx timeout [ 1892.394945][T27855] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1892.514170][T27855] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1892.643416][T27855] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1892.763027][T27855] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1892.880273][T32735] chnl_net:caif_netlink_parms(): no params data found [ 1893.040201][T32735] bridge0: port 1(bridge_slave_0) entered blocking state [ 1893.047580][T32735] bridge0: port 1(bridge_slave_0) entered disabled state [ 1893.055382][T32735] bridge_slave_0: entered allmulticast mode [ 1893.062688][T32735] bridge_slave_0: entered promiscuous mode [ 1893.087851][T32735] bridge0: port 2(bridge_slave_1) entered blocking state [ 1893.095198][T32735] bridge0: port 2(bridge_slave_1) entered disabled state [ 1893.102522][T32735] bridge_slave_1: entered allmulticast mode [ 1893.109655][T32735] bridge_slave_1: entered promiscuous mode [ 1893.149281][T32735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1893.161466][T32735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1893.195948][T32735] team0: Port device team_slave_0 added [ 1893.213058][T32735] team0: Port device team_slave_1 added [ 1893.241535][T32735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1893.248553][T32735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1893.276749][T32735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1893.309422][T32735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1893.316633][T32735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1893.343999][T32735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1893.396953][T32735] hsr_slave_0: entered promiscuous mode [ 1893.403671][T32735] hsr_slave_1: entered promiscuous mode [ 1893.787372][T27855] hsr_slave_0: left promiscuous mode [ 1893.799908][T27855] hsr_slave_1: left promiscuous mode [ 1893.806847][T27855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1893.821042][T27855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1893.833108][T27855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1893.840597][T27855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1893.857565][T27855] bridge_slave_1: left allmulticast mode [ 1893.866210][T27855] bridge_slave_1: left promiscuous mode [ 1893.876095][T27855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1893.887927][T27855] bridge_slave_0: left allmulticast mode [ 1893.897771][T27855] bridge_slave_0: left promiscuous mode [ 1893.906548][T27855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1893.924951][T27855] veth1_macvtap: left promiscuous mode [ 1893.930569][T27855] veth0_macvtap: left promiscuous mode [ 1893.945584][T27855] veth1_vlan: left promiscuous mode [ 1893.958565][T27855] veth0_vlan: left promiscuous mode [ 1894.229726][T27855] team0 (unregistering): Port device team_slave_1 removed [ 1894.246928][T27855] team0 (unregistering): Port device team_slave_0 removed [ 1894.260194][T27855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1894.278483][T27855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1894.345922][T27855] bond0 (unregistering): Released all slaves [ 1896.209511][T32617] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1896.233851][T32617] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1896.342735][T32507] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1896.359265][T32617] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1896.370670][T32507] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1896.449395][T32617] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1896.459574][T32507] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1896.547000][T32507] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1896.842823][T32617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1896.881944][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1896.889810][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1896.906013][T32617] 8021q: adding VLAN 0 to HW filter on device team0 [ 1896.951776][T32507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1896.959056][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1896.969876][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1896.979110][T32209] bridge0: port 1(bridge_slave_0) entered blocking state [ 1896.986308][T32209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1897.034254][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1897.045288][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1897.054902][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1897.064214][ T4744] bridge0: port 2(bridge_slave_1) entered blocking state [ 1897.071497][ T4744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1897.079917][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1897.089340][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1897.097807][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1897.113312][T32507] 8021q: adding VLAN 0 to HW filter on device team0 [ 1897.120411][T32735] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1897.143036][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1897.153431][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1897.162786][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1897.177590][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1897.186786][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1897.201640][T32735] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1897.222815][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1897.232942][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1897.241914][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1897.257988][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1897.267046][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1897.281700][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1897.288865][ T5093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1897.303769][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1897.320815][T32617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1897.334867][T32617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1897.343657][T32735] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1897.365466][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1897.374620][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1897.383751][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1897.393833][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1897.402902][ T4744] bridge0: port 2(bridge_slave_1) entered blocking state [ 1897.410056][ T4744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1897.424301][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1897.437280][T32735] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1897.474289][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1897.485172][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1897.495013][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1897.505416][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1897.545865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1897.564551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1897.574643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1897.583752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1897.600847][T32507] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1897.622732][T32507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1897.644597][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1897.655304][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1897.765599][T32735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1897.814789][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1897.824515][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1897.846028][T32735] 8021q: adding VLAN 0 to HW filter on device team0 [ 1897.884124][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1897.899553][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1897.909194][T32209] bridge0: port 1(bridge_slave_0) entered blocking state [ 1897.916412][T32209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1897.930304][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1897.937961][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1897.977300][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1897.986189][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1898.012683][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1898.031628][T22809] bridge0: port 2(bridge_slave_1) entered blocking state [ 1898.038825][T22809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1898.061907][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1898.071071][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1898.096060][T32617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1898.121735][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1898.130994][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1898.173419][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1898.199548][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1898.240937][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1898.250310][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1898.260305][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1898.269738][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1898.278827][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1898.287744][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1898.295791][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1898.306179][T32735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1898.327111][T32507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1898.398375][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1898.422799][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1898.438565][T32507] veth0_vlan: entered promiscuous mode [ 1898.454805][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1898.472907][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1898.497786][T32507] veth1_vlan: entered promiscuous mode [ 1898.518571][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1898.532412][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1898.540427][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1898.572246][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1898.599325][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1898.609230][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1898.639345][T32507] veth0_macvtap: entered promiscuous mode [ 1898.667811][T32507] veth1_macvtap: entered promiscuous mode [ 1898.696469][T32507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1898.707215][T32507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1898.733917][T32507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1898.755630][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1898.765533][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1898.792084][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1898.801014][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1898.835317][T32507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1898.846963][T32507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1898.858371][T32507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1898.882456][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1898.892357][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1898.903985][T32507] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.913860][T32507] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.922768][T32507] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.931570][T32507] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.960423][T32735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1898.976372][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1898.986251][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1898.997353][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1899.008353][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1899.051829][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1899.060354][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1899.087241][T32617] veth0_vlan: entered promiscuous mode [ 1899.097922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1899.108154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1899.160608][T32617] veth1_vlan: entered promiscuous mode [ 1899.171532][T19199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1899.179729][T19199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1899.224010][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1899.235340][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1899.255681][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1899.287757][T32617] veth0_macvtap: entered promiscuous mode [ 1899.296905][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1899.306985][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1899.321885][T32617] veth1_macvtap: entered promiscuous mode [ 1899.338706][ T5909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1899.348989][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1899.359785][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1899.368157][ T5909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1899.385370][T32617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1899.418680][T32617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1899.432095][T32617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1899.443067][T32617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1899.455047][T32617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1899.471839][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1899.480450][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1899.502550][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1899.521650][T32617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1899.540185][T32617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1899.552221][T32617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1899.563178][T32617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1899.586949][T32617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1899.638988][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1899.649068][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1899.670542][T32617] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1899.681454][T32617] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1899.752378][T32617] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1899.801772][T32617] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1899.966911][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1900.011063][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1900.139495][T32735] veth0_vlan: entered promiscuous mode [ 1900.139547][T27855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1900.147508][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1900.162516][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1900.179119][T32735] veth1_vlan: entered promiscuous mode [ 1900.202379][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1900.210520][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1900.225944][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1900.249307][T27855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1900.264648][ T656] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1900.275603][ T656] CPU: 0 PID: 656 Comm: syz-executor.3 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1900.285557][ T656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1900.295653][ T656] Call Trace: [ 1900.298956][ T656] [ 1900.301958][ T656] dump_stack_lvl+0x136/0x150 [ 1900.306679][ T656] dump_header+0x10a/0xd70 [ 1900.311183][ T656] oom_kill_process+0x25d/0x600 [ 1900.316105][ T656] out_of_memory+0x35c/0x1660 [ 1900.320876][ T656] ? oom_killer_disable+0x2b0/0x2b0 [ 1900.326131][ T656] ? mark_held_locks+0x9f/0xe0 [ 1900.330961][ T656] mem_cgroup_out_of_memory+0x206/0x270 [ 1900.336541][ T656] ? mem_cgroup_margin+0x130/0x130 [ 1900.341693][ T656] memory_max_write+0x2f9/0x3c0 [ 1900.346578][ T656] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1900.352679][ T656] ? lock_sync+0x190/0x190 [ 1900.357127][ T656] cgroup_file_write+0x1e2/0x7b0 [ 1900.362091][ T656] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1900.368213][ T656] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1900.373717][ T656] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1900.379119][ T656] kernfs_fop_write_iter+0x3f1/0x600 [ 1900.384474][ T656] vfs_write+0x9ee/0xe10 [ 1900.388778][ T656] ? kernel_write+0x670/0x670 [ 1900.393514][ T656] ? __fdget_pos+0x31/0x100 [ 1900.398068][ T656] ksys_write+0x12b/0x250 [ 1900.402455][ T656] ? __ia32_sys_read+0xb0/0xb0 [ 1900.407254][ T656] ? syscall_enter_from_user_mode+0x30/0x80 [ 1900.413185][ T656] do_syscall_64+0x39/0xb0 [ 1900.417640][ T656] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1900.423586][ T656] RIP: 0033:0x7f704128c169 [ 1900.428131][ T656] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1900.447795][ T656] RSP: 002b:00007f7041fb9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1900.456323][ T656] RAX: ffffffffffffffda RBX: 00007f70413abf80 RCX: 00007f704128c169 [ 1900.464313][ T656] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 1900.472315][ T656] RBP: 00007f70412e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1900.480326][ T656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1900.488317][ T656] R13: 00007ffc8c04229f R14: 00007f7041fb9300 R15: 0000000000022000 [ 1900.496357][ T656] [ 1900.522524][ T656] memory: usage 8560kB, limit 0kB, failcnt 681 [ 1900.528785][ T656] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1900.536351][ T656] Memory cgroup stats for /syz3: [ 1900.536628][ T656] anon 114688 [ 1900.536628][ T656] file 8347648 [ 1900.536628][ T656] kernel 282624 [ 1900.536628][ T656] kernel_stack 65536 [ 1900.536628][ T656] pagetables 77824 [ 1900.536628][ T656] sec_pagetables 0 [ 1900.536628][ T656] percpu 64 [ 1900.536628][ T656] sock 0 [ 1900.536628][ T656] vmalloc 0 [ 1900.536628][ T656] shmem 8347648 [ 1900.536628][ T656] zswap 0 [ 1900.536628][ T656] zswapped 0 [ 1900.536628][ T656] file_mapped 274432 [ 1900.536628][ T656] file_dirty 0 [ 1900.536628][ T656] file_writeback 0 [ 1900.536628][ T656] swapcached 0 [ 1900.536628][ T656] anon_thp 0 [ 1900.536628][ T656] file_thp 0 [ 1900.536628][ T656] shmem_thp 0 [ 1900.536628][ T656] inactive_anon 245760 [ 1900.536628][ T656] active_anon 8216576 [ 1900.536628][ T656] inactive_file 0 [ 1900.536628][ T656] active_file 0 [ 1900.536628][ T656] unevictable 0 [ 1900.536628][ T656] slab_reclaimable 36152 [ 1900.536628][ T656] slab_unreclaimable 74784 [ 1900.536628][ T656] slab 110936 [ 1900.536628][ T656] workingset_refault_anon 0 [ 1900.536628][ T656] workingset_refault_file 0 [ 1900.536628][ T656] workingset_activate_anon 0 [ 1900.536628][ T656] workingset_activate_file 0 [ 1900.536628][ T656] workingset_restore_anon 0 [ 1900.536628][ T656] workingset_restore_file 0 [ 1900.536628][ T656] workingset_nodereclaim 0 [ 1900.536628][ T656] pgscan 208 [ 1900.536628][ T656] pgsteal 99 [ 1900.536628][ T656] pgscan_kswapd 0 [ 1900.536628][ T656] pgscan_direct 208 [ 1900.536628][ T656] pgscan_khugepaged 0 [ 1900.536628][ T656] pgsteal_kswapd 0 [ 1900.536628][ T656] pgsteal_direct 99 [ 1900.536628][ T656] pgsteal_khugepaged 0 [ 1900.536628][ T656] pgfault 37919 [ 1900.536628][ T656] pgmajfault 0 [ 1900.536628][ T656] pgrefill 475 [ 1900.536628][ T656] pgactivate 89 [ 1900.536628][ T656] pgdeactivate 0 [ 1900.536628][ T656] pglazyfree 0 [ 1900.536628][ T656] pglazyfreed 0 [ 1900.536628][ T656] zswpin 0 [ 1900.536628][ T656] zswpout 0 [ 1900.536628][ T656] thp_fault_alloc 0 [ 1900.727639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1900.729842][ T656] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 1900.738280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1900.744540][ T656] ,cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=655,uid=0 03:36:40 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:36:40 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 03:36:40 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:36:40 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1900.775114][T19199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1900.778237][ T656] Memory cgroup out of memory: Killed process 655 (syz-executor.3) total-vm:54548kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 1900.785552][T19199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1900.815054][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1900.863036][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1900.877252][T32507] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1900.893868][T32507] CPU: 0 PID: 32507 Comm: syz-executor.3 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1900.904032][T32507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1900.914233][T32507] Call Trace: [ 1900.917552][T32507] [ 1900.920525][T32507] dump_stack_lvl+0x136/0x150 [ 1900.925260][T32507] dump_header+0x10a/0xd70 [ 1900.929750][T32507] oom_kill_process+0x25d/0x600 [ 1900.934670][T32507] out_of_memory+0x35c/0x1660 [ 1900.939506][T32507] ? find_held_lock+0x2d/0x110 [ 1900.944330][T32507] ? oom_killer_disable+0x2b0/0x2b0 [ 1900.949598][T32507] ? rcu_read_unlock+0x9/0x60 [ 1900.954344][T32507] ? find_held_lock+0x2d/0x110 [ 1900.959166][T32507] mem_cgroup_out_of_memory+0x206/0x270 [ 1900.964770][T32507] ? mem_cgroup_margin+0x130/0x130 [ 1900.969929][T32507] ? lock_downgrade+0x690/0x690 [ 1900.974863][T32507] try_charge_memcg+0xf9b/0x13b0 [ 1900.979872][T32507] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1900.985912][T32507] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1900.991684][T32507] ? lock_downgrade+0x690/0x690 [ 1900.996593][T32507] ? lock_downgrade+0x690/0x690 [ 1901.001518][T32507] obj_cgroup_charge+0x2af/0x5e0 [ 1901.006520][T32507] ? sock_alloc_inode+0x27/0x1d0 [ 1901.011511][T32507] kmem_cache_alloc_lru+0x142/0x600 [ 1901.016773][T32507] sock_alloc_inode+0x27/0x1d0 [ 1901.021589][T32507] ? sock_free_inode+0x30/0x30 [ 1901.026402][T32507] alloc_inode+0x61/0x230 [ 1901.030782][T32507] new_inode_pseudo+0x17/0x80 [ 1901.035515][T32507] sock_alloc+0x40/0x270 [ 1901.039807][T32507] __sock_create+0xbd/0x850 [ 1901.044361][T32507] ? xfd_validate_state+0x5d/0x180 [ 1901.049530][T32507] __sys_socket+0x133/0x250 [ 1901.054088][T32507] ? __sys_socket_file+0x1d0/0x1d0 [ 1901.059296][T32507] __x64_sys_socket+0x73/0xb0 [ 1901.064031][T32507] do_syscall_64+0x39/0xb0 [ 1901.068499][T32507] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1901.074462][T32507] RIP: 0033:0x7f704128d7e7 [ 1901.078922][T32507] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1901.098583][T32507] RSP: 002b:00007ffc8c041e18 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 1901.107067][T32507] RAX: ffffffffffffffda RBX: 00007ffc8c042580 RCX: 00007f704128d7e7 [ 1901.115170][T32507] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 1901.123208][T32507] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffc8c042390 [ 1901.131233][T32507] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 1901.139255][T32507] R13: 00000000001cf956 R14: 0000000000000012 R15: 00007ffc8c0425c0 [ 1901.147301][T32507] [ 1901.153235][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1901.174590][T32507] memory: usage 8292kB, limit 0kB, failcnt 700 [ 1901.180871][T32507] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1901.196406][T32735] veth0_macvtap: entered promiscuous mode [ 1901.213353][T32507] Memory cgroup stats for /syz3: [ 1901.213620][T32507] anon 45056 [ 1901.213620][T32507] file 8347648 [ 1901.213620][T32507] kernel 94208 [ 1901.213620][T32507] kernel_stack 0 [ 1901.213620][T32507] pagetables 8192 [ 1901.213620][T32507] sec_pagetables 0 [ 1901.213620][T32507] percpu 64 [ 1901.213620][T32507] sock 0 [ 1901.213620][T32507] vmalloc 0 [ 1901.213620][T32507] shmem 8347648 [ 1901.213620][T32507] zswap 0 [ 1901.213620][T32507] zswapped 0 [ 1901.213620][T32507] file_mapped 245760 [ 1901.213620][T32507] file_dirty 0 [ 1901.213620][T32507] file_writeback 0 [ 1901.213620][T32507] swapcached 0 [ 1901.213620][T32507] anon_thp 0 [ 1901.213620][T32507] file_thp 0 [ 1901.213620][T32507] shmem_thp 0 [ 1901.213620][T32507] inactive_anon 245760 [ 1901.213620][T32507] active_anon 8146944 [ 1901.213620][T32507] inactive_file 0 [ 1901.213620][T32507] active_file 0 [ 1901.213620][T32507] unevictable 0 [ 1901.213620][T32507] slab_reclaimable 29680 [ 1901.213620][T32507] slab_unreclaimable 44984 [ 1901.213620][T32507] slab 74664 [ 1901.213620][T32507] workingset_refault_anon 0 [ 1901.213620][T32507] workingset_refault_file 0 [ 1901.213620][T32507] workingset_activate_anon 0 [ 1901.213620][T32507] workingset_activate_file 0 [ 1901.213620][T32507] workingset_restore_anon 0 [ 1901.213620][T32507] workingset_restore_file 0 [ 1901.213620][T32507] workingset_nodereclaim 0 [ 1901.213620][T32507] pgscan 208 [ 1901.213620][T32507] pgsteal 99 [ 1901.213620][T32507] pgscan_kswapd 0 [ 1901.213620][T32507] pgscan_direct 208 [ 1901.213620][T32507] pgscan_khugepaged 0 [ 1901.213620][T32507] pgsteal_kswapd 0 [ 1901.213620][T32507] pgsteal_direct 99 [ 1901.213620][T32507] pgsteal_khugepaged 0 [ 1901.213620][T32507] pgfault 37923 [ 1901.213620][T32507] pgmajfault 0 [ 1901.213620][T32507] pgrefill 475 [ 1901.213620][T32507] pgactivate 89 [ 1901.213620][T32507] pgdeactivate 0 [ 1901.213620][T32507] pglazyfree 0 [ 1901.213620][T32507] pglazyfreed 0 [ 1901.213620][T32507] zswpin 0 [ 1901.213620][T32507] zswpout 0 [ 1901.213620][T32507] thp_fault_alloc 0 [ 1901.422192][T32507] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=32507,uid=0 [ 1901.437985][T32735] veth1_macvtap: entered promiscuous mode [ 1901.450991][T32507] Memory cgroup out of memory: Killed process 32507 (syz-executor.3) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1901.487347][T32507] socket: no more sockets 03:36:41 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1901.564244][T32735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1901.619815][T32735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.661589][T32735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 03:36:41 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r3, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r2, 0xe, r3, 0x1) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1901.754164][T32735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.810326][T32735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1901.871310][T32735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.920301][T32735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1901.995484][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1902.012590][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1902.105394][T32735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1902.142149][ T669] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1902.178111][T32735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1902.213202][T32735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1902.231460][ T669] CPU: 0 PID: 669 Comm: syz-executor.5 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1902.241448][ T669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1902.251643][ T669] Call Trace: [ 1902.254952][ T669] [ 1902.257953][ T669] dump_stack_lvl+0x136/0x150 [ 1902.262673][ T669] dump_header+0x10a/0xd70 [ 1902.267173][ T669] oom_kill_process+0x25d/0x600 [ 1902.272093][ T669] out_of_memory+0x35c/0x1660 [ 1902.276822][ T669] ? __traceiter_irq_enable+0xa0/0xa0 [ 1902.282243][ T669] ? oom_killer_disable+0x2b0/0x2b0 [ 1902.287495][ T669] ? mark_held_locks+0x9f/0xe0 [ 1902.292396][ T669] mem_cgroup_out_of_memory+0x206/0x270 [ 1902.297984][ T669] ? mem_cgroup_margin+0x130/0x130 [ 1902.303148][ T669] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 1902.309044][ T669] memory_max_write+0x2f9/0x3c0 [ 1902.314033][ T669] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1902.320154][ T669] ? cgroup_file_write+0x8e/0x7b0 [ 1902.325225][ T669] cgroup_file_write+0x1e2/0x7b0 [ 1902.330199][ T669] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1902.336313][ T669] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1902.341747][ T669] ? __virt_addr_valid+0x61/0x2e0 [ 1902.347003][ T669] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1902.352520][ T669] kernfs_fop_write_iter+0x3f1/0x600 [ 1902.357854][ T669] vfs_write+0x9ee/0xe10 [ 1902.362142][ T669] ? kernel_write+0x670/0x670 [ 1902.366879][ T669] ? __fget_files+0x26a/0x480 [ 1902.371613][ T669] ksys_write+0x12b/0x250 [ 1902.375988][ T669] ? __ia32_sys_read+0xb0/0xb0 [ 1902.380807][ T669] ? syscall_enter_from_user_mode+0x30/0x80 [ 1902.386751][ T669] do_syscall_64+0x39/0xb0 [ 1902.391211][ T669] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1902.397153][ T669] RIP: 0033:0x7faa2b68c169 [ 1902.401682][ T669] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1902.421345][ T669] RSP: 002b:00007faa2c33a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1902.429803][ T669] RAX: ffffffffffffffda RBX: 00007faa2b7abf80 RCX: 00007faa2b68c169 [ 1902.437805][ T669] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 1902.445812][ T669] RBP: 00007faa2b6e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1902.453816][ T669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1902.461818][ T669] R13: 00007fffb1a38edf R14: 00007faa2c33a300 R15: 0000000000022000 [ 1902.469835][ T669] [ 1902.495471][T32735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1902.506188][T32735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1902.521719][T32735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1902.537503][T32735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1902.547828][ T669] memory: usage 588kB, limit 0kB, failcnt 2287 [ 1902.589426][ T669] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1902.637996][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1902.658283][ T669] Memory cgroup stats for /syz5: [ 1902.658550][ T669] anon 114688 [ 1902.658550][ T669] file 229376 [ 1902.658550][ T669] kernel 258048 [ 1902.658550][ T669] kernel_stack 65536 [ 1902.658550][ T669] pagetables 77824 [ 1902.658550][ T669] sec_pagetables 0 [ 1902.658550][ T669] percpu 64 [ 1902.658550][ T669] sock 0 [ 1902.658550][ T669] vmalloc 0 [ 1902.658550][ T669] shmem 229376 [ 1902.658550][ T669] zswap 0 [ 1902.658550][ T669] zswapped 0 [ 1902.658550][ T669] file_mapped 221184 [ 1902.658550][ T669] file_dirty 0 [ 1902.658550][ T669] file_writeback 0 [ 1902.658550][ T669] swapcached 0 [ 1902.658550][ T669] anon_thp 0 [ 1902.658550][ T669] file_thp 0 [ 1902.658550][ T669] shmem_thp 0 [ 1902.658550][ T669] inactive_anon 0 [ 1902.658550][ T669] active_anon 344064 [ 1902.658550][ T669] inactive_file 0 [ 1902.658550][ T669] active_file 0 [ 1902.658550][ T669] unevictable 0 [ 1902.658550][ T669] slab_reclaimable 15648 [ 1902.658550][ T669] slab_unreclaimable 72840 [ 1902.658550][ T669] slab 88488 [ 1902.658550][ T669] workingset_refault_anon 0 [ 1902.658550][ T669] workingset_refault_file 0 [ 1902.658550][ T669] workingset_activate_anon 0 [ 1902.658550][ T669] workingset_activate_file 0 [ 1902.658550][ T669] workingset_restore_anon 0 [ 1902.658550][ T669] workingset_restore_file 0 [ 1902.658550][ T669] workingset_nodereclaim 0 [ 1902.658550][ T669] pgscan 117 [ 1902.658550][ T669] pgsteal 13 [ 1902.658550][ T669] pgscan_kswapd 0 [ 1902.658550][ T669] pgscan_direct 117 [ 1902.658550][ T669] pgscan_khugepaged 0 [ 1902.658550][ T669] pgsteal_kswapd 0 [ 1902.658550][ T669] pgsteal_direct 13 [ 1902.658550][ T669] pgsteal_khugepaged 0 [ 1902.658550][ T669] pgfault 9719 [ 1902.658550][ T669] pgmajfault 0 [ 1902.658550][ T669] pgrefill 301 [ 1902.658550][ T669] pgactivate 104 [ 1902.658550][ T669] pgdeactivate 0 [ 1902.658550][ T669] pglazyfree 0 [ 1902.658550][ T669] pglazyfreed 0 [ 1902.658550][ T669] zswpin 0 [ 1902.658550][ T669] zswpout 0 [ 1902.658550][ T669] thp_fault_alloc 0 [ 1902.848742][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1902.864697][T32735] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.877600][T32735] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.887266][T32735] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.896397][T32735] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.995395][ T669] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=668,uid=0 [ 1903.019458][ T669] Memory cgroup out of memory: Killed process 669 (syz-executor.5) total-vm:54548kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:36:42 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0x0, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:36:42 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r3, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r2, 0xe, r3, 0x1) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1903.049326][ T5909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1903.073979][ T5909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1903.090235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1903.124883][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1903.150905][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 03:36:42 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r3, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r2, 0xe, r3, 0x1) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1903.234049][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1903.248006][T32617] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1903.276239][T32617] CPU: 1 PID: 32617 Comm: syz-executor.5 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1903.286405][T32617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1903.296515][T32617] Call Trace: [ 1903.299837][T32617] [ 1903.302812][T32617] dump_stack_lvl+0x136/0x150 [ 1903.307545][T32617] dump_header+0x10a/0xd70 [ 1903.312037][T32617] oom_kill_process+0x25d/0x600 [ 1903.316965][T32617] out_of_memory+0x35c/0x1660 [ 1903.321723][T32617] ? find_held_lock+0x2d/0x110 [ 1903.326562][T32617] ? oom_killer_disable+0x2b0/0x2b0 [ 1903.331840][T32617] ? rcu_read_unlock+0x9/0x60 [ 1903.336593][T32617] ? find_held_lock+0x2d/0x110 [ 1903.341417][T32617] mem_cgroup_out_of_memory+0x206/0x270 [ 1903.347020][T32617] ? mem_cgroup_margin+0x130/0x130 [ 1903.352196][T32617] ? lock_downgrade+0x690/0x690 [ 1903.357127][T32617] try_charge_memcg+0xf9b/0x13b0 [ 1903.362135][T32617] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1903.368176][T32617] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1903.374078][T32617] ? lock_downgrade+0x690/0x690 [ 1903.379012][T32617] ? lock_downgrade+0x690/0x690 [ 1903.383932][T32617] ? rcu_read_unlock+0x9/0x60 [ 1903.388705][T32617] obj_cgroup_charge+0x2af/0x5e0 [ 1903.393719][T32617] ? sk_prot_alloc+0x5f/0x290 [ 1903.398455][T32617] kmem_cache_alloc+0xb1/0x3b0 [ 1903.403268][T32617] ? inet_create+0x324/0xfa0 [ 1903.407915][T32617] sk_prot_alloc+0x5f/0x290 [ 1903.412486][T32617] sk_alloc+0x3a/0x7f0 [ 1903.416602][T32617] inet_create+0x399/0xfa0 [ 1903.421086][T32617] __sock_create+0x380/0x850 [ 1903.425736][T32617] __sys_socket+0x133/0x250 [ 1903.430313][T32617] ? __sys_socket_file+0x1d0/0x1d0 [ 1903.435510][T32617] __x64_sys_socket+0x73/0xb0 [ 1903.440249][T32617] do_syscall_64+0x39/0xb0 [ 1903.444721][T32617] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1903.450675][T32617] RIP: 0033:0x7faa2b68d7e7 [ 1903.455216][T32617] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1903.474893][T32617] RSP: 002b:00007fffb1a38a58 EFLAGS: 00000206 ORIG_RAX: 0000000000000029 [ 1903.483459][T32617] RAX: ffffffffffffffda RBX: 00007fffb1a391c0 RCX: 00007faa2b68d7e7 [ 1903.491504][T32617] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 1903.499643][T32617] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007fffb1a38fd0 [ 1903.507702][T32617] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000032 [ 1903.515724][T32617] R13: 00000000001d02ee R14: 0000000000000014 R15: 00007fffb1a39200 [ 1903.523763][T32617] [ 1903.533746][T32617] memory: usage 340kB, limit 0kB, failcnt 2316 [ 1903.565568][T32617] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1903.618004][T32617] Memory cgroup stats for /syz5: [ 1903.618278][T32617] anon 40960 [ 1903.618278][T32617] file 229376 [ 1903.618278][T32617] kernel 77824 [ 1903.618278][T32617] kernel_stack 0 [ 1903.618278][T32617] pagetables 8192 [ 1903.618278][T32617] sec_pagetables 0 [ 1903.618278][T32617] percpu 64 [ 1903.618278][T32617] sock 0 [ 1903.618278][T32617] vmalloc 0 [ 1903.618278][T32617] shmem 229376 [ 1903.618278][T32617] zswap 0 [ 1903.618278][T32617] zswapped 0 [ 1903.618278][T32617] file_mapped 221184 [ 1903.618278][T32617] file_dirty 0 [ 1903.618278][T32617] file_writeback 0 [ 1903.618278][T32617] swapcached 0 [ 1903.618278][T32617] anon_thp 0 [ 1903.618278][T32617] file_thp 0 [ 1903.618278][T32617] shmem_thp 0 [ 1903.618278][T32617] inactive_anon 0 [ 1903.618278][T32617] active_anon 270336 [ 1903.618278][T32617] inactive_file 0 [ 1903.618278][T32617] active_file 0 [ 1903.618278][T32617] unevictable 0 [ 1903.618278][T32617] slab_reclaimable 10336 [ 1903.618278][T32617] slab_unreclaimable 44336 [ 1903.618278][T32617] slab 54672 [ 1903.618278][T32617] workingset_refault_anon 0 [ 1903.618278][T32617] workingset_refault_file 0 [ 1903.618278][T32617] workingset_activate_anon 0 [ 1903.618278][T32617] workingset_activate_file 0 [ 1903.618278][T32617] workingset_restore_anon 0 [ 1903.618278][T32617] workingset_restore_file 0 [ 1903.618278][T32617] workingset_nodereclaim 0 [ 1903.618278][T32617] pgscan 117 [ 1903.618278][T32617] pgsteal 13 [ 1903.618278][T32617] pgscan_kswapd 0 [ 1903.618278][T32617] pgscan_direct 117 [ 1903.618278][T32617] pgscan_khugepaged 0 [ 1903.618278][T32617] pgsteal_kswapd 0 [ 1903.618278][T32617] pgsteal_direct 13 [ 1903.618278][T32617] pgsteal_khugepaged 0 [ 1903.618278][T32617] pgfault 9723 [ 1903.618278][T32617] pgmajfault 0 [ 1903.618278][T32617] pgrefill 301 [ 1903.618278][T32617] pgactivate 104 [ 1903.618278][T32617] pgdeactivate 0 [ 1903.618278][T32617] pglazyfree 0 [ 1903.618278][T32617] pglazyfreed 0 [ 1903.618278][T32617] zswpin 0 [ 1903.618278][T32617] zswpout 0 [ 1903.618278][T32617] thp_fault_alloc 0 [ 1903.867879][T32617] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=32617,uid=0 [ 1903.935392][T32617] Memory cgroup out of memory: Killed process 32617 (syz-executor.5) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1903.990464][ T696] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1904.053583][ T696] CPU: 0 PID: 696 Comm: syz-executor.4 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1904.063592][ T696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1904.073706][ T696] Call Trace: [ 1904.077026][ T696] [ 1904.080004][ T696] dump_stack_lvl+0x136/0x150 [ 1904.084750][ T696] dump_header+0x10a/0xd70 [ 1904.089247][ T696] oom_kill_process+0x25d/0x600 [ 1904.094179][ T696] out_of_memory+0x35c/0x1660 [ 1904.098953][ T696] ? oom_killer_disable+0x2b0/0x2b0 [ 1904.104227][ T696] ? kernfs_notify+0x1ac/0x410 [ 1904.109069][ T696] mem_cgroup_out_of_memory+0x206/0x270 [ 1904.115050][ T696] ? mem_cgroup_margin+0x130/0x130 [ 1904.120310][ T696] memory_max_write+0x2f9/0x3c0 [ 1904.125201][ T696] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1904.131313][ T696] ? lock_sync+0x190/0x190 [ 1904.135771][ T696] cgroup_file_write+0x1e2/0x7b0 [ 1904.140741][ T696] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1904.146847][ T696] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1904.152252][ T696] ? __virt_addr_valid+0x61/0x2e0 [ 1904.157329][ T696] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1904.162735][ T696] kernfs_fop_write_iter+0x3f1/0x600 [ 1904.168057][ T696] vfs_write+0x9ee/0xe10 [ 1904.172349][ T696] ? kernel_write+0x670/0x670 [ 1904.177073][ T696] ? __fget_files+0x26a/0x480 [ 1904.181800][ T696] ksys_write+0x12b/0x250 [ 1904.186166][ T696] ? __ia32_sys_read+0xb0/0xb0 [ 1904.190970][ T696] ? syscall_enter_from_user_mode+0x26/0x80 [ 1904.196910][ T696] do_syscall_64+0x39/0xb0 [ 1904.201357][ T696] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1904.207310][ T696] RIP: 0033:0x7f002f28c169 [ 1904.211759][ T696] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1904.231412][ T696] RSP: 002b:00007f002fff0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1904.239859][ T696] RAX: ffffffffffffffda RBX: 00007f002f3ac050 RCX: 00007f002f28c169 [ 1904.247856][ T696] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 1904.256201][ T696] RBP: 00007f002f2e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1904.264286][ T696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1904.272283][ T696] R13: 00007ffcd89b703f R14: 00007f002fff0300 R15: 0000000000022000 [ 1904.280317][ T696] [ 1904.371415][ T696] memory: usage 8656kB, limit 0kB, failcnt 1063 [ 1904.394271][ T696] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1904.415843][ T696] Memory cgroup stats for /syz4: [ 1904.416140][ T696] anon 122880 [ 1904.416140][ T696] file 8355840 [ 1904.416140][ T696] kernel 385024 [ 1904.416140][ T696] kernel_stack 131072 [ 1904.416140][ T696] pagetables 81920 [ 1904.416140][ T696] sec_pagetables 0 [ 1904.416140][ T696] percpu 64 [ 1904.416140][ T696] sock 0 [ 1904.416140][ T696] vmalloc 0 [ 1904.416140][ T696] shmem 8351744 [ 1904.416140][ T696] zswap 0 [ 1904.416140][ T696] zswapped 0 [ 1904.416140][ T696] file_mapped 225280 [ 1904.416140][ T696] file_dirty 0 [ 1904.416140][ T696] file_writeback 0 [ 1904.416140][ T696] swapcached 0 [ 1904.416140][ T696] anon_thp 0 [ 1904.416140][ T696] file_thp 0 [ 1904.416140][ T696] shmem_thp 0 [ 1904.416140][ T696] inactive_anon 8335360 [ 1904.416140][ T696] active_anon 139264 [ 1904.416140][ T696] inactive_file 4096 [ 1904.416140][ T696] active_file 0 [ 1904.416140][ T696] unevictable 0 [ 1904.416140][ T696] slab_reclaimable 49352 [ 1904.416140][ T696] slab_unreclaimable 90472 [ 1904.416140][ T696] slab 139824 [ 1904.416140][ T696] workingset_refault_anon 0 [ 1904.416140][ T696] workingset_refault_file 0 [ 1904.416140][ T696] workingset_activate_anon 0 [ 1904.416140][ T696] workingset_activate_file 0 [ 1904.416140][ T696] workingset_restore_anon 0 [ 1904.416140][ T696] workingset_restore_file 0 [ 1904.416140][ T696] workingset_nodereclaim 0 [ 1904.416140][ T696] pgscan 519 [ 1904.416140][ T696] pgsteal 90 [ 1904.416140][ T696] pgscan_kswapd 0 [ 1904.416140][ T696] pgscan_direct 519 [ 1904.416140][ T696] pgscan_khugepaged 0 [ 1904.416140][ T696] pgsteal_kswapd 0 [ 1904.416140][ T696] pgsteal_direct 90 [ 1904.416140][ T696] pgsteal_khugepaged 0 [ 1904.416140][ T696] pgfault 52557 [ 1904.416140][ T696] pgmajfault 0 [ 1904.416140][ T696] pgrefill 2564 [ 1904.416140][ T696] pgactivate 233 [ 1904.416140][ T696] pgdeactivate 0 [ 1904.416140][ T696] pglazyfree 0 [ 1904.416140][ T696] pglazyfreed 0 [ 1904.416140][ T696] zswpin 0 [ 1904.416140][ T696] zswpout 0 [ 1904.416140][ T696] thp_fault_alloc 0 [ 1904.641131][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1904.651863][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1904.662034][T18508] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1904.670066][T18508] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1904.678205][T18508] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1904.783363][T20447] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1904.974836][T20447] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.050238][ T696] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=32735,uid=0 [ 1905.103139][ T696] Memory cgroup out of memory: Killed process 32735 (syz-executor.4) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1905.112908][T18508] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1905.135593][T18508] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1905.151744][T18508] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1905.163863][T18508] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1905.174496][T20447] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.195086][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1905.202679][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1905.347715][T20447] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 03:36:45 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r3, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r2, 0xe, r3, 0x1) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 03:36:45 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:36:45 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x0, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:36:45 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1905.608643][ T702] chnl_net:caif_netlink_parms(): no params data found [ 1906.195923][ T702] bridge0: port 1(bridge_slave_0) entered blocking state [ 1906.221129][ T702] bridge0: port 1(bridge_slave_0) entered disabled state [ 1906.228591][ T702] bridge_slave_0: entered allmulticast mode [ 1906.236307][ T702] bridge_slave_0: entered promiscuous mode [ 1906.268687][ T711] chnl_net:caif_netlink_parms(): no params data found [ 1906.290503][ T702] bridge0: port 2(bridge_slave_1) entered blocking state [ 1906.302901][ T702] bridge0: port 2(bridge_slave_1) entered disabled state [ 1906.310170][ T702] bridge_slave_1: entered allmulticast mode [ 1906.332344][ T702] bridge_slave_1: entered promiscuous mode [ 1906.485878][ T702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1906.528823][ T702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1906.713027][ T711] bridge0: port 1(bridge_slave_0) entered blocking state [ 1906.720215][ T711] bridge0: port 1(bridge_slave_0) entered disabled state [ 1906.737876][ T711] bridge_slave_0: entered allmulticast mode [ 1906.741461][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 1906.758264][ T711] bridge_slave_0: entered promiscuous mode [ 1906.775045][ T702] team0: Port device team_slave_0 added [ 1906.797814][ T711] bridge0: port 2(bridge_slave_1) entered blocking state [ 1906.812812][ T711] bridge0: port 2(bridge_slave_1) entered disabled state [ 1906.820091][ T711] bridge_slave_1: entered allmulticast mode [ 1906.836531][ T711] bridge_slave_1: entered promiscuous mode [ 1906.847776][ T702] team0: Port device team_slave_1 added [ 1906.928095][ T711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1906.939226][ T702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1906.946741][ T702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1906.974120][ T702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1906.988180][ T711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1907.032514][ T702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1907.039539][ T702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1907.066958][ T702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1907.130950][T20447] hsr_slave_0: left promiscuous mode [ 1907.138140][T20447] hsr_slave_1: left promiscuous mode [ 1907.157740][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1907.166657][T20447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1907.177720][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1907.185805][T20447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1907.196122][T20447] bridge_slave_1: left allmulticast mode [ 1907.202222][T20447] bridge_slave_1: left promiscuous mode [ 1907.208151][T20447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1907.217465][T20447] bridge_slave_0: left allmulticast mode [ 1907.224101][T20447] bridge_slave_0: left promiscuous mode [ 1907.229899][T20447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1907.248990][T20447] veth1_macvtap: left promiscuous mode [ 1907.254732][T20447] veth0_macvtap: left promiscuous mode [ 1907.273035][T20447] veth1_vlan: left promiscuous mode [ 1907.278419][T20447] veth0_vlan: left promiscuous mode [ 1907.301751][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 1907.586682][T12339] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1907.606563][T12339] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1907.619343][T12339] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1907.627978][T18508] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1907.635662][T18508] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1907.882959][T20447] team0 (unregistering): Port device team_slave_1 removed [ 1907.922145][T20447] team0 (unregistering): Port device team_slave_0 removed [ 1907.961818][T20447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1907.991724][T20447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1908.191580][T20447] bond0 (unregistering): Released all slaves [ 1908.225273][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1908.236048][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1908.245423][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1908.253619][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1908.260926][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1908.324301][ T711] team0: Port device team_slave_0 added [ 1908.334463][ T702] hsr_slave_0: entered promiscuous mode [ 1908.346685][ T702] hsr_slave_1: entered promiscuous mode [ 1908.353056][ T702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1908.360684][ T702] Cannot create hsr debugfs directory [ 1908.389252][ T711] team0: Port device team_slave_1 added [ 1908.501651][ T711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1908.508676][ T711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1908.536229][ T711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1908.565692][ T711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1908.572820][ T711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1908.607220][ T711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1908.731138][ T711] hsr_slave_0: entered promiscuous mode [ 1908.746982][ T711] hsr_slave_1: entered promiscuous mode [ 1908.756083][ T711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1908.768027][ T711] Cannot create hsr debugfs directory [ 1908.821370][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 1909.299600][ T764] chnl_net:caif_netlink_parms(): no params data found [ 1909.384075][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 1909.701353][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 1909.816158][ T778] chnl_net:caif_netlink_parms(): no params data found [ 1909.837492][ T764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1909.852946][ T764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1909.860319][ T764] bridge_slave_0: entered allmulticast mode [ 1909.883206][ T764] bridge_slave_0: entered promiscuous mode [ 1909.913707][ T764] bridge0: port 2(bridge_slave_1) entered blocking state [ 1909.930857][ T764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1909.938530][ T764] bridge_slave_1: entered allmulticast mode [ 1909.946464][ T764] bridge_slave_1: entered promiscuous mode [ 1910.025518][ T764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1910.080739][ T764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1910.153144][ T778] bridge0: port 1(bridge_slave_0) entered blocking state [ 1910.160312][ T778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1910.178531][ T778] bridge_slave_0: entered allmulticast mode [ 1910.187185][ T778] bridge_slave_0: entered promiscuous mode [ 1910.220735][ T778] bridge0: port 2(bridge_slave_1) entered blocking state [ 1910.238850][ T778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1910.248822][ T778] bridge_slave_1: entered allmulticast mode [ 1910.262553][ T778] bridge_slave_1: entered promiscuous mode [ 1910.284594][ T764] team0: Port device team_slave_0 added [ 1910.324043][ T778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1910.336557][ T764] team0: Port device team_slave_1 added [ 1910.345655][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 1910.355964][ T778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1910.467406][ T764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1910.485701][ T764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1910.512216][ T764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1910.525370][ T764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1910.533015][ T764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1910.560029][ T764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1910.578791][ T778] team0: Port device team_slave_0 added [ 1910.609555][ T778] team0: Port device team_slave_1 added [ 1910.664103][ T778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1910.671146][ T778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1910.697614][ T778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1910.714782][ T764] hsr_slave_0: entered promiscuous mode [ 1910.721738][ T764] hsr_slave_1: entered promiscuous mode [ 1910.728701][ T764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1910.737002][ T764] Cannot create hsr debugfs directory [ 1910.743648][ T778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1910.751515][ T778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1910.777708][ T778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1910.901535][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 1910.953476][ T778] hsr_slave_0: entered promiscuous mode [ 1910.971620][ T778] hsr_slave_1: entered promiscuous mode [ 1910.977885][ T778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1910.996083][ T778] Cannot create hsr debugfs directory [ 1911.029232][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1911.121285][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1911.226338][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1911.297931][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1911.461327][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 1911.548117][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1911.607379][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1911.678655][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1911.759467][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1911.783101][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 1912.422210][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 1912.992222][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 1913.004282][ T46] hsr_slave_0: left promiscuous mode [ 1913.012998][ T46] hsr_slave_1: left promiscuous mode [ 1913.019025][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1913.027054][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1913.037442][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1913.052735][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1913.072693][ T46] bridge_slave_1: left allmulticast mode [ 1913.078434][ T46] bridge_slave_1: left promiscuous mode [ 1913.092343][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 1913.103046][ T46] bridge_slave_0: left allmulticast mode [ 1913.108756][ T46] bridge_slave_0: left promiscuous mode [ 1913.114649][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 1913.133783][ T46] hsr_slave_0: left promiscuous mode [ 1913.139940][ T46] hsr_slave_1: left promiscuous mode [ 1913.164927][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1913.178737][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1913.191552][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1913.199293][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1913.210167][ T46] bridge_slave_1: left allmulticast mode [ 1913.216970][ T46] bridge_slave_1: left promiscuous mode [ 1913.224269][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 1913.238356][ T46] bridge_slave_0: left allmulticast mode [ 1913.247010][ T46] bridge_slave_0: left promiscuous mode [ 1913.259178][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 1913.288960][ T46] veth1_macvtap: left promiscuous mode [ 1913.300962][ T46] veth0_macvtap: left promiscuous mode [ 1913.307493][ T46] veth1_vlan: left promiscuous mode [ 1913.313051][ T46] veth0_vlan: left promiscuous mode [ 1913.320371][ T46] veth1_macvtap: left promiscuous mode [ 1913.326711][ T46] veth0_macvtap: left promiscuous mode [ 1913.332503][ T46] veth1_vlan: left promiscuous mode [ 1913.337858][ T46] veth0_vlan: left promiscuous mode [ 1913.541382][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 1913.725066][ T46] team0 (unregistering): Port device team_slave_1 removed [ 1913.740070][ T46] team0 (unregistering): Port device team_slave_0 removed [ 1913.752978][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1913.768501][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1913.839920][ T46] bond0 (unregistering): Released all slaves [ 1913.871609][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 1913.994495][ T46] team0 (unregistering): Port device team_slave_1 removed [ 1914.011077][ T46] team0 (unregistering): Port device team_slave_0 removed [ 1914.026991][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1914.042720][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1914.116026][ T46] bond0 (unregistering): Released all slaves [ 1914.501405][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 1915.950119][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 1916.193061][ T711] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1916.208732][ T711] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1916.240051][ T711] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1916.280921][ T711] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1916.355373][ T702] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1916.380119][ T702] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1916.484406][ T702] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1916.581444][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 1916.621477][ T702] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1916.788786][ T711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1916.877667][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1916.887640][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1916.938459][ T711] 8021q: adding VLAN 0 to HW filter on device team0 [ 1916.968902][ T702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1917.012251][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1917.027917][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1917.036792][ T4744] bridge0: port 1(bridge_slave_0) entered blocking state [ 1917.043984][ T4744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1917.059014][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1917.070577][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1917.085639][ T4744] bridge0: port 2(bridge_slave_1) entered blocking state [ 1917.092838][ T4744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1917.111497][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1917.130879][ T702] 8021q: adding VLAN 0 to HW filter on device team0 [ 1917.175181][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1917.186667][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1917.195528][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1917.204320][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1917.213785][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1917.224504][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1917.236244][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1917.245581][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1917.254859][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1917.268087][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1917.286547][ T711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1917.328755][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1917.371459][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1917.379725][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1917.407837][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1917.417107][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1917.433461][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1917.447670][T26718] bridge0: port 1(bridge_slave_0) entered blocking state [ 1917.454895][T26718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1917.470821][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1917.480104][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1917.495652][T26718] bridge0: port 2(bridge_slave_1) entered blocking state [ 1917.502836][T26718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1917.514298][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1917.527424][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1917.547191][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1917.555630][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1917.565089][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1917.575564][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1917.625501][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1917.637811][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1917.650826][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1917.667939][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1917.678240][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1917.693562][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1917.713166][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1917.876752][ T764] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1917.919048][ T764] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1918.000343][ T764] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1918.046484][ T711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1918.080411][ T764] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1918.099867][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1918.110411][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1918.134224][ T778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1918.192081][ T778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1918.208292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1918.220871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1918.258868][ T778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1918.277354][ T711] veth0_vlan: entered promiscuous mode [ 1918.299222][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1918.308505][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1918.317828][ T778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1918.337772][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1918.347498][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1918.356097][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1918.364666][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1918.391626][ T711] veth1_vlan: entered promiscuous mode [ 1918.407887][ T702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1918.457452][ T764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1918.486268][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1918.495269][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1918.504379][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1918.513618][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1918.547966][ T711] veth0_macvtap: entered promiscuous mode [ 1918.557049][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1918.570515][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1918.581149][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1918.597764][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1918.612733][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1918.632629][ T764] 8021q: adding VLAN 0 to HW filter on device team0 [ 1918.673433][ T711] veth1_macvtap: entered promiscuous mode [ 1918.690498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1918.700322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1918.716404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1918.738064][ T702] veth0_vlan: entered promiscuous mode [ 1918.753167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1918.765079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1918.773734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1918.788966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1918.798163][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1918.805364][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1918.820195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1918.843604][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1918.858035][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1918.869744][T32209] bridge0: port 2(bridge_slave_1) entered blocking state [ 1918.876968][T32209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1918.890488][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1918.902034][ T711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1918.914000][ T711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1918.925989][ T711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1918.937589][ T702] veth1_vlan: entered promiscuous mode [ 1918.958628][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1918.974070][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1918.995846][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1919.006329][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1919.023308][ T711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1919.034361][ T711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.046102][ T711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1919.071095][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1919.088595][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1919.098248][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1919.114769][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1919.128243][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1919.162655][ T778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1919.183536][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1919.199536][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1919.208884][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1919.228564][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1919.244739][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1919.257447][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1919.269107][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1919.295142][ T711] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1919.305748][ T711] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1919.318448][ T711] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1919.334448][ T711] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1919.353404][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1919.370741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1919.380036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1919.393643][ T702] veth0_macvtap: entered promiscuous mode [ 1919.417501][ T778] 8021q: adding VLAN 0 to HW filter on device team0 [ 1919.435082][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1919.445640][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1919.454341][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1919.478019][ T702] veth1_macvtap: entered promiscuous mode [ 1919.502995][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1919.524434][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1919.551609][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1919.560255][T22809] bridge0: port 1(bridge_slave_0) entered blocking state [ 1919.567473][T22809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1919.626601][ T1216] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.633120][ T1216] ieee802154 phy1 wpan1: encryption failed: -22 [ 1919.656743][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1919.665260][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1919.675406][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1919.684686][T26718] bridge0: port 2(bridge_slave_1) entered blocking state [ 1919.691869][T26718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1919.699872][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1919.709347][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1919.730284][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1919.743564][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1919.752867][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1919.763244][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1919.784708][ T702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1919.795995][ T702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.810889][ T702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1919.827932][ T702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.843681][ T702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1919.887505][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1919.897962][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1919.913214][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1919.928108][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1919.938103][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1919.958202][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1919.967415][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1919.977111][T26995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1919.991788][T26995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1919.994106][ T702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1920.010121][ T702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1920.020385][ T702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1920.031337][ T702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1920.042898][ T702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1920.052326][ T778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1920.082546][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1920.090644][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1920.102581][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1920.111617][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1920.119268][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1920.172629][ T764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1920.186492][T26995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1920.186801][ T702] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.218744][T26995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1920.226699][ T702] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.241456][ T702] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.250250][ T702] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.309658][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1920.471417][T27855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1920.485437][T27855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1920.536023][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1920.584293][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1920.600872][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1920.618574][ T1023] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1920.624145][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1920.651956][ T1023] CPU: 0 PID: 1023 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1920.662043][ T1023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1920.672159][ T1023] Call Trace: [ 1920.675489][ T1023] [ 1920.678472][ T1023] dump_stack_lvl+0x136/0x150 [ 1920.683241][ T1023] dump_header+0x10a/0xd70 [ 1920.687745][ T1023] oom_kill_process+0x25d/0x600 [ 1920.692686][ T1023] out_of_memory+0x35c/0x1660 [ 1920.697462][ T1023] ? oom_killer_disable+0x2b0/0x2b0 [ 1920.702753][ T1023] ? kernfs_notify+0x1ac/0x410 [ 1920.707598][ T1023] mem_cgroup_out_of_memory+0x206/0x270 [ 1920.713217][ T1023] ? mem_cgroup_margin+0x130/0x130 [ 1920.718419][ T1023] memory_max_write+0x2f9/0x3c0 [ 1920.723347][ T1023] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1920.729511][ T1023] ? lock_sync+0x190/0x190 [ 1920.734023][ T1023] cgroup_file_write+0x1e2/0x7b0 [ 1920.739029][ T1023] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1920.745179][ T1023] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1920.750616][ T1023] ? __virt_addr_valid+0x61/0x2e0 [ 1920.755741][ T1023] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1920.761183][ T1023] kernfs_fop_write_iter+0x3f1/0x600 [ 1920.766556][ T1023] vfs_write+0x9ee/0xe10 [ 1920.770874][ T1023] ? kernel_write+0x670/0x670 [ 1920.775692][ T1023] ? __fget_files+0x26a/0x480 [ 1920.780462][ T1023] ksys_write+0x12b/0x250 [ 1920.784876][ T1023] ? __ia32_sys_read+0xb0/0xb0 [ 1920.789722][ T1023] ? syscall_enter_from_user_mode+0x26/0x80 [ 1920.795741][ T1023] do_syscall_64+0x39/0xb0 [ 1920.800338][ T1023] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1920.806316][ T1023] RIP: 0033:0x7ff57fa8c169 [ 1920.810801][ T1023] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1920.833784][ T1023] RSP: 002b:00007ff580704168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1920.842355][ T1023] RAX: ffffffffffffffda RBX: 00007ff57fbabf80 RCX: 00007ff57fa8c169 [ 1920.850386][ T1023] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 1920.858507][ T1023] RBP: 00007ff57fae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1920.866571][ T1023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1920.874601][ T1023] R13: 00007ffe6e425f9f R14: 00007ff580704300 R15: 0000000000022000 [ 1920.882656][ T1023] [ 1920.898297][ T1023] memory: usage 10620kB, limit 0kB, failcnt 785 [ 1920.915478][ T1023] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1920.928859][ T1023] Memory cgroup stats for /syz1: [ 1920.929154][ T1023] anon 114688 [ 1920.929154][ T1023] file 10457088 [ 1920.929154][ T1023] kernel 294912 [ 1920.929154][ T1023] kernel_stack 65536 [ 1920.929154][ T1023] pagetables 81920 [ 1920.929154][ T1023] sec_pagetables 0 [ 1920.929154][ T1023] percpu 64 [ 1920.929154][ T1023] sock 0 [ 1920.929154][ T1023] vmalloc 0 [ 1920.929154][ T1023] shmem 10457088 [ 1920.929154][ T1023] zswap 0 [ 1920.929154][ T1023] zswapped 0 [ 1920.929154][ T1023] file_mapped 262144 [ 1920.929154][ T1023] file_dirty 0 [ 1920.929154][ T1023] file_writeback 0 [ 1920.929154][ T1023] swapcached 0 [ 1920.929154][ T1023] anon_thp 0 [ 1920.929154][ T1023] file_thp 0 [ 1920.929154][ T1023] shmem_thp 0 [ 1920.929154][ T1023] inactive_anon 8474624 [ 1920.929154][ T1023] active_anon 2097152 [ 1920.929154][ T1023] inactive_file 0 [ 1920.929154][ T1023] active_file 0 [ 1920.929154][ T1023] unevictable 0 [ 1920.929154][ T1023] slab_reclaimable 45936 [ 1920.929154][ T1023] slab_unreclaimable 72840 [ 1920.929154][ T1023] slab 118776 [ 1920.929154][ T1023] workingset_refault_anon 0 [ 1920.929154][ T1023] workingset_refault_file 3 [ 1920.929154][ T1023] workingset_activate_anon 0 [ 1920.929154][ T1023] workingset_activate_file 0 [ 1920.929154][ T1023] workingset_restore_anon 0 [ 1920.929154][ T1023] workingset_restore_file 1 [ 1920.929154][ T1023] workingset_nodereclaim 0 [ 1920.929154][ T1023] pgscan 160 [ 1920.929154][ T1023] pgsteal 59 [ 1920.929154][ T1023] pgscan_kswapd 0 [ 1920.929154][ T1023] pgscan_direct 160 [ 1920.929154][ T1023] pgscan_khugepaged 0 [ 1920.929154][ T1023] pgsteal_kswapd 0 [ 1920.929154][ T1023] pgsteal_direct 59 [ 1920.929154][ T1023] pgsteal_khugepaged 0 [ 1920.929154][ T1023] pgfault 37186 [ 1920.929154][ T1023] pgmajfault 0 [ 1920.929154][ T1023] pgrefill 833 [ 1920.929154][ T1023] pgactivate 101 [ 1920.929154][ T1023] pgdeactivate 0 [ 1920.929154][ T1023] pglazyfree 0 [ 1920.929154][ T1023] pglazyfreed 0 [ 1920.929154][ T1023] zswpin 0 [ 1920.929154][ T1023] zswpout 0 [ 1920.929154][ T1023] thp_fault_alloc 0 [ 1921.121385][ T1023] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=1022,uid=0 [ 1921.158475][ T1023] Memory cgroup out of memory: Killed process 1022 (syz-executor.1) total-vm:54548kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 1921.186652][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready 03:37:00 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 03:37:00 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1921.210702][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1921.319678][ T711] syz-executor.1 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=0 [ 1921.377933][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1921.390926][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1921.408469][ T711] CPU: 1 PID: 711 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1921.418476][ T711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1921.428687][ T711] Call Trace: [ 1921.432008][ T711] [ 1921.434986][ T711] dump_stack_lvl+0x136/0x150 [ 1921.439726][ T711] dump_header+0x10a/0xd70 [ 1921.444230][ T711] oom_kill_process+0x25d/0x600 [ 1921.449169][ T711] out_of_memory+0x35c/0x1660 [ 1921.453931][ T711] ? find_held_lock+0x2d/0x110 [ 1921.458796][ T711] ? oom_killer_disable+0x2b0/0x2b0 [ 1921.464071][ T711] ? rcu_read_unlock+0x9/0x60 [ 1921.468822][ T711] ? find_held_lock+0x2d/0x110 [ 1921.473656][ T711] mem_cgroup_out_of_memory+0x206/0x270 [ 1921.479272][ T711] ? mem_cgroup_margin+0x130/0x130 [ 1921.484446][ T711] ? lock_downgrade+0x690/0x690 [ 1921.489383][ T711] try_charge_memcg+0xf9b/0x13b0 [ 1921.494411][ T711] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1921.500477][ T711] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1921.506283][ T711] ? lock_downgrade+0x690/0x690 [ 1921.511206][ T711] ? lock_downgrade+0x690/0x690 [ 1921.516128][ T711] ? rcu_read_unlock+0x9/0x60 [ 1921.520906][ T711] obj_cgroup_charge+0x2af/0x5e0 [ 1921.525922][ T711] ? __alloc_file+0x21/0x270 [ 1921.530587][ T711] kmem_cache_alloc+0xb1/0x3b0 [ 1921.535419][ T711] __alloc_file+0x21/0x270 [ 1921.539931][ T711] alloc_empty_file+0x71/0x190 [ 1921.544768][ T711] path_openat+0xe6/0x2750 [ 1921.549249][ T711] ? path_lookupat+0x840/0x840 [ 1921.554069][ T711] do_filp_open+0x1ba/0x410 [ 1921.558623][ T711] ? may_open_dev+0xf0/0xf0 [ 1921.563178][ T711] ? find_held_lock+0x2d/0x110 [ 1921.567999][ T711] ? alloc_fd+0x2e4/0x750 [ 1921.572393][ T711] ? do_raw_spin_lock+0x124/0x2b0 [ 1921.577483][ T711] ? spin_bug+0x1c0/0x1c0 [ 1921.581890][ T711] ? _raw_spin_unlock+0x28/0x40 [ 1921.586803][ T711] ? alloc_fd+0x2e4/0x750 [ 1921.591209][ T711] do_sys_openat2+0x16d/0x4c0 [ 1921.595946][ T711] ? path_umount+0x6b8/0x10b0 [ 1921.600697][ T711] ? putname+0x102/0x140 [ 1921.605011][ T711] ? build_open_flags+0x720/0x720 [ 1921.610108][ T711] ? syscall_enter_from_user_mode+0x21/0x80 [ 1921.616072][ T711] ? perf_trace_preemptirq_template+0xa6/0x440 [ 1921.622297][ T711] ? syscall_exit_to_user_mode+0x4e/0x50 [ 1921.627994][ T711] ? perf_trace_preemptirq_template+0xa6/0x440 [ 1921.634231][ T711] __x64_sys_openat+0x143/0x1f0 [ 1921.639148][ T711] ? __ia32_sys_open+0x1c0/0x1c0 [ 1921.644133][ T711] ? __x64_sys_umount+0x118/0x190 [ 1921.649218][ T711] ? syscall_enter_from_user_mode+0x26/0x80 [ 1921.655157][ T711] do_syscall_64+0x39/0xb0 [ 1921.659605][ T711] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1921.665548][ T711] RIP: 0033:0x7ff57fa8bcd8 [ 1921.669990][ T711] Code: 24 18 31 c0 41 83 e2 40 75 40 89 f0 25 00 00 41 00 3d 00 00 41 00 74 32 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 40 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 1921.689627][ T711] RSP: 002b:00007ffe6e425090 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 1921.698089][ T711] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff57fa8bcd8 [ 1921.706086][ T711] RDX: 0000000000090800 RSI: 00007ffe6e426280 RDI: 00000000ffffff9c [ 1921.714085][ T711] RBP: 00007ffe6e42625c R08: 0000000000090800 R09: 00007ffe6e426280 [ 1921.722079][ T711] R10: 0000000000000000 R11: 0000000000000287 R12: 00007ff57fae6cdc [ 1921.730074][ T711] R13: 00007ffe6e426280 R14: 000000000000000a R15: 00007ffe6e4262c0 [ 1921.738086][ T711] [ 1921.781949][ T711] memory: usage 10352kB, limit 0kB, failcnt 804 [ 1921.788283][ T711] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1921.817770][ T764] veth0_vlan: entered promiscuous mode [ 1921.854423][ T711] Memory cgroup stats for /syz1: [ 1921.854735][ T711] anon 32768 [ 1921.854735][ T711] file 10457088 [ 1921.854735][ T711] kernel 110592 [ 1921.854735][ T711] kernel_stack 0 [ 1921.854735][ T711] pagetables 8192 [ 1921.854735][ T711] sec_pagetables 0 [ 1921.854735][ T711] percpu 64 [ 1921.854735][ T711] sock 0 [ 1921.854735][ T711] vmalloc 0 [ 1921.854735][ T711] shmem 10457088 [ 1921.854735][ T711] zswap 0 [ 1921.854735][ T711] zswapped 0 [ 1921.854735][ T711] file_mapped 229376 [ 1921.854735][ T711] file_dirty 0 [ 1921.854735][ T711] file_writeback 0 [ 1921.854735][ T711] swapcached 0 [ 1921.854735][ T711] anon_thp 0 [ 1921.854735][ T711] file_thp 0 [ 1921.854735][ T711] shmem_thp 0 [ 1921.854735][ T711] inactive_anon 8392704 [ 1921.854735][ T711] active_anon 2097152 [ 1921.854735][ T711] inactive_file 0 [ 1921.854735][ T711] active_file 0 [ 1921.854735][ T711] unevictable 0 [ 1921.854735][ T711] slab_reclaimable 41648 [ 1921.854735][ T711] slab_unreclaimable 44336 [ 1921.854735][ T711] slab 85984 [ 1921.854735][ T711] workingset_refault_anon 0 [ 1921.854735][ T711] workingset_refault_file 3 [ 1921.854735][ T711] workingset_activate_anon 0 [ 1921.854735][ T711] workingset_activate_file 0 [ 1921.854735][ T711] workingset_restore_anon 0 [ 1921.854735][ T711] workingset_restore_file 1 [ 1921.854735][ T711] workingset_nodereclaim 0 [ 1921.854735][ T711] pgscan 160 [ 1921.854735][ T711] pgsteal 59 [ 1921.854735][ T711] pgscan_kswapd 0 [ 1921.854735][ T711] pgscan_direct 160 [ 1921.854735][ T711] pgscan_khugepaged 0 [ 1921.854735][ T711] pgsteal_kswapd 0 [ 1921.854735][ T711] pgsteal_direct 59 [ 1921.854735][ T711] pgsteal_khugepaged 0 [ 1921.854735][ T711] pgfault 37187 [ 1921.854735][ T711] pgmajfault 0 [ 1921.854735][ T711] pgrefill 833 [ 1921.854735][ T711] pgactivate 101 [ 1921.854735][ T711] pgdeactivate 0 [ 1921.854735][ T711] pglazyfree 0 [ 1921.854735][ T711] pglazyfreed 0 [ 1921.854735][ T711] zswpin 0 [ 1921.854735][ T711] zswpout 0 [ 1921.854735][ T711] thp_fault_alloc 0 [ 1921.860786][ T778] 8021q: adding VLAN 0 to HW filter on device batadv0 03:37:01 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:37:01 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r3, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r2, 0xe, r3, 0x1) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 03:37:01 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1922.080882][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1922.102810][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1922.180289][ T764] veth1_vlan: entered promiscuous mode [ 1922.216908][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1922.227805][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1922.258231][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 03:37:01 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(0x0, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1922.324677][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1922.362142][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1922.387267][ T764] veth0_macvtap: entered promiscuous mode [ 1922.419359][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1922.429380][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1922.455607][ T764] veth1_macvtap: entered promiscuous mode [ 1922.469485][ T778] veth0_vlan: entered promiscuous mode [ 1922.497569][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1922.508901][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1922.537240][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1922.561876][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1922.605188][ T778] veth1_vlan: entered promiscuous mode [ 1922.641077][ T764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1922.670986][ T711] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=711,uid=0 [ 1922.704571][ T764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1922.791520][ T764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1922.821060][ T711] Memory cgroup out of memory: Killed process 711 (syz-executor.1) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1922.867394][ T764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1922.886271][ T764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1922.908825][ T702] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1922.939058][ T764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1922.959264][ T702] CPU: 0 PID: 702 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1922.963172][ T764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1922.969223][ T702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1922.969247][ T702] Call Trace: [ 1922.969256][ T702] [ 1922.976715][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1922.986504][ T702] dump_stack_lvl+0x136/0x150 [ 1922.986547][ T702] dump_header+0x10a/0xd70 [ 1922.991503][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1922.992857][ T702] oom_kill_process+0x25d/0x600 [ 1923.000882][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1923.004723][ T702] out_of_memory+0x35c/0x1660 [ 1923.004791][ T702] ? oom_killer_disable+0x2b0/0x2b0 [ 1923.010078][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1923.016374][ T702] ? rcu_read_unlock+0x9/0x60 [ 1923.016433][ T702] ? find_held_lock+0x2d/0x110 [ 1923.016475][ T702] mem_cgroup_out_of_memory+0x206/0x270 [ 1923.016513][ T702] ? mem_cgroup_margin+0x130/0x130 [ 1923.016548][ T702] ? lock_downgrade+0x690/0x690 [ 1923.016610][ T702] try_charge_memcg+0xf9b/0x13b0 [ 1923.016664][ T702] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1923.016710][ T702] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1923.016749][ T702] ? lock_downgrade+0x690/0x690 [ 1923.016794][ T702] ? lock_downgrade+0x690/0x690 [ 1923.098386][ T702] __memcg_kmem_charge_page+0x16e/0x3c0 [ 1923.103990][ T702] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 1923.110188][ T702] copy_process+0x4f9/0x7580 [ 1923.114816][ T702] ? _raw_spin_unlock+0x28/0x40 [ 1923.119881][ T702] ? wp_page_reuse+0x197/0x570 [ 1923.124735][ T702] ? do_wp_page+0x4be/0x3570 [ 1923.129373][ T702] ? pidfd_prepare+0x80/0x80 [ 1923.133999][ T702] ? lock_sync+0x190/0x190 [ 1923.138626][ T702] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1923.144058][ T702] ? do_raw_spin_lock+0x124/0x2b0 [ 1923.149129][ T702] ? spin_bug+0x1c0/0x1c0 [ 1923.153502][ T702] ? lock_downgrade+0x690/0x690 [ 1923.158398][ T702] kernel_clone+0xeb/0x890 [ 1923.162854][ T702] ? create_io_thread+0xe0/0xe0 [ 1923.167741][ T702] ? vm_iomap_memory+0x190/0x190 [ 1923.172724][ T702] ? find_held_lock+0x2d/0x110 [ 1923.177527][ T702] __do_sys_clone+0xba/0x100 [ 1923.182155][ T702] ? kernel_clone+0x890/0x890 [ 1923.186883][ T702] ? syscall_enter_from_user_mode+0x26/0x80 [ 1923.192821][ T702] do_syscall_64+0x39/0xb0 [ 1923.197263][ T702] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1923.203200][ T702] RIP: 0033:0x7fac52a89e9b [ 1923.207639][ T702] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1923.227310][ T702] RSP: 002b:00007ffe7a606310 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1923.235764][ T702] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fac52a89e9b [ 1923.243780][ T702] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1923.251794][ T702] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555557443400 [ 1923.259799][ T702] R10: 00005555574436d0 R11: 0000000000000246 R12: 0000000000000001 [ 1923.267832][ T702] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe7a6063f0 [ 1923.275878][ T702] [ 1923.282627][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1923.303385][ T764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1923.325738][ T764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1923.336022][ T764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1923.347966][ T764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1923.354074][ T702] memory: usage 8284kB, limit 0kB, failcnt 1072 [ 1923.364275][ T764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1923.364305][ T764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1923.381048][ T764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1923.406252][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1923.416039][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1923.425867][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1923.440609][ T702] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1923.456618][ T702] Memory cgroup stats for /syz0: [ 1923.456895][ T702] anon 45056 [ 1923.456895][ T702] file 8331264 [ 1923.456895][ T702] kernel 106496 [ 1923.456895][ T702] kernel_stack 0 [ 1923.456895][ T702] pagetables 8192 [ 1923.456895][ T702] sec_pagetables 0 [ 1923.456895][ T702] percpu 0 [ 1923.456895][ T702] sock 0 [ 1923.456895][ T702] vmalloc 0 [ 1923.456895][ T702] shmem 8327168 [ 1923.456895][ T702] zswap 0 [ 1923.456895][ T702] zswapped 0 [ 1923.456895][ T702] file_mapped 221184 [ 1923.456895][ T702] file_dirty 0 [ 1923.456895][ T702] file_writeback 0 [ 1923.456895][ T702] swapcached 0 [ 1923.456895][ T702] anon_thp 0 [ 1923.456895][ T702] file_thp 0 [ 1923.456895][ T702] shmem_thp 0 [ 1923.456895][ T702] inactive_anon 45056 [ 1923.456895][ T702] active_anon 8327168 [ 1923.456895][ T702] inactive_file 4096 [ 1923.456895][ T702] active_file 0 [ 1923.456895][ T702] unevictable 0 [ 1923.456895][ T702] slab_reclaimable 31552 [ 1923.456895][ T702] slab_unreclaimable 39920 [ 1923.456895][ T702] slab 71472 [ 1923.456895][ T702] workingset_refault_anon 0 [ 1923.456895][ T702] workingset_refault_file 0 [ 1923.456895][ T702] workingset_activate_anon 0 [ 1923.456895][ T702] workingset_activate_file 0 [ 1923.456895][ T702] workingset_restore_anon 0 [ 1923.456895][ T702] workingset_restore_file 0 [ 1923.456895][ T702] workingset_nodereclaim 0 [ 1923.456895][ T702] pgscan 218 [ 1923.456895][ T702] pgsteal 68 [ 1923.456895][ T702] pgscan_kswapd 0 [ 1923.456895][ T702] pgscan_direct 218 [ 1923.456895][ T702] pgscan_khugepaged 0 [ 1923.456895][ T702] pgsteal_kswapd 0 [ 1923.456895][ T702] pgsteal_direct 68 [ 1923.456895][ T702] pgsteal_khugepaged 0 [ 1923.456895][ T702] pgfault 37484 [ 1923.456895][ T702] pgmajfault 0 [ 1923.456895][ T702] pgrefill 1411 [ 1923.456895][ T702] pgactivate 140 [ 1923.456895][ T702] pgdeactivate 0 [ 1923.456895][ T702] pglazyfree 0 [ 1923.456895][ T702] pglazyfreed 0 [ 1923.456895][ T702] zswpin 0 [ 1923.456895][ T702] zswpout 0 [ 1923.456895][ T702] thp_fault_alloc 0 [ 1923.650271][ T702] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=702,uid=0 [ 1923.671272][ T702] Memory cgroup out of memory: Killed process 702 (syz-executor.0) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 03:37:03 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(0x0, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1923.704125][ T764] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1923.730988][ T764] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1923.747866][ T764] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1923.767536][T32116] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1923.786260][ T764] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1923.801470][T32116] CPU: 1 PID: 32116 Comm: syz-executor.2 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1923.812077][T32116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1923.822181][T32116] Call Trace: [ 1923.825713][T32116] [ 1923.828663][T32116] dump_stack_lvl+0x136/0x150 [ 1923.833463][T32116] dump_header+0x10a/0xd70 [ 1923.838015][T32116] oom_kill_process+0x25d/0x600 [ 1923.842998][T32116] out_of_memory+0x35c/0x1660 [ 1923.847810][T32116] ? find_held_lock+0x2d/0x110 [ 1923.853217][T32116] ? oom_killer_disable+0x2b0/0x2b0 [ 1923.858526][T32116] ? rcu_read_unlock+0x9/0x60 [ 1923.863253][T32116] ? find_held_lock+0x2d/0x110 [ 1923.868068][T32116] mem_cgroup_out_of_memory+0x206/0x270 [ 1923.873665][T32116] ? mem_cgroup_margin+0x130/0x130 [ 1923.878803][T32116] ? lock_downgrade+0x690/0x690 [ 1923.883707][T32116] try_charge_memcg+0xf9b/0x13b0 [ 1923.888690][T32116] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1923.894707][T32116] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1923.900458][T32116] ? lock_downgrade+0x690/0x690 [ 1923.905358][T32116] ? lock_downgrade+0x690/0x690 [ 1923.910257][T32116] __memcg_kmem_charge_page+0x16e/0x3c0 [ 1923.915936][T32116] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 1923.922148][T32116] copy_process+0x4f9/0x7580 [ 1923.926774][T32116] ? _raw_spin_unlock+0x28/0x40 [ 1923.931663][T32116] ? wp_page_reuse+0x197/0x570 [ 1923.936465][T32116] ? do_wp_page+0x4be/0x3570 [ 1923.941103][T32116] ? pidfd_prepare+0x80/0x80 [ 1923.945730][T32116] ? lock_sync+0x190/0x190 [ 1923.950180][T32116] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1923.955601][T32116] ? do_raw_spin_lock+0x124/0x2b0 [ 1923.960680][T32116] ? spin_bug+0x1c0/0x1c0 [ 1923.965052][T32116] ? lock_downgrade+0x690/0x690 [ 1923.970052][T32116] kernel_clone+0xeb/0x890 [ 1923.974531][T32116] ? create_io_thread+0xe0/0xe0 [ 1923.979449][T32116] ? vm_iomap_memory+0x190/0x190 [ 1923.984443][T32116] ? find_held_lock+0x2d/0x110 [ 1923.989262][T32116] __do_sys_clone+0xba/0x100 [ 1923.993894][T32116] ? kernel_clone+0x890/0x890 [ 1923.998641][T32116] ? syscall_enter_from_user_mode+0x26/0x80 [ 1924.004609][T32116] do_syscall_64+0x39/0xb0 [ 1924.009066][T32116] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1924.015100][T32116] RIP: 0033:0x7f9eeea89e9b [ 1924.019562][T32116] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1924.039212][T32116] RSP: 002b:00007ffd6b245c30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1924.047655][T32116] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9eeea89e9b [ 1924.055655][T32116] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1924.063670][T32116] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556f10400 [ 1924.071669][T32116] R10: 0000555556f106d0 R11: 0000000000000246 R12: 0000000000000001 [ 1924.079708][T32116] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd6b245d10 [ 1924.087910][T32116] [ 1924.137602][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1924.149626][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1924.157722][T32116] memory: usage 364kB, limit 0kB, failcnt 1531 [ 1924.157748][T32116] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 03:37:03 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1924.157770][T32116] Memory cgroup stats for /syz2 [ 1924.185523][ T778] veth0_macvtap: entered promiscuous mode [ 1924.211299][T32116] : [ 1924.211504][T32116] anon 40960 [ 1924.211504][T32116] file 204800 [ 1924.211504][T32116] kernel 77824 [ 1924.211504][T32116] kernel_stack 0 [ 1924.211504][T32116] pagetables 8192 [ 1924.211504][T32116] sec_pagetables 0 [ 1924.211504][T32116] percpu 0 [ 1924.211504][T32116] sock 0 [ 1924.211504][T32116] vmalloc 0 [ 1924.211504][T32116] shmem 204800 [ 1924.211504][T32116] zswap 0 [ 1924.211504][T32116] zswapped 0 [ 1924.211504][T32116] file_mapped 204800 [ 1924.211504][T32116] file_dirty 0 [ 1924.211504][T32116] file_writeback 0 [ 1924.211504][T32116] swapcached 0 [ 1924.211504][T32116] anon_thp 0 [ 1924.211504][T32116] file_thp 0 [ 1924.211504][T32116] shmem_thp 0 [ 1924.211504][T32116] inactive_anon 163840 [ 1924.211504][T32116] active_anon 81920 [ 1924.211504][T32116] inactive_file 0 [ 1924.211504][T32116] active_file 0 [ 1924.211504][T32116] unevictable 0 [ 1924.211504][T32116] slab_reclaimable 13120 [ 1924.211504][T32116] slab_unreclaimable 44112 [ 1924.211504][T32116] slab 57232 [ 1924.211504][T32116] workingset_refault_anon 0 [ 1924.211504][T32116] workingset_refault_file 0 [ 1924.211504][T32116] workingset_activate_anon 0 [ 1924.211504][T32116] workingset_activate_file 0 [ 1924.211504][T32116] workingset_restore_anon 0 [ 1924.211504][T32116] workingset_restore_file 0 [ 1924.211504][T32116] workingset_nodereclaim 2 [ 1924.211504][T32116] pgscan 398 [ 1924.211504][T32116] pgsteal 65 [ 1924.211504][T32116] pgscan_kswapd 0 [ 1924.211504][T32116] pgscan_direct 398 [ 1924.211504][T32116] pgscan_khugepaged 0 [ 1924.211504][T32116] pgsteal_kswapd 0 [ 1924.211504][T32116] pgsteal_direct 65 [ 1924.211504][T32116] pgsteal_khugepaged 0 [ 1924.211504][T32116] pgfault 35294 [ 1924.211504][T32116] pgmajfault 0 [ 1924.211504][T32116] pgrefill 3648 [ 1924.211504][T32116] pgactivate 333 [ 1924.211504][T32116] pgdeactivate 0 [ 1924.211504][T32116] pglazyfree 0 [ 1924.211504][T32116] pglazyfreed 0 [ 1924.211504][T32116] zswpin 0 [ 1924.211504][T32116] zswpout 0 [ 1924.211504][T32116] thp_fault_alloc 0 03:37:04 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1924.452378][T20447] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1924.503438][T32116] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=32116,uid=0 [ 1924.534392][T32209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1924.563213][T32116] Memory cgroup out of memory: Killed process 32116 (syz-executor.2) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1924.715718][ T778] veth1_macvtap: entered promiscuous mode 03:37:04 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1924.838404][T20447] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1925.172911][T20447] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1925.231664][T18508] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1925.240495][T18508] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1925.250168][T18508] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1925.250771][ T778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1925.273635][T18508] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1925.281027][T18508] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1925.351372][ T778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1925.371278][ T778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1925.431347][ T778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1925.448481][ T778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1925.487430][ T778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1925.512617][ T778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1925.530083][ T778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1925.552597][ T778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1925.583221][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1925.608035][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1925.632399][T20447] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1925.647977][ T778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1925.659902][ T778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1925.670872][ T778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1925.681575][ T778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1925.691629][ T778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1925.702676][ T778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1925.712943][ T778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1925.725074][ T778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1925.737848][ T778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1925.773086][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1925.782603][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1925.794738][ T778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1925.805326][ T778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1925.814408][ T778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1925.823453][ T778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1925.863939][ T5909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1925.880708][ T5909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1925.907330][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1926.083182][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1926.103359][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1926.182059][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1926.273399][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1926.295446][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1926.386861][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1926.459436][T27855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1926.516388][T27855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1926.577806][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1926.682595][ T1070] chnl_net:caif_netlink_parms(): no params data found [ 1927.064661][ T1086] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1927.078993][ T1086] CPU: 1 PID: 1086 Comm: syz-executor.5 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1927.089060][ T1086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1927.099262][ T1086] Call Trace: [ 1927.102676][ T1086] [ 1927.105650][ T1086] dump_stack_lvl+0x136/0x150 [ 1927.110396][ T1086] dump_header+0x10a/0xd70 [ 1927.114901][ T1086] oom_kill_process+0x25d/0x600 [ 1927.119834][ T1086] out_of_memory+0x35c/0x1660 [ 1927.124604][ T1086] ? oom_killer_disable+0x2b0/0x2b0 [ 1927.129900][ T1086] mem_cgroup_out_of_memory+0x206/0x270 [ 1927.135510][ T1086] ? mem_cgroup_margin+0x130/0x130 [ 1927.140702][ T1086] memory_max_write+0x2f9/0x3c0 [ 1927.145623][ T1086] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1927.151739][ T1086] ? lock_sync+0x190/0x190 [ 1927.156203][ T1086] cgroup_file_write+0x1e2/0x7b0 [ 1927.161284][ T1086] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1927.167400][ T1086] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1927.172820][ T1086] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1927.178227][ T1086] kernfs_fop_write_iter+0x3f1/0x600 [ 1927.183554][ T1086] vfs_write+0x9ee/0xe10 [ 1927.187931][ T1086] ? kernel_write+0x670/0x670 [ 1927.192673][ T1086] ksys_write+0x12b/0x250 [ 1927.198259][ T1086] ? __ia32_sys_read+0xb0/0xb0 [ 1927.203069][ T1086] ? syscall_enter_from_user_mode+0x26/0x80 [ 1927.209716][ T1086] do_syscall_64+0x39/0xb0 [ 1927.214166][ T1086] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1927.220109][ T1086] RIP: 0033:0x7f68a268c169 [ 1927.224650][ T1086] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1927.244394][ T1086] RSP: 002b:00007f68a3350168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1927.253107][ T1086] RAX: ffffffffffffffda RBX: 00007f68a27abf80 RCX: 00007f68a268c169 [ 1927.261111][ T1086] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 1927.269115][ T1086] RBP: 00007f68a26e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1927.277114][ T1086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1927.285113][ T1086] R13: 00007ffe9f97e86f R14: 00007f68a3350300 R15: 0000000000022000 [ 1927.293319][ T1086] [ 1927.301633][T18508] Bluetooth: hci0: command 0x0409 tx timeout [ 1927.306386][ T1086] memory: usage 592kB, limit 0kB, failcnt 2333 [ 1927.315033][ T1086] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1927.322658][ T1086] Memory cgroup stats for /syz5: [ 1927.322926][ T1086] anon 114688 [ 1927.322926][ T1086] file 229376 [ 1927.322926][ T1086] kernel 229376 [ 1927.322926][ T1086] kernel_stack 32768 [ 1927.322926][ T1086] pagetables 77824 [ 1927.322926][ T1086] sec_pagetables 0 [ 1927.322926][ T1086] percpu 64 [ 1927.322926][ T1086] sock 0 [ 1927.322926][ T1086] vmalloc 0 [ 1927.322926][ T1086] shmem 229376 [ 1927.322926][ T1086] zswap 0 [ 1927.322926][ T1086] zswapped 0 [ 1927.322926][ T1086] file_mapped 221184 [ 1927.322926][ T1086] file_dirty 0 [ 1927.322926][ T1086] file_writeback 0 [ 1927.322926][ T1086] swapcached 0 [ 1927.322926][ T1086] anon_thp 0 [ 1927.322926][ T1086] file_thp 0 [ 1927.322926][ T1086] shmem_thp 0 [ 1927.322926][ T1086] inactive_anon 0 [ 1927.322926][ T1086] active_anon 344064 [ 1927.322926][ T1086] inactive_file 0 [ 1927.322926][ T1086] active_file 0 [ 1927.322926][ T1086] unevictable 0 [ 1927.322926][ T1086] slab_reclaimable 16032 [ 1927.322926][ T1086] slab_unreclaimable 73488 [ 1927.322926][ T1086] slab 89520 [ 1927.322926][ T1086] workingset_refault_anon 0 [ 1927.322926][ T1086] workingset_refault_file 0 [ 1927.322926][ T1086] workingset_activate_anon 0 [ 1927.322926][ T1086] workingset_activate_file 0 [ 1927.322926][ T1086] workingset_restore_anon 0 [ 1927.322926][ T1086] workingset_restore_file 0 [ 1927.322926][ T1086] workingset_nodereclaim 0 [ 1927.322926][ T1086] pgscan 117 [ 1927.322926][ T1086] pgsteal 13 [ 1927.322926][ T1086] pgscan_kswapd 0 [ 1927.322926][ T1086] pgscan_direct 117 [ 1927.322926][ T1086] pgscan_khugepaged 0 [ 1927.322926][ T1086] pgsteal_kswapd 0 [ 1927.322926][ T1086] pgsteal_direct 13 [ 1927.322926][ T1086] pgsteal_khugepaged 0 [ 1927.322926][ T1086] pgfault 9788 [ 1927.322926][ T1086] pgmajfault 0 [ 1927.322926][ T1086] pgrefill 301 [ 1927.322926][ T1086] pgactivate 104 [ 1927.322926][ T1086] pgdeactivate 0 [ 1927.322926][ T1086] pglazyfree 0 [ 1927.322926][ T1086] pglazyfreed 0 [ 1927.322926][ T1086] zswpin 0 [ 1927.322926][ T1086] zswpout 0 [ 1927.322926][ T1086] thp_fault_alloc 0 [ 1927.610031][ T1086] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=764,uid=0 [ 1927.671901][ T1086] Memory cgroup out of memory: Killed process 764 (syz-executor.5) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1927.690829][ T1070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1927.701602][ T1070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1927.708866][ T1070] bridge_slave_0: entered allmulticast mode [ 1927.744549][ T1070] bridge_slave_0: entered promiscuous mode [ 1927.790802][ T1070] bridge0: port 2(bridge_slave_1) entered blocking state [ 1927.801346][ T1070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1927.821488][ T1070] bridge_slave_1: entered allmulticast mode [ 1927.832801][ T1070] bridge_slave_1: entered promiscuous mode [ 1927.928578][T18508] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1927.938210][T18508] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1927.949165][T18508] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1927.958207][T18508] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1927.966420][T18508] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1927.974454][T18508] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1928.059236][ T1070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1928.088650][T20447] hsr_slave_0: left promiscuous mode [ 1928.104969][T20447] hsr_slave_1: left promiscuous mode [ 1928.111108][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1928.119620][T20447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1928.129646][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1928.137473][T20447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1928.147615][T20447] bridge_slave_1: left allmulticast mode [ 1928.154413][T20447] bridge_slave_1: left promiscuous mode [ 1928.160223][T20447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1928.178909][T20447] bridge_slave_0: left allmulticast mode [ 1928.187731][T20447] bridge_slave_0: left promiscuous mode [ 1928.198958][T20447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1928.221037][T20447] veth1_macvtap: left promiscuous mode [ 1928.229530][T20447] veth0_macvtap: left promiscuous mode [ 1928.243943][T20447] veth1_vlan: left promiscuous mode [ 1928.249319][T20447] veth0_vlan: left promiscuous mode [ 1928.644521][T20447] team0 (unregistering): Port device team_slave_1 removed [ 1928.687008][T20447] team0 (unregistering): Port device team_slave_0 removed [ 1928.711042][T20447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1928.738632][T20447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface 03:37:08 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x0, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:37:08 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(0x0, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:37:08 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r3 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r3, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r2, 0xe, r4, 0x1) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 03:37:08 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1928.873042][T20447] bond0 (unregistering): Released all slaves [ 1928.896204][ T778] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 1928.937512][ T778] CPU: 1 PID: 778 Comm: syz-executor.3 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1928.947499][ T778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1928.957607][ T778] Call Trace: [ 1928.960925][ T778] [ 1928.963894][ T778] dump_stack_lvl+0x136/0x150 [ 1928.968636][ T778] dump_header+0x10a/0xd70 [ 1928.973130][ T778] oom_kill_process+0x25d/0x600 [ 1928.978053][ T778] out_of_memory+0x35c/0x1660 [ 1928.982805][ T778] ? find_held_lock+0x2d/0x110 [ 1928.987625][ T778] ? oom_killer_disable+0x2b0/0x2b0 [ 1928.992900][ T778] ? rcu_read_unlock+0x9/0x60 [ 1928.997671][ T778] ? find_held_lock+0x2d/0x110 [ 1929.002502][ T778] mem_cgroup_out_of_memory+0x206/0x270 [ 1929.008195][ T778] ? mem_cgroup_margin+0x130/0x130 [ 1929.013367][ T778] ? lock_downgrade+0x690/0x690 [ 1929.018313][ T778] try_charge_memcg+0xf9b/0x13b0 [ 1929.023409][ T778] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1929.029449][ T778] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1929.035232][ T778] ? lock_downgrade+0x690/0x690 [ 1929.040150][ T778] ? lock_downgrade+0x690/0x690 [ 1929.045068][ T778] ? rcu_read_unlock+0x9/0x60 [ 1929.049853][ T778] obj_cgroup_charge+0x2af/0x5e0 [ 1929.054865][ T778] ? copy_process+0x3c0/0x7580 [ 1929.059691][ T778] kmem_cache_alloc_node+0xa8/0x3e0 [ 1929.064958][ T778] copy_process+0x3c0/0x7580 [ 1929.069783][ T778] ? _raw_spin_unlock+0x28/0x40 [ 1929.074696][ T778] ? wp_page_reuse+0x197/0x570 [ 1929.079525][ T778] ? do_wp_page+0x4be/0x3570 [ 1929.084190][ T778] ? pidfd_prepare+0x80/0x80 [ 1929.088836][ T778] ? lock_sync+0x190/0x190 [ 1929.093315][ T778] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 1929.098836][ T778] ? do_raw_spin_lock+0x124/0x2b0 [ 1929.103918][ T778] ? spin_bug+0x1c0/0x1c0 [ 1929.108307][ T778] ? lock_downgrade+0x690/0x690 [ 1929.113225][ T778] kernel_clone+0xeb/0x890 [ 1929.117711][ T778] ? create_io_thread+0xe0/0xe0 [ 1929.122628][ T778] ? vm_iomap_memory+0x190/0x190 [ 1929.127638][ T778] ? find_held_lock+0x2d/0x110 [ 1929.132468][ T778] __do_sys_clone+0xba/0x100 [ 1929.137125][ T778] ? kernel_clone+0x890/0x890 [ 1929.141894][ T778] ? syscall_enter_from_user_mode+0x26/0x80 [ 1929.147860][ T778] do_syscall_64+0x39/0xb0 [ 1929.152332][ T778] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1929.158301][ T778] RIP: 0033:0x7f5c2f689e9b [ 1929.162762][ T778] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 03:37:08 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x0, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1929.182947][ T778] RSP: 002b:00007ffe37a2c1a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1929.191424][ T778] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5c2f689e9b [ 1929.199446][ T778] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1929.207443][ T778] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556c12400 [ 1929.215455][ T778] R10: 0000555556c126d0 R11: 0000000000000246 R12: 0000000000000001 [ 1929.223626][ T778] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe37a2c280 [ 1929.231666][ T778] [ 1929.312728][ T1070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1929.375763][ T778] memory: usage 8268kB, limit 0kB, failcnt 736 [ 1929.382215][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 1929.390902][ T778] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1929.404346][ T778] Memory cgroup stats for /syz3: [ 1929.404616][ T778] anon 40960 [ 1929.404616][ T778] file 8347648 [ 1929.404616][ T778] kernel 77824 [ 1929.404616][ T778] kernel_stack 0 [ 1929.404616][ T778] pagetables 8192 [ 1929.404616][ T778] sec_pagetables 0 [ 1929.404616][ T778] percpu 0 [ 1929.404616][ T778] sock 0 [ 1929.404616][ T778] vmalloc 0 [ 1929.404616][ T778] shmem 8347648 [ 1929.404616][ T778] zswap 0 [ 1929.404616][ T778] zswapped 0 [ 1929.404616][ T778] file_mapped 245760 [ 1929.404616][ T778] file_dirty 0 [ 1929.404616][ T778] file_writeback 0 [ 1929.404616][ T778] swapcached 0 [ 1929.404616][ T778] anon_thp 0 [ 1929.404616][ T778] file_thp 0 [ 1929.404616][ T778] shmem_thp 0 [ 1929.404616][ T778] inactive_anon 245760 [ 1929.404616][ T778] active_anon 8142848 [ 1929.404616][ T778] inactive_file 0 [ 1929.404616][ T778] active_file 0 [ 1929.404616][ T778] unevictable 0 [ 1929.404616][ T778] slab_reclaimable 28912 [ 1929.404616][ T778] slab_unreclaimable 32296 [ 1929.404616][ T778] slab 61208 [ 1929.404616][ T778] workingset_refault_anon 0 [ 1929.404616][ T778] workingset_refault_file 0 [ 1929.404616][ T778] workingset_activate_anon 0 [ 1929.404616][ T778] workingset_activate_file 0 [ 1929.404616][ T778] workingset_restore_anon 0 [ 1929.404616][ T778] workingset_restore_file 0 [ 1929.404616][ T778] workingset_nodereclaim 0 [ 1929.404616][ T778] pgscan 208 [ 1929.404616][ T778] pgsteal 99 [ 1929.404616][ T778] pgscan_kswapd 0 [ 1929.404616][ T778] pgscan_direct 208 [ 1929.404616][ T778] pgscan_khugepaged 0 [ 1929.404616][ T778] pgsteal_kswapd 0 [ 1929.404616][ T778] pgsteal_direct 99 [ 1929.404616][ T778] pgsteal_khugepaged 0 [ 1929.404616][ T778] pgfault 38000 [ 1929.404616][ T778] pgmajfault 0 [ 1929.404616][ T778] pgrefill 475 [ 1929.404616][ T778] pgactivate 89 [ 1929.404616][ T778] pgdeactivate 0 [ 1929.404616][ T778] pglazyfree 0 [ 1929.404616][ T778] pglazyfreed 0 [ 1929.404616][ T778] zswpin 0 [ 1929.404616][ T778] zswpout 0 [ 1929.404616][ T778] thp_fault_alloc 0 [ 1929.681333][ T778] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=778,uid=0 [ 1929.707807][ T1070] team0: Port device team_slave_0 added [ 1929.717664][ T778] Memory cgroup out of memory: Killed process 778 (syz-executor.3) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1929.823044][ T1070] team0: Port device team_slave_1 added [ 1930.021352][T18508] Bluetooth: hci1: command 0x0409 tx timeout [ 1930.262414][ T1070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1930.269442][ T1070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1930.341268][ T1070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1930.496199][ T1070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1930.536522][ T1070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1930.621326][ T1070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1930.934851][ T1070] hsr_slave_0: entered promiscuous mode [ 1930.954596][ T1070] hsr_slave_1: entered promiscuous mode [ 1931.217921][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1931.228004][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1931.236545][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1931.246615][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1931.254316][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1931.261872][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1931.297788][ T1100] chnl_net:caif_netlink_parms(): no params data found [ 1931.461435][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 1931.618814][T18508] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1931.628628][T18508] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1931.637378][T18508] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1931.656461][T18508] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1931.674608][T18508] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1931.684033][T18508] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1932.101673][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 1932.441630][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1932.449445][T18508] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1932.459933][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1932.467282][T18508] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1932.474917][T18508] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1932.485067][T18508] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1932.498305][T18508] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1932.503089][ T1100] bridge_slave_0: entered allmulticast mode [ 1932.512169][T18508] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1932.557694][ T1100] bridge_slave_0: entered promiscuous mode [ 1932.638172][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1932.652851][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 1932.671476][ T1100] bridge_slave_1: entered allmulticast mode [ 1932.678618][ T1100] bridge_slave_1: entered promiscuous mode [ 1932.870788][ T1100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1932.993621][ T1100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1933.139145][ T1152] chnl_net:caif_netlink_parms(): no params data found [ 1933.224041][ T1100] team0: Port device team_slave_0 added [ 1933.302505][T18508] Bluetooth: hci2: command 0x0409 tx timeout [ 1933.314360][ T1100] team0: Port device team_slave_1 added [ 1933.324233][ T1155] chnl_net:caif_netlink_parms(): no params data found [ 1933.541265][T18508] Bluetooth: hci0: command 0x0419 tx timeout [ 1933.549801][ T1100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1933.558565][ T1100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1933.586571][ T1100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1933.615031][ T1160] chnl_net:caif_netlink_parms(): no params data found [ 1933.651739][ T1100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1933.661310][ T1100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1933.699908][ T1100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1933.719812][T18508] Bluetooth: hci3: command 0x0409 tx timeout [ 1933.776374][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1933.801574][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1933.808955][ T1152] bridge_slave_0: entered allmulticast mode [ 1933.816667][ T1152] bridge_slave_0: entered promiscuous mode [ 1933.868082][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1933.875512][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1933.888026][ T1152] bridge_slave_1: entered allmulticast mode [ 1933.903600][ T1152] bridge_slave_1: entered promiscuous mode [ 1933.945082][ T1100] hsr_slave_0: entered promiscuous mode [ 1933.954042][ T1100] hsr_slave_1: entered promiscuous mode [ 1933.960174][ T1100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1933.968334][ T1100] Cannot create hsr debugfs directory [ 1934.040291][T20447] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1934.073919][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1934.081097][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1934.099283][ T1155] bridge_slave_0: entered allmulticast mode [ 1934.122467][ T1155] bridge_slave_0: entered promiscuous mode [ 1934.184873][T18508] Bluetooth: hci1: command 0x040f tx timeout [ 1934.222258][T20447] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1934.252321][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1934.259482][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1934.287214][ T1155] bridge_slave_1: entered allmulticast mode [ 1934.303910][ T1155] bridge_slave_1: entered promiscuous mode [ 1934.324427][ T1152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1934.369809][T20447] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1934.466403][ T1152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1934.529817][T20447] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1934.581445][T18508] Bluetooth: hci4: command 0x0409 tx timeout [ 1934.646277][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 1934.654824][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 1934.663012][ T1160] bridge_slave_0: entered allmulticast mode [ 1934.670759][ T1160] bridge_slave_0: entered promiscuous mode [ 1934.692139][ T1155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1934.733358][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 1934.752230][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 1934.759515][ T1160] bridge_slave_1: entered allmulticast mode [ 1934.779000][ T1160] bridge_slave_1: entered promiscuous mode [ 1934.793026][ T1155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1934.812926][ T1152] team0: Port device team_slave_0 added [ 1934.893134][ T1152] team0: Port device team_slave_1 added [ 1934.902884][ T1160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1935.004527][ T1160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1935.047700][ T1155] team0: Port device team_slave_0 added [ 1935.063930][ T1155] team0: Port device team_slave_1 added [ 1935.228147][ T1152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1935.236374][ T1152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1935.275359][ T1152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1935.316631][ T1155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1935.331227][ T1155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1935.368034][ T1155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1935.381429][T18508] Bluetooth: hci2: command 0x041b tx timeout [ 1935.409674][ T1152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1935.419892][ T1152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1935.447447][ T1152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1935.467005][ T1160] team0: Port device team_slave_0 added [ 1935.475387][ T1155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1935.483637][ T1155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1935.510530][ T1155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1935.572522][T20447] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1935.631978][ T1160] team0: Port device team_slave_1 added [ 1935.781490][T18508] Bluetooth: hci3: command 0x041b tx timeout [ 1935.892442][T20447] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1935.935874][ T1152] hsr_slave_0: entered promiscuous mode [ 1935.952169][ T1152] hsr_slave_1: entered promiscuous mode [ 1935.973289][ T1152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1935.980917][ T1152] Cannot create hsr debugfs directory [ 1936.026622][ T1155] hsr_slave_0: entered promiscuous mode [ 1936.042513][ T1155] hsr_slave_1: entered promiscuous mode [ 1936.051617][ T1155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1936.059320][ T1155] Cannot create hsr debugfs directory [ 1936.081971][ T1160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1936.089157][ T1160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1936.154903][ T1160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1936.222308][T20447] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1936.261539][T18508] Bluetooth: hci1: command 0x0419 tx timeout [ 1936.273745][ T1160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1936.280783][ T1160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1936.320502][ T1160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1936.394863][T20447] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1936.661429][T18508] Bluetooth: hci4: command 0x041b tx timeout [ 1936.662779][ T1160] hsr_slave_0: entered promiscuous mode [ 1936.678124][ T1160] hsr_slave_1: entered promiscuous mode [ 1936.691897][ T1160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1936.699525][ T1160] Cannot create hsr debugfs directory [ 1936.925768][T20447] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.032044][T20447] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.123099][T20447] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.191077][T20447] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.379260][T20447] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.461301][T18508] Bluetooth: hci2: command 0x040f tx timeout [ 1937.502555][T20447] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.574407][T20447] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.689353][T20447] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.861543][T18508] Bluetooth: hci3: command 0x040f tx timeout [ 1938.751215][T18508] Bluetooth: hci4: command 0x040f tx timeout [ 1939.541426][T18508] Bluetooth: hci2: command 0x0419 tx timeout [ 1939.632454][T20447] hsr_slave_0: left promiscuous mode [ 1939.638458][T20447] hsr_slave_1: left promiscuous mode [ 1939.644675][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1939.655210][T20447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1939.665611][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1939.673876][T20447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1939.683958][T20447] bridge_slave_1: left allmulticast mode [ 1939.689684][T20447] bridge_slave_1: left promiscuous mode [ 1939.695557][T20447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1939.704575][T20447] bridge_slave_0: left allmulticast mode [ 1939.710271][T20447] bridge_slave_0: left promiscuous mode [ 1939.716452][T20447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1939.728667][T20447] hsr_slave_0: left promiscuous mode [ 1939.741546][T20447] hsr_slave_1: left promiscuous mode [ 1939.747485][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1939.761399][T20447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1939.770281][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1939.778155][T20447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1939.788710][T20447] bridge_slave_1: left allmulticast mode [ 1939.794922][T20447] bridge_slave_1: left promiscuous mode [ 1939.800687][T20447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1939.810067][T20447] bridge_slave_0: left allmulticast mode [ 1939.816169][T20447] bridge_slave_0: left promiscuous mode [ 1939.821982][T20447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1939.834236][T20447] hsr_slave_0: left promiscuous mode [ 1939.840100][T20447] hsr_slave_1: left promiscuous mode [ 1939.850088][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1939.857977][T20447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1939.868179][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1939.876027][T20447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1939.885819][T20447] bridge_slave_1: left allmulticast mode [ 1939.891745][T20447] bridge_slave_1: left promiscuous mode [ 1939.897496][T20447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1939.906734][T20447] bridge_slave_0: left allmulticast mode [ 1939.912624][T20447] bridge_slave_0: left promiscuous mode [ 1939.918329][T20447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1939.936246][T20447] hsr_slave_0: left promiscuous mode [ 1939.942144][T20447] hsr_slave_1: left promiscuous mode [ 1939.947976][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1939.955583][T18508] Bluetooth: hci3: command 0x0419 tx timeout [ 1939.963855][T20447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1939.974371][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1939.981942][T20447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1939.990579][T20447] bridge_slave_1: left allmulticast mode [ 1939.996862][T20447] bridge_slave_1: left promiscuous mode [ 1940.002922][T20447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1940.011768][T20447] bridge_slave_0: left allmulticast mode [ 1940.017463][T20447] bridge_slave_0: left promiscuous mode [ 1940.023470][T20447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1940.047096][T20447] veth1_macvtap: left promiscuous mode [ 1940.052703][T20447] veth0_macvtap: left promiscuous mode [ 1940.058260][T20447] veth1_vlan: left promiscuous mode [ 1940.063654][T20447] veth0_vlan: left promiscuous mode [ 1940.069982][T20447] veth1_macvtap: left promiscuous mode [ 1940.075584][T20447] veth0_macvtap: left promiscuous mode [ 1940.081369][T20447] veth1_vlan: left promiscuous mode [ 1940.086663][T20447] veth0_vlan: left promiscuous mode [ 1940.093888][T20447] veth1_macvtap: left promiscuous mode [ 1940.099415][T20447] veth0_macvtap: left promiscuous mode [ 1940.106478][T20447] veth1_vlan: left promiscuous mode [ 1940.112005][T20447] veth0_vlan: left promiscuous mode [ 1940.118392][T20447] veth1_macvtap: left promiscuous mode [ 1940.124270][T20447] veth0_macvtap: left promiscuous mode [ 1940.129858][T20447] veth1_vlan: left promiscuous mode [ 1940.135450][T20447] veth0_vlan: left promiscuous mode [ 1940.676023][T20447] team0 (unregistering): Port device team_slave_1 removed [ 1940.694598][T20447] team0 (unregistering): Port device team_slave_0 removed [ 1940.708825][T20447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1940.724031][T20447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1940.803974][T20447] bond0 (unregistering): Released all slaves [ 1940.821355][T18508] Bluetooth: hci4: command 0x0419 tx timeout [ 1940.927341][T20447] team0 (unregistering): Port device team_slave_1 removed [ 1940.943867][T20447] team0 (unregistering): Port device team_slave_0 removed [ 1940.958994][T20447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1940.974677][T20447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1941.047962][T20447] bond0 (unregistering): Released all slaves [ 1941.198682][T20447] team0 (unregistering): Port device team_slave_1 removed [ 1941.215505][T20447] team0 (unregistering): Port device team_slave_0 removed [ 1941.233733][T20447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1941.248732][T20447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1941.321047][T20447] bond0 (unregistering): Released all slaves [ 1941.493063][T20447] team0 (unregistering): Port device team_slave_1 removed [ 1941.508689][T20447] team0 (unregistering): Port device team_slave_0 removed [ 1941.520862][T20447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1941.537944][T20447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1941.613882][T20447] bond0 (unregistering): Released all slaves [ 1944.717951][ T1070] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1944.833085][ T1070] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1944.852924][ T1070] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1944.923215][ T1070] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1945.077545][ T1070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1945.100566][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1945.115755][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1945.127811][ T1070] 8021q: adding VLAN 0 to HW filter on device team0 [ 1945.219908][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1945.229633][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1945.249131][ T4744] bridge0: port 1(bridge_slave_0) entered blocking state [ 1945.256351][ T4744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1945.268539][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1945.277667][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1945.286478][ T4744] bridge0: port 2(bridge_slave_1) entered blocking state [ 1945.293657][ T4744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1945.302582][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1945.342321][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1945.350538][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1945.360982][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1945.370429][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1945.380143][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1945.389396][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1945.418347][ T1070] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1945.438676][ T1070] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1945.469891][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1945.486095][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1945.498101][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1945.514534][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1945.529461][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1945.570980][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1945.754545][ T1152] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1945.834967][ T1152] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1945.908276][ T1152] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1945.937207][ T1152] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1945.993772][ T1070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1946.008397][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1946.017654][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1946.249534][ T1152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1946.289638][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1946.306170][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1946.326886][ T1152] 8021q: adding VLAN 0 to HW filter on device team0 [ 1946.349772][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1946.374025][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1946.386971][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1946.394199][ T5093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1946.402778][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1946.429097][ T1155] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1946.451556][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1946.464935][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1946.480600][T26287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1946.487826][T26287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1946.497243][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1946.507951][ T1155] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1946.559730][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1946.588039][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1946.600030][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1946.622315][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1946.632879][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1946.642185][ T1155] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1946.704250][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1946.721725][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1946.730496][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1946.744936][ T1152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1946.759556][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1946.768662][ T1155] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1946.787273][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1946.797359][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1946.855922][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1946.883507][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1946.918780][ T1070] veth0_vlan: entered promiscuous mode [ 1946.954107][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1946.962843][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1946.977041][ T1070] veth1_vlan: entered promiscuous mode [ 1947.001918][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1947.018503][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1947.026717][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1947.095376][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1947.104012][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1947.113570][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1947.150485][ T1070] veth0_macvtap: entered promiscuous mode [ 1947.184483][ T1160] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1947.209557][ T1160] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1947.220331][ T1160] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1947.236117][ T1160] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1947.263921][ T1070] veth1_macvtap: entered promiscuous mode [ 1947.338571][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1947.347502][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1947.356301][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1947.364436][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1947.392500][ T1070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1947.414908][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1947.429888][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1947.444509][ T1152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1947.460299][ T1155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1947.469624][ T1100] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1947.490453][ T1070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1947.508109][ T1100] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1947.519605][ T1100] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1947.536390][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1947.545669][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1947.557672][ T1070] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1947.567247][ T1070] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1947.577050][ T1070] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1947.586460][ T1070] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1947.610281][ T1155] 8021q: adding VLAN 0 to HW filter on device team0 [ 1947.630748][ T1100] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1947.651699][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1947.659565][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1947.668009][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1947.677400][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1947.708769][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1947.718301][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1947.727124][T22808] bridge0: port 1(bridge_slave_0) entered blocking state [ 1947.734301][T22808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1947.742779][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1947.751628][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1947.760073][T22808] bridge0: port 2(bridge_slave_1) entered blocking state [ 1947.767244][T22808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1947.776874][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1947.822454][ T1160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1947.835054][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1947.844318][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1947.853128][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1947.904511][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1947.913394][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1947.923656][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1947.933072][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1947.942986][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1947.951907][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1947.959685][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1947.970709][ T1160] 8021q: adding VLAN 0 to HW filter on device team0 [ 1947.978058][ T1152] veth0_vlan: entered promiscuous mode [ 1948.002961][T27855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1948.011833][T27855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1948.020874][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1948.029532][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1948.037760][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1948.047429][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1948.056382][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1948.066248][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1948.075337][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1948.084059][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1948.118001][ T1152] veth1_vlan: entered promiscuous mode [ 1948.126093][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1948.135010][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1948.145567][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1948.154573][T26719] bridge0: port 1(bridge_slave_0) entered blocking state [ 1948.161753][T26719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1948.169678][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1948.178649][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1948.187845][T26719] bridge0: port 2(bridge_slave_1) entered blocking state [ 1948.195050][T26719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1948.203136][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1948.213449][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1948.241939][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1948.255329][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1948.266262][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1948.276788][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1948.286301][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1948.295289][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1948.319214][ T1160] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1948.324171][T27855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1948.339955][ T1160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1948.349241][T27855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1948.373879][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1948.385228][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1948.397998][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1948.409691][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1948.432629][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1948.440841][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1948.457284][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1948.467155][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1948.553566][ T1152] veth0_macvtap: entered promiscuous mode [ 1948.563473][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1948.582732][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1948.626139][ T1152] veth1_macvtap: entered promiscuous mode [ 1948.652739][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1948.661115][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1948.680682][ T1152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1948.697509][ T1152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1948.708178][ T1417] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1948.716351][ T1152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1948.733778][ T1100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1948.749911][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1948.752742][ T1417] CPU: 1 PID: 1417 Comm: syz-executor.4 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1948.767964][ T1417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1948.773450][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1948.778132][ T1417] Call Trace: [ 1948.778147][ T1417] [ 1948.792504][ T1417] dump_stack_lvl+0x136/0x150 [ 1948.797259][ T1417] dump_header+0x10a/0xd70 [ 1948.801783][ T1417] oom_kill_process+0x25d/0x600 [ 1948.806729][ T1417] out_of_memory+0x35c/0x1660 [ 1948.811530][ T1417] ? oom_killer_disable+0x2b0/0x2b0 [ 1948.816819][ T1417] ? kernfs_notify+0x1ac/0x410 [ 1948.821669][ T1417] mem_cgroup_out_of_memory+0x206/0x270 [ 1948.827287][ T1417] ? mem_cgroup_margin+0x130/0x130 [ 1948.832560][ T1417] memory_max_write+0x2f9/0x3c0 [ 1948.837492][ T1417] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1948.843649][ T1417] ? lock_sync+0x190/0x190 [ 1948.848160][ T1417] cgroup_file_write+0x1e2/0x7b0 [ 1948.853162][ T1417] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1948.859434][ T1417] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1948.864850][ T1417] ? __virt_addr_valid+0x61/0x2e0 [ 1948.869935][ T1417] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1948.875344][ T1417] kernfs_fop_write_iter+0x3f1/0x600 [ 1948.880671][ T1417] vfs_write+0x9ee/0xe10 [ 1948.884984][ T1417] ? kernel_write+0x670/0x670 [ 1948.889731][ T1417] ? __fget_files+0x26a/0x480 [ 1948.894484][ T1417] ksys_write+0x12b/0x250 [ 1948.898854][ T1417] ? __ia32_sys_read+0xb0/0xb0 [ 1948.903703][ T1417] ? syscall_enter_from_user_mode+0x26/0x80 [ 1948.909647][ T1417] do_syscall_64+0x39/0xb0 [ 1948.914095][ T1417] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1948.920042][ T1417] RIP: 0033:0x7fc49048c169 [ 1948.924484][ T1417] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1948.944146][ T1417] RSP: 002b:00007fc4912af168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1948.952606][ T1417] RAX: ffffffffffffffda RBX: 00007fc4905abf80 RCX: 00007fc49048c169 [ 1948.960618][ T1417] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 1948.968617][ T1417] RBP: 00007fc4904e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1948.976617][ T1417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1948.984621][ T1417] R13: 00007ffd8d6ee6ff R14: 00007fc4912af300 R15: 0000000000022000 [ 1948.992639][ T1417] [ 1949.000439][ T1152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1949.028698][ T1152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1949.040899][ T1152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1949.067898][ T1100] 8021q: adding VLAN 0 to HW filter on device team0 [ 1949.081465][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1949.090410][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1949.100234][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1949.108591][ T1417] memory: usage 8572kB, limit 0kB, failcnt 1063 [ 1949.109197][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1949.125204][ T1417] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1949.128092][ T1152] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1949.148232][ T1152] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1949.157081][ T1417] Memory cgroup stats for /syz4: [ 1949.157342][ T1417] anon 114688 [ 1949.157342][ T1417] file 8351744 [ 1949.157342][ T1417] kernel 299008 [ 1949.157342][ T1417] kernel_stack 65536 [ 1949.157342][ T1417] pagetables 81920 [ 1949.157342][ T1417] sec_pagetables 0 [ 1949.157342][ T1417] percpu 64 [ 1949.157342][ T1417] sock 0 [ 1949.157342][ T1417] vmalloc 0 [ 1949.157342][ T1417] shmem 8351744 [ 1949.157342][ T1417] zswap 0 [ 1949.157342][ T1417] zswapped 0 [ 1949.157342][ T1417] file_mapped 225280 [ 1949.157342][ T1417] file_dirty 0 [ 1949.157342][ T1417] file_writeback 0 [ 1949.157342][ T1417] swapcached 0 [ 1949.157342][ T1417] anon_thp 0 [ 1949.157342][ T1417] file_thp 0 [ 1949.157342][ T1417] shmem_thp 0 [ 1949.157342][ T1417] inactive_anon 8351744 [ 1949.157342][ T1417] active_anon 114688 [ 1949.157342][ T1417] inactive_file 0 [ 1949.157342][ T1417] active_file 0 [ 1949.157342][ T1417] unevictable 0 [ 1949.157342][ T1417] slab_reclaimable 49112 [ 1949.157342][ T1417] slab_unreclaimable 73488 [ 1949.157342][ T1417] slab 122600 [ 1949.157342][ T1417] workingset_refault_anon 0 [ 1949.157342][ T1417] workingset_refault_file 0 [ 1949.157342][ T1417] workingset_activate_anon 0 [ 1949.157342][ T1417] workingset_activate_file 0 [ 1949.157342][ T1417] workingset_restore_anon 0 [ 1949.157342][ T1417] workingset_restore_file 0 [ 1949.157342][ T1417] workingset_nodereclaim 0 [ 1949.157342][ T1417] pgscan 520 [ 1949.157342][ T1417] pgsteal 91 [ 1949.157342][ T1417] pgscan_kswapd 0 [ 1949.157342][ T1417] pgscan_direct 520 [ 1949.157342][ T1417] pgscan_khugepaged 0 [ 1949.157342][ T1417] pgsteal_kswapd 0 [ 1949.157342][ T1417] pgsteal_direct 91 [ 1949.157342][ T1417] pgsteal_khugepaged 0 [ 1949.157342][ T1417] pgfault 52622 [ 1949.157342][ T1417] pgmajfault 0 [ 1949.157342][ T1417] pgrefill 2564 [ 1949.157342][ T1417] pgactivate 233 [ 1949.157342][ T1417] pgdeactivate 0 [ 1949.157342][ T1417] pglazyfree 0 [ 1949.157342][ T1417] pglazyfreed 0 [ 1949.157342][ T1417] zswpin 0 [ 1949.157342][ T1417] zswpout 0 [ 1949.157342][ T1417] thp_fault_alloc 0 [ 1949.164875][ T1152] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1949.360249][ T1417] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=1070,uid=0 [ 1949.376676][ T1417] Memory cgroup out of memory: Killed process 1070 (syz-executor.4) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1949.376794][ T1152] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1949.506289][ T1155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1949.519889][ T1160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1949.531780][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1949.539404][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1949.556034][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1949.568294][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1949.584590][T26718] bridge0: port 1(bridge_slave_0) entered blocking state [ 1949.591806][T26718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1949.606525][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1949.617073][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1949.626493][T26718] bridge0: port 2(bridge_slave_1) entered blocking state [ 1949.633682][T26718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1949.643018][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1949.650521][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1949.685905][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1949.711666][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1949.720824][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1949.821340][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1949.830533][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1949.841359][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1949.850367][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1949.888423][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1949.902732][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1949.922937][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1949.987983][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1949.997242][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1950.006963][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1950.015816][T22808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1950.045380][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1950.065190][T20447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1950.098033][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1950.122430][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1950.130451][T20447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1950.155749][ T1155] veth0_vlan: entered promiscuous mode [ 1950.181924][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1950.190069][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1950.201933][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1950.227381][ T1155] veth1_vlan: entered promiscuous mode [ 1950.253938][T20447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1950.286062][T20447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1950.318258][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 03:37:29 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r3, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r2, 0xe, r3, 0x1) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 03:37:29 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1950.338419][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1950.360336][T26719] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1950.477308][ T5909] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1950.570397][ T1155] veth0_macvtap: entered promiscuous mode [ 1950.614531][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1950.632266][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 03:37:30 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1950.802525][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1950.837578][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1950.976635][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1950.995845][ T1155] veth1_macvtap: entered promiscuous mode [ 1951.029145][ T1160] veth0_vlan: entered promiscuous mode [ 1951.099812][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1951.132085][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1951.192344][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1951.200458][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1951.358084][ T5909] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1951.375741][ T1444] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1951.417154][ T1160] veth1_vlan: entered promiscuous mode [ 1951.424101][ T1444] CPU: 1 PID: 1444 Comm: syz-executor.2 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1951.434165][ T1444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1951.444289][ T1444] Call Trace: [ 1951.447616][ T1444] [ 1951.450688][ T1444] dump_stack_lvl+0x136/0x150 [ 1951.455427][ T1444] dump_header+0x10a/0xd70 [ 1951.459934][ T1444] oom_kill_process+0x25d/0x600 [ 1951.465051][ T1444] out_of_memory+0x35c/0x1660 [ 1951.469820][ T1444] ? oom_killer_disable+0x2b0/0x2b0 [ 1951.475215][ T1444] ? kernfs_notify+0x1ac/0x410 [ 1951.480060][ T1444] ? find_held_lock+0x2d/0x110 [ 1951.484895][ T1444] mem_cgroup_out_of_memory+0x206/0x270 [ 1951.490503][ T1444] ? mem_cgroup_margin+0x130/0x130 [ 1951.495694][ T1444] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1951.501590][ T1444] memory_max_write+0x2f9/0x3c0 [ 1951.506514][ T1444] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1951.512660][ T1444] ? cgroup_file_write+0x181/0x7b0 [ 1951.517860][ T1444] cgroup_file_write+0x1e2/0x7b0 [ 1951.522880][ T1444] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1951.529013][ T1444] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1951.534459][ T1444] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1951.539878][ T1444] kernfs_fop_write_iter+0x3f1/0x600 [ 1951.545227][ T1444] vfs_write+0x9ee/0xe10 [ 1951.549525][ T1444] ? kernel_write+0x670/0x670 [ 1951.554253][ T1444] ? __fget_files+0x26a/0x480 [ 1951.558986][ T1444] ksys_write+0x12b/0x250 [ 1951.563359][ T1444] ? __ia32_sys_read+0xb0/0xb0 [ 1951.568166][ T1444] ? syscall_enter_from_user_mode+0x26/0x80 [ 1951.574108][ T1444] do_syscall_64+0x39/0xb0 [ 1951.578575][ T1444] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1951.584517][ T1444] RIP: 0033:0x7f43f268c169 [ 1951.588961][ T1444] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1951.608605][ T1444] RSP: 002b:00007f43f342f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1951.617070][ T1444] RAX: ffffffffffffffda RBX: 00007f43f27abf80 RCX: 00007f43f268c169 [ 1951.625076][ T1444] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 1951.633078][ T1444] RBP: 00007f43f26e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1951.641078][ T1444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1951.649166][ T1444] R13: 00007ffd8996220f R14: 00007f43f342f300 R15: 0000000000022000 [ 1951.657190][ T1444] [ 1951.691968][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1951.702763][ T1155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1951.730195][ T1155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1951.761875][ T1155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1951.797751][ T1155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1951.831694][ T1155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1951.874752][ T5909] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1951.904041][ T1444] memory: usage 592kB, limit 0kB, failcnt 1548 [ 1951.910630][ T1444] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1951.918486][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1951.932206][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1951.951227][ T1444] Memory cgroup stats for /syz2: [ 1951.951510][ T1444] anon 114688 [ 1951.951510][ T1444] file 208896 [ 1951.951510][ T1444] kernel 237568 [ 1951.951510][ T1444] kernel_stack 32768 [ 1951.951510][ T1444] pagetables 81920 [ 1951.951510][ T1444] sec_pagetables 0 [ 1951.951510][ T1444] percpu 64 [ 1951.951510][ T1444] sock 0 [ 1951.951510][ T1444] vmalloc 0 [ 1951.951510][ T1444] shmem 204800 [ 1951.951510][ T1444] zswap 0 [ 1951.951510][ T1444] zswapped 0 [ 1951.951510][ T1444] file_mapped 204800 [ 1951.951510][ T1444] file_dirty 0 [ 1951.951510][ T1444] file_writeback 0 [ 1951.951510][ T1444] swapcached 0 [ 1951.951510][ T1444] anon_thp 0 [ 1951.951510][ T1444] file_thp 0 [ 1951.951510][ T1444] shmem_thp 0 [ 1951.951510][ T1444] inactive_anon 163840 [ 1951.951510][ T1444] active_anon 155648 [ 1951.951510][ T1444] inactive_file 4096 [ 1951.951510][ T1444] active_file 0 [ 1951.951510][ T1444] unevictable 0 [ 1951.951510][ T1444] slab_reclaimable 19832 [ 1951.951510][ T1444] slab_unreclaimable 74136 [ 1951.951510][ T1444] slab 93968 [ 1951.951510][ T1444] workingset_refault_anon 0 [ 1951.951510][ T1444] workingset_refault_file 0 [ 1951.951510][ T1444] workingset_activate_anon 0 [ 1951.951510][ T1444] workingset_activate_file 0 [ 1951.951510][ T1444] workingset_restore_anon 0 [ 1951.951510][ T1444] workingset_restore_file 0 [ 1951.951510][ T1444] workingset_nodereclaim 2 [ 1951.951510][ T1444] pgscan 406 [ 1951.951510][ T1444] pgsteal 65 [ 1951.951510][ T1444] pgscan_kswapd 0 [ 1951.951510][ T1444] pgscan_direct 406 [ 1951.951510][ T1444] pgscan_khugepaged 0 [ 1951.951510][ T1444] pgsteal_kswapd 0 [ 1951.951510][ T1444] pgsteal_direct 65 [ 1951.951510][ T1444] pgsteal_khugepaged 0 [ 1951.951510][ T1444] pgfault 35360 [ 1951.951510][ T1444] pgmajfault 0 [ 1951.951510][ T1444] pgrefill 3648 [ 1951.951510][ T1444] pgactivate 341 [ 1951.951510][ T1444] pgdeactivate 0 [ 1951.951510][ T1444] pglazyfree 0 [ 1951.951510][ T1444] pglazyfreed 0 [ 1951.951510][ T1444] zswpin 0 [ 1951.951510][ T1444] zswpout 0 [ 1951.951510][ T1444] thp_fault_alloc 0 [ 1952.147843][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1952.176560][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1952.217376][ T1100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1952.230645][ T1155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1952.261730][ T1155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1952.303934][ T1155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1952.334931][ T1155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1952.361300][ T1155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1952.377545][ T5909] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1952.411452][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1952.425423][ T1444] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=1443,uid=0 [ 1952.462022][T26287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1952.481330][ T1444] Memory cgroup out of memory: Killed process 1444 (syz-executor.2) total-vm:54548kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 1952.482113][ T1155] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1952.515613][ T1155] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1952.524988][ T1155] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1952.541227][ T1155] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 03:37:32 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1952.600473][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1952.622348][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1952.634140][ T1160] veth0_macvtap: entered promiscuous mode [ 1952.700435][ T1152] syz-executor.2 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=0 [ 1952.733573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1952.743270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1952.762868][ T1152] CPU: 1 PID: 1152 Comm: syz-executor.2 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1952.762888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1952.762909][ T1152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1952.791124][ T1152] Call Trace: [ 1952.794443][ T1152] [ 1952.797420][ T1152] dump_stack_lvl+0x136/0x150 [ 1952.802158][ T1152] dump_header+0x10a/0xd70 [ 1952.806724][ T1152] oom_kill_process+0x25d/0x600 [ 1952.811654][ T1152] out_of_memory+0x35c/0x1660 [ 1952.816411][ T1152] ? find_held_lock+0x2d/0x110 [ 1952.821273][ T1152] ? oom_killer_disable+0x2b0/0x2b0 [ 1952.826564][ T1152] ? rcu_read_unlock+0x9/0x60 [ 1952.831316][ T1152] ? find_held_lock+0x2d/0x110 [ 1952.836166][ T1152] mem_cgroup_out_of_memory+0x206/0x270 [ 1952.841771][ T1152] ? mem_cgroup_margin+0x130/0x130 [ 1952.846932][ T1152] ? lock_downgrade+0x690/0x690 [ 1952.852139][ T1152] try_charge_memcg+0xf9b/0x13b0 [ 1952.857254][ T1152] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1952.863553][ T1152] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1952.869344][ T1152] ? lock_downgrade+0x690/0x690 [ 1952.874270][ T1152] ? lock_downgrade+0x690/0x690 [ 1952.879178][ T1152] ? rcu_read_unlock+0x9/0x60 [ 1952.883948][ T1152] obj_cgroup_charge+0x2af/0x5e0 [ 1952.888953][ T1152] __kmem_cache_alloc_node+0xa3/0x320 [ 1952.894394][ T1152] ? kvmalloc_node+0xa2/0x1a0 [ 1952.899146][ T1152] ? kvmalloc_node+0xa2/0x1a0 [ 1952.903892][ T1152] __kmalloc_node+0x51/0x1a0 [ 1952.908557][ T1152] kvmalloc_node+0xa2/0x1a0 [ 1952.913298][ T1152] alloc_fdtable+0xf4/0x2a0 [ 1952.917860][ T1152] dup_fd+0x74d/0xcf0 [ 1952.921908][ T1152] ? security_task_alloc+0xe4/0x250 [ 1952.927188][ T1152] copy_process+0x25cc/0x7580 [ 1952.931934][ T1152] ? _raw_spin_unlock+0x28/0x40 [ 1952.936852][ T1152] ? wp_page_reuse+0x197/0x570 [ 1952.941696][ T1152] ? pidfd_prepare+0x80/0x80 [ 1952.946406][ T1152] ? lock_sync+0x190/0x190 [ 1952.950973][ T1152] ? do_raw_spin_lock+0x124/0x2b0 [ 1952.956062][ T1152] ? spin_bug+0x1c0/0x1c0 [ 1952.960453][ T1152] ? lock_downgrade+0x690/0x690 [ 1952.965373][ T1152] kernel_clone+0xeb/0x890 [ 1952.969853][ T1152] ? create_io_thread+0xe0/0xe0 [ 1952.974761][ T1152] ? vm_iomap_memory+0x190/0x190 [ 1952.979770][ T1152] ? find_held_lock+0x2d/0x110 [ 1952.984601][ T1152] __do_sys_clone+0xba/0x100 [ 1952.989258][ T1152] ? kernel_clone+0x890/0x890 [ 1952.994232][ T1152] ? syscall_enter_from_user_mode+0x26/0x80 [ 1953.000310][ T1152] do_syscall_64+0x39/0xb0 [ 1953.004790][ T1152] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1953.010764][ T1152] RIP: 0033:0x7f43f2689e9b [ 1953.015240][ T1152] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1953.035091][ T1152] RSP: 002b:00007ffd89962450 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1953.043576][ T1152] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f43f2689e9b [ 1953.051778][ T1152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1953.059811][ T1152] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555574f9400 [ 1953.067929][ T1152] R10: 00005555574f96d0 R11: 0000000000000246 R12: 0000000000000001 [ 1953.075958][ T1152] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd89962530 [ 1953.084008][ T1152] [ 1953.095901][ T1160] veth1_macvtap: entered promiscuous mode [ 1953.144216][ T1152] memory: usage 392kB, limit 0kB, failcnt 1582 [ 1953.153461][ T1152] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1953.166776][ T1152] Memory cgroup stats for /syz2: [ 1953.167060][ T1152] anon 45056 [ 1953.167060][ T1152] file 208896 [ 1953.167060][ T1152] kernel 122880 [ 1953.167060][ T1152] kernel_stack 32768 [ 1953.167060][ T1152] pagetables 8192 [ 1953.167060][ T1152] sec_pagetables 0 [ 1953.167060][ T1152] percpu 64 [ 1953.167060][ T1152] sock 0 [ 1953.167060][ T1152] vmalloc 0 [ 1953.167060][ T1152] shmem 204800 [ 1953.167060][ T1152] zswap 0 [ 1953.167060][ T1152] zswapped 0 [ 1953.167060][ T1152] file_mapped 204800 [ 1953.167060][ T1152] file_dirty 0 [ 1953.167060][ T1152] file_writeback 0 [ 1953.167060][ T1152] swapcached 0 [ 1953.167060][ T1152] anon_thp 0 [ 1953.167060][ T1152] file_thp 0 [ 1953.167060][ T1152] shmem_thp 0 [ 1953.167060][ T1152] inactive_anon 163840 [ 1953.167060][ T1152] active_anon 86016 [ 1953.167060][ T1152] inactive_file 4096 [ 1953.167060][ T1152] active_file 0 [ 1953.167060][ T1152] unevictable 0 [ 1953.167060][ T1152] slab_reclaimable 14904 [ 1953.167060][ T1152] slab_unreclaimable 57256 [ 1953.167060][ T1152] slab 72160 [ 1953.167060][ T1152] workingset_refault_anon 0 [ 1953.167060][ T1152] workingset_refault_file 0 [ 1953.167060][ T1152] workingset_activate_anon 0 [ 1953.167060][ T1152] workingset_activate_file 0 [ 1953.167060][ T1152] workingset_restore_anon 0 [ 1953.167060][ T1152] workingset_restore_file 0 [ 1953.167060][ T1152] workingset_nodereclaim 2 [ 1953.167060][ T1152] pgscan 422 [ 1953.167060][ T1152] pgsteal 65 [ 1953.167060][ T1152] pgscan_kswapd 0 [ 1953.167060][ T1152] pgscan_direct 422 [ 1953.167060][ T1152] pgscan_khugepaged 0 [ 1953.167060][ T1152] pgsteal_kswapd 0 [ 1953.167060][ T1152] pgsteal_direct 65 [ 1953.167060][ T1152] pgsteal_khugepaged 0 [ 1953.167060][ T1152] pgfault 35370 [ 1953.167060][ T1152] pgmajfault 0 [ 1953.167060][ T1152] pgrefill 3648 [ 1953.167060][ T1152] pgactivate 357 [ 1953.167060][ T1152] pgdeactivate 0 [ 1953.167060][ T1152] pglazyfree 0 [ 1953.167060][ T1152] pglazyfreed 0 [ 1953.167060][ T1152] zswpin 0 [ 1953.167060][ T1152] zswpout 0 [ 1953.167060][ T1152] thp_fault_alloc 0 [ 1953.187844][ T1100] veth0_vlan: entered promiscuous mode [ 1953.473422][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1953.489283][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1953.497777][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1953.505649][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1953.513260][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1953.721321][ T1152] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=1152,uid=0 [ 1953.767809][ T1152] Memory cgroup out of memory: Killed process 1152 (syz-executor.2) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1953.849468][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1953.872624][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1953.979234][ T1160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1954.019745][ T1160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1954.038447][ T1160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1954.049180][ T1160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1954.074655][ T1160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1954.081761][T18508] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1954.090220][ T1160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1954.104196][T18508] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1954.112648][T18508] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1954.115431][ T1160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1954.128552][T18508] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1954.144822][T18508] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1954.187079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1954.196053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1954.206579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1954.218244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1954.326700][ T1160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1954.338397][ T1160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1954.349901][ T1160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1954.360816][ T1160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1954.380236][ T1160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1954.390949][ T1160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1954.409253][ T1160] batman_adv: batadv0: Interface activated: batadv_slave_1 03:37:34 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1954.463361][ T1100] veth1_vlan: entered promiscuous mode [ 1954.514794][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1954.538196][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1954.561078][ T1160] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1954.571610][ T1160] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1954.580377][ T1160] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1954.599140][ T1160] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1954.672840][T27855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1954.708128][T27855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1954.723498][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1954.857542][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1954.871683][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1954.889722][ T1100] veth0_macvtap: entered promiscuous mode [ 1954.910925][ T1100] veth1_macvtap: entered promiscuous mode [ 1954.948517][T20447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1954.970056][T27855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1955.029497][T20447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1955.062157][T27855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1955.074016][ T1100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1955.091453][ T1100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1955.101981][ T1100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1955.112659][ T1100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1955.123303][ T1100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1955.133881][ T1100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1955.145864][ T1100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1955.156708][ T1100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1955.168798][ T1100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1955.191022][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1955.207231][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1955.216878][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1955.232183][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1955.243336][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1955.278088][ T1100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1955.290881][ T1100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1955.301936][ T1100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1955.312500][ T1100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1955.322410][ T1100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1955.334269][ T1100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1955.344575][ T1100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1955.355140][ T1100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1955.398525][ T1100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1955.423592][T27855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1955.462111][T27855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1955.505997][ T1508] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1955.523941][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1955.533146][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1955.541862][T18508] Bluetooth: hci0: command 0x0409 tx timeout [ 1955.544823][ T1508] CPU: 0 PID: 1508 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1955.550575][T21106] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1955.558393][ T1508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1955.558416][ T1508] Call Trace: [ 1955.558425][ T1508] [ 1955.558438][ T1508] dump_stack_lvl+0x136/0x150 [ 1955.558482][ T1508] dump_header+0x10a/0xd70 [ 1955.558546][ T1508] oom_kill_process+0x25d/0x600 [ 1955.572667][ T1100] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1955.576197][ T1508] out_of_memory+0x35c/0x1660 [ 1955.579580][ T1100] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1955.582516][ T1508] ? oom_killer_disable+0x2b0/0x2b0 [ 1955.582575][ T1508] ? kernfs_notify+0x1ac/0x410 [ 1955.582615][ T1508] ? find_held_lock+0x2d/0x110 [ 1955.582662][ T1508] mem_cgroup_out_of_memory+0x206/0x270 [ 1955.611287][ T1100] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1955.618757][ T1508] ? mem_cgroup_margin+0x130/0x130 [ 1955.631261][ T1100] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1955.633692][ T1508] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1955.668338][ T1508] memory_max_write+0x2f9/0x3c0 [ 1955.673447][ T1508] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1955.679605][ T1508] ? lock_sync+0x190/0x190 [ 1955.684105][ T1508] cgroup_file_write+0x1e2/0x7b0 [ 1955.689125][ T1508] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1955.695266][ T1508] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1955.700705][ T1508] ? __virt_addr_valid+0x61/0x2e0 [ 1955.705825][ T1508] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1955.711266][ T1508] kernfs_fop_write_iter+0x3f1/0x600 [ 1955.716633][ T1508] vfs_write+0x9ee/0xe10 [ 1955.720961][ T1508] ? kernel_write+0x670/0x670 [ 1955.725720][ T1508] ? __fget_files+0x26a/0x480 [ 1955.730491][ T1508] ksys_write+0x12b/0x250 [ 1955.734994][ T1508] ? __ia32_sys_read+0xb0/0xb0 [ 1955.739838][ T1508] ? syscall_enter_from_user_mode+0x26/0x80 [ 1955.745876][ T1508] do_syscall_64+0x39/0xb0 [ 1955.750369][ T1508] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1955.756346][ T1508] RIP: 0033:0x7f627908c169 [ 1955.760818][ T1508] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1955.780598][ T1508] RSP: 002b:00007f6279e3e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1955.789175][ T1508] RAX: ffffffffffffffda RBX: 00007f62791abf80 RCX: 00007f627908c169 [ 1955.797211][ T1508] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 1955.805249][ T1508] RBP: 00007f62790e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1955.813288][ T1508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1955.821360][ T1508] R13: 00007fff57360bff R14: 00007f6279e3e300 R15: 0000000000022000 [ 1955.829504][ T1508] [ 1955.838520][ T1508] memory: usage 8536kB, limit 0kB, failcnt 1089 [ 1955.845463][ T1508] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1955.852782][ T1508] Memory cgroup stats for /syz0: [ 1955.853033][ T1508] anon 110592 [ 1955.853033][ T1508] file 8327168 [ 1955.853033][ T1508] kernel 290816 [ 1955.853033][ T1508] kernel_stack 65536 [ 1955.853033][ T1508] pagetables 81920 [ 1955.853033][ T1508] sec_pagetables 0 [ 1955.853033][ T1508] percpu 64 [ 1955.853033][ T1508] sock 0 [ 1955.853033][ T1508] vmalloc 0 [ 1955.853033][ T1508] shmem 8327168 [ 1955.853033][ T1508] zswap 0 [ 1955.853033][ T1508] zswapped 0 [ 1955.853033][ T1508] file_mapped 229376 [ 1955.853033][ T1508] file_dirty 0 [ 1955.853033][ T1508] file_writeback 0 [ 1955.853033][ T1508] swapcached 0 [ 1955.853033][ T1508] anon_thp 0 [ 1955.853033][ T1508] file_thp 0 [ 1955.853033][ T1508] shmem_thp 0 [ 1955.853033][ T1508] inactive_anon 8421376 [ 1955.853033][ T1508] active_anon 16384 [ 1955.853033][ T1508] inactive_file 0 [ 1955.853033][ T1508] active_file 0 [ 1955.853033][ T1508] unevictable 0 [ 1955.853033][ T1508] slab_reclaimable 40736 [ 1955.853033][ T1508] slab_unreclaimable 74136 [ 1955.853033][ T1508] slab 114872 [ 1955.853033][ T1508] workingset_refault_anon 0 [ 1955.853033][ T1508] workingset_refault_file 0 [ 1955.853033][ T1508] workingset_activate_anon 0 [ 1955.853033][ T1508] workingset_activate_file 0 [ 1955.853033][ T1508] workingset_restore_anon 0 [ 1955.853033][ T1508] workingset_restore_file 0 [ 1955.853033][ T1508] workingset_nodereclaim 0 [ 1955.853033][ T1508] pgscan 228 [ 1955.853033][ T1508] pgsteal 69 [ 1955.853033][ T1508] pgscan_kswapd 0 [ 1955.853033][ T1508] pgscan_direct 228 [ 1955.853033][ T1508] pgscan_khugepaged 0 [ 1955.853033][ T1508] pgsteal_kswapd 0 [ 1955.853033][ T1508] pgsteal_direct 69 [ 1955.853033][ T1508] pgsteal_khugepaged 0 [ 1955.853033][ T1508] pgfault 37545 [ 1955.853033][ T1508] pgmajfault 0 [ 1955.853033][ T1508] pgrefill 1411 [ 1955.853033][ T1508] pgactivate 149 [ 1955.853033][ T1508] pgdeactivate 0 [ 1955.853033][ T1508] pglazyfree 0 [ 1955.853033][ T1508] pglazyfreed 0 [ 1955.853033][ T1508] zswpin 0 [ 1955.853033][ T1508] zswpout 0 [ 1955.853033][ T1508] thp_fault_alloc 0 [ 1956.066032][ T1508] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1506,uid=0 [ 1956.096162][ T1508] Memory cgroup out of memory: Killed process 1506 (syz-executor.0) total-vm:54548kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 1956.181502][ T48] Bluetooth: hci5: command 0x0409 tx timeout [ 1956.275655][ T1468] chnl_net:caif_netlink_parms(): no params data found [ 1956.301108][ T1155] syz-executor.0 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=0 [ 1956.322590][ T1155] CPU: 0 PID: 1155 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1956.332660][ T1155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1956.342760][ T1155] Call Trace: [ 1956.346080][ T1155] [ 1956.349057][ T1155] dump_stack_lvl+0x136/0x150 [ 1956.353797][ T1155] dump_header+0x10a/0xd70 [ 1956.358297][ T1155] oom_kill_process+0x25d/0x600 [ 1956.363227][ T1155] out_of_memory+0x35c/0x1660 [ 1956.368001][ T1155] ? find_held_lock+0x2d/0x110 [ 1956.372829][ T1155] ? oom_killer_disable+0x2b0/0x2b0 [ 1956.378107][ T1155] ? rcu_read_unlock+0x9/0x60 [ 1956.382863][ T1155] ? find_held_lock+0x2d/0x110 [ 1956.387696][ T1155] mem_cgroup_out_of_memory+0x206/0x270 [ 1956.393288][ T1155] ? mem_cgroup_margin+0x130/0x130 [ 1956.398456][ T1155] ? lock_downgrade+0x690/0x690 [ 1956.403427][ T1155] try_charge_memcg+0xf9b/0x13b0 [ 1956.408451][ T1155] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1956.414505][ T1155] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1956.420295][ T1155] ? lock_downgrade+0x690/0x690 [ 1956.425229][ T1155] ? lock_downgrade+0x690/0x690 [ 1956.426950][ T9979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1956.430132][ T1155] ? rcu_read_unlock+0x9/0x60 [ 1956.442837][ T1155] obj_cgroup_charge+0x2af/0x5e0 [ 1956.442896][ T1155] __kmem_cache_alloc_node+0xa3/0x320 [ 1956.442936][ T1155] ? kvmalloc_node+0xa2/0x1a0 [ 1956.452818][ T9979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1956.453265][ T1155] ? kvmalloc_node+0xa2/0x1a0 [ 1956.470079][ T1155] __kmalloc_node+0x51/0x1a0 [ 1956.474848][ T1155] kvmalloc_node+0xa2/0x1a0 [ 1956.479426][ T1155] xt_alloc_table_info+0x40/0xa0 [ 1956.484450][ T1155] do_ip6t_set_ctl+0x514/0xb30 [ 1956.489288][ T1155] ? __mutex_lock+0x231/0x1350 [ 1956.494133][ T1155] ? compat_do_replace.constprop.0+0x410/0x410 [ 1956.500368][ T1155] ? wait_for_completion_io_timeout+0x20/0x20 [ 1956.506539][ T1155] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 1956.512588][ T1155] nf_setsockopt+0x87/0xe0 [ 1956.517084][ T1155] ipv6_setsockopt+0x12b/0x190 [ 1956.521917][ T1155] tcp_setsockopt+0x9f/0x100 [ 1956.526591][ T1155] ? sock_common_recvmsg+0x190/0x190 [ 1956.531971][ T1155] __sys_setsockopt+0x2c6/0x5b0 [ 1956.536889][ T1155] ? __ia32_sys_recv+0x100/0x100 [ 1956.541892][ T1155] ? perf_trace_preemptirq_template+0xa6/0x440 [ 1956.548127][ T1155] ? __traceiter_irq_enable+0xa0/0xa0 [ 1956.553593][ T1155] __x64_sys_setsockopt+0xbe/0x160 [ 1956.558788][ T1155] ? syscall_enter_from_user_mode+0x26/0x80 [ 1956.564752][ T1155] do_syscall_64+0x39/0xb0 [ 1956.569235][ T1155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1956.575200][ T1155] RIP: 0033:0x7f627908d7ba [ 1956.579664][ T1155] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1956.599335][ T1155] RSP: 002b:00007fff57360768 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1956.607817][ T1155] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 00007f627908d7ba [ 1956.615846][ T1155] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1956.623964][ T1155] RBP: 00007fff57360790 R08: 00000000000003b8 R09: ffffffffff000000 [ 1956.632085][ T1155] R10: 00007f6279184bc0 R11: 0000000000000206 R12: 00007fff573607f0 [ 1956.640199][ T1155] R13: 0000000000000003 R14: 00007fff5736078c R15: 00007f6279184b60 [ 1956.648255][ T1155] [ 1956.657911][ T1155] memory: usage 8272kB, limit 0kB, failcnt 1108 [ 1956.665011][ T1155] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1956.672238][ T1155] Memory cgroup stats for /syz0: [ 1956.681302][ T1155] anon 36864 [ 1956.681302][ T1155] file 8327168 [ 1956.681302][ T1155] kernel 102400 [ 1956.681302][ T1155] kernel_stack 0 [ 1956.681302][ T1155] pagetables 8192 [ 1956.681302][ T1155] sec_pagetables 0 [ 1956.681302][ T1155] percpu 64 [ 1956.681302][ T1155] sock 0 [ 1956.681302][ T1155] vmalloc 0 [ 1956.681302][ T1155] shmem 8327168 [ 1956.681302][ T1155] zswap 0 [ 1956.681302][ T1155] zswapped 0 [ 1956.681302][ T1155] file_mapped 221184 [ 1956.681302][ T1155] file_dirty 0 [ 1956.681302][ T1155] file_writeback 0 [ 1956.681302][ T1155] swapcached 0 [ 1956.681302][ T1155] anon_thp 0 [ 1956.681302][ T1155] file_thp 0 [ 1956.681302][ T1155] shmem_thp 0 [ 1956.681302][ T1155] inactive_anon 8343552 [ 1956.681302][ T1155] active_anon 20480 [ 1956.681302][ T1155] inactive_file 0 [ 1956.681302][ T1155] active_file 0 [ 1956.681302][ T1155] unevictable 0 [ 1956.681302][ T1155] slab_reclaimable 33240 [ 1956.681302][ T1155] slab_unreclaimable 48256 [ 1956.681302][ T1155] slab 81496 [ 1956.681302][ T1155] workingset_refault_anon 0 [ 1956.681302][ T1155] workingset_refault_file 0 [ 1956.681302][ T1155] workingset_activate_anon 0 [ 1956.681302][ T1155] workingset_activate_file 0 [ 1956.681302][ T1155] workingset_restore_anon 0 [ 1956.681302][ T1155] workingset_restore_file 0 [ 1956.681302][ T1155] workingset_nodereclaim 0 [ 1956.681302][ T1155] pgscan 228 [ 1956.681302][ T1155] pgsteal 69 [ 1956.681302][ T1155] pgscan_kswapd 0 [ 1956.681302][ T1155] pgscan_direct 228 [ 1956.681302][ T1155] pgscan_khugepaged 0 [ 1956.681302][ T1155] pgsteal_kswapd 0 [ 1956.681302][ T1155] pgsteal_direct 69 [ 1956.681302][ T1155] pgsteal_khugepaged 0 [ 1956.681302][ T1155] pgfault 37553 [ 1956.681302][ T1155] pgmajfault 0 [ 1956.681302][ T1155] pgrefill 1411 [ 1956.681302][ T1155] pgactivate 149 [ 1956.681302][ T1155] pgdeactivate 0 [ 1956.681302][ T1155] pglazyfree 0 [ 1956.681302][ T1155] pglazyfreed 0 [ 1956.681302][ T1155] zswpin 0 [ 1956.681302][ T1155] zswpout 0 [ 1956.681302][ T1155] thp_fault_alloc 0 [ 1956.875512][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1956.877110][ T1155] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1155,uid=0 [ 1956.888642][ T1476] chnl_net:caif_netlink_parms(): no params data found [ 1956.906387][ T1155] Memory cgroup out of memory: Killed process 1155 (syz-executor.0) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1957.061834][ T9979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1957.071325][ T9979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1957.119804][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1957.207150][ T1476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1957.219711][ T1476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1957.255676][ T1476] bridge_slave_0: entered allmulticast mode [ 1957.286405][ T1476] bridge_slave_0: entered promiscuous mode [ 1957.319931][ T1541] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1957.323127][ T1476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1957.331223][ T1541] CPU: 1 PID: 1541 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1957.347251][ T1541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1957.357360][ T1541] Call Trace: [ 1957.360676][ T1541] [ 1957.363654][ T1541] dump_stack_lvl+0x136/0x150 [ 1957.368403][ T1541] dump_header+0x10a/0xd70 [ 1957.372904][ T1541] oom_kill_process+0x25d/0x600 [ 1957.376676][ T1476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1957.377813][ T1541] out_of_memory+0x35c/0x1660 [ 1957.389612][ T1541] ? oom_killer_disable+0x2b0/0x2b0 [ 1957.394875][ T1541] ? kernfs_notify+0x1ac/0x410 [ 1957.399688][ T1541] mem_cgroup_out_of_memory+0x206/0x270 [ 1957.405276][ T1541] ? mem_cgroup_margin+0x130/0x130 [ 1957.410446][ T1541] memory_max_write+0x2f9/0x3c0 [ 1957.415348][ T1541] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1957.421463][ T1541] ? lock_sync+0x190/0x190 [ 1957.425940][ T1541] cgroup_file_write+0x1e2/0x7b0 [ 1957.431266][ T1541] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1957.437393][ T1541] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1957.442836][ T1541] ? __virt_addr_valid+0x61/0x2e0 [ 1957.447950][ T1541] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1957.453362][ T1541] kernfs_fop_write_iter+0x3f1/0x600 [ 1957.458694][ T1541] vfs_write+0x9ee/0xe10 [ 1957.462998][ T1541] ? kernel_write+0x670/0x670 [ 1957.467724][ T1541] ? __fget_files+0x26a/0x480 [ 1957.472457][ T1541] ksys_write+0x12b/0x250 [ 1957.476828][ T1541] ? __ia32_sys_read+0xb0/0xb0 [ 1957.481642][ T1541] ? syscall_enter_from_user_mode+0x26/0x80 [ 1957.487588][ T1541] do_syscall_64+0x39/0xb0 [ 1957.492034][ T1541] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1957.497977][ T1541] RIP: 0033:0x7fc05168c169 [ 1957.502426][ T1541] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1957.522086][ T1541] RSP: 002b:00007fc052456168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1957.530564][ T1541] RAX: ffffffffffffffda RBX: 00007fc0517abf80 RCX: 00007fc05168c169 [ 1957.538575][ T1541] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 1957.546680][ T1541] RBP: 00007fc0516e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1957.554680][ T1541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1957.562680][ T1541] R13: 00007fffee2d1b8f R14: 00007fc052456300 R15: 0000000000022000 [ 1957.570784][ T1541] [ 1957.591595][ T1476] bridge_slave_1: entered allmulticast mode [ 1957.592011][ T1541] memory: usage 10616kB, limit 0kB, failcnt 821 [ 1957.598816][ T1476] bridge_slave_1: entered promiscuous mode [ 1957.614092][ T1541] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1957.621909][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 1957.628610][ T1541] Memory cgroup stats for /syz1: [ 1957.628907][ T1541] anon 110592 [ 1957.628907][ T1541] file 10457088 [ 1957.628907][ T1541] kernel 294912 [ 1957.628907][ T1541] kernel_stack 65536 [ 1957.628907][ T1541] pagetables 81920 [ 1957.628907][ T1541] sec_pagetables 0 [ 1957.628907][ T1541] percpu 64 [ 1957.628907][ T1541] sock 0 [ 1957.628907][ T1541] vmalloc 0 [ 1957.628907][ T1541] shmem 10457088 [ 1957.628907][ T1541] zswap 0 [ 1957.628907][ T1541] zswapped 0 [ 1957.628907][ T1541] file_mapped 262144 [ 1957.628907][ T1541] file_dirty 0 [ 1957.628907][ T1541] file_writeback 0 [ 1957.628907][ T1541] swapcached 0 [ 1957.628907][ T1541] anon_thp 0 [ 1957.628907][ T1541] file_thp 0 [ 1957.628907][ T1541] shmem_thp 0 [ 1957.628907][ T1541] inactive_anon 8359936 [ 1957.628907][ T1541] active_anon 2207744 [ 1957.628907][ T1541] inactive_file 0 [ 1957.628907][ T1541] active_file 0 [ 1957.628907][ T1541] unevictable 0 [ 1957.628907][ T1541] slab_reclaimable 45936 [ 1957.628907][ T1541] slab_unreclaimable 72840 [ 1957.628907][ T1541] slab 118776 [ 1957.628907][ T1541] workingset_refault_anon 0 [ 1957.628907][ T1541] workingset_refault_file 3 [ 1957.628907][ T1541] workingset_activate_anon 0 [ 1957.628907][ T1541] workingset_activate_file 0 [ 1957.628907][ T1541] workingset_restore_anon 0 [ 1957.628907][ T1541] workingset_restore_file 1 [ 1957.628907][ T1541] workingset_nodereclaim 0 [ 1957.628907][ T1541] pgscan 160 [ 1957.628907][ T1541] pgsteal 59 [ 1957.628907][ T1541] pgscan_kswapd 0 [ 1957.628907][ T1541] pgscan_direct 160 [ 1957.628907][ T1541] pgscan_khugepaged 0 [ 1957.628907][ T1541] pgsteal_kswapd 0 [ 1957.628907][ T1541] pgsteal_direct 59 [ 1957.628907][ T1541] pgsteal_khugepaged 0 [ 1957.628907][ T1541] pgfault 37248 [ 1957.628907][ T1541] pgmajfault 0 [ 1957.628907][ T1541] pgrefill 833 [ 1957.628907][ T1541] pgactivate 101 [ 1957.628907][ T1541] pgdeactivate 0 [ 1957.628907][ T1541] pglazyfree 0 [ 1957.628907][ T1541] pglazyfreed 0 [ 1957.628907][ T1541] zswpin 0 [ 1957.628907][ T1541] zswpout 0 [ 1957.628907][ T1541] thp_fault_alloc 0 [ 1957.831427][ T1541] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=1539,uid=0 [ 1957.852227][ T1541] Memory cgroup out of memory: Killed process 1539 (syz-executor.1) total-vm:54548kB, anon-rss:488kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 03:37:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 03:37:37 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x0, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:37:37 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r4, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 03:37:37 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r3 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r3, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r2, 0xe, r4, 0x1) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1957.902031][ T1468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1957.909195][ T1468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1957.916932][ T1468] bridge_slave_0: entered allmulticast mode [ 1957.924683][ T1468] bridge_slave_0: entered promiscuous mode [ 1957.940483][ T1468] bridge0: port 2(bridge_slave_1) entered blocking state [ 1957.949837][ T1468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1957.961236][ T1468] bridge_slave_1: entered allmulticast mode [ 1957.968405][ T1468] bridge_slave_1: entered promiscuous mode [ 1958.042138][ T5909] hsr_slave_0: left promiscuous mode [ 1958.042893][ T1100] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1958.071208][ T1100] CPU: 0 PID: 1100 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1958.081643][ T1100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1958.091839][ T1100] Call Trace: [ 1958.095176][ T1100] [ 1958.098187][ T1100] dump_stack_lvl+0x136/0x150 [ 1958.102931][ T1100] dump_header+0x10a/0xd70 [ 1958.107437][ T1100] oom_kill_process+0x25d/0x600 [ 1958.112369][ T1100] out_of_memory+0x35c/0x1660 [ 1958.117143][ T1100] ? find_held_lock+0x2d/0x110 [ 1958.121988][ T1100] ? oom_killer_disable+0x2b0/0x2b0 [ 1958.127266][ T1100] ? rcu_read_unlock+0x9/0x60 [ 1958.132029][ T1100] ? find_held_lock+0x2d/0x110 [ 1958.136875][ T1100] mem_cgroup_out_of_memory+0x206/0x270 [ 1958.142498][ T1100] ? mem_cgroup_margin+0x130/0x130 [ 1958.147674][ T1100] ? lock_downgrade+0x690/0x690 [ 1958.152653][ T1100] try_charge_memcg+0xf9b/0x13b0 [ 1958.157725][ T1100] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1958.163804][ T1100] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1958.169591][ T1100] ? lock_downgrade+0x690/0x690 [ 1958.174514][ T1100] ? lock_downgrade+0x690/0x690 [ 1958.179443][ T1100] obj_cgroup_charge+0x2af/0x5e0 [ 1958.184798][ T1100] ? sock_alloc_inode+0x27/0x1d0 [ 1958.189793][ T1100] kmem_cache_alloc_lru+0x142/0x600 [ 1958.195063][ T1100] sock_alloc_inode+0x27/0x1d0 [ 1958.200158][ T1100] ? sock_free_inode+0x30/0x30 [ 1958.204975][ T1100] alloc_inode+0x61/0x230 [ 1958.209372][ T1100] new_inode_pseudo+0x17/0x80 [ 1958.214121][ T1100] sock_alloc+0x40/0x270 [ 1958.218430][ T1100] __sock_create+0xbd/0x850 [ 1958.223022][ T1100] ? xfd_validate_state+0x5d/0x180 [ 1958.228222][ T1100] __sys_socket+0x133/0x250 [ 1958.232798][ T1100] ? __sys_socket_file+0x1d0/0x1d0 [ 1958.237990][ T1100] __x64_sys_socket+0x73/0xb0 [ 1958.242742][ T1100] do_syscall_64+0x39/0xb0 [ 1958.247217][ T1100] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1958.253183][ T1100] RIP: 0033:0x7fc05168d7e7 [ 1958.257646][ T1100] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1958.272970][ T48] Bluetooth: hci5: command 0x041b tx timeout [ 1958.277370][ T1100] RSP: 002b:00007fffee2d1708 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 1958.291939][ T1100] RAX: ffffffffffffffda RBX: 00007fffee2d1e70 RCX: 00007fc05168d7e7 [ 1958.299968][ T1100] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 1958.308000][ T1100] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007fffee2d1c80 [ 1958.316020][ T1100] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 1958.324043][ T1100] R13: 00000000001dd707 R14: 000000000000000b R15: 00007fffee2d1eb0 [ 1958.332093][ T1100] [ 1958.352792][ T5909] hsr_slave_1: left promiscuous mode [ 1958.395206][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1958.408542][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1958.454288][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1958.487732][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1958.531435][ T5909] bridge_slave_1: left allmulticast mode [ 1958.557714][ T5909] bridge_slave_1: left promiscuous mode [ 1958.583274][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state [ 1958.626166][ T5909] bridge_slave_0: left allmulticast mode [ 1958.652507][ T5909] bridge_slave_0: left promiscuous mode [ 1958.679112][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state [ 1958.764780][ T5909] veth1_macvtap: left promiscuous mode [ 1958.771626][ T5909] veth0_macvtap: left promiscuous mode [ 1958.796719][ T5909] veth1_vlan: left promiscuous mode [ 1958.818642][ T1100] memory: usage 10356kB, limit 0kB, failcnt 840 [ 1958.821365][ T5909] veth0_vlan: left promiscuous mode [ 1958.826322][ T1100] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1958.837662][ T1100] Memory cgroup stats for /syz1: [ 1958.837919][ T1100] anon 40960 [ 1958.837919][ T1100] file 10457088 [ 1958.837919][ T1100] kernel 106496 [ 1958.837919][ T1100] kernel_stack 0 [ 1958.837919][ T1100] pagetables 8192 [ 1958.837919][ T1100] sec_pagetables 0 [ 1958.837919][ T1100] percpu 64 [ 1958.837919][ T1100] sock 0 [ 1958.837919][ T1100] vmalloc 0 [ 1958.837919][ T1100] shmem 10457088 [ 1958.837919][ T1100] zswap 0 [ 1958.837919][ T1100] zswapped 0 [ 1958.837919][ T1100] file_mapped 229376 [ 1958.837919][ T1100] file_dirty 0 [ 1958.837919][ T1100] file_writeback 0 [ 1958.837919][ T1100] swapcached 0 [ 1958.837919][ T1100] anon_thp 0 [ 1958.837919][ T1100] file_thp 0 [ 1958.837919][ T1100] shmem_thp 0 [ 1958.837919][ T1100] inactive_anon 8359936 [ 1958.837919][ T1100] active_anon 2138112 [ 1958.837919][ T1100] inactive_file 0 [ 1958.837919][ T1100] active_file 0 [ 1958.837919][ T1100] unevictable 0 [ 1958.837919][ T1100] slab_reclaimable 39080 [ 1958.837919][ T1100] slab_unreclaimable 44336 [ 1958.837919][ T1100] slab 83416 [ 1958.837919][ T1100] workingset_refault_anon 0 [ 1958.837919][ T1100] workingset_refault_file 3 [ 1958.837919][ T1100] workingset_activate_anon 0 [ 1958.837919][ T1100] workingset_activate_file 0 [ 1958.837919][ T1100] workingset_restore_anon 0 [ 1958.837919][ T1100] workingset_restore_file 1 [ 1958.837919][ T1100] workingset_nodereclaim 0 [ 1958.837919][ T1100] pgscan 160 [ 1958.837919][ T1100] pgsteal 59 [ 1958.837919][ T1100] pgscan_kswapd 0 [ 1958.837919][ T1100] pgscan_direct 160 [ 1958.837919][ T1100] pgscan_khugepaged 0 [ 1958.837919][ T1100] pgsteal_kswapd 0 [ 1958.837919][ T1100] pgsteal_direct 59 [ 1958.837919][ T1100] pgsteal_khugepaged 0 [ 1958.837919][ T1100] pgfault 37251 [ 1958.837919][ T1100] pgmajfault 0 [ 1958.837919][ T1100] pgrefill 833 [ 1958.837919][ T1100] pgactivate 101 [ 1958.837919][ T1100] pgdeactivate 0 [ 1958.837919][ T1100] pglazyfree 0 [ 1958.837919][ T1100] pglazyfreed 0 [ 1958.837919][ T1100] zswpin 0 [ 1958.837919][ T1100] zswpout 0 [ 1958.837919][ T1100] thp_fault_alloc 0 [ 1959.041342][ T1100] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=1100,uid=0 [ 1959.073337][ T1100] Memory cgroup out of memory: Killed process 1100 (syz-executor.1) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1959.116920][ T1548] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1959.156101][ T1100] socket: no more sockets [ 1959.176424][ T1548] CPU: 1 PID: 1548 Comm: syz-executor.5 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1959.186514][ T1548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1959.196850][ T1548] Call Trace: [ 1959.200174][ T1548] [ 1959.203158][ T1548] dump_stack_lvl+0x136/0x150 [ 1959.207987][ T1548] dump_header+0x10a/0xd70 [ 1959.212483][ T1548] oom_kill_process+0x25d/0x600 [ 1959.217413][ T1548] out_of_memory+0x35c/0x1660 [ 1959.222173][ T1548] ? oom_killer_disable+0x2b0/0x2b0 [ 1959.227455][ T1548] mem_cgroup_out_of_memory+0x206/0x270 [ 1959.233063][ T1548] ? mem_cgroup_margin+0x130/0x130 [ 1959.238260][ T1548] memory_max_write+0x2f9/0x3c0 [ 1959.243185][ T1548] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1959.249331][ T1548] ? cgroup_file_write+0x1ce/0x7b0 [ 1959.254538][ T1548] cgroup_file_write+0x1e2/0x7b0 [ 1959.259549][ T1548] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1959.265685][ T1548] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1959.271133][ T1548] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1959.276586][ T1548] kernfs_fop_write_iter+0x3f1/0x600 [ 1959.281946][ T1548] vfs_write+0x9ee/0xe10 [ 1959.286263][ T1548] ? kernel_write+0x670/0x670 [ 1959.291016][ T1548] ? __fget_files+0x26a/0x480 [ 1959.295787][ T1548] ksys_write+0x12b/0x250 [ 1959.300191][ T1548] ? __ia32_sys_read+0xb0/0xb0 [ 1959.305025][ T1548] ? syscall_enter_from_user_mode+0x26/0x80 [ 1959.310995][ T1548] do_syscall_64+0x39/0xb0 [ 1959.315472][ T1548] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1959.321442][ T1548] RIP: 0033:0x7fe702e8c169 [ 1959.325913][ T1548] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1959.345576][ T1548] RSP: 002b:00007fe703bb9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1959.354055][ T1548] RAX: ffffffffffffffda RBX: 00007fe702fabf80 RCX: 00007fe702e8c169 [ 1959.362090][ T1548] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 1959.370117][ T1548] RBP: 00007fe702ee7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1959.378184][ T1548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1959.386335][ T1548] R13: 00007ffcef18e22f R14: 00007fe703bb9300 R15: 0000000000022000 [ 1959.394401][ T1548] [ 1959.487604][ T1548] memory: usage 672kB, limit 0kB, failcnt 2333 [ 1959.509986][ T1548] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1959.519732][ T1548] Memory cgroup stats for /syz5: [ 1959.520013][ T1548] anon 143360 [ 1959.520013][ T1548] file 229376 [ 1959.520013][ T1548] kernel 303104 [ 1959.520013][ T1548] kernel_stack 98304 [ 1959.520013][ T1548] pagetables 77824 [ 1959.520013][ T1548] sec_pagetables 0 [ 1959.520013][ T1548] percpu 64 [ 1959.520013][ T1548] sock 0 [ 1959.520013][ T1548] vmalloc 0 [ 1959.520013][ T1548] shmem 229376 [ 1959.520013][ T1548] zswap 0 [ 1959.520013][ T1548] zswapped 0 [ 1959.520013][ T1548] file_mapped 221184 [ 1959.520013][ T1548] file_dirty 0 [ 1959.520013][ T1548] file_writeback 0 [ 1959.520013][ T1548] swapcached 0 [ 1959.520013][ T1548] anon_thp 0 [ 1959.520013][ T1548] file_thp 0 [ 1959.520013][ T1548] shmem_thp 0 [ 1959.520013][ T1548] inactive_anon 0 [ 1959.520013][ T1548] active_anon 372736 [ 1959.520013][ T1548] inactive_file 0 [ 1959.520013][ T1548] active_file 0 [ 1959.520013][ T1548] unevictable 0 [ 1959.520013][ T1548] slab_reclaimable 16032 [ 1959.520013][ T1548] slab_unreclaimable 82952 [ 1959.520013][ T1548] slab 98984 [ 1959.520013][ T1548] workingset_refault_anon 0 [ 1959.520013][ T1548] workingset_refault_file 0 [ 1959.520013][ T1548] workingset_activate_anon 0 [ 1959.520013][ T1548] workingset_activate_file 0 [ 1959.520013][ T1548] workingset_restore_anon 0 [ 1959.520013][ T1548] workingset_restore_file 0 [ 1959.520013][ T1548] workingset_nodereclaim 0 [ 1959.520013][ T1548] pgscan 117 [ 1959.520013][ T1548] pgsteal 13 [ 1959.520013][ T1548] pgscan_kswapd 0 [ 1959.520013][ T1548] pgscan_direct 117 [ 1959.520013][ T1548] pgscan_khugepaged 0 [ 1959.520013][ T1548] pgsteal_kswapd 0 [ 1959.520013][ T1548] pgsteal_direct 13 [ 1959.520013][ T1548] pgsteal_khugepaged 0 [ 1959.520013][ T1548] pgfault 9921 [ 1959.520013][ T1548] pgmajfault 0 [ 1959.520013][ T1548] pgrefill 301 [ 1959.520013][ T1548] pgactivate 104 [ 1959.520013][ T1548] pgdeactivate 0 [ 1959.520013][ T1548] pglazyfree 0 [ 1959.520013][ T1548] pglazyfreed 0 [ 1959.520013][ T1548] zswpin 0 [ 1959.520013][ T1548] zswpout 0 [ 1959.520013][ T1548] thp_fault_alloc 0 [ 1959.710239][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 1959.711474][ T1548] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=1547,uid=0 03:37:39 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x0, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1959.732154][ T1548] Memory cgroup out of memory: Killed process 1547 (syz-executor.5) total-vm:54680kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1959.837379][ T1160] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1959.849878][ T1160] CPU: 0 PID: 1160 Comm: syz-executor.5 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1959.860010][ T1160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1959.870210][ T1160] Call Trace: [ 1959.873512][ T1160] [ 1959.876470][ T1160] dump_stack_lvl+0x136/0x150 [ 1959.881189][ T1160] dump_header+0x10a/0xd70 [ 1959.885664][ T1160] oom_kill_process+0x25d/0x600 [ 1959.890654][ T1160] out_of_memory+0x35c/0x1660 [ 1959.895404][ T1160] ? find_held_lock+0x2d/0x110 [ 1959.900208][ T1160] ? oom_killer_disable+0x2b0/0x2b0 [ 1959.905601][ T1160] ? rcu_read_unlock+0x9/0x60 [ 1959.910329][ T1160] ? find_held_lock+0x2d/0x110 [ 1959.915154][ T1160] mem_cgroup_out_of_memory+0x206/0x270 [ 1959.920739][ T1160] ? mem_cgroup_margin+0x130/0x130 [ 1959.925882][ T1160] ? lock_downgrade+0x690/0x690 [ 1959.930786][ T1160] try_charge_memcg+0xf9b/0x13b0 [ 1959.935774][ T1160] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1959.941796][ T1160] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1959.947551][ T1160] ? lock_downgrade+0x690/0x690 [ 1959.952458][ T1160] ? lock_downgrade+0x690/0x690 [ 1959.957359][ T1160] __memcg_kmem_charge_page+0x16e/0x3c0 [ 1959.962951][ T1160] __alloc_pages+0x1f3/0x4a0 [ 1959.967672][ T1160] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1959.974501][ T1160] alloc_pages+0x1aa/0x270 [ 1959.978957][ T1160] pte_alloc_one+0x1a/0x230 [ 1959.983597][ T1160] __pte_alloc+0x6d/0x260 [ 1959.987967][ T1160] ? pmd_install+0x160/0x160 [ 1959.992610][ T1160] copy_page_range+0x151e/0x3930 [ 1959.997601][ T1160] ? mas_wr_modify+0x332/0x16d0 [ 1960.002509][ T1160] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 1960.008455][ T1160] ? mas_store+0x275/0x3a0 [ 1960.012914][ T1160] ? handle_mm_fault+0x9c0/0x9c0 [ 1960.017908][ T1160] ? up_write+0x1b4/0x520 [ 1960.022286][ T1160] dup_mmap+0xcfd/0x1480 [ 1960.026577][ T1160] ? replace_mm_exe_file+0x4b0/0x4b0 [ 1960.031905][ T1160] ? lock_downgrade+0x690/0x690 [ 1960.036806][ T1160] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1960.042667][ T1160] ? __raw_spin_lock_init+0x3a/0x110 [ 1960.047997][ T1160] ? mm_init+0x9e6/0xd50 [ 1960.052366][ T1160] copy_process+0x4611/0x7580 [ 1960.057082][ T1160] ? _raw_spin_unlock+0x28/0x40 [ 1960.061972][ T1160] ? wp_page_reuse+0x197/0x570 [ 1960.066794][ T1160] ? pidfd_prepare+0x80/0x80 [ 1960.071419][ T1160] ? lock_sync+0x190/0x190 [ 1960.075877][ T1160] ? do_raw_spin_lock+0x124/0x2b0 [ 1960.080939][ T1160] ? spin_bug+0x1c0/0x1c0 [ 1960.085304][ T1160] ? lock_downgrade+0x690/0x690 [ 1960.090203][ T1160] kernel_clone+0xeb/0x890 [ 1960.094662][ T1160] ? create_io_thread+0xe0/0xe0 [ 1960.099576][ T1160] ? vm_iomap_memory+0x190/0x190 [ 1960.104562][ T1160] ? find_held_lock+0x2d/0x110 [ 1960.109372][ T1160] __do_sys_clone+0xba/0x100 [ 1960.114002][ T1160] ? kernel_clone+0x890/0x890 [ 1960.118732][ T1160] ? syscall_enter_from_user_mode+0x26/0x80 [ 1960.124673][ T1160] do_syscall_64+0x39/0xb0 [ 1960.129117][ T1160] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1960.135062][ T1160] RIP: 0033:0x7fe702e89e9b [ 1960.139525][ T1160] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1960.159167][ T1160] RSP: 002b:00007ffcef18e470 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1960.167622][ T1160] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe702e89e9b [ 1960.175622][ T1160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1960.183621][ T1160] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555637f400 [ 1960.191618][ T1160] R10: 000055555637f6d0 R11: 0000000000000246 R12: 0000000000000001 [ 1960.199616][ T1160] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffcef18e550 [ 1960.207631][ T1160] [ 1960.281277][ T1160] memory: usage 436kB, limit 0kB, failcnt 2363 [ 1960.291342][ T1160] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1960.311267][ T1160] Memory cgroup stats for /syz5: [ 1960.311518][ T1160] anon 45056 [ 1960.311518][ T1160] file 229376 [ 1960.311518][ T1160] kernel 167936 [ 1960.311518][ T1160] kernel_stack 32768 [ 1960.311518][ T1160] pagetables 32768 [ 1960.311518][ T1160] sec_pagetables 0 [ 1960.311518][ T1160] percpu 128 [ 1960.311518][ T1160] sock 0 [ 1960.311518][ T1160] vmalloc 0 [ 1960.311518][ T1160] shmem 229376 [ 1960.311518][ T1160] zswap 0 [ 1960.311518][ T1160] zswapped 0 [ 1960.311518][ T1160] file_mapped 221184 [ 1960.311518][ T1160] file_dirty 0 [ 1960.311518][ T1160] file_writeback 0 [ 1960.311518][ T1160] swapcached 0 [ 1960.311518][ T1160] anon_thp 0 [ 1960.311518][ T1160] file_thp 0 [ 1960.311518][ T1160] shmem_thp 0 [ 1960.311518][ T1160] inactive_anon 0 [ 1960.311518][ T1160] active_anon 274432 [ 1960.311518][ T1160] inactive_file 0 [ 1960.311518][ T1160] active_file 0 [ 1960.311518][ T1160] unevictable 0 [ 1960.311518][ T1160] slab_reclaimable 12648 [ 1960.311518][ T1160] slab_unreclaimable 69136 [ 1960.311518][ T1160] slab 81784 [ 1960.311518][ T1160] workingset_refault_anon 0 [ 1960.311518][ T1160] workingset_refault_file 0 [ 1960.311518][ T1160] workingset_activate_anon 0 [ 1960.311518][ T1160] workingset_activate_file 0 [ 1960.311518][ T1160] workingset_restore_anon 0 [ 1960.311518][ T1160] workingset_restore_file 0 [ 1960.311518][ T1160] workingset_nodereclaim 0 [ 1960.311518][ T1160] pgscan 117 [ 1960.311518][ T1160] pgsteal 13 [ 1960.311518][ T1160] pgscan_kswapd 0 [ 1960.311518][ T1160] pgscan_direct 117 [ 1960.311518][ T1160] pgscan_khugepaged 0 [ 1960.311518][ T1160] pgsteal_kswapd 0 [ 1960.311518][ T1160] pgsteal_direct 13 [ 1960.311518][ T1160] pgsteal_khugepaged 0 [ 1960.311518][ T1160] pgfault 9933 [ 1960.311518][ T1160] pgmajfault 0 [ 1960.311518][ T1160] pgrefill 301 [ 1960.311518][ T1160] pgactivate 104 [ 1960.311518][ T1160] pgdeactivate 0 [ 1960.311518][ T1160] pglazyfree 0 [ 1960.311518][ T1160] pglazyfreed 0 [ 1960.311518][ T1160] zswpin 0 [ 1960.311518][ T1160] zswpout 0 [ 1960.311518][ T1160] thp_fault_alloc 0 [ 1960.501656][T18508] Bluetooth: hci5: command 0x040f tx timeout [ 1960.507977][ T1160] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=1160,uid=0 [ 1960.571403][ T1160] Memory cgroup out of memory: Killed process 1160 (syz-executor.5) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1960.633076][ T5909] team0 (unregistering): Port device team_slave_1 removed [ 1960.707739][ T5909] team0 (unregistering): Port device team_slave_0 removed [ 1960.737618][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1960.748443][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1960.756651][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1960.765098][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1960.775373][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1960.802572][ T5909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1960.830887][ T5909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1960.944676][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1960.954551][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1960.969717][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1960.977418][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1960.987391][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1961.022734][ T5909] bond0 (unregistering): Released all slaves [ 1961.210367][ T1476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1961.225752][ T1468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1961.248213][ T1468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1961.279877][ T1476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 03:37:40 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 03:37:40 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x0, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1961.364215][ T1468] team0: Port device team_slave_0 added 03:37:41 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='sched_procesr]waat\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x37, 0x80, 0x1, 0x0, 0x0, 0x44040, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x70, 0x5, 0x1, 0x1, 0xf, 0x8, 0x7fff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x4, r0, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x2, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x202, 0x1000000, 0x80000001, 0x8, 0x8001, 0xe04, 0x7fff, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x0, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB='!A']) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x2, 0xdc, 0x1, 0x0, 0x7, 0xa, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x180a, 0x9, 0x800, 0x3, 0x3, 0x8, 0x100, 0x0, 0x4, 0x0, 0x400}, r3, 0xe, r5, 0x1) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 1961.557569][ T1476] team0: Port device team_slave_0 added [ 1961.575665][ T1468] team0: Port device team_slave_1 added [ 1961.606812][ T1476] team0: Port device team_slave_1 added [ 1961.783558][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 1961.792725][ T1468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1961.799753][ T1468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1961.915991][ T1468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1962.002177][ T1468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1962.023835][ T1468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1962.069548][ T1468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1962.087968][ T1476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1962.097216][ T1476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1962.131225][ T1476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1962.296294][ T1476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1962.303666][ T1476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1962.401371][ T1476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1962.556734][ T1468] hsr_slave_0: entered promiscuous mode [ 1962.581638][ T48] Bluetooth: hci5: command 0x0419 tx timeout [ 1962.597014][ T1468] hsr_slave_1: entered promiscuous mode [ 1962.675110][ T1554] chnl_net:caif_netlink_parms(): no params data found [ 1962.754862][ T1476] hsr_slave_0: entered promiscuous mode [ 1962.781975][ T1476] hsr_slave_1: entered promiscuous mode [ 1962.796935][ T1476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1962.821369][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 1962.832045][ T1476] Cannot create hsr debugfs directory [ 1963.058506][ T1552] chnl_net:caif_netlink_parms(): no params data found [ 1963.068303][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 1963.128117][ T1554] bridge0: port 1(bridge_slave_0) entered blocking state [ 1963.137199][ T1554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1963.156831][ T1554] bridge_slave_0: entered allmulticast mode [ 1963.172870][ T1554] bridge_slave_0: entered promiscuous mode [ 1963.226488][ T1554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1963.241437][ T1554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1963.248724][ T1554] bridge_slave_1: entered allmulticast mode [ 1963.272636][ T1554] bridge_slave_1: entered promiscuous mode [ 1963.450533][ T1554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1963.527159][ T1554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1963.755963][ T1552] bridge0: port 1(bridge_slave_0) entered blocking state [ 1963.784337][ T1552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1963.831573][ T1552] bridge_slave_0: entered allmulticast mode [ 1963.838852][ T1552] bridge_slave_0: entered promiscuous mode [ 1963.874648][ T1554] team0: Port device team_slave_0 added [ 1963.985114][T18508] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1963.994331][T18508] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1964.002287][T18508] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1964.010138][T18508] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1964.019456][T18508] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1964.027971][T18508] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1964.067252][ T1552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1964.095896][ T1552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1964.121547][ T1552] bridge_slave_1: entered allmulticast mode [ 1964.164639][ T1552] bridge_slave_1: entered promiscuous mode [ 1964.177666][ T1554] team0: Port device team_slave_1 added [ 1964.474402][ T1554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1964.491185][ T1554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1964.571351][ T1554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1964.716618][ T1552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1964.799787][ T1554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1964.812187][ T1554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1964.860332][ T1554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1964.889094][ T1552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1964.911406][T18508] Bluetooth: hci1: command 0x041b tx timeout [ 1965.011938][ T1552] team0: Port device team_slave_0 added [ 1965.040908][ T1552] team0: Port device team_slave_1 added [ 1965.141314][T18508] Bluetooth: hci2: command 0x041b tx timeout [ 1965.156822][ T1554] hsr_slave_0: entered promiscuous mode [ 1965.163485][ T1554] hsr_slave_1: entered promiscuous mode [ 1965.169855][ T1554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1965.181377][ T1554] Cannot create hsr debugfs directory [ 1965.234623][ T5909] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1965.315119][ T1552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1965.331381][ T1552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1965.381528][ T1552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1965.409461][ T1552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1965.418846][ T1552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1965.457904][ T1552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1965.513577][ T5909] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1965.605057][ T5909] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1965.725954][ T5909] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1965.764684][ T1552] hsr_slave_0: entered promiscuous mode [ 1965.783852][ T1552] hsr_slave_1: entered promiscuous mode [ 1965.791965][ T1552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1965.799677][ T1552] Cannot create hsr debugfs directory [ 1966.101428][T18508] Bluetooth: hci3: command 0x0409 tx timeout [ 1966.127238][ T1601] chnl_net:caif_netlink_parms(): no params data found [ 1966.249322][ T5909] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1966.402267][ T5909] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1966.553184][ T5909] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1966.600837][ T1601] bridge0: port 1(bridge_slave_0) entered blocking state [ 1966.609442][ T1601] bridge0: port 1(bridge_slave_0) entered disabled state [ 1966.617268][ T1601] bridge_slave_0: entered allmulticast mode [ 1966.627589][ T1601] bridge_slave_0: entered promiscuous mode [ 1966.649290][ T5909] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1966.691865][ T1601] bridge0: port 2(bridge_slave_1) entered blocking state [ 1966.699030][ T1601] bridge0: port 2(bridge_slave_1) entered disabled state [ 1966.716717][ T1601] bridge_slave_1: entered allmulticast mode [ 1966.729138][ T1601] bridge_slave_1: entered promiscuous mode [ 1966.797461][ T1601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1966.836721][ T1601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1966.940827][ T5909] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1966.965867][ T1601] team0: Port device team_slave_0 added [ 1966.977430][ T1601] team0: Port device team_slave_1 added [ 1966.991451][T18508] Bluetooth: hci1: command 0x040f tx timeout [ 1967.049581][ T5909] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1967.103029][ T1601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1967.110073][ T1601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1967.140157][ T1601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1967.159181][ T1601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1967.173321][ T1601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1967.202575][ T1601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1967.227470][ T5909] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1967.239082][T18508] Bluetooth: hci2: command 0x040f tx timeout [ 1967.323469][ T1601] hsr_slave_0: entered promiscuous mode [ 1967.341793][ T1601] hsr_slave_1: entered promiscuous mode [ 1967.364624][ T1601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1967.396321][ T1601] Cannot create hsr debugfs directory [ 1967.482110][ T5909] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1967.799299][ T5909] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1967.952145][ T5909] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.042708][ T5909] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.136349][ T5909] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.191416][T18508] Bluetooth: hci3: command 0x041b tx timeout [ 1969.071758][T18508] Bluetooth: hci1: command 0x0419 tx timeout [ 1969.301347][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 1970.026185][ T5909] hsr_slave_0: left promiscuous mode [ 1970.033243][ T5909] hsr_slave_1: left promiscuous mode [ 1970.039388][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1970.058953][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1970.072849][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1970.080347][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1970.102282][ T5909] bridge_slave_1: left allmulticast mode [ 1970.108009][ T5909] bridge_slave_1: left promiscuous mode [ 1970.126543][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state [ 1970.140783][ T5909] bridge_slave_0: left allmulticast mode [ 1970.153197][ T5909] bridge_slave_0: left promiscuous mode [ 1970.159096][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state [ 1970.173668][ T5909] hsr_slave_0: left promiscuous mode [ 1970.179734][ T5909] hsr_slave_1: left promiscuous mode [ 1970.188723][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1970.196702][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1970.207239][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1970.215216][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1970.227451][ T5909] bridge_slave_1: left allmulticast mode [ 1970.233514][ T5909] bridge_slave_1: left promiscuous mode [ 1970.239273][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state [ 1970.251558][ T5909] bridge_slave_0: left allmulticast mode [ 1970.257373][ T5909] bridge_slave_0: left promiscuous mode [ 1970.271554][T18508] Bluetooth: hci3: command 0x040f tx timeout [ 1970.276135][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state [ 1970.291894][ T5909] hsr_slave_0: left promiscuous mode [ 1970.314388][ T5909] hsr_slave_1: left promiscuous mode [ 1970.320596][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1970.348446][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1970.369958][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1970.389181][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1970.413982][ T5909] bridge_slave_1: left allmulticast mode [ 1970.419717][ T5909] bridge_slave_1: left promiscuous mode [ 1970.438768][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state [ 1970.450764][ T5909] bridge_slave_0: left allmulticast mode [ 1970.468419][ T5909] bridge_slave_0: left promiscuous mode [ 1970.478529][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state [ 1970.492580][ T5909] hsr_slave_0: left promiscuous mode [ 1970.498508][ T5909] hsr_slave_1: left promiscuous mode [ 1970.504718][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1970.513162][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1970.522676][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1970.530133][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1970.539799][ T5909] bridge_slave_1: left allmulticast mode [ 1970.545622][ T5909] bridge_slave_1: left promiscuous mode [ 1970.551496][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state [ 1970.560249][ T5909] bridge_slave_0: left allmulticast mode [ 1970.568497][ T5909] bridge_slave_0: left promiscuous mode [ 1970.574582][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state [ 1970.596002][ T5909] veth1_macvtap: left promiscuous mode [ 1970.601708][ T5909] veth0_macvtap: left promiscuous mode [ 1970.607289][ T5909] veth1_vlan: left promiscuous mode [ 1970.612663][ T5909] veth0_vlan: left promiscuous mode [ 1970.619792][ T5909] veth1_macvtap: left promiscuous mode [ 1970.625455][ T5909] veth0_macvtap: left promiscuous mode [ 1970.631086][ T5909] veth1_vlan: left promiscuous mode [ 1970.636845][ T5909] veth0_vlan: left promiscuous mode [ 1970.643699][ T5909] veth1_macvtap: left promiscuous mode [ 1970.649219][ T5909] veth0_macvtap: left promiscuous mode [ 1970.655614][ T5909] veth1_vlan: left promiscuous mode [ 1970.661002][ T5909] veth0_vlan: left promiscuous mode [ 1970.669110][ T5909] veth1_macvtap: left promiscuous mode [ 1970.675220][ T5909] veth0_macvtap: left promiscuous mode [ 1970.680846][ T5909] veth1_vlan: left promiscuous mode [ 1970.686351][ T5909] veth0_vlan: left promiscuous mode [ 1971.212822][ T5909] team0 (unregistering): Port device team_slave_1 removed [ 1971.231510][ T5909] team0 (unregistering): Port device team_slave_0 removed [ 1971.244873][ T5909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1971.259729][ T5909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1971.333582][ T5909] bond0 (unregistering): Released all slaves [ 1971.486124][ T5909] team0 (unregistering): Port device team_slave_1 removed [ 1971.500065][ T5909] team0 (unregistering): Port device team_slave_0 removed [ 1971.520630][ T5909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1971.537746][ T5909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1971.610148][ T5909] bond0 (unregistering): Released all slaves [ 1971.763937][ T5909] team0 (unregistering): Port device team_slave_1 removed [ 1971.780376][ T5909] team0 (unregistering): Port device team_slave_0 removed [ 1971.798147][ T5909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1971.812580][ T5909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1971.889183][ T5909] bond0 (unregistering): Released all slaves [ 1972.029370][ T5909] team0 (unregistering): Port device team_slave_1 removed [ 1972.046860][ T5909] team0 (unregistering): Port device team_slave_0 removed [ 1972.062050][ T5909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1972.078405][ T5909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1972.150820][ T5909] bond0 (unregistering): Released all slaves [ 1972.341427][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 1974.942171][ T1468] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1974.960567][ T1468] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1975.031043][ T1468] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1975.048591][ T1468] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1975.370571][ T1468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1975.390200][T32211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1975.403050][T32211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1975.424459][ T1468] 8021q: adding VLAN 0 to HW filter on device team0 [ 1975.439810][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1975.454718][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1975.463435][T18437] bridge0: port 1(bridge_slave_0) entered blocking state [ 1975.470561][T18437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1975.506531][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1975.515031][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1975.524624][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1975.534838][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 1975.542020][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1975.550369][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1975.562448][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1975.571853][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1975.580878][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1975.615379][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1975.624750][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1975.634726][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1975.643818][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1975.655772][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1975.664627][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1975.673481][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1975.684139][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1976.076080][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1976.090799][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1976.113233][ T1468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1976.240940][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1976.249743][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1976.283435][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1976.292633][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1976.312446][ T1468] veth0_vlan: entered promiscuous mode [ 1976.330744][T26547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1976.343137][T26547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1976.370595][ T1468] veth1_vlan: entered promiscuous mode [ 1976.410335][ T1468] veth0_macvtap: entered promiscuous mode [ 1976.420876][T26547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1976.439341][T26547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1976.448797][T26547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1976.464794][T26547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1976.490682][ T1468] veth1_macvtap: entered promiscuous mode [ 1976.504816][T26547] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1976.551790][ T1468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1976.559836][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1976.568885][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1976.582626][ T1468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1976.594901][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1976.605090][T22809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1976.616802][ T1468] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1976.625973][ T1468] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1976.639202][ T1468] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1976.648325][ T1468] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1976.792086][T26995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1976.800211][T26995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1976.819816][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1976.858297][ T1601] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1976.882938][ T1476] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1976.896947][ T1476] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1976.907695][ T1601] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1976.908415][T26995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1976.927548][ T1601] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1976.931803][T26995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1976.948565][ T1601] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1976.959121][ T1476] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1976.972780][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1977.002816][ T1476] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1977.039571][ T1468] ================================================================== [ 1977.047700][ T1468] BUG: KASAN: slab-use-after-free in enqueue_timer+0x4df/0x520 [ 1977.055319][ T1468] Write of size 8 at addr ffff888053395500 by task syz-executor.3/1468 [ 1977.063598][ T1468] [ 1977.065949][ T1468] CPU: 1 PID: 1468 Comm: syz-executor.3 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1977.075967][ T1468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1977.086057][ T1468] Call Trace: [ 1977.089369][ T1468] [ 1977.092349][ T1468] dump_stack_lvl+0xd9/0x150 [ 1977.096967][ T1468] print_address_description.constprop.0+0x2c/0x3c0 [ 1977.103590][ T1468] ? enqueue_timer+0x4df/0x520 [ 1977.108473][ T1468] kasan_report+0x11c/0x130 [ 1977.112995][ T1468] ? enqueue_timer+0x4df/0x520 [ 1977.117788][ T1468] enqueue_timer+0x4df/0x520 [ 1977.122419][ T1468] __mod_timer+0x8b5/0xe80 [ 1977.126847][ T1468] ? timer_shutdown_sync+0x20/0x20 [ 1977.131985][ T1468] ? mark_held_locks+0x9f/0xe0 [ 1977.136769][ T1468] ? ktime_get+0x38e/0x470 [ 1977.141270][ T1468] ? lockdep_hardirqs_on+0x7d/0x100 [ 1977.146488][ T1468] ? ktime_get+0x38e/0x470 [ 1977.150927][ T1468] ? ktime_get+0x30f/0x470 [ 1977.155358][ T1468] add_timer+0x62/0x90 [ 1977.159437][ T1468] start_this_handle+0xbd8/0x14e0 [ 1977.164510][ T1468] ? stop_this_handle+0x560/0x560 [ 1977.169560][ T1468] ? rcu_is_watching+0x12/0xb0 [ 1977.174349][ T1468] ? kmem_cache_alloc+0x337/0x3b0 [ 1977.179404][ T1468] jbd2__journal_start+0x390/0x850 [ 1977.184540][ T1468] ? __ext4_new_inode+0x2cb7/0x54b0 [ 1977.189759][ T1468] __ext4_journal_start_sb+0x411/0x5d0 [ 1977.195233][ T1468] __ext4_new_inode+0x2cb7/0x54b0 [ 1977.200376][ T1468] ? ext4_mark_inode_used+0x1490/0x1490 [ 1977.205956][ T1468] ? map_id_up+0x178/0x2f0 [ 1977.210407][ T1468] ext4_mkdir+0x33e/0xb20 [ 1977.214767][ T1468] ? ext4_init_new_dir+0x4c0/0x4c0 [ 1977.219902][ T1468] ? inode_permission.part.0+0xb5/0x520 [ 1977.225473][ T1468] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1977.230531][ T1468] vfs_mkdir+0x242/0x460 [ 1977.234811][ T1468] do_mkdirat+0x28d/0x310 [ 1977.239151][ T1468] ? __ia32_sys_mknod+0xb0/0xb0 [ 1977.244014][ T1468] ? getname_flags.part.0+0x1dd/0x4f0 [ 1977.249397][ T1468] __x64_sys_mkdirat+0x119/0x170 [ 1977.254352][ T1468] do_syscall_64+0x39/0xb0 [ 1977.258780][ T1468] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1977.264695][ T1468] RIP: 0033:0x7fa89e88b187 [ 1977.269243][ T1468] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1977.289293][ T1468] RSP: 002b:00007ffcb8c6af18 EFLAGS: 00000206 ORIG_RAX: 0000000000000102 [ 1977.297718][ T1468] RAX: ffffffffffffffda RBX: 00007ffcb8c6afa0 RCX: 00007fa89e88b187 [ 1977.305696][ T1468] RDX: 00000000000001ff RSI: 00007ffcb8c6afa0 RDI: 00000000ffffff9c [ 1977.313676][ T1468] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000003 [ 1977.321663][ T1468] R10: 00007ffcb8c6acb7 R11: 0000000000000206 R12: 0000000000000003 [ 1977.329641][ T1468] R13: 00007fa89e983140 R14: 00007fa89e983e48 R15: 00007ffcb8c6afe0 [ 1977.337632][ T1468] [ 1977.340653][ T1468] [ 1977.342976][ T1468] Allocated by task 1100: [ 1977.347306][ T1468] kasan_save_stack+0x22/0x40 [ 1977.352010][ T1468] kasan_set_track+0x25/0x30 [ 1977.356626][ T1468] __kasan_kmalloc+0xa2/0xb0 [ 1977.361238][ T1468] __kmalloc_node+0x61/0x1a0 [ 1977.365860][ T1468] kvmalloc_node+0x76/0x1a0 [ 1977.370380][ T1468] alloc_netdev_mqs+0x9c/0x1250 [ 1977.375285][ T1468] rtnl_create_link+0xbeb/0xee0 [ 1977.380191][ T1468] __rtnl_newlink+0xfd4/0x1840 [ 1977.384970][ T1468] rtnl_newlink+0x68/0xa0 [ 1977.389311][ T1468] rtnetlink_rcv_msg+0x43d/0xd50 [ 1977.394281][ T1468] netlink_rcv_skb+0x165/0x440 [ 1977.399092][ T1468] netlink_unicast+0x547/0x7f0 [ 1977.403868][ T1468] netlink_sendmsg+0x925/0xe30 [ 1977.408656][ T1468] sock_sendmsg+0xde/0x190 [ 1977.413084][ T1468] __sys_sendto+0x23a/0x340 [ 1977.417602][ T1468] __x64_sys_sendto+0xe1/0x1b0 [ 1977.422382][ T1468] do_syscall_64+0x39/0xb0 [ 1977.426820][ T1468] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1977.432988][ T1468] [ 1977.435320][ T1468] Freed by task 5909: [ 1977.439300][ T1468] kasan_save_stack+0x22/0x40 [ 1977.443998][ T1468] kasan_set_track+0x25/0x30 [ 1977.448630][ T1468] kasan_save_free_info+0x2e/0x40 [ 1977.453690][ T1468] ____kasan_slab_free+0x160/0x1c0 [ 1977.458817][ T1468] slab_free_freelist_hook+0x8b/0x1c0 [ 1977.464197][ T1468] __kmem_cache_free+0xaf/0x2d0 [ 1977.469099][ T1468] kvfree+0x46/0x50 [ 1977.472955][ T1468] device_release+0xa3/0x240 [ 1977.477647][ T1468] kobject_put+0x1c2/0x4d0 [ 1977.482089][ T1468] netdev_run_todo+0x762/0x1100 [ 1977.486994][ T1468] default_device_exit_batch+0x456/0x5b0 [ 1977.492670][ T1468] ops_exit_list+0x125/0x170 [ 1977.497275][ T1468] cleanup_net+0x4ee/0xb10 [ 1977.501719][ T1468] process_one_work+0x991/0x15c0 [ 1977.506746][ T1468] worker_thread+0x669/0x1090 [ 1977.511440][ T1468] kthread+0x344/0x440 [ 1977.515518][ T1468] ret_from_fork+0x1f/0x30 [ 1977.519950][ T1468] [ 1977.522277][ T1468] Last potentially related work creation: [ 1977.528004][ T1468] kasan_save_stack+0x22/0x40 [ 1977.532694][ T1468] __kasan_record_aux_stack+0xbc/0xd0 [ 1977.538083][ T1468] insert_work+0x48/0x350 [ 1977.542429][ T1468] __queue_work+0x625/0x1120 [ 1977.547036][ T1468] call_timer_fn+0x1a0/0x580 [ 1977.551633][ T1468] expire_timers+0xbc/0x4b0 [ 1977.556164][ T1468] run_timer_softirq+0x326/0x910 [ 1977.561107][ T1468] __do_softirq+0x1d4/0x905 [ 1977.565638][ T1468] [ 1977.567961][ T1468] Second to last potentially related work creation: [ 1977.574542][ T1468] kasan_save_stack+0x22/0x40 [ 1977.579232][ T1468] __kasan_record_aux_stack+0xbc/0xd0 [ 1977.584631][ T1468] insert_work+0x48/0x350 [ 1977.588975][ T1468] __queue_work+0x625/0x1120 [ 1977.593582][ T1468] call_timer_fn+0x1a0/0x580 [ 1977.598180][ T1468] expire_timers+0xbc/0x4b0 [ 1977.602691][ T1468] run_timer_softirq+0x326/0x910 [ 1977.607636][ T1468] __do_softirq+0x1d4/0x905 [ 1977.612171][ T1468] [ 1977.614496][ T1468] The buggy address belongs to the object at ffff888053394000 [ 1977.614496][ T1468] which belongs to the cache kmalloc-cg-8k of size 8192 [ 1977.629209][ T1468] The buggy address is located 5376 bytes inside of [ 1977.629209][ T1468] freed 8192-byte region [ffff888053394000, ffff888053396000) [ 1977.643193][ T1468] [ 1977.645528][ T1468] The buggy address belongs to the physical page: [ 1977.651940][ T1468] page:ffffea00014ce400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x53390 [ 1977.662096][ T1468] head:ffffea00014ce400 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1977.671182][ T1468] memcg:ffff888079de6081 [ 1977.675439][ T1468] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1977.683540][ T1468] raw: 00fff00000010200 ffff88801244f640 dead000000000100 dead000000000122 [ 1977.692156][ T1468] raw: 0000000000000000 0000000000020002 00000001ffffffff ffff888079de6081 [ 1977.700740][ T1468] page dumped because: kasan: bad access detected [ 1977.707183][ T1468] page_owner tracks the page as allocated [ 1977.712911][ T1468] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 31179, tgid 31179 (syz-executor.4), ts 1775097999531, free_ts 1773690709377 [ 1977.738118][ T1468] post_alloc_hook+0x2db/0x350 [ 1977.742923][ T1468] get_page_from_freelist+0x1190/0x2e20 [ 1977.748490][ T1468] __alloc_pages+0x1cb/0x4a0 [ 1977.753103][ T1468] alloc_pages+0x1aa/0x270 [ 1977.757547][ T1468] allocate_slab+0x25f/0x390 [ 1977.762145][ T1468] ___slab_alloc+0xa91/0x1400 [ 1977.766864][ T1468] __slab_alloc.constprop.0+0x56/0xa0 [ 1977.772338][ T1468] __kmem_cache_alloc_node+0x136/0x320 [ 1977.777820][ T1468] __kmalloc_node+0x51/0x1a0 [ 1977.782440][ T1468] kvmalloc_node+0x76/0x1a0 [ 1977.786999][ T1468] alloc_netdev_mqs+0x9c/0x1250 [ 1977.791881][ T1468] rtnl_create_link+0xbeb/0xee0 [ 1977.796753][ T1468] __rtnl_newlink+0xfd4/0x1840 [ 1977.801550][ T1468] rtnl_newlink+0x68/0xa0 [ 1977.805996][ T1468] rtnetlink_rcv_msg+0x43d/0xd50 [ 1977.810976][ T1468] netlink_rcv_skb+0x165/0x440 [ 1977.815762][ T1468] page last free stack trace: [ 1977.820460][ T1468] free_pcp_prepare+0x5da/0xa60 [ 1977.825334][ T1468] free_unref_page+0x1d/0x490 [ 1977.830046][ T1468] __unfreeze_partials+0x17c/0x1a0 [ 1977.835172][ T1468] qlist_free_all+0x6a/0x170 [ 1977.839797][ T1468] kasan_quarantine_reduce+0x195/0x220 [ 1977.845299][ T1468] __kasan_slab_alloc+0x63/0x90 [ 1977.850163][ T1468] __kmem_cache_alloc_node+0x17c/0x320 [ 1977.855674][ T1468] kmalloc_trace+0x26/0xe0 [ 1977.860110][ T1468] netdevice_event+0x368/0x8f0 [ 1977.864971][ T1468] notifier_call_chain+0xb5/0x200 [ 1977.870312][ T1468] call_netdevice_notifiers_info+0xb9/0x130 [ 1977.876222][ T1468] unregister_netdevice_many_notify+0x75f/0x18c0 [ 1977.882567][ T1468] default_device_exit_batch+0x451/0x5b0 [ 1977.888231][ T1468] ops_exit_list+0x125/0x170 [ 1977.892839][ T1468] cleanup_net+0x4ee/0xb10 [ 1977.897270][ T1468] process_one_work+0x991/0x15c0 [ 1977.902348][ T1468] [ 1977.904689][ T1468] Memory state around the buggy address: [ 1977.910321][ T1468] ffff888053395400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1977.918394][ T1468] ffff888053395480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1977.926472][ T1468] >ffff888053395500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1977.934572][ T1468] ^ [ 1977.938651][ T1468] ffff888053395580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1977.946725][ T1468] ffff888053395600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1977.954787][ T1468] ================================================================== [ 1977.962938][ T1468] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1977.970132][ T1468] CPU: 1 PID: 1468 Comm: syz-executor.3 Not tainted 6.3.0-syzkaller-07934-g415d7a49cd79 #0 [ 1977.980140][ T1468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1977.990221][ T1468] Call Trace: [ 1977.993509][ T1468] [ 1977.996444][ T1468] dump_stack_lvl+0xd9/0x150 [ 1978.001063][ T1468] panic+0x688/0x730 [ 1978.004981][ T1468] ? panic_smp_self_stop+0x90/0x90 [ 1978.010116][ T1468] ? lock_downgrade+0x690/0x690 [ 1978.015004][ T1468] check_panic_on_warn+0xb1/0xc0 [ 1978.019965][ T1468] end_report+0xe9/0x120 [ 1978.024243][ T1468] ? enqueue_timer+0x4df/0x520 [ 1978.029037][ T1468] kasan_report+0xf9/0x130 [ 1978.033490][ T1468] ? enqueue_timer+0x4df/0x520 [ 1978.040017][ T1468] enqueue_timer+0x4df/0x520 [ 1978.044650][ T1468] __mod_timer+0x8b5/0xe80 [ 1978.049078][ T1468] ? timer_shutdown_sync+0x20/0x20 [ 1978.054286][ T1468] ? mark_held_locks+0x9f/0xe0 [ 1978.059064][ T1468] ? ktime_get+0x38e/0x470 [ 1978.063504][ T1468] ? lockdep_hardirqs_on+0x7d/0x100 [ 1978.068727][ T1468] ? ktime_get+0x38e/0x470 [ 1978.073156][ T1468] ? ktime_get+0x30f/0x470 [ 1978.077770][ T1468] add_timer+0x62/0x90 [ 1978.081936][ T1468] start_this_handle+0xbd8/0x14e0 [ 1978.086990][ T1468] ? stop_this_handle+0x560/0x560 [ 1978.092040][ T1468] ? rcu_is_watching+0x12/0xb0 [ 1978.096823][ T1468] ? kmem_cache_alloc+0x337/0x3b0 [ 1978.101863][ T1468] jbd2__journal_start+0x390/0x850 [ 1978.107011][ T1468] ? __ext4_new_inode+0x2cb7/0x54b0 [ 1978.112314][ T1468] __ext4_journal_start_sb+0x411/0x5d0 [ 1978.117788][ T1468] __ext4_new_inode+0x2cb7/0x54b0 [ 1978.122841][ T1468] ? ext4_mark_inode_used+0x1490/0x1490 [ 1978.128420][ T1468] ? map_id_up+0x178/0x2f0 [ 1978.132867][ T1468] ext4_mkdir+0x33e/0xb20 [ 1978.137228][ T1468] ? ext4_init_new_dir+0x4c0/0x4c0 [ 1978.142360][ T1468] ? inode_permission.part.0+0xb5/0x520 [ 1978.147942][ T1468] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1978.152985][ T1468] vfs_mkdir+0x242/0x460 [ 1978.157254][ T1468] do_mkdirat+0x28d/0x310 [ 1978.161615][ T1468] ? __ia32_sys_mknod+0xb0/0xb0 [ 1978.166476][ T1468] ? getname_flags.part.0+0x1dd/0x4f0 [ 1978.171859][ T1468] __x64_sys_mkdirat+0x119/0x170 [ 1978.176811][ T1468] do_syscall_64+0x39/0xb0 [ 1978.181237][ T1468] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1978.187153][ T1468] RIP: 0033:0x7fa89e88b187 [ 1978.191573][ T1468] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1978.211192][ T1468] RSP: 002b:00007ffcb8c6af18 EFLAGS: 00000206 ORIG_RAX: 0000000000000102 [ 1978.219619][ T1468] RAX: ffffffffffffffda RBX: 00007ffcb8c6afa0 RCX: 00007fa89e88b187 [ 1978.227625][ T1468] RDX: 00000000000001ff RSI: 00007ffcb8c6afa0 RDI: 00000000ffffff9c [ 1978.235609][ T1468] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000003 [ 1978.243588][ T1468] R10: 00007ffcb8c6acb7 R11: 0000000000000206 R12: 0000000000000003 [ 1978.251565][ T1468] R13: 00007fa89e983140 R14: 00007fa89e983e48 R15: 00007ffcb8c6afe0 [ 1978.259550][ T1468] [ 1979.396147][ T1468] Shutting down cpus with NMI [ 1979.401177][ T1468] Kernel Offset: disabled [ 1979.405534][ T1468] Rebooting in 86400 seconds..