openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) [ 2897.048912][ T8951] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=8950,uid=0 [ 2897.066557][ T8951] Memory cgroup out of memory: Killed process 8951 (syz-executor.5) total-vm:56860kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2897.087326][ T8776] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2897.135386][ T8693] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 2897.135436][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2897.147428][ T8693] CPU: 0 PID: 8693 Comm: syz-executor.5 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2897.164893][ T8693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2897.171566][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2897.174948][ T8693] Call Trace: [ 2897.174959][ T8693] [ 2897.189178][ T8693] dump_stack_lvl+0x136/0x150 [ 2897.193913][ T8693] dump_header+0x10a/0xd70 [ 2897.198399][ T8693] oom_kill_process+0x25d/0x600 [ 2897.202614][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2897.203270][ T8693] out_of_memory+0x35c/0x1660 [ 2897.216027][ T8693] ? find_held_lock+0x2d/0x110 [ 2897.220838][ T8693] ? oom_killer_disable+0x2b0/0x2b0 [ 2897.226079][ T8693] ? rcu_read_unlock+0x9/0x60 [ 2897.230803][ T8693] ? find_held_lock+0x2d/0x110 [ 2897.235613][ T8693] mem_cgroup_out_of_memory+0x206/0x270 [ 2897.241210][ T8693] ? mem_cgroup_margin+0x130/0x130 [ 2897.246369][ T8693] ? lock_downgrade+0x690/0x690 [ 2897.251289][ T8693] try_charge_memcg+0xf99/0x13a0 [ 2897.256375][ T8693] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2897.262416][ T8693] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2897.268195][ T8693] ? lock_downgrade+0x690/0x690 [ 2897.273114][ T8693] ? lock_downgrade+0x690/0x690 [ 2897.278048][ T8693] __memcg_kmem_charge_page+0x16e/0x3c0 [ 2897.283655][ T8693] __alloc_pages+0x1f3/0x4a0 [ 2897.288296][ T8693] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2897.295112][ T8693] ? print_usage_bug.part.0+0x660/0x660 [ 2897.300715][ T8693] ? find_held_lock+0x2d/0x110 [ 2897.305533][ T8693] alloc_pages+0x1aa/0x270 [ 2897.310009][ T8693] pte_alloc_one+0x1a/0x230 [ 2897.314552][ T8693] __pte_alloc+0x6d/0x260 [ 2897.318925][ T8693] ? pmd_install+0x160/0x160 [ 2897.323566][ T8693] ? _raw_spin_unlock+0x28/0x40 [ 2897.328461][ T8693] ? __pmd_alloc+0x30c/0x5d0 [ 2897.329027][ T8703] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2897.333064][ T8693] ? __pud_alloc+0xe4/0x180 [ 2897.346285][ T8693] copy_page_range+0x151e/0x3830 [ 2897.351285][ T8693] ? mas_wr_modify+0x2da/0x16d0 [ 2897.355512][ T8703] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2897.356190][ T8693] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 2897.370760][ T8693] ? mas_store+0x275/0x3a0 [ 2897.375216][ T8693] ? handle_mm_fault+0x9f0/0x9f0 [ 2897.378319][ T8703] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2897.380158][ T8693] ? down_write+0x14f/0x200 [ 2897.393385][ T8693] dup_mmap+0x10bc/0x19d0 [ 2897.397778][ T8693] ? replace_mm_exe_file+0x4c0/0x4c0 [ 2897.398816][ T8703] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2897.403105][ T8693] ? lockdep_hardirqs_on+0x7d/0x100 [ 2897.416987][ T8693] ? mm_init+0xc7a/0x1030 [ 2897.421377][ T8693] copy_process+0x65ae/0x7600 [ 2897.426114][ T8693] ? _raw_spin_unlock+0x28/0x40 [ 2897.431043][ T8693] ? pidfd_prepare+0x80/0x80 [ 2897.435711][ T8693] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2897.441743][ T8693] kernel_clone+0xeb/0x890 [ 2897.446201][ T8693] ? create_io_thread+0xe0/0xe0 [ 2897.451090][ T8693] ? do_user_addr_fault+0x2b1/0x1210 [ 2897.456428][ T8693] ? reacquire_held_locks+0x216/0x4e0 [ 2897.461849][ T8693] ? do_user_addr_fault+0x2b1/0x1210 [ 2897.467198][ T8693] ? find_held_lock+0x2d/0x110 [ 2897.472029][ T8693] __do_sys_clone+0xba/0x100 [ 2897.476683][ T8693] ? kernel_clone+0x890/0x890 [ 2897.481431][ T8693] ? syscall_enter_from_user_mode+0x26/0x80 [ 2897.487389][ T8693] do_syscall_64+0x39/0xb0 [ 2897.491864][ T8693] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2897.497826][ T8693] RIP: 0033:0x7f5b0a889e9b [ 2897.502280][ T8693] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2897.521927][ T8693] RSP: 002b:00007ffc5dfbbaa0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2897.530379][ T8693] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5b0a889e9b [ 2897.538377][ T8693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2897.546369][ T8693] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556fb6400 [ 2897.554357][ T8693] R10: 0000555556fb66d0 R11: 0000000000000246 R12: 0000000000000001 [ 2897.562344][ T8693] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc5dfbbb80 [ 2897.570366][ T8693] [ 2897.583237][ T8693] memory: usage 10452kB, limit 0kB, failcnt 1004 [ 2897.590024][ T8693] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2897.610292][ T8693] Memory cgroup stats for /syz5: [ 2897.610503][ T8693] anon 40960 [ 2897.610503][ T8693] file 10448896 [ 2897.610503][ T8693] kernel 172032 [ 2897.610503][ T8693] kernel_stack 32768 [ 2897.610503][ T8693] pagetables 12288 [ 2897.610503][ T8693] sec_pagetables 0 [ 2897.610503][ T8693] percpu 128 [ 2897.610503][ T8693] sock 0 [ 2897.610503][ T8693] vmalloc 0 [ 2897.610503][ T8693] shmem 10448896 [ 2897.610503][ T8693] zswap 0 [ 2897.610503][ T8693] zswapped 0 [ 2897.610503][ T8693] file_mapped 278528 [ 2897.610503][ T8693] file_dirty 0 [ 2897.610503][ T8693] file_writeback 0 [ 2897.610503][ T8693] swapcached 0 [ 2897.610503][ T8693] anon_thp 0 [ 2897.610503][ T8693] file_thp 0 [ 2897.610503][ T8693] shmem_thp 0 [ 2897.610503][ T8693] inactive_anon 10448896 [ 2897.610503][ T8693] active_anon 40960 [ 2897.610503][ T8693] inactive_file 0 [ 2897.610503][ T8693] active_file 0 [ 2897.610503][ T8693] unevictable 0 [ 2897.610503][ T8693] slab_reclaimable 38872 [ 2897.610503][ T8693] slab_unreclaimable 71528 [ 2897.610503][ T8693] slab 110400 [ 2897.610503][ T8693] workingset_refault_anon 0 [ 2897.610503][ T8693] workingset_refault_file 0 [ 2897.610503][ T8693] workingset_activate_anon 0 [ 2897.610503][ T8693] workingset_activate_file 0 [ 2897.610503][ T8693] workingset_restore_anon 0 [ 2897.610503][ T8693] workingset_restore_file 0 [ 2897.610503][ T8693] workingset_nodereclaim 0 [ 2897.610503][ T8693] pgscan 716 [ 2897.610503][ T8693] pgsteal 57 [ 2897.610503][ T8693] pgscan_kswapd 0 [ 2897.610503][ T8693] pgscan_direct 716 [ 2897.610503][ T8693] pgscan_khugepaged 0 [ 2897.610503][ T8693] pgsteal_kswapd 0 [ 2897.610503][ T8693] pgsteal_direct 57 [ 2897.610503][ T8693] pgsteal_khugepaged 0 [ 2897.610503][ T8693] pgfault 82160 [ 2897.610503][ T8693] pgmajfault 0 [ 2897.610503][ T8693] pgrefill 25846 [ 2897.610503][ T8693] pgactivate 627 [ 2897.610503][ T8693] pgdeactivate 0 [ 2897.610503][ T8693] pglazyfree 0 [ 2897.610503][ T8693] pglazyfreed 0 [ 2897.610503][ T8693] zswpin 0 [ 2897.610503][ T8693] zswpout 0 [ 2897.610503][ T8693] thp_fault_alloc 0 [ 2897.803807][ T8693] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=8693,uid=0 [ 2897.822630][ T8693] Memory cgroup out of memory: Killed process 8693 (syz-executor.5) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2897.846255][T15857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2897.846428][ T8776] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2897.858586][T15857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2897.898578][ T8776] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2897.939216][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2898.045024][ T8765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2898.066624][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2898.074855][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2898.147943][ T8773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2898.163060][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2898.172044][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 01:15:26 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) [ 2898.421055][ T8960] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2898.436269][ T8960] CPU: 0 PID: 8960 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2898.445797][ T8765] 8021q: adding VLAN 0 to HW filter on device team0 [ 2898.446631][ T8960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2898.463323][ T8960] Call Trace: [ 2898.466622][ T8960] [ 2898.469577][ T8960] dump_stack_lvl+0x136/0x150 [ 2898.474307][ T8960] dump_header+0x10a/0xd70 [ 2898.478771][ T8960] oom_kill_process+0x25d/0x600 [ 2898.483673][ T8960] out_of_memory+0x35c/0x1660 [ 2898.488408][ T8960] ? io_schedule_timeout+0x150/0x150 [ 2898.493744][ T8960] ? oom_killer_disable+0x2b0/0x2b0 [ 2898.499006][ T8960] mem_cgroup_out_of_memory+0x206/0x270 [ 2898.504602][ T8960] ? mem_cgroup_margin+0x130/0x130 [ 2898.509777][ T8960] memory_max_write+0x2f9/0x3c0 [ 2898.514755][ T8960] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2898.520861][ T8960] ? cgroup_file_write+0x8e/0x7b0 [ 2898.525917][ T8960] cgroup_file_write+0x1e2/0x7b0 [ 2898.530874][ T8960] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2898.536971][ T8960] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2898.542373][ T8960] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2898.547766][ T8960] kernfs_fop_write_iter+0x3f1/0x600 [ 2898.553095][ T8960] vfs_write+0x945/0xd50 [ 2898.557380][ T8960] ? kernel_write+0x670/0x670 [ 2898.562078][ T8960] ? lockdep_hardirqs_on+0x7d/0x100 [ 2898.567323][ T8960] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2898.573523][ T8960] ksys_write+0x12b/0x250 [ 2898.577867][ T8960] ? __ia32_sys_read+0xb0/0xb0 [ 2898.582677][ T8960] ? syscall_enter_from_user_mode+0x30/0x80 [ 2898.588608][ T8960] do_syscall_64+0x39/0xb0 [ 2898.593085][ T8960] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2898.599015][ T8960] RIP: 0033:0x7f0e0288c169 [ 2898.603440][ T8960] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2898.623092][ T8960] RSP: 002b:00007f0e03515168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2898.631527][ T8960] RAX: ffffffffffffffda RBX: 00007f0e029ac050 RCX: 00007f0e0288c169 [ 2898.639531][ T8960] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 2898.647526][ T8960] RBP: 00007f0e028e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2898.655510][ T8960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2898.663501][ T8960] R13: 00007ffce181308f R14: 00007f0e03515300 R15: 0000000000022000 [ 2898.671509][ T8960] [ 2898.734156][ T8960] memory: usage 10684kB, limit 0kB, failcnt 691 [ 2898.737818][ T7036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2898.766793][ T8960] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2898.776352][ T8960] Memory cgroup stats for /syz0: [ 2898.778824][ T8960] anon 118784 [ 2898.778824][ T8960] file 10428416 [ 2898.778824][ T8960] kernel 380928 [ 2898.778824][ T8960] kernel_stack 98304 [ 2898.778824][ T8960] pagetables 77824 [ 2898.778824][ T8960] sec_pagetables 0 [ 2898.778824][ T8960] percpu 64 [ 2898.778824][ T8960] sock 0 [ 2898.778824][ T8960] vmalloc 0 [ 2898.778824][ T8960] shmem 10428416 [ 2898.778824][ T8960] zswap 0 [ 2898.778824][ T8960] zswapped 0 [ 2898.778824][ T8960] file_mapped 253952 [ 2898.778824][ T8960] file_dirty 0 [ 2898.778824][ T8960] file_writeback 0 [ 2898.778824][ T8960] swapcached 0 [ 2898.778824][ T8960] anon_thp 0 [ 2898.778824][ T8960] file_thp 0 [ 2898.778824][ T8960] shmem_thp 0 [ 2898.778824][ T8960] inactive_anon 0 [ 2898.778824][ T8960] active_anon 10547200 [ 2898.778824][ T8960] inactive_file 0 [ 2898.778824][ T8960] active_file 0 [ 2898.778824][ T8960] unevictable 0 [ 2898.778824][ T8960] slab_reclaimable 54152 [ 2898.778824][ T8960] slab_unreclaimable 122704 [ 2898.778824][ T8960] slab 176856 [ 2898.778824][ T8960] workingset_refault_anon 0 [ 2898.778824][ T8960] workingset_refault_file 0 [ 2898.778824][ T8960] workingset_activate_anon 0 [ 2898.778824][ T8960] workingset_activate_file 0 [ 2898.778824][ T8960] workingset_restore_anon 0 [ 2898.778824][ T8960] workingset_restore_file 0 [ 2898.778824][ T8960] workingset_nodereclaim 0 [ 2898.778824][ T8960] pgscan 705 [ 2898.778824][ T8960] pgsteal 266 [ 2898.778824][ T8960] pgscan_kswapd 0 [ 2898.778824][ T8960] pgscan_direct 705 [ 2898.778824][ T8960] pgscan_khugepaged 0 [ 2898.778824][ T8960] pgsteal_kswapd 0 [ 2898.778824][ T8960] pgsteal_direct 266 [ 2898.778824][ T8960] pgsteal_khugepaged 0 [ 2898.778824][ T8960] pgfault 53500 [ 2898.778824][ T8960] pgmajfault 0 [ 2898.778824][ T8960] pgrefill 27828 [ 2898.778824][ T8960] pgactivate 312 [ 2898.778824][ T8960] pgdeactivate 0 [ 2898.778824][ T8960] pglazyfree 0 [ 2898.778824][ T8960] pglazyfreed 0 [ 2898.778824][ T8960] zswpin 0 [ 2898.778824][ T8960] zswpout 0 [ 2898.778824][ T8960] thp_fault_alloc 0 [ 2898.821391][ T7036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2898.985703][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2898.999458][ T8960] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=8958,uid=0 [ 2899.003455][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2899.030038][ T8960] Memory cgroup out of memory: Killed process 8958 (syz-executor.0) total-vm:56728kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2899.047850][T31388] bridge0: port 1(bridge_slave_0) entered blocking state [ 2899.055008][T31388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2899.078833][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2899.087555][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2899.096644][T31388] bridge0: port 2(bridge_slave_1) entered blocking state [ 2899.103762][T31388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2899.111911][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2899.120966][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2899.130239][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2899.189057][ T7022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2899.197209][ T7022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2899.210099][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2899.218114][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2899.229093][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2899.238738][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2899.246661][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2899.257420][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2899.272037][ T8773] veth0_vlan: entered promiscuous mode [ 2899.311700][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2899.327537][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2899.337024][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2899.346000][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2899.355020][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2899.429761][ T8776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2899.437907][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2899.446439][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2899.454363][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2899.463194][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2899.611246][ T8963] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2899.624002][ T8963] CPU: 1 PID: 8963 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2899.624162][ T8773] veth1_vlan: entered promiscuous mode [ 2899.634349][ T8963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2899.634370][ T8963] Call Trace: [ 2899.634380][ T8963] [ 2899.634393][ T8963] dump_stack_lvl+0x136/0x150 [ 2899.660836][ T8963] dump_header+0x10a/0xd70 [ 2899.665301][ T8963] oom_kill_process+0x25d/0x600 [ 2899.670252][ T8963] out_of_memory+0x35c/0x1660 [ 2899.674980][ T8963] ? oom_killer_disable+0x2b0/0x2b0 [ 2899.680261][ T8963] ? mark_held_locks+0x9f/0xe0 [ 2899.680450][ T8765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2899.685061][ T8963] mem_cgroup_out_of_memory+0x206/0x270 [ 2899.697158][ T8765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2899.700887][ T8963] ? mem_cgroup_margin+0x130/0x130 [ 2899.700945][ T8963] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 2899.719085][ T8963] memory_max_write+0x2f9/0x3c0 [ 2899.724002][ T8963] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2899.725264][ T8776] 8021q: adding VLAN 0 to HW filter on device team0 [ 2899.730102][ T8963] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2899.742815][ T8963] cgroup_file_write+0x1e2/0x7b0 [ 2899.747800][ T8963] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2899.753927][ T8963] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2899.759369][ T8963] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2899.764800][ T8963] kernfs_fop_write_iter+0x3f1/0x600 [ 2899.770154][ T8963] vfs_write+0x945/0xd50 [ 2899.773359][ T8776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2899.774419][ T8963] ? kernel_write+0x670/0x670 [ 2899.774458][ T8963] ? __fget_files+0x26a/0x480 [ 2899.784838][ T8776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2899.789458][ T8963] ksys_write+0x12b/0x250 [ 2899.789491][ T8963] ? __ia32_sys_read+0xb0/0xb0 [ 2899.813652][ T8963] ? syscall_enter_from_user_mode+0x26/0x80 [ 2899.819604][ T8963] do_syscall_64+0x39/0xb0 [ 2899.824087][ T8963] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2899.830041][ T8963] RIP: 0033:0x7f531f48c169 [ 2899.834491][ T8963] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2899.854133][ T8963] RSP: 002b:00007f5320141168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2899.862590][ T8963] RAX: ffffffffffffffda RBX: 00007f531f5ac050 RCX: 00007f531f48c169 [ 2899.870603][ T8963] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 2899.878621][ T8963] RBP: 00007f531f4e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2899.886628][ T8963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2899.894635][ T8963] R13: 00007ffe3a7f6f7f R14: 00007f5320141300 R15: 0000000000022000 [ 2899.902674][ T8963] [ 2899.956675][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2899.968662][ T8963] memory: usage 10676kB, limit 0kB, failcnt 1806 [ 2899.981799][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2899.989742][ T8963] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2899.997079][ T8963] Memory cgroup stats for /syz2: [ 2899.999446][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2900.013710][ T8963] anon 118784 [ 2900.013710][ T8963] file 10416128 [ 2900.013710][ T8963] kernel 385024 [ 2900.013710][ T8963] kernel_stack 98304 [ 2900.013710][ T8963] pagetables 77824 [ 2900.013710][ T8963] sec_pagetables 0 [ 2900.013710][ T8963] percpu 64 [ 2900.013710][ T8963] sock 0 [ 2900.013710][ T8963] vmalloc 0 [ 2900.013710][ T8963] shmem 10416128 [ 2900.013710][ T8963] zswap 0 [ 2900.013710][ T8963] zswapped 0 [ 2900.013710][ T8963] file_mapped 176128 [ 2900.013710][ T8963] file_dirty 0 [ 2900.013710][ T8963] file_writeback 0 [ 2900.013710][ T8963] swapcached 0 [ 2900.013710][ T8963] anon_thp 0 [ 2900.013710][ T8963] file_thp 0 [ 2900.013710][ T8963] shmem_thp 0 [ 2900.013710][ T8963] inactive_anon 0 [ 2900.013710][ T8963] active_anon 10534912 [ 2900.013710][ T8963] inactive_file 0 [ 2900.013710][ T8963] active_file 0 [ 2900.013710][ T8963] unevictable 0 [ 2900.013710][ T8963] slab_reclaimable 57712 [ 2900.013710][ T8963] slab_unreclaimable 122704 [ 2900.013710][ T8963] slab 180416 [ 2900.013710][ T8963] workingset_refault_anon 0 [ 2900.013710][ T8963] workingset_refault_file 0 [ 2900.013710][ T8963] workingset_activate_anon 0 [ 2900.013710][ T8963] workingset_activate_file 0 [ 2900.013710][ T8963] workingset_restore_anon 0 [ 2900.013710][ T8963] workingset_restore_file 0 [ 2900.013710][ T8963] workingset_nodereclaim 0 [ 2900.013710][ T8963] pgscan 172 [ 2900.013710][ T8963] pgsteal 52 [ 2900.013710][ T8963] pgscan_kswapd 0 [ 2900.013710][ T8963] pgscan_direct 172 [ 2900.013710][ T8963] pgscan_khugepaged 0 [ 2900.013710][ T8963] pgsteal_kswapd 0 [ 2900.013710][ T8963] pgsteal_direct 52 [ 2900.013710][ T8963] pgsteal_khugepaged 0 [ 2900.013710][ T8963] pgfault 55421 [ 2900.013710][ T8963] pgmajfault 0 [ 2900.013710][ T8963] pgrefill 20570 [ 2900.013710][ T8963] pgactivate 120 [ 2900.013710][ T8963] pgdeactivate 0 [ 2900.013710][ T8963] pglazyfree 0 [ 2900.013710][ T8963] pglazyfreed 0 [ 2900.013710][ T8963] zswpin 0 [ 2900.013710][ T8963] zswpout 0 [ 2900.013710][ T8963] thp_fault_alloc 0 [ 2900.234834][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2900.248077][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2900.258262][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2900.266206][ T8963] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8961,uid=0 [ 2900.266704][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2900.289375][ T8963] Memory cgroup out of memory: Killed process 8963 (syz-executor.2) total-vm:54680kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2900.290914][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2900.315061][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2900.324081][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 01:15:28 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) 01:15:28 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) 01:15:28 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) [ 2900.332941][T21280] bridge0: port 1(bridge_slave_0) entered blocking state [ 2900.340088][T21280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2900.355435][ T8700] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 2900.366357][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2900.384688][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2900.396717][ T8700] CPU: 0 PID: 8700 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2900.407080][ T8700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2900.417156][ T8700] Call Trace: [ 2900.420455][ T8700] [ 2900.423407][ T8700] dump_stack_lvl+0x136/0x150 [ 2900.428135][ T8700] dump_header+0x10a/0xd70 [ 2900.432589][ T8700] oom_kill_process+0x25d/0x600 [ 2900.437489][ T8700] out_of_memory+0x35c/0x1660 [ 2900.442223][ T8700] ? find_held_lock+0x2d/0x110 [ 2900.447025][ T8700] ? oom_killer_disable+0x2b0/0x2b0 [ 2900.452262][ T8700] ? rcu_read_unlock+0x9/0x60 [ 2900.457022][ T8700] ? find_held_lock+0x2d/0x110 [ 2900.461829][ T8700] mem_cgroup_out_of_memory+0x206/0x270 [ 2900.467416][ T8700] ? mem_cgroup_margin+0x130/0x130 [ 2900.472564][ T8700] ? lock_downgrade+0x690/0x690 [ 2900.477491][ T8700] try_charge_memcg+0xf99/0x13a0 [ 2900.482488][ T8700] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2900.488531][ T8700] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2900.494326][ T8700] ? lock_downgrade+0x690/0x690 [ 2900.499230][ T8700] ? lock_downgrade+0x690/0x690 [ 2900.504134][ T8700] ? rcu_read_unlock+0x9/0x60 [ 2900.508863][ T8700] obj_cgroup_charge+0x2af/0x5e0 [ 2900.513867][ T8700] ? copy_process+0x3c0/0x7600 [ 2900.518679][ T8700] kmem_cache_alloc_node+0xa8/0x3e0 [ 2900.523945][ T8700] copy_process+0x3c0/0x7600 [ 2900.528576][ T8700] ? _raw_spin_unlock+0x28/0x40 [ 2900.533476][ T8700] ? wp_page_reuse+0x197/0x570 [ 2900.538305][ T8700] ? pidfd_prepare+0x80/0x80 [ 2900.542957][ T8700] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2900.549021][ T8700] kernel_clone+0xeb/0x890 [ 2900.553488][ T8700] ? create_io_thread+0xe0/0xe0 [ 2900.558377][ T8700] ? do_user_addr_fault+0x2b1/0x1210 [ 2900.563712][ T8700] ? reacquire_held_locks+0x216/0x4e0 [ 2900.569139][ T8700] ? do_user_addr_fault+0x2b1/0x1210 [ 2900.574475][ T8700] ? find_held_lock+0x2d/0x110 [ 2900.579281][ T8700] __do_sys_clone+0xba/0x100 [ 2900.583932][ T8700] ? kernel_clone+0x890/0x890 [ 2900.588676][ T8700] ? syscall_enter_from_user_mode+0x26/0x80 [ 2900.594634][ T8700] do_syscall_64+0x39/0xb0 [ 2900.599104][ T8700] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2900.605056][ T8700] RIP: 0033:0x7f0e02889e9b [ 2900.609543][ T8700] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2900.629196][ T8700] RSP: 002b:00007ffce18132d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2900.637643][ T8700] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0e02889e9b [ 2900.645638][ T8700] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2900.653628][ T8700] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555735400 [ 2900.661612][ T8700] R10: 00005555557356d0 R11: 0000000000000246 R12: 0000000000000001 [ 2900.669606][ T8700] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffce18133b0 [ 2900.677612][ T8700] [ 2900.685185][ T8700] memory: usage 10356kB, limit 0kB, failcnt 710 [ 2900.691574][ T8700] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2900.697443][T21280] bridge0: port 2(bridge_slave_1) entered blocking state [ 2900.698762][ T8700] Memory cgroup stats for /syz0: [ 2900.705524][T21280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2900.710852][ T8700] anon 45056 [ 2900.710852][ T8700] file 10428416 [ 2900.710852][ T8700] kernel 126976 [ 2900.710852][ T8700] kernel_stack 0 [ 2900.710852][ T8700] pagetables 8192 [ 2900.710852][ T8700] sec_pagetables 0 [ 2900.710852][ T8700] percpu 64 [ 2900.710852][ T8700] sock 0 [ 2900.710852][ T8700] vmalloc 0 [ 2900.710852][ T8700] shmem 10428416 [ 2900.710852][ T8700] zswap 0 [ 2900.710852][ T8700] zswapped 0 [ 2900.710852][ T8700] file_mapped 241664 [ 2900.710852][ T8700] file_dirty 0 [ 2900.710852][ T8700] file_writeback 0 [ 2900.710852][ T8700] swapcached 0 [ 2900.710852][ T8700] anon_thp 0 [ 2900.710852][ T8700] file_thp 0 [ 2900.710852][ T8700] shmem_thp 0 [ 2900.710852][ T8700] inactive_anon 0 [ 2900.710852][ T8700] active_anon 10473472 [ 2900.710852][ T8700] inactive_file 0 [ 2900.710852][ T8700] active_file 0 [ 2900.710852][ T8700] unevictable 0 [ 2900.710852][ T8700] slab_reclaimable 34160 [ 2900.710852][ T8700] slab_unreclaimable 70984 [ 2900.710852][ T8700] slab 105144 [ 2900.710852][ T8700] workingset_refault_anon 0 [ 2900.710852][ T8700] workingset_refault_file 0 [ 2900.710852][ T8700] workingset_activate_anon 0 [ 2900.710852][ T8700] workingset_activate_file 0 [ 2900.710852][ T8700] workingset_restore_anon 0 [ 2900.710852][ T8700] workingset_restore_file 0 [ 2900.710852][ T8700] workingset_nodereclaim 0 [ 2900.710852][ T8700] pgscan 705 [ 2900.710852][ T8700] pgsteal 266 [ 2900.710852][ T8700] pgscan_kswapd 0 [ 2900.710852][ T8700] pgscan_direct 705 [ 2900.710852][ T8700] pgscan_khugepaged 0 [ 2900.710852][ T8700] pgsteal_kswapd 0 [ 2900.710852][ T8700] pgsteal_direct 266 [ 2900.710852][ T8700] pgsteal_khugepaged 0 [ 2900.710852][ T8700] pgfault 53518 [ 2900.710852][ T8700] pgmajfault 0 [ 2900.710852][ T8700] pgrefill 27828 [ 2900.710852][ T8700] pgactivate 312 [ 2900.710852][ T8700] pgdeactivate 0 [ 2900.710852][ T8700] pglazyfree 0 [ 2900.710852][ T8700] pglazyfreed 0 [ 2900.710852][ T8700] zswpin 0 [ 2900.710852][ T8700] zswpout 0 [ 2900.710852][ T8700] thp_fault_alloc 0 [ 2900.731049][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2900.904176][ T8700] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=8700,uid=0 [ 2900.925259][ T8700] Memory cgroup out of memory: Killed process 8700 (syz-executor.0) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2900.940461][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2900.942887][ T8703] syz-executor.2 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=0 [ 2900.963772][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2900.980682][ T8703] CPU: 1 PID: 8703 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2900.982328][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2900.991020][ T8703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2900.991039][ T8703] Call Trace: [ 2900.991048][ T8703] [ 2900.991058][ T8703] dump_stack_lvl+0x136/0x150 [ 2900.999882][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2901.008921][ T8703] dump_header+0x10a/0xd70 [ 2901.008961][ T8703] oom_kill_process+0x25d/0x600 [ 2901.013198][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2901.015167][ T8703] out_of_memory+0x35c/0x1660 [ 2901.020773][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2901.027701][ T8703] ? oom_killer_disable+0x2b0/0x2b0 [ 2901.032843][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2901.036940][ T8703] ? rcu_read_unlock+0x9/0x60 [ 2901.054664][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2901.057191][ T8703] ? find_held_lock+0x2d/0x110 [ 2901.063692][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2901.070087][ T8703] mem_cgroup_out_of_memory+0x206/0x270 [ 2901.070133][ T8703] ? mem_cgroup_margin+0x130/0x130 [ 2901.079643][ T8773] veth0_macvtap: entered promiscuous mode [ 2901.082564][ T8703] ? lock_downgrade+0x690/0x690 [ 2901.116400][ T8703] try_charge_memcg+0xf99/0x13a0 [ 2901.121374][ T8703] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2901.127392][ T8703] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2901.133133][ T8703] ? lock_downgrade+0x690/0x690 [ 2901.138033][ T8703] ? lock_downgrade+0x690/0x690 [ 2901.142907][ T8703] ? rcu_read_unlock+0x9/0x60 [ 2901.147622][ T8703] obj_cgroup_charge+0x2af/0x5e0 [ 2901.152589][ T8703] ? __alloc_file+0x21/0x270 [ 2901.157205][ T8703] kmem_cache_alloc+0xb1/0x3b0 [ 2901.162017][ T8703] __alloc_file+0x21/0x270 [ 2901.166452][ T8703] alloc_empty_file+0x71/0x190 [ 2901.171231][ T8703] path_openat+0xe6/0x2750 [ 2901.175678][ T8703] ? path_lookupat+0x840/0x840 [ 2901.180478][ T8703] do_filp_open+0x1ba/0x410 [ 2901.185013][ T8703] ? may_open_dev+0xf0/0xf0 [ 2901.189549][ T8703] ? find_held_lock+0x2d/0x110 [ 2901.194345][ T8703] ? alloc_fd+0x2e4/0x750 [ 2901.198711][ T8703] ? do_raw_spin_lock+0x124/0x2b0 [ 2901.203766][ T8703] ? spin_bug+0x1c0/0x1c0 [ 2901.208137][ T8703] ? _raw_spin_unlock+0x28/0x40 [ 2901.213019][ T8703] ? alloc_fd+0x2e4/0x750 [ 2901.217388][ T8703] do_sys_openat2+0x16d/0x4c0 [ 2901.222126][ T8703] ? path_umount+0x6b8/0x10b0 [ 2901.226824][ T8703] ? putname+0x102/0x140 [ 2901.231117][ T8703] ? build_open_flags+0x720/0x720 [ 2901.236177][ T8703] ? may_mount+0xa0/0xa0 [ 2901.240449][ T8703] __x64_sys_openat+0x143/0x1f0 [ 2901.245329][ T8703] ? __ia32_sys_open+0x1c0/0x1c0 [ 2901.250289][ T8703] ? __x64_sys_umount+0x118/0x190 [ 2901.255332][ T8703] ? syscall_enter_from_user_mode+0x26/0x80 [ 2901.261255][ T8703] do_syscall_64+0x39/0xb0 [ 2901.265699][ T8703] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2901.271615][ T8703] RIP: 0033:0x7f531f48bcd8 [ 2901.276036][ T8703] Code: 24 18 31 c0 41 83 e2 40 75 40 89 f0 25 00 00 41 00 3d 00 00 41 00 74 32 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 40 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 2901.295661][ T8703] RSP: 002b:00007ffe3a7f6070 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 2901.304095][ T8703] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f531f48bcd8 [ 2901.312097][ T8703] RDX: 0000000000090800 RSI: 00007ffe3a7f7260 RDI: 00000000ffffff9c [ 2901.320081][ T8703] RBP: 00007ffe3a7f723c R08: 0000000000090800 R09: 00007ffe3a7f7260 [ 2901.328065][ T8703] R10: 0000000000000000 R11: 0000000000000287 R12: 00007f531f4e6cdc [ 2901.336046][ T8703] R13: 00007ffe3a7f7260 R14: 000000000000001d R15: 00007ffe3a7f72a0 [ 2901.344047][ T8703] [ 2901.360889][ T8703] memory: usage 10344kB, limit 0kB, failcnt 1825 [ 2901.367263][ T8703] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2901.375272][ T8703] Memory cgroup stats for /syz2: [ 2901.375641][ T8703] anon 36864 [ 2901.375641][ T8703] file 10416128 [ 2901.375641][ T8703] kernel 135168 [ 2901.375641][ T8703] kernel_stack 0 [ 2901.375641][ T8703] pagetables 8192 [ 2901.375641][ T8703] sec_pagetables 0 [ 2901.375641][ T8703] percpu 64 [ 2901.375641][ T8703] sock 0 [ 2901.375641][ T8703] vmalloc 0 [ 2901.375641][ T8703] shmem 10416128 [ 2901.375641][ T8703] zswap 0 [ 2901.375641][ T8703] zswapped 0 [ 2901.375641][ T8703] file_mapped 176128 [ 2901.375641][ T8703] file_dirty 0 [ 2901.375641][ T8703] file_writeback 0 [ 2901.375641][ T8703] swapcached 0 [ 2901.375641][ T8703] anon_thp 0 [ 2901.375641][ T8703] file_thp 0 [ 2901.375641][ T8703] shmem_thp 0 [ 2901.375641][ T8703] inactive_anon 0 [ 2901.375641][ T8703] active_anon 10452992 [ 2901.375641][ T8703] inactive_file 0 [ 2901.375641][ T8703] active_file 0 [ 2901.375641][ T8703] unevictable 0 [ 2901.375641][ T8703] slab_reclaimable 46616 [ 2901.375641][ T8703] slab_unreclaimable 70984 [ 2901.375641][ T8703] slab 117600 [ 2901.375641][ T8703] workingset_refault_anon 0 [ 2901.375641][ T8703] workingset_refault_file 0 [ 2901.375641][ T8703] workingset_activate_anon 0 [ 2901.375641][ T8703] workingset_activate_file 0 [ 2901.375641][ T8703] workingset_restore_anon 0 [ 2901.375641][ T8703] workingset_restore_file 0 [ 2901.375641][ T8703] workingset_nodereclaim 0 [ 2901.375641][ T8703] pgscan 172 [ 2901.375641][ T8703] pgsteal 52 [ 2901.375641][ T8703] pgscan_kswapd 0 [ 2901.375641][ T8703] pgscan_direct 172 [ 2901.375641][ T8703] pgscan_khugepaged 0 [ 2901.375641][ T8703] pgsteal_kswapd 0 [ 2901.375641][ T8703] pgsteal_direct 52 [ 2901.375641][ T8703] pgsteal_khugepaged 0 [ 2901.375641][ T8703] pgfault 55426 [ 2901.375641][ T8703] pgmajfault 0 [ 2901.375641][ T8703] pgrefill 20570 [ 2901.375641][ T8703] pgactivate 120 [ 2901.375641][ T8703] pgdeactivate 0 [ 2901.375641][ T8703] pglazyfree 0 [ 2901.375641][ T8703] pglazyfreed 0 [ 2901.375641][ T8703] zswpin 0 [ 2901.375641][ T8703] zswpout 0 [ 2901.375641][ T8703] thp_fault_alloc 0 [ 2901.564743][ T8703] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8703,uid=0 [ 2901.581534][ T8703] Memory cgroup out of memory: Killed process 8703 (syz-executor.2) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2901.655116][ T8773] veth1_macvtap: entered promiscuous mode [ 2901.666199][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2901.686172][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2901.703295][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2901.719267][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2901.727297][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2901.746222][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2901.758190][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2901.888958][ T8776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2901.905010][ T8773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2901.958527][ T8773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2901.981562][ T8773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2901.997776][ T8773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2902.015291][ T8773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2902.053825][ T5049] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2902.058243][ T8773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2902.064368][ T5049] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2902.078239][ T8773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2902.078986][ T5049] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2902.096381][ T8773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2902.097203][ T5049] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2902.113081][ T8773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2902.115278][ T5049] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2902.133282][ T5049] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2902.138176][ T8773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2902.166019][ T8773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2902.176693][ T8773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2902.186816][ T8773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2902.198412][ T8773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2902.208646][ T8773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2902.219271][ T8773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2902.231125][ T8773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2902.251238][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 01:15:30 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) [ 2902.267013][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2902.292008][ T8773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 01:15:30 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) [ 2902.318275][ T8773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2902.328124][ T8773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2902.393240][ T8773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2902.423429][ T8773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2902.468257][ T8773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2902.478182][ T8773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2902.528464][ T8773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2902.548254][ T8773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 01:15:30 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) [ 2902.569458][ T8773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2902.580480][ T8773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2902.627216][ T8773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2902.658738][ T8773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2902.680981][ T1217] ieee802154 phy0 wpan0: encryption failed: -22 [ 2902.687295][ T1217] ieee802154 phy1 wpan1: encryption failed: -22 [ 2902.715488][ T8773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2902.738282][ T8773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2902.750167][ T8773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2902.762482][ T8773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2902.828497][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2902.842459][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2902.872163][ T8773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2902.888461][ T8773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2902.897311][ T8773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2902.908499][ T8773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2902.968054][ T5531] hsr_slave_0: left promiscuous mode [ 2902.974669][ T5531] hsr_slave_1: left promiscuous mode [ 2902.981907][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2902.991921][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2903.001459][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2903.009051][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2903.018978][ T5531] bridge_slave_1: left allmulticast mode [ 2903.024638][ T5531] bridge_slave_1: left promiscuous mode [ 2903.030473][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 2903.039061][ T5531] bridge_slave_0: left allmulticast mode [ 2903.044719][ T5531] bridge_slave_0: left promiscuous mode [ 2903.050974][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 2903.063747][ T5531] hsr_slave_0: left promiscuous mode [ 2903.069832][ T5531] hsr_slave_1: left promiscuous mode [ 2903.075887][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2903.084663][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2903.098170][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2903.105801][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2903.115439][ T5531] bridge_slave_1: left allmulticast mode [ 2903.123143][ T5531] bridge_slave_1: left promiscuous mode [ 2903.129104][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 2903.137391][ T5531] bridge_slave_0: left allmulticast mode [ 2903.146021][ T5531] bridge_slave_0: left promiscuous mode [ 2903.151971][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 2903.165593][ T5531] hsr_slave_0: left promiscuous mode [ 2903.171638][ T5531] hsr_slave_1: left promiscuous mode [ 2903.177402][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2903.188643][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2903.197111][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2903.204915][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2903.217198][ T5531] bridge_slave_1: left allmulticast mode [ 2903.223995][ T5531] bridge_slave_1: left promiscuous mode [ 2903.229992][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 2903.238758][ T5531] bridge_slave_0: left allmulticast mode [ 2903.244429][ T5531] bridge_slave_0: left promiscuous mode [ 2903.250284][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 2903.263489][ T5531] hsr_slave_0: left promiscuous mode [ 2903.269622][ T5531] hsr_slave_1: left promiscuous mode [ 2903.275563][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2903.283209][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2903.292697][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2903.300223][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2903.308795][ T5531] bridge_slave_1: left allmulticast mode [ 2903.314643][ T5531] bridge_slave_1: left promiscuous mode [ 2903.325073][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 2903.334214][ T5531] bridge_slave_0: left allmulticast mode [ 2903.340248][ T5531] bridge_slave_0: left promiscuous mode [ 2903.345937][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 2903.357948][ T5531] hsr_slave_0: left promiscuous mode [ 2903.368972][ T5531] hsr_slave_1: left promiscuous mode [ 2903.374744][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2903.386692][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2903.396064][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2903.404002][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2903.413294][ T5531] bridge_slave_1: left allmulticast mode [ 2903.419252][ T5531] bridge_slave_1: left promiscuous mode [ 2903.424941][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 2903.435589][ T5531] bridge_slave_0: left allmulticast mode [ 2903.446639][ T5531] bridge_slave_0: left promiscuous mode [ 2903.454116][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 2903.488712][ T5531] veth1_macvtap: left promiscuous mode [ 2903.494368][ T5531] veth0_macvtap: left promiscuous mode [ 2903.500262][ T5531] veth1_vlan: left promiscuous mode [ 2903.505525][ T5531] veth0_vlan: left promiscuous mode [ 2903.512868][ T5531] veth1_macvtap: left promiscuous mode [ 2903.518465][ T5531] veth0_macvtap: left promiscuous mode [ 2903.524093][ T5531] veth1_vlan: left promiscuous mode [ 2903.529614][ T5531] veth0_vlan: left promiscuous mode [ 2903.535865][ T5531] veth1_macvtap: left promiscuous mode [ 2903.544776][ T5531] veth0_macvtap: left promiscuous mode [ 2903.550465][ T5531] veth1_vlan: left promiscuous mode [ 2903.555735][ T5531] veth0_vlan: left promiscuous mode [ 2903.563759][ T5531] veth1_macvtap: left promiscuous mode [ 2903.569379][ T5531] veth0_macvtap: left promiscuous mode [ 2903.574966][ T5531] veth1_vlan: left promiscuous mode [ 2903.580519][ T5531] veth0_vlan: left promiscuous mode [ 2903.587397][ T5531] veth1_macvtap: left promiscuous mode [ 2903.593313][ T5531] veth0_macvtap: left promiscuous mode [ 2903.599215][ T5531] veth1_vlan: left promiscuous mode [ 2903.604489][ T5531] veth0_vlan: left promiscuous mode [ 2904.145015][ T5049] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2904.155994][ T5049] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2904.165015][ T5049] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2904.173266][ T5049] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2904.182613][ T5049] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2904.190533][ T5049] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2904.198993][ T4594] Bluetooth: hci0: command 0x0409 tx timeout [ 2904.472591][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 2904.488697][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 2904.505120][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2904.523322][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2904.633181][ T5531] bond0 (unregistering): Released all slaves [ 2904.781528][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 2904.797417][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 2904.815317][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2904.830312][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2904.914791][ T5531] bond0 (unregistering): Released all slaves [ 2905.073797][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 2905.089779][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 2905.104501][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2905.121840][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2905.217152][ T5531] bond0 (unregistering): Released all slaves [ 2905.385184][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 2905.403654][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 2905.420055][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2905.437473][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2905.518170][ T5531] bond0 (unregistering): Released all slaves [ 2905.670733][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 2905.687501][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 2905.701443][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2905.716037][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2905.805372][ T5531] bond0 (unregistering): Released all slaves [ 2905.917219][ T8765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2905.929652][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2905.937120][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2905.954059][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2905.963128][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2905.982699][ T8776] veth0_vlan: entered promiscuous mode [ 2906.042210][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2906.051591][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2906.073471][ T8776] veth1_vlan: entered promiscuous mode [ 2906.093119][T15859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2906.112381][ T7022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2906.125224][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2906.125531][T15859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2906.140365][ T7022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2906.140728][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2906.156301][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2906.166561][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2906.175702][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2906.184778][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2906.193300][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2906.229647][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2906.276759][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2906.284738][ T4594] Bluetooth: hci0: command 0x041b tx timeout [ 2906.284787][ T5049] Bluetooth: hci1: command 0x0409 tx timeout [ 2906.300810][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2906.321019][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2906.329271][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2906.342946][ T8765] veth0_vlan: entered promiscuous mode [ 2906.364795][ T8776] veth0_macvtap: entered promiscuous mode [ 2906.397739][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2906.423171][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2906.457765][ T8986] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2906.460766][ T8776] veth1_macvtap: entered promiscuous mode [ 2906.469910][ T8986] CPU: 1 PID: 8986 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2906.484111][ T8986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2906.494197][ T8986] Call Trace: [ 2906.497502][ T8986] [ 2906.500458][ T8986] dump_stack_lvl+0x136/0x150 [ 2906.505197][ T8986] dump_header+0x10a/0xd70 [ 2906.509666][ T8986] oom_kill_process+0x25d/0x600 [ 2906.514560][ T8986] out_of_memory+0x35c/0x1660 [ 2906.519275][ T8986] ? io_schedule_timeout+0x150/0x150 [ 2906.524605][ T8986] ? oom_killer_disable+0x2b0/0x2b0 [ 2906.529855][ T8986] ? kernfs_notify+0x1ac/0x410 [ 2906.534697][ T8986] mem_cgroup_out_of_memory+0x206/0x270 [ 2906.540293][ T8986] ? mem_cgroup_margin+0x130/0x130 [ 2906.545475][ T8986] memory_max_write+0x2f9/0x3c0 [ 2906.550389][ T8986] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2906.556516][ T8986] ? lock_sync+0x190/0x190 [ 2906.560994][ T8986] cgroup_file_write+0x1e2/0x7b0 [ 2906.565985][ T8986] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2906.572116][ T8986] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2906.577549][ T8986] ? __virt_addr_valid+0x61/0x2e0 [ 2906.582665][ T8986] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2906.588086][ T8986] kernfs_fop_write_iter+0x3f1/0x600 [ 2906.593428][ T8986] vfs_write+0x945/0xd50 [ 2906.597720][ T8986] ? kernel_write+0x670/0x670 [ 2906.602453][ T8986] ? __fget_files+0x26a/0x480 [ 2906.607237][ T8986] ksys_write+0x12b/0x250 [ 2906.611609][ T8986] ? __ia32_sys_read+0xb0/0xb0 [ 2906.616438][ T8986] ? syscall_enter_from_user_mode+0x26/0x80 [ 2906.622403][ T8986] do_syscall_64+0x39/0xb0 [ 2906.626884][ T8986] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2906.632828][ T8986] RIP: 0033:0x7f257a08c169 [ 2906.637272][ T8986] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2906.656921][ T8986] RSP: 002b:00007f257adfd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2906.665514][ T8986] RAX: ffffffffffffffda RBX: 00007f257a1abf80 RCX: 00007f257a08c169 [ 2906.673520][ T8986] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 2906.681519][ T8986] RBP: 00007f257a0e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2906.689537][ T8986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2906.697565][ T8986] R13: 00007ffe6d3b109f R14: 00007f257adfd300 R15: 0000000000022000 [ 2906.705607][ T8986] [ 2906.719217][ T8765] veth1_vlan: entered promiscuous mode [ 2906.727379][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2906.738996][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2906.747151][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2906.749030][ T8986] memory: usage 8620kB, limit 0kB, failcnt 2222 [ 2906.776332][ T8986] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2906.784748][ T8986] Memory cgroup stats for /syz1: [ 2906.785286][ T8986] anon 118784 [ 2906.785286][ T8986] file 8331264 [ 2906.785286][ T8986] kernel 364544 [ 2906.785286][ T8986] kernel_stack 98304 [ 2906.785286][ T8986] pagetables 77824 [ 2906.785286][ T8986] sec_pagetables 0 [ 2906.785286][ T8986] percpu 64 [ 2906.785286][ T8986] sock 0 [ 2906.785286][ T8986] vmalloc 0 [ 2906.785286][ T8986] shmem 8331264 [ 2906.785286][ T8986] zswap 0 [ 2906.785286][ T8986] zswapped 0 [ 2906.785286][ T8986] file_mapped 188416 [ 2906.785286][ T8986] file_dirty 0 [ 2906.785286][ T8986] file_writeback 0 [ 2906.785286][ T8986] swapcached 0 [ 2906.785286][ T8986] anon_thp 0 [ 2906.785286][ T8986] file_thp 0 [ 2906.785286][ T8986] shmem_thp 0 [ 2906.785286][ T8986] inactive_anon 8331264 [ 2906.785286][ T8986] active_anon 118784 [ 2906.785286][ T8986] inactive_file 0 [ 2906.785286][ T8986] active_file 0 [ 2906.785286][ T8986] unevictable 0 [ 2906.785286][ T8986] slab_reclaimable 46024 [ 2906.785286][ T8986] slab_unreclaimable 116000 [ 2906.785286][ T8986] slab 162024 [ 2906.785286][ T8986] workingset_refault_anon 0 [ 2906.785286][ T8986] workingset_refault_file 0 [ 2906.785286][ T8986] workingset_activate_anon 0 [ 2906.785286][ T8986] workingset_activate_file 0 [ 2906.785286][ T8986] workingset_restore_anon 0 [ 2906.785286][ T8986] workingset_restore_file 0 [ 2906.785286][ T8986] workingset_nodereclaim 0 [ 2906.785286][ T8986] pgscan 611 [ 2906.785286][ T8986] pgsteal 60 [ 2906.785286][ T8986] pgscan_kswapd 0 [ 2906.785286][ T8986] pgscan_direct 611 [ 2906.785286][ T8986] pgscan_khugepaged 0 [ 2906.785286][ T8986] pgsteal_kswapd 0 [ 2906.785286][ T8986] pgsteal_direct 60 [ 2906.785286][ T8986] pgsteal_khugepaged 0 [ 2906.785286][ T8986] pgfault 38676 [ 2906.785286][ T8986] pgmajfault 0 [ 2906.785286][ T8986] pgrefill 1873 [ 2906.785286][ T8986] pgactivate 551 [ 2906.785286][ T8986] pgdeactivate 0 [ 2906.785286][ T8986] pglazyfree 0 [ 2906.785286][ T8986] pglazyfreed 0 [ 2906.785286][ T8986] zswpin 0 [ 2906.785286][ T8986] zswpout 0 [ 2906.785286][ T8986] thp_fault_alloc 0 [ 2906.976617][ T8973] chnl_net:caif_netlink_parms(): no params data found [ 2906.987304][ T8986] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=8985,uid=0 [ 2907.005473][ T8986] Memory cgroup out of memory: Killed process 8985 (syz-executor.1) total-vm:54680kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2907.034144][ T8776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2907.045774][ T8776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2907.057153][ T8776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2907.068518][ T8776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2907.080251][ T8776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2907.094156][ T8776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2907.104151][ T8776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2907.115745][ T8776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2907.128136][ T8776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2907.135765][T13753] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2907.144812][T13753] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2907.154506][T13753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2907.204235][ T8982] chnl_net:caif_netlink_parms(): no params data found [ 2907.222881][ T8765] veth0_macvtap: entered promiscuous mode [ 2907.231991][ T8776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2907.243484][ T8776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2907.258338][ T8776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2907.269303][ T8776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2907.279628][ T8776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2907.290310][ T8776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2907.300387][ T8776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2907.314008][ T8776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2907.326452][ T8776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2907.342069][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2907.351136][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2907.359896][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2907.376944][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2907.386142][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2907.411437][ T8765] veth1_macvtap: entered promiscuous mode [ 2907.421015][ T8776] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2907.433380][ T8776] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2907.443045][ T8776] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2907.452085][ T8776] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2907.556454][ T8973] bridge0: port 1(bridge_slave_0) entered blocking state [ 2907.564001][ T8973] bridge0: port 1(bridge_slave_0) entered disabled state [ 2907.573042][ T8973] bridge_slave_0: entered allmulticast mode [ 2907.580181][ T8973] bridge_slave_0: entered promiscuous mode [ 2907.606789][ T8765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2907.617465][ T8765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2907.629623][ T8765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2907.644317][ T8765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2907.654280][ T8765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2907.664778][ T8765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2907.674844][ T8765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2907.685353][ T8765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2907.695308][ T8765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2907.705891][ T8765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2907.717146][ T8765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2907.725802][ T8973] bridge0: port 2(bridge_slave_1) entered blocking state [ 2907.734531][ T8973] bridge0: port 2(bridge_slave_1) entered disabled state [ 2907.742137][ T8973] bridge_slave_1: entered allmulticast mode [ 2907.752365][ T8973] bridge_slave_1: entered promiscuous mode [ 2907.784233][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2907.793224][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2907.804639][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2907.816318][ T8765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2907.827678][ T8765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2907.838298][ T8765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2907.849213][ T8765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2907.859290][ T8765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2907.869996][ T8765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2907.881513][ T8765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2907.893607][ T8765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2907.907653][ T8765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2907.918572][ T8765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2907.930286][ T8765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2907.949001][ T8982] bridge0: port 1(bridge_slave_0) entered blocking state [ 2907.956107][ T8982] bridge0: port 1(bridge_slave_0) entered disabled state [ 2907.964077][ T8982] bridge_slave_0: entered allmulticast mode [ 2907.972503][ T8982] bridge_slave_0: entered promiscuous mode [ 2907.982151][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2907.991896][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2908.004297][ T8765] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2908.014552][ T8765] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2908.027197][ T8765] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2908.039032][ T8765] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2908.087694][ T8982] bridge0: port 2(bridge_slave_1) entered blocking state [ 2908.098958][ T8982] bridge0: port 2(bridge_slave_1) entered disabled state [ 2908.106093][ T8982] bridge_slave_1: entered allmulticast mode [ 2908.113563][ T8982] bridge_slave_1: entered promiscuous mode [ 2908.149255][ T8973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2908.201823][ T8982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2908.213542][ T8982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2908.248311][ T8973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2908.335658][T15809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2908.355658][T15809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2908.363102][ T5049] Bluetooth: hci0: command 0x040f tx timeout [ 2908.368458][T31297] Bluetooth: hci1: command 0x041b tx timeout [ 2908.380891][ T8982] team0: Port device team_slave_0 added [ 2908.392391][ T8982] team0: Port device team_slave_1 added [ 2908.401325][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2908.414304][ T8973] team0: Port device team_slave_0 added [ 2908.459428][ T8973] team0: Port device team_slave_1 added [ 2908.474980][ T8982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2908.483911][ T8982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2908.510147][ T8982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2908.526769][T15809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2908.543784][T15809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2908.560798][T15859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2908.569385][T15859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2908.575689][ T8982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2908.583887][ T8982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2908.610362][ T8982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2908.630981][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2908.638872][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2908.671427][ T8973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2908.679524][ T8973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2908.719582][ T8973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2908.740595][ T7022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2908.754510][ T7022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2908.780307][ T8973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2908.787280][ T8973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2908.813750][ T8973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2908.837187][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2908.908456][ T8982] hsr_slave_0: entered promiscuous mode [ 2908.916576][ T8982] hsr_slave_1: entered promiscuous mode [ 2908.947081][ T8982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2908.962615][ T8982] Cannot create hsr debugfs directory [ 2909.185441][ T9005] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2909.213701][ T9005] CPU: 0 PID: 9005 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2909.224175][ T9005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2909.234269][ T9005] Call Trace: [ 2909.237601][ T9005] [ 2909.240563][ T9005] dump_stack_lvl+0x136/0x150 [ 2909.245309][ T9005] dump_header+0x10a/0xd70 [ 2909.249768][ T9005] ? ___ratelimit+0x204/0x4e0 [ 2909.254521][ T9005] oom_kill_process+0x25d/0x600 [ 2909.259417][ T9005] out_of_memory+0x35c/0x1660 [ 2909.264143][ T9005] ? lockdep_hardirqs_on+0x7d/0x100 [ 2909.269396][ T9005] ? oom_killer_disable+0x2b0/0x2b0 [ 2909.274639][ T9005] ? mem_cgroup_out_of_memory+0x199/0x270 [ 2909.280422][ T9005] mem_cgroup_out_of_memory+0x206/0x270 [ 2909.286017][ T9005] ? mem_cgroup_margin+0x130/0x130 [ 2909.291196][ T9005] memory_max_write+0x2f9/0x3c0 [ 2909.296070][ T9005] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2909.302159][ T9005] ? lock_sync+0x190/0x190 [ 2909.306597][ T9005] cgroup_file_write+0x1e2/0x7b0 [ 2909.311546][ T9005] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2909.317671][ T9005] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2909.323058][ T9005] ? __virt_addr_valid+0x61/0x2e0 [ 2909.328118][ T9005] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2909.333504][ T9005] kernfs_fop_write_iter+0x3f1/0x600 [ 2909.338937][ T9005] vfs_write+0x945/0xd50 [ 2909.343221][ T9005] ? kernel_write+0x670/0x670 [ 2909.347941][ T9005] ? __fget_files+0x26a/0x480 [ 2909.352655][ T9005] ksys_write+0x12b/0x250 [ 2909.356991][ T9005] ? __ia32_sys_read+0xb0/0xb0 [ 2909.361761][ T9005] ? syscall_enter_from_user_mode+0x26/0x80 [ 2909.367674][ T9005] do_syscall_64+0x39/0xb0 [ 2909.372131][ T9005] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2909.378055][ T9005] RIP: 0033:0x7f674668c169 [ 2909.382485][ T9005] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2909.402111][ T9005] RSP: 002b:00007f674747e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2909.410535][ T9005] RAX: ffffffffffffffda RBX: 00007f67467ac050 RCX: 00007f674668c169 [ 2909.418524][ T9005] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 2909.426513][ T9005] RBP: 00007f67466e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2909.434507][ T9005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2909.442487][ T9005] R13: 00007fff7136db1f R14: 00007f674747e300 R15: 0000000000022000 [ 2909.450504][ T9005] [ 2909.473579][ T9005] memory: usage 10712kB, limit 0kB, failcnt 966 [ 2909.481347][ T9005] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2909.489809][ T9005] Memory cgroup stats for /syz3: [ 2909.491343][ T9005] anon 114688 [ 2909.491343][ T9005] file 10452992 [ 2909.491343][ T9005] kernel 385024 [ 2909.491343][ T9005] kernel_stack 98304 [ 2909.491343][ T9005] pagetables 81920 [ 2909.491343][ T9005] sec_pagetables 0 [ 2909.491343][ T9005] percpu 64 [ 2909.491343][ T9005] sock 0 [ 2909.491343][ T9005] vmalloc 0 [ 2909.491343][ T9005] shmem 10452992 [ 2909.491343][ T9005] zswap 0 [ 2909.491343][ T9005] zswapped 0 [ 2909.491343][ T9005] file_mapped 344064 [ 2909.491343][ T9005] file_dirty 0 [ 2909.491343][ T9005] file_writeback 0 [ 2909.491343][ T9005] swapcached 0 [ 2909.491343][ T9005] anon_thp 0 [ 2909.491343][ T9005] file_thp 0 [ 2909.491343][ T9005] shmem_thp 0 [ 2909.491343][ T9005] inactive_anon 122880 [ 2909.491343][ T9005] active_anon 10444800 [ 2909.491343][ T9005] inactive_file 0 [ 2909.491343][ T9005] active_file 0 [ 2909.491343][ T9005] unevictable 0 [ 2909.491343][ T9005] slab_reclaimable 52360 [ 2909.491343][ T9005] slab_unreclaimable 121408 [ 2909.491343][ T9005] slab 173768 [ 2909.491343][ T9005] workingset_refault_anon 0 [ 2909.491343][ T9005] workingset_refault_file 0 [ 2909.491343][ T9005] workingset_activate_anon 0 [ 2909.491343][ T9005] workingset_activate_file 0 [ 2909.491343][ T9005] workingset_restore_anon 0 [ 2909.491343][ T9005] workingset_restore_file 0 [ 2909.491343][ T9005] workingset_nodereclaim 0 [ 2909.491343][ T9005] pgscan 307 [ 2909.491343][ T9005] pgsteal 80 [ 2909.491343][ T9005] pgscan_kswapd 0 [ 2909.491343][ T9005] pgscan_direct 307 [ 2909.491343][ T9005] pgscan_khugepaged 0 [ 2909.491343][ T9005] pgsteal_kswapd 0 [ 2909.491343][ T9005] pgsteal_direct 80 [ 2909.491343][ T9005] pgsteal_khugepaged 0 [ 2909.491343][ T9005] pgfault 61232 [ 2909.491343][ T9005] pgmajfault 0 [ 2909.491343][ T9005] pgrefill 914 [ 2909.491343][ T9005] pgactivate 227 [ 2909.491343][ T9005] pgdeactivate 0 [ 2909.491343][ T9005] pglazyfree 0 [ 2909.491343][ T9005] pglazyfreed 0 [ 2909.491343][ T9005] zswpin 0 [ 2909.491343][ T9005] zswpout 0 [ 2909.491343][ T9005] thp_fault_alloc 0 [ 2909.727519][ T9005] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=9003,uid=0 [ 2909.750296][ T9005] Memory cgroup out of memory: Killed process 9003 (syz-executor.3) total-vm:56728kB, anon-rss:504kB, file-rss:8896kB, shmem-rss:128kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2909.773619][ T8973] hsr_slave_0: entered promiscuous mode [ 2909.783704][ T8973] hsr_slave_1: entered promiscuous mode [ 2909.791612][ T8973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2909.811203][ T8973] Cannot create hsr debugfs directory 01:15:37 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) 01:15:37 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000003c0)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x80, 0x7d, 0x0, 0x8, 0x0, 0x0, 0x1080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x78, 0x2, @perf_config_ext={0x4, 0x1}, 0x10010, 0x1, 0xffffff05, 0x9, 0xc00, 0x8000, 0x7, 0x0, 0x7, 0x0, 0x2b4d0000000}, r1, 0x5, r5, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r4, &(0x7f0000000180), 0x12) 01:15:37 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x0, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x80, 0x7d, 0x0, 0x8, 0x0, 0x0, 0x1080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x78, 0x2, @perf_config_ext={0x4, 0x1}, 0x10010, 0x1, 0xffffff05, 0x9, 0xc00, 0x8000, 0x7, 0x0, 0x7, 0x0, 0x2b4d0000000}, r1, 0x5, r5, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r4, &(0x7f0000000180), 0x12) 01:15:37 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) [ 2909.875653][ T8773] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 2909.912648][ T8773] CPU: 0 PID: 8773 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2909.923039][ T8773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2909.933132][ T8773] Call Trace: [ 2909.936433][ T8773] [ 2909.939426][ T8773] dump_stack_lvl+0x136/0x150 [ 2909.944172][ T8773] dump_header+0x10a/0xd70 [ 2909.948634][ T8773] oom_kill_process+0x25d/0x600 [ 2909.953561][ T8773] out_of_memory+0x35c/0x1660 [ 2909.958287][ T8773] ? find_held_lock+0x2d/0x110 [ 2909.963092][ T8773] ? oom_killer_disable+0x2b0/0x2b0 [ 2909.968318][ T8773] ? rcu_read_unlock+0x9/0x60 [ 2909.973024][ T8773] ? find_held_lock+0x2d/0x110 [ 2909.977813][ T8773] mem_cgroup_out_of_memory+0x206/0x270 [ 2909.983401][ T8773] ? mem_cgroup_margin+0x130/0x130 [ 2909.988557][ T8773] ? lock_downgrade+0x690/0x690 [ 2909.993438][ T8773] try_charge_memcg+0xf99/0x13a0 [ 2909.998411][ T8773] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2910.004423][ T8773] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2910.010174][ T8773] ? lock_downgrade+0x690/0x690 [ 2910.015060][ T8773] ? lock_downgrade+0x690/0x690 [ 2910.019950][ T8773] ? rcu_read_unlock+0x9/0x60 [ 2910.024671][ T8773] obj_cgroup_charge+0x2af/0x5e0 [ 2910.029664][ T8773] ? copy_process+0x3c0/0x7600 [ 2910.034462][ T8773] kmem_cache_alloc_node+0xa8/0x3e0 [ 2910.039704][ T8773] copy_process+0x3c0/0x7600 [ 2910.044329][ T8773] ? _raw_spin_unlock+0x28/0x40 [ 2910.049205][ T8773] ? wp_page_reuse+0x197/0x570 [ 2910.054017][ T8773] ? pidfd_prepare+0x80/0x80 [ 2910.058648][ T8773] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2910.064661][ T8773] kernel_clone+0xeb/0x890 [ 2910.069109][ T8773] ? create_io_thread+0xe0/0xe0 [ 2910.073994][ T8773] ? do_user_addr_fault+0x2b1/0x1210 [ 2910.079297][ T8773] ? reacquire_held_locks+0x216/0x4e0 [ 2910.084689][ T8773] ? do_user_addr_fault+0x2b1/0x1210 [ 2910.090002][ T8773] ? find_held_lock+0x2d/0x110 [ 2910.094786][ T8773] __do_sys_clone+0xba/0x100 [ 2910.099409][ T8773] ? kernel_clone+0x890/0x890 [ 2910.104137][ T8773] ? syscall_enter_from_user_mode+0x26/0x80 [ 2910.110052][ T8773] do_syscall_64+0x39/0xb0 [ 2910.114496][ T8773] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2910.120411][ T8773] RIP: 0033:0x7f257a089e9b [ 2910.124834][ T8773] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2910.144456][ T8773] RSP: 002b:00007ffe6d3b12e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2910.152882][ T8773] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f257a089e9b [ 2910.160866][ T8773] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2910.168877][ T8773] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555569a6400 [ 2910.176854][ T8773] R10: 00005555569a66d0 R11: 0000000000000246 R12: 0000000000000001 [ 2910.184835][ T8773] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe6d3b13c0 [ 2910.192838][ T8773] [ 2910.210852][ T8773] memory: usage 8284kB, limit 0kB, failcnt 2241 [ 2910.227447][ T8773] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2910.237453][ T8773] Memory cgroup stats for /syz1: [ 2910.237648][ T8773] anon 45056 [ 2910.237648][ T8773] file 8331264 [ 2910.237648][ T8773] kernel 106496 [ 2910.237648][ T8773] kernel_stack 0 [ 2910.237648][ T8773] pagetables 8192 [ 2910.237648][ T8773] sec_pagetables 0 [ 2910.237648][ T8773] percpu 0 [ 2910.237648][ T8773] sock 0 [ 2910.237648][ T8773] vmalloc 0 [ 2910.237648][ T8773] shmem 8331264 [ 2910.237648][ T8773] zswap 0 [ 2910.237648][ T8773] zswapped 0 [ 2910.237648][ T8773] file_mapped 176128 [ 2910.237648][ T8773] file_dirty 0 [ 2910.237648][ T8773] file_writeback 0 [ 2910.237648][ T8773] swapcached 0 [ 2910.237648][ T8773] anon_thp 0 [ 2910.237648][ T8773] file_thp 0 [ 2910.237648][ T8773] shmem_thp 0 [ 2910.237648][ T8773] inactive_anon 8331264 [ 2910.237648][ T8773] active_anon 45056 [ 2910.237648][ T8773] inactive_file 0 [ 2910.237648][ T8773] active_file 0 [ 2910.237648][ T8773] unevictable 0 [ 2910.237648][ T8773] slab_reclaimable 29888 [ 2910.237648][ T8773] slab_unreclaimable 59008 [ 2910.237648][ T8773] slab 88896 [ 2910.237648][ T8773] workingset_refault_anon 0 [ 2910.237648][ T8773] workingset_refault_file 0 [ 2910.237648][ T8773] workingset_activate_anon 0 [ 2910.237648][ T8773] workingset_activate_file 0 [ 2910.237648][ T8773] workingset_restore_anon 0 [ 2910.237648][ T8773] workingset_restore_file 0 [ 2910.237648][ T8773] workingset_nodereclaim 0 [ 2910.237648][ T8773] pgscan 611 [ 2910.237648][ T8773] pgsteal 60 [ 2910.237648][ T8773] pgscan_kswapd 0 [ 2910.237648][ T8773] pgscan_direct 611 [ 2910.237648][ T8773] pgscan_khugepaged 0 [ 2910.237648][ T8773] pgsteal_kswapd 0 [ 2910.237648][ T8773] pgsteal_direct 60 [ 2910.237648][ T8773] pgsteal_khugepaged 0 [ 2910.237648][ T8773] pgfault 38688 [ 2910.237648][ T8773] pgmajfault 0 [ 2910.237648][ T8773] pgrefill 1873 [ 2910.237648][ T8773] pgactivate 551 [ 2910.237648][ T8773] pgdeactivate 0 [ 2910.237648][ T8773] pglazyfree 0 [ 2910.237648][ T8773] pglazyfreed 0 [ 2910.237648][ T8773] zswpin 0 [ 2910.237648][ T8773] zswpout 0 [ 2910.237648][ T8773] thp_fault_alloc 0 [ 2910.427758][ T8773] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=8773,uid=0 [ 2910.444116][T31297] Bluetooth: hci1: command 0x040f tx timeout [ 2910.451691][ T5049] Bluetooth: hci0: command 0x0419 tx timeout [ 2910.459360][ T8773] Memory cgroup out of memory: Killed process 8773 (syz-executor.1) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2910.476539][ T8776] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 2910.488631][ T8776] CPU: 0 PID: 8776 Comm: syz-executor.4 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2910.499000][ T8776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2910.509100][ T8776] Call Trace: [ 2910.512401][ T8776] [ 2910.515355][ T8776] dump_stack_lvl+0x136/0x150 [ 2910.520086][ T8776] dump_header+0x10a/0xd70 [ 2910.524545][ T8776] oom_kill_process+0x25d/0x600 [ 2910.529438][ T8776] out_of_memory+0x35c/0x1660 [ 2910.534150][ T8776] ? oom_killer_disable+0x2b0/0x2b0 [ 2910.539371][ T8776] ? rcu_read_unlock+0x9/0x60 [ 2910.544103][ T8776] ? find_held_lock+0x2d/0x110 [ 2910.548899][ T8776] mem_cgroup_out_of_memory+0x206/0x270 [ 2910.554475][ T8776] ? mem_cgroup_margin+0x130/0x130 [ 2910.559608][ T8776] ? lock_downgrade+0x690/0x690 [ 2910.564500][ T8776] try_charge_memcg+0xf99/0x13a0 [ 2910.569470][ T8776] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2910.575476][ T8776] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2910.581220][ T8776] ? lock_downgrade+0x690/0x690 [ 2910.586094][ T8776] ? lock_downgrade+0x690/0x690 [ 2910.590974][ T8776] ? rcu_read_unlock+0x9/0x60 [ 2910.595677][ T8776] obj_cgroup_charge+0x2af/0x5e0 [ 2910.600648][ T8776] ? copy_process+0x3c0/0x7600 [ 2910.605444][ T8776] kmem_cache_alloc_node+0xa8/0x3e0 [ 2910.610695][ T8776] copy_process+0x3c0/0x7600 [ 2910.615305][ T8776] ? _raw_spin_unlock+0x28/0x40 [ 2910.620191][ T8776] ? wp_page_reuse+0x197/0x570 [ 2910.624994][ T8776] ? pidfd_prepare+0x80/0x80 [ 2910.629618][ T8776] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2910.635664][ T8776] kernel_clone+0xeb/0x890 [ 2910.640112][ T8776] ? create_io_thread+0xe0/0xe0 [ 2910.644987][ T8776] ? do_user_addr_fault+0x2b1/0x1210 [ 2910.650297][ T8776] ? reacquire_held_locks+0x216/0x4e0 [ 2910.655689][ T8776] ? do_user_addr_fault+0x2b1/0x1210 [ 2910.661012][ T8776] ? find_held_lock+0x2d/0x110 [ 2910.665848][ T8776] __do_sys_clone+0xba/0x100 [ 2910.670503][ T8776] ? kernel_clone+0x890/0x890 [ 2910.675221][ T8776] ? syscall_enter_from_user_mode+0x26/0x80 [ 2910.681136][ T8776] do_syscall_64+0x39/0xb0 [ 2910.685591][ T8776] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2910.691507][ T8776] RIP: 0033:0x7f77b5a89e9b [ 2910.695934][ T8776] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2910.715552][ T8776] RSP: 002b:00007fffe00895a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2910.723976][ T8776] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f77b5a89e9b [ 2910.731967][ T8776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2910.739946][ T8776] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555570ac400 [ 2910.747924][ T8776] R10: 00005555570ac6d0 R11: 0000000000000246 R12: 0000000000000001 [ 2910.755918][ T8776] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffe0089680 [ 2910.763929][ T8776] [ 2910.850312][ T8776] memory: usage 10352kB, limit 0kB, failcnt 801 [ 2910.865896][ T8776] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2910.885186][ T8776] Memory cgroup stats for /syz4: [ 2910.885396][ T8776] anon 45056 [ 2910.885396][ T8776] file 10440704 [ 2910.885396][ T8776] kernel 110592 [ 2910.885396][ T8776] kernel_stack 0 [ 2910.885396][ T8776] pagetables 8192 [ 2910.885396][ T8776] sec_pagetables 0 [ 2910.885396][ T8776] percpu 0 [ 2910.885396][ T8776] sock 0 [ 2910.885396][ T8776] vmalloc 0 [ 2910.885396][ T8776] shmem 10436608 [ 2910.885396][ T8776] zswap 0 [ 2910.885396][ T8776] zswapped 0 [ 2910.885396][ T8776] file_mapped 241664 [ 2910.885396][ T8776] file_dirty 0 [ 2910.885396][ T8776] file_writeback 0 [ 2910.885396][ T8776] swapcached 0 [ 2910.885396][ T8776] anon_thp 0 [ 2910.885396][ T8776] file_thp 0 [ 2910.885396][ T8776] shmem_thp 0 [ 2910.885396][ T8776] inactive_anon 10481664 [ 2910.885396][ T8776] active_anon 0 [ 2910.885396][ T8776] inactive_file 0 [ 2910.885396][ T8776] active_file 4096 [ 2910.885396][ T8776] unevictable 0 [ 2910.885396][ T8776] slab_reclaimable 36592 [ 2910.885396][ T8776] slab_unreclaimable 59008 [ 2910.885396][ T8776] slab 95600 [ 2910.885396][ T8776] workingset_refault_anon 0 [ 2910.885396][ T8776] workingset_refault_file 1 [ 2910.885396][ T8776] workingset_activate_anon 0 [ 2910.885396][ T8776] workingset_activate_file 0 [ 2910.885396][ T8776] workingset_restore_anon 0 [ 2910.885396][ T8776] workingset_restore_file 1 [ 2910.885396][ T8776] workingset_nodereclaim 2 [ 2910.885396][ T8776] pgscan 838 [ 2910.885396][ T8776] pgsteal 201 [ 2910.885396][ T8776] pgscan_kswapd 0 [ 2910.885396][ T8776] pgscan_direct 838 [ 2910.885396][ T8776] pgscan_khugepaged 0 [ 2910.885396][ T8776] pgsteal_kswapd 0 [ 2910.885396][ T8776] pgsteal_direct 201 [ 2910.885396][ T8776] pgsteal_khugepaged 0 [ 2910.885396][ T8776] pgfault 49648 [ 2910.885396][ T8776] pgmajfault 0 [ 2910.885396][ T8776] pgrefill 41379 [ 2910.885396][ T8776] pgactivate 311 [ 2910.885396][ T8776] pgdeactivate 0 [ 2910.885396][ T8776] pglazyfree 0 [ 2910.885396][ T8776] pglazyfreed 0 [ 2910.885396][ T8776] zswpin 0 [ 2910.885396][ T8776] zswpout 0 [ 2910.885396][ T8776] thp_fault_alloc 0 [ 2911.075802][ T8776] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=8776,uid=0 [ 2911.095803][ T8776] Memory cgroup out of memory: Killed process 8776 (syz-executor.4) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2911.123475][ T8765] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 2911.137556][ T8765] CPU: 1 PID: 8765 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2911.147925][ T8765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2911.158028][ T8765] Call Trace: [ 2911.161320][ T8765] [ 2911.164248][ T8765] dump_stack_lvl+0x136/0x150 [ 2911.168944][ T8765] dump_header+0x10a/0xd70 [ 2911.173367][ T8765] oom_kill_process+0x25d/0x600 [ 2911.178241][ T8765] out_of_memory+0x35c/0x1660 [ 2911.182926][ T8765] ? oom_killer_disable+0x2b0/0x2b0 [ 2911.188130][ T8765] ? rcu_read_unlock+0x9/0x60 [ 2911.192832][ T8765] ? find_held_lock+0x2d/0x110 [ 2911.197649][ T8765] mem_cgroup_out_of_memory+0x206/0x270 [ 2911.203246][ T8765] ? mem_cgroup_margin+0x130/0x130 [ 2911.208386][ T8765] ? lock_downgrade+0x690/0x690 [ 2911.213295][ T8765] try_charge_memcg+0xf99/0x13a0 [ 2911.218273][ T8765] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2911.224266][ T8765] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2911.229997][ T8765] ? lock_downgrade+0x690/0x690 [ 2911.234860][ T8765] ? lock_downgrade+0x690/0x690 [ 2911.239751][ T8765] __memcg_kmem_charge_page+0x16e/0x3c0 [ 2911.245355][ T8765] __alloc_pages+0x1f3/0x4a0 [ 2911.249979][ T8765] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2911.256760][ T8765] ? find_held_lock+0x2d/0x110 [ 2911.261535][ T8765] ? lock_downgrade+0x690/0x690 [ 2911.266394][ T8765] ? do_raw_spin_lock+0x124/0x2b0 [ 2911.271441][ T8765] alloc_pages+0x1aa/0x270 [ 2911.275871][ T8765] __pmd_alloc+0x3f/0x5d0 [ 2911.280213][ T8765] ? __pud_alloc+0xe4/0x180 [ 2911.284742][ T8765] copy_page_range+0x22c1/0x3830 [ 2911.289711][ T8765] ? mas_wr_modify+0x999/0x16d0 [ 2911.294621][ T8765] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 2911.300576][ T8765] ? mas_store+0x275/0x3a0 [ 2911.305007][ T8765] ? handle_mm_fault+0x9f0/0x9f0 [ 2911.309947][ T8765] ? down_write+0x14f/0x200 [ 2911.314480][ T8765] dup_mmap+0x10bc/0x19d0 [ 2911.318829][ T8765] ? replace_mm_exe_file+0x4c0/0x4c0 [ 2911.324128][ T8765] ? lockdep_hardirqs_on+0x7d/0x100 [ 2911.329342][ T8765] ? mm_init+0xc7a/0x1030 [ 2911.333683][ T8765] copy_process+0x65ae/0x7600 [ 2911.338380][ T8765] ? _raw_spin_unlock+0x28/0x40 [ 2911.343323][ T8765] ? pidfd_prepare+0x80/0x80 [ 2911.347964][ T8765] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2911.353987][ T8765] kernel_clone+0xeb/0x890 [ 2911.358425][ T8765] ? create_io_thread+0xe0/0xe0 [ 2911.363288][ T8765] ? do_user_addr_fault+0x2b1/0x1210 [ 2911.368581][ T8765] ? reacquire_held_locks+0x216/0x4e0 [ 2911.373962][ T8765] ? do_user_addr_fault+0x2b1/0x1210 [ 2911.379265][ T8765] ? find_held_lock+0x2d/0x110 [ 2911.384055][ T8765] __do_sys_clone+0xba/0x100 [ 2911.388679][ T8765] ? kernel_clone+0x890/0x890 [ 2911.393420][ T8765] ? syscall_enter_from_user_mode+0x26/0x80 [ 2911.399351][ T8765] do_syscall_64+0x39/0xb0 [ 2911.403782][ T8765] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2911.409687][ T8765] RIP: 0033:0x7f6746689e9b [ 2911.414112][ T8765] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2911.433746][ T8765] RSP: 002b:00007fff7136dd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2911.442177][ T8765] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6746689e9b 01:15:39 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x80, 0x7d, 0x0, 0x8, 0x0, 0x0, 0x1080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x78, 0x2, @perf_config_ext={0x4, 0x1}, 0x10010, 0x1, 0xffffff05, 0x9, 0xc00, 0x8000, 0x7, 0x0, 0x7, 0x0, 0x2b4d0000000}, r1, 0x5, r5, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r4, &(0x7f0000000180), 0x12) [ 2911.450207][ T8765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2911.458179][ T8765] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555574dc400 [ 2911.466162][ T8765] R10: 00005555574dc6d0 R11: 0000000000000246 R12: 0000000000000001 [ 2911.474138][ T8765] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff7136de40 [ 2911.482141][ T8765] [ 2911.487679][ T8765] memory: usage 10452kB, limit 0kB, failcnt 990 [ 2911.542613][ T8765] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2911.558518][ T8765] Memory cgroup stats for /syz3: [ 2911.558742][ T8765] anon 40960 [ 2911.558742][ T8765] file 10452992 [ 2911.558742][ T8765] kernel 204800 [ 2911.558742][ T8765] kernel_stack 32768 [ 2911.558742][ T8765] pagetables 16384 [ 2911.558742][ T8765] sec_pagetables 0 [ 2911.558742][ T8765] percpu 128 [ 2911.558742][ T8765] sock 0 [ 2911.558742][ T8765] vmalloc 0 [ 2911.558742][ T8765] shmem 10452992 [ 2911.558742][ T8765] zswap 0 [ 2911.558742][ T8765] zswapped 0 [ 2911.558742][ T8765] file_mapped 323584 [ 2911.558742][ T8765] file_dirty 0 [ 2911.558742][ T8765] file_writeback 0 [ 2911.558742][ T8765] swapcached 0 [ 2911.558742][ T8765] anon_thp 0 [ 2911.558742][ T8765] file_thp 0 [ 2911.558742][ T8765] shmem_thp 0 [ 2911.558742][ T8765] inactive_anon 122880 [ 2911.558742][ T8765] active_anon 10371072 [ 2911.558742][ T8765] inactive_file 0 [ 2911.558742][ T8765] active_file 0 [ 2911.558742][ T8765] unevictable 0 [ 2911.558742][ T8765] slab_reclaimable 35320 [ 2911.558742][ T8765] slab_unreclaimable 95520 [ 2911.558742][ T8765] slab 130840 [ 2911.558742][ T8765] workingset_refault_anon 0 [ 2911.558742][ T8765] workingset_refault_file 0 [ 2911.558742][ T8765] workingset_activate_anon 0 [ 2911.558742][ T8765] workingset_activate_file 0 [ 2911.558742][ T8765] workingset_restore_anon 0 [ 2911.558742][ T8765] workingset_restore_file 0 [ 2911.558742][ T8765] workingset_nodereclaim 0 [ 2911.558742][ T8765] pgscan 307 [ 2911.558742][ T8765] pgsteal 80 [ 2911.558742][ T8765] pgscan_kswapd 0 [ 2911.558742][ T8765] pgscan_direct 307 [ 2911.558742][ T8765] pgscan_khugepaged 0 [ 2911.558742][ T8765] pgsteal_kswapd 0 [ 2911.558742][ T8765] pgsteal_direct 80 [ 2911.558742][ T8765] pgsteal_khugepaged 0 [ 2911.558742][ T8765] pgfault 61248 [ 2911.558742][ T8765] pgmajfault 0 [ 2911.558742][ T8765] pgrefill 914 [ 2911.558742][ T8765] pgactivate 227 [ 2911.558742][ T8765] pgdeactivate 0 [ 2911.558742][ T8765] pglazyfree 0 [ 2911.558742][ T8765] pglazyfreed 0 [ 2911.558742][ T8765] zswpin 0 [ 2911.558742][ T8765] zswpout 0 [ 2911.558742][ T8765] thp_fault_alloc 0 01:15:39 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x80, 0x7d, 0x0, 0x8, 0x0, 0x0, 0x1080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x78, 0x2, @perf_config_ext={0x4, 0x1}, 0x10010, 0x1, 0xffffff05, 0x9, 0xc00, 0x8000, 0x7, 0x0, 0x7, 0x0, 0x2b4d0000000}, r1, 0x5, r5, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r4, &(0x7f0000000180), 0x12) [ 2911.764855][ T8765] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=8765,uid=0 [ 2911.794031][ T8765] Memory cgroup out of memory: Killed process 8765 (syz-executor.3) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 01:15:39 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) [ 2912.179522][ T8982] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2912.423020][ T8982] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2912.519636][T31297] Bluetooth: hci1: command 0x0419 tx timeout [ 2912.580094][ T8982] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2912.701768][ T4594] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2912.710504][ T4594] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2912.718754][ T4594] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2912.728629][ T4594] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2912.736504][ T4594] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2912.746543][ T4594] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2912.784152][ T8982] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2912.943984][ T8973] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2913.090027][ T8973] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2913.360951][ T8973] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2913.609732][ T8973] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2913.652097][ T9007] chnl_net:caif_netlink_parms(): no params data found [ 2913.980171][ T9007] bridge0: port 1(bridge_slave_0) entered blocking state [ 2913.989091][ T4594] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2913.997581][ T4594] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2914.008410][ T4594] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2914.016274][ T9007] bridge0: port 1(bridge_slave_0) entered disabled state [ 2914.023593][ T4594] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2914.031209][ T4594] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2914.048871][ T4594] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2914.048979][ T9007] bridge_slave_0: entered allmulticast mode [ 2914.109337][ T9007] bridge_slave_0: entered promiscuous mode [ 2914.152401][ T9007] bridge0: port 2(bridge_slave_1) entered blocking state [ 2914.179961][ T9007] bridge0: port 2(bridge_slave_1) entered disabled state [ 2914.187284][ T9007] bridge_slave_1: entered allmulticast mode [ 2914.229495][ T9007] bridge_slave_1: entered promiscuous mode [ 2914.306289][ T8982] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2914.316192][ T8982] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2914.370194][ T8982] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2914.388596][ T9007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2914.407728][ T8982] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2914.434525][ T9007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2914.620159][ T9007] team0: Port device team_slave_0 added [ 2914.654750][ T8973] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2914.672127][ T8973] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2914.697123][ T9007] team0: Port device team_slave_1 added [ 2914.714817][ T8973] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2914.785434][ T8973] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2914.820363][ T9007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2914.827359][ T9007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2914.854603][ T4594] Bluetooth: hci2: command 0x0409 tx timeout [ 2914.865363][ T9007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2914.879373][ T9007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2914.886343][ T9007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2914.914269][ T9007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2915.027684][ T8982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2915.073146][ T9016] chnl_net:caif_netlink_parms(): no params data found [ 2915.100915][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2915.110228][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2915.120755][ T8982] 8021q: adding VLAN 0 to HW filter on device team0 [ 2915.132023][ T9007] hsr_slave_0: entered promiscuous mode [ 2915.139023][ T9007] hsr_slave_1: entered promiscuous mode [ 2915.145193][ T9007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2915.153567][ T9007] Cannot create hsr debugfs directory [ 2915.169271][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2915.178614][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2915.186995][T21280] bridge0: port 1(bridge_slave_0) entered blocking state [ 2915.194094][T21280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2915.238131][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2915.247138][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2915.257339][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2915.265986][T21280] bridge0: port 2(bridge_slave_1) entered blocking state [ 2915.273102][T21280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2915.280968][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2915.326662][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2915.335388][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2915.345078][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2915.354664][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2915.368782][ T8973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2915.425715][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2915.435280][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2915.444300][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2915.452300][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2915.465597][ T8973] 8021q: adding VLAN 0 to HW filter on device team0 [ 2915.478967][ T9016] bridge0: port 1(bridge_slave_0) entered blocking state [ 2915.486035][ T9016] bridge0: port 1(bridge_slave_0) entered disabled state [ 2915.494352][ T9016] bridge_slave_0: entered allmulticast mode [ 2915.515112][ T9016] bridge_slave_0: entered promiscuous mode [ 2915.576337][ T5531] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2915.662430][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2915.671230][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2915.681010][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2915.689715][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2915.717594][ T9016] bridge0: port 2(bridge_slave_1) entered blocking state [ 2915.726006][ T9016] bridge0: port 2(bridge_slave_1) entered disabled state [ 2915.747511][ T9016] bridge_slave_1: entered allmulticast mode [ 2915.754727][ T9016] bridge_slave_1: entered promiscuous mode [ 2915.792522][ T5531] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2915.808115][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2915.822226][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2915.831606][ T8291] bridge0: port 1(bridge_slave_0) entered blocking state [ 2915.838772][ T8291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2915.846860][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2915.857600][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2915.866541][ T8291] bridge0: port 2(bridge_slave_1) entered blocking state [ 2915.873677][ T8291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2915.882005][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2915.893790][ T8982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2915.925755][ T5531] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2915.960324][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2915.979052][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2915.999397][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2916.019506][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2916.039119][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2916.058537][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2916.074289][ T9016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2916.118656][ T4594] Bluetooth: hci3: command 0x0409 tx timeout [ 2916.164702][ T5531] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2916.211786][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2916.229367][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2916.248736][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2916.260788][ T9016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2916.371490][ T8973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2916.389330][ T8973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2916.487120][ T9007] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2916.534425][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2916.564165][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2916.587910][ T9016] team0: Port device team_slave_0 added [ 2916.610631][ T9016] team0: Port device team_slave_1 added [ 2916.626709][ T9007] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2916.748688][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2916.756173][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2916.789643][ T9007] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2916.811646][ T9016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2916.823749][ T9016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2916.854207][ T9016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2916.877847][ T9016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2916.891947][ T9016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2916.918328][ T4594] Bluetooth: hci2: command 0x041b tx timeout [ 2916.928371][ T9016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2916.989506][ T9007] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2917.017694][ T8982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2917.078558][ T8973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2917.087316][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2917.118465][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2917.203637][ T5531] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2917.314129][ T9016] hsr_slave_0: entered promiscuous mode [ 2917.340075][ T9016] hsr_slave_1: entered promiscuous mode [ 2917.366407][ T9016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2917.378268][ T9016] Cannot create hsr debugfs directory [ 2917.394278][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2917.419202][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2917.459310][ T5531] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2917.504859][ T8982] veth0_vlan: entered promiscuous mode [ 2917.569474][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2917.577821][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2917.640856][ T5531] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2917.673985][ T8982] veth1_vlan: entered promiscuous mode [ 2917.691719][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2917.701441][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2917.710002][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2917.821105][ T5531] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2917.891489][ T9007] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2917.933764][ T9007] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2918.024116][ T9007] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2918.040714][ T9007] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2918.079122][ T8982] veth0_macvtap: entered promiscuous mode [ 2918.088223][ T8982] veth1_macvtap: entered promiscuous mode [ 2918.104876][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2918.116337][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2918.125623][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2918.198733][T31297] Bluetooth: hci3: command 0x041b tx timeout [ 2918.220266][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2918.254441][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2918.269398][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2918.280407][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2918.290973][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2918.301247][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2918.312014][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2918.322081][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2918.332961][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2918.343782][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2918.354514][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2918.365065][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2918.375795][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2918.387923][ T8982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2918.455680][ T9016] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2918.503078][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2918.512574][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2918.523266][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2918.541577][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2918.551709][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2918.562417][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2918.572667][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2918.594405][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2918.605650][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2918.616488][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2918.626827][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2918.637653][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2918.659055][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2918.679808][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2918.702953][ T8982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2918.771380][ T9016] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2918.798855][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2918.807546][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2918.830371][ T8982] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2918.856846][ T8982] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2918.876881][ T8982] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2918.887918][ T8982] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2918.955798][ T9016] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2918.981922][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2918.993902][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2918.999029][T31297] Bluetooth: hci2: command 0x040f tx timeout [ 2919.040053][ T9016] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2919.110100][ T9007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2919.121796][ T8973] veth0_vlan: entered promiscuous mode [ 2919.165828][ T8973] veth1_vlan: entered promiscuous mode [ 2919.189379][T13753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2919.200626][T13753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2919.209934][T13753] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2919.274756][ T9007] 8021q: adding VLAN 0 to HW filter on device team0 [ 2919.281778][ T7036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2919.287056][T13753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2919.301207][T13753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2919.316532][T13753] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2919.322255][ T7036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2919.326558][T13753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2919.349015][T13753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2919.358672][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2919.488535][ T8973] veth0_macvtap: entered promiscuous mode [ 2919.504243][T13753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2919.513736][T13753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2919.522446][T13753] bridge0: port 1(bridge_slave_0) entered blocking state [ 2919.529630][T13753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2919.538093][T13753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2919.546963][T13753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2919.556127][T13753] bridge0: port 2(bridge_slave_1) entered blocking state [ 2919.563282][T13753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2919.571580][T13753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2919.581423][T13753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2919.590495][T13753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2919.657430][ T8973] veth1_macvtap: entered promiscuous mode [ 2919.688628][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2919.696711][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2919.709972][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2919.718101][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2919.727721][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2919.737326][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2919.746365][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2919.755358][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2919.767670][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2919.776378][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2919.785050][ T9016] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2919.840500][T15809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2919.850178][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2919.857698][T15809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2919.882408][ T9016] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2919.896674][ T9007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2919.925008][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2919.934030][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2919.960466][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2919.970263][ T9016] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2920.000264][ T9016] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2920.037133][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2920.058275][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2920.068107][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2920.079073][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2920.089010][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2920.099556][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2920.109479][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2920.121811][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2920.134989][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2920.145855][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2920.156007][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2920.166624][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2920.176687][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2920.187273][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2920.220371][ T8973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2920.251501][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2920.264271][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2920.282739][T31297] Bluetooth: hci3: command 0x040f tx timeout [ 2920.528034][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2920.541566][ T9076] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2920.547138][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2920.561012][ T9076] CPU: 0 PID: 9076 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2920.572347][ T9076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2920.574758][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2920.582422][ T9076] Call Trace: [ 2920.582434][ T9076] [ 2920.582446][ T9076] dump_stack_lvl+0x136/0x150 [ 2920.582507][ T9076] dump_header+0x10a/0xd70 [ 2920.582545][ T9076] oom_kill_process+0x25d/0x600 [ 2920.582582][ T9076] out_of_memory+0x35c/0x1660 [ 2920.582625][ T9076] ? oom_killer_disable+0x2b0/0x2b0 [ 2920.614164][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2920.617872][ T9076] ? mark_held_locks+0x9f/0xe0 [ 2920.633328][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2920.637660][ T9076] mem_cgroup_out_of_memory+0x206/0x270 [ 2920.653708][ T9076] ? mem_cgroup_margin+0x130/0x130 [ 2920.658885][ T9076] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 2920.661843][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2920.664732][ T9076] memory_max_write+0x2f9/0x3c0 [ 2920.679432][ T9076] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2920.685554][ T9076] ? mark_held_locks+0x9f/0xe0 [ 2920.688059][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2920.690354][ T9076] cgroup_file_write+0x1e2/0x7b0 [ 2920.690395][ T9076] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2920.690445][ T9076] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2920.713186][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2920.717220][ T9076] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2920.732456][ T9076] kernfs_fop_write_iter+0x3f1/0x600 [ 2920.737814][ T9076] vfs_write+0x945/0xd50 [ 2920.739421][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2920.742104][ T9076] ? kernel_write+0x670/0x670 [ 2920.742146][ T9076] ? __fget_files+0x26a/0x480 [ 2920.761984][ T9076] ksys_write+0x12b/0x250 [ 2920.765400][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2920.766342][ T9076] ? __ia32_sys_read+0xb0/0xb0 [ 2920.766380][ T9076] ? syscall_enter_from_user_mode+0x30/0x80 [ 2920.786853][ T9076] do_syscall_64+0x39/0xb0 [ 2920.787754][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2920.791311][ T9076] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2920.791362][ T9076] RIP: 0033:0x7f2e9fc8c169 [ 2920.791386][ T9076] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2920.791416][ T9076] RSP: 002b:00007f2ea0a28168 EFLAGS: 00000246 [ 2920.814538][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2920.831724][ T9076] ORIG_RAX: 0000000000000001 [ 2920.831741][ T9076] RAX: ffffffffffffffda RBX: 00007f2e9fdac050 RCX: 00007f2e9fc8c169 [ 2920.831765][ T9076] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 2920.831788][ T9076] RBP: 00007f2e9fce7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2920.831815][ T9076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2920.831836][ T9076] R13: 00007ffd075654bf R14: 00007f2ea0a28300 R15: 0000000000022000 [ 2920.831882][ T9076] [ 2920.911108][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2920.928619][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2920.953804][ T9076] memory: usage 10676kB, limit 0kB, failcnt 1842 [ 2920.956425][ T8973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2920.960512][ T9076] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2920.976410][ T9076] Memory cgroup stats for /syz2: [ 2920.978076][ T9076] anon 118784 [ 2920.978076][ T9076] file 10416128 [ 2920.978076][ T9076] kernel 385024 [ 2920.978076][ T9076] kernel_stack 98304 [ 2920.978076][ T9076] pagetables 81920 [ 2920.978076][ T9076] sec_pagetables 0 [ 2920.978076][ T9076] percpu 64 [ 2920.978076][ T9076] sock 0 [ 2920.978076][ T9076] vmalloc 0 [ 2920.978076][ T9076] shmem 10416128 [ 2920.978076][ T9076] zswap 0 [ 2920.978076][ T9076] zswapped 0 [ 2920.978076][ T9076] file_mapped 176128 [ 2920.978076][ T9076] file_dirty 0 [ 2920.978076][ T9076] file_writeback 0 [ 2920.978076][ T9076] swapcached 0 [ 2920.978076][ T9076] anon_thp 0 [ 2920.978076][ T9076] file_thp 0 [ 2920.978076][ T9076] shmem_thp 0 [ 2920.978076][ T9076] inactive_anon 0 [ 2920.978076][ T9076] active_anon 10534912 [ 2920.978076][ T9076] inactive_file 0 [ 2920.978076][ T9076] active_file 0 [ 2920.978076][ T9076] unevictable 0 [ 2920.978076][ T9076] slab_reclaimable 53456 [ 2920.978076][ T9076] slab_unreclaimable 122704 [ 2920.978076][ T9076] slab 176160 [ 2920.978076][ T9076] workingset_refault_anon 0 [ 2920.978076][ T9076] workingset_refault_file 0 [ 2920.978076][ T9076] workingset_activate_anon 0 [ 2920.978076][ T9076] workingset_activate_file 0 [ 2920.978076][ T9076] workingset_restore_anon 0 [ 2920.978076][ T9076] workingset_restore_file 0 [ 2920.978076][ T9076] workingset_nodereclaim 0 [ 2920.978076][ T9076] pgscan 172 [ 2920.978076][ T9076] pgsteal 52 [ 2920.978076][ T9076] pgscan_kswapd 0 [ 2920.978076][ T9076] pgscan_direct 172 [ 2920.978076][ T9076] pgscan_khugepaged 0 [ 2920.978076][ T9076] pgsteal_kswapd 0 [ 2920.978076][ T9076] pgsteal_direct 52 [ 2920.978076][ T9076] pgsteal_khugepaged 0 [ 2920.978076][ T9076] pgfault 55491 [ 2920.978076][ T9076] pgmajfault 0 [ 2920.978076][ T9076] pgrefill 20570 [ 2920.978076][ T9076] pgactivate 120 [ 2920.978076][ T9076] pgdeactivate 0 [ 2920.978076][ T9076] pglazyfree 0 [ 2920.978076][ T9076] pglazyfreed 0 [ 2920.978076][ T9076] zswpin 0 [ 2920.978076][ T9076] zswpout 0 [ 2920.978076][ T9076] thp_fault_alloc 0 [ 2920.992449][ T8973] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2921.176969][ T8973] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2921.186093][ T8973] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2921.195095][ T8973] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2921.205789][T31297] Bluetooth: hci2: command 0x0419 tx timeout [ 2921.215643][ T9076] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=9073,uid=0 [ 2921.236283][ T9076] Memory cgroup out of memory: Killed process 9074 (syz-executor.2) total-vm:54680kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2921.291012][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2921.308971][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2921.320527][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2921.328886][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2921.390544][ T9007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2921.528859][T28784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2921.537470][T28784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2921.619110][ T7022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2921.627269][ T7022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2921.767514][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2921.782369][ T9007] veth0_vlan: entered promiscuous mode [ 2921.811571][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2921.829510][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2921.840357][ T5541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2921.845297][ T9007] veth1_vlan: entered promiscuous mode [ 2921.857379][ T5541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2921.955352][ T9016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2921.984924][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2921.999806][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2922.017980][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2922.027511][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2922.181607][ T9016] 8021q: adding VLAN 0 to HW filter on device team0 [ 2922.209370][ T9007] veth0_macvtap: entered promiscuous mode [ 2922.216369][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2922.226234][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2922.234356][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2922.243196][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2922.252202][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2922.363758][T31297] Bluetooth: hci3: command 0x0419 tx timeout [ 2922.562126][ T9007] veth1_macvtap: entered promiscuous mode [ 2922.568916][ T9093] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2922.573765][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2922.600005][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2922.657285][ T9093] CPU: 1 PID: 9093 Comm: syz-executor.5 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2922.667685][ T9093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2922.677793][ T9093] Call Trace: [ 2922.681151][ T9093] [ 2922.684115][ T9093] dump_stack_lvl+0x136/0x150 [ 2922.688925][ T9093] dump_header+0x10a/0xd70 [ 2922.693401][ T9093] oom_kill_process+0x25d/0x600 [ 2922.698307][ T9093] out_of_memory+0x35c/0x1660 [ 2922.703046][ T9093] ? lockdep_hardirqs_on+0x7d/0x100 [ 2922.708345][ T9093] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2922.714578][ T9093] ? oom_killer_disable+0x2b0/0x2b0 [ 2922.719851][ T9093] ? mem_cgroup_out_of_memory+0x199/0x270 [ 2922.725708][ T9093] mem_cgroup_out_of_memory+0x206/0x270 [ 2922.731337][ T9093] ? mem_cgroup_margin+0x130/0x130 [ 2922.736524][ T9093] memory_max_write+0x2f9/0x3c0 [ 2922.737411][ T9016] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2922.741429][ T9093] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2922.752427][ T9016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2922.757830][ T9093] ? lock_sync+0x190/0x190 [ 2922.772637][ T9093] cgroup_file_write+0x1e2/0x7b0 [ 2922.777637][ T9093] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2922.783767][ T9093] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2922.789212][ T9093] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2922.794640][ T9093] kernfs_fop_write_iter+0x3f1/0x600 [ 2922.799991][ T9093] vfs_write+0x945/0xd50 [ 2922.804312][ T9093] ? kernel_write+0x670/0x670 [ 2922.809044][ T9093] ? __fget_files+0x26a/0x480 [ 2922.813891][ T9093] ksys_write+0x12b/0x250 [ 2922.818277][ T9093] ? __ia32_sys_read+0xb0/0xb0 [ 2922.823095][ T9093] ? syscall_enter_from_user_mode+0x30/0x80 [ 2922.829157][ T9093] do_syscall_64+0x39/0xb0 [ 2922.833645][ T9093] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2922.839601][ T9093] RIP: 0033:0x7f050e48c169 [ 2922.844058][ T9093] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2922.863761][ T9093] RSP: 002b:00007f050cffe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2922.872229][ T9093] RAX: ffffffffffffffda RBX: 00007f050e5ac050 RCX: 00007f050e48c169 [ 2922.880252][ T9093] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 2922.888269][ T9093] RBP: 00007f050e4e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2922.896290][ T9093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2922.904302][ T9093] R13: 00007ffe61a58cbf R14: 00007f050cffe300 R15: 0000000000022000 [ 2922.912360][ T9093] [ 2922.935588][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2922.941466][ T9093] memory: usage 10700kB, limit 0kB, failcnt 1004 [ 2922.950330][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2922.950788][ T8606] bridge0: port 1(bridge_slave_0) entered blocking state [ 2922.950851][ T8606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2922.951389][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2922.987563][ T9093] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2923.008275][ T9093] Memory cgroup stats for /syz5: [ 2923.008505][ T9093] anon 114688 [ 2923.008505][ T9093] file 10448896 [ 2923.008505][ T9093] kernel 299008 [ 2923.008505][ T9093] kernel_stack 32768 [ 2923.008505][ T9093] pagetables 81920 [ 2923.008505][ T9093] sec_pagetables 0 [ 2923.008505][ T9093] percpu 64 [ 2923.008505][ T9093] sock 0 [ 2923.008505][ T9093] vmalloc 0 [ 2923.008505][ T9093] shmem 10448896 [ 2923.008505][ T9093] zswap 0 [ 2923.008505][ T9093] zswapped 0 [ 2923.008505][ T9093] file_mapped 278528 [ 2923.008505][ T9093] file_dirty 0 [ 2923.008505][ T9093] file_writeback 0 [ 2923.008505][ T9093] swapcached 0 [ 2923.008505][ T9093] anon_thp 0 [ 2923.008505][ T9093] file_thp 0 [ 2923.008505][ T9093] shmem_thp 0 [ 2923.008505][ T9093] inactive_anon 10448896 [ 2923.008505][ T9093] active_anon 110592 [ 2923.008505][ T9093] inactive_file 0 [ 2923.008505][ T9093] active_file 0 [ 2923.008505][ T9093] unevictable 0 [ 2923.008505][ T9093] slab_reclaimable 50624 [ 2923.008505][ T9093] slab_unreclaimable 114376 [ 2923.008505][ T9093] slab 165000 [ 2923.008505][ T9093] workingset_refault_anon 0 [ 2923.008505][ T9093] workingset_refault_file 0 [ 2923.008505][ T9093] workingset_activate_anon 0 [ 2923.008505][ T9093] workingset_activate_file 0 [ 2923.008505][ T9093] workingset_restore_anon 0 [ 2923.008505][ T9093] workingset_restore_file 0 [ 2923.008505][ T9093] workingset_nodereclaim 0 [ 2923.008505][ T9093] pgscan 716 [ 2923.008505][ T9093] pgsteal 57 [ 2923.008505][ T9093] pgscan_kswapd 0 [ 2923.008505][ T9093] pgscan_direct 716 [ 2923.008505][ T9093] pgscan_khugepaged 0 [ 2923.008505][ T9093] pgsteal_kswapd 0 [ 2923.008505][ T9093] pgsteal_direct 57 [ 2923.008505][ T9093] pgsteal_khugepaged 0 [ 2923.008505][ T9093] pgfault 82245 [ 2923.008505][ T9093] pgmajfault 0 [ 2923.008505][ T9093] pgrefill 25846 [ 2923.008505][ T9093] pgactivate 627 [ 2923.008505][ T9093] pgdeactivate 0 [ 2923.008505][ T9093] pglazyfree 0 [ 2923.008505][ T9093] pglazyfreed 0 [ 2923.008505][ T9093] zswpin 0 [ 2923.008505][ T9093] zswpout 0 [ 2923.008505][ T9093] thp_fault_alloc 0 [ 2923.022201][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 01:15:51 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) 01:15:51 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000003c0)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="0008030000086d6f9f487a74dde5e9fac9f9513154ffb3ff030000f56c8374cbe5d99a130e1f636709e048decbe24bb592299846d7bbad3fc61f86a3798700eb2129cf607c223e4b8c7f1687f6d8df1da48cd67815f62156cf2bb02394b3d16f825976c0b0c36e2db48ade28fe642efb21f16681cd5aeebd2341f5c6ab1ecf05adb78fff445806189faf2b6dc37f77dbf2b0a1e6d4b89eff16e67ea60b26c312f08600b3c1d61a0a9c63469ca436d6d2321df23da24e75309e7036cfc5c36d8127ca878c4a65b0f2089ed5593689cded5d46e67477fad72b4a5f2a10345eaf04e2cd7a8f1780cfb74cb95ecc5f2735c7804a7c563fa8ff0b20f049d025a2cdb36612f6b0eb10f49fb1"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x80, 0x7d, 0x0, 0x8, 0x0, 0x0, 0x1080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x78, 0x2, @perf_config_ext={0x4, 0x1}, 0x10010, 0x1, 0xffffff05, 0x9, 0xc00, 0x8000, 0x7, 0x0, 0x7, 0x0, 0x2b4d0000000}, r1, 0x5, r5, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r4, &(0x7f0000000180), 0x12) 01:15:51 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) 01:15:51 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) [ 2923.211104][ T9093] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=9090,uid=0 [ 2923.215188][ T8606] bridge0: port 2(bridge_slave_1) entered blocking state [ 2923.227086][ T9093] Memory cgroup out of memory: Killed process 9093 (syz-executor.5) total-vm:56728kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2923.233654][ T8606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2923.282718][ T8982] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 2923.295151][ T8982] CPU: 0 PID: 8982 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2923.305517][ T8982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2923.315681][ T8982] Call Trace: [ 2923.318981][ T8982] [ 2923.321933][ T8982] dump_stack_lvl+0x136/0x150 [ 2923.326664][ T8982] dump_header+0x10a/0xd70 [ 2923.331102][ T8982] oom_kill_process+0x25d/0x600 [ 2923.335968][ T8982] out_of_memory+0x35c/0x1660 [ 2923.340660][ T8982] ? find_held_lock+0x2d/0x110 [ 2923.345442][ T8982] ? oom_killer_disable+0x2b0/0x2b0 [ 2923.350651][ T8982] ? rcu_read_unlock+0x9/0x60 [ 2923.355348][ T8982] ? find_held_lock+0x2d/0x110 [ 2923.360132][ T8982] mem_cgroup_out_of_memory+0x206/0x270 [ 2923.365701][ T8982] ? mem_cgroup_margin+0x130/0x130 [ 2923.370828][ T8982] ? lock_downgrade+0x690/0x690 [ 2923.375712][ T8982] try_charge_memcg+0xf99/0x13a0 [ 2923.380683][ T8982] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2923.386688][ T8982] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2923.392434][ T8982] ? lock_downgrade+0x690/0x690 [ 2923.397316][ T8982] ? lock_downgrade+0x690/0x690 [ 2923.402199][ T8982] ? rcu_read_unlock+0x9/0x60 [ 2923.406914][ T8982] obj_cgroup_charge+0x2af/0x5e0 [ 2923.411885][ T8982] ? copy_process+0x3c0/0x7600 [ 2923.416670][ T8982] kmem_cache_alloc_node+0xa8/0x3e0 [ 2923.421897][ T8982] copy_process+0x3c0/0x7600 [ 2923.426506][ T8982] ? _raw_spin_unlock+0x28/0x40 [ 2923.431383][ T8982] ? wp_page_reuse+0x197/0x570 [ 2923.436183][ T8982] ? pidfd_prepare+0x80/0x80 [ 2923.440801][ T8982] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2923.446809][ T8982] kernel_clone+0xeb/0x890 [ 2923.451247][ T8982] ? create_io_thread+0xe0/0xe0 [ 2923.456124][ T8982] ? do_user_addr_fault+0x2b1/0x1210 [ 2923.461436][ T8982] ? reacquire_held_locks+0x216/0x4e0 [ 2923.466828][ T8982] ? do_user_addr_fault+0x2b1/0x1210 [ 2923.472229][ T8982] ? find_held_lock+0x2d/0x110 [ 2923.477021][ T8982] __do_sys_clone+0xba/0x100 [ 2923.481638][ T8982] ? kernel_clone+0x890/0x890 [ 2923.486346][ T8982] ? syscall_enter_from_user_mode+0x26/0x80 [ 2923.492265][ T8982] do_syscall_64+0x39/0xb0 [ 2923.496715][ T8982] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2923.502643][ T8982] RIP: 0033:0x7f2e9fc89e9b [ 2923.507070][ T8982] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2923.526694][ T8982] RSP: 002b:00007ffd07565700 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2923.535125][ T8982] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2e9fc89e9b [ 2923.543110][ T8982] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2923.551094][ T8982] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555567b2400 [ 2923.559072][ T8982] R10: 00005555567b26d0 R11: 0000000000000246 R12: 0000000000000001 [ 2923.567050][ T8982] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd075657e0 [ 2923.575044][ T8982] [ 2923.615096][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2923.636263][ T8982] memory: usage 10328kB, limit 0kB, failcnt 1861 [ 2923.644660][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2923.648382][ T8982] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2923.668225][ T8982] Memory cgroup stats for /syz2: [ 2923.668448][ T8982] anon 40960 [ 2923.668448][ T8982] file 10416128 [ 2923.668448][ T8982] kernel 118784 [ 2923.668448][ T8982] kernel_stack 0 [ 2923.668448][ T8982] pagetables 8192 [ 2923.668448][ T8982] sec_pagetables 0 [ 2923.668448][ T8982] percpu 0 [ 2923.668448][ T8982] sock 0 [ 2923.668448][ T8982] vmalloc 0 [ 2923.668448][ T8982] shmem 10416128 [ 2923.668448][ T8982] zswap 0 [ 2923.668448][ T8982] zswapped 0 [ 2923.668448][ T8982] file_mapped 176128 [ 2923.668448][ T8982] file_dirty 0 [ 2923.668448][ T8982] file_writeback 0 [ 2923.668448][ T8982] swapcached 0 [ 2923.668448][ T8982] anon_thp 0 [ 2923.668448][ T8982] file_thp 0 [ 2923.668448][ T8982] shmem_thp 0 [ 2923.668448][ T8982] inactive_anon 0 [ 2923.668448][ T8982] active_anon 10457088 [ 2923.668448][ T8982] inactive_file 0 [ 2923.668448][ T8982] active_file 0 [ 2923.668448][ T8982] unevictable 0 [ 2923.668448][ T8982] slab_reclaimable 40176 [ 2923.668448][ T8982] slab_unreclaimable 59008 [ 2923.668448][ T8982] slab 99184 [ 2923.668448][ T8982] workingset_refault_anon 0 [ 2923.668448][ T8982] workingset_refault_file 0 [ 2923.668448][ T8982] workingset_activate_anon 0 [ 2923.668448][ T8982] workingset_activate_file 0 [ 2923.668448][ T8982] workingset_restore_anon 0 [ 2923.668448][ T8982] workingset_restore_file 0 [ 2923.668448][ T8982] workingset_nodereclaim 0 [ 2923.668448][ T8982] pgscan 172 [ 2923.668448][ T8982] pgsteal 52 [ 2923.668448][ T8982] pgscan_kswapd 0 [ 2923.668448][ T8982] pgscan_direct 172 [ 2923.668448][ T8982] pgscan_khugepaged 0 [ 2923.668448][ T8982] pgsteal_kswapd 0 [ 2923.668448][ T8982] pgsteal_direct 52 [ 2923.668448][ T8982] pgsteal_khugepaged 0 [ 2923.668448][ T8982] pgfault 55507 [ 2923.668448][ T8982] pgmajfault 0 [ 2923.668448][ T8982] pgrefill 20570 [ 2923.668448][ T8982] pgactivate 120 [ 2923.668448][ T8982] pgdeactivate 0 [ 2923.668448][ T8982] pglazyfree 0 [ 2923.668448][ T8982] pglazyfreed 0 [ 2923.668448][ T8982] zswpin 0 [ 2923.668448][ T8982] zswpout 0 [ 2923.668448][ T8982] thp_fault_alloc 0 [ 2923.669278][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2923.673500][ T8982] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8982,uid=0 [ 2923.908059][ T8982] Memory cgroup out of memory: Killed process 8982 (syz-executor.2) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2923.934558][ T8973] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 2923.966939][ T8973] CPU: 1 PID: 8973 Comm: syz-executor.5 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2923.977302][ T8973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2923.987376][ T8973] Call Trace: [ 2923.990675][ T8973] [ 2923.993628][ T8973] dump_stack_lvl+0x136/0x150 [ 2923.998362][ T8973] dump_header+0x10a/0xd70 [ 2924.002819][ T8973] oom_kill_process+0x25d/0x600 [ 2924.007718][ T8973] out_of_memory+0x35c/0x1660 [ 2924.012464][ T8973] ? oom_killer_disable+0x2b0/0x2b0 [ 2924.017705][ T8973] ? rcu_read_unlock+0x9/0x60 [ 2924.022427][ T8973] ? find_held_lock+0x2d/0x110 [ 2924.027241][ T8973] mem_cgroup_out_of_memory+0x206/0x270 [ 2924.032828][ T8973] ? mem_cgroup_margin+0x130/0x130 [ 2924.036229][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2924.037959][ T8973] ? lock_downgrade+0x690/0x690 [ 2924.048858][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2924.050622][ T8973] try_charge_memcg+0xf99/0x13a0 [ 2924.059677][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2924.063430][ T8973] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2924.073483][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2924.077191][ T8973] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2924.086215][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2924.090703][ T8973] ? lock_downgrade+0x690/0x690 [ 2924.090754][ T8973] ? lock_downgrade+0x690/0x690 [ 2924.101387][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2924.103305][ T8973] __memcg_kmem_charge_page+0x16e/0x3c0 [ 2924.109154][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2924.115932][ T8973] __alloc_pages+0x1f3/0x4a0 [ 2924.115983][ T8973] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2924.116067][ T8973] alloc_pages+0x1aa/0x270 [ 2924.116116][ T8973] pte_alloc_one+0x1a/0x230 [ 2924.116162][ T8973] __pte_alloc+0x6d/0x260 [ 2924.116212][ T8973] ? pmd_install+0x160/0x160 [ 2924.116273][ T8973] copy_page_range+0x151e/0x3830 [ 2924.116317][ T8973] ? mas_wr_modify+0x332/0x16d0 [ 2924.116380][ T8973] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 2924.116438][ T8973] ? mas_store+0x275/0x3a0 [ 2924.116484][ T8973] ? handle_mm_fault+0x9f0/0x9f0 [ 2924.116533][ T8973] ? up_write+0x1b4/0x520 [ 2924.116572][ T8973] dup_mmap+0x10bc/0x19d0 [ 2924.116627][ T8973] ? replace_mm_exe_file+0x4c0/0x4c0 [ 2924.116694][ T8973] ? lockdep_hardirqs_on+0x7d/0x100 [ 2924.116741][ T8973] ? mm_init+0xc7a/0x1030 [ 2924.116783][ T8973] copy_process+0x65ae/0x7600 [ 2924.116824][ T8973] ? _raw_spin_unlock+0x28/0x40 [ 2924.116880][ T8973] ? pidfd_prepare+0x80/0x80 [ 2924.116934][ T8973] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2924.116986][ T8973] kernel_clone+0xeb/0x890 [ 2924.117036][ T8973] ? create_io_thread+0xe0/0xe0 [ 2924.117074][ T8973] ? do_user_addr_fault+0x2b1/0x1210 [ 2924.117113][ T8973] ? reacquire_held_locks+0x216/0x4e0 [ 2924.117154][ T8973] ? do_user_addr_fault+0x2b1/0x1210 [ 2924.117204][ T8973] ? find_held_lock+0x2d/0x110 [ 2924.117247][ T8973] __do_sys_clone+0xba/0x100 [ 2924.169577][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2924.175370][ T8973] ? kernel_clone+0x890/0x890 [ 2924.198902][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2924.203887][ T8973] ? syscall_enter_from_user_mode+0x26/0x80 [ 2924.219604][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2924.222301][ T8973] do_syscall_64+0x39/0xb0 [ 2924.299712][ T8973] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2924.305650][ T8973] RIP: 0033:0x7f050e489e9b [ 2924.310097][ T8973] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2924.329730][ T8973] RSP: 002b:00007ffe61a58f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2924.338181][ T8973] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f050e489e9b [ 2924.346191][ T8973] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2924.354193][ T8973] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555744e400 [ 2924.362191][ T8973] R10: 000055555744e6d0 R11: 0000000000000246 R12: 0000000000000001 [ 2924.370203][ T8973] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe61a58fe0 [ 2924.378234][ T8973] [ 2924.480349][ T8973] memory: usage 10476kB, limit 0kB, failcnt 1023 [ 2924.505817][ T8973] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2924.512921][ T8973] Memory cgroup stats for /syz5: [ 2924.513157][ T8973] anon 36864 [ 2924.513157][ T8973] file 10448896 [ 2924.513157][ T8973] kernel 229376 [ 2924.513157][ T8973] kernel_stack 32768 [ 2924.513157][ T8973] pagetables 36864 [ 2924.513157][ T8973] sec_pagetables 0 [ 2924.513157][ T8973] percpu 128 [ 2924.513157][ T8973] sock 0 [ 2924.513157][ T8973] vmalloc 0 [ 2924.513157][ T8973] shmem 10448896 [ 2924.513157][ T8973] zswap 0 [ 2924.513157][ T8973] zswapped 0 [ 2924.513157][ T8973] file_mapped 278528 [ 2924.513157][ T8973] file_dirty 0 [ 2924.513157][ T8973] file_writeback 0 [ 2924.513157][ T8973] swapcached 0 [ 2924.513157][ T8973] anon_thp 0 [ 2924.513157][ T8973] file_thp 0 [ 2924.513157][ T8973] shmem_thp 0 [ 2924.513157][ T8973] inactive_anon 10448896 [ 2924.513157][ T8973] active_anon 36864 [ 2924.513157][ T8973] inactive_file 0 [ 2924.513157][ T8973] active_file 0 [ 2924.513157][ T8973] unevictable 0 [ 2924.513157][ T8973] slab_reclaimable 35256 [ 2924.513157][ T8973] slab_unreclaimable 97472 [ 2924.513157][ T8973] slab 132728 [ 2924.513157][ T8973] workingset_refault_anon 0 [ 2924.513157][ T8973] workingset_refault_file 0 [ 2924.513157][ T8973] workingset_activate_anon 0 [ 2924.513157][ T8973] workingset_activate_file 0 [ 2924.513157][ T8973] workingset_restore_anon 0 [ 2924.513157][ T8973] workingset_restore_file 0 [ 2924.513157][ T8973] workingset_nodereclaim 0 [ 2924.513157][ T8973] pgscan 716 [ 2924.513157][ T8973] pgsteal 57 [ 2924.513157][ T8973] pgscan_kswapd 0 [ 2924.513157][ T8973] pgscan_direct 716 [ 2924.513157][ T8973] pgscan_khugepaged 0 [ 2924.513157][ T8973] pgsteal_kswapd 0 [ 2924.513157][ T8973] pgsteal_direct 57 [ 2924.513157][ T8973] pgsteal_khugepaged 0 [ 2924.513157][ T8973] pgfault 82256 [ 2924.513157][ T8973] pgmajfault 0 [ 2924.513157][ T8973] pgrefill 25846 [ 2924.513157][ T8973] pgactivate 627 [ 2924.513157][ T8973] pgdeactivate 0 [ 2924.513157][ T8973] pglazyfree 0 [ 2924.513157][ T8973] pglazyfreed 0 [ 2924.513157][ T8973] zswpin 0 [ 2924.513157][ T8973] zswpout 0 [ 2924.513157][ T8973] thp_fault_alloc 0 [ 2924.719655][ T8973] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=8973,uid=0 [ 2924.758912][ T8973] Memory cgroup out of memory: Killed process 8973 (syz-executor.5) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2924.789951][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2924.800599][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2924.810856][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2924.822192][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2924.833108][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2924.844134][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2924.854700][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2924.868573][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2924.878563][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2924.889132][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2924.899038][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2924.909824][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2924.920005][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2924.933205][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2924.943206][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2924.953897][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 01:15:52 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) [ 2924.982870][ T9007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2924.990557][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2924.998033][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2925.006515][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2925.015455][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2925.057411][ T9016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2925.264684][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2925.275579][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2925.286033][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2925.296674][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2925.307387][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2925.329474][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2925.353076][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2925.374745][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2925.388805][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2925.415055][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2925.433572][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2925.439456][T31297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2925.450606][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2925.457705][T31297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2925.469380][T31297] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2925.472699][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2925.477603][T31297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2925.496633][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2925.506807][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2925.517363][T31297] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2925.524639][T31297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2925.538409][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2925.552201][ T9007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2925.589766][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2925.603472][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2925.677492][ T9007] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2925.698229][ T9007] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2925.706964][ T9007] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2925.738333][ T9007] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2925.787090][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2925.810126][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2925.865717][ T9016] veth0_vlan: entered promiscuous mode [ 2925.879334][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2925.898735][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2925.918236][ T9016] veth1_vlan: entered promiscuous mode [ 2925.986070][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2926.018944][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2926.026809][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2926.157826][ T9016] veth0_macvtap: entered promiscuous mode [ 2926.185351][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2926.202542][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2926.240891][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2926.249065][ T4594] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2926.258995][ T4594] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2926.267953][ T4594] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2926.275770][ T4594] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2926.283680][ T4594] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2926.317839][ T9016] veth1_macvtap: entered promiscuous mode [ 2926.341230][ T7036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2926.365057][ T7036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2926.379191][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2926.397140][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2926.406034][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2926.426687][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2926.456705][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2926.470629][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2926.486574][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2926.496736][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2926.507443][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2926.517497][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2926.528694][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2926.539255][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2926.550082][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2926.560129][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2926.571318][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2926.581297][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2926.592126][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2926.602965][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2926.613709][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2926.623756][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2926.634565][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2926.645921][ T9016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2926.703471][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2926.712469][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2926.743222][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2926.754796][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2926.772211][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2926.783277][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2926.793137][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2926.803711][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2926.813560][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2926.824002][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2926.834006][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2926.844621][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2926.854804][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2926.865364][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2926.876428][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2926.886930][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2926.896870][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2926.907365][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2926.917230][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2926.928946][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2926.940250][ T9016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2926.955658][ T9016] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2926.965786][ T9016] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2926.974895][ T9016] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2926.984989][ T9016] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2927.003404][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2927.013362][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2927.033866][ T5541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2927.043443][ T5541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2927.076168][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2927.485753][ T9127] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2927.502658][ T9127] CPU: 1 PID: 9127 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2927.513057][ T9127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2927.523153][ T9127] Call Trace: [ 2927.526480][ T9127] [ 2927.529440][ T9127] dump_stack_lvl+0x136/0x150 [ 2927.534178][ T9127] dump_header+0x10a/0xd70 [ 2927.538640][ T9127] oom_kill_process+0x25d/0x600 [ 2927.543552][ T9127] out_of_memory+0x35c/0x1660 [ 2927.548317][ T9127] ? io_schedule_timeout+0x150/0x150 [ 2927.553660][ T9127] ? oom_killer_disable+0x2b0/0x2b0 [ 2927.558850][ T4594] Bluetooth: hci0: command 0x0409 tx timeout [ 2927.564874][ T9127] mem_cgroup_out_of_memory+0x206/0x270 [ 2927.564926][ T9127] ? mem_cgroup_margin+0x130/0x130 [ 2927.575770][ T9127] memory_max_write+0x2f9/0x3c0 [ 2927.580691][ T9127] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2927.586837][ T9127] ? lock_sync+0x190/0x190 [ 2927.591329][ T9127] cgroup_file_write+0x1e2/0x7b0 [ 2927.596324][ T9127] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2927.602456][ T9127] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2927.607906][ T9127] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2927.613329][ T9127] kernfs_fop_write_iter+0x3f1/0x600 [ 2927.618665][ T9127] vfs_write+0x945/0xd50 [ 2927.622938][ T9127] ? kernel_write+0x670/0x670 [ 2927.627634][ T9127] ? __fget_files+0x26a/0x480 [ 2927.632358][ T9127] ksys_write+0x12b/0x250 [ 2927.636709][ T9127] ? __ia32_sys_read+0xb0/0xb0 [ 2927.641487][ T9127] ? syscall_enter_from_user_mode+0x26/0x80 [ 2927.647407][ T9127] do_syscall_64+0x39/0xb0 [ 2927.651854][ T9127] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2927.657783][ T9127] RIP: 0033:0x7f121388c169 [ 2927.662217][ T9127] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2927.681861][ T9127] RSP: 002b:00007f121456c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2927.690291][ T9127] RAX: ffffffffffffffda RBX: 00007f12139ac050 RCX: 00007f121388c169 [ 2927.698271][ T9127] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 2927.706260][ T9127] RBP: 00007f12138e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2927.714263][ T9127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2927.722247][ T9127] R13: 00007ffc5b5068df R14: 00007f121456c300 R15: 0000000000022000 [ 2927.730250][ T9127] [ 2927.763696][ T9127] memory: usage 10684kB, limit 0kB, failcnt 727 [ 2927.770885][ T9127] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2927.784791][ T9127] Memory cgroup stats for /syz0: [ 2927.786780][ T9127] anon 118784 [ 2927.786780][ T9127] file 10428416 [ 2927.786780][ T9127] kernel 380928 [ 2927.786780][ T9127] kernel_stack 98304 [ 2927.786780][ T9127] pagetables 77824 [ 2927.786780][ T9127] sec_pagetables 0 [ 2927.786780][ T9127] percpu 64 [ 2927.786780][ T9127] sock 0 [ 2927.786780][ T9127] vmalloc 0 [ 2927.786780][ T9127] shmem 10428416 [ 2927.786780][ T9127] zswap 0 [ 2927.786780][ T9127] zswapped 0 [ 2927.786780][ T9127] file_mapped 253952 [ 2927.786780][ T9127] file_dirty 0 [ 2927.786780][ T9127] file_writeback 0 [ 2927.786780][ T9127] swapcached 0 [ 2927.786780][ T9127] anon_thp 0 [ 2927.786780][ T9127] file_thp 0 [ 2927.786780][ T9127] shmem_thp 0 [ 2927.786780][ T9127] inactive_anon 0 [ 2927.786780][ T9127] active_anon 10547200 [ 2927.786780][ T9127] inactive_file 0 [ 2927.786780][ T9127] active_file 0 [ 2927.786780][ T9127] unevictable 0 [ 2927.786780][ T9127] slab_reclaimable 54152 [ 2927.786780][ T9127] slab_unreclaimable 122704 [ 2927.786780][ T9127] slab 176856 [ 2927.786780][ T9127] workingset_refault_anon 0 [ 2927.786780][ T9127] workingset_refault_file 0 [ 2927.786780][ T9127] workingset_activate_anon 0 [ 2927.786780][ T9127] workingset_activate_file 0 [ 2927.786780][ T9127] workingset_restore_anon 0 [ 2927.786780][ T9127] workingset_restore_file 0 [ 2927.786780][ T9127] workingset_nodereclaim 0 [ 2927.786780][ T9127] pgscan 705 [ 2927.786780][ T9127] pgsteal 266 [ 2927.786780][ T9127] pgscan_kswapd 0 [ 2927.786780][ T9127] pgscan_direct 705 [ 2927.786780][ T9127] pgscan_khugepaged 0 [ 2927.786780][ T9127] pgsteal_kswapd 0 [ 2927.786780][ T9127] pgsteal_direct 266 [ 2927.786780][ T9127] pgsteal_khugepaged 0 [ 2927.786780][ T9127] pgfault 53597 [ 2927.786780][ T9127] pgmajfault 0 [ 2927.786780][ T9127] pgrefill 27828 [ 2927.786780][ T9127] pgactivate 312 [ 2927.786780][ T9127] pgdeactivate 0 [ 2927.786780][ T9127] pglazyfree 0 [ 2927.786780][ T9127] pglazyfreed 0 [ 2927.786780][ T9127] zswpin 0 [ 2927.786780][ T9127] zswpout 0 [ 2927.786780][ T9127] thp_fault_alloc 0 [ 2928.011903][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2928.045717][ T9099] chnl_net:caif_netlink_parms(): no params data found [ 2928.053297][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2928.068694][ T9127] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=9007,uid=0 [ 2928.089110][ T9113] chnl_net:caif_netlink_parms(): no params data found [ 2928.146963][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2928.210518][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2928.253182][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2928.309913][ T9127] Memory cgroup out of memory: Killed process 9007 (syz-executor.0) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2928.331643][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2928.358538][T31297] Bluetooth: hci1: command 0x0409 tx timeout [ 2928.523811][ T9147] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2928.551244][ T9147] CPU: 0 PID: 9147 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2928.561626][ T9147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2928.571712][ T9147] Call Trace: [ 2928.575023][ T9147] [ 2928.577975][ T9147] dump_stack_lvl+0x136/0x150 [ 2928.582743][ T9147] dump_header+0x10a/0xd70 [ 2928.587199][ T9147] oom_kill_process+0x25d/0x600 [ 2928.592113][ T9147] out_of_memory+0x35c/0x1660 [ 2928.596817][ T9147] ? io_schedule_timeout+0x150/0x150 [ 2928.602129][ T9147] ? oom_killer_disable+0x2b0/0x2b0 [ 2928.607342][ T9147] ? kernfs_notify+0x1ac/0x410 [ 2928.612158][ T9147] mem_cgroup_out_of_memory+0x206/0x270 [ 2928.617739][ T9147] ? mem_cgroup_margin+0x130/0x130 [ 2928.622899][ T9147] memory_max_write+0x2f9/0x3c0 [ 2928.627804][ T9147] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2928.633914][ T9147] ? lock_sync+0x190/0x190 [ 2928.638370][ T9147] cgroup_file_write+0x1e2/0x7b0 [ 2928.643325][ T9147] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2928.649429][ T9147] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2928.654824][ T9147] ? __virt_addr_valid+0x61/0x2e0 [ 2928.659921][ T9147] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2928.665311][ T9147] kernfs_fop_write_iter+0x3f1/0x600 [ 2928.670640][ T9147] vfs_write+0x945/0xd50 [ 2928.674912][ T9147] ? kernel_write+0x670/0x670 [ 2928.679608][ T9147] ? __fget_files+0x26a/0x480 [ 2928.684328][ T9147] ksys_write+0x12b/0x250 [ 2928.688726][ T9147] ? __ia32_sys_read+0xb0/0xb0 [ 2928.693512][ T9147] ? syscall_enter_from_user_mode+0x26/0x80 [ 2928.699432][ T9147] do_syscall_64+0x39/0xb0 [ 2928.703878][ T9147] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2928.709798][ T9147] RIP: 0033:0x7f6b8ba8c169 [ 2928.714249][ T9147] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2928.733893][ T9147] RSP: 002b:00007f6b8c758168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2928.742364][ T9147] RAX: ffffffffffffffda RBX: 00007f6b8bbabf80 RCX: 00007f6b8ba8c169 [ 2928.750351][ T9147] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 2928.758334][ T9147] RBP: 00007f6b8bae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2928.766314][ T9147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2928.774293][ T9147] R13: 00007fff9b563f8f R14: 00007f6b8c758300 R15: 0000000000022000 [ 2928.782297][ T9147] [ 2928.796293][ T9147] memory: usage 8564kB, limit 0kB, failcnt 2258 [ 2928.803034][ T9147] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2928.810523][ T9147] Memory cgroup stats for /syz1: [ 2928.811014][ T9147] anon 114688 [ 2928.811014][ T9147] file 8331264 [ 2928.811014][ T9147] kernel 323584 [ 2928.811014][ T9147] kernel_stack 65536 [ 2928.811014][ T9147] pagetables 77824 [ 2928.811014][ T9147] sec_pagetables 0 [ 2928.811014][ T9147] percpu 64 [ 2928.811014][ T9147] sock 0 [ 2928.811014][ T9147] vmalloc 0 [ 2928.811014][ T9147] shmem 8331264 [ 2928.811014][ T9147] zswap 0 [ 2928.811014][ T9147] zswapped 0 [ 2928.811014][ T9147] file_mapped 188416 [ 2928.811014][ T9147] file_dirty 0 [ 2928.811014][ T9147] file_writeback 0 [ 2928.811014][ T9147] swapcached 0 [ 2928.811014][ T9147] anon_thp 0 [ 2928.811014][ T9147] file_thp 0 [ 2928.811014][ T9147] shmem_thp 0 [ 2928.811014][ T9147] inactive_anon 8331264 [ 2928.811014][ T9147] active_anon 114688 [ 2928.811014][ T9147] inactive_file 0 [ 2928.811014][ T9147] active_file 0 [ 2928.811014][ T9147] unevictable 0 [ 2928.811014][ T9147] slab_reclaimable 43072 [ 2928.811014][ T9147] slab_unreclaimable 106672 [ 2928.811014][ T9147] slab 149744 [ 2928.811014][ T9147] workingset_refault_anon 0 [ 2928.811014][ T9147] workingset_refault_file 0 [ 2928.811014][ T9147] workingset_activate_anon 0 [ 2928.811014][ T9147] workingset_activate_file 0 [ 2928.811014][ T9147] workingset_restore_anon 0 [ 2928.811014][ T9147] workingset_restore_file 0 [ 2928.811014][ T9147] workingset_nodereclaim 0 [ 2928.811014][ T9147] pgscan 611 [ 2928.811014][ T9147] pgsteal 60 [ 2928.811014][ T9147] pgscan_kswapd 0 [ 2928.811014][ T9147] pgscan_direct 611 [ 2928.811014][ T9147] pgscan_khugepaged 0 [ 2928.811014][ T9147] pgsteal_kswapd 0 [ 2928.811014][ T9147] pgsteal_direct 60 [ 2928.811014][ T9147] pgsteal_khugepaged 0 [ 2928.811014][ T9147] pgfault 38752 [ 2928.811014][ T9147] pgmajfault 0 [ 2928.811014][ T9147] pgrefill 1873 [ 2928.811014][ T9147] pgactivate 551 [ 2928.811014][ T9147] pgdeactivate 0 [ 2928.811014][ T9147] pglazyfree 0 [ 2928.811014][ T9147] pglazyfreed 0 [ 2928.811014][ T9147] zswpin 0 [ 2928.811014][ T9147] zswpout 0 [ 2928.811014][ T9147] thp_fault_alloc 0 [ 2928.998278][ T9113] bridge0: port 1(bridge_slave_0) entered blocking state [ 2928.998364][ T9113] bridge0: port 1(bridge_slave_0) entered disabled state [ 2928.998564][ T9113] bridge_slave_0: entered allmulticast mode [ 2928.999648][ T9113] bridge_slave_0: entered promiscuous mode [ 2929.001813][ T9113] bridge0: port 2(bridge_slave_1) entered blocking state [ 2929.001880][ T9113] bridge0: port 2(bridge_slave_1) entered disabled state [ 2929.002019][ T9113] bridge_slave_1: entered allmulticast mode [ 2929.003126][ T9113] bridge_slave_1: entered promiscuous mode [ 2929.061588][ T9147] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=9146,uid=0 [ 2929.097571][ T9147] Memory cgroup out of memory: Killed process 9146 (syz-executor.1) total-vm:54548kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2929.229767][ T9099] bridge0: port 1(bridge_slave_0) entered blocking state [ 2929.240572][ T9099] bridge0: port 1(bridge_slave_0) entered disabled state [ 2929.258564][ T9099] bridge_slave_0: entered allmulticast mode [ 2929.265512][ T9099] bridge_slave_0: entered promiscuous mode [ 2929.537196][ T9113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2929.569160][ T9099] bridge0: port 2(bridge_slave_1) entered blocking state [ 2929.576271][ T9099] bridge0: port 2(bridge_slave_1) entered disabled state 01:15:57 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000003c0)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x80, 0x7d, 0x0, 0x8, 0x0, 0x0, 0x1080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x78, 0x2, @perf_config_ext={0x4, 0x1}, 0x10010, 0x1, 0xffffff05, 0x9, 0xc00, 0x8000, 0x7, 0x0, 0x7, 0x0, 0x2b4d0000000}, r1, 0x5, r5, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r4, &(0x7f0000000180), 0x12) 01:15:57 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) 01:15:57 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) 01:15:57 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x80, 0x7d, 0x0, 0x8, 0x0, 0x0, 0x1080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x78, 0x2, @perf_config_ext={0x4, 0x1}, 0x10010, 0x1, 0xffffff05, 0x9, 0xc00, 0x8000, 0x7, 0x0, 0x7, 0x0, 0x2b4d0000000}, r1, 0x5, r5, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r4, &(0x7f0000000180), 0x12) [ 2929.636428][ T9099] bridge_slave_1: entered allmulticast mode [ 2929.640106][ T9016] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 2929.642971][T31297] Bluetooth: hci0: command 0x041b tx timeout [ 2929.660236][ T9016] CPU: 0 PID: 9016 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2929.670602][ T9016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2929.680675][ T9016] Call Trace: [ 2929.683972][ T9016] [ 2929.686923][ T9016] dump_stack_lvl+0x136/0x150 [ 2929.691660][ T9016] dump_header+0x10a/0xd70 [ 2929.696120][ T9016] oom_kill_process+0x25d/0x600 [ 2929.701010][ T9016] out_of_memory+0x35c/0x1660 [ 2929.705732][ T9016] ? find_held_lock+0x2d/0x110 [ 2929.709648][ T9099] bridge_slave_1: entered promiscuous mode [ 2929.710515][ T9016] ? oom_killer_disable+0x2b0/0x2b0 [ 2929.721541][ T9016] ? rcu_read_unlock+0x9/0x60 [ 2929.726259][ T9016] ? find_held_lock+0x2d/0x110 [ 2929.731091][ T9016] mem_cgroup_out_of_memory+0x206/0x270 [ 2929.736675][ T9016] ? mem_cgroup_margin+0x130/0x130 [ 2929.741823][ T9016] ? lock_downgrade+0x690/0x690 [ 2929.746732][ T9016] try_charge_memcg+0xf99/0x13a0 [ 2929.751730][ T9016] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2929.757760][ T9016] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2929.763524][ T9016] ? lock_downgrade+0x690/0x690 [ 2929.768423][ T9016] ? lock_downgrade+0x690/0x690 [ 2929.773323][ T9016] ? rcu_read_unlock+0x9/0x60 [ 2929.778071][ T9016] obj_cgroup_charge+0x2af/0x5e0 [ 2929.783065][ T9016] ? copy_process+0x3c0/0x7600 [ 2929.787870][ T9016] kmem_cache_alloc_node+0xa8/0x3e0 [ 2929.793138][ T9016] copy_process+0x3c0/0x7600 [ 2929.797784][ T9016] ? _raw_spin_unlock+0x28/0x40 [ 2929.802682][ T9016] ? wp_page_reuse+0x197/0x570 [ 2929.807521][ T9016] ? pidfd_prepare+0x80/0x80 [ 2929.812166][ T9016] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2929.818224][ T9016] kernel_clone+0xeb/0x890 [ 2929.822695][ T9016] ? create_io_thread+0xe0/0xe0 [ 2929.827585][ T9016] ? do_user_addr_fault+0x2b1/0x1210 [ 2929.832920][ T9016] ? reacquire_held_locks+0x216/0x4e0 [ 2929.838337][ T9016] ? do_user_addr_fault+0x2b1/0x1210 [ 2929.843701][ T9016] ? find_held_lock+0x2d/0x110 [ 2929.848505][ T9016] __do_sys_clone+0xba/0x100 [ 2929.853151][ T9016] ? kernel_clone+0x890/0x890 [ 2929.857887][ T9016] ? syscall_enter_from_user_mode+0x26/0x80 [ 2929.863831][ T9016] do_syscall_64+0x39/0xb0 [ 2929.868298][ T9016] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2929.874239][ T9016] RIP: 0033:0x7f6b8ba89e9b [ 2929.878681][ T9016] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2929.898325][ T9016] RSP: 002b:00007fff9b5641d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2929.906774][ T9016] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6b8ba89e9b [ 2929.914773][ T9016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2929.922770][ T9016] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555ce8400 [ 2929.930773][ T9016] R10: 0000555555ce86d0 R11: 0000000000000246 R12: 0000000000000001 [ 2929.938770][ T9016] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff9b5642b0 [ 2929.946785][ T9016] [ 2929.964019][ T9113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2929.965803][ T9016] memory: usage 8304kB, limit 0kB, failcnt 2277 [ 2929.979685][ T9016] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2929.986603][ T9016] Memory cgroup stats for /syz1: [ 2929.986825][ T9016] anon 40960 [ 2929.986825][ T9016] file 8331264 [ 2929.986825][ T9016] kernel 122880 [ 2929.986825][ T9016] kernel_stack 0 [ 2929.986825][ T9016] pagetables 8192 [ 2929.986825][ T9016] sec_pagetables 0 [ 2929.986825][ T9016] percpu 64 [ 2929.986825][ T9016] sock 0 [ 2929.986825][ T9016] vmalloc 0 [ 2929.986825][ T9016] shmem 8331264 [ 2929.986825][ T9016] zswap 0 [ 2929.986825][ T9016] zswapped 0 [ 2929.986825][ T9016] file_mapped 176128 [ 2929.986825][ T9016] file_dirty 0 [ 2929.986825][ T9016] file_writeback 0 [ 2929.986825][ T9016] swapcached 0 [ 2929.986825][ T9016] anon_thp 0 [ 2929.986825][ T9016] file_thp 0 [ 2929.986825][ T9016] shmem_thp 0 [ 2929.986825][ T9016] inactive_anon 8331264 [ 2929.986825][ T9016] active_anon 40960 [ 2929.986825][ T9016] inactive_file 0 [ 2929.986825][ T9016] active_file 0 [ 2929.986825][ T9016] unevictable 0 [ 2929.986825][ T9016] slab_reclaimable 29888 [ 2929.986825][ T9016] slab_unreclaimable 70984 [ 2929.986825][ T9016] slab 100872 [ 2929.986825][ T9016] workingset_refault_anon 0 [ 2929.986825][ T9016] workingset_refault_file 0 [ 2929.986825][ T9016] workingset_activate_anon 0 [ 2929.986825][ T9016] workingset_activate_file 0 [ 2929.986825][ T9016] workingset_restore_anon 0 [ 2929.986825][ T9016] workingset_restore_file 0 [ 2929.986825][ T9016] workingset_nodereclaim 0 [ 2929.986825][ T9016] pgscan 611 [ 2929.986825][ T9016] pgsteal 60 [ 2929.986825][ T9016] pgscan_kswapd 0 [ 2929.986825][ T9016] pgscan_direct 611 [ 2929.986825][ T9016] pgscan_khugepaged 0 [ 2929.986825][ T9016] pgsteal_kswapd 0 [ 2929.986825][ T9016] pgsteal_direct 60 [ 2929.986825][ T9016] pgsteal_khugepaged 0 [ 2929.986825][ T9016] pgfault 38764 [ 2929.986825][ T9016] pgmajfault 0 [ 2929.986825][ T9016] pgrefill 1873 [ 2929.986825][ T9016] pgactivate 551 [ 2929.986825][ T9016] pgdeactivate 0 [ 2929.986825][ T9016] pglazyfree 0 [ 2929.986825][ T9016] pglazyfreed 0 [ 2929.986825][ T9016] zswpin 0 [ 2929.986825][ T9016] zswpout 0 [ 2929.986825][ T9016] thp_fault_alloc 0 01:15:58 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000003c0)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x80, 0x7d, 0x0, 0x8, 0x0, 0x0, 0x1080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x78, 0x2, @perf_config_ext={0x4, 0x1}, 0x10010, 0x1, 0xffffff05, 0x9, 0xc00, 0x8000, 0x7, 0x0, 0x7, 0x0, 0x2b4d0000000}, r1, 0x5, r5, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r4, &(0x7f0000000180), 0x12) [ 2930.348268][ T9016] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=9016,uid=0 [ 2930.438535][T31297] Bluetooth: hci1: command 0x041b tx timeout [ 2930.499262][ T9016] Memory cgroup out of memory: Killed process 9016 (syz-executor.1) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2930.545186][ T9099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2930.632258][ T9099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2930.673035][ T9113] team0: Port device team_slave_0 added [ 2930.747885][ T9113] team0: Port device team_slave_1 added [ 2930.870123][ T5531] hsr_slave_0: left promiscuous mode [ 2930.875913][ T5531] hsr_slave_1: left promiscuous mode [ 2930.882727][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2930.890946][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2930.900158][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2930.907587][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2930.916763][ T5531] bridge_slave_1: left allmulticast mode [ 2930.923201][ T5531] bridge_slave_1: left promiscuous mode [ 2930.929553][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 2930.938146][ T5531] bridge_slave_0: left allmulticast mode [ 2930.944098][ T5531] bridge_slave_0: left promiscuous mode [ 2930.949993][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 2930.964412][ T5531] hsr_slave_0: left promiscuous mode 01:15:58 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x80, 0x7d, 0x0, 0x8, 0x0, 0x0, 0x1080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x78, 0x2, @perf_config_ext={0x4, 0x1}, 0x10010, 0x1, 0xffffff05, 0x9, 0xc00, 0x8000, 0x7, 0x0, 0x7, 0x0, 0x2b4d0000000}, r1, 0x5, r5, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r4, &(0x7f0000000180), 0x12) [ 2930.970745][ T5531] hsr_slave_1: left promiscuous mode [ 2930.977638][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2930.998253][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2931.010296][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2931.017733][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2931.040768][ T5531] bridge_slave_1: left allmulticast mode [ 2931.046459][ T5531] bridge_slave_1: left promiscuous mode 01:15:58 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x80, 0x7d, 0x0, 0x8, 0x0, 0x0, 0x1080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x78, 0x2, @perf_config_ext={0x4, 0x1}, 0x10010, 0x1, 0xffffff05, 0x9, 0xc00, 0x8000, 0x7, 0x0, 0x7, 0x0, 0x2b4d0000000}, r1, 0x5, r5, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r4, &(0x7f0000000180), 0x12) [ 2931.066222][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 2931.088156][ T5531] bridge_slave_0: left allmulticast mode [ 2931.093966][ T5531] bridge_slave_0: left promiscuous mode [ 2931.110802][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 2931.145296][ T5531] hsr_slave_0: left promiscuous mode [ 2931.151484][ T5531] hsr_slave_1: left promiscuous mode [ 2931.167722][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2931.187494][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2931.199985][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2931.207425][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2931.233591][ T5531] bridge_slave_1: left allmulticast mode [ 2931.248509][ T5531] bridge_slave_1: left promiscuous mode [ 2931.257571][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 2931.274355][ T5531] bridge_slave_0: left allmulticast mode [ 2931.289202][ T5531] bridge_slave_0: left promiscuous mode [ 2931.294992][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 2931.324207][ T5531] hsr_slave_0: left promiscuous mode [ 2931.338775][ T5531] hsr_slave_1: left promiscuous mode [ 2931.344789][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2931.364538][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2931.376661][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2931.395146][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2931.433297][ T5531] bridge_slave_1: left allmulticast mode [ 2931.439189][ T5531] bridge_slave_1: left promiscuous mode [ 2931.446287][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 2931.455514][ T5531] bridge_slave_0: left allmulticast mode [ 2931.461546][ T5531] bridge_slave_0: left promiscuous mode [ 2931.467245][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 2931.495834][ T5531] hsr_slave_0: left promiscuous mode [ 2931.514219][ T5531] hsr_slave_1: left promiscuous mode [ 2931.520344][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2931.528948][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2931.542148][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2931.549676][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2931.558822][ T5531] bridge_slave_1: left allmulticast mode [ 2931.564509][ T5531] bridge_slave_1: left promiscuous mode [ 2931.570756][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 2931.582766][ T5531] bridge_slave_0: left allmulticast mode [ 2931.598920][ T5531] bridge_slave_0: left promiscuous mode [ 2931.604616][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 2931.636666][ T5531] hsr_slave_0: left promiscuous mode [ 2931.648520][ T5531] hsr_slave_1: left promiscuous mode [ 2931.658736][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2931.666175][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2931.675766][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2931.683564][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2931.706512][ T4594] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2931.715378][ T4594] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2931.715906][ T5531] bridge_slave_1: left allmulticast mode [ 2931.722596][ T4594] Bluetooth: hci0: command 0x040f tx timeout [ 2931.734301][ T5531] bridge_slave_1: left promiscuous mode [ 2931.735117][ T4594] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2931.747260][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 2931.747690][ T4594] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2931.764803][ T4594] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2931.774004][ T5531] bridge_slave_0: left allmulticast mode [ 2931.785157][ T5531] bridge_slave_0: left promiscuous mode [ 2931.792503][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 2931.908701][ T5531] veth1_macvtap: left promiscuous mode [ 2931.914265][ T5531] veth0_macvtap: left promiscuous mode [ 2931.929030][ T5531] veth1_vlan: left promiscuous mode [ 2931.934359][ T5531] veth0_vlan: left promiscuous mode [ 2931.970150][ T5531] veth1_macvtap: left promiscuous mode [ 2931.975693][ T5531] veth0_macvtap: left promiscuous mode [ 2932.008418][ T5531] veth1_vlan: left promiscuous mode [ 2932.013833][ T5531] veth0_vlan: left promiscuous mode [ 2932.040922][ T5531] veth1_macvtap: left promiscuous mode [ 2932.046468][ T5531] veth0_macvtap: left promiscuous mode [ 2932.059287][ T5531] veth1_vlan: left promiscuous mode [ 2932.064605][ T5531] veth0_vlan: left promiscuous mode [ 2932.076855][ T5531] veth1_macvtap: left promiscuous mode [ 2932.077036][T31297] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2932.088629][ T5531] veth0_macvtap: left promiscuous mode [ 2932.095919][ T5049] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2932.105804][ T5049] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2932.114612][ T5049] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2932.129262][ T5049] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2932.136524][ T5049] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2932.143890][ T5531] veth1_vlan: left promiscuous mode [ 2932.176635][ T5531] veth0_vlan: left promiscuous mode [ 2932.183804][ T5531] veth1_macvtap: left promiscuous mode [ 2932.198284][ T5531] veth0_macvtap: left promiscuous mode [ 2932.204492][ T5531] veth1_vlan: left promiscuous mode [ 2932.227601][ T5531] veth0_vlan: left promiscuous mode [ 2932.240561][ T5531] veth1_macvtap: left promiscuous mode [ 2932.245653][ T4594] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2932.246115][ T5531] veth0_macvtap: left promiscuous mode [ 2932.255214][ T4594] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2932.259351][ T5531] veth1_vlan: left promiscuous mode [ 2932.271207][ T5531] veth0_vlan: left promiscuous mode [ 2932.279069][T31297] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2932.287535][T31297] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2932.295144][T31297] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2932.518483][ T5049] Bluetooth: hci1: command 0x040f tx timeout [ 2932.693812][T31297] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2932.705737][T31297] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2932.715906][T31297] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2932.726441][T31297] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2932.735571][T31297] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2932.743279][T31297] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2933.210521][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 2933.226381][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 2933.238782][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2933.258397][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2933.354495][ T5531] bond0 (unregistering): Released all slaves [ 2933.524567][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 2933.545424][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 2933.558119][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2933.574819][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2933.658880][ T5531] bond0 (unregistering): Released all slaves [ 2933.815054][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 2933.816489][T31297] Bluetooth: hci2: command 0x0409 tx timeout [ 2933.822683][ T5049] Bluetooth: hci0: command 0x0419 tx timeout [ 2933.843173][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 2933.856114][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2933.872247][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2933.957772][ T5531] bond0 (unregistering): Released all slaves [ 2934.105680][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 2934.119995][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 2934.134267][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2934.151518][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2934.198580][ T5049] Bluetooth: hci3: command 0x0409 tx timeout [ 2934.236994][ T5531] bond0 (unregistering): Released all slaves [ 2934.358527][ T5049] Bluetooth: hci4: command 0x0409 tx timeout [ 2934.368132][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 2934.385594][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 2934.401084][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2934.417471][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2934.506808][ T5531] bond0 (unregistering): Released all slaves [ 2934.598509][ T4594] Bluetooth: hci1: command 0x0419 tx timeout [ 2934.651048][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 2934.674204][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 2934.694988][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2934.709643][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2934.758764][ T4594] Bluetooth: hci5: command 0x0409 tx timeout [ 2934.793488][ T5531] bond0 (unregistering): Released all slaves [ 2934.845026][ T9099] team0: Port device team_slave_0 added [ 2934.852512][ T9113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2934.859554][ T9113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2934.889906][ T9113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2934.905876][ T9113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2934.912883][ T9113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2934.938966][ T9113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2934.974617][ T9099] team0: Port device team_slave_1 added [ 2935.032691][ T9113] hsr_slave_0: entered promiscuous mode [ 2935.040012][ T9113] hsr_slave_1: entered promiscuous mode [ 2935.102001][ T9099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2935.109256][ T9099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2935.136026][ T9099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2935.194516][ T9099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2935.201590][ T9099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2935.227972][ T9099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2935.389005][ T9099] hsr_slave_0: entered promiscuous mode [ 2935.423125][ T9099] hsr_slave_1: entered promiscuous mode [ 2935.443361][ T9099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2935.458324][ T9099] Cannot create hsr debugfs directory [ 2935.878468][ T4594] Bluetooth: hci2: command 0x041b tx timeout [ 2936.076243][ T9171] chnl_net:caif_netlink_parms(): no params data found [ 2936.244833][ T9169] chnl_net:caif_netlink_parms(): no params data found [ 2936.278424][ T4594] Bluetooth: hci3: command 0x041b tx timeout [ 2936.448460][ T4594] Bluetooth: hci4: command 0x041b tx timeout [ 2936.481553][ T9165] chnl_net:caif_netlink_parms(): no params data found [ 2936.491620][ T9174] chnl_net:caif_netlink_parms(): no params data found [ 2936.747233][ T9171] bridge0: port 1(bridge_slave_0) entered blocking state [ 2936.754468][ T9171] bridge0: port 1(bridge_slave_0) entered disabled state [ 2936.781081][ T9171] bridge_slave_0: entered allmulticast mode [ 2936.788044][ T9171] bridge_slave_0: entered promiscuous mode [ 2936.838449][ T4594] Bluetooth: hci5: command 0x041b tx timeout [ 2936.924811][ T9171] bridge0: port 2(bridge_slave_1) entered blocking state [ 2936.933107][ T9171] bridge0: port 2(bridge_slave_1) entered disabled state [ 2936.943682][ T9171] bridge_slave_1: entered allmulticast mode [ 2936.950963][ T9171] bridge_slave_1: entered promiscuous mode [ 2937.164450][ T9174] bridge0: port 1(bridge_slave_0) entered blocking state [ 2937.178303][ T9174] bridge0: port 1(bridge_slave_0) entered disabled state [ 2937.185492][ T9174] bridge_slave_0: entered allmulticast mode [ 2937.204937][ T9174] bridge_slave_0: entered promiscuous mode [ 2937.448974][ T9174] bridge0: port 2(bridge_slave_1) entered blocking state [ 2937.456103][ T9174] bridge0: port 2(bridge_slave_1) entered disabled state [ 2937.477433][ T9174] bridge_slave_1: entered allmulticast mode [ 2937.487852][ T9174] bridge_slave_1: entered promiscuous mode [ 2937.515446][ T9171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2937.545848][ T9169] bridge0: port 1(bridge_slave_0) entered blocking state [ 2937.554068][ T9169] bridge0: port 1(bridge_slave_0) entered disabled state [ 2937.568358][ T9169] bridge_slave_0: entered allmulticast mode [ 2937.588295][ T9169] bridge_slave_0: entered promiscuous mode [ 2937.622016][ T9165] bridge0: port 1(bridge_slave_0) entered blocking state [ 2937.630836][ T9165] bridge0: port 1(bridge_slave_0) entered disabled state [ 2937.638011][ T9165] bridge_slave_0: entered allmulticast mode [ 2937.659410][ T9165] bridge_slave_0: entered promiscuous mode [ 2937.705043][ T9171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2937.740696][ T9169] bridge0: port 2(bridge_slave_1) entered blocking state [ 2937.747801][ T9169] bridge0: port 2(bridge_slave_1) entered disabled state [ 2937.777692][ T9169] bridge_slave_1: entered allmulticast mode [ 2937.785297][ T9169] bridge_slave_1: entered promiscuous mode [ 2937.799533][ T9165] bridge0: port 2(bridge_slave_1) entered blocking state [ 2937.806646][ T9165] bridge0: port 2(bridge_slave_1) entered disabled state [ 2937.827454][ T9165] bridge_slave_1: entered allmulticast mode [ 2937.839407][ T9165] bridge_slave_1: entered promiscuous mode [ 2937.957482][ T9174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2937.967060][ T4594] Bluetooth: hci2: command 0x040f tx timeout [ 2937.994628][ T9171] team0: Port device team_slave_0 added [ 2938.003920][ T9171] team0: Port device team_slave_1 added [ 2938.043626][ T9165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2938.055687][ T9174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2938.109946][ T9171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2938.116922][ T9171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2938.149596][ T9171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2938.163778][ T9169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2938.176101][ T9165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2938.207998][ T9171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2938.228479][ T9171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2938.260269][ T9171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2938.274163][ T9169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2938.314591][ T9174] team0: Port device team_slave_0 added [ 2938.358386][ T4594] Bluetooth: hci3: command 0x040f tx timeout [ 2938.423458][ T9165] team0: Port device team_slave_0 added [ 2938.440247][ T9174] team0: Port device team_slave_1 added [ 2938.494255][ T9169] team0: Port device team_slave_0 added [ 2938.501838][ T9165] team0: Port device team_slave_1 added [ 2938.519679][ T4594] Bluetooth: hci4: command 0x040f tx timeout [ 2938.545569][ T9171] hsr_slave_0: entered promiscuous mode [ 2938.558868][ T9171] hsr_slave_1: entered promiscuous mode [ 2938.575236][ T9171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2938.583661][ T9171] Cannot create hsr debugfs directory [ 2938.590699][ T9169] team0: Port device team_slave_1 added [ 2938.623526][ T9174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2938.630664][ T9174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2938.657378][ T9174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2938.671357][ T9113] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2938.690537][ T9113] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2938.752080][ T9165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2938.776206][ T9165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2938.817012][ T9165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2938.833488][ T9165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2938.853284][ T9165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2938.890870][ T9165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2938.917015][ T9174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2938.924481][ T4594] Bluetooth: hci5: command 0x040f tx timeout [ 2938.931069][ T9174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2938.957422][ T9174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2938.988422][ T9113] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2939.007708][ T9113] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2939.021764][ T9169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2939.037790][ T9169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2939.064764][ T9169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2939.121052][ T9169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2939.128016][ T9169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2939.173680][ T9169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2939.308552][ T9165] hsr_slave_0: entered promiscuous mode [ 2939.329457][ T9165] hsr_slave_1: entered promiscuous mode [ 2939.348622][ T9165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2939.356215][ T9165] Cannot create hsr debugfs directory [ 2939.426997][ T9174] hsr_slave_0: entered promiscuous mode [ 2939.443682][ T9174] hsr_slave_1: entered promiscuous mode [ 2939.455372][ T9174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2939.471895][ T9174] Cannot create hsr debugfs directory [ 2939.524478][ T9099] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2939.539234][ T9099] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2939.578466][ T9099] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2939.636295][ T9169] hsr_slave_0: entered promiscuous mode [ 2939.656223][ T9169] hsr_slave_1: entered promiscuous mode [ 2939.665864][ T9169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2939.685532][ T9169] Cannot create hsr debugfs directory [ 2939.721866][ T9099] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2939.911155][ T9171] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2940.023525][ T9171] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2940.048715][ T4594] Bluetooth: hci2: command 0x0419 tx timeout [ 2940.073209][ T9113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2940.240774][ T9171] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2940.389933][ T9113] 8021q: adding VLAN 0 to HW filter on device team0 [ 2940.438956][ T4594] Bluetooth: hci3: command 0x0419 tx timeout [ 2940.491298][ T9171] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2940.527018][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2940.537085][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2940.598452][ T4594] Bluetooth: hci4: command 0x0419 tx timeout [ 2940.610315][ T9099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2940.617272][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2940.628070][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2940.636827][ T8606] bridge0: port 1(bridge_slave_0) entered blocking state [ 2940.643974][ T8606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2940.652005][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2940.660905][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2940.678644][ T8606] bridge0: port 2(bridge_slave_1) entered blocking state [ 2940.685738][ T8606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2940.708615][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2940.717426][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2940.764283][ T9099] 8021q: adding VLAN 0 to HW filter on device team0 [ 2940.788905][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2940.796912][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2940.819365][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2940.827948][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2940.846720][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2940.860626][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2940.880595][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2940.903556][ T9113] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2940.939200][ T9113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2940.998450][ T4594] Bluetooth: hci5: command 0x0419 tx timeout [ 2941.044075][ T9165] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2941.090842][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2941.108492][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2941.117457][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2941.137910][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2941.146787][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2941.166062][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2941.251051][ T9165] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2941.316742][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2941.329722][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2941.362519][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 2941.369720][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2941.418342][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2941.448942][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2941.457771][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 2941.464965][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2941.551455][ T9165] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2941.603040][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2941.619054][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2941.649443][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2941.731089][ T9165] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2941.780131][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2941.800750][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2941.839236][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2941.868945][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2941.888909][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2941.897396][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2941.923597][ T9099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2941.941248][ T9099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2941.961065][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2941.979693][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2941.994029][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2942.106555][ T9169] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2942.198789][ T9113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2942.207880][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2942.226502][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2942.355343][ T9169] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2942.472516][ T9169] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2942.649077][ T9169] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2942.745896][ T5531] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2942.841394][ T5531] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2942.889520][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2942.897006][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2942.923657][ T9099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2942.999707][ T5531] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2943.038934][T28784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2943.047625][T28784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2943.190350][ T5531] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2943.233215][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2943.255173][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2943.276617][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2943.288164][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2943.359186][ T9169] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2943.379081][ T9099] veth0_vlan: entered promiscuous mode [ 2943.385284][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2943.399858][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2943.429551][ T9169] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2943.457631][ T9099] veth1_vlan: entered promiscuous mode [ 2943.501262][ T9169] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2943.519585][ T9169] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2943.556073][ T9113] veth0_vlan: entered promiscuous mode [ 2943.589841][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2943.599534][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2943.617676][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2943.638146][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2943.646857][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2943.730901][ T9113] veth1_vlan: entered promiscuous mode [ 2943.939585][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2943.947846][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2943.992981][ T9099] veth0_macvtap: entered promiscuous mode [ 2944.025953][ T9113] veth0_macvtap: entered promiscuous mode [ 2944.034364][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2944.045216][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2944.054458][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2944.063471][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2944.333345][ T9099] veth1_macvtap: entered promiscuous mode [ 2944.360919][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2944.369718][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2944.377745][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2944.537811][ T9113] veth1_macvtap: entered promiscuous mode [ 2944.569058][ T9113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2944.588329][ T9113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2944.608271][ T9113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2944.638259][ T9113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2944.648100][ T9113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2944.678691][ T9113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2944.693909][ T9113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2944.738238][ T9113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2944.790249][ T9113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2944.820527][ T9169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2944.832308][ T9099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2944.868284][ T9099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2944.878110][ T9099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2944.891793][ T9099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2944.910339][ T9099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2944.947228][ T9099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2944.965318][ T9099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2944.979298][ T9099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2944.998288][ T9099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2945.027774][ T9099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2945.042692][ T9099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2945.198389][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2945.207555][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2945.216208][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2945.224878][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2945.233657][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2945.244247][ T9113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2945.268571][ T9113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2945.288214][ T9113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2945.310379][ T9113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2945.329215][ T9113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2945.348278][ T9113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2945.358106][ T9113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2945.379658][ T9113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2945.391808][ T9113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2945.404391][ T9099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2945.416522][ T9099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2945.427505][ T9099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2945.438642][ T9099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2945.448847][ T9099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2945.459564][ T9099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2945.470604][ T9099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2945.481654][ T9099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2945.491710][ T9099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2945.502798][ T9099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2945.515276][ T9099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2945.629355][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2945.648961][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2945.668784][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2945.678917][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2945.710825][ T9169] 8021q: adding VLAN 0 to HW filter on device team0 [ 2945.750852][ T9113] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2945.768292][ T9113] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2945.777032][ T9113] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2945.807553][ T9113] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2945.822767][ T9099] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2945.832466][ T9099] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2945.842338][ T9099] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2945.851377][ T9099] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2945.933094][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2945.941356][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2946.046864][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2946.055904][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2946.080273][ T8469] bridge0: port 1(bridge_slave_0) entered blocking state [ 2946.087387][ T8469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2946.105578][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2946.117612][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2946.138900][ T8469] bridge0: port 2(bridge_slave_1) entered blocking state [ 2946.146004][ T8469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2946.165101][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2946.177475][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2946.197861][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2946.218611][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2946.227210][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2946.247544][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2946.327595][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2946.347951][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2946.370142][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2946.388709][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2946.494466][ T9169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2946.521776][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2946.629117][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2946.637590][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2946.769416][T15859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2946.777481][T15859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2946.898463][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2947.045565][ T7022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2947.061642][ T7022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2947.107223][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2947.229004][T15809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2947.237181][T15809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2947.249768][ T9171] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2947.290473][ T9165] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2947.337867][ T9169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2947.406084][ T9171] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2947.444666][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2947.459063][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2947.467664][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2947.476047][ T9165] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2947.645183][ T9171] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2947.656531][ T9352] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2947.672772][T15859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2947.679608][ T9165] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2947.690511][T15859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2947.691520][ T9165] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2947.709296][ T9352] CPU: 0 PID: 9352 Comm: syz-executor.4 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2947.719670][ T9352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2947.729755][ T9352] Call Trace: [ 2947.733067][ T9352] [ 2947.736155][ T9352] dump_stack_lvl+0x136/0x150 [ 2947.740896][ T9352] dump_header+0x10a/0xd70 [ 2947.745366][ T9352] oom_kill_process+0x25d/0x600 [ 2947.750254][ T9352] out_of_memory+0x35c/0x1660 [ 2947.754958][ T9352] ? oom_killer_disable+0x2b0/0x2b0 [ 2947.760183][ T9352] ? kernfs_notify+0x1ac/0x410 [ 2947.764991][ T9352] ? find_held_lock+0x2d/0x110 [ 2947.769791][ T9352] mem_cgroup_out_of_memory+0x206/0x270 [ 2947.775365][ T9352] ? mem_cgroup_margin+0x130/0x130 [ 2947.780511][ T9352] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2947.786350][ T9352] memory_max_write+0x2f9/0x3c0 [ 2947.791235][ T9352] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2947.797331][ T9352] ? lock_sync+0x190/0x190 [ 2947.801775][ T9352] cgroup_file_write+0x1e2/0x7b0 [ 2947.806733][ T9352] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2947.812829][ T9352] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2947.818240][ T9352] ? __virt_addr_valid+0x61/0x2e0 [ 2947.823308][ T9352] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2947.828716][ T9352] kernfs_fop_write_iter+0x3f1/0x600 [ 2947.834064][ T9352] vfs_write+0x945/0xd50 [ 2947.838332][ T9352] ? kernel_write+0x670/0x670 [ 2947.843035][ T9352] ? __fget_files+0x26a/0x480 [ 2947.847762][ T9352] ksys_write+0x12b/0x250 [ 2947.852130][ T9352] ? __ia32_sys_read+0xb0/0xb0 [ 2947.856916][ T9352] ? syscall_enter_from_user_mode+0x26/0x80 [ 2947.862837][ T9352] do_syscall_64+0x39/0xb0 [ 2947.867294][ T9352] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2947.873222][ T9352] RIP: 0033:0x7f5cf508c169 [ 2947.877661][ T9352] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2947.897294][ T9352] RSP: 002b:00007f5cf5e76168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2947.905748][ T9352] RAX: ffffffffffffffda RBX: 00007f5cf51ac050 RCX: 00007f5cf508c169 [ 2947.913734][ T9352] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 2947.921715][ T9352] RBP: 00007f5cf50e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2947.929695][ T9352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2947.937678][ T9352] R13: 00007ffe14de83af R14: 00007f5cf5e76300 R15: 0000000000022000 [ 2947.945705][ T9352] [ 2947.995063][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2948.004209][ T9352] memory: usage 10672kB, limit 0kB, failcnt 818 [ 2948.006228][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2948.027898][ T9352] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2948.037080][ T9352] Memory cgroup stats for /syz4: [ 2948.039213][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2948.050122][ T9352] anon 118784 [ 2948.050122][ T9352] file 10436608 [ 2948.050122][ T9352] kernel 356352 [ 2948.050122][ T9352] kernel_stack 98304 [ 2948.050122][ T9352] pagetables 81920 [ 2948.050122][ T9352] sec_pagetables 0 [ 2948.050122][ T9352] percpu 64 [ 2948.050122][ T9352] sock 0 [ 2948.050122][ T9352] vmalloc 0 [ 2948.050122][ T9352] shmem 10436608 [ 2948.050122][ T9352] zswap 0 [ 2948.050122][ T9352] zswapped 0 [ 2948.050122][ T9352] file_mapped 262144 [ 2948.050122][ T9352] file_dirty 0 [ 2948.050122][ T9352] file_writeback 0 [ 2948.050122][ T9352] swapcached 0 [ 2948.050122][ T9352] anon_thp 0 [ 2948.050122][ T9352] file_thp 0 [ 2948.050122][ T9352] shmem_thp 0 [ 2948.050122][ T9352] inactive_anon 0 [ 2948.050122][ T9352] active_anon 10555392 [ 2948.050122][ T9352] inactive_file 0 [ 2948.050122][ T9352] active_file 0 [ 2948.050122][ T9352] unevictable 0 [ 2948.050122][ T9352] slab_reclaimable 53888 [ 2948.050122][ T9352] slab_unreclaimable 95992 [ 2948.050122][ T9352] slab 149880 [ 2948.050122][ T9352] workingset_refault_anon 0 [ 2948.050122][ T9352] workingset_refault_file 1 [ 2948.050122][ T9352] workingset_activate_anon 0 [ 2948.050122][ T9352] workingset_activate_file 0 [ 2948.050122][ T9352] workingset_restore_anon 0 [ 2948.050122][ T9352] workingset_restore_file 1 [ 2948.050122][ T9352] workingset_nodereclaim 2 [ 2948.050122][ T9352] pgscan 847 [ 2948.050122][ T9352] pgsteal 202 [ 2948.050122][ T9352] pgscan_kswapd 0 [ 2948.050122][ T9352] pgscan_direct 847 [ 2948.050122][ T9352] pgscan_khugepaged 0 [ 2948.050122][ T9352] pgsteal_kswapd 0 [ 2948.050122][ T9352] pgsteal_direct 202 [ 2948.050122][ T9352] pgsteal_khugepaged 0 [ 2948.050122][ T9352] pgfault 49728 [ 2948.050122][ T9352] pgmajfault 0 [ 2948.050122][ T9352] pgrefill 41379 [ 2948.050122][ T9352] pgactivate 319 [ 2948.050122][ T9352] pgdeactivate 0 [ 2948.050122][ T9352] pglazyfree 0 [ 2948.050122][ T9352] pglazyfreed 0 [ 2948.050122][ T9352] zswpin 0 [ 2948.050122][ T9352] zswpout 0 [ 2948.050122][ T9352] thp_fault_alloc 0 [ 2948.058872][ T9171] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2948.299165][ T9174] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2948.317892][ T9352] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=9348,uid=0 [ 2948.383801][ T9169] veth0_vlan: entered promiscuous mode [ 2948.397450][ T9174] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2948.411111][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2948.421998][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2948.453308][ T9169] veth1_vlan: entered promiscuous mode [ 2948.465710][ T9174] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2948.489909][ T9174] netdevsim netdevsim1 netdevsim3: renamed from eth3 01:16:16 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="0008030000086d6f9f487a74dde5e9fac9f9513154ffb3ff030000f56c8374cbe5d99a130e1f636709e048decbe24bb592299846d7bbad3fc61f86a3798700eb2129cf607c223e4b8c7f1687f6d8df1da48cd67815f62156cf2bb02394b3d16f825976c0b0c36e2db48ade28fe642efb21f16681cd5aeebd2341f5c6ab1ecf05adb78fff445806189faf2b6dc37f77dbf2b0a1e6d4b89eff16e67ea60b26c312f08600b3c1d61a0a9c63469ca436d6d2321df23da24e75309e7036cfc5c36d8127ca878c4a65b0f2089ed5593689cded5d46e67477fad72b4a5f2a10345eaf04e2cd7a8f1780cfb74cb95ecc5f2735c7804a7c563fa8ff0b20f049d025a2cdb36612f6b0eb10f49fb1"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) [ 2948.504903][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2948.514901][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2948.527931][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2948.536100][ T9352] Memory cgroup out of memory: Killed process 9352 (syz-executor.4) total-vm:56728kB, anon-rss:488kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2948.610393][ T9113] syz-executor.4 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=0 [ 2948.625622][ T9113] CPU: 0 PID: 9113 Comm: syz-executor.4 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2948.635986][ T9113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2948.646065][ T9113] Call Trace: [ 2948.649362][ T9113] [ 2948.652336][ T9113] dump_stack_lvl+0x136/0x150 [ 2948.657078][ T9113] dump_header+0x10a/0xd70 [ 2948.661553][ T9113] oom_kill_process+0x25d/0x600 [ 2948.666464][ T9113] out_of_memory+0x35c/0x1660 [ 2948.671181][ T9113] ? find_held_lock+0x2d/0x110 [ 2948.675983][ T9113] ? oom_killer_disable+0x2b0/0x2b0 [ 2948.681219][ T9113] ? rcu_read_unlock+0x9/0x60 [ 2948.685947][ T9113] ? find_held_lock+0x2d/0x110 [ 2948.690757][ T9113] mem_cgroup_out_of_memory+0x206/0x270 [ 2948.696345][ T9113] ? mem_cgroup_margin+0x130/0x130 [ 2948.701504][ T9113] ? lock_downgrade+0x690/0x690 [ 2948.706418][ T9113] try_charge_memcg+0xf99/0x13a0 [ 2948.711421][ T9113] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2948.717455][ T9113] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2948.723220][ T9113] ? lock_downgrade+0x690/0x690 [ 2948.728126][ T9113] ? lock_downgrade+0x690/0x690 [ 2948.733019][ T9113] ? rcu_read_unlock+0x9/0x60 [ 2948.737751][ T9113] obj_cgroup_charge+0x2af/0x5e0 [ 2948.742748][ T9113] __kmem_cache_alloc_node+0xa3/0x320 [ 2948.748169][ T9113] ? kvmalloc_node+0xa2/0x1a0 [ 2948.752898][ T9113] ? kvmalloc_node+0xa2/0x1a0 [ 2948.757626][ T9113] __kmalloc_node+0x51/0x1a0 [ 2948.762257][ T9113] kvmalloc_node+0xa2/0x1a0 [ 2948.766812][ T9113] alloc_fdtable+0xf4/0x2a0 [ 2948.771358][ T9113] dup_fd+0x74d/0xcf0 [ 2948.775391][ T9113] ? security_task_alloc+0xe4/0x250 [ 2948.780629][ T9113] copy_process+0x263b/0x7600 [ 2948.785353][ T9113] ? _raw_spin_unlock+0x28/0x40 [ 2948.790277][ T9113] ? pidfd_prepare+0x80/0x80 [ 2948.794923][ T9113] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2948.800961][ T9113] kernel_clone+0xeb/0x890 [ 2948.805419][ T9113] ? create_io_thread+0xe0/0xe0 [ 2948.810322][ T9113] ? do_user_addr_fault+0x2b1/0x1210 [ 2948.815657][ T9113] ? reacquire_held_locks+0x216/0x4e0 [ 2948.821074][ T9113] ? do_user_addr_fault+0x2b1/0x1210 [ 2948.826419][ T9113] ? find_held_lock+0x2d/0x110 [ 2948.831232][ T9113] __do_sys_clone+0xba/0x100 [ 2948.835869][ T9113] ? kernel_clone+0x890/0x890 [ 2948.840603][ T9113] ? syscall_enter_from_user_mode+0x26/0x80 [ 2948.846539][ T9113] do_syscall_64+0x39/0xb0 [ 2948.851010][ T9113] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2948.856962][ T9113] RIP: 0033:0x7f5cf5089e9b [ 2948.861406][ T9113] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2948.881045][ T9113] RSP: 002b:00007ffe14de85f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2948.889529][ T9113] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5cf5089e9b [ 2948.897526][ T9113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2948.905525][ T9113] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556d04400 [ 2948.913527][ T9113] R10: 0000555556d046d0 R11: 0000000000000246 R12: 0000000000000001 [ 2948.921546][ T9113] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe14de86d0 [ 2948.929575][ T9113] [ 2948.971639][ T9113] memory: usage 10412kB, limit 0kB, failcnt 837 [ 2948.987971][ T9113] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2948.996062][ T9113] Memory cgroup stats for /syz4: [ 2948.996285][ T9113] anon 40960 [ 2948.996285][ T9113] file 10436608 [ 2948.996285][ T9113] kernel 143360 [ 2948.996285][ T9113] kernel_stack 32768 [ 2948.996285][ T9113] pagetables 8192 [ 2948.996285][ T9113] sec_pagetables 0 [ 2948.996285][ T9113] percpu 64 [ 2948.996285][ T9113] sock 0 [ 2948.996285][ T9113] vmalloc 0 [ 2948.996285][ T9113] shmem 10436608 [ 2948.996285][ T9113] zswap 0 [ 2948.996285][ T9113] zswapped 0 [ 2948.996285][ T9113] file_mapped 241664 [ 2948.996285][ T9113] file_dirty 0 [ 2948.996285][ T9113] file_writeback 0 [ 2948.996285][ T9113] swapcached 0 [ 2948.996285][ T9113] anon_thp 0 [ 2948.996285][ T9113] file_thp 0 [ 2948.996285][ T9113] shmem_thp 0 [ 2948.996285][ T9113] inactive_anon 0 [ 2948.996285][ T9113] active_anon 10477568 [ 2948.996285][ T9113] inactive_file 0 [ 2948.996285][ T9113] active_file 0 [ 2948.996285][ T9113] unevictable 0 [ 2948.996285][ T9113] slab_reclaimable 33896 [ 2948.996285][ T9113] slab_unreclaimable 57192 [ 2948.996285][ T9113] slab 91088 [ 2948.996285][ T9113] workingset_refault_anon 0 [ 2948.996285][ T9113] workingset_refault_file 1 [ 2948.996285][ T9113] workingset_activate_anon 0 [ 2948.996285][ T9113] workingset_activate_file 0 [ 2948.996285][ T9113] workingset_restore_anon 0 [ 2948.996285][ T9113] workingset_restore_file 1 [ 2948.996285][ T9113] workingset_nodereclaim 2 [ 2948.996285][ T9113] pgscan 847 [ 2948.996285][ T9113] pgsteal 202 [ 2948.996285][ T9113] pgscan_kswapd 0 [ 2948.996285][ T9113] pgscan_direct 847 [ 2948.996285][ T9113] pgscan_khugepaged 0 [ 2948.996285][ T9113] pgsteal_kswapd 0 [ 2948.996285][ T9113] pgsteal_direct 202 [ 2948.996285][ T9113] pgsteal_khugepaged 0 [ 2948.996285][ T9113] pgfault 49747 [ 2948.996285][ T9113] pgmajfault 0 [ 2948.996285][ T9113] pgrefill 41379 [ 2948.996285][ T9113] pgactivate 319 [ 2948.996285][ T9113] pgdeactivate 0 [ 2948.996285][ T9113] pglazyfree 0 [ 2948.996285][ T9113] pglazyfreed 0 [ 2948.996285][ T9113] zswpin 0 [ 2948.996285][ T9113] zswpout 0 [ 2948.996285][ T9113] thp_fault_alloc 0 [ 2949.186725][ T9113] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=9113,uid=0 [ 2949.203486][ T9113] Memory cgroup out of memory: Killed process 9113 (syz-executor.4) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2949.259061][ T9361] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2949.278362][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2949.286933][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2949.293373][ T9361] CPU: 1 PID: 9361 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2949.305164][ T9361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2949.315227][ T9361] Call Trace: [ 2949.318514][ T9361] [ 2949.321459][ T9361] dump_stack_lvl+0x136/0x150 [ 2949.326183][ T9361] dump_header+0x10a/0xd70 [ 2949.330639][ T9361] oom_kill_process+0x25d/0x600 [ 2949.335509][ T9361] out_of_memory+0x35c/0x1660 [ 2949.340203][ T9361] ? lockdep_hardirqs_on+0x7d/0x100 [ 2949.345433][ T9361] ? oom_killer_disable+0x2b0/0x2b0 [ 2949.350657][ T9361] ? mem_cgroup_out_of_memory+0x199/0x270 [ 2949.356411][ T9361] mem_cgroup_out_of_memory+0x206/0x270 [ 2949.362006][ T9361] ? mem_cgroup_margin+0x130/0x130 [ 2949.367193][ T9361] memory_max_write+0x2f9/0x3c0 [ 2949.372087][ T9361] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2949.378195][ T9361] ? cgroup_file_write+0x8e/0x7b0 [ 2949.383251][ T9361] cgroup_file_write+0x1e2/0x7b0 [ 2949.388213][ T9361] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2949.394309][ T9361] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2949.399710][ T9361] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2949.405107][ T9361] kernfs_fop_write_iter+0x3f1/0x600 [ 2949.410424][ T9361] vfs_write+0x945/0xd50 [ 2949.414682][ T9361] ? kernel_write+0x670/0x670 [ 2949.419376][ T9361] ? lockdep_hardirqs_on+0x7d/0x100 [ 2949.424591][ T9361] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2949.430782][ T9361] ? ksys_write+0x94/0x250 [ 2949.435224][ T9361] ksys_write+0x12b/0x250 [ 2949.439565][ T9361] ? __ia32_sys_read+0xb0/0xb0 [ 2949.444343][ T9361] ? syscall_enter_from_user_mode+0x26/0x80 [ 2949.450262][ T9361] do_syscall_64+0x39/0xb0 [ 2949.454706][ T9361] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2949.460623][ T9361] RIP: 0033:0x7f60e3c8c169 [ 2949.465053][ T9361] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2949.484672][ T9361] RSP: 002b:00007f60e4a64168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2949.493101][ T9361] RAX: ffffffffffffffda RBX: 00007f60e3dac050 RCX: 00007f60e3c8c169 [ 2949.501084][ T9361] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 2949.509067][ T9361] RBP: 00007f60e3ce7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2949.517044][ T9361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2949.525022][ T9361] R13: 00007ffe5b65c61f R14: 00007f60e4a64300 R15: 0000000000022000 [ 2949.533023][ T9361] [ 2949.564219][ T9361] memory: usage 10676kB, limit 0kB, failcnt 990 [ 2949.583930][ T9361] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2949.596767][ T9169] veth0_macvtap: entered promiscuous mode [ 2949.603989][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2949.620631][ T9361] Memory cgroup stats for /syz3: [ 2949.620862][ T9361] anon 118784 [ 2949.620862][ T9361] file 10457088 [ 2949.620862][ T9361] kernel 311296 [ 2949.620862][ T9361] kernel_stack 65536 [ 2949.620862][ T9361] pagetables 81920 [ 2949.620862][ T9361] sec_pagetables 0 [ 2949.620862][ T9361] percpu 64 [ 2949.620862][ T9361] sock 0 [ 2949.620862][ T9361] vmalloc 0 [ 2949.620862][ T9361] shmem 10452992 [ 2949.620862][ T9361] zswap 0 [ 2949.620862][ T9361] zswapped 0 [ 2949.620862][ T9361] file_mapped 344064 [ 2949.620862][ T9361] file_dirty 0 [ 2949.620862][ T9361] file_writeback 0 [ 2949.620862][ T9361] swapcached 0 [ 2949.620862][ T9361] anon_thp 0 [ 2949.620862][ T9361] file_thp 0 [ 2949.620862][ T9361] shmem_thp 0 [ 2949.620862][ T9361] inactive_anon 122880 [ 2949.620862][ T9361] active_anon 10448896 [ 2949.620862][ T9361] inactive_file 4096 [ 2949.620862][ T9361] active_file 0 [ 2949.620862][ T9361] unevictable 0 [ 2949.620862][ T9361] slab_reclaimable 47976 [ 2949.620862][ T9361] slab_unreclaimable 90584 [ 2949.620862][ T9361] slab 138560 [ 2949.620862][ T9361] workingset_refault_anon 0 [ 2949.620862][ T9361] workingset_refault_file 0 [ 2949.620862][ T9361] workingset_activate_anon 0 [ 2949.620862][ T9361] workingset_activate_file 0 [ 2949.620862][ T9361] workingset_restore_anon 0 [ 2949.620862][ T9361] workingset_restore_file 0 [ 2949.620862][ T9361] workingset_nodereclaim 0 [ 2949.620862][ T9361] pgscan 315 [ 2949.620862][ T9361] pgsteal 80 [ 2949.620862][ T9361] pgscan_kswapd 0 [ 2949.620862][ T9361] pgscan_direct 315 [ 2949.620862][ T9361] pgscan_khugepaged 0 [ 2949.620862][ T9361] pgsteal_kswapd 0 [ 2949.620862][ T9361] pgsteal_direct 80 [ 2949.620862][ T9361] pgsteal_khugepaged 0 [ 2949.620862][ T9361] pgfault 61335 [ 2949.620862][ T9361] pgmajfault 0 [ 2949.620862][ T9361] pgrefill 914 [ 2949.620862][ T9361] pgactivate 235 [ 2949.620862][ T9361] pgdeactivate 0 [ 2949.620862][ T9361] pglazyfree 0 [ 2949.620862][ T9361] pglazyfreed 0 [ 2949.620862][ T9361] zswpin 0 [ 2949.620862][ T9361] zswpout 0 [ 2949.620862][ T9361] thp_fault_alloc 0 [ 2949.822240][ T9361] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=9099,uid=0 [ 2949.854664][ T9361] Memory cgroup out of memory: Killed process 9099 (syz-executor.3) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2949.883742][ T9169] veth1_macvtap: entered promiscuous mode [ 2949.921590][ T9165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2950.036244][ T9165] 8021q: adding VLAN 0 to HW filter on device team0 [ 2950.146494][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2950.157758][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2950.176893][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2950.188030][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2950.209405][ T8293] bridge0: port 1(bridge_slave_0) entered blocking state [ 2950.216509][ T8293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2950.242173][ T9171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2950.263464][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2950.275340][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2950.286014][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2950.297132][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 01:16:18 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x80, 0x7d, 0x0, 0x8, 0x0, 0x0, 0x1080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x78, 0x2, @perf_config_ext={0x4, 0x1}, 0x10010, 0x1, 0xffffff05, 0x9, 0xc00, 0x8000, 0x7, 0x0, 0x7, 0x0, 0x2b4d0000000}, r1, 0x5, r5, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r4, &(0x7f0000000180), 0x12) 01:16:18 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) [ 2950.307377][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2950.318274][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2950.348588][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2950.380318][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2950.447785][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2950.469784][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2950.488706][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2950.508255][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2950.548037][ T9169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2950.578859][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2950.586849][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2950.600440][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2950.610421][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2950.620055][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2950.628863][T32601] bridge0: port 2(bridge_slave_1) entered blocking state [ 2950.635997][T32601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2950.644915][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2950.654337][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2950.715715][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2950.743215][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2950.775472][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2950.810733][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2950.853264][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2950.884462][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2950.916076][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2950.940157][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2950.968335][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2951.008215][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2951.028366][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2951.039598][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2951.066506][ T9169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2951.079522][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2951.090738][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2951.106165][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2951.125894][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2951.135097][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2951.143407][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2951.174838][ T9171] 8021q: adding VLAN 0 to HW filter on device team0 [ 2951.190584][ T9169] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2951.212758][ T9169] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2951.228308][ T9169] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2951.237040][ T9169] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2951.258595][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2951.266656][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2951.286692][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2951.298978][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2951.307524][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2951.350397][ T9174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2951.360929][ T9165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2951.373372][ T9165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2951.438385][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2951.447353][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2951.470107][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2951.489012][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2951.497475][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 2951.504629][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2951.523494][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2951.537610][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2951.557383][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 2951.564532][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2951.595393][ T9174] 8021q: adding VLAN 0 to HW filter on device team0 [ 2951.642095][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2951.659442][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2951.667284][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2951.693372][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2951.707480][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2951.786562][ T5531] hsr_slave_0: left promiscuous mode [ 2951.799338][ T5531] hsr_slave_1: left promiscuous mode [ 2951.818548][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2951.825987][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2951.855196][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2951.888666][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2951.910081][ T5531] bridge_slave_1: left allmulticast mode [ 2951.915767][ T5531] bridge_slave_1: left promiscuous mode [ 2951.938687][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 2951.947425][ T5531] bridge_slave_0: left allmulticast mode [ 2951.960017][ T5531] bridge_slave_0: left promiscuous mode [ 2951.978704][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 2952.011307][ T5531] hsr_slave_0: left promiscuous mode [ 2952.017214][ T5531] hsr_slave_1: left promiscuous mode [ 2952.028862][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2952.036294][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2952.071815][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2952.095120][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2952.113733][ T5531] bridge_slave_1: left allmulticast mode [ 2952.128345][ T5531] bridge_slave_1: left promiscuous mode [ 2952.134037][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 2952.165754][ T5531] bridge_slave_0: left allmulticast mode [ 2952.172439][ T5049] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2952.181118][ T5049] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2952.191470][ T5049] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2952.199827][ T5531] bridge_slave_0: left promiscuous mode [ 2952.205524][ T5049] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2952.212274][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 2952.220149][ T5049] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2952.251031][ T5531] hsr_slave_0: left promiscuous mode [ 2952.266950][ T5531] hsr_slave_1: left promiscuous mode [ 2952.274873][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2952.293329][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2952.310358][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2952.317791][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2952.327119][ T5531] bridge_slave_1: left allmulticast mode [ 2952.333138][ T5531] bridge_slave_1: left promiscuous mode [ 2952.339872][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 2952.359848][ T5531] bridge_slave_0: left allmulticast mode [ 2952.365521][ T5531] bridge_slave_0: left promiscuous mode [ 2952.376063][ T4594] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2952.376674][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 2952.384675][ T4594] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2952.402369][ T4594] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2952.411602][ T4594] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2952.419283][ T4594] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2952.422686][ T5531] hsr_slave_0: left promiscuous mode [ 2952.443471][ T5531] hsr_slave_1: left promiscuous mode [ 2952.450350][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2952.457779][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2952.466884][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2952.474614][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2952.486167][ T5531] bridge_slave_1: left allmulticast mode [ 2952.492086][ T5531] bridge_slave_1: left promiscuous mode [ 2952.497811][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 2952.506568][ T5531] bridge_slave_0: left allmulticast mode [ 2952.512561][ T5531] bridge_slave_0: left promiscuous mode [ 2952.518262][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 2952.541518][ T5531] veth1_macvtap: left promiscuous mode [ 2952.547037][ T5531] veth0_macvtap: left promiscuous mode [ 2952.552673][ T5531] veth1_vlan: left promiscuous mode [ 2952.557950][ T5531] veth0_vlan: left promiscuous mode [ 2952.564969][ T5531] veth1_macvtap: left promiscuous mode [ 2952.573961][ T5531] veth0_macvtap: left promiscuous mode [ 2952.580060][ T5531] veth1_vlan: left promiscuous mode [ 2952.585340][ T5531] veth0_vlan: left promiscuous mode [ 2952.593041][ T5531] veth1_macvtap: left promiscuous mode [ 2952.599530][ T5531] veth0_macvtap: left promiscuous mode [ 2952.605067][ T5531] veth1_vlan: left promiscuous mode [ 2952.610521][ T5531] veth0_vlan: left promiscuous mode [ 2952.616750][ T5531] veth1_macvtap: left promiscuous mode [ 2952.622595][ T5531] veth0_macvtap: left promiscuous mode [ 2952.628151][ T5531] veth1_vlan: left promiscuous mode [ 2952.636032][ T5531] veth0_vlan: left promiscuous mode [ 2953.146153][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 2953.164492][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 2953.180047][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2953.195776][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2953.273337][ T5531] bond0 (unregistering): Released all slaves [ 2953.426413][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 2953.442128][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 2953.454219][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2953.474528][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2953.548646][ T5531] bond0 (unregistering): Released all slaves [ 2953.715349][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 2953.731445][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 2953.748272][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2953.764234][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2953.849719][ T5531] bond0 (unregistering): Released all slaves [ 2953.989622][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 2954.004220][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 2954.016608][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2954.033219][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2954.107746][ T5531] bond0 (unregistering): Released all slaves [ 2954.189982][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2954.198818][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2954.207243][T32601] bridge0: port 1(bridge_slave_0) entered blocking state [ 2954.214381][T32601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2954.222409][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2954.231344][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2954.240904][T32601] bridge0: port 2(bridge_slave_1) entered blocking state [ 2954.248005][T32601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2954.256141][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2954.264829][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2954.274015][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2954.284058][ T4594] Bluetooth: hci0: command 0x0409 tx timeout [ 2954.292630][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2954.302109][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2954.311001][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2954.320401][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2954.328347][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2954.376926][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2954.400547][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2954.419062][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2954.436769][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2954.445587][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2954.460941][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2954.517080][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2954.526575][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2954.528935][ T4594] Bluetooth: hci1: command 0x0409 tx timeout [ 2954.535660][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2954.549460][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2954.557712][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2954.571249][ T9174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2954.584480][ T9174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2954.630612][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2954.639264][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2954.647500][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2954.655554][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2954.664611][ T9171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2954.697910][T15809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2954.711322][T15809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2954.771311][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2954.804377][ T9165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2954.943470][T15859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2954.958372][T15859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2954.971504][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2955.048958][ T9408] chnl_net:caif_netlink_parms(): no params data found [ 2955.295346][ T9432] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2955.309262][ T9432] CPU: 0 PID: 9432 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2955.319648][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2955.329734][ T9432] Call Trace: [ 2955.333039][ T9432] [ 2955.336005][ T9432] dump_stack_lvl+0x136/0x150 [ 2955.340770][ T9432] dump_header+0x10a/0xd70 [ 2955.345254][ T9432] oom_kill_process+0x25d/0x600 [ 2955.350158][ T9432] out_of_memory+0x35c/0x1660 [ 2955.354890][ T9432] ? io_schedule_timeout+0x150/0x150 [ 2955.360230][ T9432] ? oom_killer_disable+0x2b0/0x2b0 [ 2955.365481][ T9432] mem_cgroup_out_of_memory+0x206/0x270 [ 2955.371077][ T9432] ? mem_cgroup_margin+0x130/0x130 [ 2955.376255][ T9432] memory_max_write+0x2f9/0x3c0 [ 2955.381161][ T9432] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2955.387296][ T9432] ? lock_sync+0x190/0x190 [ 2955.391779][ T9432] cgroup_file_write+0x1e2/0x7b0 [ 2955.396761][ T9432] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2955.402892][ T9432] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2955.408330][ T9432] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2955.413760][ T9432] kernfs_fop_write_iter+0x3f1/0x600 [ 2955.419124][ T9432] vfs_write+0x945/0xd50 [ 2955.423411][ T9432] ? kernel_write+0x670/0x670 [ 2955.428133][ T9432] ? __fget_files+0x26a/0x480 [ 2955.432882][ T9432] ksys_write+0x12b/0x250 [ 2955.437243][ T9432] ? __ia32_sys_read+0xb0/0xb0 [ 2955.442047][ T9432] ? syscall_enter_from_user_mode+0x26/0x80 [ 2955.448025][ T9432] do_syscall_64+0x39/0xb0 [ 2955.452499][ T9432] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2955.458443][ T9432] RIP: 0033:0x7f76e2e8c169 [ 2955.462891][ T9432] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2955.482536][ T9432] RSP: 002b:00007f76e3b03168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2955.490995][ T9432] RAX: ffffffffffffffda RBX: 00007f76e2fac050 RCX: 00007f76e2e8c169 [ 2955.498999][ T9432] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 2955.507009][ T9432] RBP: 00007f76e2ee7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2955.515017][ T9432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2955.523029][ T9432] R13: 00007ffd99896e8f R14: 00007f76e3b03300 R15: 0000000000022000 [ 2955.531059][ T9432] [ 2955.574703][ T9432] memory: usage 10680kB, limit 0kB, failcnt 727 [ 2955.582442][ T9432] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2955.595504][ T9432] Memory cgroup stats for /syz0: [ 2955.601999][ T9406] chnl_net:caif_netlink_parms(): no params data found [ 2955.605129][ T9432] anon 118784 [ 2955.605129][ T9432] file 10428416 [ 2955.605129][ T9432] kernel 380928 [ 2955.605129][ T9432] kernel_stack 98304 [ 2955.605129][ T9432] pagetables 77824 [ 2955.605129][ T9432] sec_pagetables 0 [ 2955.605129][ T9432] percpu 64 [ 2955.605129][ T9432] sock 0 [ 2955.605129][ T9432] vmalloc 0 [ 2955.605129][ T9432] shmem 10428416 [ 2955.605129][ T9432] zswap 0 [ 2955.605129][ T9432] zswapped 0 [ 2955.605129][ T9432] file_mapped 253952 [ 2955.605129][ T9432] file_dirty 0 [ 2955.605129][ T9432] file_writeback 0 [ 2955.605129][ T9432] swapcached 0 [ 2955.605129][ T9432] anon_thp 0 [ 2955.605129][ T9432] file_thp 0 [ 2955.605129][ T9432] shmem_thp 0 [ 2955.605129][ T9432] inactive_anon 0 [ 2955.605129][ T9432] active_anon 10547200 [ 2955.605129][ T9432] inactive_file 0 [ 2955.605129][ T9432] active_file 0 [ 2955.605129][ T9432] unevictable 0 [ 2955.605129][ T9432] slab_reclaimable 54152 [ 2955.605129][ T9432] slab_unreclaimable 122704 [ 2955.605129][ T9432] slab 176856 [ 2955.605129][ T9432] workingset_refault_anon 0 [ 2955.605129][ T9432] workingset_refault_file 0 [ 2955.605129][ T9432] workingset_activate_anon 0 [ 2955.605129][ T9432] workingset_activate_file 0 [ 2955.605129][ T9432] workingset_restore_anon 0 [ 2955.605129][ T9432] workingset_restore_file 0 [ 2955.605129][ T9432] workingset_nodereclaim 0 [ 2955.605129][ T9432] pgscan 705 [ 2955.605129][ T9432] pgsteal 266 [ 2955.605129][ T9432] pgscan_kswapd 0 [ 2955.605129][ T9432] pgscan_direct 705 [ 2955.605129][ T9432] pgscan_khugepaged 0 [ 2955.605129][ T9432] pgsteal_kswapd 0 [ 2955.605129][ T9432] pgsteal_direct 266 [ 2955.605129][ T9432] pgsteal_khugepaged 0 [ 2955.605129][ T9432] pgfault 53681 [ 2955.605129][ T9432] pgmajfault 0 [ 2955.605129][ T9432] pgrefill 27828 [ 2955.605129][ T9432] pgactivate 312 [ 2955.605129][ T9432] pgdeactivate 0 [ 2955.605129][ T9432] pglazyfree 0 [ 2955.605129][ T9432] pglazyfreed 0 [ 2955.605129][ T9432] zswpin 0 [ 2955.605129][ T9432] zswpout 0 [ 2955.605129][ T9432] thp_fault_alloc 0 [ 2955.825602][ T9408] bridge0: port 1(bridge_slave_0) entered blocking state [ 2955.839573][ T9408] bridge0: port 1(bridge_slave_0) entered disabled state [ 2955.846790][ T9408] bridge_slave_0: entered allmulticast mode [ 2955.848559][ T9432] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 2955.854357][ T9408] bridge_slave_0: entered promiscuous mode [ 2955.855234][ T9432] ,cpuset= [ 2955.902942][ T9174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2955.910794][ T9432] syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=9425,uid=0 [ 2955.935247][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2955.938835][ T9432] Memory cgroup out of memory: Killed process 9425 (syz-executor.0) total-vm:56728kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2955.943930][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2955.985440][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 01:16:23 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x80, 0x7d, 0x0, 0x8, 0x0, 0x0, 0x1080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x78, 0x2, @perf_config_ext={0x4, 0x1}, 0x10010, 0x1, 0xffffff05, 0x9, 0xc00, 0x8000, 0x7, 0x0, 0x7, 0x0, 0x2b4d0000000}, r1, 0x5, r5, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r4, &(0x7f0000000180), 0x12) [ 2955.998594][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2956.014000][ T9408] bridge0: port 2(bridge_slave_1) entered blocking state [ 2956.021636][ T9408] bridge0: port 2(bridge_slave_1) entered disabled state [ 2956.029064][ T9408] bridge_slave_1: entered allmulticast mode [ 2956.037611][ T9408] bridge_slave_1: entered promiscuous mode [ 2956.141832][ T9169] syz-executor.0 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=0 [ 2956.153070][ T9169] CPU: 0 PID: 9169 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2956.163431][ T9169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2956.173506][ T9169] Call Trace: [ 2956.176812][ T9169] [ 2956.179763][ T9169] dump_stack_lvl+0x136/0x150 [ 2956.184497][ T9169] dump_header+0x10a/0xd70 [ 2956.188958][ T9169] oom_kill_process+0x25d/0x600 [ 2956.193858][ T9169] out_of_memory+0x35c/0x1660 [ 2956.198568][ T9169] ? find_held_lock+0x2d/0x110 [ 2956.203383][ T9169] ? oom_killer_disable+0x2b0/0x2b0 [ 2956.208627][ T9169] ? rcu_read_unlock+0x9/0x60 [ 2956.213342][ T9169] ? find_held_lock+0x2d/0x110 [ 2956.218144][ T9169] mem_cgroup_out_of_memory+0x206/0x270 [ 2956.223744][ T9169] ? mem_cgroup_margin+0x130/0x130 [ 2956.228892][ T9169] ? lock_downgrade+0x690/0x690 [ 2956.233800][ T9169] try_charge_memcg+0xf99/0x13a0 [ 2956.238789][ T9169] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2956.244814][ T9169] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2956.250559][ T9169] ? lock_downgrade+0x690/0x690 [ 2956.255451][ T9169] ? lock_downgrade+0x690/0x690 [ 2956.260338][ T9169] ? rcu_read_unlock+0x9/0x60 [ 2956.265046][ T9169] obj_cgroup_charge+0x2af/0x5e0 [ 2956.270014][ T9169] __kmem_cache_alloc_node+0xa3/0x320 [ 2956.275417][ T9169] ? kvmalloc_node+0xa2/0x1a0 [ 2956.280124][ T9169] ? kvmalloc_node+0xa2/0x1a0 [ 2956.284843][ T9169] __kmalloc_node+0x51/0x1a0 [ 2956.289463][ T9169] kvmalloc_node+0xa2/0x1a0 [ 2956.294018][ T9169] alloc_fdtable+0xf4/0x2a0 [ 2956.298567][ T9169] dup_fd+0x74d/0xcf0 [ 2956.302592][ T9169] ? security_task_alloc+0xe4/0x250 [ 2956.307801][ T9169] copy_process+0x263b/0x7600 [ 2956.312498][ T9169] ? _raw_spin_unlock+0x28/0x40 [ 2956.317406][ T9169] ? pidfd_prepare+0x80/0x80 [ 2956.322035][ T9169] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2956.328050][ T9169] kernel_clone+0xeb/0x890 [ 2956.332495][ T9169] ? create_io_thread+0xe0/0xe0 [ 2956.337392][ T9169] ? do_user_addr_fault+0x2b1/0x1210 [ 2956.342708][ T9169] ? reacquire_held_locks+0x216/0x4e0 [ 2956.348090][ T9169] ? do_user_addr_fault+0x2b1/0x1210 [ 2956.353401][ T9169] ? find_held_lock+0x2d/0x110 [ 2956.358217][ T9169] __do_sys_clone+0xba/0x100 [ 2956.362883][ T9169] ? kernel_clone+0x890/0x890 [ 2956.367605][ T9169] ? syscall_enter_from_user_mode+0x26/0x80 [ 2956.373531][ T9169] do_syscall_64+0x39/0xb0 [ 2956.377989][ T9169] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2956.383895][ T9169] RIP: 0033:0x7f76e2e89e9b [ 2956.388318][ T9169] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2956.407942][ T9169] RSP: 002b:00007ffd998970d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2956.416363][ T9169] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f76e2e89e9b [ 2956.424352][ T9169] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2956.432332][ T9169] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555e02400 [ 2956.440328][ T9169] R10: 0000555555e026d0 R11: 0000000000000246 R12: 0000000000000001 [ 2956.448318][ T9169] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd998971b0 [ 2956.456331][ T9169] [ 2956.460039][ T4594] Bluetooth: hci0: command 0x041b tx timeout [ 2956.465438][ T9169] memory: usage 10440kB, limit 0kB, failcnt 746 [ 2956.473278][ T9169] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2956.480269][ T9169] Memory cgroup stats for /syz0: [ 2956.480480][ T9169] anon 40960 [ 2956.480480][ T9169] file 10428416 [ 2956.480480][ T9169] kernel 167936 [ 2956.480480][ T9169] kernel_stack 32768 [ 2956.480480][ T9169] pagetables 8192 [ 2956.480480][ T9169] sec_pagetables 0 [ 2956.480480][ T9169] percpu 64 [ 2956.480480][ T9169] sock 0 [ 2956.480480][ T9169] vmalloc 0 [ 2956.480480][ T9169] shmem 10428416 [ 2956.480480][ T9169] zswap 0 [ 2956.480480][ T9169] zswapped 0 [ 2956.480480][ T9169] file_mapped 241664 [ 2956.480480][ T9169] file_dirty 0 [ 2956.480480][ T9169] file_writeback 0 [ 2956.480480][ T9169] swapcached 0 [ 2956.480480][ T9169] anon_thp 0 [ 2956.480480][ T9169] file_thp 0 [ 2956.480480][ T9169] shmem_thp 0 [ 2956.480480][ T9169] inactive_anon 0 [ 2956.480480][ T9169] active_anon 10469376 [ 2956.480480][ T9169] inactive_file 0 [ 2956.480480][ T9169] active_file 0 [ 2956.480480][ T9169] unevictable 0 [ 2956.480480][ T9169] slab_reclaimable 34160 [ 2956.480480][ T9169] slab_unreclaimable 80016 [ 2956.480480][ T9169] slab 114176 [ 2956.480480][ T9169] workingset_refault_anon 0 [ 2956.480480][ T9169] workingset_refault_file 0 [ 2956.480480][ T9169] workingset_activate_anon 0 [ 2956.480480][ T9169] workingset_activate_file 0 [ 2956.480480][ T9169] workingset_restore_anon 0 [ 2956.480480][ T9169] workingset_restore_file 0 [ 2956.480480][ T9169] workingset_nodereclaim 0 [ 2956.480480][ T9169] pgscan 705 [ 2956.480480][ T9169] pgsteal 266 [ 2956.480480][ T9169] pgscan_kswapd 0 [ 2956.480480][ T9169] pgscan_direct 705 [ 2956.480480][ T9169] pgscan_khugepaged 0 [ 2956.480480][ T9169] pgsteal_kswapd 0 [ 2956.480480][ T9169] pgsteal_direct 266 [ 2956.480480][ T9169] pgsteal_khugepaged 0 [ 2956.480480][ T9169] pgfault 53696 [ 2956.480480][ T9169] pgmajfault 0 [ 2956.480480][ T9169] pgrefill 27828 [ 2956.480480][ T9169] pgactivate 312 [ 2956.480480][ T9169] pgdeactivate 0 [ 2956.480480][ T9169] pglazyfree 0 [ 2956.480480][ T9169] pglazyfreed 0 [ 2956.480480][ T9169] zswpin 0 [ 2956.480480][ T9169] zswpout 0 [ 2956.480480][ T9169] thp_fault_alloc 0 [ 2956.668257][ T5049] Bluetooth: hci1: command 0x041b tx timeout [ 2956.682117][ T9171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2956.691252][ T9169] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=9169,uid=0 [ 2956.709790][ T9169] Memory cgroup out of memory: Killed process 9169 (syz-executor.0) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2956.768505][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2956.779492][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2956.788012][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2956.798031][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2956.809272][ T9408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2956.854843][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2956.864301][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2956.881763][ T9408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2956.945793][ T9174] veth0_vlan: entered promiscuous mode [ 2956.964540][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2956.972691][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2956.980802][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2956.989968][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2957.027791][ T9165] veth0_vlan: entered promiscuous mode [ 2957.054395][ T9174] veth1_vlan: entered promiscuous mode [ 2957.061463][ T9406] bridge0: port 1(bridge_slave_0) entered blocking state [ 2957.069306][ T9406] bridge0: port 1(bridge_slave_0) entered disabled state 01:16:24 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x80, 0x7d, 0x0, 0x8, 0x0, 0x0, 0x1080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x78, 0x2, @perf_config_ext={0x4, 0x1}, 0x10010, 0x1, 0xffffff05, 0x9, 0xc00, 0x8000, 0x7, 0x0, 0x7, 0x0, 0x2b4d0000000}, r1, 0x5, r5, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r4, &(0x7f0000000180), 0x12) [ 2957.076430][ T9406] bridge_slave_0: entered allmulticast mode [ 2957.087981][ T9406] bridge_slave_0: entered promiscuous mode [ 2957.096298][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2957.104670][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2957.114576][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2957.132280][ T9408] team0: Port device team_slave_0 added [ 2957.146983][ T9171] veth0_vlan: entered promiscuous mode 01:16:24 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x80, 0x7d, 0x0, 0x8, 0x0, 0x0, 0x1080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x78, 0x2, @perf_config_ext={0x4, 0x1}, 0x10010, 0x1, 0xffffff05, 0x9, 0xc00, 0x8000, 0x7, 0x0, 0x7, 0x0, 0x2b4d0000000}, r1, 0x5, r5, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r4, &(0x7f0000000180), 0x12) [ 2957.181728][ T9406] bridge0: port 2(bridge_slave_1) entered blocking state [ 2957.198590][ T9406] bridge0: port 2(bridge_slave_1) entered disabled state [ 2957.205760][ T9406] bridge_slave_1: entered allmulticast mode [ 2957.224063][ T9406] bridge_slave_1: entered promiscuous mode [ 2957.255001][ T9165] veth1_vlan: entered promiscuous mode [ 2957.264428][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2957.280069][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2957.296357][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2957.305907][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2957.322954][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2957.335377][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2957.360164][ T9408] team0: Port device team_slave_1 added [ 2957.412383][ T9171] veth1_vlan: entered promiscuous mode [ 2957.449458][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2957.470300][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2957.478142][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2957.506692][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2957.517799][ T9406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2957.563238][ T9174] veth0_macvtap: entered promiscuous mode [ 2957.598310][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2957.607044][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2957.616188][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2957.625456][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2957.634755][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2957.645157][ T9406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2957.655827][ T9408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2957.663444][ T9408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2957.691595][ T9408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2957.705522][ T9408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2957.712811][ T9408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2957.741355][ T9408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2957.766913][ T9165] veth0_macvtap: entered promiscuous mode [ 2957.777303][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2957.785677][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2957.795045][ T9174] veth1_macvtap: entered promiscuous mode [ 2957.813778][ T9171] veth0_macvtap: entered promiscuous mode [ 2957.841426][ T9165] veth1_macvtap: entered promiscuous mode [ 2957.850308][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2957.859521][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2957.868650][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2957.894876][ T9406] team0: Port device team_slave_0 added [ 2957.906113][ T9174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2957.916890][ T9174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2957.926813][ T9174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2957.937388][ T9174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2957.948594][ T9174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2957.959293][ T9174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2957.979891][ T9174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2958.005551][ T9408] hsr_slave_0: entered promiscuous mode [ 2958.012259][ T9408] hsr_slave_1: entered promiscuous mode [ 2958.019173][ T9408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2958.026742][ T9408] Cannot create hsr debugfs directory [ 2958.047662][ T9406] team0: Port device team_slave_1 added [ 2958.056244][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2958.065066][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2958.076557][ T9171] veth1_macvtap: entered promiscuous mode [ 2958.091511][ T9165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2958.102171][ T9165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2958.113226][ T9165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2958.124482][ T9165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2958.134571][ T9165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2958.146063][ T9165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2958.156472][ T9165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2958.167058][ T9165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2958.178128][ T9165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2958.196504][ T9174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2958.207559][ T9174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2958.219428][ T9174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2958.230562][ T9174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2958.240946][ T9174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2958.253090][ T9174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2958.264176][ T9174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2958.280223][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2958.288158][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2958.296765][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2958.305563][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2958.314903][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2958.326064][ T9165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2958.336783][ T9165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2958.347694][ T9165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2958.361598][ T9165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2958.371661][ T9165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2958.382277][ T9165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2958.392207][ T9165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2958.406243][ T9165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2958.417875][ T9165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2958.450751][ T9174] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2958.461057][ T9174] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2958.476757][ T9174] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2958.487934][ T9174] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2958.513368][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2958.522367][ T4594] Bluetooth: hci0: command 0x040f tx timeout [ 2958.531158][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2958.543507][ T9165] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2958.555355][ T9165] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2958.564654][ T9165] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2958.573844][ T9165] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2958.588725][ T9406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2958.597860][ T9406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2958.660820][ T9406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2958.678846][ T4594] Bluetooth: hci1: command 0x040f tx timeout [ 2958.689500][ T9406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2958.696458][ T9406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2958.796500][ T9406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2958.850926][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2958.888474][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2958.916789][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2958.938115][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2958.948342][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2958.959337][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2958.976829][ T5049] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2958.985666][ T5049] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2958.996207][ T5049] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2959.005398][ T5049] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2959.013023][ T5049] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2959.021027][ T5049] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2959.038666][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2959.049361][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2959.059283][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2959.069798][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2959.081613][ T9171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2959.089899][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2959.098809][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2959.133542][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2959.158815][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2959.182364][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2959.197302][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2959.211576][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2959.227352][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2959.244269][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2959.259737][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2959.276955][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2959.291133][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2959.309477][ T9171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2959.364197][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2959.376466][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2959.446885][ T9171] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2959.475707][ T9171] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2959.486780][ T9171] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2959.501942][ T9171] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2959.533037][ T9406] hsr_slave_0: entered promiscuous mode [ 2959.539671][ T9406] hsr_slave_1: entered promiscuous mode [ 2959.546321][ T9406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2959.566822][ T9406] Cannot create hsr debugfs directory [ 2959.782637][ T5541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2959.841346][ T5541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2959.875275][ T9408] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2959.924972][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2959.954521][T15857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2959.978338][T15857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2959.995924][ T9424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2960.010935][ T9424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2960.023247][ T9424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2960.033102][ T9424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2960.066302][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2960.074433][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2960.082641][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2960.096681][ T9408] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2960.228290][ T9408] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2960.339892][ T7022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2960.347998][ T7022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2960.414923][ T9449] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2960.439930][ T9408] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2960.448156][ T9449] CPU: 1 PID: 9449 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2960.460579][ T9449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2960.470663][ T9449] Call Trace: [ 2960.473968][ T9449] [ 2960.476923][ T9449] dump_stack_lvl+0x136/0x150 [ 2960.481684][ T9449] dump_header+0x10a/0xd70 [ 2960.486150][ T9449] oom_kill_process+0x25d/0x600 [ 2960.491015][ T9449] out_of_memory+0x35c/0x1660 [ 2960.495717][ T9449] ? io_schedule_timeout+0x150/0x150 [ 2960.501035][ T9449] ? oom_killer_disable+0x2b0/0x2b0 [ 2960.506247][ T9449] ? kernfs_notify+0x1ac/0x410 [ 2960.511037][ T9449] mem_cgroup_out_of_memory+0x206/0x270 [ 2960.516600][ T9449] ? mem_cgroup_margin+0x130/0x130 [ 2960.521745][ T9449] memory_max_write+0x2f9/0x3c0 [ 2960.526618][ T9449] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2960.532710][ T9449] ? lock_sync+0x190/0x190 [ 2960.537161][ T9449] cgroup_file_write+0x1e2/0x7b0 [ 2960.542131][ T9449] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2960.548226][ T9449] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2960.553605][ T9449] ? __virt_addr_valid+0x61/0x2e0 [ 2960.558654][ T9449] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2960.564034][ T9449] kernfs_fop_write_iter+0x3f1/0x600 [ 2960.569341][ T9449] vfs_write+0x945/0xd50 [ 2960.573591][ T9449] ? kernel_write+0x670/0x670 [ 2960.578274][ T9449] ? __fget_files+0x26a/0x480 [ 2960.582986][ T9449] ksys_write+0x12b/0x250 [ 2960.587337][ T9449] ? __ia32_sys_read+0xb0/0xb0 [ 2960.592104][ T9449] ? syscall_enter_from_user_mode+0x26/0x80 [ 2960.598016][ T9449] do_syscall_64+0x39/0xb0 [ 2960.602454][ T9449] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2960.608367][ T9449] RIP: 0033:0x7f75ad68c169 [ 2960.612784][ T9449] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2960.632395][ T9449] RSP: 002b:00007f75ac1fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2960.640813][ T9449] RAX: ffffffffffffffda RBX: 00007f75ad7abf80 RCX: 00007f75ad68c169 [ 2960.648789][ T9449] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 2960.656764][ T9449] RBP: 00007f75ad6e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2960.664735][ T9449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2960.672720][ T9449] R13: 00007fff911b0e2f R14: 00007f75ac1fe300 R15: 0000000000022000 [ 2960.680730][ T9449] [ 2960.684925][ T4594] Bluetooth: hci0: command 0x0419 tx timeout [ 2960.699045][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2960.721586][ T9444] chnl_net:caif_netlink_parms(): no params data found [ 2960.739051][ T9449] memory: usage 8556kB, limit 0kB, failcnt 2313 [ 2960.745384][ T9449] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2960.753942][ T9449] Memory cgroup stats for /syz1: [ 2960.754498][ T9449] anon 114688 [ 2960.754498][ T9449] file 8331264 [ 2960.754498][ T9449] kernel 303104 [ 2960.754498][ T9449] kernel_stack 65536 [ 2960.754498][ T9449] pagetables 81920 [ 2960.754498][ T9449] sec_pagetables 0 [ 2960.754498][ T9449] percpu 64 [ 2960.754498][ T9449] sock 0 [ 2960.754498][ T9449] vmalloc 0 [ 2960.754498][ T9449] shmem 8331264 [ 2960.754498][ T9449] zswap 0 [ 2960.754498][ T9449] zswapped 0 [ 2960.754498][ T9449] file_mapped 188416 [ 2960.754498][ T9449] file_dirty 0 [ 2960.754498][ T9449] file_writeback 0 [ 2960.754498][ T9449] swapcached 0 [ 2960.754498][ T9449] anon_thp 0 [ 2960.754498][ T9449] file_thp 0 [ 2960.754498][ T9449] shmem_thp 0 [ 2960.754498][ T9449] inactive_anon 8331264 [ 2960.754498][ T9449] active_anon 114688 [ 2960.754498][ T9449] inactive_file 0 [ 2960.754498][ T9449] active_file 0 [ 2960.754498][ T9449] unevictable 0 [ 2960.754498][ T9449] slab_reclaimable 46024 [ 2960.754498][ T9449] slab_unreclaimable 81904 [ 2960.754498][ T9449] slab 127928 [ 2960.754498][ T9449] workingset_refault_anon 0 [ 2960.754498][ T9449] workingset_refault_file 0 [ 2960.754498][ T9449] workingset_activate_anon 0 [ 2960.754498][ T9449] workingset_activate_file 0 [ 2960.754498][ T9449] workingset_restore_anon 0 [ 2960.754498][ T9449] workingset_restore_file 0 [ 2960.754498][ T9449] workingset_nodereclaim 0 [ 2960.754498][ T9449] pgscan 611 [ 2960.754498][ T9449] pgsteal 60 [ 2960.754498][ T9449] pgscan_kswapd 0 [ 2960.754498][ T9449] pgscan_direct 611 [ 2960.754498][ T9449] pgscan_khugepaged 0 [ 2960.754498][ T9449] pgsteal_kswapd 0 [ 2960.754498][ T9449] pgsteal_direct 60 [ 2960.754498][ T9449] pgsteal_khugepaged 0 [ 2960.754498][ T9449] pgfault 38829 [ 2960.754498][ T9449] pgmajfault 0 [ 2960.754498][ T9449] pgrefill 1873 [ 2960.754498][ T9449] pgactivate 551 [ 2960.754498][ T9449] pgdeactivate 0 [ 2960.754498][ T9449] pglazyfree 0 [ 2960.754498][ T9449] pglazyfreed 0 [ 2960.754498][ T9449] zswpin 0 [ 2960.754498][ T9449] zswpout 0 [ 2960.754498][ T9449] thp_fault_alloc 0 [ 2960.768258][ T4594] Bluetooth: hci1: command 0x0419 tx timeout [ 2960.955655][ T7022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2960.998052][ T7022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2961.002954][ T9449] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=9448,uid=0 [ 2961.027865][ T9449] Memory cgroup out of memory: Killed process 9448 (syz-executor.1) total-vm:54548kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2961.087542][ T9406] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2961.099047][T31297] Bluetooth: hci3: command 0x0409 tx timeout [ 2961.140145][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2961.373820][ T9406] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2961.575855][ T9454] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2961.606966][ T9454] CPU: 0 PID: 9454 Comm: syz-executor.5 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2961.617341][ T9454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2961.627422][ T9454] Call Trace: [ 2961.630729][ T9454] [ 2961.633685][ T9454] dump_stack_lvl+0x136/0x150 [ 2961.638424][ T9454] dump_header+0x10a/0xd70 [ 2961.642882][ T9454] oom_kill_process+0x25d/0x600 [ 2961.647784][ T9454] out_of_memory+0x35c/0x1660 [ 2961.652504][ T9454] ? io_schedule_timeout+0x150/0x150 [ 2961.657845][ T9454] ? oom_killer_disable+0x2b0/0x2b0 [ 2961.663102][ T9454] mem_cgroup_out_of_memory+0x206/0x270 [ 2961.668761][ T9454] ? mem_cgroup_margin+0x130/0x130 [ 2961.673946][ T9454] memory_max_write+0x2f9/0x3c0 [ 2961.678851][ T9454] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2961.684981][ T9454] ? lock_sync+0x190/0x190 [ 2961.689446][ T9454] cgroup_file_write+0x1e2/0x7b0 [ 2961.694421][ T9454] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2961.700541][ T9454] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2961.705970][ T9454] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2961.711397][ T9454] kernfs_fop_write_iter+0x3f1/0x600 [ 2961.716749][ T9454] vfs_write+0x945/0xd50 [ 2961.721034][ T9454] ? kernel_write+0x670/0x670 [ 2961.725750][ T9454] ? __fget_files+0x26a/0x480 [ 2961.730501][ T9454] ksys_write+0x12b/0x250 [ 2961.734865][ T9454] ? __ia32_sys_read+0xb0/0xb0 [ 2961.739699][ T9454] ? syscall_enter_from_user_mode+0x26/0x80 [ 2961.745647][ T9454] do_syscall_64+0x39/0xb0 [ 2961.750125][ T9454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2961.756067][ T9454] RIP: 0033:0x7efc9148c169 [ 2961.760509][ T9454] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2961.780149][ T9454] RSP: 002b:00007efc92130168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2961.788622][ T9454] RAX: ffffffffffffffda RBX: 00007efc915ac050 RCX: 00007efc9148c169 [ 2961.796633][ T9454] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 2961.804644][ T9454] RBP: 00007efc914e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2961.812643][ T9454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2961.820643][ T9454] R13: 00007ffe62212c1f R14: 00007efc92130300 R15: 0000000000022000 [ 2961.828665][ T9454] [ 2961.876411][ T9454] memory: usage 10660kB, limit 0kB, failcnt 1040 [ 2961.908029][ T9454] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2961.933487][ T9454] Memory cgroup stats for /syz5: [ 2961.934771][ T5531] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2961.967852][ T9454] anon 114688 [ 2961.967852][ T9454] file 10448896 [ 2961.967852][ T9454] kernel 352256 [ 2961.967852][ T9454] kernel_stack 98304 [ 2961.967852][ T9454] pagetables 77824 [ 2961.967852][ T9454] sec_pagetables 0 [ 2961.967852][ T9454] percpu 64 [ 2961.967852][ T9454] sock 0 [ 2961.967852][ T9454] vmalloc 0 [ 2961.967852][ T9454] shmem 10448896 [ 2961.967852][ T9454] zswap 0 [ 2961.967852][ T9454] zswapped 0 [ 2961.967852][ T9454] file_mapped 278528 [ 2961.967852][ T9454] file_dirty 0 [ 2961.967852][ T9454] file_writeback 0 [ 2961.967852][ T9454] swapcached 0 [ 2961.967852][ T9454] anon_thp 0 [ 2961.967852][ T9454] file_thp 0 [ 2961.967852][ T9454] shmem_thp 0 [ 2961.967852][ T9454] inactive_anon 10448896 [ 2961.967852][ T9454] active_anon 114688 [ 2961.967852][ T9454] inactive_file 0 [ 2961.967852][ T9454] active_file 0 [ 2961.967852][ T9454] unevictable 0 [ 2961.967852][ T9454] slab_reclaimable 52296 [ 2961.967852][ T9454] slab_unreclaimable 94696 [ 2961.967852][ T9454] slab 146992 [ 2961.967852][ T9454] workingset_refault_anon 0 [ 2961.967852][ T9454] workingset_refault_file 0 [ 2961.967852][ T9454] workingset_activate_anon 0 [ 2961.967852][ T9454] workingset_activate_file 0 [ 2961.967852][ T9454] workingset_restore_anon 0 [ 2961.967852][ T9454] workingset_restore_file 0 [ 2961.967852][ T9454] workingset_nodereclaim 0 [ 2961.967852][ T9454] pgscan 716 [ 2961.967852][ T9454] pgsteal 57 [ 2961.967852][ T9454] pgscan_kswapd 0 [ 2961.967852][ T9454] pgscan_direct 716 [ 2961.967852][ T9454] pgscan_khugepaged 0 [ 2961.967852][ T9454] pgsteal_kswapd 0 [ 2961.967852][ T9454] pgsteal_direct 57 [ 2961.967852][ T9454] pgsteal_khugepaged 0 [ 2961.967852][ T9454] pgfault 82338 [ 2961.967852][ T9454] pgmajfault 0 [ 2961.967852][ T9454] pgrefill 25846 [ 2961.967852][ T9454] pgactivate 627 [ 2961.967852][ T9454] pgdeactivate 0 01:16:29 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="0008030000086d6f9f487a74dde5e9fac9f9513154ffb3ff030000f56c8374cbe5d99a130e1f636709e048decbe24bb592299846d7bbad3fc61f86a3798700eb2129cf607c223e4b8c7f1687f6d8df1da48cd67815f62156cf2bb02394b3d16f825976c0b0c36e2db48ade28fe642efb21f16681cd5aeebd2341f5c6ab1ecf05adb78fff44"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) [ 2961.967852][ T9454] pglazyfree 0 [ 2961.967852][ T9454] pglazyfreed 0 [ 2961.967852][ T9454] zswpin 0 [ 2961.967852][ T9454] zswpout 0 [ 2961.967852][ T9454] thp_fault_alloc 0 [ 2962.158135][ T9454] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=9165,uid=0 [ 2962.183211][ T9454] Memory cgroup out of memory: Killed process 9165 (syz-executor.5) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2962.213904][ T9171] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2962.224946][ T9406] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2962.232769][ T9171] CPU: 0 PID: 9171 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2962.245551][ T9171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2962.255624][ T9171] Call Trace: [ 2962.258929][ T9171] [ 2962.261878][ T9171] dump_stack_lvl+0x136/0x150 [ 2962.266593][ T9171] dump_header+0x10a/0xd70 [ 2962.271026][ T9171] oom_kill_process+0x25d/0x600 [ 2962.275895][ T9171] out_of_memory+0x35c/0x1660 [ 2962.280595][ T9171] ? oom_killer_disable+0x2b0/0x2b0 [ 2962.285809][ T9171] ? rcu_read_unlock+0x9/0x60 [ 2962.290510][ T9171] ? find_held_lock+0x2d/0x110 [ 2962.295309][ T9171] mem_cgroup_out_of_memory+0x206/0x270 [ 2962.300882][ T9171] ? mem_cgroup_margin+0x130/0x130 [ 2962.306020][ T9171] ? lock_downgrade+0x690/0x690 [ 2962.310911][ T9171] try_charge_memcg+0xf99/0x13a0 [ 2962.315881][ T9171] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2962.321892][ T9171] ? rcu_read_unlock+0x9/0x60 [ 2962.326583][ T9171] ? lock_downgrade+0x690/0x690 [ 2962.331469][ T9171] charge_memcg+0x90/0x3b0 [ 2962.335913][ T9171] __mem_cgroup_charge+0x2b/0x90 [ 2962.340866][ T9171] __handle_mm_fault+0x2296/0x41c0 [ 2962.345996][ T9171] ? vm_iomap_memory+0x190/0x190 [ 2962.350946][ T9171] ? mas_walk+0x58f/0x730 [ 2962.355319][ T9171] ? numa_migrate_prep+0x3a0/0x3a0 [ 2962.360445][ T9171] ? do_user_addr_fault+0x367/0x1210 [ 2962.365762][ T9171] handle_mm_fault+0x2af/0x9f0 [ 2962.370544][ T9171] do_user_addr_fault+0x2ca/0x1210 [ 2962.375674][ T9171] ? rcu_is_watching+0x12/0xb0 [ 2962.380466][ T9171] exc_page_fault+0x98/0x170 [ 2962.385073][ T9171] asm_exc_page_fault+0x26/0x30 [ 2962.389948][ T9171] RIP: 0033:0x7fac9a25a875 [ 2962.394370][ T9171] Code: e8 4b 8d 0c 2f 48 8b 6c 24 18 48 39 d3 48 89 4b 60 0f 95 c2 48 83 c8 01 0f b6 d2 48 c1 e2 02 4c 09 ea 48 83 ca 01 49 89 57 08 <48> 89 41 08 49 83 c7 10 eb b3 48 8d 3d aa 12 0a 00 e8 75 c9 ff ff [ 2962.413987][ T9171] RSP: 002b:00007ffdc51a6af0 EFLAGS: 00010206 [ 2962.420063][ T9171] RAX: 00000000000187c1 RBX: 00007fac9a3895e0 RCX: 0000555557185840 [ 2962.428041][ T9171] RDX: 0000000000008041 RSI: 0000000000000000 RDI: 0000000000000004 [ 2962.436032][ T9171] RBP: 0000000000008030 R08: 0000000000000003 R09: 00007fac9a389640 [ 2962.444013][ T9171] R10: 0000000000000231 R11: 0000000000000000 R12: 0000000000000802 [ 2962.451992][ T9171] R13: 0000000000008040 R14: 0000000000000804 R15: 000055555717d800 [ 2962.459990][ T9171] [ 2962.541652][ T9171] memory: usage 10312kB, limit 0kB, failcnt 1897 [ 2962.553900][ T9171] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2962.560881][ T9171] Memory cgroup stats for /syz2: [ 2962.561100][ T9171] anon 32768 [ 2962.561100][ T9171] file 10416128 [ 2962.561100][ T9171] kernel 94208 [ 2962.561100][ T9171] kernel_stack 0 [ 2962.561100][ T9171] pagetables 8192 [ 2962.561100][ T9171] sec_pagetables 0 [ 2962.561100][ T9171] percpu 0 [ 2962.561100][ T9171] sock 0 [ 2962.561100][ T9171] vmalloc 0 [ 2962.561100][ T9171] shmem 10416128 [ 2962.561100][ T9171] zswap 0 [ 2962.561100][ T9171] zswapped 0 [ 2962.561100][ T9171] file_mapped 176128 [ 2962.561100][ T9171] file_dirty 0 [ 2962.561100][ T9171] file_writeback 0 [ 2962.561100][ T9171] swapcached 0 [ 2962.561100][ T9171] anon_thp 0 [ 2962.561100][ T9171] file_thp 0 [ 2962.561100][ T9171] shmem_thp 0 [ 2962.561100][ T9171] inactive_anon 0 [ 2962.561100][ T9171] active_anon 10448896 [ 2962.561100][ T9171] inactive_file 0 [ 2962.561100][ T9171] active_file 0 [ 2962.561100][ T9171] unevictable 0 [ 2962.561100][ T9171] slab_reclaimable 43240 [ 2962.561100][ T9171] slab_unreclaimable 32944 [ 2962.561100][ T9171] slab 76184 [ 2962.561100][ T9171] workingset_refault_anon 0 [ 2962.561100][ T9171] workingset_refault_file 0 [ 2962.561100][ T9171] workingset_activate_anon 0 [ 2962.561100][ T9171] workingset_activate_file 0 [ 2962.561100][ T9171] workingset_restore_anon 0 [ 2962.561100][ T9171] workingset_restore_file 0 [ 2962.561100][ T9171] workingset_nodereclaim 0 [ 2962.561100][ T9171] pgscan 172 [ 2962.561100][ T9171] pgsteal 52 [ 2962.561100][ T9171] pgscan_kswapd 0 [ 2962.561100][ T9171] pgscan_direct 172 [ 2962.561100][ T9171] pgscan_khugepaged 0 [ 2962.561100][ T9171] pgsteal_kswapd 0 [ 2962.561100][ T9171] pgsteal_direct 52 [ 2962.561100][ T9171] pgsteal_khugepaged 0 [ 2962.561100][ T9171] pgfault 55579 [ 2962.561100][ T9171] pgmajfault 0 [ 2962.561100][ T9171] pgrefill 20570 [ 2962.561100][ T9171] pgactivate 120 [ 2962.561100][ T9171] pgdeactivate 0 [ 2962.561100][ T9171] pglazyfree 0 [ 2962.561100][ T9171] pglazyfreed 0 [ 2962.561100][ T9171] zswpin 0 [ 2962.561100][ T9171] zswpout 0 [ 2962.561100][ T9171] thp_fault_alloc 0 [ 2962.755978][ T9171] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=9171,uid=0 [ 2962.781760][ T9171] Memory cgroup out of memory: Killed process 9171 (syz-executor.2) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2962.799653][ T5531] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2962.900936][ T9406] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2962.935701][ T9444] bridge0: port 1(bridge_slave_0) entered blocking state [ 2962.946312][ T9444] bridge0: port 1(bridge_slave_0) entered disabled state [ 2962.960333][ T9444] bridge_slave_0: entered allmulticast mode [ 2962.967299][ T9444] bridge_slave_0: entered promiscuous mode [ 2963.057334][ T5531] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2963.081489][ T9444] bridge0: port 2(bridge_slave_1) entered blocking state [ 2963.097400][ T9444] bridge0: port 2(bridge_slave_1) entered disabled state 01:16:30 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) 01:16:30 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x80, 0x7d, 0x0, 0x8, 0x0, 0x0, 0x1080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x78, 0x2, @perf_config_ext={0x4, 0x1}, 0x10010, 0x1, 0xffffff05, 0x9, 0xc00, 0x8000, 0x7, 0x0, 0x7, 0x0, 0x2b4d0000000}, r1, 0x5, r5, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r4, &(0x7f0000000180), 0x12) [ 2963.106336][ T9444] bridge_slave_1: entered allmulticast mode [ 2963.132617][ T9174] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 2963.150745][ T9444] bridge_slave_1: entered promiscuous mode [ 2963.159545][ T9174] CPU: 1 PID: 9174 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2963.168519][T31297] Bluetooth: hci3: command 0x041b tx timeout [ 2963.169893][ T9174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2963.185948][ T9174] Call Trace: [ 2963.189242][ T9174] [ 2963.192194][ T9174] dump_stack_lvl+0x136/0x150 [ 2963.196941][ T9174] dump_header+0x10a/0xd70 [ 2963.201390][ T9174] oom_kill_process+0x25d/0x600 [ 2963.206256][ T9174] out_of_memory+0x35c/0x1660 [ 2963.210948][ T9174] ? find_held_lock+0x2d/0x110 [ 2963.215729][ T9174] ? oom_killer_disable+0x2b0/0x2b0 [ 2963.220939][ T9174] ? rcu_read_unlock+0x9/0x60 [ 2963.225636][ T9174] ? find_held_lock+0x2d/0x110 [ 2963.230421][ T9174] mem_cgroup_out_of_memory+0x206/0x270 [ 2963.235989][ T9174] ? mem_cgroup_margin+0x130/0x130 [ 2963.241123][ T9174] ? lock_downgrade+0x690/0x690 [ 2963.246006][ T9174] try_charge_memcg+0xf99/0x13a0 [ 2963.250977][ T9174] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2963.256981][ T9174] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2963.262723][ T9174] ? lock_downgrade+0x690/0x690 [ 2963.267594][ T9174] ? lock_downgrade+0x690/0x690 [ 2963.272468][ T9174] ? rcu_read_unlock+0x9/0x60 [ 2963.277184][ T9174] obj_cgroup_charge+0x2af/0x5e0 [ 2963.282150][ T9174] ? copy_process+0x3c0/0x7600 [ 2963.286930][ T9174] kmem_cache_alloc_node+0xa8/0x3e0 [ 2963.292152][ T9174] copy_process+0x3c0/0x7600 [ 2963.296765][ T9174] ? _raw_spin_unlock+0x28/0x40 [ 2963.301643][ T9174] ? wp_page_reuse+0x197/0x570 [ 2963.306440][ T9174] ? pidfd_prepare+0x80/0x80 [ 2963.311061][ T9174] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2963.317081][ T9174] kernel_clone+0xeb/0x890 [ 2963.321528][ T9174] ? create_io_thread+0xe0/0xe0 [ 2963.326398][ T9174] ? do_user_addr_fault+0x2b1/0x1210 [ 2963.331701][ T9174] ? reacquire_held_locks+0x216/0x4e0 [ 2963.337091][ T9174] ? do_user_addr_fault+0x2b1/0x1210 [ 2963.342408][ T9174] ? find_held_lock+0x2d/0x110 [ 2963.347197][ T9174] __do_sys_clone+0xba/0x100 [ 2963.351807][ T9174] ? kernel_clone+0x890/0x890 [ 2963.356516][ T9174] ? syscall_enter_from_user_mode+0x26/0x80 [ 2963.362433][ T9174] do_syscall_64+0x39/0xb0 [ 2963.366877][ T9174] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2963.372791][ T9174] RIP: 0033:0x7f75ad689e9b [ 2963.377213][ T9174] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2963.396829][ T9174] RSP: 002b:00007fff911b1070 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2963.405256][ T9174] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f75ad689e9b [ 2963.413235][ T9174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2963.421210][ T9174] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555569c8400 01:16:31 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="0008030000086d6f9f487a74dde5e9fac9f9513154ffb3ff030000f56c8374cbe5d99a130e1f636709e048decbe24bb592299846d7bbad3fc61f86a3798700eb2129cf607c223e4b8c7f1687f6d8df1da48cd67815f62156cf2bb02394b3d16f825976c0b0c36e2db48ade28fe642efb21f16681cd5aeebd2341f5c6ab1ecf05adb78fff44"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) [ 2963.429186][ T9174] R10: 00005555569c86d0 R11: 0000000000000246 R12: 0000000000000001 [ 2963.437161][ T9174] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff911b1150 [ 2963.445157][ T9174] [ 2963.491078][ T9174] memory: usage 8264kB, limit 0kB, failcnt 2332 [ 2963.497364][ T9174] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2963.507315][ T9444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2963.537086][ T9174] Memory cgroup stats for /syz1: [ 2963.537316][ T9174] anon 45056 [ 2963.537316][ T9174] file 8331264 [ 2963.537316][ T9174] kernel 81920 [ 2963.537316][ T9174] kernel_stack 0 [ 2963.537316][ T9174] pagetables 8192 [ 2963.537316][ T9174] sec_pagetables 0 [ 2963.537316][ T9174] percpu 0 [ 2963.537316][ T9174] sock 0 [ 2963.537316][ T9174] vmalloc 0 [ 2963.537316][ T9174] shmem 8331264 [ 2963.537316][ T9174] zswap 0 [ 2963.537316][ T9174] zswapped 0 [ 2963.537316][ T9174] file_mapped 176128 [ 2963.537316][ T9174] file_dirty 0 [ 2963.537316][ T9174] file_writeback 0 [ 2963.537316][ T9174] swapcached 0 [ 2963.537316][ T9174] anon_thp 0 [ 2963.537316][ T9174] file_thp 0 [ 2963.537316][ T9174] shmem_thp 0 [ 2963.537316][ T9174] inactive_anon 8331264 [ 2963.537316][ T9174] active_anon 45056 [ 2963.537316][ T9174] inactive_file 0 [ 2963.537316][ T9174] active_file 0 [ 2963.537316][ T9174] unevictable 0 [ 2963.537316][ T9174] slab_reclaimable 29888 [ 2963.537316][ T9174] slab_unreclaimable 32296 [ 2963.537316][ T9174] slab 62184 [ 2963.537316][ T9174] workingset_refault_anon 0 [ 2963.537316][ T9174] workingset_refault_file 0 [ 2963.537316][ T9174] workingset_activate_anon 0 [ 2963.537316][ T9174] workingset_activate_file 0 [ 2963.537316][ T9174] workingset_restore_anon 0 [ 2963.537316][ T9174] workingset_restore_file 0 [ 2963.537316][ T9174] workingset_nodereclaim 0 [ 2963.537316][ T9174] pgscan 611 [ 2963.537316][ T9174] pgsteal 60 [ 2963.537316][ T9174] pgscan_kswapd 0 [ 2963.537316][ T9174] pgscan_direct 611 [ 2963.537316][ T9174] pgscan_khugepaged 0 [ 2963.537316][ T9174] pgsteal_kswapd 0 [ 2963.537316][ T9174] pgsteal_direct 60 [ 2963.537316][ T9174] pgsteal_khugepaged 0 [ 2963.537316][ T9174] pgfault 38840 [ 2963.537316][ T9174] pgmajfault 0 [ 2963.537316][ T9174] pgrefill 1873 [ 2963.537316][ T9174] pgactivate 551 [ 2963.537316][ T9174] pgdeactivate 0 [ 2963.537316][ T9174] pglazyfree 0 [ 2963.537316][ T9174] pglazyfreed 0 [ 2963.537316][ T9174] zswpin 0 [ 2963.537316][ T9174] zswpout 0 [ 2963.537316][ T9174] thp_fault_alloc 0 01:16:31 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) [ 2963.791988][ T5531] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2963.872360][ T9444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 01:16:31 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="0008030000086d6f9f487a74dde5e9fac9f9513154ffb3ff030000f56c8374cbe5d99a130e1f636709e048decbe24bb592299846d7bbad3fc61f86a3798700eb2129cf607c223e4b8c7f1687f6d8df1da48cd67815f62156cf2bb02394b3d16f825976c0b0c36e2db48ade28fe642efb21f16681cd5aeebd2341f5c6ab1ecf05adb78fff44"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) [ 2964.013564][ T9444] team0: Port device team_slave_0 added [ 2964.062522][ T9444] team0: Port device team_slave_1 added [ 2964.121317][ T1217] ieee802154 phy0 wpan0: encryption failed: -22 [ 2964.127684][ T1217] ieee802154 phy1 wpan1: encryption failed: -22 [ 2964.138306][ T9174] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=9174,uid=0 [ 2964.178273][ T9174] Memory cgroup out of memory: Killed process 9174 (syz-executor.1) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2964.222035][ T9444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2964.248295][ T9444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2964.338939][ T9444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2964.400837][ T9408] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2964.555454][ T9444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2964.578340][ T9444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 01:16:32 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, r1, 0x5, r5, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r4, &(0x7f0000000180), 0x12) [ 2964.686749][ T9444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2964.720878][ T9408] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2964.831288][ T9408] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2964.907973][ T9408] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2965.044479][ T9444] hsr_slave_0: entered promiscuous mode [ 2965.056555][ T9444] hsr_slave_1: entered promiscuous mode [ 2965.062886][ T9444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2965.072856][ T9444] Cannot create hsr debugfs directory [ 2965.086189][ T9406] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2965.155494][ T9406] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2965.200330][ T9406] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2965.209297][ T9406] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2965.238467][ T4594] Bluetooth: hci3: command 0x040f tx timeout [ 2965.354156][ T9408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2965.420181][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2965.435309][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2965.472512][ T9406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2965.483383][ T9408] 8021q: adding VLAN 0 to HW filter on device team0 [ 2965.539938][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2965.549726][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2965.559587][ T8373] bridge0: port 1(bridge_slave_0) entered blocking state [ 2965.566715][ T8373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2965.576722][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2965.599751][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2965.619124][ T8373] bridge0: port 2(bridge_slave_1) entered blocking state [ 2965.626230][ T8373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2965.648576][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2965.703471][ T9406] 8021q: adding VLAN 0 to HW filter on device team0 [ 2965.715215][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2965.724495][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2965.748866][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2965.756657][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2965.953353][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2965.969657][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2965.986121][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2966.008155][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2966.017217][T31297] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2966.017590][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2966.038043][T31297] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2966.046357][T31297] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2966.046991][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2966.063239][T31297] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2966.070926][T31297] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2966.078144][T31297] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2966.128139][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2966.169028][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2966.207580][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2966.238690][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2966.247131][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 2966.254286][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2966.308715][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2966.317312][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2966.338721][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 2966.345813][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2966.368592][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2966.380627][ T9408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2966.501838][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2966.521003][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2966.558731][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2966.579067][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2966.608753][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2966.689199][ T4594] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2966.702536][ T4594] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2966.711362][ T4594] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2966.723283][ T4594] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2966.730938][ T4594] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2966.738365][ T4594] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2966.804323][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2966.813668][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2966.822740][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2966.832693][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2966.841772][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2966.850305][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2966.858973][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2966.880682][ T9406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2967.195065][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2967.202783][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2967.280419][ T9408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2967.319411][ T4594] Bluetooth: hci3: command 0x0419 tx timeout [ 2967.378481][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2967.398875][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2967.603581][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2967.616230][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2967.704816][ T9408] veth0_vlan: entered promiscuous mode [ 2967.778621][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2967.786470][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2967.820468][ T9444] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2967.832548][ T9444] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2967.856095][ T9444] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2967.881403][ T9408] veth1_vlan: entered promiscuous mode [ 2967.898434][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2967.906537][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2967.916503][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2967.924703][ T9444] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2967.991932][ T9406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2968.004049][ T9480] chnl_net:caif_netlink_parms(): no params data found [ 2968.031477][ T9473] chnl_net:caif_netlink_parms(): no params data found [ 2968.084051][ T9408] veth0_macvtap: entered promiscuous mode [ 2968.118313][T31297] Bluetooth: hci2: command 0x0409 tx timeout [ 2968.141869][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2968.152187][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2968.161228][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2968.251094][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2968.262146][ T9408] veth1_macvtap: entered promiscuous mode [ 2968.314078][ T5531] hsr_slave_0: left promiscuous mode [ 2968.339235][ T5531] hsr_slave_1: left promiscuous mode [ 2968.345140][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2968.371327][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2968.402735][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2968.417736][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2968.438575][ T5531] bridge_slave_1: left allmulticast mode [ 2968.444247][ T5531] bridge_slave_1: left promiscuous mode [ 2968.463411][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 2968.487353][ T5531] bridge_slave_0: left allmulticast mode [ 2968.505711][ T5531] bridge_slave_0: left promiscuous mode [ 2968.516177][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 2968.544598][ T5531] hsr_slave_0: left promiscuous mode [ 2968.559109][ T5531] hsr_slave_1: left promiscuous mode [ 2968.576706][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2968.587597][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2968.611082][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2968.628327][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2968.649712][ T5531] bridge_slave_1: left allmulticast mode [ 2968.656011][ T5531] bridge_slave_1: left promiscuous mode [ 2968.674439][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 2968.690021][ T5531] bridge_slave_0: left allmulticast mode [ 2968.695693][ T5531] bridge_slave_0: left promiscuous mode [ 2968.715556][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 2968.743381][ T5531] hsr_slave_0: left promiscuous mode [ 2968.750582][ T5531] hsr_slave_1: left promiscuous mode [ 2968.756543][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2968.768784][T31297] Bluetooth: hci4: command 0x0409 tx timeout [ 2968.769884][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2968.784676][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2968.792244][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2968.807363][ T5531] bridge_slave_1: left allmulticast mode [ 2968.814362][ T5531] bridge_slave_1: left promiscuous mode [ 2968.820165][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 2968.829286][ T5531] bridge_slave_0: left allmulticast mode [ 2968.834954][ T5531] bridge_slave_0: left promiscuous mode [ 2968.841768][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 2968.862810][ T5531] veth1_macvtap: left promiscuous mode [ 2968.868598][ T5531] veth0_macvtap: left promiscuous mode [ 2968.874197][ T5531] veth1_vlan: left promiscuous mode [ 2968.879930][ T5531] veth0_vlan: left promiscuous mode [ 2968.886220][ T5531] veth1_macvtap: left promiscuous mode [ 2968.892052][ T5531] veth0_macvtap: left promiscuous mode [ 2968.897670][ T5531] veth1_vlan: left promiscuous mode [ 2968.903278][ T5531] veth0_vlan: left promiscuous mode [ 2968.910415][ T5531] veth1_macvtap: left promiscuous mode [ 2968.915940][ T5531] veth0_macvtap: left promiscuous mode [ 2968.924578][ T5531] veth1_vlan: left promiscuous mode [ 2968.936390][ T5531] veth0_vlan: left promiscuous mode [ 2969.354978][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 2969.376929][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 2969.391431][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2969.411991][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2969.485312][ T5531] bond0 (unregistering): Released all slaves [ 2969.653683][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 2969.673938][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 2969.686216][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2969.702388][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2969.776717][ T5531] bond0 (unregistering): Released all slaves [ 2969.917858][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 2969.931761][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 2969.944814][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2969.961732][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2970.040420][ T5531] bond0 (unregistering): Released all slaves [ 2970.120035][ T9480] bridge0: port 1(bridge_slave_0) entered blocking state [ 2970.127212][ T9480] bridge0: port 1(bridge_slave_0) entered disabled state [ 2970.134729][ T9480] bridge_slave_0: entered allmulticast mode [ 2970.141938][ T9480] bridge_slave_0: entered promiscuous mode [ 2970.166967][ T9408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2970.178053][ T9408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2970.187995][ T9408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2970.198488][ T4594] Bluetooth: hci2: command 0x041b tx timeout [ 2970.206376][ T9408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2970.218280][ T9408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2970.228825][ T9408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2970.240144][ T9408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2970.252526][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2970.260748][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2970.269532][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2970.279140][ T9480] bridge0: port 2(bridge_slave_1) entered blocking state [ 2970.286231][ T9480] bridge0: port 2(bridge_slave_1) entered disabled state [ 2970.295076][ T9480] bridge_slave_1: entered allmulticast mode [ 2970.302308][ T9480] bridge_slave_1: entered promiscuous mode [ 2970.349351][ T9408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2970.360494][ T9408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2970.370739][ T9408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2970.381262][ T9408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2970.391120][ T9408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2970.402478][ T9408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2970.413784][ T9408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2970.432075][ T9473] bridge0: port 1(bridge_slave_0) entered blocking state [ 2970.443075][ T9473] bridge0: port 1(bridge_slave_0) entered disabled state [ 2970.450644][ T9473] bridge_slave_0: entered allmulticast mode [ 2970.457312][ T9473] bridge_slave_0: entered promiscuous mode [ 2970.465600][ T9473] bridge0: port 2(bridge_slave_1) entered blocking state [ 2970.472955][ T9473] bridge0: port 2(bridge_slave_1) entered disabled state [ 2970.480608][ T9473] bridge_slave_1: entered allmulticast mode [ 2970.487242][ T9473] bridge_slave_1: entered promiscuous mode [ 2970.494529][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2970.504678][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2970.527059][ T9408] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2970.538931][ T9408] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2970.547857][ T9408] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2970.557619][ T9408] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2970.581392][ T9480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2970.604693][ T9480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2970.670437][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2970.679408][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2970.747210][ T9444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2970.768633][ T9473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2970.836643][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2970.848420][T31297] Bluetooth: hci4: command 0x041b tx timeout [ 2970.855905][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2970.880052][ T9406] veth0_vlan: entered promiscuous mode [ 2970.910779][ T9444] 8021q: adding VLAN 0 to HW filter on device team0 [ 2970.927676][ T9480] team0: Port device team_slave_0 added [ 2970.938674][ T9473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2970.956418][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2970.978326][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2970.986395][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2970.999298][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2971.022441][ T9406] veth1_vlan: entered promiscuous mode [ 2971.035852][ T9480] team0: Port device team_slave_1 added [ 2971.087273][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2971.096602][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2971.115067][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2971.123855][T31388] bridge0: port 1(bridge_slave_0) entered blocking state [ 2971.131048][T31388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2971.139077][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2971.147869][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2971.156663][T31388] bridge0: port 2(bridge_slave_1) entered blocking state [ 2971.163852][T31388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2971.175434][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2971.238834][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2971.247104][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2971.275482][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2971.295714][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2971.316005][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2971.331326][ T9473] team0: Port device team_slave_0 added [ 2971.354311][ T9480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2971.358202][ T5541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2971.368312][ T9480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2971.378720][ T5541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2971.402718][ T9480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2971.416981][ T9444] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2971.459464][ T9444] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2971.474418][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2971.493933][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2971.511888][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2971.520822][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2971.529978][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2971.538863][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2971.547249][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2971.555871][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2971.565652][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2971.574299][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2971.585926][ T9406] veth0_macvtap: entered promiscuous mode [ 2971.596403][ T9473] team0: Port device team_slave_1 added [ 2971.606916][ T9480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2971.614253][ T9480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2971.640970][ T9480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2971.662398][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2971.670982][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2971.683433][ T9406] veth1_macvtap: entered promiscuous mode [ 2971.747374][ T9406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2971.758481][ T9406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2971.768741][ T9406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2971.790964][ T9406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2971.816556][ T9406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2971.827336][ T9406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2971.838480][ T9406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2971.849117][ T9406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2971.867525][ T9406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2971.906142][ T9480] hsr_slave_0: entered promiscuous mode [ 2971.915273][ T9480] hsr_slave_1: entered promiscuous mode [ 2971.921959][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2971.933429][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2971.945394][ T9406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2971.949785][ T9423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2971.962459][ T9406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2971.978280][ T9423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2971.997603][ T9406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2972.022341][ T9406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2972.042360][ T9406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2972.053090][ T9406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2972.063230][ T9406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2972.073961][ T9406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2972.085094][ T9406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2972.093188][ T9473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2972.100252][ T9473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2972.126977][ T9473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2972.156011][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2972.171425][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2972.186846][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2972.209579][ T9406] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2972.219467][ T9406] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2972.228367][ T9406] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2972.237096][ T9406] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2972.252130][ T9473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2972.263341][ T9473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2972.290132][T31297] Bluetooth: hci2: command 0x040f tx timeout [ 2972.296608][ T9473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2972.353775][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2972.363170][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2972.373856][ T9444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2972.499642][ T9473] hsr_slave_0: entered promiscuous mode [ 2972.509098][ T9473] hsr_slave_1: entered promiscuous mode [ 2972.516501][ T9473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2972.533382][ T9473] Cannot create hsr debugfs directory [ 2972.620911][ T9553] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2972.634749][ T9553] CPU: 1 PID: 9553 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2972.645122][ T9553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2972.655228][ T9553] Call Trace: [ 2972.658526][ T9553] [ 2972.661478][ T9553] dump_stack_lvl+0x136/0x150 [ 2972.666209][ T9553] dump_header+0x10a/0xd70 [ 2972.670664][ T9553] oom_kill_process+0x25d/0x600 [ 2972.675548][ T9553] out_of_memory+0x35c/0x1660 [ 2972.680260][ T9553] ? io_schedule_timeout+0x150/0x150 [ 2972.685587][ T9553] ? oom_killer_disable+0x2b0/0x2b0 [ 2972.690823][ T9553] mem_cgroup_out_of_memory+0x206/0x270 [ 2972.696396][ T9553] ? mem_cgroup_margin+0x130/0x130 [ 2972.701549][ T9553] memory_max_write+0x2f9/0x3c0 [ 2972.706428][ T9553] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2972.712527][ T9553] ? mark_held_locks+0x9f/0xe0 [ 2972.717318][ T9553] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2972.723506][ T9553] cgroup_file_write+0x1e2/0x7b0 [ 2972.728463][ T9553] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2972.734558][ T9553] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2972.739958][ T9553] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2972.745348][ T9553] kernfs_fop_write_iter+0x3f1/0x600 [ 2972.750670][ T9553] vfs_write+0x945/0xd50 [ 2972.754936][ T9553] ? kernel_write+0x670/0x670 [ 2972.759630][ T9553] ? lockdep_hardirqs_on+0x7d/0x100 [ 2972.764852][ T9553] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2972.771051][ T9553] ksys_write+0x12b/0x250 [ 2972.775392][ T9553] ? __ia32_sys_read+0xb0/0xb0 [ 2972.780173][ T9553] ? syscall_enter_from_user_mode+0x30/0x80 [ 2972.786094][ T9553] do_syscall_64+0x39/0xb0 [ 2972.790538][ T9553] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2972.796455][ T9553] RIP: 0033:0x7f506048c169 [ 2972.800882][ T9553] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2972.820501][ T9553] RSP: 002b:00007f506125d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2972.828931][ T9553] RAX: ffffffffffffffda RBX: 00007f50605ac050 RCX: 00007f506048c169 [ 2972.836915][ T9553] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 2972.844896][ T9553] RBP: 00007f50604e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2972.852878][ T9553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2972.860866][ T9553] R13: 00007ffebb4f415f R14: 00007f506125d300 R15: 0000000000022000 [ 2972.868868][ T9553] [ 2972.916867][ T9553] memory: usage 10716kB, limit 0kB, failcnt 990 [ 2972.919281][T31297] Bluetooth: hci4: command 0x040f tx timeout [ 2972.929558][ T9553] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2972.937748][ T9553] Memory cgroup stats for /syz3: [ 2972.961145][ T9553] anon 118784 [ 2972.961145][ T9553] file 10452992 [ 2972.961145][ T9553] kernel 385024 [ 2972.961145][ T9553] kernel_stack 98304 [ 2972.961145][ T9553] pagetables 81920 [ 2972.961145][ T9553] sec_pagetables 0 [ 2972.961145][ T9553] percpu 64 [ 2972.961145][ T9553] sock 0 [ 2972.961145][ T9553] vmalloc 0 [ 2972.961145][ T9553] shmem 10452992 [ 2972.961145][ T9553] zswap 0 [ 2972.961145][ T9553] zswapped 0 [ 2972.961145][ T9553] file_mapped 344064 [ 2972.961145][ T9553] file_dirty 0 [ 2972.961145][ T9553] file_writeback 0 [ 2972.961145][ T9553] swapcached 0 [ 2972.961145][ T9553] anon_thp 0 [ 2972.961145][ T9553] file_thp 0 [ 2972.961145][ T9553] shmem_thp 0 [ 2972.961145][ T9553] inactive_anon 0 [ 2972.961145][ T9553] active_anon 10571776 [ 2972.961145][ T9553] inactive_file 0 [ 2972.961145][ T9553] active_file 0 [ 2972.961145][ T9553] unevictable 0 [ 2972.961145][ T9553] slab_reclaimable 52360 [ 2972.961145][ T9553] slab_unreclaimable 122704 [ 2972.961145][ T9553] slab 175064 [ 2972.961145][ T9553] workingset_refault_anon 0 [ 2972.961145][ T9553] workingset_refault_file 0 [ 2972.961145][ T9553] workingset_activate_anon 0 [ 2972.961145][ T9553] workingset_activate_file 0 [ 2972.961145][ T9553] workingset_restore_anon 0 [ 2972.961145][ T9553] workingset_restore_file 0 [ 2972.961145][ T9553] workingset_nodereclaim 0 [ 2972.961145][ T9553] pgscan 316 [ 2972.961145][ T9553] pgsteal 81 [ 2972.961145][ T9553] pgscan_kswapd 0 [ 2972.961145][ T9553] pgscan_direct 316 [ 2972.961145][ T9553] pgscan_khugepaged 0 [ 2972.961145][ T9553] pgsteal_kswapd 0 [ 2972.961145][ T9553] pgsteal_direct 81 [ 2972.961145][ T9553] pgsteal_khugepaged 0 [ 2972.961145][ T9553] pgfault 61414 [ 2972.961145][ T9553] pgmajfault 0 [ 2972.961145][ T9553] pgrefill 914 [ 2972.961145][ T9553] pgactivate 235 [ 2972.961145][ T9553] pgdeactivate 0 [ 2972.961145][ T9553] pglazyfree 0 [ 2972.961145][ T9553] pglazyfreed 0 [ 2972.961145][ T9553] zswpin 0 [ 2972.961145][ T9553] zswpout 0 [ 2972.961145][ T9553] thp_fault_alloc 0 [ 2972.997631][ T9444] veth0_vlan: entered promiscuous mode [ 2973.181825][ T9553] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=9408,uid=0 [ 2973.199584][ T9553] Memory cgroup out of memory: Killed process 9408 (syz-executor.3) total-vm:50576kB, anon-rss:360kB, file-rss:8992kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2973.243913][ T9553] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2973.255153][ T9553] CPU: 1 PID: 9553 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2973.265513][ T9553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2973.275590][ T9553] Call Trace: [ 2973.278889][ T9553] [ 2973.281839][ T9553] dump_stack_lvl+0x136/0x150 [ 2973.286566][ T9553] dump_header+0x10a/0xd70 [ 2973.291016][ T9553] oom_kill_process+0x25d/0x600 [ 2973.295904][ T9553] out_of_memory+0x35c/0x1660 [ 2973.300609][ T9553] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2973.306817][ T9553] ? oom_killer_disable+0x2b0/0x2b0 [ 2973.312056][ T9553] ? mem_cgroup_margin+0x1b/0x130 [ 2973.317131][ T9553] ? mem_cgroup_margin+0x44/0x130 [ 2973.322181][ T9553] mem_cgroup_out_of_memory+0x206/0x270 [ 2973.327775][ T9553] ? mem_cgroup_margin+0x130/0x130 [ 2973.332916][ T9553] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2973.338768][ T9553] memory_max_write+0x2f9/0x3c0 [ 2973.343647][ T9553] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2973.349745][ T9553] ? mark_held_locks+0x9f/0xe0 [ 2973.354559][ T9553] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2973.360799][ T9553] cgroup_file_write+0x1e2/0x7b0 [ 2973.365788][ T9553] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2973.371890][ T9553] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2973.377303][ T9553] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2973.382702][ T9553] kernfs_fop_write_iter+0x3f1/0x600 [ 2973.388030][ T9553] vfs_write+0x945/0xd50 [ 2973.392302][ T9553] ? kernel_write+0x670/0x670 [ 2973.397002][ T9553] ? lockdep_hardirqs_on+0x7d/0x100 [ 2973.402228][ T9553] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2973.408426][ T9553] ksys_write+0x12b/0x250 [ 2973.412766][ T9553] ? __ia32_sys_read+0xb0/0xb0 [ 2973.417544][ T9553] ? syscall_enter_from_user_mode+0x30/0x80 [ 2973.423459][ T9553] do_syscall_64+0x39/0xb0 [ 2973.427905][ T9553] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2973.433827][ T9553] RIP: 0033:0x7f506048c169 [ 2973.438256][ T9553] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2973.457892][ T9553] RSP: 002b:00007f506125d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2973.466318][ T9553] RAX: ffffffffffffffda RBX: 00007f50605ac050 RCX: 00007f506048c169 [ 2973.474300][ T9553] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 2973.482281][ T9553] RBP: 00007f50604e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2973.490272][ T9553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2973.498287][ T9553] R13: 00007ffebb4f415f R14: 00007f506125d300 R15: 0000000000022000 [ 2973.506290][ T9553] [ 2973.519653][ T9553] memory: usage 10684kB, limit 0kB, failcnt 990 [ 2973.526212][ T9553] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2973.534342][ T9553] Memory cgroup stats for /syz3: [ 2973.535990][ T9553] anon 118784 [ 2973.535990][ T9553] file 10452992 [ 2973.535990][ T9553] kernel 385024 [ 2973.535990][ T9553] kernel_stack 98304 [ 2973.535990][ T9553] pagetables 81920 [ 2973.535990][ T9553] sec_pagetables 0 [ 2973.535990][ T9553] percpu 64 [ 2973.535990][ T9553] sock 0 [ 2973.535990][ T9553] vmalloc 0 [ 2973.535990][ T9553] shmem 10452992 [ 2973.535990][ T9553] zswap 0 [ 2973.535990][ T9553] zswapped 0 [ 2973.535990][ T9553] file_mapped 344064 [ 2973.535990][ T9553] file_dirty 0 [ 2973.535990][ T9553] file_writeback 0 [ 2973.535990][ T9553] swapcached 0 [ 2973.535990][ T9553] anon_thp 0 [ 2973.535990][ T9553] file_thp 0 [ 2973.535990][ T9553] shmem_thp 0 [ 2973.535990][ T9553] inactive_anon 0 [ 2973.535990][ T9553] active_anon 10571776 [ 2973.535990][ T9553] inactive_file 0 [ 2973.535990][ T9553] active_file 0 [ 2973.535990][ T9553] unevictable 0 [ 2973.535990][ T9553] slab_reclaimable 52360 [ 2973.535990][ T9553] slab_unreclaimable 122704 [ 2973.535990][ T9553] slab 175064 [ 2973.535990][ T9553] workingset_refault_anon 0 [ 2973.535990][ T9553] workingset_refault_file 0 [ 2973.535990][ T9553] workingset_activate_anon 0 [ 2973.535990][ T9553] workingset_activate_file 0 [ 2973.535990][ T9553] workingset_restore_anon 0 [ 2973.535990][ T9553] workingset_restore_file 0 [ 2973.535990][ T9553] workingset_nodereclaim 0 [ 2973.535990][ T9553] pgscan 316 [ 2973.535990][ T9553] pgsteal 81 [ 2973.535990][ T9553] pgscan_kswapd 0 [ 2973.535990][ T9553] pgscan_direct 316 [ 2973.535990][ T9553] pgscan_khugepaged 0 [ 2973.535990][ T9553] pgsteal_kswapd 0 [ 2973.535990][ T9553] pgsteal_direct 81 [ 2973.535990][ T9553] pgsteal_khugepaged 0 [ 2973.535990][ T9553] pgfault 61414 [ 2973.535990][ T9553] pgmajfault 0 [ 2973.535990][ T9553] pgrefill 914 [ 2973.535990][ T9553] pgactivate 235 [ 2973.535990][ T9553] pgdeactivate 0 [ 2973.535990][ T9553] pglazyfree 0 [ 2973.535990][ T9553] pglazyfreed 0 [ 2973.535990][ T9553] zswpin 0 [ 2973.535990][ T9553] zswpout 0 [ 2973.535990][ T9553] thp_fault_alloc 0 [ 2973.769488][ T9480] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2973.813006][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2973.821884][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2973.830748][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2973.839131][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2973.863467][ T5541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2973.898765][ T5541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2973.907648][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2973.919390][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2973.927199][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2973.971907][ T9480] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2974.018364][ T9553] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=9551,uid=0 [ 2974.020964][ T9444] veth1_vlan: entered promiscuous mode [ 2974.059339][ T9553] Memory cgroup out of memory: Killed process 9553 (syz-executor.3) total-vm:56728kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2974.101461][ T9480] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2974.298329][ T5541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2974.306443][ T5541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2974.368793][T31297] Bluetooth: hci2: command 0x0419 tx timeout [ 2974.477584][ T9480] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2974.618364][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2974.626326][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2974.659089][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 01:16:42 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) [ 2974.871162][ T9444] veth0_macvtap: entered promiscuous mode [ 2974.887309][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2974.925918][ T9444] veth1_macvtap: entered promiscuous mode [ 2974.976706][ T9444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2974.998878][ T4594] Bluetooth: hci4: command 0x0419 tx timeout [ 2975.070090][ T9444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2975.091713][ T9444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2975.126011][ T9444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2975.156609][ T9444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2975.186486][ T9444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2975.200782][ T9444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2975.222491][ T9444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2975.236863][ T9444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2975.253260][ T9444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2975.270650][ T9444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2975.339289][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2975.363624][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2975.410821][ T9473] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2975.459811][ T9444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2975.498261][ T9444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2975.532512][ T9444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2975.549219][ T9556] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2975.562669][ T9444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2975.564092][ T9556] CPU: 1 PID: 9556 Comm: syz-executor.4 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2975.582813][ T9556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2975.592877][ T9556] Call Trace: [ 2975.596165][ T9556] [ 2975.599103][ T9556] dump_stack_lvl+0x136/0x150 [ 2975.603815][ T9556] dump_header+0x10a/0xd70 [ 2975.608252][ T9556] oom_kill_process+0x25d/0x600 [ 2975.613119][ T9556] out_of_memory+0x35c/0x1660 [ 2975.617819][ T9556] ? io_schedule_timeout+0x150/0x150 [ 2975.623138][ T9556] ? oom_killer_disable+0x2b0/0x2b0 [ 2975.628370][ T9556] mem_cgroup_out_of_memory+0x206/0x270 [ 2975.633951][ T9556] ? mem_cgroup_margin+0x130/0x130 [ 2975.639104][ T9556] memory_max_write+0x2f9/0x3c0 [ 2975.643983][ T9556] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2975.650106][ T9556] ? cgroup_file_write+0x8e/0x7b0 [ 2975.655161][ T9556] cgroup_file_write+0x1e2/0x7b0 [ 2975.660116][ T9556] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2975.666213][ T9556] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2975.671603][ T9556] ? __virt_addr_valid+0x61/0x2e0 [ 2975.676664][ T9556] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2975.682055][ T9556] kernfs_fop_write_iter+0x3f1/0x600 [ 2975.687369][ T9556] vfs_write+0x945/0xd50 [ 2975.691628][ T9556] ? kernel_write+0x670/0x670 [ 2975.696320][ T9556] ? __fget_files+0x26a/0x480 [ 2975.701044][ T9556] ksys_write+0x12b/0x250 [ 2975.705389][ T9556] ? __ia32_sys_read+0xb0/0xb0 [ 2975.710177][ T9556] do_syscall_64+0x39/0xb0 [ 2975.714626][ T9556] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2975.720548][ T9556] RIP: 0033:0x7fa08be8c169 [ 2975.724974][ T9556] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2975.744599][ T9556] RSP: 002b:00007fa08cc40168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2975.753035][ T9556] RAX: ffffffffffffffda RBX: 00007fa08bfac050 RCX: 00007fa08be8c169 [ 2975.761030][ T9556] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 2975.769009][ T9556] RBP: 00007fa08bee7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2975.777257][ T9556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2975.785238][ T9556] R13: 00007fff1399a3ff R14: 00007fa08cc40300 R15: 0000000000022000 [ 2975.793239][ T9556] [ 2975.813767][ T9556] memory: usage 10696kB, limit 0kB, failcnt 854 [ 2975.820720][ T9556] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2975.831970][ T9444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2975.842622][ T9556] Memory cgroup stats for /syz4: [ 2975.844558][ T9556] anon 118784 [ 2975.844558][ T9556] file 10436608 [ 2975.844558][ T9556] kernel 393216 [ 2975.844558][ T9556] kernel_stack 98304 [ 2975.844558][ T9556] pagetables 81920 [ 2975.844558][ T9556] sec_pagetables 0 [ 2975.844558][ T9556] percpu 64 [ 2975.844558][ T9556] sock 0 [ 2975.844558][ T9556] vmalloc 0 [ 2975.844558][ T9556] shmem 10436608 [ 2975.844558][ T9556] zswap 0 [ 2975.844558][ T9556] zswapped 0 [ 2975.844558][ T9556] file_mapped 262144 [ 2975.844558][ T9556] file_dirty 0 [ 2975.844558][ T9556] file_writeback 0 [ 2975.844558][ T9556] swapcached 0 [ 2975.844558][ T9556] anon_thp 0 [ 2975.844558][ T9556] file_thp 0 [ 2975.844558][ T9556] shmem_thp 0 [ 2975.844558][ T9556] inactive_anon 0 [ 2975.844558][ T9556] active_anon 10514432 [ 2975.844558][ T9556] inactive_file 0 [ 2975.844558][ T9556] active_file 0 [ 2975.844558][ T9556] unevictable 0 [ 2975.844558][ T9556] slab_reclaimable 63056 [ 2975.844558][ T9556] slab_unreclaimable 122704 [ 2975.844558][ T9556] slab 185760 [ 2975.844558][ T9556] workingset_refault_anon 0 [ 2975.844558][ T9556] workingset_refault_file 1 [ 2975.844558][ T9556] workingset_activate_anon 0 [ 2975.844558][ T9556] workingset_activate_file 0 [ 2975.844558][ T9556] workingset_restore_anon 0 [ 2975.844558][ T9556] workingset_restore_file 1 [ 2975.844558][ T9556] workingset_nodereclaim 2 [ 2975.844558][ T9556] pgscan 847 [ 2975.844558][ T9556] pgsteal 202 [ 2975.844558][ T9556] pgscan_kswapd 0 [ 2975.844558][ T9556] pgscan_direct 847 [ 2975.844558][ T9556] pgscan_khugepaged 0 [ 2975.844558][ T9556] pgsteal_kswapd 0 [ 2975.844558][ T9556] pgsteal_direct 202 [ 2975.844558][ T9556] pgsteal_khugepaged 0 [ 2975.844558][ T9556] pgfault 49820 [ 2975.844558][ T9556] pgmajfault 0 [ 2975.844558][ T9556] pgrefill 41379 [ 2975.844558][ T9556] pgactivate 319 [ 2975.844558][ T9556] pgdeactivate 0 [ 2975.844558][ T9556] pglazyfree 0 [ 2975.844558][ T9556] pglazyfreed 0 [ 2975.844558][ T9556] zswpin 0 [ 2975.844558][ T9556] zswpout 0 [ 2975.844558][ T9556] thp_fault_alloc 0 [ 2976.048425][ T9444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2976.068205][ T9444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2976.087928][ T9444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2976.097846][ T9444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2976.108539][ T9444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2976.121046][ T9444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2976.157599][ T9556] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=9554,uid=0 [ 2976.185545][ T9556] Memory cgroup out of memory: Killed process 9554 (syz-executor.4) total-vm:56728kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2976.248394][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2976.257251][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 01:16:44 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) 01:16:44 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, r1, 0x5, r5, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r4, &(0x7f0000000180), 0x12) 01:16:44 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="0008030000086d6f9f487a74dde5e9fac9f9513154ffb3ff030000f56c8374cbe5d99a130e1f636709e048decbe24bb592299846d7bbad3fc61f86a3798700eb2129cf607c223e4b8c7f1687f6d8df1da48cd67815f62156cf2bb02394b3d16f825976c0b0c36e2db48ade28fe642efb21f16681cd5aeebd2341f5c6ab1ecf05adb78fff445806189faf2b6dc37f77dbf2b0a1e6d4b89eff16e67ea60b26c312f08600b3c1d61a0a9c63469ca436d6d2321df23da24e75309e7036cfc5c36d8127ca878c4a65b0f2089ed5593689cded5d46e67477fad72b4a5f2a10345eaf04e2cd7a8f1780cfb74cb95ecc5f2735c7804a7c563fa8ff0b20f049d025a2cdb36612f6b0eb10f49fb1"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) [ 2976.353055][ T9406] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2976.363669][ T9406] CPU: 1 PID: 9406 Comm: syz-executor.4 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2976.374037][ T9406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2976.380447][ T9473] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2976.384127][ T9406] Call Trace: [ 2976.384138][ T9406] [ 2976.400626][ T9406] dump_stack_lvl+0x136/0x150 [ 2976.405359][ T9406] dump_header+0x10a/0xd70 [ 2976.409812][ T9406] oom_kill_process+0x25d/0x600 [ 2976.414711][ T9406] out_of_memory+0x35c/0x1660 [ 2976.419423][ T9406] ? find_held_lock+0x2d/0x110 [ 2976.424227][ T9406] ? oom_killer_disable+0x2b0/0x2b0 [ 2976.429460][ T9406] ? rcu_read_unlock+0x9/0x60 [ 2976.434186][ T9406] ? find_held_lock+0x2d/0x110 [ 2976.438997][ T9406] mem_cgroup_out_of_memory+0x206/0x270 [ 2976.444586][ T9406] ? mem_cgroup_margin+0x130/0x130 [ 2976.449738][ T9406] ? lock_downgrade+0x690/0x690 [ 2976.454647][ T9406] try_charge_memcg+0xf99/0x13a0 [ 2976.459635][ T9406] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2976.465667][ T9406] ? rcu_read_unlock+0x9/0x60 [ 2976.470374][ T9406] ? lock_downgrade+0x690/0x690 [ 2976.475258][ T9406] charge_memcg+0x90/0x3b0 [ 2976.479703][ T9406] __mem_cgroup_charge+0x2b/0x90 [ 2976.484651][ T9406] __handle_mm_fault+0x2296/0x41c0 [ 2976.489785][ T9406] ? vm_iomap_memory+0x190/0x190 [ 2976.494733][ T9406] ? mas_walk+0x58f/0x730 [ 2976.499097][ T9406] ? numa_migrate_prep+0x3a0/0x3a0 [ 2976.504227][ T9406] handle_mm_fault+0x2af/0x9f0 [ 2976.509008][ T9406] do_user_addr_fault+0x2ca/0x1210 [ 2976.514141][ T9406] ? rcu_is_watching+0x12/0xb0 [ 2976.518937][ T9406] exc_page_fault+0x98/0x170 [ 2976.523556][ T9406] asm_exc_page_fault+0x26/0x30 [ 2976.528446][ T9406] RIP: 0033:0x7fa08be4a32d [ 2976.532868][ T9406] Code: 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 41 57 41 56 49 89 d6 41 55 49 89 f5 41 54 49 89 fc 53 48 81 ec 28 05 00 00 <89> 8d 38 fb ff ff 64 48 8b 04 25 28 00 00 00 48 89 45 c8 48 c7 c0 [ 2976.552483][ T9406] RSP: 002b:00007fff13998d90 EFLAGS: 00010206 [ 2976.558561][ T9406] RAX: 00000000fbad8001 RBX: 0000000000000000 RCX: 0000000000000000 [ 2976.566540][ T9406] RDX: 00007fff13999480 RSI: 00007fa08bee6cfb RDI: 00007fff13999300 [ 2976.574522][ T9406] RBP: 00007fff139992e0 R08: 0000000000000000 R09: 00007fff139993f0 [ 2976.582504][ T9406] R10: 0000000000000231 R11: 0000000000000293 R12: 00007fff13999300 [ 2976.590483][ T9406] R13: 00007fa08bee6cfb R14: 00007fff13999480 R15: 00007fff13999480 [ 2976.598480][ T9406] [ 2976.621053][ T9444] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2976.658312][ T9444] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2976.667040][ T9444] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2976.708409][ T9406] memory: usage 10356kB, limit 0kB, failcnt 873 [ 2976.714690][ T9406] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2976.719438][ T9444] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2976.738310][ T9406] Memory cgroup stats for /syz4: [ 2976.738526][ T9406] anon 40960 [ 2976.738526][ T9406] file 10436608 [ 2976.738526][ T9406] kernel 110592 [ 2976.738526][ T9406] kernel_stack 0 [ 2976.738526][ T9406] pagetables 8192 [ 2976.738526][ T9406] sec_pagetables 0 [ 2976.738526][ T9406] percpu 64 [ 2976.738526][ T9406] sock 0 [ 2976.738526][ T9406] vmalloc 0 [ 2976.738526][ T9406] shmem 10436608 [ 2976.738526][ T9406] zswap 0 [ 2976.738526][ T9406] zswapped 0 [ 2976.738526][ T9406] file_mapped 241664 [ 2976.738526][ T9406] file_dirty 0 [ 2976.738526][ T9406] file_writeback 0 [ 2976.738526][ T9406] swapcached 0 [ 2976.738526][ T9406] anon_thp 0 [ 2976.738526][ T9406] file_thp 0 [ 2976.738526][ T9406] shmem_thp 0 [ 2976.738526][ T9406] inactive_anon 0 [ 2976.738526][ T9406] active_anon 10477568 [ 2976.738526][ T9406] inactive_file 0 [ 2976.738526][ T9406] active_file 0 [ 2976.738526][ T9406] unevictable 0 [ 2976.738526][ T9406] slab_reclaimable 42504 [ 2976.738526][ T9406] slab_unreclaimable 44920 [ 2976.738526][ T9406] slab 87424 [ 2976.738526][ T9406] workingset_refault_anon 0 [ 2976.738526][ T9406] workingset_refault_file 1 [ 2976.738526][ T9406] workingset_activate_anon 0 [ 2976.738526][ T9406] workingset_activate_file 0 [ 2976.738526][ T9406] workingset_restore_anon 0 [ 2976.738526][ T9406] workingset_restore_file 1 [ 2976.738526][ T9406] workingset_nodereclaim 2 [ 2976.738526][ T9406] pgscan 847 [ 2976.738526][ T9406] pgsteal 202 [ 2976.738526][ T9406] pgscan_kswapd 0 [ 2976.738526][ T9406] pgscan_direct 847 [ 2976.738526][ T9406] pgscan_khugepaged 0 [ 2976.738526][ T9406] pgsteal_kswapd 0 [ 2976.738526][ T9406] pgsteal_direct 202 [ 2976.738526][ T9406] pgsteal_khugepaged 0 [ 2976.738526][ T9406] pgfault 49826 [ 2976.738526][ T9406] pgmajfault 0 [ 2976.738526][ T9406] pgrefill 41379 [ 2976.738526][ T9406] pgactivate 319 [ 2976.738526][ T9406] pgdeactivate 0 [ 2976.738526][ T9406] pglazyfree 0 [ 2976.738526][ T9406] pglazyfreed 0 [ 2976.738526][ T9406] zswpin 0 [ 2976.738526][ T9406] zswpout 0 [ 2976.738526][ T9406] thp_fault_alloc 0 [ 2976.937148][ T9473] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2976.985000][ T9406] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=9406,uid=0 [ 2977.037945][ T9406] Memory cgroup out of memory: Killed process 9406 (syz-executor.4) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2977.099646][ T9473] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2977.399334][ T5531] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2977.469400][T15857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2977.477476][T15857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2977.549572][ T5531] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2977.599183][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2977.646929][T15857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2977.658779][ T9480] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2977.685389][ T5531] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2977.702989][T15857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2977.711400][ T9480] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2977.735001][ T9480] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2977.780952][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2977.809452][ T5531] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2977.848947][ T9480] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2977.989454][ T9473] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2978.090614][ T9473] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2978.131756][ T9559] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2978.143760][ T9473] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2978.150867][ T9559] CPU: 1 PID: 9559 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2978.161238][ T9559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2978.171362][ T9559] Call Trace: [ 2978.174680][ T9559] [ 2978.177648][ T9559] dump_stack_lvl+0x136/0x150 [ 2978.182394][ T9559] dump_header+0x10a/0xd70 [ 2978.186873][ T9559] oom_kill_process+0x25d/0x600 [ 2978.191784][ T9559] out_of_memory+0x35c/0x1660 [ 2978.196506][ T9559] ? oom_killer_disable+0x2b0/0x2b0 [ 2978.201743][ T9559] ? kernfs_notify+0x1ac/0x410 [ 2978.206609][ T9559] ? find_held_lock+0x2d/0x110 [ 2978.211424][ T9559] mem_cgroup_out_of_memory+0x206/0x270 [ 2978.217013][ T9559] ? mem_cgroup_margin+0x130/0x130 [ 2978.222181][ T9559] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2978.228050][ T9559] memory_max_write+0x2f9/0x3c0 [ 2978.232961][ T9559] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2978.239094][ T9559] ? cgroup_file_write+0x8e/0x7b0 [ 2978.244171][ T9559] cgroup_file_write+0x1e2/0x7b0 [ 2978.249174][ T9559] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2978.255308][ T9559] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2978.260741][ T9559] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2978.266151][ T9559] kernfs_fop_write_iter+0x3f1/0x600 [ 2978.271498][ T9559] vfs_write+0x945/0xd50 [ 2978.275783][ T9559] ? kernel_write+0x670/0x670 [ 2978.280506][ T9559] ? __fget_files+0x26a/0x480 [ 2978.285257][ T9559] ksys_write+0x12b/0x250 [ 2978.289629][ T9559] ? __ia32_sys_read+0xb0/0xb0 [ 2978.294431][ T9559] ? __x64_sys_write+0x11/0xb0 [ 2978.299230][ T9559] ? __x64_sys_write+0x30/0xb0 [ 2978.304044][ T9559] do_syscall_64+0x39/0xb0 [ 2978.308519][ T9559] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2978.314458][ T9559] RIP: 0033:0x7facc228c169 [ 2978.318899][ T9559] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2978.338543][ T9559] RSP: 002b:00007facc3053168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2978.346990][ T9559] RAX: ffffffffffffffda RBX: 00007facc23ac050 RCX: 00007facc228c169 [ 2978.354996][ T9559] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 2978.362992][ T9559] RBP: 00007facc22e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2978.370995][ T9559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2978.378999][ T9559] R13: 00007ffd96e2d43f R14: 00007facc3053300 R15: 0000000000022000 [ 2978.387028][ T9559] [ 2978.430078][T31297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2978.439502][T31297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2978.447193][T31297] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2978.457032][T31297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2978.464708][T31297] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2978.475471][T31297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2978.503220][ T9559] memory: usage 10660kB, limit 0kB, failcnt 746 [ 2978.511772][ T9559] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2978.520521][ T9559] Memory cgroup stats for /syz0: [ 2978.523050][ T9559] anon 118784 [ 2978.523050][ T9559] file 10428416 [ 2978.523050][ T9559] kernel 356352 [ 2978.523050][ T9559] kernel_stack 98304 [ 2978.523050][ T9559] pagetables 81920 [ 2978.523050][ T9559] sec_pagetables 0 [ 2978.523050][ T9559] percpu 64 [ 2978.523050][ T9559] sock 0 [ 2978.523050][ T9559] vmalloc 0 [ 2978.523050][ T9559] shmem 10428416 [ 2978.523050][ T9559] zswap 0 [ 2978.523050][ T9559] zswapped 0 [ 2978.523050][ T9559] file_mapped 253952 [ 2978.523050][ T9559] file_dirty 0 [ 2978.523050][ T9559] file_writeback 0 [ 2978.523050][ T9559] swapcached 0 [ 2978.523050][ T9559] anon_thp 0 [ 2978.523050][ T9559] file_thp 0 [ 2978.523050][ T9559] shmem_thp 0 [ 2978.523050][ T9559] inactive_anon 0 [ 2978.523050][ T9559] active_anon 10547200 [ 2978.523050][ T9559] inactive_file 0 [ 2978.523050][ T9559] active_file 0 [ 2978.523050][ T9559] unevictable 0 [ 2978.523050][ T9559] slab_reclaimable 51584 [ 2978.523050][ T9559] slab_unreclaimable 95992 [ 2978.523050][ T9559] slab 147576 [ 2978.523050][ T9559] workingset_refault_anon 0 [ 2978.523050][ T9559] workingset_refault_file 0 [ 2978.523050][ T9559] workingset_activate_anon 0 [ 2978.523050][ T9559] workingset_activate_file 0 [ 2978.523050][ T9559] workingset_restore_anon 0 [ 2978.523050][ T9559] workingset_restore_file 0 [ 2978.523050][ T9559] workingset_nodereclaim 0 [ 2978.523050][ T9559] pgscan 705 [ 2978.523050][ T9559] pgsteal 266 [ 2978.523050][ T9559] pgscan_kswapd 0 [ 2978.523050][ T9559] pgscan_direct 705 [ 2978.523050][ T9559] pgscan_khugepaged 0 [ 2978.523050][ T9559] pgsteal_kswapd 0 [ 2978.523050][ T9559] pgsteal_direct 266 [ 2978.523050][ T9559] pgsteal_khugepaged 0 [ 2978.523050][ T9559] pgfault 53775 [ 2978.523050][ T9559] pgmajfault 0 [ 2978.523050][ T9559] pgrefill 27828 [ 2978.523050][ T9559] pgactivate 312 [ 2978.523050][ T9559] pgdeactivate 0 [ 2978.523050][ T9559] pglazyfree 0 [ 2978.523050][ T9559] pglazyfreed 0 [ 2978.523050][ T9559] zswpin 0 [ 2978.523050][ T9559] zswpout 0 [ 2978.523050][ T9559] thp_fault_alloc 0 [ 2978.729469][ T9559] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=9557,uid=0 [ 2978.746842][ T5531] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2978.755603][ T9559] Memory cgroup out of memory: Killed process 9559 (syz-executor.0) total-vm:56728kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:84kB oom_score_adj:1000 01:16:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x80, 0x9e, 0x5, 0x7, 0x2f, 0x0, 0x1, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x770, 0x2, @perf_config_ext={0x7, 0xeac7}, 0x20d00, 0xc6, 0x8, 0x4, 0x100000000, 0x9ae1, 0x4, 0x0, 0xffffffff, 0x0, 0x3}, r0, 0xa, r0, 0x4) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x32600) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'io'}]}, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000003c0)=0x400000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) 01:16:46 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000300)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xc, 0x9456, 0x8001, 0x2, 0x5be8b956abcff5ec, r3, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x48) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0)={r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x9, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000080000000000000001000100071506000100008018260000", @ANYRES32=r6, @ANYBLOB="0000a348694eef96594286dd", @ANYRES32=r1, @ANYBLOB="000000000000000085200000050000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x1f, &(0x7f0000000400)=""/31, 0x40f00, 0x17, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0xe, 0xae, 0x4af0}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r7, r8, r2, r1, r1]}, 0x80) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0xb8}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) openat$cgroup_ro(r3, &(0x7f0000000180)='rdma.current\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8946, &(0x7f0000000080)) [ 2978.812079][ T9473] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2978.889063][ T5531] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2978.944158][ T9444] syz-executor.0 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=0 [ 2978.980207][ T9480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2978.998398][ T9444] CPU: 0 PID: 9444 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2979.008765][ T9444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2979.018847][ T9444] Call Trace: [ 2979.022143][ T9444] [ 2979.025091][ T9444] dump_stack_lvl+0x136/0x150 [ 2979.029820][ T9444] dump_header+0x10a/0xd70 [ 2979.034274][ T9444] oom_kill_process+0x25d/0x600 [ 2979.039156][ T9444] out_of_memory+0x35c/0x1660 [ 2979.043866][ T9444] ? find_held_lock+0x2d/0x110 [ 2979.048661][ T9444] ? oom_killer_disable+0x2b0/0x2b0 [ 2979.053870][ T9444] ? rcu_read_unlock+0x9/0x60 [ 2979.058564][ T9444] ? find_held_lock+0x2d/0x110 [ 2979.063350][ T9444] mem_cgroup_out_of_memory+0x206/0x270 [ 2979.068914][ T9444] ? mem_cgroup_margin+0x130/0x130 [ 2979.074040][ T9444] ? lock_downgrade+0x690/0x690 [ 2979.078927][ T9444] try_charge_memcg+0xf99/0x13a0 [ 2979.083893][ T9444] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2979.089900][ T9444] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2979.095642][ T9444] ? lock_downgrade+0x690/0x690 [ 2979.100515][ T9444] ? lock_downgrade+0x690/0x690 [ 2979.105385][ T9444] ? rcu_read_unlock+0x9/0x60 [ 2979.110087][ T9444] obj_cgroup_charge+0x2af/0x5e0 [ 2979.115054][ T9444] __kmem_cache_alloc_node+0xa3/0x320 [ 2979.120446][ T9444] ? kvmalloc_node+0xa2/0x1a0 [ 2979.125149][ T9444] ? kvmalloc_node+0xa2/0x1a0 [ 2979.129851][ T9444] __kmalloc_node+0x51/0x1a0 [ 2979.134451][ T9444] kvmalloc_node+0xa2/0x1a0 [ 2979.138979][ T9444] xt_alloc_table_info+0x40/0xa0 [ 2979.143939][ T9444] do_ip6t_set_ctl+0x514/0xb30 [ 2979.148717][ T9444] ? __mutex_lock+0x231/0x1350 [ 2979.153499][ T9444] ? compat_do_replace.constprop.0+0x410/0x410 [ 2979.159674][ T9444] ? wait_for_completion_io_timeout+0x20/0x20 [ 2979.165771][ T9444] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2979.171779][ T9444] nf_setsockopt+0x87/0xe0 [ 2979.176237][ T9444] ipv6_setsockopt+0x12b/0x190 [ 2979.181017][ T9444] tcp_setsockopt+0x9f/0x100 [ 2979.185632][ T9444] ? sock_common_recvmsg+0x190/0x190 [ 2979.190938][ T9444] __sys_setsockopt+0x2c6/0x5b0 [ 2979.195805][ T9444] ? __ia32_sys_recv+0x100/0x100 [ 2979.200761][ T9444] ? up_write+0x520/0x520 [ 2979.205102][ T9444] ? handle_mm_fault+0x326/0x9f0 [ 2979.210061][ T9444] __x64_sys_setsockopt+0xbe/0x160 [ 2979.215187][ T9444] ? syscall_enter_from_user_mode+0x26/0x80 [ 2979.221101][ T9444] do_syscall_64+0x39/0xb0 [ 2979.225549][ T9444] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2979.231464][ T9444] RIP: 0033:0x7facc228d7ba [ 2979.235889][ T9444] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2979.255508][ T9444] RSP: 002b:00007ffd96e2cfa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2979.263931][ T9444] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 00007facc228d7ba [ 2979.271909][ T9444] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2979.279885][ T9444] RBP: 00007ffd96e2cfd0 R08: 0000000000000488 R09: ffffffffffff0000 [ 2979.287862][ T9444] R10: 00007facc2385280 R11: 0000000000000206 R12: 00007ffd96e2d030 [ 2979.295838][ T9444] R13: 0000000000000003 R14: 00007ffd96e2cfcc R15: 00007facc2385220 [ 2979.303831][ T9444] [ 2979.363238][ T5531] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2979.506066][ T9480] 8021q: adding VLAN 0 to HW filter on device team0 [ 2979.559355][ T9444] memory: usage 10352kB, limit 0kB, failcnt 780 [ 2979.565644][ T9444] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2979.568729][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2979.580732][ T4594] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2979.589479][ T9444] Memory cgroup stats for /syz0: [ 2979.589694][ T9444] anon 40960 [ 2979.589694][ T9444] file 10428416 [ 2979.589694][ T9444] kernel 106496 [ 2979.589694][ T9444] kernel_stack 0 [ 2979.589694][ T9444] pagetables 8192 [ 2979.589694][ T9444] sec_pagetables 0 [ 2979.589694][ T9444] percpu 64 [ 2979.589694][ T9444] sock 0 [ 2979.589694][ T9444] vmalloc 0 [ 2979.589694][ T9444] shmem 10428416 [ 2979.589694][ T9444] zswap 0 [ 2979.589694][ T9444] zswapped 0 [ 2979.589694][ T9444] file_mapped 241664 [ 2979.589694][ T9444] file_dirty 0 [ 2979.589694][ T9444] file_writeback 0 [ 2979.589694][ T9444] swapcached 0 [ 2979.589694][ T9444] anon_thp 0 [ 2979.589694][ T9444] file_thp 0 [ 2979.589694][ T9444] shmem_thp 0 [ 2979.589694][ T9444] inactive_anon 0 [ 2979.589694][ T9444] active_anon 10469376 [ 2979.589694][ T9444] inactive_file 0 [ 2979.589694][ T9444] active_file 0 [ 2979.589694][ T9444] unevictable 0 [ 2979.589694][ T9444] slab_reclaimable 36856 [ 2979.589694][ T9444] slab_unreclaimable 51432 [ 2979.589694][ T9444] slab 88288 [ 2979.589694][ T9444] workingset_refault_anon 0 [ 2979.589694][ T9444] workingset_refault_file 0 [ 2979.589694][ T9444] workingset_activate_anon 0 [ 2979.589694][ T9444] workingset_activate_file 0 [ 2979.589694][ T9444] workingset_restore_anon 0 [ 2979.589694][ T9444] workingset_restore_file 0 [ 2979.589694][ T9444] workingset_nodereclaim 0 [ 2979.589694][ T9444] pgscan 705 [ 2979.589694][ T9444] pgsteal 266 [ 2979.589694][ T9444] pgscan_kswapd 0 [ 2979.589694][ T9444] pgscan_direct 705 [ 2979.589694][ T9444] pgscan_khugepaged 0 [ 2979.589694][ T9444] pgsteal_kswapd 0 [ 2979.589694][ T9444] pgsteal_direct 266 [ 2979.589694][ T9444] pgsteal_khugepaged 0 [ 2979.589694][ T9444] pgfault 53789 [ 2979.589694][ T9444] pgmajfault 0 [ 2979.589694][ T9444] pgrefill 27828 [ 2979.589694][ T9444] pgactivate 312 [ 2979.589694][ T9444] pgdeactivate 0 [ 2979.589694][ T9444] pglazyfree 0 [ 2979.589694][ T9444] pglazyfreed 0 [ 2979.589694][ T9444] zswpin 0 [ 2979.589694][ T9444] zswpout 0 [ 2979.589694][ T9444] thp_fault_alloc 0 [ 2979.606620][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2979.779582][ T4594] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2979.799215][ T5049] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2979.808065][ T5049] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2979.815778][ T5049] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2979.815922][ T5531] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2979.853102][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2979.864420][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2979.873038][T32601] bridge0: port 1(bridge_slave_0) entered blocking state [ 2979.880175][T32601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2979.892633][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2979.901740][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2979.910265][T32601] bridge0: port 2(bridge_slave_1) entered blocking state [ 2979.917388][T32601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2979.941598][ T9444] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=9444,uid=0 [ 2979.954614][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2979.981292][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2980.018469][ T9444] Memory cgroup out of memory: Killed process 9444 (syz-executor.0) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2980.058734][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2980.067650][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2980.091497][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2980.189934][ T9473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2980.216206][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2980.224321][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2980.235678][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2980.253462][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2980.266380][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2980.283529][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2980.295485][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2980.419404][ T9480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 01:16:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x80, 0x9e, 0x5, 0x7, 0x2f, 0x0, 0x1, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x770, 0x2, @perf_config_ext={0x7, 0xeac7}, 0x20d00, 0xc6, 0x8, 0x4, 0x100000000, 0x9ae1, 0x4, 0x0, 0xffffffff, 0x0, 0x3}, r0, 0xa, r0, 0x4) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x32600) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'io'}]}, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000003c0)=0x400000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x80, 0x9e, 0x5, 0x7, 0x2f, 0x0, 0x1, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x770, 0x2, @perf_config_ext={0x7, 0xeac7}, 0x20d00, 0xc6, 0x8, 0x4, 0x100000000, 0x9ae1, 0x4, 0x0, 0xffffffff, 0x0, 0x3}, r0, 0xa, r0, 0x4) (async) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x32600) (async) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'io'}]}, 0x4) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000003c0)=0x400000004) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) [ 2980.516453][ T9473] 8021q: adding VLAN 0 to HW filter on device team0 [ 2980.523790][ T5049] Bluetooth: hci0: command 0x0409 tx timeout [ 2980.626408][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2980.634423][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2980.673742][ T9561] chnl_net:caif_netlink_parms(): no params data found 01:16:48 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x80, 0x9e, 0x5, 0x7, 0x2f, 0x0, 0x1, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x770, 0x2, @perf_config_ext={0x7, 0xeac7}, 0x20d00, 0xc6, 0x8, 0x4, 0x100000000, 0x9ae1, 0x4, 0x0, 0xffffffff, 0x0, 0x3}, r0, 0xa, r0, 0x4) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x32600) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'io'}]}, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000003c0)=0x400000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) [ 2980.799479][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2980.808341][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2980.816843][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 2980.824099][ T5096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2980.834184][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2980.843620][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2980.852694][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 2980.859845][ T5096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2980.904635][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2981.163933][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2981.432966][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2981.433762][ T4594] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2981.450749][ T4594] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2981.457097][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2981.467814][ T4594] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2981.474332][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2981.484219][ T4594] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2981.491972][ T4594] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2981.498669][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2981.507229][ T4594] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2981.508046][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2981.555492][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2981.580069][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2981.602727][ T9473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2981.627245][ T9473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2981.669672][ T9561] bridge0: port 1(bridge_slave_0) entered blocking state [ 2981.676796][ T9561] bridge0: port 1(bridge_slave_0) entered disabled state [ 2981.694024][ T9561] bridge_slave_0: entered allmulticast mode [ 2981.704449][ T9561] bridge_slave_0: entered promiscuous mode [ 2981.737667][ T9480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2981.798634][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2981.806672][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2981.815913][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2981.825342][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2981.832863][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2981.848080][ T9561] bridge0: port 2(bridge_slave_1) entered blocking state [ 2981.863186][ T9561] bridge0: port 2(bridge_slave_1) entered disabled state [ 2981.878746][ T4594] Bluetooth: hci1: command 0x0409 tx timeout [ 2981.885159][ T9561] bridge_slave_1: entered allmulticast mode [ 2981.899707][ T9561] bridge_slave_1: entered promiscuous mode [ 2982.004445][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2982.013506][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2982.031668][ T9566] chnl_net:caif_netlink_parms(): no params data found [ 2982.105699][ T9561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2982.143516][ T9561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2982.334364][ T9561] team0: Port device team_slave_0 added [ 2982.342341][ T9561] team0: Port device team_slave_1 added [ 2982.417985][ T9480] veth0_vlan: entered promiscuous mode [ 2982.439053][ T4594] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2982.448413][ T4594] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2982.456573][ T4594] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2982.464625][ T4594] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2982.472986][ T4594] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2982.487035][ T4594] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2982.530930][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2982.539699][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2982.552855][ T9480] veth1_vlan: entered promiscuous mode [ 2982.598362][ T5049] Bluetooth: hci0: command 0x041b tx timeout [ 2982.600682][ T9561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2982.612653][ T9561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2982.641781][ T9561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2982.656462][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2982.664589][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2982.672713][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2982.682076][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2982.690916][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2982.747679][ T9561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2982.775540][ T9561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2982.805498][ T9561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2982.846252][ T9473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2982.999559][ T9480] veth0_macvtap: entered promiscuous mode [ 2983.014629][ T9566] bridge0: port 1(bridge_slave_0) entered blocking state [ 2983.022637][ T9566] bridge0: port 1(bridge_slave_0) entered disabled state [ 2983.040353][ T9566] bridge_slave_0: entered allmulticast mode [ 2983.048562][ T9566] bridge_slave_0: entered promiscuous mode [ 2983.081770][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2983.105696][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2983.125882][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2983.151947][ T9480] veth1_macvtap: entered promiscuous mode [ 2983.232015][ T9566] bridge0: port 2(bridge_slave_1) entered blocking state [ 2983.251956][ T9566] bridge0: port 2(bridge_slave_1) entered disabled state [ 2983.267734][ T9566] bridge_slave_1: entered allmulticast mode [ 2983.289066][ T9566] bridge_slave_1: entered promiscuous mode [ 2983.308973][ T9561] hsr_slave_0: entered promiscuous mode [ 2983.329943][ T9561] hsr_slave_1: entered promiscuous mode [ 2983.336156][ T9561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2983.344938][ T9561] Cannot create hsr debugfs directory [ 2983.354677][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2983.505850][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2983.519268][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2983.534169][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2983.544927][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2983.557503][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2983.568640][ T5049] Bluetooth: hci3: command 0x0409 tx timeout [ 2983.576109][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2983.586378][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2983.597289][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2983.608386][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2983.619061][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2983.629591][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2983.642255][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2983.654510][ T9480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2983.684884][ T9566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2983.698749][ T9566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2983.741742][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2983.750838][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2983.771004][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2983.781646][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2983.792054][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2983.803064][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2983.814553][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2983.825125][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2983.835173][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2983.845728][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2983.857259][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2983.867801][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2983.877681][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2983.888760][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2983.900285][ T9480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2983.959868][ T5049] Bluetooth: hci1: command 0x041b tx timeout [ 2983.968944][ T9566] team0: Port device team_slave_0 added [ 2983.984255][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2983.993447][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2984.002707][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2984.011758][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2984.034875][ T9480] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2984.044476][ T9480] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2984.053342][ T9480] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2984.062069][ T9480] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2984.079690][ T9566] team0: Port device team_slave_1 added [ 2984.228134][ T9473] veth0_vlan: entered promiscuous mode [ 2984.260724][ T9566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2984.267694][ T9566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2984.306299][ T9566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2984.331348][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2984.340693][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2984.375188][ T9595] chnl_net:caif_netlink_parms(): no params data found [ 2984.395526][ T9473] veth1_vlan: entered promiscuous mode [ 2984.435590][ T9566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2984.454734][ T9566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2984.488375][ T9566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2984.514113][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2984.521668][ T4594] Bluetooth: hci5: command 0x0409 tx timeout [ 2984.539079][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2984.554268][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2984.678315][ T4594] Bluetooth: hci0: command 0x040f tx timeout [ 2984.783801][ T5541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2984.808616][ T5541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2984.925801][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2984.949048][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2985.038060][ T9473] veth0_macvtap: entered promiscuous mode [ 2985.065021][ T9619] chnl_net:caif_netlink_parms(): no params data found [ 2985.085178][ T9566] hsr_slave_0: entered promiscuous mode [ 2985.099339][ T9566] hsr_slave_1: entered promiscuous mode [ 2985.108474][ T9566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2985.116068][ T9566] Cannot create hsr debugfs directory [ 2985.179560][ T5541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2985.187599][ T5541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2985.216350][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2985.229195][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2985.251021][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2985.271306][ T9595] bridge0: port 1(bridge_slave_0) entered blocking state [ 2985.285327][ T9595] bridge0: port 1(bridge_slave_0) entered disabled state [ 2985.305013][ T9595] bridge_slave_0: entered allmulticast mode [ 2985.312237][ T9595] bridge_slave_0: entered promiscuous mode [ 2985.320656][ T9595] bridge0: port 2(bridge_slave_1) entered blocking state [ 2985.327843][ T9595] bridge0: port 2(bridge_slave_1) entered disabled state [ 2985.335109][ T9595] bridge_slave_1: entered allmulticast mode [ 2985.342105][ T9595] bridge_slave_1: entered promiscuous mode [ 2985.423504][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2985.434071][ T9473] veth1_macvtap: entered promiscuous mode [ 2985.648365][ T4594] Bluetooth: hci3: command 0x041b tx timeout [ 2985.745634][ T5531] hsr_slave_0: left promiscuous mode [ 2985.781428][ T5531] hsr_slave_1: left promiscuous mode [ 2985.787445][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2985.789192][ T9671] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2985.806769][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2985.828455][ T9671] CPU: 0 PID: 9671 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2985.838837][ T9671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2985.848926][ T9671] Call Trace: [ 2985.852226][ T9671] [ 2985.855167][ T9671] dump_stack_lvl+0x136/0x150 [ 2985.859875][ T9671] dump_header+0x10a/0xd70 [ 2985.864317][ T9671] oom_kill_process+0x25d/0x600 [ 2985.869187][ T9671] out_of_memory+0x35c/0x1660 [ 2985.873888][ T9671] ? oom_killer_disable+0x2b0/0x2b0 [ 2985.879110][ T9671] ? mark_held_locks+0x9f/0xe0 [ 2985.883922][ T9671] mem_cgroup_out_of_memory+0x206/0x270 [ 2985.889495][ T9671] ? mem_cgroup_margin+0x130/0x130 [ 2985.894654][ T9671] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 2985.900495][ T9671] memory_max_write+0x2f9/0x3c0 [ 2985.905375][ T9671] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2985.911470][ T9671] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2985.917663][ T9671] ? lockdep_hardirqs_on+0x7d/0x100 [ 2985.922879][ T9671] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2985.929068][ T9671] cgroup_file_write+0x1e2/0x7b0 [ 2985.934036][ T9671] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2985.940158][ T9671] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2985.945579][ T9671] ? lock_is_held_type+0x103/0x140 [ 2985.950718][ T9671] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2985.956113][ T9671] kernfs_fop_write_iter+0x3f1/0x600 [ 2985.961497][ T9671] vfs_write+0x945/0xd50 [ 2985.965759][ T9671] ? kernel_write+0x670/0x670 [ 2985.970472][ T9671] ksys_write+0x12b/0x250 [ 2985.974826][ T9671] ? __ia32_sys_read+0xb0/0xb0 [ 2985.979610][ T9671] ? syscall_enter_from_user_mode+0x30/0x80 [ 2985.985545][ T9671] do_syscall_64+0x39/0xb0 [ 2985.989991][ T9671] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2985.995928][ T9671] RIP: 0033:0x7f1956c8c169 [ 2986.000394][ T9671] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2986.020020][ T9671] RSP: 002b:00007f1957a0f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2986.028448][ T9671] RAX: ffffffffffffffda RBX: 00007f1956dac050 RCX: 00007f1956c8c169 [ 2986.036434][ T9671] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 2986.044429][ T9671] RBP: 00007f1956ce7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2986.052411][ T9671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2986.060395][ T9671] R13: 00007fff22473dff R14: 00007f1957a0f300 R15: 0000000000022000 [ 2986.068393][ T9671] [ 2986.080234][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2986.087686][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2986.097347][ T4594] Bluetooth: hci1: command 0x040f tx timeout [ 2986.109349][ T5531] bridge_slave_1: left allmulticast mode [ 2986.115021][ T5531] bridge_slave_1: left promiscuous mode [ 2986.121147][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 2986.129983][ T5531] bridge_slave_0: left allmulticast mode [ 2986.135757][ T5531] bridge_slave_0: left promiscuous mode [ 2986.142460][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 2986.150324][ T9671] memory: usage 10676kB, limit 0kB, failcnt 1914 [ 2986.157003][ T9671] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2986.167229][ T9671] Memory cgroup stats for /syz2: [ 2986.173509][ T9671] anon 118784 [ 2986.173509][ T9671] file 10416128 [ 2986.173509][ T9671] kernel 385024 [ 2986.173509][ T9671] kernel_stack 98304 [ 2986.173509][ T9671] pagetables 81920 [ 2986.173509][ T9671] sec_pagetables 0 [ 2986.173509][ T9671] percpu 64 [ 2986.173509][ T9671] sock 0 [ 2986.173509][ T9671] vmalloc 0 [ 2986.173509][ T9671] shmem 10416128 [ 2986.173509][ T9671] zswap 0 [ 2986.173509][ T9671] zswapped 0 [ 2986.173509][ T9671] file_mapped 176128 [ 2986.173509][ T9671] file_dirty 0 [ 2986.173509][ T9671] file_writeback 0 [ 2986.173509][ T9671] swapcached 0 [ 2986.173509][ T9671] anon_thp 0 [ 2986.173509][ T9671] file_thp 0 [ 2986.173509][ T9671] shmem_thp 0 [ 2986.173509][ T9671] inactive_anon 0 [ 2986.173509][ T9671] active_anon 10534912 [ 2986.173509][ T9671] inactive_file 0 [ 2986.173509][ T9671] active_file 0 [ 2986.173509][ T9671] unevictable 0 [ 2986.173509][ T9671] slab_reclaimable 53456 [ 2986.173509][ T9671] slab_unreclaimable 122704 [ 2986.173509][ T9671] slab 176160 [ 2986.173509][ T9671] workingset_refault_anon 0 [ 2986.173509][ T9671] workingset_refault_file 0 [ 2986.173509][ T9671] workingset_activate_anon 0 [ 2986.173509][ T9671] workingset_activate_file 0 [ 2986.173509][ T9671] workingset_restore_anon 0 [ 2986.173509][ T9671] workingset_restore_file 0 [ 2986.173509][ T9671] workingset_nodereclaim 0 [ 2986.173509][ T9671] pgscan 172 [ 2986.173509][ T9671] pgsteal 52 [ 2986.173509][ T9671] pgscan_kswapd 0 [ 2986.173509][ T9671] pgscan_direct 172 [ 2986.173509][ T9671] pgscan_khugepaged 0 [ 2986.173509][ T9671] pgsteal_kswapd 0 [ 2986.173509][ T9671] pgsteal_direct 52 [ 2986.173509][ T9671] pgsteal_khugepaged 0 [ 2986.173509][ T9671] pgfault 55649 [ 2986.173509][ T9671] pgmajfault 0 [ 2986.173509][ T9671] pgrefill 20570 [ 2986.173509][ T9671] pgactivate 120 [ 2986.173509][ T9671] pgdeactivate 0 [ 2986.173509][ T9671] pglazyfree 0 [ 2986.173509][ T9671] pglazyfreed 0 [ 2986.173509][ T9671] zswpin 0 [ 2986.173509][ T9671] zswpout 0 [ 2986.173509][ T9671] thp_fault_alloc 0 [ 2986.383458][ T5531] hsr_slave_0: left promiscuous mode [ 2986.389504][ T5531] hsr_slave_1: left promiscuous mode [ 2986.395421][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2986.402995][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2986.412191][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2986.419800][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2986.429095][ T5531] bridge_slave_1: left allmulticast mode [ 2986.434770][ T5531] bridge_slave_1: left promiscuous mode [ 2986.440875][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 2986.452186][ T9671] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=9669,uid=0 [ 2986.469217][ T5531] bridge_slave_0: left allmulticast mode [ 2986.475480][ T5531] bridge_slave_0: left promiscuous mode [ 2986.481559][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 2986.490887][ T9671] Memory cgroup out of memory: Killed process 9671 (syz-executor.2) total-vm:54680kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 01:16:54 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="0008030000086d6f9f487a74dde5e9fac9f9513154ffb3ff030000f56c8374cbe5d99a130e1f636709e048decbe24bb592299846d7bbad3fc61f86a3798700eb2129cf607c223e4b8c7f1687f6d8df1da48cd67815f62156cf2bb02394b3d16f825976c0b0c36e2db48ade28fe642efb21f16681cd5aeebd2341f5c6ab1ecf05adb78fff445806189faf2b6dc37f77dbf2b0a1e6d4b89eff16e67ea60b26c312f08600b3c1d61a0a9c63469ca436d6d2321df23da24e75309e7036cfc5c36d8127ca878c4a65b0"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) [ 2986.526216][ T5531] hsr_slave_0: left promiscuous mode [ 2986.532985][ T5531] hsr_slave_1: left promiscuous mode [ 2986.566366][ T9480] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 2986.580349][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2986.587774][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2986.597129][ T9480] CPU: 1 PID: 9480 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2986.607488][ T9480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2986.617576][ T9480] Call Trace: [ 2986.620874][ T9480] [ 2986.623832][ T9480] dump_stack_lvl+0x136/0x150 [ 2986.628558][ T9480] dump_header+0x10a/0xd70 [ 2986.633010][ T9480] oom_kill_process+0x25d/0x600 [ 2986.637909][ T9480] out_of_memory+0x35c/0x1660 [ 2986.642633][ T9480] ? find_held_lock+0x2d/0x110 [ 2986.647431][ T9480] ? oom_killer_disable+0x2b0/0x2b0 [ 2986.652665][ T9480] ? rcu_read_unlock+0x9/0x60 [ 2986.657377][ T9480] ? find_held_lock+0x2d/0x110 [ 2986.658197][ T4594] Bluetooth: hci5: command 0x041b tx timeout [ 2986.662191][ T9480] mem_cgroup_out_of_memory+0x206/0x270 [ 2986.673826][ T9480] ? mem_cgroup_margin+0x130/0x130 [ 2986.678986][ T9480] ? lock_downgrade+0x690/0x690 [ 2986.683932][ T9480] try_charge_memcg+0xf99/0x13a0 [ 2986.688923][ T9480] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2986.694950][ T9480] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2986.700741][ T9480] ? lock_downgrade+0x690/0x690 [ 2986.705616][ T9480] ? lock_downgrade+0x690/0x690 [ 2986.710498][ T9480] __memcg_kmem_charge_page+0x16e/0x3c0 [ 2986.716084][ T9480] __alloc_pages+0x1f3/0x4a0 [ 2986.720712][ T9480] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2986.727514][ T9480] ? copy_page_range+0x1bc0/0x3830 [ 2986.732653][ T9480] alloc_pages+0x1aa/0x270 [ 2986.737104][ T9480] get_zeroed_page+0x14/0x40 [ 2986.741723][ T9480] __pud_alloc+0x3b/0x180 [ 2986.746067][ T9480] copy_page_range+0x2199/0x3830 [ 2986.751027][ T9480] ? mas_wr_modify+0x2da/0x16d0 [ 2986.755921][ T9480] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 2986.761854][ T9480] ? mas_store+0x275/0x3a0 [ 2986.766291][ T9480] ? handle_mm_fault+0x9f0/0x9f0 [ 2986.771249][ T9480] ? down_write+0x14f/0x200 [ 2986.775794][ T9480] dup_mmap+0x10bc/0x19d0 [ 2986.780173][ T9480] ? replace_mm_exe_file+0x4c0/0x4c0 [ 2986.785499][ T9480] ? lockdep_hardirqs_on+0x7d/0x100 [ 2986.790733][ T9480] ? mm_init+0xc7a/0x1030 [ 2986.795086][ T9480] copy_process+0x65ae/0x7600 [ 2986.799782][ T9480] ? _raw_spin_unlock+0x28/0x40 [ 2986.804670][ T9480] ? pidfd_prepare+0x80/0x80 [ 2986.809292][ T9480] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2986.815301][ T9480] kernel_clone+0xeb/0x890 [ 2986.819741][ T9480] ? create_io_thread+0xe0/0xe0 [ 2986.824613][ T9480] ? do_user_addr_fault+0x2b1/0x1210 [ 2986.829919][ T9480] ? reacquire_held_locks+0x216/0x4e0 [ 2986.835311][ T9480] ? do_user_addr_fault+0x2b1/0x1210 [ 2986.840641][ T9480] ? find_held_lock+0x2d/0x110 [ 2986.845424][ T9480] __do_sys_clone+0xba/0x100 [ 2986.850035][ T9480] ? kernel_clone+0x890/0x890 [ 2986.854745][ T9480] ? syscall_enter_from_user_mode+0x26/0x80 [ 2986.860663][ T9480] do_syscall_64+0x39/0xb0 [ 2986.865104][ T9480] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2986.871021][ T9480] RIP: 0033:0x7f1956c89e9b [ 2986.875446][ T9480] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2986.895065][ T9480] RSP: 002b:00007fff22474040 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2986.903489][ T9480] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1956c89e9b [ 2986.911468][ T9480] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2986.919446][ T9480] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556b68400 [ 2986.927427][ T9480] R10: 0000555556b686d0 R11: 0000000000000246 R12: 0000000000000001 [ 2986.935410][ T9480] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff22474120 [ 2986.943407][ T9480] [ 2986.947535][ T4594] Bluetooth: hci0: command 0x0419 tx timeout [ 2986.954941][ T9480] memory: usage 10500kB, limit 0kB, failcnt 1933 [ 2986.965324][ T9480] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2986.980111][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2986.987705][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2986.993947][ T9480] Memory cgroup stats for /syz2: [ 2986.995031][ T9480] anon 45056 [ 2986.995031][ T9480] file 10416128 [ 2986.995031][ T9480] kernel 253952 [ 2986.995031][ T9480] kernel_stack 32768 [ 2986.995031][ T9480] pagetables 49152 [ 2986.995031][ T9480] sec_pagetables 0 [ 2986.995031][ T9480] percpu 128 [ 2986.995031][ T9480] sock 0 [ 2986.995031][ T9480] vmalloc 0 [ 2986.995031][ T9480] shmem 10416128 [ 2986.995031][ T9480] zswap 0 [ 2986.995031][ T9480] zswapped 0 [ 2986.995031][ T9480] file_mapped 176128 [ 2986.995031][ T9480] file_dirty 0 [ 2986.995031][ T9480] file_writeback 0 [ 2986.995031][ T9480] swapcached 0 [ 2986.995031][ T9480] anon_thp 0 [ 2986.995031][ T9480] file_thp 0 [ 2986.995031][ T9480] shmem_thp 0 [ 2986.995031][ T9480] inactive_anon 0 [ 2986.995031][ T9480] active_anon 10461184 [ 2986.995031][ T9480] inactive_file 0 [ 2986.995031][ T9480] active_file 0 [ 2986.995031][ T9480] unevictable 0 [ 2986.995031][ T9480] slab_reclaimable 40176 [ 2986.995031][ T9480] slab_unreclaimable 107824 [ 2986.995031][ T9480] slab 148000 [ 2986.995031][ T9480] workingset_refault_anon 0 [ 2986.995031][ T9480] workingset_refault_file 0 [ 2986.995031][ T9480] workingset_activate_anon 0 [ 2986.995031][ T9480] workingset_activate_file 0 [ 2986.995031][ T9480] workingset_restore_anon 0 [ 2986.995031][ T9480] workingset_restore_file 0 [ 2986.995031][ T9480] workingset_nodereclaim 0 [ 2986.995031][ T9480] pgscan 172 [ 2986.995031][ T9480] pgsteal 52 [ 2986.995031][ T9480] pgscan_kswapd 0 [ 2986.995031][ T9480] pgscan_direct 172 [ 2986.995031][ T9480] pgscan_khugepaged 0 [ 2986.995031][ T9480] pgsteal_kswapd 0 [ 2986.995031][ T9480] pgsteal_direct 52 [ 2986.995031][ T9480] pgsteal_khugepaged 0 [ 2986.995031][ T9480] pgfault 55665 [ 2986.995031][ T9480] pgmajfault 0 [ 2986.995031][ T9480] pgrefill 20570 [ 2986.995031][ T9480] pgactivate 120 [ 2986.995031][ T9480] pgdeactivate 0 [ 2986.995031][ T9480] pglazyfree 0 [ 2986.995031][ T9480] pglazyfreed 0 [ 2986.995031][ T9480] zswpin 0 [ 2986.995031][ T9480] zswpout 0 [ 2986.995031][ T9480] thp_fault_alloc 0 [ 2987.184683][ T5531] bridge_slave_1: left allmulticast mode [ 2987.191952][ T9480] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=9480,uid=0 [ 2987.194862][ T5531] bridge_slave_1: left promiscuous mode [ 2987.213522][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 2987.222466][ T5531] bridge_slave_0: left allmulticast mode [ 2987.228143][ T5531] bridge_slave_0: left promiscuous mode [ 2987.234743][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 2987.248533][ T9480] Memory cgroup out of memory: Killed process 9480 (syz-executor.2) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2987.265539][ T5531] hsr_slave_0: left promiscuous mode [ 2987.271792][ T5531] hsr_slave_1: left promiscuous mode [ 2987.289698][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2987.308261][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2987.320694][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2987.328121][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2987.371914][ T5531] bridge_slave_1: left allmulticast mode [ 2987.377610][ T5531] bridge_slave_1: left promiscuous mode [ 2987.394630][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 2987.419536][ T5531] bridge_slave_0: left allmulticast mode [ 2987.425221][ T5531] bridge_slave_0: left promiscuous mode [ 2987.438522][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 2987.486288][ T5531] veth1_macvtap: left promiscuous mode [ 2987.492234][ T5531] veth0_macvtap: left promiscuous mode [ 2987.514770][ T5531] veth1_vlan: left promiscuous mode [ 2987.520399][ T5531] veth0_vlan: left promiscuous mode [ 2987.541602][ T5531] veth1_macvtap: left promiscuous mode [ 2987.547130][ T5531] veth0_macvtap: left promiscuous mode [ 2987.566265][ T5531] veth1_vlan: left promiscuous mode [ 2987.572039][ T5531] veth0_vlan: left promiscuous mode [ 2987.589441][ T5531] veth1_macvtap: left promiscuous mode [ 2987.594988][ T5531] veth0_macvtap: left promiscuous mode [ 2987.613843][ T5531] veth1_vlan: left promiscuous mode [ 2987.628486][ T5531] veth0_vlan: left promiscuous mode [ 2987.635393][ T5531] veth1_macvtap: left promiscuous mode [ 2987.641129][ T5531] veth0_macvtap: left promiscuous mode [ 2987.646761][ T5531] veth1_vlan: left promiscuous mode [ 2987.652481][ T5531] veth0_vlan: left promiscuous mode [ 2987.718521][ T4594] Bluetooth: hci3: command 0x040f tx timeout [ 2988.118695][ T4594] Bluetooth: hci1: command 0x0419 tx timeout [ 2988.678242][ T4594] Bluetooth: hci5: command 0x040f tx timeout [ 2988.793963][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 2988.822613][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 2988.873627][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2988.916759][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2989.066854][ T5531] bond0 (unregistering): Released all slaves [ 2989.374390][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 2989.399774][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 2989.428497][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2989.459124][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2989.649010][ T5531] bond0 (unregistering): Released all slaves [ 2989.798310][ T5049] Bluetooth: hci3: command 0x0419 tx timeout [ 2989.914375][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 2989.937267][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 2989.978496][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2990.009439][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2990.177518][ T5531] bond0 (unregistering): Released all slaves [ 2990.425025][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 2990.459284][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 2990.491316][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2990.507714][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2990.666512][ T5531] bond0 (unregistering): Released all slaves [ 2990.742627][ T9473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2990.761684][ T9473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2990.768258][ T4594] Bluetooth: hci5: command 0x0419 tx timeout [ 2990.786229][ T9473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2990.809468][ T9473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2990.832019][ T9473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2990.857959][ T9473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2990.869724][ T9473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2990.895391][ T9595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2990.910386][ T9595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2990.933531][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2990.949213][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2991.056614][ T9473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2991.078930][ T9473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2991.098290][ T9473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2991.119224][ T9473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2991.143753][ T9473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2991.168309][ T9473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2991.189087][ T9473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2991.275728][ T9595] team0: Port device team_slave_0 added [ 2991.297971][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2991.329872][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2991.369951][ T9473] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2991.379705][ T9473] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2991.398230][ T9473] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2991.406959][ T9473] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2991.443191][ T9619] bridge0: port 1(bridge_slave_0) entered blocking state [ 2991.458338][ T9619] bridge0: port 1(bridge_slave_0) entered disabled state [ 2991.465500][ T9619] bridge_slave_0: entered allmulticast mode [ 2991.482654][ T9619] bridge_slave_0: entered promiscuous mode [ 2991.499314][ T9595] team0: Port device team_slave_1 added [ 2991.517739][ T9619] bridge0: port 2(bridge_slave_1) entered blocking state [ 2991.528355][ T9619] bridge0: port 2(bridge_slave_1) entered disabled state [ 2991.535532][ T9619] bridge_slave_1: entered allmulticast mode [ 2991.557402][ T9619] bridge_slave_1: entered promiscuous mode [ 2991.681362][ T9561] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2991.697865][ T9619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2991.709331][ T9595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2991.716311][ T9595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2991.744939][ T9595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2991.764453][ T9561] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2991.779091][ T9619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2991.802347][ T9595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2991.817603][ T9595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2991.843916][ T9595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2991.903730][ T9561] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2991.942681][ T9561] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2992.108832][T15857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2992.117025][T15857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2992.131553][ T9619] team0: Port device team_slave_0 added [ 2992.180507][ T9595] hsr_slave_0: entered promiscuous mode [ 2992.207739][ T9595] hsr_slave_1: entered promiscuous mode [ 2992.220410][ T9595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2992.227987][ T9595] Cannot create hsr debugfs directory [ 2992.250876][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2992.343430][ T9619] team0: Port device team_slave_1 added [ 2992.391598][T15857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2992.411612][T15857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2992.471821][ T9619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2992.479277][ T9619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2992.541194][ T9619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2992.570342][ T9619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2992.588322][ T9619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2992.638565][ T9619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2992.731021][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2993.067806][ T9619] hsr_slave_0: entered promiscuous mode [ 2993.078572][ T9619] hsr_slave_1: entered promiscuous mode [ 2993.098459][ T9619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2993.130998][ T9690] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2993.148299][ T9619] Cannot create hsr debugfs directory [ 2993.148554][ T9690] CPU: 1 PID: 9690 Comm: syz-executor.5 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2993.164015][ T9690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2993.174108][ T9690] Call Trace: [ 2993.177410][ T9690] [ 2993.180364][ T9690] dump_stack_lvl+0x136/0x150 [ 2993.185101][ T9690] dump_header+0x10a/0xd70 [ 2993.189557][ T9690] oom_kill_process+0x25d/0x600 [ 2993.194444][ T9690] out_of_memory+0x35c/0x1660 [ 2993.199170][ T9690] ? oom_killer_disable+0x2b0/0x2b0 [ 2993.204407][ T9690] ? mark_held_locks+0x9f/0xe0 [ 2993.209225][ T9690] mem_cgroup_out_of_memory+0x206/0x270 [ 2993.214865][ T9690] ? mem_cgroup_margin+0x130/0x130 [ 2993.220043][ T9690] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 2993.225907][ T9690] memory_max_write+0x2f9/0x3c0 [ 2993.230816][ T9690] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2993.236942][ T9690] ? lock_sync+0x190/0x190 [ 2993.241407][ T9690] cgroup_file_write+0x1e2/0x7b0 [ 2993.246392][ T9690] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2993.252531][ T9690] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2993.257965][ T9690] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2993.263374][ T9690] kernfs_fop_write_iter+0x3f1/0x600 [ 2993.268716][ T9690] vfs_write+0x945/0xd50 [ 2993.272994][ T9690] ? kernel_write+0x670/0x670 [ 2993.277714][ T9690] ? __fget_files+0x26a/0x480 [ 2993.282462][ T9690] ksys_write+0x12b/0x250 [ 2993.286830][ T9690] ? __ia32_sys_read+0xb0/0xb0 [ 2993.291641][ T9690] do_syscall_64+0x39/0xb0 [ 2993.296115][ T9690] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2993.302085][ T9690] RIP: 0033:0x7f3036e8c169 [ 2993.306555][ T9690] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2993.326199][ T9690] RSP: 002b:00007f3037c62168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2993.334656][ T9690] RAX: ffffffffffffffda RBX: 00007f3036fac050 RCX: 00007f3036e8c169 [ 2993.342665][ T9690] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 2993.350674][ T9690] RBP: 00007f3036ee7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2993.358690][ T9690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2993.366689][ T9690] R13: 00007ffcac8f1f5f R14: 00007f3037c62300 R15: 0000000000022000 [ 2993.374713][ T9690] [ 2993.447607][ T9690] memory: usage 10708kB, limit 0kB, failcnt 1040 [ 2993.457451][ T9690] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2993.486419][ T9690] Memory cgroup stats for /syz5: [ 2993.487335][ T9690] anon 118784 [ 2993.487335][ T9690] file 10448896 [ 2993.487335][ T9690] kernel 385024 [ 2993.487335][ T9690] kernel_stack 98304 [ 2993.487335][ T9690] pagetables 81920 [ 2993.487335][ T9690] sec_pagetables 0 [ 2993.487335][ T9690] percpu 64 [ 2993.487335][ T9690] sock 0 [ 2993.487335][ T9690] vmalloc 0 [ 2993.487335][ T9690] shmem 10448896 [ 2993.487335][ T9690] zswap 0 [ 2993.487335][ T9690] zswapped 0 [ 2993.487335][ T9690] file_mapped 278528 [ 2993.487335][ T9690] file_dirty 0 [ 2993.487335][ T9690] file_writeback 0 [ 2993.487335][ T9690] swapcached 0 [ 2993.487335][ T9690] anon_thp 0 [ 2993.487335][ T9690] file_thp 0 [ 2993.487335][ T9690] shmem_thp 0 [ 2993.487335][ T9690] inactive_anon 10448896 [ 2993.487335][ T9690] active_anon 118784 [ 2993.487335][ T9690] inactive_file 0 [ 2993.487335][ T9690] active_file 0 [ 2993.487335][ T9690] unevictable 0 [ 2993.487335][ T9690] slab_reclaimable 55248 [ 2993.487335][ T9690] slab_unreclaimable 122704 [ 2993.487335][ T9690] slab 177952 [ 2993.487335][ T9690] workingset_refault_anon 0 [ 2993.487335][ T9690] workingset_refault_file 0 [ 2993.487335][ T9690] workingset_activate_anon 0 [ 2993.487335][ T9690] workingset_activate_file 0 [ 2993.487335][ T9690] workingset_restore_anon 0 [ 2993.487335][ T9690] workingset_restore_file 0 [ 2993.487335][ T9690] workingset_nodereclaim 0 [ 2993.487335][ T9690] pgscan 716 [ 2993.487335][ T9690] pgsteal 57 [ 2993.487335][ T9690] pgscan_kswapd 0 [ 2993.487335][ T9690] pgscan_direct 716 [ 2993.487335][ T9690] pgscan_khugepaged 0 [ 2993.487335][ T9690] pgsteal_kswapd 0 [ 2993.487335][ T9690] pgsteal_direct 57 [ 2993.487335][ T9690] pgsteal_khugepaged 0 [ 2993.487335][ T9690] pgfault 82419 [ 2993.487335][ T9690] pgmajfault 0 [ 2993.487335][ T9690] pgrefill 25846 [ 2993.487335][ T9690] pgactivate 627 [ 2993.487335][ T9690] pgdeactivate 0 [ 2993.487335][ T9690] pglazyfree 0 [ 2993.487335][ T9690] pglazyfreed 0 [ 2993.487335][ T9690] zswpin 0 [ 2993.487335][ T9690] zswpout 0 [ 2993.487335][ T9690] thp_fault_alloc 0 [ 2993.762741][ T9561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2993.772537][ T9690] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=9685,uid=0 [ 2993.846973][ T9595] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2993.876360][ T9690] Memory cgroup out of memory: Killed process 9690 (syz-executor.5) total-vm:56728kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 01:17:01 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="0008030000086d6f9f487a74dde5e9fac9f9513154ffb3ff030000f56c8374cbe5d99a130e1f636709e048decbe24bb592299846d7bbad3fc61f86a3798700eb2129cf607c223e4b8c7f1687f6d8df1da48cd67815f62156cf2bb02394b3d16f825976c0b0c36e2db48ade28fe642efb21f16681cd5aeebd2341f5c6ab1ecf05adb78fff445806189faf2b6dc37f77dbf2b0a1e6d4b89eff16e67ea60b26c312f08600b3c1d61a0a9c63469ca436d6d2321df23da24e75309e7036cfc5c36d8127ca878c4a65b0f2089ed5593689cded5d46e67477fad72b4a5f2a10345eaf04e2cd7a8f1780cfb74cb95ecc5f2735c7804a7c563fa8ff0b20f049d025a2cdb36612f6b0eb10f49fb1"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) 01:17:01 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="0008030000086d6f9f487a74dde5e9fac9f9513154ffb3ff030000f56c8374cbe5d99a130e1f636709e048decbe24bb592299846d7bbad3fc61f86a3798700eb2129cf607c223e4b8c7f1687f6d8df1da48cd67815f62156cf2bb02394b3d16f825976c0b0c36e2db48ade28fe642efb21f16681cd5aeebd2341f5c6ab1ecf05adb78fff445806189faf2b6dc37f77dbf2b0a1e6d4b89eff16e67ea60b26c312f08600b3c1d61a0a9c63469ca436d6d2321df23da24e75309e7036cfc5c36d8127ca878c4a65b0"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) [ 2993.920063][ T9566] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2994.004626][ T9695] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2994.044789][ T9595] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2994.081855][ T9695] CPU: 1 PID: 9695 Comm: syz-executor.5 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 2994.092319][ T9695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2994.102405][ T9695] Call Trace: [ 2994.105701][ T9695] [ 2994.108651][ T9695] dump_stack_lvl+0x136/0x150 [ 2994.113376][ T9695] dump_header+0x10a/0xd70 [ 2994.117892][ T9695] oom_kill_process+0x25d/0x600 [ 2994.122790][ T9695] out_of_memory+0x35c/0x1660 [ 2994.127502][ T9695] ? find_held_lock+0x2d/0x110 [ 2994.132308][ T9695] ? oom_killer_disable+0x2b0/0x2b0 [ 2994.137548][ T9695] ? rcu_read_unlock+0x9/0x60 [ 2994.142262][ T9695] ? find_held_lock+0x2d/0x110 [ 2994.147066][ T9695] mem_cgroup_out_of_memory+0x206/0x270 [ 2994.152648][ T9695] ? mem_cgroup_margin+0x130/0x130 [ 2994.157795][ T9695] ? lock_downgrade+0x690/0x690 [ 2994.162719][ T9695] try_charge_memcg+0xf99/0x13a0 [ 2994.167735][ T9695] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2994.173764][ T9695] ? rcu_read_unlock+0x9/0x60 [ 2994.178479][ T9695] ? lock_downgrade+0x690/0x690 [ 2994.183385][ T9695] charge_memcg+0x90/0x3b0 [ 2994.187861][ T9695] __mem_cgroup_charge+0x2b/0x90 [ 2994.192826][ T9695] ? copy_mc_to_kernel+0x3e/0x90 [ 2994.197803][ T9695] do_wp_page+0x8ea/0x33c0 [ 2994.202257][ T9695] ? lock_sync+0x190/0x190 [ 2994.206716][ T9695] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2994.212150][ T9695] ? do_raw_spin_lock+0x124/0x2b0 [ 2994.217226][ T9695] ? spin_bug+0x1c0/0x1c0 [ 2994.221604][ T9695] ? lock_downgrade+0x690/0x690 [ 2994.226503][ T9695] __handle_mm_fault+0x1635/0x41c0 [ 2994.231651][ T9695] ? mt_find+0x3b9/0xa60 [ 2994.235938][ T9695] ? vm_iomap_memory+0x190/0x190 [ 2994.240916][ T9695] ? mas_find+0x200/0x200 [ 2994.245314][ T9695] handle_mm_fault+0x2af/0x9f0 [ 2994.250118][ T9695] do_user_addr_fault+0x51a/0x1210 [ 2994.255279][ T9695] exc_page_fault+0x98/0x170 [ 2994.259913][ T9695] asm_exc_page_fault+0x26/0x30 [ 2994.264806][ T9695] RIP: 0010:__put_user_4+0x11/0x20 [ 2994.269955][ T9695] Code: fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa f3 0f 1e [ 2994.289591][ T9695] RSP: 0000:ffffc900034cff38 EFLAGS: 00050202 [ 2994.295686][ T9695] RAX: 0000000000000006 RBX: 0000000000000000 RCX: 0000555555c066d0 [ 2994.303690][ T9695] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffff888026fd0678 [ 2994.311693][ T9695] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffffff8e7a7a97 [ 2994.319691][ T9695] R10: fffffbfff1cf4f52 R11: 0000000000000000 R12: 0000000000000000 [ 2994.327686][ T9695] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2994.335731][ T9695] schedule_tail+0xa8/0xe0 [ 2994.340191][ T9695] ret_from_fork+0x8/0x30 [ 2994.344587][ T9695] [ 2994.363752][ T9566] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2994.385951][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2994.394767][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2994.433483][ T9566] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2994.470552][ T9561] 8021q: adding VLAN 0 to HW filter on device team0 [ 2994.484070][ T9695] memory: usage 10524kB, limit 0kB, failcnt 1072 [ 2994.490790][ T9695] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2994.502341][ T9695] Memory cgroup stats for /syz5: [ 2994.502559][ T9695] anon 53248 [ 2994.502559][ T9695] file 10448896 [ 2994.502559][ T9695] kernel 266240 [ 2994.502559][ T9695] kernel_stack 32768 [ 2994.502559][ T9695] pagetables 57344 [ 2994.502559][ T9695] sec_pagetables 0 [ 2994.502559][ T9695] percpu 128 [ 2994.502559][ T9695] sock 0 [ 2994.502559][ T9695] vmalloc 0 [ 2994.502559][ T9695] shmem 10448896 [ 2994.502559][ T9695] zswap 0 [ 2994.502559][ T9695] zswapped 0 [ 2994.502559][ T9695] file_mapped 278528 [ 2994.502559][ T9695] file_dirty 0 [ 2994.502559][ T9695] file_writeback 0 [ 2994.502559][ T9695] swapcached 0 [ 2994.502559][ T9695] anon_thp 0 [ 2994.502559][ T9695] file_thp 0 [ 2994.502559][ T9695] shmem_thp 0 [ 2994.502559][ T9695] inactive_anon 10448896 [ 2994.502559][ T9695] active_anon 36864 [ 2994.502559][ T9695] inactive_file 0 [ 2994.502559][ T9695] active_file 0 [ 2994.502559][ T9695] unevictable 0 [ 2994.502559][ T9695] slab_reclaimable 39400 [ 2994.502559][ T9695] slab_unreclaimable 109128 [ 2994.502559][ T9695] slab 148528 [ 2994.502559][ T9695] workingset_refault_anon 0 [ 2994.502559][ T9695] workingset_refault_file 0 [ 2994.502559][ T9695] workingset_activate_anon 0 [ 2994.502559][ T9695] workingset_activate_file 0 [ 2994.502559][ T9695] workingset_restore_anon 0 [ 2994.502559][ T9695] workingset_restore_file 0 [ 2994.502559][ T9695] workingset_nodereclaim 0 [ 2994.502559][ T9695] pgscan 716 [ 2994.502559][ T9695] pgsteal 57 [ 2994.502559][ T9695] pgscan_kswapd 0 [ 2994.502559][ T9695] pgscan_direct 716 [ 2994.502559][ T9695] pgscan_khugepaged 0 [ 2994.502559][ T9695] pgsteal_kswapd 0 [ 2994.502559][ T9695] pgsteal_direct 57 [ 2994.502559][ T9695] pgsteal_khugepaged 0 [ 2994.502559][ T9695] pgfault 82439 [ 2994.502559][ T9695] pgmajfault 0 [ 2994.502559][ T9695] pgrefill 25846 [ 2994.502559][ T9695] pgactivate 627 [ 2994.502559][ T9695] pgdeactivate 0 [ 2994.502559][ T9695] pglazyfree 0 [ 2994.502559][ T9695] pglazyfreed 0 [ 2994.502559][ T9695] zswpin 0 [ 2994.502559][ T9695] zswpout 0 [ 2994.502559][ T9695] thp_fault_alloc 0 [ 2994.582587][ T9561] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2994.715688][ T9695] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=9473,uid=0 [ 2994.738411][ T9695] Memory cgroup out of memory: Killed process 9473 (syz-executor.5) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2994.826372][ T9561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2994.850632][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2994.873536][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2994.882504][ T8373] bridge0: port 1(bridge_slave_0) entered blocking state [ 2994.889653][ T8373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2994.897927][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2994.906981][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2994.916194][ T8373] bridge0: port 2(bridge_slave_1) entered blocking state [ 2994.923331][ T8373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2994.931525][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2994.940405][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2994.949665][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2994.958783][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2994.967432][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2994.977580][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2994.996051][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2995.007685][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2995.026323][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2995.037186][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2995.068982][ T9595] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2995.083738][ T9566] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2995.160111][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2995.168130][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2995.178786][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2995.223086][ T9595] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 01:17:03 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) write$cgroup_int(r3, &(0x7f0000000180), 0x12) 01:17:03 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) write$cgroup_int(r3, &(0x7f0000000180), 0x12) [ 2995.566260][ T9619] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2995.634380][ T9566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2995.705380][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2995.719254][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2995.772305][ T9566] 8021q: adding VLAN 0 to HW filter on device team0 [ 2995.811164][ T9619] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2995.888281][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2995.897144][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2995.948785][ T8291] bridge0: port 1(bridge_slave_0) entered blocking state [ 2995.955908][ T8291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2996.018750][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2996.027511][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2996.079188][ T8291] bridge0: port 2(bridge_slave_1) entered blocking state [ 2996.086339][ T8291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2996.155655][ T9561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2996.225095][ T9619] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2996.251603][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2996.268870][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2996.276357][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2996.298404][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2996.329099][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2996.337940][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2996.379441][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2996.407948][ T9566] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2996.450391][ T9566] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2996.478816][ T5049] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2996.487514][ T5049] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2996.496347][ T5049] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2996.504030][ T5049] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2996.513158][ T5049] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2996.587881][ T9619] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2996.639010][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2996.647049][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2996.678985][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2996.687576][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2996.719101][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2996.727664][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2996.748853][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2996.821948][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2996.849493][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2996.878313][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2996.898795][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2996.932790][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2996.958459][ T9561] veth0_vlan: entered promiscuous mode [ 2996.988953][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2996.996780][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2997.048717][ T9561] veth1_vlan: entered promiscuous mode [ 2997.181376][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2997.198936][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2997.232661][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2997.299371][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2997.357473][ T9561] veth0_macvtap: entered promiscuous mode [ 2997.381952][ T9561] veth1_macvtap: entered promiscuous mode [ 2997.440119][ T9595] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2997.521307][ T9595] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2997.532495][ T9595] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2997.562271][ T9595] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2997.630493][ T9561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2997.668189][ T9561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2997.678022][ T9561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2997.768506][ T9561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2997.818638][ T9561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2997.867706][ T9561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2997.898221][ T9561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2997.928352][ T9561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2997.979629][ T9561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2998.025318][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2998.038846][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2998.047189][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2998.107962][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2998.138700][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2998.166975][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2998.185287][ T9561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2998.198584][ T5049] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2998.208407][ T5049] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2998.217363][ T5049] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2998.224944][ T5049] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2998.232529][ T5049] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2998.251433][ T9561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2998.295840][ T9561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2998.347109][ T9561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2998.398194][ T9561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2998.418195][ T9561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2998.428028][ T9561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2998.444237][ T9561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2998.456439][ T9561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2998.480809][ T9566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2998.512120][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2998.547321][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2998.564676][ T9561] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2998.588625][ T9561] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2998.597365][ T9561] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2998.606585][ T4594] Bluetooth: hci2: command 0x0409 tx timeout [ 2998.615037][ T9561] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2998.690340][ T9619] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2998.779943][ T9619] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2998.798755][ T9619] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2998.826713][ T9709] chnl_net:caif_netlink_parms(): no params data found [ 2998.861058][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2998.870999][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2998.885601][ T9566] veth0_vlan: entered promiscuous mode [ 2998.893756][ T9619] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2998.956939][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2998.976254][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2998.996268][ T9566] veth1_vlan: entered promiscuous mode [ 2999.070446][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2999.084253][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2999.092448][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2999.172490][ T9423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2999.194022][ T9423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2999.262762][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2999.362750][ T9566] veth0_macvtap: entered promiscuous mode [ 2999.410674][ T5531] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2999.427267][ T9709] bridge0: port 1(bridge_slave_0) entered blocking state [ 2999.435082][ T9709] bridge0: port 1(bridge_slave_0) entered disabled state [ 2999.442665][ T9709] bridge_slave_0: entered allmulticast mode [ 2999.450845][ T9709] bridge_slave_0: entered promiscuous mode [ 2999.459608][ T9709] bridge0: port 2(bridge_slave_1) entered blocking state [ 2999.466707][ T9709] bridge0: port 2(bridge_slave_1) entered disabled state [ 2999.481417][ T9709] bridge_slave_1: entered allmulticast mode [ 2999.488979][ T9709] bridge_slave_1: entered promiscuous mode [ 2999.503834][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2999.512460][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2999.527312][ T9566] veth1_macvtap: entered promiscuous mode [ 2999.557066][ T5531] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2999.651619][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2999.660480][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2999.685337][ T9595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2999.711047][T15859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2999.722353][ T9709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2999.738679][T15859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2999.793663][ T5531] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2999.836463][ T9566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2999.877694][ T9566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2999.914341][ T9566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2999.950643][ T9566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2999.978433][ T9566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3000.007391][ T9566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.027535][ T9566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3000.048693][ T9566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.067490][ T9566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3000.092260][ T9566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.129335][ T9566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3000.159382][ T9595] 8021q: adding VLAN 0 to HW filter on device team0 [ 3000.189140][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3000.198050][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3000.218914][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3000.227729][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3000.252174][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3000.269068][ T9709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3000.278409][ T4594] Bluetooth: hci4: command 0x0409 tx timeout [ 3000.362513][ T5531] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3000.410506][ T9566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3000.422661][ T9566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.434789][ T9566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3000.445679][ T9566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.455795][ T9566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3000.467134][ T9566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.477228][ T9566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3000.487941][ T9566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.498986][ T9566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3000.513535][ T9566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.540488][ T9566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3000.591415][ T9619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3000.608730][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3000.617430][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3000.627679][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3000.636504][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3000.645194][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 3000.652385][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3000.678853][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3000.687551][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3000.688510][ T4594] Bluetooth: hci2: command 0x041b tx timeout [ 3000.768912][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 3000.776028][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3000.875647][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3000.903885][ T9775] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3000.948289][ T9775] CPU: 0 PID: 9775 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 3000.958677][ T9775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 3000.968758][ T9775] Call Trace: [ 3000.972061][ T9775] [ 3000.975041][ T9775] dump_stack_lvl+0x136/0x150 [ 3000.979791][ T9775] dump_header+0x10a/0xd70 [ 3000.984271][ T9775] oom_kill_process+0x25d/0x600 [ 3000.989171][ T9775] out_of_memory+0x35c/0x1660 [ 3000.993890][ T9775] ? oom_killer_disable+0x2b0/0x2b0 [ 3000.999127][ T9775] ? mark_held_locks+0x9f/0xe0 [ 3001.003947][ T9775] mem_cgroup_out_of_memory+0x206/0x270 [ 3001.009542][ T9775] ? mem_cgroup_margin+0x130/0x130 [ 3001.014714][ T9775] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 3001.020582][ T9775] memory_max_write+0x2f9/0x3c0 [ 3001.025531][ T9775] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3001.031664][ T9775] ? cgroup_file_write+0x8e/0x7b0 [ 3001.036775][ T9775] cgroup_file_write+0x1e2/0x7b0 [ 3001.041794][ T9775] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3001.047932][ T9775] ? cgroup_get_from_path+0x6e0/0x6e0 [ 3001.053372][ T9775] ? cgroup_get_from_path+0x6e0/0x6e0 [ 3001.058782][ T9775] kernfs_fop_write_iter+0x3f1/0x600 [ 3001.064131][ T9775] vfs_write+0x945/0xd50 [ 3001.068428][ T9775] ? kernel_write+0x670/0x670 [ 3001.073145][ T9775] ? __fget_files+0x26a/0x480 [ 3001.077892][ T9775] ksys_write+0x12b/0x250 [ 3001.082260][ T9775] ? __ia32_sys_read+0xb0/0xb0 [ 3001.087079][ T9775] ? syscall_enter_from_user_mode+0x30/0x80 [ 3001.093027][ T9775] do_syscall_64+0x39/0xb0 [ 3001.097501][ T9775] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3001.103448][ T9775] RIP: 0033:0x7feb7be8c169 [ 3001.107901][ T9775] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3001.127544][ T9775] RSP: 002b:00007feb7a9fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3001.135998][ T9775] RAX: ffffffffffffffda RBX: 00007feb7bfac050 RCX: 00007feb7be8c169 [ 3001.144006][ T9775] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 3001.152025][ T9775] RBP: 00007feb7bee7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3001.160027][ T9775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3001.168029][ T9775] R13: 00007ffd2ea4630f R14: 00007feb7a9fe300 R15: 0000000000022000 [ 3001.176055][ T9775] [ 3001.203624][ T9709] team0: Port device team_slave_0 added [ 3001.237436][ T9566] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3001.263076][ T9566] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3001.286126][ T9566] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3001.305140][ T9566] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3001.333345][ T9775] memory: usage 8604kB, limit 0kB, failcnt 2349 [ 3001.387293][ T9775] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3001.418978][ T9775] Memory cgroup stats for /syz1: [ 3001.420427][ T9775] anon 118784 [ 3001.420427][ T9775] file 8331264 [ 3001.420427][ T9775] kernel 348160 [ 3001.420427][ T9775] kernel_stack 98304 [ 3001.420427][ T9775] pagetables 81920 [ 3001.420427][ T9775] sec_pagetables 0 [ 3001.420427][ T9775] percpu 64 [ 3001.420427][ T9775] sock 0 [ 3001.420427][ T9775] vmalloc 0 [ 3001.420427][ T9775] shmem 8331264 [ 3001.420427][ T9775] zswap 0 [ 3001.420427][ T9775] zswapped 0 [ 3001.420427][ T9775] file_mapped 188416 [ 3001.420427][ T9775] file_dirty 0 [ 3001.420427][ T9775] file_writeback 0 [ 3001.420427][ T9775] swapcached 0 [ 3001.420427][ T9775] anon_thp 0 [ 3001.420427][ T9775] file_thp 0 [ 3001.420427][ T9775] shmem_thp 0 [ 3001.420427][ T9775] inactive_anon 8331264 [ 3001.420427][ T9775] active_anon 118784 [ 3001.420427][ T9775] inactive_file 0 [ 3001.420427][ T9775] active_file 0 [ 3001.420427][ T9775] unevictable 0 [ 3001.420427][ T9775] slab_reclaimable 49880 [ 3001.420427][ T9775] slab_unreclaimable 95992 [ 3001.420427][ T9775] slab 145872 [ 3001.420427][ T9775] workingset_refault_anon 0 [ 3001.420427][ T9775] workingset_refault_file 0 [ 3001.420427][ T9775] workingset_activate_anon 0 [ 3001.420427][ T9775] workingset_activate_file 0 [ 3001.420427][ T9775] workingset_restore_anon 0 [ 3001.420427][ T9775] workingset_restore_file 0 [ 3001.420427][ T9775] workingset_nodereclaim 0 [ 3001.420427][ T9775] pgscan 611 [ 3001.420427][ T9775] pgsteal 60 [ 3001.420427][ T9775] pgscan_kswapd 0 [ 3001.420427][ T9775] pgscan_direct 611 [ 3001.420427][ T9775] pgscan_khugepaged 0 [ 3001.420427][ T9775] pgsteal_kswapd 0 [ 3001.420427][ T9775] pgsteal_direct 60 [ 3001.420427][ T9775] pgsteal_khugepaged 0 [ 3001.420427][ T9775] pgfault 38905 [ 3001.420427][ T9775] pgmajfault 0 [ 3001.420427][ T9775] pgrefill 1873 [ 3001.420427][ T9775] pgactivate 551 [ 3001.420427][ T9775] pgdeactivate 0 [ 3001.420427][ T9775] pglazyfree 0 [ 3001.420427][ T9775] pglazyfreed 0 [ 3001.420427][ T9775] zswpin 0 [ 3001.420427][ T9775] zswpout 0 [ 3001.420427][ T9775] thp_fault_alloc 0 [ 3001.639541][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3001.660739][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3001.669842][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3001.679728][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3001.688437][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3001.696311][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3001.704339][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3001.713180][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3001.722287][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3001.735620][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3001.744141][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3001.752853][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3001.762970][ T9709] team0: Port device team_slave_1 added [ 3001.829393][ T9619] 8021q: adding VLAN 0 to HW filter on device team0 [ 3001.840131][ T9595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3001.854180][ T9732] chnl_net:caif_netlink_parms(): no params data found [ 3001.883063][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3001.977285][ T9709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3001.992830][ T9709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3002.078602][ T9709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3002.118831][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3002.127498][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3002.135803][ T9775] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 3002.152953][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 3002.165530][ T9775] ,oom_memcg= [ 3002.169496][ T5096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3002.228357][ T9775] /syz1,task_memcg=/syz1,task=syz-executor.1,pid=9772,uid=0 [ 3002.269394][ T9709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3002.276378][ T9709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 01:17:10 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, r1, 0x5, r5, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r4, &(0x7f0000000180), 0x12) [ 3002.309930][ T9775] Memory cgroup out of memory: Killed process 9772 (syz-executor.1) total-vm:54680kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3002.332759][ T9709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3002.359073][ T4594] Bluetooth: hci4: command 0x041b tx timeout [ 3002.398639][ T9561] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 3002.410246][ T9561] CPU: 0 PID: 9561 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 3002.420622][ T9561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 3002.430701][ T9561] Call Trace: [ 3002.434006][ T9561] [ 3002.436954][ T9561] dump_stack_lvl+0x136/0x150 [ 3002.441687][ T9561] dump_header+0x10a/0xd70 [ 3002.446145][ T9561] oom_kill_process+0x25d/0x600 [ 3002.451034][ T9561] out_of_memory+0x35c/0x1660 [ 3002.455750][ T9561] ? find_held_lock+0x2d/0x110 [ 3002.460557][ T9561] ? oom_killer_disable+0x2b0/0x2b0 [ 3002.465789][ T9561] ? rcu_read_unlock+0x9/0x60 [ 3002.470500][ T9561] ? find_held_lock+0x2d/0x110 [ 3002.475302][ T9561] mem_cgroup_out_of_memory+0x206/0x270 [ 3002.480889][ T9561] ? mem_cgroup_margin+0x130/0x130 [ 3002.486046][ T9561] ? lock_downgrade+0x690/0x690 [ 3002.490967][ T9561] try_charge_memcg+0xf99/0x13a0 [ 3002.495969][ T9561] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3002.501995][ T9561] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3002.507756][ T9561] ? lock_downgrade+0x690/0x690 [ 3002.512652][ T9561] ? lock_downgrade+0x690/0x690 [ 3002.517568][ T9561] obj_cgroup_charge+0x2af/0x5e0 [ 3002.522563][ T9561] ? vm_area_dup+0x23/0x300 [ 3002.527111][ T9561] kmem_cache_alloc+0xb1/0x3b0 [ 3002.531922][ T9561] vm_area_dup+0x23/0x300 [ 3002.536304][ T9561] dup_mmap+0x713/0x19d0 [ 3002.540596][ T9561] ? replace_mm_exe_file+0x4c0/0x4c0 [ 3002.545928][ T9561] ? lockdep_hardirqs_on+0x7d/0x100 [ 3002.551186][ T9561] ? mm_init+0xc7a/0x1030 [ 3002.555561][ T9561] copy_process+0x65ae/0x7600 [ 3002.560292][ T9561] ? _raw_spin_unlock+0x28/0x40 [ 3002.565210][ T9561] ? pidfd_prepare+0x80/0x80 [ 3002.569862][ T9561] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3002.575929][ T9561] kernel_clone+0xeb/0x890 [ 3002.580407][ T9561] ? create_io_thread+0xe0/0xe0 [ 3002.585304][ T9561] ? do_user_addr_fault+0x2b1/0x1210 [ 3002.590628][ T9561] ? reacquire_held_locks+0x216/0x4e0 [ 3002.596043][ T9561] ? do_user_addr_fault+0x2b1/0x1210 [ 3002.601403][ T9561] ? find_held_lock+0x2d/0x110 [ 3002.606210][ T9561] __do_sys_clone+0xba/0x100 [ 3002.610843][ T9561] ? kernel_clone+0x890/0x890 [ 3002.615597][ T9561] ? syscall_enter_from_user_mode+0x26/0x80 [ 3002.621534][ T9561] do_syscall_64+0x39/0xb0 [ 3002.626038][ T9561] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3002.631980][ T9561] RIP: 0033:0x7feb7be89e9b [ 3002.636419][ T9561] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 3002.656093][ T9561] RSP: 002b:00007ffd2ea46550 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3002.664536][ T9561] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007feb7be89e9b [ 3002.672530][ T9561] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3002.680538][ T9561] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555cf7400 [ 3002.688533][ T9561] R10: 0000555555cf76d0 R11: 0000000000000246 R12: 0000000000000001 [ 3002.696525][ T9561] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd2ea46630 [ 3002.704543][ T9561] [ 3002.718518][ T9561] memory: usage 8416kB, limit 0kB, failcnt 2368 [ 3002.724796][ T9561] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3002.740889][ T9561] Memory cgroup stats for /syz1: [ 3002.741105][ T9561] anon 45056 [ 3002.741105][ T9561] file 8331264 [ 3002.741105][ T9561] kernel 204800 [ 3002.741105][ T9561] kernel_stack 32768 [ 3002.741105][ T9561] pagetables 40960 [ 3002.741105][ T9561] sec_pagetables 0 [ 3002.741105][ T9561] percpu 128 [ 3002.741105][ T9561] sock 0 [ 3002.741105][ T9561] vmalloc 0 [ 3002.741105][ T9561] shmem 8331264 [ 3002.741105][ T9561] zswap 0 [ 3002.741105][ T9561] zswapped 0 [ 3002.741105][ T9561] file_mapped 176128 [ 3002.741105][ T9561] file_dirty 0 [ 3002.741105][ T9561] file_writeback 0 [ 3002.741105][ T9561] swapcached 0 [ 3002.741105][ T9561] anon_thp 0 [ 3002.741105][ T9561] file_thp 0 [ 3002.741105][ T9561] shmem_thp 0 [ 3002.741105][ T9561] inactive_anon 8331264 [ 3002.741105][ T9561] active_anon 45056 [ 3002.741105][ T9561] inactive_file 0 [ 3002.741105][ T9561] active_file 0 [ 3002.741105][ T9561] unevictable 0 [ 3002.741105][ T9561] slab_reclaimable 29888 [ 3002.741105][ T9561] slab_unreclaimable 71736 [ 3002.741105][ T9561] slab 101624 [ 3002.741105][ T9561] workingset_refault_anon 0 [ 3002.741105][ T9561] workingset_refault_file 0 [ 3002.741105][ T9561] workingset_activate_anon 0 [ 3002.741105][ T9561] workingset_activate_file 0 [ 3002.741105][ T9561] workingset_restore_anon 0 [ 3002.741105][ T9561] workingset_restore_file 0 [ 3002.741105][ T9561] workingset_nodereclaim 0 [ 3002.741105][ T9561] pgscan 611 [ 3002.741105][ T9561] pgsteal 60 [ 3002.741105][ T9561] pgscan_kswapd 0 [ 3002.741105][ T9561] pgscan_direct 611 [ 3002.741105][ T9561] pgscan_khugepaged 0 [ 3002.741105][ T9561] pgsteal_kswapd 0 [ 3002.741105][ T9561] pgsteal_direct 60 [ 3002.741105][ T9561] pgsteal_khugepaged 0 [ 3002.741105][ T9561] pgfault 38925 [ 3002.741105][ T9561] pgmajfault 0 [ 3002.741105][ T9561] pgrefill 1873 [ 3002.741105][ T9561] pgactivate 551 [ 3002.741105][ T9561] pgdeactivate 0 [ 3002.741105][ T9561] pglazyfree 0 [ 3002.741105][ T9561] pglazyfreed 0 [ 3002.741105][ T9561] zswpin 0 [ 3002.741105][ T9561] zswpout 0 [ 3002.741105][ T9561] thp_fault_alloc 0 [ 3002.743871][T28784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3002.746124][ T9561] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset= [ 3002.942240][ T4594] Bluetooth: hci2: command 0x040f tx timeout [ 3002.982817][T28784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3002.999708][T28784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3003.008702][T28784] bridge0: port 2(bridge_slave_1) entered blocking state [ 3003.015828][T28784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3003.024002][T28784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3003.033234][T28784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3003.114876][ T9561] syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=9561,uid=0 [ 3003.149514][ T9561] Memory cgroup out of memory: Killed process 9561 (syz-executor.1) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3003.151444][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3003.200676][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3003.210220][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3003.219471][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3003.229634][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3003.337087][ T5531] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3003.503366][ T9709] hsr_slave_0: entered promiscuous mode [ 3003.515325][ T9709] hsr_slave_1: entered promiscuous mode [ 3003.530491][ T9709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3003.538136][ T9709] Cannot create hsr debugfs directory [ 3003.556852][ T9619] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3003.581341][ T9619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 01:17:11 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x80, 0x7d, 0x0, 0x8, 0x0, 0x0, 0x1080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x78, 0x2, @perf_config_ext={0x4, 0x1}, 0x10010, 0x1, 0xffffff05, 0x9, 0xc00, 0x8000, 0x7, 0x0, 0x7, 0x0, 0x2b4d0000000}, r1, 0x5, r5, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r4, &(0x7f0000000180), 0x12) [ 3003.601399][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3003.609990][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3003.618767][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3003.626225][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3003.633838][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3003.643302][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3003.683928][ T5531] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3003.740179][ T9595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3003.811010][ T9732] bridge0: port 1(bridge_slave_0) entered blocking state [ 3003.818121][ T9732] bridge0: port 1(bridge_slave_0) entered disabled state [ 3003.838461][ T9732] bridge_slave_0: entered allmulticast mode [ 3003.845437][ T9732] bridge_slave_0: entered promiscuous mode [ 3003.878438][ T9423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3003.886953][ T9423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3003.959142][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3003.967022][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3003.986915][ T5531] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3004.004102][ T9732] bridge0: port 2(bridge_slave_1) entered blocking state [ 3004.019275][ T9732] bridge0: port 2(bridge_slave_1) entered disabled state [ 3004.026439][ T9732] bridge_slave_1: entered allmulticast mode [ 3004.048325][ T9732] bridge_slave_1: entered promiscuous mode [ 3004.198866][ T5531] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3004.240969][ T9732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3004.261576][ T9732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3004.338963][ T5541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3004.388225][ T5541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3004.438937][ T4594] Bluetooth: hci4: command 0x040f tx timeout [ 3004.464495][ T9732] team0: Port device team_slave_0 added [ 3004.536954][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3004.570974][ T9732] team0: Port device team_slave_1 added [ 3004.690405][ T9732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3004.707376][ T9732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3004.783852][ T9732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3004.830659][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3004.839922][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3004.856439][ T9619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3004.903643][ T9826] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3004.967709][ T9826] CPU: 1 PID: 9826 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 3004.978088][ T9826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 3004.988188][ T9826] Call Trace: [ 3004.991532][ T9826] [ 3004.994498][ T9826] dump_stack_lvl+0x136/0x150 [ 3004.999240][ T9826] dump_header+0x10a/0xd70 [ 3005.003715][ T9826] oom_kill_process+0x25d/0x600 [ 3005.008610][ T9826] out_of_memory+0x35c/0x1660 [ 3005.013354][ T9826] ? oom_killer_disable+0x2b0/0x2b0 [ 3005.018551][ T4594] Bluetooth: hci2: command 0x0419 tx timeout [ 3005.018598][ T9826] ? mark_held_locks+0x9f/0xe0 [ 3005.029400][ T9826] mem_cgroup_out_of_memory+0x206/0x270 [ 3005.035006][ T9826] ? mem_cgroup_margin+0x130/0x130 [ 3005.040183][ T9826] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 3005.046051][ T9826] memory_max_write+0x2f9/0x3c0 [ 3005.050978][ T9826] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3005.057104][ T9826] ? lock_sync+0x190/0x190 [ 3005.061576][ T9826] cgroup_file_write+0x1e2/0x7b0 [ 3005.066561][ T9826] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3005.072685][ T9826] ? cgroup_get_from_path+0x6e0/0x6e0 [ 3005.078104][ T9826] ? kernfs_get_active+0x96/0x150 [ 3005.083194][ T9826] ? cgroup_get_from_path+0x6e0/0x6e0 [ 3005.088626][ T9826] kernfs_fop_write_iter+0x3f1/0x600 [ 3005.093986][ T9826] vfs_write+0x945/0xd50 [ 3005.098275][ T9826] ? kernel_write+0x670/0x670 [ 3005.103000][ T9826] ? __fget_files+0x26a/0x480 [ 3005.107755][ T9826] ksys_write+0x12b/0x250 [ 3005.112130][ T9826] ? __ia32_sys_read+0xb0/0xb0 [ 3005.116937][ T9826] ? syscall_enter_from_user_mode+0x26/0x80 [ 3005.122894][ T9826] do_syscall_64+0x39/0xb0 [ 3005.127369][ T9826] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3005.133308][ T9826] RIP: 0033:0x7f6906e8c169 [ 3005.137761][ T9826] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3005.157418][ T9826] RSP: 002b:00007f6907c76168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3005.165876][ T9826] RAX: ffffffffffffffda RBX: 00007f6906fac050 RCX: 00007f6906e8c169 [ 3005.173882][ T9826] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 3005.181888][ T9826] RBP: 00007f6906ee7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3005.189889][ T9826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3005.197939][ T9826] R13: 00007ffd5993579f R14: 00007f6907c76300 R15: 0000000000022000 [ 3005.205978][ T9826] [ 3005.257805][ T9732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3005.292545][ T9732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3005.349324][ T9732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3005.408814][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3005.417888][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3005.467879][ T9826] memory: usage 10684kB, limit 0kB, failcnt 990 [ 3005.475499][ T9826] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3005.493336][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3005.508922][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3005.519525][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3005.527357][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3005.542143][ T9826] Memory cgroup stats for /syz3: [ 3005.542369][ T9826] anon 118784 [ 3005.542369][ T9826] file 10452992 [ 3005.542369][ T9826] kernel 319488 [ 3005.542369][ T9826] kernel_stack 65536 [ 3005.542369][ T9826] pagetables 81920 [ 3005.542369][ T9826] sec_pagetables 0 [ 3005.542369][ T9826] percpu 64 [ 3005.542369][ T9826] sock 0 [ 3005.542369][ T9826] vmalloc 0 [ 3005.542369][ T9826] shmem 10452992 [ 3005.542369][ T9826] zswap 0 [ 3005.542369][ T9826] zswapped 0 [ 3005.542369][ T9826] file_mapped 344064 [ 3005.542369][ T9826] file_dirty 0 [ 3005.542369][ T9826] file_writeback 0 [ 3005.542369][ T9826] swapcached 0 [ 3005.542369][ T9826] anon_thp 0 [ 3005.542369][ T9826] file_thp 0 [ 3005.542369][ T9826] shmem_thp 0 [ 3005.542369][ T9826] inactive_anon 0 [ 3005.542369][ T9826] active_anon 10571776 [ 3005.542369][ T9826] inactive_file 0 [ 3005.542369][ T9826] active_file 0 [ 3005.542369][ T9826] unevictable 0 [ 3005.542369][ T9826] slab_reclaimable 52744 [ 3005.542369][ T9826] slab_unreclaimable 90584 [ 3005.542369][ T9826] slab 143328 [ 3005.542369][ T9826] workingset_refault_anon 0 [ 3005.542369][ T9826] workingset_refault_file 0 [ 3005.542369][ T9826] workingset_activate_anon 0 [ 3005.542369][ T9826] workingset_activate_file 0 [ 3005.542369][ T9826] workingset_restore_anon 0 [ 3005.542369][ T9826] workingset_restore_file 0 [ 3005.542369][ T9826] workingset_nodereclaim 0 [ 3005.542369][ T9826] pgscan 316 [ 3005.542369][ T9826] pgsteal 81 [ 3005.542369][ T9826] pgscan_kswapd 0 [ 3005.542369][ T9826] pgscan_direct 316 [ 3005.542369][ T9826] pgscan_khugepaged 0 [ 3005.542369][ T9826] pgsteal_kswapd 0 [ 3005.542369][ T9826] pgsteal_direct 81 [ 3005.542369][ T9826] pgsteal_khugepaged 0 [ 3005.542369][ T9826] pgfault 61509 [ 3005.542369][ T9826] pgmajfault 0 [ 3005.542369][ T9826] pgrefill 914 [ 3005.542369][ T9826] pgactivate 235 [ 3005.542369][ T9826] pgdeactivate 0 [ 3005.542369][ T9826] pglazyfree 0 [ 3005.542369][ T9826] pglazyfreed 0 01:17:13 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="0008030000086d6f9f487a74dde5e9fac9f9513154ffb3ff030000f56c8374cbe5d99a130e1f636709e048decbe24bb592299846d7bbad3fc61f86a3798700eb2129cf607c223e4b8c7f1687f6d8df1da48cd67815f62156cf2bb02394b3d16f825976c0b0c36e2db48ade28fe642efb21f16681cd5aeebd2341f5c6ab1ecf05adb78fff44"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) 01:17:13 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x80, 0x7d, 0x0, 0x8, 0x0, 0x0, 0x1080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x78, 0x2, @perf_config_ext={0x4, 0x1}, 0x10010, 0x1, 0xffffff05, 0x9, 0xc00, 0x8000, 0x7, 0x0, 0x7, 0x0, 0x2b4d0000000}, r1, 0x5, r5, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r4, &(0x7f0000000180), 0x12) [ 3005.542369][ T9826] zswpin 0 [ 3005.542369][ T9826] zswpout 0 [ 3005.542369][ T9826] thp_fault_alloc 0 [ 3005.733640][ T9826] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=9822,uid=0 [ 3005.751987][ T9826] Memory cgroup out of memory: Killed process 9826 (syz-executor.3) total-vm:56728kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3005.802187][ T9566] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 3005.819421][ T9566] CPU: 0 PID: 9566 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 3005.829778][ T9566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 3005.839854][ T9566] Call Trace: [ 3005.843150][ T9566] [ 3005.846129][ T9566] dump_stack_lvl+0x136/0x150 [ 3005.850859][ T9566] dump_header+0x10a/0xd70 [ 3005.855312][ T9566] oom_kill_process+0x25d/0x600 [ 3005.860209][ T9566] out_of_memory+0x35c/0x1660 [ 3005.865010][ T9566] ? find_held_lock+0x2d/0x110 [ 3005.869813][ T9566] ? oom_killer_disable+0x2b0/0x2b0 [ 3005.875043][ T9566] ? rcu_read_unlock+0x9/0x60 [ 3005.879762][ T9566] ? find_held_lock+0x2d/0x110 [ 3005.884568][ T9566] mem_cgroup_out_of_memory+0x206/0x270 [ 3005.890195][ T9566] ? mem_cgroup_margin+0x130/0x130 [ 3005.895342][ T9566] ? lock_downgrade+0x690/0x690 [ 3005.900253][ T9566] try_charge_memcg+0xf99/0x13a0 [ 3005.905246][ T9566] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3005.911278][ T9566] ? rcu_read_unlock+0x9/0x60 [ 3005.915989][ T9566] ? lock_downgrade+0x690/0x690 [ 3005.920900][ T9566] charge_memcg+0x90/0x3b0 [ 3005.925363][ T9566] __mem_cgroup_charge+0x2b/0x90 [ 3005.930333][ T9566] ? copy_mc_to_kernel+0x3e/0x90 [ 3005.935320][ T9566] do_wp_page+0x8ea/0x33c0 [ 3005.939776][ T9566] ? lock_sync+0x190/0x190 [ 3005.944231][ T9566] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3005.949644][ T9566] ? do_raw_spin_lock+0x124/0x2b0 [ 3005.954709][ T9566] ? spin_bug+0x1c0/0x1c0 [ 3005.959125][ T9566] __handle_mm_fault+0x1635/0x41c0 [ 3005.964275][ T9566] ? vm_iomap_memory+0x190/0x190 [ 3005.969328][ T9566] ? mas_walk+0x58f/0x730 [ 3005.973706][ T9566] ? numa_migrate_prep+0x3a0/0x3a0 [ 3005.978903][ T9566] handle_mm_fault+0x2af/0x9f0 [ 3005.983715][ T9566] do_user_addr_fault+0x2ca/0x1210 [ 3005.988868][ T9566] ? rcu_is_watching+0x12/0xb0 [ 3005.993682][ T9566] exc_page_fault+0x98/0x170 [ 3005.998333][ T9566] asm_exc_page_fault+0x26/0x30 [ 3006.003238][ T9566] RIP: 0033:0x7f6906e89f50 [ 3006.007703][ T9566] Code: 89 e8 5d 41 5c 41 5d c3 66 90 48 c7 c2 b8 ff ff ff f7 d8 41 bd ff ff ff ff 64 89 02 85 ed 74 14 48 83 3d 9a 90 0f 00 00 74 05 5b 16 fd ff e8 16 bf fc ff 44 89 e6 bf 02 00 00 00 e8 99 cb fc [ 3006.027337][ T9566] RSP: 002b:00007ffd599359e0 EFLAGS: 00010202 [ 3006.033438][ T9566] RAX: 0000000000000006 RBX: 0000000000000000 RCX: 00007f6906e89e9b [ 3006.041434][ T9566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3006.049436][ T9566] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555cd4400 [ 3006.057518][ T9566] R10: 0000555555cd46d0 R11: 0000000000000246 R12: 0000000000000001 [ 3006.065511][ T9566] R13: 0000000000000006 R14: 0000000000000001 R15: 00007ffd59935ac0 [ 3006.073529][ T9566] [ 3006.080947][ T9566] memory: usage 10512kB, limit 0kB, failcnt 1028 [ 3006.087317][ T9566] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3006.094345][ T9566] Memory cgroup stats for /syz3: [ 3006.094550][ T9566] anon 36864 [ 3006.094550][ T9566] file 10452992 [ 3006.094550][ T9566] kernel 274432 [ 3006.094550][ T9566] kernel_stack 32768 [ 3006.094550][ T9566] pagetables 57344 [ 3006.094550][ T9566] sec_pagetables 0 [ 3006.094550][ T9566] percpu 128 [ 3006.094550][ T9566] sock 0 [ 3006.094550][ T9566] vmalloc 0 [ 3006.094550][ T9566] shmem 10452992 [ 3006.094550][ T9566] zswap 0 [ 3006.094550][ T9566] zswapped 0 [ 3006.094550][ T9566] file_mapped 323584 [ 3006.094550][ T9566] file_dirty 0 [ 3006.094550][ T9566] file_writeback 0 [ 3006.094550][ T9566] swapcached 0 [ 3006.094550][ T9566] anon_thp 0 [ 3006.094550][ T9566] file_thp 0 [ 3006.094550][ T9566] shmem_thp 0 [ 3006.094550][ T9566] inactive_anon 0 [ 3006.094550][ T9566] active_anon 10489856 [ 3006.094550][ T9566] inactive_file 0 [ 3006.094550][ T9566] active_file 0 [ 3006.094550][ T9566] unevictable 0 [ 3006.094550][ T9566] slab_reclaimable 63536 [ 3006.094550][ T9566] slab_unreclaimable 91344 [ 3006.094550][ T9566] slab 154880 [ 3006.094550][ T9566] workingset_refault_anon 0 [ 3006.094550][ T9566] workingset_refault_file 0 [ 3006.094550][ T9566] workingset_activate_anon 0 [ 3006.094550][ T9566] workingset_activate_file 0 [ 3006.094550][ T9566] workingset_restore_anon 0 [ 3006.094550][ T9566] workingset_restore_file 0 [ 3006.094550][ T9566] workingset_nodereclaim 0 [ 3006.094550][ T9566] pgscan 316 [ 3006.094550][ T9566] pgsteal 81 [ 3006.094550][ T9566] pgscan_kswapd 0 [ 3006.094550][ T9566] pgscan_direct 316 [ 3006.094550][ T9566] pgscan_khugepaged 0 [ 3006.094550][ T9566] pgsteal_kswapd 0 [ 3006.094550][ T9566] pgsteal_direct 81 [ 3006.094550][ T9566] pgsteal_khugepaged 0 [ 3006.094550][ T9566] pgfault 61518 [ 3006.094550][ T9566] pgmajfault 0 [ 3006.094550][ T9566] pgrefill 914 [ 3006.094550][ T9566] pgactivate 235 [ 3006.094550][ T9566] pgdeactivate 0 [ 3006.094550][ T9566] pglazyfree 0 [ 3006.094550][ T9566] pglazyfreed 0 [ 3006.094550][ T9566] zswpin 0 [ 3006.094550][ T9566] zswpout 0 [ 3006.094550][ T9566] thp_fault_alloc 0 [ 3006.295381][ T9732] hsr_slave_0: entered promiscuous mode [ 3006.369142][ T9732] hsr_slave_1: entered promiscuous mode [ 3006.381578][ T9732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3006.398316][ T9732] Cannot create hsr debugfs directory [ 3006.405737][ T9595] veth0_vlan: entered promiscuous mode [ 3006.411789][ T9566] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=9566,uid=0 [ 3006.463445][ T9566] Memory cgroup out of memory: Killed process 9566 (syz-executor.3) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 3006.518880][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3006.527104][ T4594] Bluetooth: hci4: command 0x0419 tx timeout [ 3006.549245][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3006.624826][ T9595] veth1_vlan: entered promiscuous mode [ 3006.984148][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3007.001159][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3007.020959][ T9619] veth0_vlan: entered promiscuous mode [ 3007.273833][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3007.282237][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3007.474749][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3007.499480][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3007.509195][ T9619] veth1_vlan: entered promiscuous mode [ 3007.613620][ T9595] veth0_macvtap: entered promiscuous mode [ 3007.647543][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3007.666696][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3007.736782][ T9595] veth1_macvtap: entered promiscuous mode [ 3007.875900][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3007.914890][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3007.938349][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3007.958230][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3007.968064][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3008.008326][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3008.038320][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3008.038865][ T5049] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3008.057033][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3008.059323][ T5049] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3008.075110][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3008.085975][ T5049] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3008.093955][ T5049] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3008.101650][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3008.111789][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3008.122685][ T5049] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3008.130245][ T5049] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3008.146782][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3008.159538][ T9595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3008.171293][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3008.184012][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3008.193957][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3008.210609][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3008.220552][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3008.231056][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3008.258190][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3008.278189][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3008.291113][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3008.301606][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3008.311469][ T9595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3008.322156][ T9595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3008.333769][ T9595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3008.348338][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3008.360247][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3008.374539][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3008.398827][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3008.617601][ T9595] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3008.639629][ T9595] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3008.658267][ T9595] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3008.667014][ T9595] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3008.694458][ T9619] veth0_macvtap: entered promiscuous mode [ 3008.722438][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3008.731780][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3008.826489][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3008.845416][ T9619] veth1_macvtap: entered promiscuous mode [ 3008.960210][ T9709] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3009.057188][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3009.082001][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3009.098181][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3009.119769][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3009.129933][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3009.140641][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3009.150552][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3009.161729][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3009.171933][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3009.182581][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3009.193895][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3009.204695][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3009.215414][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3009.226132][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3009.237847][ T9619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3009.298287][ T9709] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3009.312988][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3009.322662][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3009.334311][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3009.345924][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3009.355839][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3009.366326][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3009.376441][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3009.387181][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3009.407463][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3009.421555][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3009.431772][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3009.442459][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3009.452462][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3009.463103][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3009.473225][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3009.483908][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3009.497978][ T9619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3009.563541][ T9709] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3009.637046][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3009.646648][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3009.671163][ T9619] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3009.697222][ T9619] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3009.706530][ T9619] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3009.728642][ T9619] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3009.788538][ T9709] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3009.871722][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3009.914498][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3010.072488][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3010.127089][ T9854] chnl_net:caif_netlink_parms(): no params data found [ 3010.199574][ T4594] Bluetooth: hci0: command 0x0409 tx timeout [ 3010.230355][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3010.242975][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3010.288077][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3010.455897][ T9423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3010.468295][ T9423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3010.511841][ T9732] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3010.522793][T28787] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3010.531539][ T9854] bridge0: port 1(bridge_slave_0) entered blocking state [ 3010.540604][ T9854] bridge0: port 1(bridge_slave_0) entered disabled state [ 3010.547797][ T9854] bridge_slave_0: entered allmulticast mode 01:17:18 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="0008030000086d6f9f487a74dde5e9fac9f9513154ffb3ff030000f56c8374cbe5d99a130e1f636709e048decbe24bb592299846d7bbad3fc61f86a3798700eb2129cf607c223e4b8c7f1687f6d8df1da48cd67815f62156cf2bb02394b3d16f825976c0b0c36e2db48ade28fe642efb21f16681cd5aeebd2341f5c6ab1ecf05adb78fff44"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) 01:17:18 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000300)) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x10) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xc, 0x9456, 0x8001, 0x2, 0x5be8b956abcff5ec, r3, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x48) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0)={r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x9, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000080000000000000001000100071506000100008018260000", @ANYRES32=r6, @ANYBLOB="0000a348694eef96594286dd", @ANYRES32=r1, @ANYBLOB="000000000000000085200000050000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x1f, &(0x7f0000000400)=""/31, 0x40f00, 0x17, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0xe, 0xae, 0x4af0}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r7, r8, r2, r1, r1]}, 0x80) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0xb8}, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) openat$cgroup_ro(r3, &(0x7f0000000180)='rdma.current\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8946, &(0x7f0000000080)) [ 3010.558971][ T9854] bridge_slave_0: entered promiscuous mode [ 3010.576557][ T9709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3010.583852][ T9732] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3010.626426][ T9854] bridge0: port 2(bridge_slave_1) entered blocking state [ 3010.648048][ T9854] bridge0: port 2(bridge_slave_1) entered disabled state [ 3010.663079][ T9854] bridge_slave_1: entered allmulticast mode [ 3010.670804][ T9854] bridge_slave_1: entered promiscuous mode [ 3010.703475][ T7022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3010.718612][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3010.726923][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3010.738348][ T7022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3010.768770][ T9732] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3010.800173][ T9732] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3010.827966][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3010.896661][ T9854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3010.930143][ T9709] 8021q: adding VLAN 0 to HW filter on device team0 [ 3010.976289][ T9854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3011.028582][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3011.037190][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3011.045983][T32601] bridge0: port 1(bridge_slave_0) entered blocking state [ 3011.053127][T32601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3011.077841][ T9854] team0: Port device team_slave_0 added [ 3011.102600][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3011.111580][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3011.120399][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3011.130602][ T8291] bridge0: port 2(bridge_slave_1) entered blocking state [ 3011.137712][ T8291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3011.168888][ T9854] team0: Port device team_slave_1 added [ 3011.207033][ T9854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3011.225368][ T27] audit: type=1800 audit(1686187038.988:9): pid=9882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=1945 res=0 errno=0 [ 3011.226226][ T9854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 01:17:19 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000300)) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x10) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xc, 0x9456, 0x8001, 0x2, 0x5be8b956abcff5ec, r3, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x48) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0)={r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x9, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000080000000000000001000100071506000100008018260000", @ANYRES32=r6, @ANYBLOB="0000a348694eef96594286dd", @ANYRES32=r1, @ANYBLOB="000000000000000085200000050000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x1f, &(0x7f0000000400)=""/31, 0x40f00, 0x17, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0xe, 0xae, 0x4af0}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r7, r8, r2, r1, r1]}, 0x80) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') (async) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0xb8}, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) openat$cgroup_ro(r3, &(0x7f0000000180)='rdma.current\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8946, &(0x7f0000000080)) 01:17:19 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100ff010000000000000040000000000000000001000f00000000000007020000004a69ba7c2f"], 0x0, 0x49}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0506617, &(0x7f0000000040)=0x2) r2 = syz_clone(0x5000400, &(0x7f0000000180)="3084ae548f63a5001fc11859d91c859319d7bc320a0ddfe939e9", 0x1a, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x0, 0x6, 0xa, 0x0, 0x0, 0x10200, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x80}, 0x80000, 0x200, 0x5, 0x1, 0x2b, 0x5, 0x7, 0x0, 0x3, 0x0, 0x2}, r2, 0x2, r1, 0x1) getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000000c0)="8c389e14f086dda56a5ced3f888eb1ff5295ba24020a3b93459e05ff", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x10, &(0x7f0000000280)={r4, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0xfffffffffffffd37) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x7, 0x3f, 0xd9, 0x8, 0x0, 0x7, 0x30002, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x2, 0x5}, 0x20, 0x9, 0x3, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x400}, r4, 0xb, r0, 0x9) close(r3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x1000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x7, 0x100, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r5 = syz_clone(0xcf3484414d5dc7f8, &(0x7f0000000540)="5e4f6fbe29b9754c905e364f94e9d38c60a4a021a604a6d27901be561599c3611c3d8d06025626bf143b077dd1", 0x2d, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="80ff7caf8143273a268a2ae72fa8fbb59985e2b276fdb8ad0ea10728cc75b6db0be5c9f19b85922d206dab2f2363de89e40250cf3007a275feb3e8f7fec3500739afecb45f479681fb91de0421205916ecd38163fa7d2def7d65c481263ba04ba68fbfb6a289945c1faef839a840108dbeecf15cedadd23c95") r6 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f5, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x10100, 0xffd, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xe, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x8, 0x6, 0x0, 0x0, 0x0, 0x4, 0x2400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8c9, 0x2, @perf_config_ext={0x7, 0x1f}, 0x8, 0x2, 0x2, 0x7, 0x1, 0x80000001, 0x7, 0x0, 0x9, 0x0, 0x9}, r5, 0xb, r6, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) [ 3011.278677][ T9854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3011.321160][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3011.343212][ T9854] batman_adv: batadv0: Adding interface: batadv_slave_1 01:17:19 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000002f40)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x80) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x0, 0x3, 0x62aecf70, 0x81, 0x4e0, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x6, 0x3, 0x8}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x58, &(0x7f0000000040)={0x0, 0x0}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r2, 0x0, 0x8}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x2, &(0x7f0000000280)={r3, 0x0, 0x0}, 0x20) getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="d9082ddb426d0625d5c50552bb4cd360a02dc9b4e454bb806d2e00b51fcc74bf1fbfaec3af7cbbb9b973c877535194a4f2f5a112613e76d55bcecef8757ab6c160e5eef12046c77fa7aed45f24f6f2fe78c1fbe75e54361944d2d55ac90c9acc322129c6"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x2, &(0x7f0000000000)=ANY=[], 0x0, 0x400, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x3, 0x20000003, 0xea90}, 0x10, 0xffffffffffffffff}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000540)={0x4, 0x80, 0x1f, 0xee, 0x81, 0x8c, 0x0, 0x9, 0x1030, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x7, 0xed74}, 0x821, 0x8, 0x1, 0x8, 0x7, 0x3, 0x4, 0x0, 0x5, 0x0, 0x4}, r4, 0x8, r5, 0xa) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)=0x7) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000009c0)='vem\x7fry.events\x00|=J\xd0\x85T\x18tV\a=\xac\xf0\x1f\n\x18g1\x89\x05f\xca\xc78\xed\x8c\x02%#mM\xee\x9c\x9fF\xa7\xe3\x04') perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0xff, 0x0, 0x1, 0x81, 0x0, 0x7, 0x441, 0xb, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x3f39, 0x8}, 0x8a0, 0x274, 0x5060, 0x2, 0x480, 0x8000, 0x8001, 0x0, 0x2, 0x0, 0x2}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 3011.352042][ T9854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3011.410018][ T9854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3011.435488][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3011.505685][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3011.524141][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3011.544496][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3011.573970][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3011.680203][T28787] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3011.709228][T28787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3011.719474][T28787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3011.748946][T28787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3011.778844][T28787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3011.874763][ T9709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3011.942077][ T5531] hsr_slave_0: left promiscuous mode [ 3011.948020][ T5531] hsr_slave_1: left promiscuous mode [ 3011.979876][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3011.987313][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3012.091408][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3012.156227][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3012.187788][ T5531] bridge_slave_1: left allmulticast mode [ 3012.198501][ T5531] bridge_slave_1: left promiscuous mode [ 3012.204210][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 3012.271457][ T5531] bridge_slave_0: left allmulticast mode [ 3012.277704][ T5531] bridge_slave_0: left promiscuous mode [ 3012.278659][ T4594] Bluetooth: hci0: command 0x041b tx timeout [ 3012.308546][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 3012.404542][ T5531] hsr_slave_0: left promiscuous mode [ 3012.449111][ T5531] hsr_slave_1: left promiscuous mode [ 3012.455066][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3012.478307][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3012.487961][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3012.510241][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3012.540094][ T5531] bridge_slave_1: left allmulticast mode [ 3012.545765][ T5531] bridge_slave_1: left promiscuous mode [ 3012.578304][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 3012.599958][ T5531] bridge_slave_0: left allmulticast mode [ 3012.605627][ T5531] bridge_slave_0: left promiscuous mode [ 3012.648330][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 3012.689279][ T5531] hsr_slave_0: left promiscuous mode [ 3012.697055][ T5531] hsr_slave_1: left promiscuous mode [ 3012.717814][ T5049] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3012.726001][ T5049] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3012.734895][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3012.745260][ T5049] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3012.752494][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3012.762230][ T5049] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3012.769714][ T5049] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3012.806480][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3012.819699][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3012.858436][ T5531] bridge_slave_1: left allmulticast mode [ 3012.864107][ T5531] bridge_slave_1: left promiscuous mode [ 3012.869848][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 3012.888977][ T5531] bridge_slave_0: left allmulticast mode [ 3012.895199][ T5531] bridge_slave_0: left promiscuous mode [ 3012.901833][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 3012.921881][ T5531] hsr_slave_0: left promiscuous mode [ 3012.943583][ T5531] hsr_slave_1: left promiscuous mode [ 3012.974946][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3012.998944][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3013.010536][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3013.017976][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3013.050236][ T5531] bridge_slave_1: left allmulticast mode [ 3013.055910][ T5531] bridge_slave_1: left promiscuous mode [ 3013.078304][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 3013.089618][ T5531] bridge_slave_0: left allmulticast mode [ 3013.095294][ T5531] bridge_slave_0: left promiscuous mode [ 3013.118352][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 3013.148686][ T5531] veth1_macvtap: left promiscuous mode [ 3013.154249][ T5531] veth0_macvtap: left promiscuous mode [ 3013.160593][ T5531] veth1_vlan: left promiscuous mode [ 3013.165907][ T5531] veth0_vlan: left promiscuous mode [ 3013.173455][ T5531] veth1_macvtap: left promiscuous mode [ 3013.208892][ T5531] veth0_macvtap: left promiscuous mode [ 3013.214516][ T5531] veth1_vlan: left promiscuous mode [ 3013.248321][ T5531] veth0_vlan: left promiscuous mode [ 3013.281826][ T5531] veth1_macvtap: left promiscuous mode [ 3013.287363][ T5531] veth0_macvtap: left promiscuous mode [ 3013.318469][ T5531] veth1_vlan: left promiscuous mode [ 3013.323816][ T5531] veth0_vlan: left promiscuous mode [ 3013.380469][ T5531] veth1_macvtap: left promiscuous mode [ 3013.386032][ T5531] veth0_macvtap: left promiscuous mode [ 3013.417176][ T5531] veth1_vlan: left promiscuous mode [ 3013.448934][ T5531] veth0_vlan: left promiscuous mode [ 3014.240066][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 3014.256516][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 3014.271097][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3014.287142][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3014.361214][ T5049] Bluetooth: hci0: command 0x040f tx timeout [ 3014.377177][ T5531] bond0 (unregistering): Released all slaves [ 3014.545783][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 3014.564634][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 3014.578657][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3014.594410][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3014.671035][ T5531] bond0 (unregistering): Released all slaves [ 3014.807510][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 3014.826967][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 3014.838304][ T5049] Bluetooth: hci1: command 0x0409 tx timeout [ 3014.847776][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3014.865841][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3014.948820][ T5531] bond0 (unregistering): Released all slaves [ 3015.075553][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 3015.094572][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 3015.107711][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3015.129304][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3015.207029][ T5531] bond0 (unregistering): Released all slaves [ 3015.338548][ T9854] hsr_slave_0: entered promiscuous mode [ 3015.347628][ T9854] hsr_slave_1: entered promiscuous mode [ 3015.527495][ T9732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3015.637426][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3015.645997][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3015.671800][ T9709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3015.692154][ T9732] 8021q: adding VLAN 0 to HW filter on device team0 [ 3015.703605][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3015.712097][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3015.723056][ T9917] chnl_net:caif_netlink_parms(): no params data found [ 3015.771345][ T9854] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3015.788527][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3015.797062][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3015.823418][ T8292] bridge0: port 1(bridge_slave_0) entered blocking state [ 3015.830578][ T8292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3015.901819][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3015.910207][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3015.919074][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3015.971277][ T9854] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3016.007751][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3016.028979][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3016.037524][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3016.070048][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3016.079124][ T8373] bridge0: port 2(bridge_slave_1) entered blocking state [ 3016.086224][ T8373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3016.094634][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3016.103706][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3016.114672][ T9709] veth0_vlan: entered promiscuous mode [ 3016.202454][ T9854] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3016.234761][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3016.242843][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3016.269309][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3016.300257][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3016.326981][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3016.339852][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3016.358940][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3016.367563][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3016.386838][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3016.395366][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3016.403997][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3016.416616][ T9709] veth1_vlan: entered promiscuous mode [ 3016.438264][ T5049] Bluetooth: hci0: command 0x0419 tx timeout [ 3016.447774][ T9854] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3016.474178][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3016.508486][ T9917] bridge0: port 1(bridge_slave_0) entered blocking state [ 3016.515586][ T9917] bridge0: port 1(bridge_slave_0) entered disabled state [ 3016.538409][ T9917] bridge_slave_0: entered allmulticast mode [ 3016.545021][ T9917] bridge_slave_0: entered promiscuous mode [ 3016.575529][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3016.600156][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3016.613137][ T9917] bridge0: port 2(bridge_slave_1) entered blocking state [ 3016.638561][ T9917] bridge0: port 2(bridge_slave_1) entered disabled state [ 3016.645746][ T9917] bridge_slave_1: entered allmulticast mode [ 3016.676311][ T9917] bridge_slave_1: entered promiscuous mode [ 3016.696403][ T9709] veth0_macvtap: entered promiscuous mode [ 3016.706184][ T9709] veth1_macvtap: entered promiscuous mode [ 3016.780594][ T9917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3016.886060][ T9917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3016.913193][ T9709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3016.928527][ T4594] Bluetooth: hci1: command 0x041b tx timeout [ 3016.934714][ T9709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3016.944951][ T9709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3016.955829][ T9709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3016.965944][ T9709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3016.976708][ T9709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3016.989767][ T9709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3017.001734][ T9709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3017.013630][ T9709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3017.051006][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3017.059779][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3017.072242][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3017.081223][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3017.093449][ T9709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3017.106911][ T9709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3017.116980][ T9709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3017.127739][ T9709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3017.137834][ T9709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3017.148646][ T9709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3017.158847][ T9709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3017.169333][ T9709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3017.180545][ T9709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3017.187800][ T9854] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3017.198687][ T9854] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3017.221567][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3017.230385][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3017.239984][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3017.247463][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3017.257631][ T9709] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3017.267266][ T9709] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3017.276247][ T9709] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3017.285190][ T9709] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3017.301376][ T9732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3017.308811][ T9854] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3017.324564][ T9854] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3017.349788][ T9917] team0: Port device team_slave_0 added [ 3017.357585][ T9917] team0: Port device team_slave_1 added [ 3017.458460][ T9917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3017.465438][ T9917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3017.503780][ T9917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3017.527626][ T9917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3017.555018][ T9917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3017.582210][ T9917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3017.672673][ T9917] hsr_slave_0: entered promiscuous mode [ 3017.696610][ T9917] hsr_slave_1: entered promiscuous mode [ 3017.717637][ T9917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3017.728294][ T9917] Cannot create hsr debugfs directory [ 3017.745628][T15857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3017.786985][T15857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3017.813576][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3017.840309][T15857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3017.861279][T15857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3017.862228][ T9854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3017.912630][ T9854] 8021q: adding VLAN 0 to HW filter on device team0 [ 3017.929742][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3017.938229][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3017.946030][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3017.954427][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3017.963562][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3018.034626][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3018.048112][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3018.058683][T23674] bridge0: port 1(bridge_slave_0) entered blocking state [ 3018.065775][T23674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3018.083798][ T9732] veth0_vlan: entered promiscuous mode [ 3018.137284][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3018.146073][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3018.155400][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3018.164349][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 3018.171506][ T5096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3018.179409][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3018.187967][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3018.196739][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3018.206398][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3018.215571][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3018.226191][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3018.234988][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3018.250337][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3018.271445][ T9732] veth1_vlan: entered promiscuous mode [ 3018.344244][ T9967] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3018.369186][ T9967] CPU: 0 PID: 9967 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 3018.379564][ T9967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 3018.389648][ T9967] Call Trace: [ 3018.392947][ T9967] [ 3018.395901][ T9967] dump_stack_lvl+0x136/0x150 [ 3018.400634][ T9967] dump_header+0x10a/0xd70 [ 3018.405094][ T9967] oom_kill_process+0x25d/0x600 [ 3018.409995][ T9967] out_of_memory+0x35c/0x1660 [ 3018.414741][ T9967] ? oom_killer_disable+0x2b0/0x2b0 [ 3018.419981][ T9967] ? mark_held_locks+0x9f/0xe0 [ 3018.424801][ T9967] mem_cgroup_out_of_memory+0x206/0x270 [ 3018.430386][ T9967] ? mem_cgroup_margin+0x130/0x130 [ 3018.435563][ T9967] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 3018.441404][ T9967] memory_max_write+0x2f9/0x3c0 [ 3018.446285][ T9967] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3018.452399][ T9967] ? cgroup_file_write+0x8e/0x7b0 [ 3018.457445][ T9967] cgroup_file_write+0x1e2/0x7b0 [ 3018.462399][ T9967] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3018.468525][ T9967] ? cgroup_get_from_path+0x6e0/0x6e0 [ 3018.473927][ T9967] ? cgroup_get_from_path+0x6e0/0x6e0 [ 3018.479342][ T9967] kernfs_fop_write_iter+0x3f1/0x600 [ 3018.484663][ T9967] vfs_write+0x945/0xd50 [ 3018.488927][ T9967] ? kernel_write+0x670/0x670 [ 3018.493746][ T9967] ? __fdget_pos+0x7b/0x100 [ 3018.498321][ T9967] ksys_write+0x12b/0x250 [ 3018.502676][ T9967] ? __ia32_sys_read+0xb0/0xb0 [ 3018.507467][ T9967] ? syscall_enter_from_user_mode+0x30/0x80 [ 3018.513399][ T9967] do_syscall_64+0x39/0xb0 [ 3018.517850][ T9967] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3018.523772][ T9967] RIP: 0033:0x7fd89c68c169 [ 3018.528202][ T9967] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3018.547828][ T9967] RSP: 002b:00007fd89b1fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3018.556258][ T9967] RAX: ffffffffffffffda RBX: 00007fd89c7ac050 RCX: 00007fd89c68c169 [ 3018.564243][ T9967] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 3018.572228][ T9967] RBP: 00007fd89c6e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3018.580211][ T9967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3018.588215][ T9967] R13: 00007ffc95a1ab4f R14: 00007fd89b1fe300 R15: 0000000000022000 [ 3018.596221][ T9967] [ 3018.633726][ T9967] memory: usage 10672kB, limit 0kB, failcnt 1950 [ 3018.659213][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3018.667093][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3018.679035][ T9967] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3018.695937][ T9967] Memory cgroup stats for /syz2: [ 3018.697444][ T9967] anon 114688 [ 3018.697444][ T9967] file 10416128 [ 3018.697444][ T9967] kernel 385024 [ 3018.697444][ T9967] kernel_stack 98304 [ 3018.697444][ T9967] pagetables 81920 [ 3018.697444][ T9967] sec_pagetables 0 [ 3018.697444][ T9967] percpu 64 [ 3018.697444][ T9967] sock 0 [ 3018.697444][ T9967] vmalloc 0 [ 3018.697444][ T9967] shmem 10416128 [ 3018.697444][ T9967] zswap 0 [ 3018.697444][ T9967] zswapped 0 [ 3018.697444][ T9967] file_mapped 176128 [ 3018.697444][ T9967] file_dirty 0 [ 3018.697444][ T9967] file_writeback 0 [ 3018.697444][ T9967] swapcached 0 [ 3018.697444][ T9967] anon_thp 0 [ 3018.697444][ T9967] file_thp 0 [ 3018.697444][ T9967] shmem_thp 0 [ 3018.697444][ T9967] inactive_anon 0 [ 3018.697444][ T9967] active_anon 10481664 [ 3018.697444][ T9967] inactive_file 0 [ 3018.697444][ T9967] active_file 0 [ 3018.697444][ T9967] unevictable 0 [ 3018.697444][ T9967] slab_reclaimable 56024 [ 3018.697444][ T9967] slab_unreclaimable 122704 [ 3018.697444][ T9967] slab 178728 [ 3018.697444][ T9967] workingset_refault_anon 0 [ 3018.697444][ T9967] workingset_refault_file 0 [ 3018.697444][ T9967] workingset_activate_anon 0 [ 3018.697444][ T9967] workingset_activate_file 0 [ 3018.697444][ T9967] workingset_restore_anon 0 [ 3018.697444][ T9967] workingset_restore_file 0 [ 3018.697444][ T9967] workingset_nodereclaim 0 [ 3018.697444][ T9967] pgscan 172 [ 3018.697444][ T9967] pgsteal 52 [ 3018.697444][ T9967] pgscan_kswapd 0 [ 3018.697444][ T9967] pgscan_direct 172 [ 3018.697444][ T9967] pgscan_khugepaged 0 [ 3018.697444][ T9967] pgsteal_kswapd 0 [ 3018.697444][ T9967] pgsteal_direct 52 [ 3018.697444][ T9967] pgsteal_khugepaged 0 [ 3018.697444][ T9967] pgfault 55732 [ 3018.697444][ T9967] pgmajfault 0 [ 3018.697444][ T9967] pgrefill 20570 [ 3018.697444][ T9967] pgactivate 120 [ 3018.697444][ T9967] pgdeactivate 0 [ 3018.697444][ T9967] pglazyfree 0 [ 3018.697444][ T9967] pglazyfreed 0 [ 3018.697444][ T9967] zswpin 0 [ 3018.697444][ T9967] zswpout 0 [ 3018.697444][ T9967] thp_fault_alloc 0 [ 3018.895790][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3018.919657][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3018.927729][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3018.945135][T23674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3018.976127][ T9854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3019.008183][ T4594] Bluetooth: hci1: command 0x040f tx timeout [ 3019.020763][ T9854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3019.086523][ T9917] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3019.138513][ T9967] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=9965,uid=0 [ 3019.176525][T28787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3019.198529][ T9967] Memory cgroup out of memory: Killed process 9965 (syz-executor.2) total-vm:54680kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3019.199060][T28787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3019.295367][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3019.304614][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3019.320825][ T9917] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3019.353095][ T9732] veth0_macvtap: entered promiscuous mode [ 3019.394120][ T9732] veth1_macvtap: entered promiscuous mode [ 3019.422016][ T9917] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3019.487446][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3019.518236][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3019.528071][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3019.559238][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3019.585464][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 01:17:27 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000002f40)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000002f40)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x80) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x0, 0x3, 0x62aecf70, 0x81, 0x4e0, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x6, 0x3, 0x8}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x6, 0x3, 0x8}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x58, &(0x7f0000000040)={0x0, 0x0}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r2, 0x0, 0x8}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x2, &(0x7f0000000280)={r3, 0x0, 0x0}, 0x20) getpid() (async) getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="d9082ddb426d0625d5c50552bb4cd360a02dc9b4e454bb806d2e00b51fcc74bf1fbfaec3af7cbbb9b973c877535194a4f2f5a112613e76d55bcecef8757ab6c160e5eef12046c77fa7aed45f24f6f2fe78c1fbe75e54361944d2d55ac90c9acc322129c6"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="d9082ddb426d0625d5c50552bb4cd360a02dc9b4e454bb806d2e00b51fcc74bf1fbfaec3af7cbbb9b973c877535194a4f2f5a112613e76d55bcecef8757ab6c160e5eef12046c77fa7aed45f24f6f2fe78c1fbe75e54361944d2d55ac90c9acc322129c6"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x2, &(0x7f0000000000)=ANY=[], 0x0, 0x400, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x3, 0x20000003, 0xea90}, 0x10, 0xffffffffffffffff}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x2, &(0x7f0000000000)=ANY=[], 0x0, 0x400, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x3, 0x20000003, 0xea90}, 0x10, 0xffffffffffffffff}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000540)={0x4, 0x80, 0x1f, 0xee, 0x81, 0x8c, 0x0, 0x9, 0x1030, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x7, 0xed74}, 0x821, 0x8, 0x1, 0x8, 0x7, 0x3, 0x4, 0x0, 0x5, 0x0, 0x4}, r4, 0x8, r5, 0xa) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)=0x7) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000009c0)='vem\x7fry.events\x00|=J\xd0\x85T\x18tV\a=\xac\xf0\x1f\n\x18g1\x89\x05f\xca\xc78\xed\x8c\x02%#mM\xee\x9c\x9fF\xa7\xe3\x04') perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0xff, 0x0, 0x1, 0x81, 0x0, 0x7, 0x441, 0xb, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x3f39, 0x8}, 0x8a0, 0x274, 0x5060, 0x2, 0x480, 0x8000, 0x8001, 0x0, 0x2, 0x0, 0x2}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0xff, 0x0, 0x1, 0x81, 0x0, 0x7, 0x441, 0xb, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x3f39, 0x8}, 0x8a0, 0x274, 0x5060, 0x2, 0x480, 0x8000, 0x8001, 0x0, 0x2, 0x0, 0x2}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 01:17:27 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="0008030000086d6f9f487a74dde5e9fac9f9513154ffb3ff030000f56c8374cbe5d99a130e1f636709e048decbe24bb592299846d7bbad3fc61f86a3798700eb2129cf607c223e4b8c7f1687f6d8df1da48cd67815f62156cf2bb02394b3d16f825976c0b0c36e2db48ade28fe642efb21f16681cd5aeebd2341f5c6ab1ecf05adb78fff445806189faf2b6dc37f77dbf2b0a1e6d4b89eff16e67ea60b26c312f08600b3c1d61a0a9c63469ca436d6d2321df23da24e75309e7036cfc5c36d8127ca878c4a65b0"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) [ 3019.644897][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3019.683749][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3019.725222][ T9709] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 3019.746505][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3019.758428][ T9709] CPU: 1 PID: 9709 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 3019.768792][ T9709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 3019.778212][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3019.778848][ T9709] Call Trace: [ 3019.778858][ T9709] [ 3019.795487][ T9709] dump_stack_lvl+0x136/0x150 [ 3019.799304][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3019.800197][ T9709] dump_header+0x10a/0xd70 [ 3019.814424][ T9709] oom_kill_process+0x25d/0x600 [ 3019.819312][ T9709] out_of_memory+0x35c/0x1660 [ 3019.824022][ T9709] ? find_held_lock+0x2d/0x110 [ 3019.828823][ T9709] ? oom_killer_disable+0x2b0/0x2b0 [ 3019.834055][ T9709] ? rcu_read_unlock+0x9/0x60 [ 3019.838768][ T9709] ? find_held_lock+0x2d/0x110 [ 3019.839443][ T9732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3019.843552][ T9709] mem_cgroup_out_of_memory+0x206/0x270 [ 3019.856321][ T9709] ? mem_cgroup_margin+0x130/0x130 [ 3019.861482][ T9709] ? lock_downgrade+0x690/0x690 [ 3019.866390][ T9709] try_charge_memcg+0xf99/0x13a0 [ 3019.871399][ T9709] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3019.877430][ T9709] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3019.878235][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3019.883192][ T9709] ? lock_downgrade+0x690/0x690 [ 3019.898501][ T9709] ? lock_downgrade+0x690/0x690 [ 3019.903410][ T9709] obj_cgroup_charge+0x2af/0x5e0 [ 3019.908396][ T9709] ? sock_alloc_inode+0x27/0x1d0 [ 3019.909304][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3019.913346][ T9709] kmem_cache_alloc_lru+0x142/0x600 [ 3019.928391][ T9709] sock_alloc_inode+0x27/0x1d0 [ 3019.933193][ T9709] ? sock_free_inode+0x30/0x30 [ 3019.937997][ T9709] alloc_inode+0x61/0x230 [ 3019.942368][ T9709] new_inode_pseudo+0x17/0x80 [ 3019.947086][ T9709] sock_alloc+0x40/0x270 [ 3019.948211][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3019.951347][ T9709] __sock_create+0xbd/0x850 [ 3019.951378][ T9709] ? xfd_validate_state+0x5d/0x180 [ 3019.971406][ T9709] __sys_socket+0x133/0x250 [ 3019.975942][ T9709] ? __sys_socket_file+0x1d0/0x1d0 [ 3019.981098][ T9709] __x64_sys_socket+0x73/0xb0 [ 3019.985817][ T9709] do_syscall_64+0x39/0xb0 [ 3019.988203][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3019.990279][ T9709] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3020.006012][ T9709] RIP: 0033:0x7fd89c68d7e7 [ 3020.009334][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3020.010434][ T9709] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3020.010464][ T9709] RSP: 002b:00007ffc95a1a6c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 3020.048202][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3020.048876][ T9709] RAX: ffffffffffffffda RBX: 00007ffc95a1ae30 RCX: 00007fd89c68d7e7 [ 3020.066681][ T9709] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 3020.074689][ T9709] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffc95a1ac40 [ 3020.082669][ T9709] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 3020.090645][ T9709] R13: 00000000002e0f97 R14: 000000000000001c R15: 00007ffc95a1ae70 [ 3020.098640][ T9709] [ 3020.117292][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3020.130408][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3020.140357][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3020.150880][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3020.163464][ T9732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3020.175821][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3020.176394][ T9709] memory: usage 10380kB, limit 0kB, failcnt 1969 [ 3020.191634][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3020.209024][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3020.211176][ T9709] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3020.219052][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3020.233697][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3020.242934][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3020.251922][ T9709] Memory cgroup stats for /syz2: [ 3020.260733][ T9709] anon 40960 [ 3020.260733][ T9709] file 10416128 [ 3020.260733][ T9709] kernel 135168 [ 3020.260733][ T9709] kernel_stack 0 [ 3020.260733][ T9709] pagetables 8192 [ 3020.260733][ T9709] sec_pagetables 0 [ 3020.260733][ T9709] percpu 64 [ 3020.260733][ T9709] sock 0 [ 3020.260733][ T9709] vmalloc 0 [ 3020.260733][ T9709] shmem 10416128 [ 3020.260733][ T9709] zswap 0 [ 3020.260733][ T9709] zswapped 0 [ 3020.260733][ T9709] file_mapped 176128 [ 3020.260733][ T9709] file_dirty 0 [ 3020.260733][ T9709] file_writeback 0 [ 3020.260733][ T9709] swapcached 0 [ 3020.260733][ T9709] anon_thp 0 [ 3020.260733][ T9709] file_thp 0 [ 3020.260733][ T9709] shmem_thp 0 [ 3020.260733][ T9709] inactive_anon 0 [ 3020.260733][ T9709] active_anon 10457088 [ 3020.260733][ T9709] inactive_file 0 [ 3020.260733][ T9709] active_file 0 [ 3020.260733][ T9709] unevictable 0 [ 3020.260733][ T9709] slab_reclaimable 40176 [ 3020.260733][ T9709] slab_unreclaimable 71632 [ 3020.260733][ T9709] slab 111808 [ 3020.260733][ T9709] workingset_refault_anon 0 [ 3020.260733][ T9709] workingset_refault_file 0 [ 3020.260733][ T9709] workingset_activate_anon 0 [ 3020.260733][ T9709] workingset_activate_file 0 [ 3020.260733][ T9709] workingset_restore_anon 0 [ 3020.260733][ T9709] workingset_restore_file 0 [ 3020.260733][ T9709] workingset_nodereclaim 0 [ 3020.260733][ T9709] pgscan 172 [ 3020.260733][ T9709] pgsteal 52 [ 3020.260733][ T9709] pgscan_kswapd 0 [ 3020.260733][ T9709] pgscan_direct 172 [ 3020.260733][ T9709] pgscan_khugepaged 0 [ 3020.260733][ T9709] pgsteal_kswapd 0 [ 3020.260733][ T9709] pgsteal_direct 52 [ 3020.260733][ T9709] pgsteal_khugepaged 0 [ 3020.260733][ T9709] pgfault 55735 [ 3020.260733][ T9709] pgmajfault 0 [ 3020.260733][ T9709] pgrefill 20570 [ 3020.260733][ T9709] pgactivate 120 [ 3020.260733][ T9709] pgdeactivate 0 [ 3020.260733][ T9709] pglazyfree 0 [ 3020.260733][ T9709] pglazyfreed 0 [ 3020.260733][ T9709] zswpin 0 [ 3020.260733][ T9709] zswpout 0 [ 3020.260733][ T9709] thp_fault_alloc 0 [ 3020.479611][ T9917] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3020.512039][ T9732] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3020.528216][ T9732] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3020.528334][ T9709] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset= [ 3020.536934][ T9732] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3020.564241][ T9732] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3020.568189][ T9709] syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=9709,uid=0 [ 3020.638578][ T9709] Memory cgroup out of memory: Killed process 9709 (syz-executor.2) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3020.681080][ T9709] socket: no more sockets [ 3020.718298][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3020.725760][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3020.779247][ T9854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3020.917923][T15859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3020.948115][T15859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3020.963884][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3020.979307][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3020.989005][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3020.997679][ T9917] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3021.020010][T15859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3021.029612][T15859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3021.036988][ T9917] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3021.050518][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3021.058459][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3021.066615][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3021.079606][ T4594] Bluetooth: hci1: command 0x0419 tx timeout [ 3021.090965][ T9917] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3021.114223][ T9854] veth0_vlan: entered promiscuous mode [ 3021.124840][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3021.137637][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3021.145694][ T9917] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3021.228004][ T5531] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3021.374307][ T9854] veth1_vlan: entered promiscuous mode [ 3021.406247][ T9979] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3021.418570][ T9979] CPU: 0 PID: 9979 Comm: syz-executor.5 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 3021.428944][ T9979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 3021.439025][ T9979] Call Trace: [ 3021.442335][ T9979] [ 3021.445303][ T9979] dump_stack_lvl+0x136/0x150 [ 3021.450039][ T9979] dump_header+0x10a/0xd70 [ 3021.454507][ T9979] oom_kill_process+0x25d/0x600 [ 3021.459410][ T9979] out_of_memory+0x35c/0x1660 [ 3021.464125][ T9979] ? io_schedule_timeout+0x150/0x150 [ 3021.469450][ T9979] ? oom_killer_disable+0x2b0/0x2b0 [ 3021.474699][ T9979] mem_cgroup_out_of_memory+0x206/0x270 [ 3021.480297][ T9979] ? mem_cgroup_margin+0x130/0x130 [ 3021.485473][ T9979] memory_max_write+0x2f9/0x3c0 [ 3021.490392][ T9979] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3021.496531][ T9979] ? lock_sync+0x190/0x190 [ 3021.501006][ T9979] cgroup_file_write+0x1e2/0x7b0 [ 3021.505987][ T9979] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3021.512118][ T9979] ? cgroup_get_from_path+0x6e0/0x6e0 [ 3021.517554][ T9979] ? cgroup_get_from_path+0x6e0/0x6e0 [ 3021.522981][ T9979] kernfs_fop_write_iter+0x3f1/0x600 [ 3021.528329][ T9979] vfs_write+0x945/0xd50 [ 3021.532614][ T9979] ? kernel_write+0x670/0x670 [ 3021.537332][ T9979] ? lockdep_hardirqs_on+0x7d/0x100 [ 3021.542689][ T9979] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3021.548926][ T9979] ? ksys_write+0xce/0x250 [ 3021.553382][ T9979] ksys_write+0x12b/0x250 [ 3021.557749][ T9979] ? __ia32_sys_read+0xb0/0xb0 [ 3021.562564][ T9979] do_syscall_64+0x39/0xb0 [ 3021.567036][ T9979] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3021.573006][ T9979] RIP: 0033:0x7f6a1a28c169 [ 3021.577453][ T9979] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3021.597099][ T9979] RSP: 002b:00007f6a1aff2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3021.605555][ T9979] RAX: ffffffffffffffda RBX: 00007f6a1a3ac050 RCX: 00007f6a1a28c169 [ 3021.613559][ T9979] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 3021.621561][ T9979] RBP: 00007f6a1a2e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3021.629568][ T9979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3021.637570][ T9979] R13: 00007ffefece583f R14: 00007f6a1aff2300 R15: 0000000000022000 [ 3021.645602][ T9979] [ 3021.669525][ T5531] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3021.678800][ T9979] memory: usage 10672kB, limit 0kB, failcnt 1072 [ 3021.686683][ T9979] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3021.695633][ T9979] Memory cgroup stats for /syz5: [ 3021.697305][ T9979] anon 118784 [ 3021.697305][ T9979] file 10448896 [ 3021.697305][ T9979] kernel 356352 [ 3021.697305][ T9979] kernel_stack 98304 [ 3021.697305][ T9979] pagetables 81920 [ 3021.697305][ T9979] sec_pagetables 0 [ 3021.697305][ T9979] percpu 64 [ 3021.697305][ T9979] sock 0 [ 3021.697305][ T9979] vmalloc 0 [ 3021.697305][ T9979] shmem 10448896 [ 3021.697305][ T9979] zswap 0 [ 3021.697305][ T9979] zswapped 0 [ 3021.697305][ T9979] file_mapped 278528 [ 3021.697305][ T9979] file_dirty 0 [ 3021.697305][ T9979] file_writeback 0 [ 3021.697305][ T9979] swapcached 0 [ 3021.697305][ T9979] anon_thp 0 [ 3021.697305][ T9979] file_thp 0 [ 3021.697305][ T9979] shmem_thp 0 [ 3021.697305][ T9979] inactive_anon 10448896 [ 3021.697305][ T9979] active_anon 102400 [ 3021.697305][ T9979] inactive_file 0 [ 3021.697305][ T9979] active_file 0 [ 3021.697305][ T9979] unevictable 0 [ 3021.697305][ T9979] slab_reclaimable 52296 [ 3021.697305][ T9979] slab_unreclaimable 94696 [ 3021.697305][ T9979] slab 146992 [ 3021.697305][ T9979] workingset_refault_anon 0 [ 3021.697305][ T9979] workingset_refault_file 0 [ 3021.697305][ T9979] workingset_activate_anon 0 [ 3021.697305][ T9979] workingset_activate_file 0 [ 3021.697305][ T9979] workingset_restore_anon 0 [ 3021.697305][ T9979] workingset_restore_file 0 [ 3021.697305][ T9979] workingset_nodereclaim 0 [ 3021.697305][ T9979] pgscan 716 [ 3021.697305][ T9979] pgsteal 57 [ 3021.697305][ T9979] pgscan_kswapd 0 [ 3021.697305][ T9979] pgscan_direct 716 [ 3021.697305][ T9979] pgscan_khugepaged 0 [ 3021.697305][ T9979] pgsteal_kswapd 0 [ 3021.697305][ T9979] pgsteal_direct 57 [ 3021.697305][ T9979] pgsteal_khugepaged 0 [ 3021.697305][ T9979] pgfault 82508 [ 3021.697305][ T9979] pgmajfault 0 [ 3021.697305][ T9979] pgrefill 25846 [ 3021.697305][ T9979] pgactivate 627 [ 3021.697305][ T9979] pgdeactivate 0 [ 3021.697305][ T9979] pglazyfree 0 [ 3021.697305][ T9979] pglazyfreed 0 [ 3021.697305][ T9979] zswpin 0 [ 3021.697305][ T9979] zswpout 0 [ 3021.697305][ T9979] thp_fault_alloc 0 [ 3021.916588][ T9979] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=9732,uid=0 [ 3021.933998][ T9979] Memory cgroup out of memory: Killed process 9732 (syz-executor.5) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 3022.039306][ T5531] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3022.127044][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3022.143780][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3022.154757][ T9854] veth0_macvtap: entered promiscuous mode [ 3022.175557][ T5531] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3022.331460][ T9917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3022.341193][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3022.354354][ T9854] veth1_macvtap: entered promiscuous mode [ 3022.384332][ T9917] 8021q: adding VLAN 0 to HW filter on device team0 [ 3022.393384][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3022.404076][T31388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3022.417770][ T9854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 01:17:30 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) write$cgroup_int(r3, &(0x7f0000000180), 0x12) 01:17:30 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100ff010000000000000040000000000000000001000f00000000000007020000004a69ba7c2f"], 0x0, 0x49}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0506617, &(0x7f0000000040)=0x2) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0506617, &(0x7f0000000040)=0x2) r2 = syz_clone(0x5000400, &(0x7f0000000180)="3084ae548f63a5001fc11859d91c859319d7bc320a0ddfe939e9", 0x1a, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x0, 0x6, 0xa, 0x0, 0x0, 0x10200, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x80}, 0x80000, 0x200, 0x5, 0x1, 0x2b, 0x5, 0x7, 0x0, 0x3, 0x0, 0x2}, r2, 0x2, r1, 0x1) (async) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x0, 0x6, 0xa, 0x0, 0x0, 0x10200, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x80}, 0x80000, 0x200, 0x5, 0x1, 0x2b, 0x5, 0x7, 0x0, 0x3, 0x0, 0x2}, r2, 0x2, r1, 0x1) getpid() (async) getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000000c0)="8c389e14f086dda56a5ced3f888eb1ff5295ba24020a3b93459e05ff", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x10, &(0x7f0000000280)={r4, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0xfffffffffffffd37) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x7, 0x3f, 0xd9, 0x8, 0x0, 0x7, 0x30002, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x2, 0x5}, 0x20, 0x9, 0x3, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x400}, r4, 0xb, r0, 0x9) (async) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x7, 0x3f, 0xd9, 0x8, 0x0, 0x7, 0x30002, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x2, 0x5}, 0x20, 0x9, 0x3, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x400}, r4, 0xb, r0, 0x9) close(r3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x1000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x7, 0x100, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x1000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x7, 0x100, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r5 = syz_clone(0xcf3484414d5dc7f8, &(0x7f0000000540)="5e4f6fbe29b9754c905e364f94e9d38c60a4a021a604a6d27901be561599c3611c3d8d06025626bf143b077dd1", 0x2d, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="80ff7caf8143273a268a2ae72fa8fbb59985e2b276fdb8ad0ea10728cc75b6db0be5c9f19b85922d206dab2f2363de89e40250cf3007a275feb3e8f7fec3500739afecb45f479681fb91de0421205916ecd38163fa7d2def7d65c481263ba04ba68fbfb6a289945c1faef839a840108dbeecf15cedadd23c95") r6 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f5, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x10100, 0xffd, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xe, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x8, 0x6, 0x0, 0x0, 0x0, 0x4, 0x2400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8c9, 0x2, @perf_config_ext={0x7, 0x1f}, 0x8, 0x2, 0x2, 0x7, 0x1, 0x80000001, 0x7, 0x0, 0x9, 0x0, 0x9}, r5, 0xb, r6, 0x2) (async) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x8, 0x6, 0x0, 0x0, 0x0, 0x4, 0x2400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8c9, 0x2, @perf_config_ext={0x7, 0x1f}, 0x8, 0x2, 0x2, 0x7, 0x1, 0x80000001, 0x7, 0x0, 0x9, 0x0, 0x9}, r5, 0xb, r6, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) 01:17:30 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000002f40)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x80) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x0, 0x3, 0x62aecf70, 0x81, 0x4e0, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x48) (rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x6, 0x3, 0x8}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x58, &(0x7f0000000040)={0x0, 0x0}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r2, 0x0, 0x8}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x2, &(0x7f0000000280)={r3, 0x0, 0x0}, 0x20) getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="d9082ddb426d0625d5c50552bb4cd360a02dc9b4e454bb806d2e00b51fcc74bf1fbfaec3af7cbbb9b973c877535194a4f2f5a112613e76d55bcecef8757ab6c160e5eef12046c77fa7aed45f24f6f2fe78c1fbe75e54361944d2d55ac90c9acc322129c6"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x2, &(0x7f0000000000)=ANY=[], 0x0, 0x400, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x3, 0x20000003, 0xea90}, 0x10, 0xffffffffffffffff}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000540)={0x4, 0x80, 0x1f, 0xee, 0x81, 0x8c, 0x0, 0x9, 0x1030, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x7, 0xed74}, 0x821, 0x8, 0x1, 0x8, 0x7, 0x3, 0x4, 0x0, 0x5, 0x0, 0x4}, r4, 0x8, r5, 0xa) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)=0x7) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000009c0)='vem\x7fry.events\x00|=J\xd0\x85T\x18tV\a=\xac\xf0\x1f\n\x18g1\x89\x05f\xca\xc78\xed\x8c\x02%#mM\xee\x9c\x9fF\xa7\xe3\x04') perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0xff, 0x0, 0x1, 0x81, 0x0, 0x7, 0x441, 0xb, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x3f39, 0x8}, 0x8a0, 0x274, 0x5060, 0x2, 0x480, 0x8000, 0x8001, 0x0, 0x2, 0x0, 0x2}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 01:17:30 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="0008030000086d6f9f487a74dde5e9fac9f9513154ffb3ff030000f56c8374cbe5d99a130e1f636709e048decbe24bb592299846d7bbad3fc61f86a3798700eb2129cf607c223e4b8c7f1687f6d8df1da48cd67815f62156cf2bb02394b3d16f825976c0b0c36e2db48ade28fe642efb21f16681cd5aeebd2341f5c6ab1ecf05adb78fff445806189faf2b6dc37f77dbf2b0a1e6d4b89eff16e67ea60b26c312f08600b3c1d61a0a9c63469ca436d6d2321df23da24e75309e7036cfc5c36d8127ca878c4a65b0f2089ed5593689cded5d46e67477fad72b4a5f2a10345eaf04e2cd7a8f1780cfb7"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) [ 3022.428786][ T9854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3022.438993][ T9854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3022.469620][ T9854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3022.535738][ T9854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3022.571740][ T9854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3022.647465][ T9854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3022.708229][ T9854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3022.748241][ T9854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3022.778237][ T9854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3022.818298][ T9854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3022.858201][ T9854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3022.890793][ T9854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3022.962417][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3022.989162][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3022.997932][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3023.024754][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3023.049099][T23683] bridge0: port 1(bridge_slave_0) entered blocking state [ 3023.056211][T23683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3023.078555][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3023.087241][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3023.118692][T23683] bridge0: port 2(bridge_slave_1) entered blocking state [ 3023.125795][T23683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3023.148606][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3023.160056][ T9854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3023.206779][ T9854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3023.226868][ T9854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3023.258175][ T9854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3023.268027][ T9854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3023.288213][ T9854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3023.298042][ T9854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3023.338315][ T9854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3023.358201][ T9854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3023.378201][ T9854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3023.388031][ T9854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3023.418248][ T9854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3023.448662][ T9854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3023.497934][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3023.518833][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3023.527531][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3023.548911][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3023.581657][ T9854] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3023.599485][ T9854] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3023.618192][ T9854] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3023.626922][ T9854] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3023.665552][T28784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3023.680488][T28784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3023.690240][T28784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3023.699225][T28784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3023.707806][T28784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3023.716578][T28784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3023.725746][T28784] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3023.761219][ T9917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3023.785638][ T9917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3023.811474][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3023.820272][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3024.215455][ T5541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3024.256388][ T5541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3024.376986][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3024.394115][ T7022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3024.414301][ T7022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3024.509425][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3024.569888][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3024.577355][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3024.649749][ T9917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3024.665859][ T5049] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3024.690045][ T5049] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3024.700752][ T5049] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3024.708531][ T5049] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3024.716474][T31297] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3024.878101][T10010] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3024.889358][T10010] CPU: 0 PID: 10010 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 3024.899812][T10010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 3024.909882][T10010] Call Trace: [ 3024.913170][T10010] [ 3024.916111][T10010] dump_stack_lvl+0x136/0x150 [ 3024.920831][T10010] dump_header+0x10a/0xd70 [ 3024.925272][T10010] oom_kill_process+0x25d/0x600 [ 3024.930138][T10010] out_of_memory+0x35c/0x1660 [ 3024.934842][T10010] ? io_schedule_timeout+0x150/0x150 [ 3024.940165][T10010] ? oom_killer_disable+0x2b0/0x2b0 [ 3024.945386][T10010] mem_cgroup_out_of_memory+0x206/0x270 [ 3024.950963][T10010] ? mem_cgroup_margin+0x130/0x130 [ 3024.956114][T10010] memory_max_write+0x2f9/0x3c0 [ 3024.960994][T10010] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3024.967090][T10010] ? lock_sync+0x190/0x190 [ 3024.971552][T10010] cgroup_file_write+0x1e2/0x7b0 [ 3024.976512][T10010] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3024.982608][T10010] ? cgroup_get_from_path+0x6e0/0x6e0 [ 3024.988000][T10010] ? __virt_addr_valid+0x61/0x2e0 [ 3024.993089][T10010] ? cgroup_get_from_path+0x6e0/0x6e0 [ 3024.998530][T10010] kernfs_fop_write_iter+0x3f1/0x600 [ 3025.003845][T10010] vfs_write+0x945/0xd50 [ 3025.008151][T10010] ? kernel_write+0x670/0x670 [ 3025.012847][T10010] ? __fget_files+0x26a/0x480 [ 3025.017568][T10010] ksys_write+0x12b/0x250 [ 3025.021922][T10010] ? __ia32_sys_read+0xb0/0xb0 [ 3025.026706][T10010] do_syscall_64+0x39/0xb0 [ 3025.031150][T10010] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3025.037067][T10010] RIP: 0033:0x7ff646e8c169 [ 3025.041492][T10010] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3025.061111][T10010] RSP: 002b:00007ff647ba1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3025.069540][T10010] RAX: ffffffffffffffda RBX: 00007ff646fac050 RCX: 00007ff646e8c169 [ 3025.077523][T10010] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 3025.085505][T10010] RBP: 00007ff646ee7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3025.093484][T10010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3025.101466][T10010] R13: 00007ffc2bc3979f R14: 00007ff647ba1300 R15: 0000000000022000 [ 3025.109467][T10010] [ 3025.135076][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3025.149933][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3025.159050][T10010] memory: usage 8628kB, limit 0kB, failcnt 2368 [ 3025.165937][T10010] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3025.173875][T10010] Memory cgroup stats for /syz1: [ 3025.193665][T10010] anon 118784 [ 3025.193665][T10010] file 8331264 [ 3025.193665][T10010] kernel 372736 [ 3025.193665][T10010] kernel_stack 98304 [ 3025.193665][T10010] pagetables 77824 [ 3025.193665][T10010] sec_pagetables 0 [ 3025.193665][T10010] percpu 64 [ 3025.193665][T10010] sock 0 [ 3025.193665][T10010] vmalloc 0 [ 3025.193665][T10010] shmem 8331264 [ 3025.193665][T10010] zswap 0 [ 3025.193665][T10010] zswapped 0 [ 3025.193665][T10010] file_mapped 188416 [ 3025.193665][T10010] file_dirty 0 [ 3025.193665][T10010] file_writeback 0 [ 3025.193665][T10010] swapcached 0 [ 3025.193665][T10010] anon_thp 0 [ 3025.193665][T10010] file_thp 0 [ 3025.193665][T10010] shmem_thp 0 [ 3025.193665][T10010] inactive_anon 8331264 [ 3025.193665][T10010] active_anon 118784 [ 3025.193665][T10010] inactive_file 0 [ 3025.193665][T10010] active_file 0 [ 3025.193665][T10010] unevictable 0 [ 3025.193665][T10010] slab_reclaimable 49880 [ 3025.193665][T10010] slab_unreclaimable 122704 [ 3025.193665][T10010] slab 172584 [ 3025.193665][T10010] workingset_refault_anon 0 [ 3025.193665][T10010] workingset_refault_file 0 [ 3025.193665][T10010] workingset_activate_anon 0 [ 3025.193665][T10010] workingset_activate_file 0 [ 3025.193665][T10010] workingset_restore_anon 0 [ 3025.193665][T10010] workingset_restore_file 0 [ 3025.193665][T10010] workingset_nodereclaim 0 [ 3025.193665][T10010] pgscan 611 [ 3025.193665][T10010] pgsteal 60 [ 3025.193665][T10010] pgscan_kswapd 0 [ 3025.193665][T10010] pgscan_direct 611 [ 3025.193665][T10010] pgscan_khugepaged 0 [ 3025.193665][T10010] pgsteal_kswapd 0 [ 3025.193665][T10010] pgsteal_direct 60 [ 3025.193665][T10010] pgsteal_khugepaged 0 [ 3025.193665][T10010] pgfault 38993 [ 3025.193665][T10010] pgmajfault 0 [ 3025.193665][T10010] pgrefill 1873 [ 3025.193665][T10010] pgactivate 551 [ 3025.193665][T10010] pgdeactivate 0 [ 3025.193665][T10010] pglazyfree 0 [ 3025.193665][T10010] pglazyfreed 0 [ 3025.193665][T10010] zswpin 0 [ 3025.193665][T10010] zswpout 0 [ 3025.193665][T10010] thp_fault_alloc 0 [ 3025.397271][T10010] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10003,uid=0 [ 3025.414882][T10010] Memory cgroup out of memory: Killed process 10003 (syz-executor.1) total-vm:54680kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3025.472765][ T9917] veth0_vlan: entered promiscuous mode [ 3025.504476][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3025.516506][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 01:17:33 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x80, 0x7d, 0x0, 0x8, 0x0, 0x0, 0x1080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x78, 0x2, @perf_config_ext={0x4, 0x1}, 0x10010, 0x1, 0xffffff05, 0x9, 0xc00, 0x8000, 0x7, 0x0, 0x7, 0x0, 0x2b4d0000000}, r1, 0x5, r5, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r4, &(0x7f0000000180), 0x12) [ 3025.576522][ T1217] ieee802154 phy0 wpan0: encryption failed: -22 [ 3025.582870][ T1217] ieee802154 phy1 wpan1: encryption failed: -22 [ 3025.632800][T10015] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 3025.633061][ T9917] veth1_vlan: entered promiscuous mode [ 3025.650605][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3025.653952][T10015] CPU: 0 PID: 10015 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 3025.659754][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3025.668207][T10015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 3025.668226][T10015] Call Trace: [ 3025.668235][T10015] [ 3025.668245][T10015] dump_stack_lvl+0x136/0x150 [ 3025.668300][T10015] dump_header+0x10a/0xd70 [ 3025.676834][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3025.685521][T10015] oom_kill_process+0x25d/0x600 [ 3025.685559][T10015] out_of_memory+0x35c/0x1660 [ 3025.685592][T10015] ? find_held_lock+0x2d/0x110 [ 3025.685629][T10015] ? oom_killer_disable+0x2b0/0x2b0 [ 3025.685660][T10015] ? rcu_read_unlock+0x9/0x60 [ 3025.732631][T10015] ? find_held_lock+0x2d/0x110 [ 3025.737447][T10015] mem_cgroup_out_of_memory+0x206/0x270 [ 3025.743041][T10015] ? mem_cgroup_margin+0x130/0x130 [ 3025.748194][T10015] ? lock_downgrade+0x690/0x690 [ 3025.753107][T10015] try_charge_memcg+0xf99/0x13a0 [ 3025.758102][T10015] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3025.764141][T10015] ? rcu_read_unlock+0x9/0x60 [ 3025.768860][T10015] ? lock_downgrade+0x690/0x690 [ 3025.773773][T10015] charge_memcg+0x90/0x3b0 [ 3025.778246][T10015] __mem_cgroup_charge+0x2b/0x90 [ 3025.783221][T10015] ? copy_mc_to_kernel+0x3e/0x90 [ 3025.788208][T10015] do_wp_page+0x8ea/0x33c0 [ 3025.792670][T10015] ? lock_sync+0x190/0x190 [ 3025.797132][T10015] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3025.802548][T10015] ? do_raw_spin_lock+0x124/0x2b0 [ 3025.807626][T10015] ? spin_bug+0x1c0/0x1c0 [ 3025.812023][T10015] __handle_mm_fault+0x1635/0x41c0 [ 3025.817181][T10015] ? vm_iomap_memory+0x190/0x190 [ 3025.822154][T10015] ? mas_walk+0x58f/0x730 [ 3025.826537][T10015] ? numa_migrate_prep+0x3a0/0x3a0 [ 3025.831695][T10015] handle_mm_fault+0x2af/0x9f0 [ 3025.836508][T10015] do_user_addr_fault+0x2ca/0x1210 [ 3025.841670][T10015] ? rcu_is_watching+0x12/0xb0 [ 3025.846492][T10015] exc_page_fault+0x98/0x170 [ 3025.851127][T10015] asm_exc_page_fault+0x26/0x30 [ 3025.856027][T10015] RIP: 0033:0x7ff646e89ebe [ 3025.860473][T10015] Code: b8 38 00 00 00 0f 05 48 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 00 48 8b 05 27 09 c5 00 48 85 c0 74 04 <48> 83 00 04 49 8d 81 e0 02 00 00 48 83 3d af 90 0f 00 00 49 89 81 [ 3025.880110][T10015] RSP: 002b:00007ffc2bc399e0 EFLAGS: 00010202 [ 3025.886208][T10015] RAX: 00007ff647ad5720 RBX: 0000000000000000 RCX: 00007ff646e89e9b [ 3025.894212][T10015] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3025.902211][T10015] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556035400 [ 3025.910220][T10015] R10: 00005555560356d0 R11: 0000000000000246 R12: 0000000000000001 [ 3025.918220][T10015] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc2bc39ac0 [ 3025.926236][T10015] [ 3025.937297][T10015] memory: usage 8448kB, limit 0kB, failcnt 2387 [ 3025.943803][T10015] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3025.951357][T10015] Memory cgroup stats for /syz1: [ 3025.951570][T10015] anon 57344 [ 3025.951570][T10015] file 8331264 [ 3025.951570][T10015] kernel 258048 [ 3025.951570][T10015] kernel_stack 32768 [ 3025.951570][T10015] pagetables 57344 [ 3025.951570][T10015] sec_pagetables 0 [ 3025.951570][T10015] percpu 128 [ 3025.951570][T10015] sock 0 [ 3025.951570][T10015] vmalloc 0 [ 3025.951570][T10015] shmem 8331264 [ 3025.951570][T10015] zswap 0 [ 3025.951570][T10015] zswapped 0 [ 3025.951570][T10015] file_mapped 176128 [ 3025.951570][T10015] file_dirty 0 [ 3025.951570][T10015] file_writeback 0 [ 3025.951570][T10015] swapcached 0 [ 3025.951570][T10015] anon_thp 0 [ 3025.951570][T10015] file_thp 0 [ 3025.951570][T10015] shmem_thp 0 [ 3025.951570][T10015] inactive_anon 8331264 [ 3025.951570][T10015] active_anon 57344 [ 3025.951570][T10015] inactive_file 0 [ 3025.951570][T10015] active_file 0 [ 3025.951570][T10015] unevictable 0 [ 3025.951570][T10015] slab_reclaimable 34032 [ 3025.951570][T10015] slab_unreclaimable 107184 [ 3025.951570][T10015] slab 141216 [ 3025.951570][T10015] workingset_refault_anon 0 [ 3025.951570][T10015] workingset_refault_file 0 [ 3025.951570][T10015] workingset_activate_anon 0 [ 3025.951570][T10015] workingset_activate_file 0 [ 3025.951570][T10015] workingset_restore_anon 0 [ 3025.951570][T10015] workingset_restore_file 0 [ 3025.951570][T10015] workingset_nodereclaim 0 [ 3025.951570][T10015] pgscan 611 [ 3025.951570][T10015] pgsteal 60 [ 3025.951570][T10015] pgscan_kswapd 0 [ 3025.951570][T10015] pgscan_direct 611 [ 3025.951570][T10015] pgscan_khugepaged 0 [ 3025.951570][T10015] pgsteal_kswapd 0 [ 3025.951570][T10015] pgsteal_direct 60 [ 3025.951570][T10015] pgsteal_khugepaged 0 [ 3025.951570][T10015] pgfault 39010 [ 3025.951570][T10015] pgmajfault 0 [ 3025.951570][T10015] pgrefill 1873 [ 3025.951570][T10015] pgactivate 551 [ 3025.951570][T10015] pgdeactivate 0 [ 3025.951570][T10015] pglazyfree 0 [ 3025.951570][T10015] pglazyfreed 0 [ 3025.951570][T10015] zswpin 0 [ 3025.951570][T10015] zswpout 0 [ 3025.951570][T10015] thp_fault_alloc 0 [ 3026.005779][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3026.149770][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3026.162818][T10015] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=9854,uid=0 [ 3026.178692][T10015] Memory cgroup out of memory: Killed process 9854 (syz-executor.1) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3026.269729][ T9917] veth0_macvtap: entered promiscuous mode [ 3026.331723][ T9917] veth1_macvtap: entered promiscuous mode [ 3026.481495][ T9917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3026.492150][ T9917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3026.502407][ T9917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3026.514966][ T9917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3026.525081][ T9917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3026.535762][ T9917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3026.545814][ T9917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3026.556434][ T9917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3026.566290][ T9917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3026.576889][ T9917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3026.586763][ T9917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3026.597440][ T9917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3026.608051][ T9917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3026.619836][ T9917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3026.632676][ T9917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3026.687339][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3026.706336][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3026.718434][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3026.727121][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3026.738528][ T9917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3026.755160][ T9917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3026.765219][T31297] Bluetooth: hci2: command 0x0409 tx timeout [ 3026.772389][ T9917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3026.783144][ T9917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3026.793136][ T9917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3026.803875][ T9917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3026.813948][ T9917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3026.826745][ T9917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3026.836609][ T9917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3026.848447][ T9917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3026.858371][ T9917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3026.868905][ T9917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3026.878809][ T9917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3026.889319][ T9917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3026.900367][ T9917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3026.914322][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3026.925289][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3026.974318][ T9917] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3026.984403][ T9917] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3026.993577][ T9917] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3027.002636][ T9917] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3027.025730][T10007] chnl_net:caif_netlink_parms(): no params data found [ 3027.165399][T10007] bridge0: port 1(bridge_slave_0) entered blocking state [ 3027.181827][T10007] bridge0: port 1(bridge_slave_0) entered disabled state [ 3027.196574][T10007] bridge_slave_0: entered allmulticast mode [ 3027.214399][T10007] bridge_slave_0: entered promiscuous mode [ 3027.222884][T10007] bridge0: port 2(bridge_slave_1) entered blocking state [ 3027.230936][T10007] bridge0: port 2(bridge_slave_1) entered disabled state [ 3027.239228][T10007] bridge_slave_1: entered allmulticast mode [ 3027.246262][T10007] bridge_slave_1: entered promiscuous mode [ 3027.269257][T15857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3027.294339][T15857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3027.342819][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3027.413971][T10007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3027.429719][T10007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3027.522499][T10007] team0: Port device team_slave_0 added [ 3027.555482][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3027.556312][T10007] team0: Port device team_slave_1 added [ 3027.577919][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3027.649026][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3027.664451][T10007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3027.672413][T10007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3027.726275][T10007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3027.771626][ T5531] hsr_slave_0: left promiscuous mode [ 3027.777795][ T5531] hsr_slave_1: left promiscuous mode [ 3027.784136][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3027.792172][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3027.801702][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3027.809371][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3027.819496][ T5531] bridge_slave_1: left allmulticast mode [ 3027.825165][ T5531] bridge_slave_1: left promiscuous mode [ 3027.841097][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 3027.853599][ T5531] bridge_slave_0: left allmulticast mode [ 3027.868437][ T5531] bridge_slave_0: left promiscuous mode [ 3027.874144][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 3027.905098][ T5531] hsr_slave_0: left promiscuous mode [ 3027.908080][T10053] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3027.921631][T10053] CPU: 0 PID: 10053 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 3027.932080][T10053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 3027.942157][T10053] Call Trace: [ 3027.945450][T10053] [ 3027.948413][T10053] dump_stack_lvl+0x136/0x150 [ 3027.953139][T10053] dump_header+0x10a/0xd70 [ 3027.957590][T10053] oom_kill_process+0x25d/0x600 [ 3027.962465][T10053] out_of_memory+0x35c/0x1660 [ 3027.967168][T10053] ? io_schedule_timeout+0x150/0x150 [ 3027.972482][T10053] ? oom_killer_disable+0x2b0/0x2b0 [ 3027.977712][T10053] mem_cgroup_out_of_memory+0x206/0x270 [ 3027.983303][T10053] ? mem_cgroup_margin+0x130/0x130 [ 3027.988462][T10053] memory_max_write+0x2f9/0x3c0 [ 3027.993349][T10053] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3027.999450][T10053] ? cgroup_file_write+0x8e/0x7b0 [ 3028.004505][T10053] cgroup_file_write+0x1e2/0x7b0 [ 3028.009478][T10053] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3028.015579][T10053] ? cgroup_get_from_path+0x6e0/0x6e0 [ 3028.020969][T10053] ? __virt_addr_valid+0x61/0x2e0 [ 3028.026027][T10053] ? cgroup_get_from_path+0x6e0/0x6e0 [ 3028.031420][T10053] kernfs_fop_write_iter+0x3f1/0x600 [ 3028.036749][T10053] vfs_write+0x945/0xd50 [ 3028.041019][T10053] ? kernel_write+0x670/0x670 [ 3028.045711][T10053] ? __fget_files+0x26a/0x480 [ 3028.050463][T10053] ksys_write+0x12b/0x250 [ 3028.054821][T10053] ? __ia32_sys_read+0xb0/0xb0 [ 3028.059609][T10053] ? syscall_enter_from_user_mode+0x30/0x80 [ 3028.065536][T10053] do_syscall_64+0x39/0xb0 [ 3028.070003][T10053] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3028.075923][T10053] RIP: 0033:0x7f887248c169 [ 3028.080348][T10053] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3028.099970][T10053] RSP: 002b:00007f887325c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3028.108401][T10053] RAX: ffffffffffffffda RBX: 00007f88725ac050 RCX: 00007f887248c169 [ 3028.116393][T10053] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 3028.124380][T10053] RBP: 00007f88724e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3028.132362][T10053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3028.140341][T10053] R13: 00007ffc0825a3cf R14: 00007f887325c300 R15: 0000000000022000 [ 3028.148363][T10053] [ 3028.168185][ T5531] hsr_slave_1: left promiscuous mode [ 3028.200742][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3028.202604][T10053] memory: usage 10704kB, limit 0kB, failcnt 1100 [ 3028.210565][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3028.216248][T10053] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3028.230817][T10053] Memory cgroup stats for /syz3: [ 3028.233108][T10053] anon 118784 [ 3028.233108][T10053] file 10452992 [ 3028.233108][T10053] kernel 380928 [ 3028.233108][T10053] kernel_stack 98304 [ 3028.233108][T10053] pagetables 81920 [ 3028.233108][T10053] sec_pagetables 0 [ 3028.233108][T10053] percpu 64 [ 3028.233108][T10053] sock 0 [ 3028.233108][T10053] vmalloc 0 [ 3028.233108][T10053] shmem 10452992 [ 3028.233108][T10053] zswap 0 [ 3028.233108][T10053] zswapped 0 [ 3028.233108][T10053] file_mapped 344064 [ 3028.233108][T10053] file_dirty 0 [ 3028.233108][T10053] file_writeback 0 [ 3028.233108][T10053] swapcached 0 [ 3028.233108][T10053] anon_thp 0 [ 3028.233108][T10053] file_thp 0 [ 3028.233108][T10053] shmem_thp 0 [ 3028.233108][T10053] inactive_anon 0 [ 3028.233108][T10053] active_anon 10522624 [ 3028.233108][T10053] inactive_file 0 [ 3028.233108][T10053] active_file 0 [ 3028.233108][T10053] unevictable 0 [ 3028.233108][T10053] slab_reclaimable 52744 [ 3028.233108][T10053] slab_unreclaimable 122704 [ 3028.233108][T10053] slab 175448 [ 3028.233108][T10053] workingset_refault_anon 0 [ 3028.233108][T10053] workingset_refault_file 0 [ 3028.233108][T10053] workingset_activate_anon 0 [ 3028.233108][T10053] workingset_activate_file 0 [ 3028.233108][T10053] workingset_restore_anon 0 [ 3028.233108][T10053] workingset_restore_file 0 [ 3028.233108][T10053] workingset_nodereclaim 0 [ 3028.233108][T10053] pgscan 316 [ 3028.233108][T10053] pgsteal 81 [ 3028.233108][T10053] pgscan_kswapd 0 [ 3028.233108][T10053] pgscan_direct 316 [ 3028.233108][T10053] pgscan_khugepaged 0 [ 3028.233108][T10053] pgsteal_kswapd 0 [ 3028.233108][T10053] pgsteal_direct 81 [ 3028.233108][T10053] pgsteal_khugepaged 0 [ 3028.233108][T10053] pgfault 61613 [ 3028.233108][T10053] pgmajfault 0 [ 3028.233108][T10053] pgrefill 914 [ 3028.233108][T10053] pgactivate 235 [ 3028.233108][T10053] pgdeactivate 0 [ 3028.233108][T10053] pglazyfree 0 [ 3028.233108][T10053] pglazyfreed 0 [ 3028.233108][T10053] zswpin 0 [ 3028.233108][T10053] zswpout 0 [ 3028.233108][T10053] thp_fault_alloc 0 [ 3028.441853][T10053] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=10051,uid=0 [ 3028.444066][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3028.463187][T10053] Memory cgroup out of memory: Killed process 10051 (syz-executor.3) total-vm:56728kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3028.477161][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3028.493228][ T5531] bridge_slave_1: left allmulticast mode [ 3028.498953][ T5531] bridge_slave_1: left promiscuous mode [ 3028.504594][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 3028.513502][ T5531] bridge_slave_0: left allmulticast mode [ 3028.519686][ T5531] bridge_slave_0: left promiscuous mode [ 3028.525384][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 3028.540025][ T5531] hsr_slave_0: left promiscuous mode [ 3028.545881][ T5531] hsr_slave_1: left promiscuous mode [ 3028.553367][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3028.561957][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3028.571381][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3028.579125][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3028.587540][ T5531] bridge_slave_1: left allmulticast mode [ 3028.593639][ T5531] bridge_slave_1: left promiscuous mode [ 3028.599765][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 3028.608749][ T5531] bridge_slave_0: left allmulticast mode [ 3028.614437][ T5531] bridge_slave_0: left promiscuous mode [ 3028.620133][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 3028.643555][ T5531] veth1_macvtap: left promiscuous mode [ 3028.649265][ T5531] veth0_macvtap: left promiscuous mode [ 3028.654918][ T5531] veth1_vlan: left promiscuous mode [ 3028.662164][ T5531] veth0_vlan: left promiscuous mode [ 3028.668942][ T5531] veth1_macvtap: left promiscuous mode [ 3028.674556][ T5531] veth0_macvtap: left promiscuous mode [ 3028.680502][ T5531] veth1_vlan: left promiscuous mode [ 3028.685886][ T5531] veth0_vlan: left promiscuous mode [ 3028.693039][ T5531] veth1_macvtap: left promiscuous mode [ 3028.699017][ T5531] veth0_macvtap: left promiscuous mode [ 3028.704613][ T5531] veth1_vlan: left promiscuous mode [ 3028.710070][ T5531] veth0_vlan: left promiscuous mode [ 3028.838396][ T4594] Bluetooth: hci2: command 0x041b tx timeout [ 3029.131646][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 3029.146469][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 3029.162027][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3029.177328][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3029.257856][ T5531] bond0 (unregistering): Released all slaves [ 3029.394239][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 3029.411930][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 3029.427712][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3029.443769][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3029.523630][ T5531] bond0 (unregistering): Released all slaves [ 3029.657563][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 3029.674251][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 3029.687355][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3029.704439][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3029.778097][ T5531] bond0 (unregistering): Released all slaves [ 3029.828728][T10007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3029.835684][T10007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3029.865333][T10007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 01:17:37 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="0008030000086d6f9f487a74dde5e9fac9f9513154ffb3ff030000f56c8374cbe5d99a130e1f636709e048decbe24bb592299846d7bbad3fc61f86a3798700eb2129cf607c223e4b8c7f1687f6d8df1da48cd67815f62156cf2bb02394b3d16f825976c0b0c36e2db48ade28fe642efb21f16681cd5aeebd2341f5c6ab1ecf05adb78fff44"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) 01:17:37 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100ff010000000000000040000000000000000001000f00000000000007020000004a69ba7c2f"], 0x0, 0x49}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0506617, &(0x7f0000000040)=0x2) (async) r2 = syz_clone(0x5000400, &(0x7f0000000180)="3084ae548f63a5001fc11859d91c859319d7bc320a0ddfe939e9", 0x1a, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x0, 0x6, 0xa, 0x0, 0x0, 0x10200, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x80}, 0x80000, 0x200, 0x5, 0x1, 0x2b, 0x5, 0x7, 0x0, 0x3, 0x0, 0x2}, r2, 0x2, r1, 0x1) getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000000c0)="8c389e14f086dda56a5ced3f888eb1ff5295ba24020a3b93459e05ff", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x10, &(0x7f0000000280)={r4, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0xfffffffffffffd37) (async) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x7, 0x3f, 0xd9, 0x8, 0x0, 0x7, 0x30002, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x2, 0x5}, 0x20, 0x9, 0x3, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x400}, r4, 0xb, r0, 0x9) close(r3) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x1000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x7, 0x100, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async) r5 = syz_clone(0xcf3484414d5dc7f8, &(0x7f0000000540)="5e4f6fbe29b9754c905e364f94e9d38c60a4a021a604a6d27901be561599c3611c3d8d06025626bf143b077dd1", 0x2d, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="80ff7caf8143273a268a2ae72fa8fbb59985e2b276fdb8ad0ea10728cc75b6db0be5c9f19b85922d206dab2f2363de89e40250cf3007a275feb3e8f7fec3500739afecb45f479681fb91de0421205916ecd38163fa7d2def7d65c481263ba04ba68fbfb6a289945c1faef839a840108dbeecf15cedadd23c95") r6 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f5, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x10100, 0xffd, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xe, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, 0xffffffffffffffff) (async) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x8, 0x6, 0x0, 0x0, 0x0, 0x4, 0x2400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8c9, 0x2, @perf_config_ext={0x7, 0x1f}, 0x8, 0x2, 0x2, 0x7, 0x1, 0x80000001, 0x7, 0x0, 0x9, 0x0, 0x9}, r5, 0xb, r6, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) 01:17:37 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) 01:17:37 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x0, 0x7d, 0x0, 0x8, 0x0, 0x0, 0x1080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x78, 0x2, @perf_config_ext={0x4, 0x1}, 0x10010, 0x1, 0xffffff05, 0x9, 0xc00, 0x8000, 0x7, 0x0, 0x7, 0x0, 0x2b4d0000000}, r1, 0x5, r5, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r4, &(0x7f0000000180), 0x12) 01:17:37 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100ff010000000000000040000000000000000001000f00000000000007020000004a69ba7c2f"], 0x0, 0x49}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0506617, &(0x7f0000000040)=0x2) r2 = syz_clone(0x5000400, &(0x7f0000000180)="3084ae548f63a5001fc11859d91c859319d7bc320a0ddfe939e9", 0x1a, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x0, 0x6, 0xa, 0x0, 0x0, 0x10200, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x80}, 0x80000, 0x200, 0x5, 0x1, 0x2b, 0x5, 0x7, 0x0, 0x3, 0x0, 0x2}, r2, 0x2, r1, 0x1) getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000000c0)="8c389e14f086dda56a5ced3f888eb1ff5295ba24020a3b93459e05ff", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x10, &(0x7f0000000280)={r4, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0xfffffffffffffd37) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x7, 0x3f, 0xd9, 0x8, 0x0, 0x7, 0x30002, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x2, 0x5}, 0x20, 0x9, 0x3, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x400}, r4, 0xb, r0, 0x9) close(r3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x1000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x7, 0x100, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r5 = syz_clone(0xcf3484414d5dc7f8, &(0x7f0000000540)="5e4f6fbe29b9754c905e364f94e9d38c60a4a021a604a6d27901be561599c3611c3d8d06025626bf143b077dd1", 0x2d, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="80ff7caf8143273a268a2ae72fa8fbb59985e2b276fdb8ad0ea10728cc75b6db0be5c9f19b85922d206dab2f2363de89e40250cf3007a275feb3e8f7fec3500739afecb45f479681fb91de0421205916ecd38163fa7d2def7d65c481263ba04ba68fbfb6a289945c1faef839a840108dbeecf15cedadd23c95") r6 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f5, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x10100, 0xffd, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xe, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x8, 0x6, 0x0, 0x0, 0x0, 0x4, 0x2400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8c9, 0x2, @perf_config_ext={0x7, 0x1f}, 0x8, 0x2, 0x2, 0x7, 0x1, 0x80000001, 0x7, 0x0, 0x9, 0x0, 0x9}, r5, 0xb, r6, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) [ 3029.990894][T10007] hsr_slave_0: entered promiscuous mode [ 3030.030887][ T9917] syz-executor.3 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=0 [ 3030.047975][T10007] hsr_slave_1: entered promiscuous mode [ 3030.060317][ T9917] CPU: 0 PID: 9917 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 3030.070686][ T9917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 3030.080787][ T9917] Call Trace: [ 3030.084112][ T9917] [ 3030.087069][ T9917] dump_stack_lvl+0x136/0x150 [ 3030.091815][ T9917] dump_header+0x10a/0xd70 [ 3030.096274][ T9917] oom_kill_process+0x25d/0x600 [ 3030.101163][ T9917] out_of_memory+0x35c/0x1660 [ 3030.105883][ T9917] ? find_held_lock+0x2d/0x110 [ 3030.110691][ T9917] ? oom_killer_disable+0x2b0/0x2b0 [ 3030.115926][ T9917] ? rcu_read_unlock+0x9/0x60 [ 3030.120640][ T9917] ? find_held_lock+0x2d/0x110 [ 3030.125449][ T9917] mem_cgroup_out_of_memory+0x206/0x270 [ 3030.131053][ T9917] ? mem_cgroup_margin+0x130/0x130 [ 3030.136217][ T9917] ? lock_downgrade+0x690/0x690 [ 3030.141129][ T9917] try_charge_memcg+0xf99/0x13a0 [ 3030.146121][ T9917] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3030.152167][ T9917] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3030.157953][ T9917] ? lock_downgrade+0x690/0x690 [ 3030.162890][ T9917] ? lock_downgrade+0x690/0x690 [ 3030.167784][ T9917] ? rcu_read_unlock+0x9/0x60 [ 3030.172525][ T9917] obj_cgroup_charge+0x2af/0x5e0 [ 3030.177511][ T9917] __kmem_cache_alloc_node+0xa3/0x320 [ 3030.182935][ T9917] ? kvmalloc_node+0xa2/0x1a0 [ 3030.187663][ T9917] ? kvmalloc_node+0xa2/0x1a0 [ 3030.192391][ T9917] __kmalloc_node+0x51/0x1a0 [ 3030.197014][ T9917] kvmalloc_node+0xa2/0x1a0 [ 3030.201606][ T9917] alloc_fdtable+0xf4/0x2a0 [ 3030.206159][ T9917] dup_fd+0x74d/0xcf0 [ 3030.210192][ T9917] ? security_task_alloc+0xe4/0x250 [ 3030.215433][ T9917] copy_process+0x263b/0x7600 [ 3030.220164][ T9917] ? _raw_spin_unlock+0x28/0x40 [ 3030.225085][ T9917] ? pidfd_prepare+0x80/0x80 [ 3030.229807][ T9917] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3030.235839][ T9917] kernel_clone+0xeb/0x890 [ 3030.240307][ T9917] ? create_io_thread+0xe0/0xe0 [ 3030.245292][ T9917] ? do_user_addr_fault+0x2b1/0x1210 [ 3030.250622][ T9917] ? reacquire_held_locks+0x216/0x4e0 [ 3030.256042][ T9917] ? do_user_addr_fault+0x2b1/0x1210 [ 3030.261413][ T9917] ? find_held_lock+0x2d/0x110 [ 3030.266223][ T9917] __do_sys_clone+0xba/0x100 [ 3030.270902][ T9917] ? kernel_clone+0x890/0x890 [ 3030.275634][ T9917] ? syscall_enter_from_user_mode+0x26/0x80 [ 3030.281577][ T9917] do_syscall_64+0x39/0xb0 [ 3030.286038][ T9917] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3030.291985][ T9917] RIP: 0033:0x7f8872489e9b [ 3030.296434][ T9917] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 3030.316093][ T9917] RSP: 002b:00007ffc0825a610 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3030.324544][ T9917] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8872489e9b [ 3030.332550][ T9917] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3030.340555][ T9917] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555d76400 [ 3030.348555][ T9917] R10: 0000555555d766d0 R11: 0000000000000246 R12: 0000000000000001 [ 3030.356554][ T9917] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc0825a6f0 [ 3030.364565][ T9917] [ 3030.382340][T10007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3030.405572][T10007] Cannot create hsr debugfs directory 01:17:38 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000002f40)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x80) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x0, 0x3, 0x62aecf70, 0x81, 0x4e0, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x6, 0x3, 0x8}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x58, &(0x7f0000000040)={0x0, 0x0}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r2, 0x0, 0x8}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x2, &(0x7f0000000280)={r3, 0x0, 0x0}, 0x20) getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="d9082ddb426d0625d5c50552bb4cd360a02dc9b4e454bb806d2e00b51fcc74bf1fbfaec3af7cbbb9b973c877535194a4f2f5a112613e76d55bcecef8757ab6c160e5eef12046c77fa7aed45f24f6f2fe78c1fbe75e54361944d2d55ac90c9acc322129c6"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x2, &(0x7f0000000000)=ANY=[], 0x0, 0x400, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x3, 0x20000003, 0xea90}, 0x10, 0xffffffffffffffff}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000540)={0x4, 0x80, 0x1f, 0xee, 0x81, 0x8c, 0x0, 0x9, 0x1030, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x7, 0xed74}, 0x821, 0x8, 0x1, 0x8, 0x7, 0x3, 0x4, 0x0, 0x5, 0x0, 0x4}, r4, 0x8, r5, 0xa) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)=0x7) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000009c0)='vem\x7fry.events\x00|=J\xd0\x85T\x18tV\a=\xac\xf0\x1f\n\x18g1\x89\x05f\xca\xc78\xed\x8c\x02%#mM\xee\x9c\x9fF\xa7\xe3\x04') perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0xff, 0x0, 0x1, 0x81, 0x0, 0x7, 0x441, 0xb, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x3f39, 0x8}, 0x8a0, 0x274, 0x5060, 0x2, 0x480, 0x8000, 0x8001, 0x0, 0x2, 0x0, 0x2}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 3030.518848][ T9917] memory: usage 10420kB, limit 0kB, failcnt 1119 [ 3030.525227][ T9917] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3030.583514][ T9917] Memory cgroup stats for /syz3: [ 3030.583749][ T9917] anon 45056 [ 3030.583749][ T9917] file 10452992 [ 3030.583749][ T9917] kernel 159744 [ 3030.583749][ T9917] kernel_stack 32768 [ 3030.583749][ T9917] pagetables 8192 [ 3030.583749][ T9917] sec_pagetables 0 [ 3030.583749][ T9917] percpu 0 [ 3030.583749][ T9917] sock 0 [ 3030.583749][ T9917] vmalloc 0 [ 3030.583749][ T9917] shmem 10452992 [ 3030.583749][ T9917] zswap 0 [ 3030.583749][ T9917] zswapped 0 [ 3030.583749][ T9917] file_mapped 323584 [ 3030.583749][ T9917] file_dirty 0 [ 3030.583749][ T9917] file_writeback 0 [ 3030.583749][ T9917] swapcached 0 [ 3030.583749][ T9917] anon_thp 0 [ 3030.583749][ T9917] file_thp 0 [ 3030.583749][ T9917] shmem_thp 0 [ 3030.583749][ T9917] inactive_anon 0 [ 3030.583749][ T9917] active_anon 10498048 [ 3030.583749][ T9917] inactive_file 0 [ 3030.583749][ T9917] active_file 0 [ 3030.583749][ T9917] unevictable 0 [ 3030.583749][ T9917] slab_reclaimable 38696 [ 3030.583749][ T9917] slab_unreclaimable 68344 [ 3030.583749][ T9917] slab 107040 [ 3030.583749][ T9917] workingset_refault_anon 0 [ 3030.583749][ T9917] workingset_refault_file 0 [ 3030.583749][ T9917] workingset_activate_anon 0 [ 3030.583749][ T9917] workingset_activate_file 0 [ 3030.583749][ T9917] workingset_restore_anon 0 [ 3030.583749][ T9917] workingset_restore_file 0 [ 3030.583749][ T9917] workingset_nodereclaim 0 [ 3030.583749][ T9917] pgscan 316 [ 3030.583749][ T9917] pgsteal 81 [ 3030.583749][ T9917] pgscan_kswapd 0 [ 3030.583749][ T9917] pgscan_direct 316 [ 3030.583749][ T9917] pgscan_khugepaged 0 [ 3030.583749][ T9917] pgsteal_kswapd 0 [ 3030.583749][ T9917] pgsteal_direct 81 [ 3030.583749][ T9917] pgsteal_khugepaged 0 [ 3030.583749][ T9917] pgfault 61625 [ 3030.583749][ T9917] pgmajfault 0 [ 3030.583749][ T9917] pgrefill 914 [ 3030.583749][ T9917] pgactivate 235 [ 3030.583749][ T9917] pgdeactivate 0 [ 3030.583749][ T9917] pglazyfree 0 [ 3030.583749][ T9917] pglazyfreed 0 [ 3030.583749][ T9917] zswpin 0 [ 3030.583749][ T9917] zswpout 0 [ 3030.583749][ T9917] thp_fault_alloc 0 01:17:38 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100ff010000000000000040000000000000000001000f00000000000007020000004a69ba7c2f"], 0x0, 0x49}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0506617, &(0x7f0000000040)=0x2) r2 = syz_clone(0x5000400, &(0x7f0000000180)="3084ae548f63a5001fc11859d91c859319d7bc320a0ddfe939e9", 0x1a, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x0, 0x6, 0xa, 0x0, 0x0, 0x10200, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x80}, 0x80000, 0x200, 0x5, 0x1, 0x2b, 0x5, 0x7, 0x0, 0x3, 0x0, 0x2}, r2, 0x2, r1, 0x1) getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000000c0)="8c389e14f086dda56a5ced3f888eb1ff5295ba24020a3b93459e05ff", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x10, &(0x7f0000000280)={r4, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0xfffffffffffffd37) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x7, 0x3f, 0xd9, 0x8, 0x0, 0x7, 0x30002, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x2, 0x5}, 0x20, 0x9, 0x3, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x400}, r4, 0xb, r0, 0x9) close(r3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x1000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x7, 0x100, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r5 = syz_clone(0xcf3484414d5dc7f8, &(0x7f0000000540)="5e4f6fbe29b9754c905e364f94e9d38c60a4a021a604a6d27901be561599c3611c3d8d06025626bf143b077dd1", 0x2d, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="80ff7caf8143273a268a2ae72fa8fbb59985e2b276fdb8ad0ea10728cc75b6db0be5c9f19b85922d206dab2f2363de89e40250cf3007a275feb3e8f7fec3500739afecb45f479681fb91de0421205916ecd38163fa7d2def7d65c481263ba04ba68fbfb6a289945c1faef839a840108dbeecf15cedadd23c95") r6 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f5, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x10100, 0xffd, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xe, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x8, 0x6, 0x0, 0x0, 0x0, 0x4, 0x2400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8c9, 0x2, @perf_config_ext={0x7, 0x1f}, 0x8, 0x2, 0x2, 0x7, 0x1, 0x80000001, 0x7, 0x0, 0x9, 0x0, 0x9}, r5, 0xb, r6, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) [ 3030.918488][ T4594] Bluetooth: hci2: command 0x040f tx timeout [ 3031.311548][ T9917] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=9917,uid=0 [ 3031.404196][ T9917] Memory cgroup out of memory: Killed process 9917 (syz-executor.3) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 01:17:39 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0xc0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x5, &(0x7f0000000a40)=@raw=[@exit, @exit, @ldst, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:17:39 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0xc0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x5, &(0x7f0000000a40)=@raw=[@exit, @exit, @ldst, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:17:39 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0xc0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x5, &(0x7f0000000a40)=@raw=[@exit, @exit, @ldst, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 3032.998254][ T4594] Bluetooth: hci2: command 0x0419 tx timeout [ 3033.050189][T31297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3033.060195][T31297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3033.076963][T31297] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3033.085482][T31297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3033.093166][T31297] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3033.100929][T31297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3033.559640][T31297] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3033.568036][T31297] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3033.577540][ T5049] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3033.585494][ T5049] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3033.593889][ T5049] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3033.907982][T10007] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3033.982581][T10007] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3034.072569][T10007] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3034.105074][T10007] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3034.194745][T10098] chnl_net:caif_netlink_parms(): no params data found [ 3034.792901][T10105] chnl_net:caif_netlink_parms(): no params data found [ 3034.828992][T10098] bridge0: port 1(bridge_slave_0) entered blocking state [ 3034.836111][T10098] bridge0: port 1(bridge_slave_0) entered disabled state [ 3034.868707][T10098] bridge_slave_0: entered allmulticast mode [ 3034.886566][T10098] bridge_slave_0: entered promiscuous mode [ 3034.946985][T10007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3034.971287][T10098] bridge0: port 2(bridge_slave_1) entered blocking state [ 3035.008956][T10098] bridge0: port 2(bridge_slave_1) entered disabled state [ 3035.017237][T10098] bridge_slave_1: entered allmulticast mode [ 3035.040523][T10098] bridge_slave_1: entered promiscuous mode [ 3035.088449][T28784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3035.096359][T28784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3035.160140][ T5049] Bluetooth: hci0: command 0x0409 tx timeout [ 3035.185739][T10007] 8021q: adding VLAN 0 to HW filter on device team0 [ 3035.271327][T28784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3035.280517][T28784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3035.309107][T28784] bridge0: port 1(bridge_slave_0) entered blocking state [ 3035.316213][T28784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3035.339217][T28784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3035.347885][T28784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3035.365212][T28784] bridge0: port 2(bridge_slave_1) entered blocking state [ 3035.372379][T28784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3035.388613][T28784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3035.400169][T10098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3035.470563][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3035.488627][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3035.509180][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3035.519105][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3035.571508][T10098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3035.628940][T10105] bridge0: port 1(bridge_slave_0) entered blocking state [ 3035.636057][T10105] bridge0: port 1(bridge_slave_0) entered disabled state [ 3035.643672][ T4594] Bluetooth: hci1: command 0x0409 tx timeout [ 3035.668472][T10105] bridge_slave_0: entered allmulticast mode [ 3035.675438][T10105] bridge_slave_0: entered promiscuous mode [ 3035.710845][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3035.729285][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3035.757644][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3035.789158][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3035.818754][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3035.828912][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3035.848955][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3035.858906][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3035.909472][T10105] bridge0: port 2(bridge_slave_1) entered blocking state [ 3035.917223][T10105] bridge0: port 2(bridge_slave_1) entered disabled state [ 3035.947036][T10105] bridge_slave_1: entered allmulticast mode [ 3035.980341][T10105] bridge_slave_1: entered promiscuous mode [ 3036.064637][T10098] team0: Port device team_slave_0 added [ 3036.107243][T10105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3036.150924][T10105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3036.176044][T10098] team0: Port device team_slave_1 added [ 3036.268108][T10105] team0: Port device team_slave_0 added [ 3036.303545][T10098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3036.323871][T10098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3036.364893][T10098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3036.386579][T10105] team0: Port device team_slave_1 added [ 3036.397860][T10098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3036.405608][T10098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3036.435073][T10098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3036.515290][T10105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3036.522815][T10105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3036.563677][T10105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3036.591813][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3036.605449][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3036.636402][T10007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3036.648042][T10105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3036.664768][T10105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3036.703621][T10105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3036.732773][T10098] hsr_slave_0: entered promiscuous mode [ 3036.748368][T10098] hsr_slave_1: entered promiscuous mode [ 3036.756025][T10098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3036.774725][T10098] Cannot create hsr debugfs directory [ 3036.862298][T10105] hsr_slave_0: entered promiscuous mode [ 3036.879010][T10105] hsr_slave_1: entered promiscuous mode [ 3036.893680][T10105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3036.904800][T10105] Cannot create hsr debugfs directory [ 3036.962709][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3036.971539][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3037.106383][ T5531] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3037.140435][T10007] veth0_vlan: entered promiscuous mode [ 3037.169720][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3037.177893][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3037.186355][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3037.194038][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3037.218627][T10007] veth1_vlan: entered promiscuous mode [ 3037.248321][ T4594] Bluetooth: hci0: command 0x041b tx timeout [ 3037.299150][ T5531] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3037.370674][ T5531] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3037.422343][T10098] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3037.447217][ T5531] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3037.531885][T10098] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3037.561139][T10007] veth0_macvtap: entered promiscuous mode [ 3037.568518][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3037.577546][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3037.602446][T10007] veth1_macvtap: entered promiscuous mode [ 3037.644463][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3037.659129][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3037.710225][T10098] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3037.737598][ T4594] Bluetooth: hci1: command 0x041b tx timeout [ 3037.755665][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3037.778236][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3037.788078][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3037.889273][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3037.938244][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3037.957797][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3037.993526][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3038.018291][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3038.028126][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3038.078177][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3038.099883][T10007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3038.110110][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3038.119683][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3038.173016][T10098] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3038.254445][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3038.287284][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3038.325895][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3038.360420][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3038.408273][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3038.428194][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3038.438025][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3038.468166][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3038.477993][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3038.508207][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3038.529692][T10007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3038.537077][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3038.546168][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3038.579223][T10007] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3038.587953][T10007] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3038.637051][T10007] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3038.676914][T10007] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3038.766071][ T5531] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3038.900414][ T5531] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3039.032697][ T5531] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3039.079035][T15859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3039.113414][T15859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3039.150829][ T5531] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3039.181084][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3039.190395][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3039.207991][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3039.233887][T28784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3039.318386][ T4594] Bluetooth: hci0: command 0x040f tx timeout [ 3039.591661][T10177] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3039.638064][T10177] CPU: 1 PID: 10177 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 3039.648540][T10177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 3039.658627][T10177] Call Trace: [ 3039.661934][T10177] [ 3039.664889][T10177] dump_stack_lvl+0x136/0x150 [ 3039.669634][T10177] dump_header+0x10a/0xd70 [ 3039.674096][T10177] oom_kill_process+0x25d/0x600 [ 3039.679004][T10177] out_of_memory+0x35c/0x1660 [ 3039.683733][T10177] ? oom_killer_disable+0x2b0/0x2b0 [ 3039.688971][T10177] ? mark_held_locks+0x9f/0xe0 [ 3039.693797][T10177] mem_cgroup_out_of_memory+0x206/0x270 [ 3039.699391][T10177] ? mem_cgroup_margin+0x130/0x130 [ 3039.704541][T10177] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 3039.710381][T10177] memory_max_write+0x2f9/0x3c0 [ 3039.715264][T10177] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3039.721373][T10177] ? lock_sync+0x190/0x190 [ 3039.725824][T10177] cgroup_file_write+0x1e2/0x7b0 [ 3039.730780][T10177] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3039.736883][T10177] ? cgroup_get_from_path+0x6e0/0x6e0 [ 3039.742301][T10177] ? __virt_addr_valid+0x61/0x2e0 [ 3039.747362][T10177] ? cgroup_get_from_path+0x6e0/0x6e0 [ 3039.752784][T10177] kernfs_fop_write_iter+0x3f1/0x600 [ 3039.758100][T10177] vfs_write+0x945/0xd50 [ 3039.762383][T10177] ? kernel_write+0x670/0x670 [ 3039.767074][T10177] ? __fget_files+0x26a/0x480 [ 3039.771800][T10177] ksys_write+0x12b/0x250 [ 3039.776170][T10177] ? __ia32_sys_read+0xb0/0xb0 [ 3039.780950][T10177] ? syscall_enter_from_user_mode+0x26/0x80 [ 3039.786868][T10177] do_syscall_64+0x39/0xb0 [ 3039.791314][T10177] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3039.797267][T10177] RIP: 0033:0x7fe2a248c169 [ 3039.801694][T10177] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3039.821318][T10177] RSP: 002b:00007fe2a3224168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3039.829744][T10177] RAX: ffffffffffffffda RBX: 00007fe2a25ac050 RCX: 00007fe2a248c169 [ 3039.837722][T10177] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 3039.845701][T10177] RBP: 00007fe2a24e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3039.853681][T10177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3039.861662][T10177] R13: 00007ffc9358017f R14: 00007fe2a3224300 R15: 0000000000022000 [ 3039.869662][T10177] [ 3039.873995][ T4594] Bluetooth: hci1: command 0x040f tx timeout [ 3039.915773][T10177] memory: usage 10644kB, limit 0kB, failcnt 1986 [ 3039.928492][T10177] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3039.935554][T10177] Memory cgroup stats for /syz2: [ 3039.936755][T10177] anon 118784 [ 3039.936755][T10177] file 10416128 [ 3039.936755][T10177] kernel 356352 [ 3039.936755][T10177] kernel_stack 98304 [ 3039.936755][T10177] pagetables 81920 [ 3039.936755][T10177] sec_pagetables 0 [ 3039.936755][T10177] percpu 64 [ 3039.936755][T10177] sock 0 [ 3039.936755][T10177] vmalloc 0 [ 3039.936755][T10177] shmem 10416128 [ 3039.936755][T10177] zswap 0 [ 3039.936755][T10177] zswapped 0 [ 3039.936755][T10177] file_mapped 176128 [ 3039.936755][T10177] file_dirty 0 [ 3039.936755][T10177] file_writeback 0 [ 3039.936755][T10177] swapcached 0 [ 3039.936755][T10177] anon_thp 0 [ 3039.936755][T10177] file_thp 0 [ 3039.936755][T10177] shmem_thp 0 [ 3039.936755][T10177] inactive_anon 0 [ 3039.936755][T10177] active_anon 10534912 [ 3039.936755][T10177] inactive_file 0 [ 3039.936755][T10177] active_file 0 [ 3039.936755][T10177] unevictable 0 [ 3039.936755][T10177] slab_reclaimable 57712 [ 3039.936755][T10177] slab_unreclaimable 95992 [ 3039.936755][T10177] slab 153704 [ 3039.936755][T10177] workingset_refault_anon 0 [ 3039.936755][T10177] workingset_refault_file 0 [ 3039.936755][T10177] workingset_activate_anon 0 [ 3039.936755][T10177] workingset_activate_file 0 [ 3039.936755][T10177] workingset_restore_anon 0 [ 3039.936755][T10177] workingset_restore_file 0 [ 3039.936755][T10177] workingset_nodereclaim 0 [ 3039.936755][T10177] pgscan 172 [ 3039.936755][T10177] pgsteal 52 [ 3039.936755][T10177] pgscan_kswapd 0 [ 3039.936755][T10177] pgscan_direct 172 [ 3039.936755][T10177] pgscan_khugepaged 0 [ 3039.936755][T10177] pgsteal_kswapd 0 [ 3039.936755][T10177] pgsteal_direct 52 [ 3039.936755][T10177] pgsteal_khugepaged 0 [ 3039.936755][T10177] pgfault 55803 [ 3039.936755][T10177] pgmajfault 0 [ 3039.936755][T10177] pgrefill 20570 [ 3039.936755][T10177] pgactivate 120 [ 3039.936755][T10177] pgdeactivate 0 [ 3039.936755][T10177] pglazyfree 0 [ 3039.936755][T10177] pglazyfreed 0 [ 3039.936755][T10177] zswpin 0 [ 3039.936755][T10177] zswpout 0 [ 3039.936755][T10177] thp_fault_alloc 0 [ 3040.202615][T10177] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=10174,uid=0 [ 3040.244560][T10177] Memory cgroup out of memory: Killed process 10177 (syz-executor.2) total-vm:54680kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 01:17:48 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="0008030000086d6f9f487a74dde5e9fac9f9513154ffb3ff030000f56c8374cbe5d99a130e1f636709e048decbe24bb592299846d7bbad3fc61f86a3798700eb2129cf607c223e4b8c7f1687f6d8df1da48cd67815f62156cf2bb02394b3d16f825976c0b0c36e2db48ade28fe642efb21f16681cd5aeebd2341f5c6ab1ecf05adb78fff445806189faf2b6dc37f77dbf2b0a1e6d4b89eff16e67ea60b26c312f08600b3c1d61a0a9c63469ca436d6d2321df23da24e75309e7036cfc5c36d8127ca878c4a65b0f2089ed5593689cded5d46e67477fad72b4a5f2a10345eaf04e2cd7a8f1780cfb7"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) 01:17:48 executing program 0: syz_clone(0x44100000, &(0x7f0000000140)="cf782c006a8db915cc6e5e51ead2430d9979a83543f09e5f8bff04ba4304132d25b45f270324cde946934b24b531784452c75dc7bb9795180000a35a0350b6523ef61e5a9f2da31d3321420dcf0500000000000000142b546f813359f0e8687afd027de22e8ac94094732f72677c0663097d3f1d14af2156b49f998331342c5e194b2d41051ae94aca0c61fbc19e4c311ad1e1a3e2d7c337ee6a891a91fffebb44cd40deba2af624f28c7a22e66f216bf925f6a955743b9a75cc0bcf06965d6ad35855ca7d24dc50d26ddc8910898f6ae7ab631fd054", 0xd6, 0x0, &(0x7f0000000100), 0x0) 01:17:48 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x48) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x0, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xffd0}], 0x3}, 0xfc) 01:17:48 executing program 3: perf_event_open$cgroup(&(0x7f0000000100)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xbea}, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f9, 0x0, @perf_config_ext={0x9, 0x4}, 0x0, 0xfff, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="ef2d3900000085822f09001000000000002553b37e608260eecd519368cad87eaf1300000000000000f779e0dbf8e7158f36e2dbdafda6086bd9ab59eb472a36057791af893953b964067d85f777463ab2a48b1bd0a3594cf7de3cfff104e67f9ee075c9a7c919ae745659a2266389279fda5c67ac8c8f16b8162f97547cb26b502eed1bb4ef"], &(0x7f00000000c0)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x4100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0, 0xd}, 0x814a4, 0x3, 0xfffffffe, 0x8, 0x7fff, 0x2, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000005c0)={0x3, 0x80, 0x1, 0x1, 0x40, 0x8, 0x0, 0x4ba, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdffa, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x121d2, 0x2c, 0x2, 0xb, 0x2, 0x61ab, 0x7, 0x0, 0x3, 0x0, 0x4000000005}, 0x0, 0x2000000001000263, 0xffffffffffffffff, 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x10}) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'team0\x00', 0x8000}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000001a00)={0x1, &(0x7f0000000500)=[{0xfffe, 0x5, 0x88, 0x9}]}) openat$cgroup_int(r2, &(0x7f00000004c0)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000001a40)=ANY=[@ANYBLOB="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", @ANYRESDEC]) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000280)='!&(\xa4\x00\x00') bpf$ENABLE_STATS(0x20, &(0x7f0000000540), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)=0x2, 0x12) r3 = perf_event_open(&(0x7f00000006c0)={0x0, 0x80, 0x40, 0x9, 0x3, 0x5d, 0x0, 0x1f, 0x4c280, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x1, @perf_bp={&(0x7f0000000400), 0x4}, 0x100000, 0xb05, 0x6, 0x2, 0xa, 0x9, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, r2, 0x4) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0400000000000000"], 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='memory.swap.events\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x9) r5 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8923, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000002c0)='ve_\xc5\a\xa2\x05\x00\x00\x00\x00\x00\x00\x00\xe9\xeagc\xd0') [ 3040.427198][T10007] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 3040.509309][T10007] CPU: 0 PID: 10007 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 3040.519777][T10007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 3040.529863][T10007] Call Trace: [ 3040.533171][T10007] [ 3040.536127][T10007] dump_stack_lvl+0x136/0x150 [ 3040.540874][T10007] dump_header+0x10a/0xd70 [ 3040.545339][T10007] oom_kill_process+0x25d/0x600 [ 3040.550226][T10007] out_of_memory+0x35c/0x1660 [ 3040.554959][T10007] ? find_held_lock+0x2d/0x110 [ 3040.559767][T10007] ? oom_killer_disable+0x2b0/0x2b0 [ 3040.564986][T10007] ? rcu_read_unlock+0x9/0x60 [ 3040.569682][T10007] ? find_held_lock+0x2d/0x110 [ 3040.574468][T10007] mem_cgroup_out_of_memory+0x206/0x270 [ 3040.580033][T10007] ? mem_cgroup_margin+0x130/0x130 [ 3040.585162][T10007] ? lock_downgrade+0x690/0x690 [ 3040.590049][T10007] try_charge_memcg+0xf99/0x13a0 [ 3040.595051][T10007] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3040.601070][T10007] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3040.606827][T10007] ? lock_downgrade+0x690/0x690 [ 3040.611729][T10007] ? lock_downgrade+0x690/0x690 [ 3040.616618][T10007] obj_cgroup_charge+0x2af/0x5e0 [ 3040.621592][T10007] ? __d_alloc+0x32/0x980 [ 3040.625935][T10007] kmem_cache_alloc_lru+0x142/0x600 [ 3040.631177][T10007] __d_alloc+0x32/0x980 [ 3040.635342][T10007] ? __lock_acquire+0x1916/0x5df0 [ 3040.640397][T10007] d_alloc+0x4e/0x240 [ 3040.644400][T10007] d_alloc_parallel+0xe8/0x1530 [ 3040.649277][T10007] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3040.655280][T10007] ? is_bpf_text_address+0x9d/0x1b0 [ 3040.660498][T10007] ? __d_lookup_rcu+0x4e0/0x4e0 [ 3040.665416][T10007] ? lockdep_init_map_type+0x21e/0x810 [ 3040.670938][T10007] ? lockdep_init_map_type+0x21e/0x810 [ 3040.676431][T10007] __lookup_slow+0x193/0x460 [ 3040.681039][T10007] ? lookup_one_qstr_excl+0x180/0x180 [ 3040.686450][T10007] ? lookup_fast+0x14e/0x520 [ 3040.691066][T10007] walk_component+0x33f/0x5a0 [ 3040.695768][T10007] path_lookupat+0x1ba/0x840 [ 3040.700384][T10007] filename_lookup+0x1d2/0x590 [ 3040.705176][T10007] ? may_linkat+0x3b0/0x3b0 [ 3040.709695][T10007] ? __might_fault+0xe2/0x190 [ 3040.714407][T10007] ? __phys_addr_symbol+0x30/0x70 [ 3040.719454][T10007] ? __check_object_size+0x323/0x730 [ 3040.724762][T10007] ? strncpy_from_user+0x1f8/0x350 [ 3040.729921][T10007] ? getname_flags.part.0+0x1dd/0x4f0 [ 3040.735320][T10007] user_path_at_empty+0x46/0x60 [ 3040.740198][T10007] __x64_sys_umount+0xfc/0x190 [ 3040.744979][T10007] ? path_umount+0x10b0/0x10b0 [ 3040.749759][T10007] ? syscall_enter_from_user_mode+0x26/0x80 [ 3040.755675][T10007] do_syscall_64+0x39/0xb0 [ 3040.760119][T10007] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3040.766037][T10007] RIP: 0033:0x7fe2a248d5d7 [ 3040.770463][T10007] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3040.790080][T10007] RSP: 002b:00007ffc9357f2d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 3040.798509][T10007] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe2a248d5d7 [ 3040.806507][T10007] RDX: 00007ffc9357f3ae RSI: 000000000000000a RDI: 00007ffc9357f3a0 [ 3040.814486][T10007] RBP: 00007ffc9357f3a0 R08: 00000000ffffffff R09: 00007ffc9357f170 [ 3040.822464][T10007] R10: 000055555557f8e3 R11: 0000000000000246 R12: 00007fe2a24e6cdc [ 3040.830447][T10007] R13: 00007ffc93580460 R14: 000055555557f810 R15: 00007ffc935804a0 [ 3040.838446][T10007] [ 3040.898377][T10007] memory: usage 10320kB, limit 0kB, failcnt 2005 [ 3040.928561][T10007] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3040.952975][T10007] Memory cgroup stats for /syz2: [ 3040.955117][T10007] anon 45056 [ 3040.955117][T10007] file 10416128 [ 3040.955117][T10007] kernel 106496 [ 3040.955117][T10007] kernel_stack 0 [ 3040.955117][T10007] pagetables 8192 [ 3040.955117][T10007] sec_pagetables 0 [ 3040.955117][T10007] percpu 64 [ 3040.955117][T10007] sock 0 [ 3040.955117][T10007] vmalloc 0 [ 3040.955117][T10007] shmem 10416128 [ 3040.955117][T10007] zswap 0 [ 3040.955117][T10007] zswapped 0 [ 3040.955117][T10007] file_mapped 176128 [ 3040.955117][T10007] file_dirty 0 [ 3040.955117][T10007] file_writeback 0 [ 3040.955117][T10007] swapcached 0 [ 3040.955117][T10007] anon_thp 0 [ 3040.955117][T10007] file_thp 0 [ 3040.955117][T10007] shmem_thp 0 [ 3040.955117][T10007] inactive_anon 0 [ 3040.955117][T10007] active_anon 10461184 [ 3040.955117][T10007] inactive_file 0 [ 3040.955117][T10007] active_file 0 [ 3040.955117][T10007] unevictable 0 [ 3040.955117][T10007] slab_reclaimable 40672 [ 3040.955117][T10007] slab_unreclaimable 44920 [ 3040.955117][T10007] slab 85592 [ 3040.955117][T10007] workingset_refault_anon 0 [ 3040.955117][T10007] workingset_refault_file 0 [ 3040.955117][T10007] workingset_activate_anon 0 [ 3040.955117][T10007] workingset_activate_file 0 [ 3040.955117][T10007] workingset_restore_anon 0 [ 3040.955117][T10007] workingset_restore_file 0 [ 3040.955117][T10007] workingset_nodereclaim 0 [ 3040.955117][T10007] pgscan 172 [ 3040.955117][T10007] pgsteal 52 [ 3040.955117][T10007] pgscan_kswapd 0 [ 3040.955117][T10007] pgscan_direct 172 [ 3040.955117][T10007] pgscan_khugepaged 0 [ 3040.955117][T10007] pgsteal_kswapd 0 [ 3040.955117][T10007] pgsteal_direct 52 [ 3040.955117][T10007] pgsteal_khugepaged 0 [ 3040.955117][T10007] pgfault 55812 [ 3040.955117][T10007] pgmajfault 0 [ 3040.955117][T10007] pgrefill 20570 [ 3040.955117][T10007] pgactivate 120 [ 3040.955117][T10007] pgdeactivate 0 [ 3040.955117][T10007] pglazyfree 0 [ 3040.955117][T10007] pglazyfreed 0 [ 3040.955117][T10007] zswpin 0 [ 3040.955117][T10007] zswpout 0 [ 3040.955117][T10007] thp_fault_alloc 0 [ 3041.229458][T10007] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=10007,uid=0 [ 3041.318506][T10007] Memory cgroup out of memory: Killed process 10007 (syz-executor.2) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 3041.398701][ T4594] Bluetooth: hci0: command 0x0419 tx timeout [ 3041.608419][T10098] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3041.661058][T10098] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3041.899463][T10098] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3041.958443][ T4594] Bluetooth: hci1: command 0x0419 tx timeout [ 3042.068901][T10098] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3042.126666][T10105] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3042.163258][T10105] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3042.289423][T10105] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3042.324929][T10105] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3042.586797][T10098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3042.681350][T10105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3042.707235][T10098] 8021q: adding VLAN 0 to HW filter on device team0 [ 3042.738718][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3042.746576][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3042.811927][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3042.820237][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3042.828049][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3042.858813][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3042.867271][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 3042.874414][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3042.908674][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3042.917423][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3042.948697][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 3042.955798][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3043.000628][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3043.027312][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3043.052183][T10105] 8021q: adding VLAN 0 to HW filter on device team0 [ 3043.140204][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3043.153279][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3043.189619][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3043.260087][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3043.278252][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3043.302440][ T5049] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3043.312317][ T5049] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3043.319297][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3043.329042][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 3043.336169][ T5096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3043.344211][ T5049] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3043.351944][ T5049] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3043.368255][ T5049] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3043.408449][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3043.428657][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3043.445841][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 3043.452981][ T5096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3043.468786][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3043.573651][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3043.606271][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3043.617534][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3043.626667][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3043.635785][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3043.644448][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3043.653407][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3043.662015][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3043.671192][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3043.681827][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3043.693546][T10098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3043.717508][T10105] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3043.740652][T10105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3043.764217][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3043.778890][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3043.787685][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3043.805886][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3043.817266][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3043.835101][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3043.844253][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3043.855928][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3044.067884][ T5531] hsr_slave_0: left promiscuous mode [ 3044.075600][ T5531] hsr_slave_1: left promiscuous mode [ 3044.082861][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3044.090306][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3044.099116][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3044.106526][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3044.115122][ T5531] bridge_slave_1: left allmulticast mode [ 3044.121179][ T5531] bridge_slave_1: left promiscuous mode [ 3044.127676][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 3044.136012][ T5531] bridge_slave_0: left allmulticast mode [ 3044.146859][ T5531] bridge_slave_0: left promiscuous mode [ 3044.152678][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 3044.166213][ T5531] hsr_slave_0: left promiscuous mode [ 3044.172211][ T5531] hsr_slave_1: left promiscuous mode [ 3044.177914][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3044.188468][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3044.197538][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3044.205499][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3044.215517][ T5531] bridge_slave_1: left allmulticast mode [ 3044.221382][ T5531] bridge_slave_1: left promiscuous mode [ 3044.227651][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 3044.236579][ T5531] bridge_slave_0: left allmulticast mode [ 3044.242405][ T5531] bridge_slave_0: left promiscuous mode [ 3044.248054][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 3044.264315][ T5531] hsr_slave_0: left promiscuous mode [ 3044.271128][ T5531] hsr_slave_1: left promiscuous mode [ 3044.276932][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3044.288722][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3044.297172][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3044.304817][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3044.314149][ T5531] bridge_slave_1: left allmulticast mode [ 3044.320025][ T5531] bridge_slave_1: left promiscuous mode [ 3044.325666][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 3044.334965][ T5531] bridge_slave_0: left allmulticast mode [ 3044.340975][ T5531] bridge_slave_0: left promiscuous mode [ 3044.346620][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 3044.364864][ T5531] veth1_macvtap: left promiscuous mode [ 3044.370566][ T5531] veth0_macvtap: left promiscuous mode [ 3044.376128][ T5531] veth1_vlan: left promiscuous mode [ 3044.381872][ T5531] veth0_vlan: left promiscuous mode [ 3044.388115][ T5531] veth1_macvtap: left promiscuous mode [ 3044.397125][ T5531] veth0_macvtap: left promiscuous mode [ 3044.402982][ T5531] veth1_vlan: left promiscuous mode [ 3044.409091][ T5531] veth0_vlan: left promiscuous mode [ 3044.415924][ T5531] veth1_macvtap: left promiscuous mode [ 3044.421546][ T5531] veth0_macvtap: left promiscuous mode [ 3044.427099][ T5531] veth1_vlan: left promiscuous mode [ 3044.432969][ T5531] veth0_vlan: left promiscuous mode [ 3044.815946][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 3044.831736][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 3044.844723][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3044.861937][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3044.933497][ T5531] bond0 (unregistering): Released all slaves [ 3045.080192][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 3045.094902][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 3045.107844][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3045.123991][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3045.194252][ T5531] bond0 (unregistering): Released all slaves [ 3045.343655][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 3045.358882][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 3045.373144][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3045.387588][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3045.398677][ T4594] Bluetooth: hci2: command 0x0409 tx timeout [ 3045.466677][ T5531] bond0 (unregistering): Released all slaves [ 3045.701160][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3045.709364][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3045.722409][T10105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3045.745664][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3045.754954][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3045.779355][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3045.799081][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3045.809619][T10105] veth0_vlan: entered promiscuous mode [ 3045.828788][T10098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3045.844655][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3045.868931][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3045.876751][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3045.903821][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3045.915222][T10105] veth1_vlan: entered promiscuous mode [ 3045.942321][T10225] chnl_net:caif_netlink_parms(): no params data found [ 3046.046268][T10105] veth0_macvtap: entered promiscuous mode [ 3046.069456][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3046.077763][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3046.086618][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3046.095563][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3046.125155][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3046.140326][T10105] veth1_macvtap: entered promiscuous mode [ 3046.185999][T10225] bridge0: port 1(bridge_slave_0) entered blocking state [ 3046.194247][T10225] bridge0: port 1(bridge_slave_0) entered disabled state [ 3046.201785][T10225] bridge_slave_0: entered allmulticast mode [ 3046.210566][T10225] bridge_slave_0: entered promiscuous mode [ 3046.218761][T10225] bridge0: port 2(bridge_slave_1) entered blocking state [ 3046.225862][T10225] bridge0: port 2(bridge_slave_1) entered disabled state [ 3046.248357][T10225] bridge_slave_1: entered allmulticast mode [ 3046.255274][T10225] bridge_slave_1: entered promiscuous mode [ 3046.332078][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3046.350877][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3046.362127][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3046.372797][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3046.383239][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3046.396245][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3046.407923][T10105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3046.419475][T10225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3046.432524][T28784] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3046.443247][T28784] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3046.452347][T28784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3046.463114][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3046.483690][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3046.505118][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3046.526380][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3046.544999][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3046.556677][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3046.584315][T10105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3046.614553][T10105] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3046.623788][T10105] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3046.633700][T10105] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3046.642668][T10105] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3046.655252][T10225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3046.675100][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3046.684764][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3046.761611][T10225] team0: Port device team_slave_0 added [ 3046.767655][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3046.776316][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3046.785187][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3046.799074][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3046.819075][T10225] team0: Port device team_slave_1 added [ 3046.847477][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3046.855447][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3046.866892][T10098] veth0_vlan: entered promiscuous mode [ 3046.912516][T10098] veth1_vlan: entered promiscuous mode [ 3046.921288][T10225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3046.928614][T10225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3046.957930][T10225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3046.992165][T10098] veth0_macvtap: entered promiscuous mode [ 3047.000113][T10225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3047.007073][T10225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3047.033490][T10225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3047.050521][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3047.059280][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3047.067235][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3047.076521][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3047.094036][T10098] veth1_macvtap: entered promiscuous mode [ 3047.118834][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3047.126826][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3047.155876][T15857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3047.183943][T15859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3047.185675][T10225] hsr_slave_0: entered promiscuous mode [ 3047.205688][T15857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3047.214140][T15859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3047.222696][T10225] hsr_slave_1: entered promiscuous mode [ 3047.237172][T10098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3047.249041][T10098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3047.259369][T10098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3047.270117][T10098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3047.280247][T10098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3047.291217][T10098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3047.303998][T10098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3047.317506][T10098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3047.330107][T10098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3047.342764][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3047.351330][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3047.362200][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3047.376197][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3047.412341][T10098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3047.435104][T10098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3047.445963][T10098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3047.468306][T10098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3047.478370][ T4594] Bluetooth: hci2: command 0x041b tx timeout [ 3047.484548][T10098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3047.508235][T10098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3047.518067][T10098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3047.547009][T10098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3047.565511][T10098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3047.595356][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3047.618970][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3047.629502][T10098] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3047.643280][T10098] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3047.658947][T10098] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3047.667744][T10098] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3047.957102][T10286] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3047.977723][T10286] CPU: 0 PID: 10286 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 3047.988185][T10286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 3047.998275][T10286] Call Trace: [ 3048.001581][T10286] [ 3048.004542][T10286] dump_stack_lvl+0x136/0x150 [ 3048.009327][T10286] dump_header+0x10a/0xd70 [ 3048.009371][T10286] oom_kill_process+0x25d/0x600 [ 3048.009408][T10286] out_of_memory+0x35c/0x1660 [ 3048.009456][T10286] ? io_schedule_timeout+0x150/0x150 [ 3048.009493][T10286] ? oom_killer_disable+0x2b0/0x2b0 [ 3048.009538][T10286] mem_cgroup_out_of_memory+0x206/0x270 [ 3048.039527][T10286] ? mem_cgroup_margin+0x130/0x130 [ 3048.044709][T10286] memory_max_write+0x2f9/0x3c0 [ 3048.049627][T10286] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3048.055760][T10286] ? lock_sync+0x190/0x190 [ 3048.060234][T10286] cgroup_file_write+0x1e2/0x7b0 [ 3048.065208][T10286] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3048.071333][T10286] ? cgroup_get_from_path+0x6e0/0x6e0 [ 3048.076786][T10286] ? __virt_addr_valid+0x61/0x2e0 [ 3048.081879][T10286] ? cgroup_get_from_path+0x6e0/0x6e0 [ 3048.084311][ T5541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3048.087270][T10286] kernfs_fop_write_iter+0x3f1/0x600 [ 3048.100566][T10286] vfs_write+0x945/0xd50 [ 3048.104844][T10286] ? kernel_write+0x670/0x670 [ 3048.109562][T10286] ? __fget_files+0x26a/0x480 [ 3048.114310][T10286] ksys_write+0x12b/0x250 [ 3048.118671][T10286] ? __ia32_sys_read+0xb0/0xb0 [ 3048.123454][T10286] ? syscall_enter_from_user_mode+0x26/0x80 [ 3048.129407][T10286] do_syscall_64+0x39/0xb0 [ 3048.133886][T10286] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3048.139832][T10286] RIP: 0033:0x7f36e248c169 [ 3048.144277][T10286] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3048.148458][ T5541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3048.163902][T10286] RSP: 002b:00007f36e312d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3048.163936][T10286] RAX: ffffffffffffffda RBX: 00007f36e25ac050 RCX: 00007f36e248c169 [ 3048.163958][T10286] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 3048.163978][T10286] RBP: 00007f36e24e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3048.163998][T10286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3048.164018][T10286] R13: 00007ffee5b178af R14: 00007f36e312d300 R15: 0000000000022000 [ 3048.164061][T10286] [ 3048.206799][T10286] memory: usage 8628kB, limit 0kB, failcnt 2423 [ 3048.249439][T10286] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3048.260532][T15859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3048.274026][T15859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3048.294835][T10286] Memory cgroup stats for /syz1: [ 3048.296415][T10286] anon 118784 [ 3048.296415][T10286] file 8331264 [ 3048.296415][T10286] kernel 376832 [ 3048.296415][T10286] kernel_stack 98304 [ 3048.296415][T10286] pagetables 77824 [ 3048.296415][T10286] sec_pagetables 0 [ 3048.296415][T10286] percpu 64 [ 3048.296415][T10286] sock 0 [ 3048.296415][T10286] vmalloc 0 [ 3048.296415][T10286] shmem 8331264 [ 3048.296415][T10286] zswap 0 [ 3048.296415][T10286] zswapped 0 [ 3048.296415][T10286] file_mapped 188416 [ 3048.296415][T10286] file_dirty 0 [ 3048.296415][T10286] file_writeback 0 [ 3048.296415][T10286] swapcached 0 [ 3048.296415][T10286] anon_thp 0 [ 3048.296415][T10286] file_thp 0 [ 3048.296415][T10286] shmem_thp 0 [ 3048.296415][T10286] inactive_anon 8331264 [ 3048.296415][T10286] active_anon 118784 [ 3048.296415][T10286] inactive_file 0 [ 3048.296415][T10286] active_file 0 [ 3048.296415][T10286] unevictable 0 [ 3048.296415][T10286] slab_reclaimable 49880 [ 3048.296415][T10286] slab_unreclaimable 122704 [ 3048.296415][T10286] slab 172584 [ 3048.296415][T10286] workingset_refault_anon 0 [ 3048.296415][T10286] workingset_refault_file 0 [ 3048.296415][T10286] workingset_activate_anon 0 [ 3048.296415][T10286] workingset_activate_file 0 [ 3048.296415][T10286] workingset_restore_anon 0 [ 3048.296415][T10286] workingset_restore_file 0 [ 3048.296415][T10286] workingset_nodereclaim 0 [ 3048.296415][T10286] pgscan 611 [ 3048.296415][T10286] pgsteal 60 [ 3048.296415][T10286] pgscan_kswapd 0 [ 3048.296415][T10286] pgscan_direct 611 [ 3048.296415][T10286] pgscan_khugepaged 0 [ 3048.296415][T10286] pgsteal_kswapd 0 [ 3048.296415][T10286] pgsteal_direct 60 [ 3048.296415][T10286] pgsteal_khugepaged 0 [ 3048.296415][T10286] pgfault 39086 [ 3048.296415][T10286] pgmajfault 0 [ 3048.296415][T10286] pgrefill 1873 [ 3048.296415][T10286] pgactivate 551 [ 3048.296415][T10286] pgdeactivate 0 [ 3048.296415][T10286] pglazyfree 0 [ 3048.296415][T10286] pglazyfreed 0 [ 3048.296415][T10286] zswpin 0 [ 3048.296415][T10286] zswpout 0 [ 3048.296415][T10286] thp_fault_alloc 0 [ 3048.500188][T10286] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10284,uid=0 [ 3048.525896][T10286] Memory cgroup out of memory: Killed process 10286 (syz-executor.1) total-vm:54680kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3048.611662][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3048.626331][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3048.982692][T10295] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3049.038311][T10295] CPU: 1 PID: 10295 Comm: syz-executor.5 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 3049.048809][T10295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 3049.058888][T10295] Call Trace: [ 3049.062187][T10295] [ 3049.065144][T10295] dump_stack_lvl+0x136/0x150 [ 3049.069875][T10295] dump_header+0x10a/0xd70 [ 3049.074328][T10295] oom_kill_process+0x25d/0x600 [ 3049.079221][T10295] out_of_memory+0x35c/0x1660 [ 3049.083945][T10295] ? oom_killer_disable+0x2b0/0x2b0 [ 3049.089174][T10295] ? mark_held_locks+0x9f/0xe0 [ 3049.093994][T10295] mem_cgroup_out_of_memory+0x206/0x270 [ 3049.099579][T10295] ? mem_cgroup_margin+0x130/0x130 [ 3049.104727][T10295] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 3049.110654][T10295] memory_max_write+0x2f9/0x3c0 [ 3049.115535][T10295] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3049.121630][T10295] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3049.127727][T10295] ? cgroup_file_write+0x192/0x7b0 [ 3049.132864][T10295] cgroup_file_write+0x1e2/0x7b0 [ 3049.137860][T10295] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3049.143957][T10295] ? cgroup_get_from_path+0x6e0/0x6e0 [ 3049.149372][T10295] ? cgroup_get_from_path+0x6e0/0x6e0 [ 3049.154763][T10295] kernfs_fop_write_iter+0x3f1/0x600 [ 3049.160080][T10295] vfs_write+0x945/0xd50 [ 3049.164341][T10295] ? kernel_write+0x670/0x670 [ 3049.169037][T10295] ? __fget_files+0x26a/0x480 [ 3049.173758][T10295] ksys_write+0x12b/0x250 [ 3049.178102][T10295] ? __ia32_sys_read+0xb0/0xb0 [ 3049.182888][T10295] ? __sanitizer_cov_trace_pc+0xb/0x70 [ 3049.188385][T10295] do_syscall_64+0x39/0xb0 [ 3049.192829][T10295] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3049.198768][T10295] RIP: 0033:0x7fdd44a8c169 [ 3049.203196][T10295] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3049.222825][T10295] RSP: 002b:00007fdd45851168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3049.231311][T10295] RAX: ffffffffffffffda RBX: 00007fdd44bac050 RCX: 00007fdd44a8c169 [ 3049.239321][T10295] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 3049.247323][T10295] RBP: 00007fdd44ae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3049.255307][T10295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3049.263298][T10295] R13: 00007ffe7a7f5d3f R14: 00007fdd45851300 R15: 0000000000022000 [ 3049.271326][T10295] [ 3049.368510][T10295] memory: usage 10704kB, limit 0kB, failcnt 1072 [ 3049.386646][T10295] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3049.568706][ T4594] Bluetooth: hci2: command 0x040f tx timeout [ 3049.569830][T10225] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3049.587321][T10295] Memory cgroup stats for /syz5: [ 3049.590633][T10295] anon 118784 [ 3049.590633][T10295] file 10448896 [ 3049.590633][T10295] kernel 380928 [ 3049.590633][T10295] kernel_stack 98304 [ 3049.590633][T10295] pagetables 81920 [ 3049.590633][T10295] sec_pagetables 0 [ 3049.590633][T10295] percpu 64 [ 3049.590633][T10295] sock 0 [ 3049.590633][T10295] vmalloc 0 [ 3049.590633][T10295] shmem 10448896 [ 3049.590633][T10295] zswap 0 [ 3049.590633][T10295] zswapped 0 [ 3049.590633][T10295] file_mapped 278528 [ 3049.590633][T10295] file_dirty 0 [ 3049.590633][T10295] file_writeback 0 [ 3049.590633][T10295] swapcached 0 [ 3049.590633][T10295] anon_thp 0 [ 3049.590633][T10295] file_thp 0 [ 3049.590633][T10295] shmem_thp 0 [ 3049.590633][T10295] inactive_anon 10448896 [ 3049.590633][T10295] active_anon 118784 [ 3049.590633][T10295] inactive_file 0 [ 3049.590633][T10295] active_file 0 [ 3049.590633][T10295] unevictable 0 [ 3049.590633][T10295] slab_reclaimable 55248 [ 3049.590633][T10295] slab_unreclaimable 122704 [ 3049.590633][T10295] slab 177952 [ 3049.590633][T10295] workingset_refault_anon 0 [ 3049.590633][T10295] workingset_refault_file 0 [ 3049.590633][T10295] workingset_activate_anon 0 [ 3049.590633][T10295] workingset_activate_file 0 [ 3049.590633][T10295] workingset_restore_anon 0 [ 3049.590633][T10295] workingset_restore_file 0 [ 3049.590633][T10295] workingset_nodereclaim 0 [ 3049.590633][T10295] pgscan 716 [ 3049.590633][T10295] pgsteal 57 [ 3049.590633][T10295] pgscan_kswapd 0 [ 3049.590633][T10295] pgscan_direct 716 [ 3049.590633][T10295] pgscan_khugepaged 0 [ 3049.590633][T10295] pgsteal_kswapd 0 [ 3049.590633][T10295] pgsteal_direct 57 [ 3049.590633][T10295] pgsteal_khugepaged 0 [ 3049.590633][T10295] pgfault 82576 [ 3049.590633][T10295] pgmajfault 0 [ 3049.590633][T10295] pgrefill 25846 [ 3049.590633][T10295] pgactivate 627 [ 3049.590633][T10295] pgdeactivate 0 [ 3049.590633][T10295] pglazyfree 0 [ 3049.590633][T10295] pglazyfreed 0 [ 3049.590633][T10295] zswpin 0 [ 3049.590633][T10295] zswpout 0 [ 3049.590633][T10295] thp_fault_alloc 0 [ 3049.787243][T10225] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3049.795132][T10295] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=10293,uid=0 [ 3049.827038][T10225] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3049.850656][T10225] netdevsim netdevsim3 netdevsim3: renamed from eth3 01:17:57 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) 01:17:57 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x48) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x0, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xffd0}], 0x3}, 0xfc) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x48) (async) socket$kcm(0xa, 0x5, 0x0) (async) sendmsg$inet(r0, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x0, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xffd0}], 0x3}, 0xfc) (async) 01:17:57 executing program 0: syz_clone(0x44100000, &(0x7f0000000140)="cf782c006a8db915cc6e5e51ead2430d9979a83543f09e5f8bff04ba4304132d25b45f270324cde946934b24b531784452c75dc7bb9795180000a35a0350b6523ef61e5a9f2da31d3321420dcf0500000000000000142b546f813359f0e8687afd027de22e8ac94094732f72677c0663097d3f1d14af2156b49f998331342c5e194b2d41051ae94aca0c61fbc19e4c311ad1e1a3e2d7c337ee6a891a91fffebb44cd40deba2af624f28c7a22e66f216bf925f6a955743b9a75cc0bcf06965d6ad35855ca7d24dc50d26ddc8910898f6ae7ab631fd054", 0xd6, 0x0, &(0x7f0000000100), 0x0) syz_clone(0x44100000, &(0x7f0000000140)="cf782c006a8db915cc6e5e51ead2430d9979a83543f09e5f8bff04ba4304132d25b45f270324cde946934b24b531784452c75dc7bb9795180000a35a0350b6523ef61e5a9f2da31d3321420dcf0500000000000000142b546f813359f0e8687afd027de22e8ac94094732f72677c0663097d3f1d14af2156b49f998331342c5e194b2d41051ae94aca0c61fbc19e4c311ad1e1a3e2d7c337ee6a891a91fffebb44cd40deba2af624f28c7a22e66f216bf925f6a955743b9a75cc0bcf06965d6ad35855ca7d24dc50d26ddc8910898f6ae7ab631fd054", 0xd6, 0x0, &(0x7f0000000100), 0x0) (async) 01:17:57 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="0008030000086d6f9f487a74dde5e9fac9f9513154ffb3ff030000f56c8374cbe5d99a130e1f636709e048decbe24bb592299846d7bbad3fc61f86a3798700eb2129cf607c223e4b8c7f1687f6d8df1da48cd67815f62156cf2bb02394b3d16f825976c0b0c36e2db48ade28fe642efb21f16681cd5aeebd2341f5c6ab1ecf05adb78fff445806189faf2b6dc37f77dbf2b0a1e6d4b89eff16e67ea60b26c312f08600b3c1d61a0a9c63469ca436d6d2321df23da24e75309e7036cfc5c36d8127ca878c4a65b0f2089ed5593689cded5d46e67477fad72b4a5f2a10345eaf04e2cd7a8f1780cfb7"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) [ 3049.988605][T10295] Memory cgroup out of memory: Killed process 10295 (syz-executor.5) total-vm:54680kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3050.018340][T10225] 8021q: adding VLAN 0 to HW filter on device bond0 01:17:57 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x0, 0x7d, 0x0, 0x8, 0x0, 0x0, 0x1080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x78, 0x2, @perf_config_ext={0x4, 0x1}, 0x10010, 0x1, 0xffffff05, 0x9, 0xc00, 0x8000, 0x7, 0x0, 0x7, 0x0, 0x2b4d0000000}, r1, 0x5, r5, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r4, &(0x7f0000000180), 0x12) [ 3050.060567][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3050.081667][T10105] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 3050.108979][T21280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3050.139459][T10225] 8021q: adding VLAN 0 to HW filter on device team0 [ 3050.148357][T10105] CPU: 0 PID: 10105 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 3050.158792][T10105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 3050.168869][T10105] Call Trace: [ 3050.172152][T10105] [ 3050.175091][T10105] dump_stack_lvl+0x136/0x150 [ 3050.179815][T10105] dump_header+0x10a/0xd70 [ 3050.184255][T10105] oom_kill_process+0x25d/0x600 [ 3050.189128][T10105] out_of_memory+0x35c/0x1660 [ 3050.193856][T10105] ? find_held_lock+0x2d/0x110 [ 3050.198639][T10105] ? oom_killer_disable+0x2b0/0x2b0 [ 3050.203846][T10105] ? rcu_read_unlock+0x9/0x60 [ 3050.208537][T10105] ? find_held_lock+0x2d/0x110 [ 3050.213325][T10105] mem_cgroup_out_of_memory+0x206/0x270 [ 3050.218892][T10105] ? mem_cgroup_margin+0x130/0x130 [ 3050.224017][T10105] ? lock_downgrade+0x690/0x690 [ 3050.228903][T10105] try_charge_memcg+0xf99/0x13a0 [ 3050.233873][T10105] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3050.239901][T10105] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3050.245645][T10105] ? lock_downgrade+0x690/0x690 [ 3050.250524][T10105] ? lock_downgrade+0x690/0x690 [ 3050.255398][T10105] ? rcu_read_unlock+0x9/0x60 [ 3050.260109][T10105] obj_cgroup_charge+0x2af/0x5e0 [ 3050.265080][T10105] ? copy_process+0x3c0/0x7600 [ 3050.269863][T10105] kmem_cache_alloc_node+0xa8/0x3e0 [ 3050.275100][T10105] copy_process+0x3c0/0x7600 [ 3050.279709][T10105] ? _raw_spin_unlock+0x28/0x40 [ 3050.284619][T10105] ? wp_page_reuse+0x197/0x570 [ 3050.289425][T10105] ? pidfd_prepare+0x80/0x80 [ 3050.294043][T10105] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3050.300058][T10105] kernel_clone+0xeb/0x890 [ 3050.304495][T10105] ? create_io_thread+0xe0/0xe0 [ 3050.309397][T10105] ? do_user_addr_fault+0x2b1/0x1210 [ 3050.314701][T10105] ? reacquire_held_locks+0x216/0x4e0 [ 3050.320094][T10105] ? do_user_addr_fault+0x2b1/0x1210 [ 3050.325407][T10105] ? find_held_lock+0x2d/0x110 [ 3050.330200][T10105] __do_sys_clone+0xba/0x100 [ 3050.334820][T10105] ? kernel_clone+0x890/0x890 [ 3050.339568][T10105] ? syscall_enter_from_user_mode+0x26/0x80 [ 3050.345482][T10105] do_syscall_64+0x39/0xb0 [ 3050.349928][T10105] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3050.355842][T10105] RIP: 0033:0x7f36e2489e9b [ 3050.360268][T10105] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 3050.379913][T10105] RSP: 002b:00007ffee5b17af0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3050.388345][T10105] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f36e2489e9b [ 3050.396325][T10105] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3050.404305][T10105] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555638d400 [ 3050.412286][T10105] R10: 000055555638d6d0 R11: 0000000000000246 R12: 0000000000000001 [ 3050.420264][T10105] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffee5b17bd0 [ 3050.428256][T10105] [ 3050.581333][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3050.594684][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3050.633365][ T8293] bridge0: port 1(bridge_slave_0) entered blocking state [ 3050.640605][ T8293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3050.737631][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3050.752526][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3050.797079][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3050.854599][ T8291] bridge0: port 2(bridge_slave_1) entered blocking state [ 3050.861786][ T8291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3050.872193][T10105] memory: usage 8256kB, limit 0kB, failcnt 2442 [ 3050.879314][T10105] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3050.892424][T10105] Memory cgroup stats for /syz1: [ 3050.892656][T10105] anon 40960 [ 3050.892656][T10105] file 8331264 [ 3050.892656][T10105] kernel 81920 [ 3050.892656][T10105] kernel_stack 0 [ 3050.892656][T10105] pagetables 8192 [ 3050.892656][T10105] sec_pagetables 0 [ 3050.892656][T10105] percpu 0 [ 3050.892656][T10105] sock 0 [ 3050.892656][T10105] vmalloc 0 [ 3050.892656][T10105] shmem 8331264 [ 3050.892656][T10105] zswap 0 [ 3050.892656][T10105] zswapped 0 [ 3050.892656][T10105] file_mapped 176128 [ 3050.892656][T10105] file_dirty 0 [ 3050.892656][T10105] file_writeback 0 [ 3050.892656][T10105] swapcached 0 [ 3050.892656][T10105] anon_thp 0 [ 3050.892656][T10105] file_thp 0 [ 3050.892656][T10105] shmem_thp 0 [ 3050.892656][T10105] inactive_anon 8331264 [ 3050.892656][T10105] active_anon 40960 [ 3050.892656][T10105] inactive_file 0 [ 3050.892656][T10105] active_file 0 [ 3050.892656][T10105] unevictable 0 [ 3050.892656][T10105] slab_reclaimable 29888 [ 3050.892656][T10105] slab_unreclaimable 32296 [ 3050.892656][T10105] slab 62184 [ 3050.892656][T10105] workingset_refault_anon 0 [ 3050.892656][T10105] workingset_refault_file 0 [ 3050.892656][T10105] workingset_activate_anon 0 [ 3050.892656][T10105] workingset_activate_file 0 [ 3050.892656][T10105] workingset_restore_anon 0 [ 3050.892656][T10105] workingset_restore_file 0 [ 3050.892656][T10105] workingset_nodereclaim 0 [ 3050.892656][T10105] pgscan 611 [ 3050.892656][T10105] pgsteal 60 [ 3050.892656][T10105] pgscan_kswapd 0 [ 3050.892656][T10105] pgscan_direct 611 [ 3050.892656][T10105] pgscan_khugepaged 0 [ 3050.892656][T10105] pgsteal_kswapd 0 [ 3050.892656][T10105] pgsteal_direct 60 [ 3050.892656][T10105] pgsteal_khugepaged 0 [ 3050.892656][T10105] pgfault 39103 [ 3050.892656][T10105] pgmajfault 0 [ 3050.892656][T10105] pgrefill 1873 [ 3050.892656][T10105] pgactivate 551 [ 3050.892656][T10105] pgdeactivate 0 [ 3050.892656][T10105] pglazyfree 0 [ 3050.892656][T10105] pglazyfreed 0 [ 3050.892656][T10105] zswpin 0 [ 3050.892656][T10105] zswpout 0 [ 3050.892656][T10105] thp_fault_alloc 0 [ 3050.912027][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3051.106151][T10105] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10105,uid=0 [ 3051.129991][T10105] Memory cgroup out of memory: Killed process 10105 (syz-executor.1) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 3051.147939][T10098] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 3051.169738][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3051.178519][T10098] CPU: 0 PID: 10098 Comm: syz-executor.5 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 3051.188971][T10098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 3051.199052][T10098] Call Trace: [ 3051.202355][T10098] [ 3051.205300][T10098] dump_stack_lvl+0x136/0x150 [ 3051.210015][T10098] dump_header+0x10a/0xd70 [ 3051.214471][T10098] oom_kill_process+0x25d/0x600 [ 3051.219356][T10098] out_of_memory+0x35c/0x1660 [ 3051.224061][T10098] ? oom_killer_disable+0x2b0/0x2b0 [ 3051.229275][T10098] ? rcu_read_unlock+0x9/0x60 [ 3051.233979][T10098] ? find_held_lock+0x2d/0x110 [ 3051.238777][T10098] mem_cgroup_out_of_memory+0x206/0x270 [ 3051.244358][T10098] ? mem_cgroup_margin+0x130/0x130 [ 3051.249495][T10098] ? lock_downgrade+0x690/0x690 [ 3051.254392][T10098] try_charge_memcg+0xf99/0x13a0 [ 3051.259361][T10098] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3051.265377][T10098] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3051.271116][T10098] ? lock_downgrade+0x690/0x690 [ 3051.276006][T10098] ? lock_downgrade+0x690/0x690 [ 3051.280868][T10098] ? rcu_read_unlock+0x9/0x60 [ 3051.285562][T10098] obj_cgroup_charge+0x2af/0x5e0 [ 3051.290530][T10098] ? copy_process+0x3c0/0x7600 [ 3051.295333][T10098] kmem_cache_alloc_node+0xa8/0x3e0 [ 3051.300582][T10098] copy_process+0x3c0/0x7600 [ 3051.305216][T10098] ? _raw_spin_unlock+0x28/0x40 [ 3051.310110][T10098] ? wp_page_reuse+0x197/0x570 [ 3051.314921][T10098] ? pidfd_prepare+0x80/0x80 [ 3051.319551][T10098] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3051.325568][T10098] kernel_clone+0xeb/0x890 [ 3051.330021][T10098] ? create_io_thread+0xe0/0xe0 [ 3051.334902][T10098] ? do_user_addr_fault+0x2b1/0x1210 [ 3051.340216][T10098] ? reacquire_held_locks+0x216/0x4e0 [ 3051.345619][T10098] ? do_user_addr_fault+0x2b1/0x1210 [ 3051.350935][T10098] ? find_held_lock+0x2d/0x110 [ 3051.355748][T10098] __do_sys_clone+0xba/0x100 [ 3051.360360][T10098] ? kernel_clone+0x890/0x890 [ 3051.365079][T10098] ? syscall_enter_from_user_mode+0x26/0x80 [ 3051.371015][T10098] do_syscall_64+0x39/0xb0 [ 3051.375472][T10098] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3051.381401][T10098] RIP: 0033:0x7fdd44a89e9b [ 3051.385834][T10098] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 3051.405459][T10098] RSP: 002b:00007ffe7a7f5f80 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3051.413909][T10098] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdd44a89e9b [ 3051.421909][T10098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3051.429943][T10098] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556d3f400 [ 3051.437954][T10098] R10: 0000555556d3f6d0 R11: 0000000000000246 R12: 0000000000000001 [ 3051.445928][T10098] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe7a7f6060 [ 3051.453919][T10098] 01:17:59 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x48) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x0, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xffd0}], 0x3}, 0xfc) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x48) (async) socket$kcm(0xa, 0x5, 0x0) (async) sendmsg$inet(r0, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x0, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xffd0}], 0x3}, 0xfc) (async) [ 3051.462838][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3051.472131][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3051.504598][T10098] memory: usage 10348kB, limit 0kB, failcnt 1091 [ 3051.515040][T10098] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3051.522577][T10098] Memory cgroup stats for /syz5: [ 3051.522832][T10098] anon 45056 [ 3051.522832][T10098] file 10448896 [ 3051.522832][T10098] kernel 102400 [ 3051.522832][T10098] kernel_stack 0 [ 3051.522832][T10098] pagetables 8192 [ 3051.522832][T10098] sec_pagetables 0 [ 3051.522832][T10098] percpu 64 [ 3051.522832][T10098] sock 0 [ 3051.522832][T10098] vmalloc 0 [ 3051.522832][T10098] shmem 10448896 [ 3051.522832][T10098] zswap 0 [ 3051.522832][T10098] zswapped 0 [ 3051.522832][T10098] file_mapped 278528 [ 3051.522832][T10098] file_dirty 0 [ 3051.522832][T10098] file_writeback 0 [ 3051.522832][T10098] swapcached 0 [ 3051.522832][T10098] anon_thp 0 [ 3051.522832][T10098] file_thp 0 [ 3051.522832][T10098] shmem_thp 0 [ 3051.522832][T10098] inactive_anon 10448896 [ 3051.522832][T10098] active_anon 45056 [ 3051.522832][T10098] inactive_file 0 [ 3051.522832][T10098] active_file 0 [ 3051.522832][T10098] unevictable 0 [ 3051.522832][T10098] slab_reclaimable 35256 [ 3051.522832][T10098] slab_unreclaimable 44272 [ 3051.522832][T10098] slab 79528 [ 3051.522832][T10098] workingset_refault_anon 0 [ 3051.522832][T10098] workingset_refault_file 0 [ 3051.522832][T10098] workingset_activate_anon 0 [ 3051.522832][T10098] workingset_activate_file 0 [ 3051.522832][T10098] workingset_restore_anon 0 [ 3051.522832][T10098] workingset_restore_file 0 [ 3051.522832][T10098] workingset_nodereclaim 0 [ 3051.522832][T10098] pgscan 716 [ 3051.522832][T10098] pgsteal 57 [ 3051.522832][T10098] pgscan_kswapd 0 [ 3051.522832][T10098] pgscan_direct 716 [ 3051.522832][T10098] pgscan_khugepaged 0 [ 3051.522832][T10098] pgsteal_kswapd 0 [ 3051.522832][T10098] pgsteal_direct 57 [ 3051.522832][T10098] pgsteal_khugepaged 0 [ 3051.522832][T10098] pgfault 82592 [ 3051.522832][T10098] pgmajfault 0 [ 3051.522832][T10098] pgrefill 25846 [ 3051.522832][T10098] pgactivate 627 [ 3051.522832][T10098] pgdeactivate 0 [ 3051.522832][T10098] pglazyfree 0 [ 3051.522832][T10098] pglazyfreed 0 [ 3051.522832][T10098] zswpin 0 [ 3051.522832][T10098] zswpout 0 [ 3051.522832][T10098] thp_fault_alloc 0 [ 3051.715227][ T4594] Bluetooth: hci2: command 0x0419 tx timeout [ 3051.768421][T10098] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=10098,uid=0 [ 3051.803135][T10098] Memory cgroup out of memory: Killed process 10098 (syz-executor.5) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 01:17:59 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x0, 0x7d, 0x0, 0x8, 0x0, 0x0, 0x1080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x78, 0x2, @perf_config_ext={0x4, 0x1}, 0x10010, 0x1, 0xffffff05, 0x9, 0xc00, 0x8000, 0x7, 0x0, 0x7, 0x0, 0x2b4d0000000}, r1, 0x5, r5, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r4, &(0x7f0000000180), 0x12) [ 3051.939148][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3051.952039][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3051.993799][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3052.028097][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3052.109207][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3052.199287][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3052.207808][T32601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 01:18:00 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x78, 0x2, @perf_config_ext={0x4, 0x1}, 0x10010, 0x1, 0xffffff05, 0x9, 0xc00, 0x8000, 0x7, 0x0, 0x7, 0x0, 0x2b4d0000000}, r1, 0x5, r5, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r4, &(0x7f0000000180), 0x12) [ 3052.367075][T10225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 01:18:00 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) [ 3053.080611][ T5531] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3053.122256][T10340] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3053.147886][T10340] CPU: 0 PID: 10340 Comm: syz-executor.4 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 3053.158348][T10340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 3053.168428][T10340] Call Trace: [ 3053.171726][T10340] [ 3053.174686][T10340] dump_stack_lvl+0x136/0x150 [ 3053.179427][T10340] dump_header+0x10a/0xd70 [ 3053.183888][T10340] oom_kill_process+0x25d/0x600 [ 3053.188773][T10340] out_of_memory+0x35c/0x1660 [ 3053.193486][T10340] ? io_schedule_timeout+0x150/0x150 [ 3053.198821][T10340] ? oom_killer_disable+0x2b0/0x2b0 [ 3053.204068][T10340] mem_cgroup_out_of_memory+0x206/0x270 [ 3053.209697][T10340] ? mem_cgroup_margin+0x130/0x130 [ 3053.214887][T10340] memory_max_write+0x2f9/0x3c0 [ 3053.219802][T10340] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3053.225923][T10340] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3053.232090][T10340] cgroup_file_write+0x1e2/0x7b0 [ 3053.237106][T10340] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3053.243227][T10340] ? cgroup_get_from_path+0x6e0/0x6e0 [ 3053.248640][T10340] ? __virt_addr_valid+0x61/0x2e0 [ 3053.253732][T10340] ? cgroup_get_from_path+0x6e0/0x6e0 [ 3053.259148][T10340] kernfs_fop_write_iter+0x3f1/0x600 [ 3053.264489][T10340] vfs_write+0x945/0xd50 [ 3053.268766][T10340] ? kernel_write+0x670/0x670 [ 3053.273485][T10340] ? __fget_files+0x26a/0x480 [ 3053.278227][T10340] ksys_write+0x12b/0x250 [ 3053.282595][T10340] ? __ia32_sys_read+0xb0/0xb0 [ 3053.287410][T10340] ? syscall_enter_from_user_mode+0x30/0x80 [ 3053.293367][T10340] do_syscall_64+0x39/0xb0 [ 3053.297856][T10340] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3053.303808][T10340] RIP: 0033:0x7f01ce68c169 [ 3053.308255][T10340] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3053.327912][T10340] RSP: 002b:00007f01cf3df168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3053.336362][T10340] RAX: ffffffffffffffda RBX: 00007f01ce7ac050 RCX: 00007f01ce68c169 [ 3053.344369][T10340] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 3053.352369][T10340] RBP: 00007f01ce6e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3053.360371][T10340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3053.368370][T10340] R13: 00007ffc03da5dff R14: 00007f01cf3df300 R15: 0000000000022000 [ 3053.376401][T10340] [ 3053.407418][ T5049] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3053.420653][ T5049] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3053.432393][ T5049] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3053.447980][ T5049] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3053.455395][ T5049] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3053.499537][ T5531] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3053.606616][ T5531] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3053.719281][T10340] memory: usage 10692kB, limit 0kB, failcnt 873 [ 3053.734766][T10340] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3053.745148][ T5531] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3053.771823][T10340] Memory cgroup stats for /syz4: [ 3053.772056][T10340] anon 151552 [ 3053.772056][T10340] file 10440704 [ 3053.772056][T10340] kernel 282624 [ 3053.772056][T10340] kernel_stack 32768 [ 3053.772056][T10340] pagetables 81920 [ 3053.772056][T10340] sec_pagetables 0 [ 3053.772056][T10340] percpu 64 [ 3053.772056][T10340] sock 0 [ 3053.772056][T10340] vmalloc 0 [ 3053.772056][T10340] shmem 10436608 [ 3053.772056][T10340] zswap 0 [ 3053.772056][T10340] zswapped 0 [ 3053.772056][T10340] file_mapped 262144 [ 3053.772056][T10340] file_dirty 4096 [ 3053.772056][T10340] file_writeback 0 [ 3053.772056][T10340] swapcached 0 [ 3053.772056][T10340] anon_thp 0 [ 3053.772056][T10340] file_thp 0 [ 3053.772056][T10340] shmem_thp 0 [ 3053.772056][T10340] inactive_anon 0 [ 3053.772056][T10340] active_anon 10588160 [ 3053.772056][T10340] inactive_file 0 [ 3053.772056][T10340] active_file 4096 [ 3053.772056][T10340] unevictable 0 [ 3053.772056][T10340] slab_reclaimable 49488 [ 3053.772056][T10340] slab_unreclaimable 90584 [ 3053.772056][T10340] slab 140072 [ 3053.772056][T10340] workingset_refault_anon 0 [ 3053.772056][T10340] workingset_refault_file 1 [ 3053.772056][T10340] workingset_activate_anon 0 [ 3053.772056][T10340] workingset_activate_file 0 [ 3053.772056][T10340] workingset_restore_anon 0 [ 3053.772056][T10340] workingset_restore_file 1 [ 3053.772056][T10340] workingset_nodereclaim 2 [ 3053.772056][T10340] pgscan 849 [ 3053.772056][T10340] pgsteal 204 [ 3053.772056][T10340] pgscan_kswapd 0 [ 3053.772056][T10340] pgscan_direct 849 [ 3053.772056][T10340] pgscan_khugepaged 0 [ 3053.772056][T10340] pgsteal_kswapd 0 [ 3053.772056][T10340] pgsteal_direct 204 [ 3053.772056][T10340] pgsteal_khugepaged 0 [ 3053.772056][T10340] pgfault 51073 [ 3053.772056][T10340] pgmajfault 0 [ 3053.772056][T10340] pgrefill 41396 [ 3053.772056][T10340] pgactivate 319 [ 3053.772056][T10340] pgdeactivate 0 [ 3053.772056][T10340] pglazyfree 0 [ 3053.772056][T10340] pglazyfreed 0 [ 3053.772056][T10340] zswpin 0 [ 3053.772056][T10340] zswpout 0 [ 3053.772056][T10340] thp_fault_alloc 0 [ 3053.995015][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3053.998316][T10340] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=10335,uid=0 [ 3054.018385][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3054.079657][T10340] Memory cgroup out of memory: Killed process 10340 (syz-executor.4) total-vm:56728kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3054.099507][T10225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3054.199351][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3054.229118][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3054.346763][ T4594] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3054.355924][ T4594] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3054.365919][ T4594] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3054.375115][ T4594] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3054.388751][ T4594] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3054.395985][ T4594] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3054.483137][ T5531] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3054.515504][T10225] veth0_vlan: entered promiscuous mode [ 3054.539596][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3054.552414][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3054.575959][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3054.603424][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3054.672988][ T5531] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3054.710330][T10225] veth1_vlan: entered promiscuous mode [ 3054.746589][T10343] chnl_net:caif_netlink_parms(): no params data found [ 3054.865728][ T5531] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3055.066563][ T5531] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3055.141607][T10225] veth0_macvtap: entered promiscuous mode [ 3055.213450][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3055.223805][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3055.265456][T10225] veth1_macvtap: entered promiscuous mode [ 3055.282109][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3055.298980][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3055.478304][ T5049] Bluetooth: hci0: command 0x0409 tx timeout [ 3055.592771][T10343] bridge0: port 1(bridge_slave_0) entered blocking state [ 3055.608235][T10343] bridge0: port 1(bridge_slave_0) entered disabled state [ 3055.615417][T10343] bridge_slave_0: entered allmulticast mode [ 3055.679269][T10343] bridge_slave_0: entered promiscuous mode [ 3055.692415][T10225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3055.735765][T10225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3055.777597][T10225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3055.808366][T10225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3055.828214][T10225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3055.848202][T10225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3055.858032][T10225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3055.908241][T10225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3055.918070][T10225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3055.958227][T10225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3055.979456][T10225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3055.998538][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3056.007792][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3056.022633][T10343] bridge0: port 2(bridge_slave_1) entered blocking state [ 3056.038615][T10343] bridge0: port 2(bridge_slave_1) entered disabled state [ 3056.045829][T10343] bridge_slave_1: entered allmulticast mode [ 3056.079309][T10343] bridge_slave_1: entered promiscuous mode [ 3056.090444][T10225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3056.118384][T10225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3056.138281][T10225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3056.175913][T10225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3056.198333][T10225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3056.228241][T10225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3056.238070][T10225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3056.268252][T10225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3056.278079][T10225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3056.308242][T10225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3056.330469][T10225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3056.337913][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3056.346814][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3056.448455][ T5049] Bluetooth: hci1: command 0x0409 tx timeout [ 3056.526198][T10225] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3056.578229][T10225] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3056.587048][T10225] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3056.628236][T10225] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3056.656807][T10352] chnl_net:caif_netlink_parms(): no params data found [ 3056.701120][T10343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3056.727700][T10343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3056.973763][T10343] team0: Port device team_slave_0 added [ 3057.149331][ T5531] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3057.215794][T10343] team0: Port device team_slave_1 added [ 3057.321738][ T5531] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3057.437192][T10352] bridge0: port 1(bridge_slave_0) entered blocking state [ 3057.445086][T10352] bridge0: port 1(bridge_slave_0) entered disabled state [ 3057.455526][T10352] bridge_slave_0: entered allmulticast mode [ 3057.463080][T10352] bridge_slave_0: entered promiscuous mode [ 3057.478889][T10343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3057.485855][T10343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3057.526743][T10343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3057.548652][ T5531] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3057.559753][ T5049] Bluetooth: hci0: command 0x041b tx timeout [ 3057.571786][T10352] bridge0: port 2(bridge_slave_1) entered blocking state [ 3057.580012][T10352] bridge0: port 2(bridge_slave_1) entered disabled state [ 3057.587179][T10352] bridge_slave_1: entered allmulticast mode [ 3057.595431][T10352] bridge_slave_1: entered promiscuous mode [ 3057.617197][T10343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3057.624281][T10343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3057.630228][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3057.653857][T10343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3057.675496][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3057.701519][ T5531] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3057.789600][T15857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3057.797721][T15857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3057.805763][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3057.827091][T24309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3057.841592][T10352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3057.937499][T10352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3058.025785][T10343] hsr_slave_0: entered promiscuous mode [ 3058.068341][T10343] hsr_slave_1: entered promiscuous mode [ 3058.075989][T10343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3058.089078][T10343] Cannot create hsr debugfs directory [ 3058.099537][T10352] team0: Port device team_slave_0 added [ 3058.349902][T10352] team0: Port device team_slave_1 added [ 3058.366087][T10394] mac80211_hwsim hwsim552 : renamed from wlan0 01:18:06 executing program 3: perf_event_open$cgroup(&(0x7f0000000100)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xbea}, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f9, 0x0, @perf_config_ext={0x9, 0x4}, 0x0, 0xfff, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="ef2d3900000085822f09001000000000002553b37e608260eecd519368cad87eaf1300000000000000f779e0dbf8e7158f36e2dbdafda6086bd9ab59eb472a36057791af893953b964067d85f777463ab2a48b1bd0a3594cf7de3cfff104e67f9ee075c9a7c919ae745659a2266389279fda5c67ac8c8f16b8162f97547cb26b502eed1bb4ef"], &(0x7f00000000c0)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) (async) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x4100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0, 0xd}, 0x814a4, 0x3, 0xfffffffe, 0x8, 0x7fff, 0x2, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000005c0)={0x3, 0x80, 0x1, 0x1, 0x40, 0x8, 0x0, 0x4ba, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdffa, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x121d2, 0x2c, 0x2, 0xb, 0x2, 0x61ab, 0x7, 0x0, 0x3, 0x0, 0x4000000005}, 0x0, 0x2000000001000263, 0xffffffffffffffff, 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x10}) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'team0\x00', 0x8000}) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000001a00)={0x1, &(0x7f0000000500)=[{0xfffe, 0x5, 0x88, 0x9}]}) (async) openat$cgroup_int(r2, &(0x7f00000004c0)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000001a40)=ANY=[@ANYBLOB="8a246f520e30fba77e18acdd01490691934c468da5182d25922aaf51064fbeb270e6b80fad70e76d8b39d84ff02faf12f9316387de287cbcbde5e148f4a1eebcfc8ef65d710000dbff98a79cf6dec115fa0b300000041f143ab2138d8c59deaf9e5bc388a7dd9f7fcb50def29b28f0d54e3163e21685bb559f3ed29725ea74aa5c7a4cfd90a5cb37055c0f5400de37c757ef97800feb287425c576a348793e27780eb4a1b95b571962e7418b57f4426a68e246e9574d1b942077f45c2602dd25060000ed4c5c4154fb03b22bb310adf95be40ed5824a5cc7a7aa5c79712c009cafb67de7ca7f2c17b2390176b96590c315e856fab2fb26305d757e1821a309b2ffffffc885dcfaf144fe0e53d6edb4fd901b39b83590551c2b046f188c90f1e63c7858c94e127064d15392da4a7d6785baa95d2254a2982582d1c44d41de65f205e45f2cc4006b2413aec3af65e0a3b7d46526858e372a6d23c6c77051e2a23eedc032ea832ebcf9d7b764c2aaa8cd85f9d0b3bc5fe235210931d0bd72acc9ddafe1b7feb144ad5aa8e2c22ff63ee5c788b85d4c49c551df77583309dec7f3475255d9e6b24b2c5b7a5127003a69c9e5174f832c786a2e48bf30038581000000000000004d577259fbe709000036c0f4e52d93f765146ec11c582a88ea8efe7ee61855c38b48e7e5ba27e007dcd2e404000000fb4aa324022ea5c1298305753a99fca86d3ce9d7804d1125c8b6452c939305000000901aa93ada424f5240d8394c7c46d774b8d016c0affbca417995e13121ec9bd829e646dc2601317609c048fabb1da12f1d4d8256c0237d278a6f53306e5e81fc646e9e590a40f7c1e537470ea574e900000000000000000000966689382dd3e3f2c288e08558484162a11e997834571deb455d76bbe9ac518b894bccb6a0df2c7e1c1a300fbe8524f07a27403c32a75000351b36ea93cf8d026068367314774afc5a72b1def9cb203b8a5e6cad8d46b897eac7d7a5e785651f17a435521cc31213ae43412d15b51722360c575fa543536abf72fa8473c87a65e5e3f6a6258351c1425b240d3bcfb5b9557a00000600000000000000000413d0b0b60ae80900cb855f4192c7c1a981f659deb2176258412b428bf5ce43bfc8dc7482859b40a2d0000d74c9f2f67927b2dfb3930855ba1c83037c312c446cb74ba6d2cc7ac4052b200311b826ba2ca089b49d93cd00e1e8b49730ff57ba96dbb0d4e46e46569c48028374130e2a3ac6e282181f3308a298433af47aaf1cea5a53e166ce57a1c30c644ed429007d1394d125abe01b5dc73cd762e83419eb728151a19a68b701004f9f858b9b4d16d412c4a5da96624ae8d74f9acf0671ebb4dd8d1865eaaa66e510d863cb52f4379ae70c7c23de9c5d27c6a245a085edf8b99b0456c4cd527552af1dfe772cdbd9450aa31d8bfbd3bafd1670e84c2e030381679b8c9f161daa9726cdee9f6fff06d6086bc398f70128e2b7da22891263ba10ae2c8b622e0207362d3291da4e045e8279e9a18ffbc7790ad9bef742501a391c4b3c499437d6afa3a1905bcd730000000000000000000000000000000000003580af8c3917126763e41282c217a7e80e8985de3e9691608ca18c2a04cab8b033a0353a19949ee77cde99f9833582b5582c099ef7ff07232625b0663ecb92f085e00aef8657b7b09ac0eb6b42b0e80b8c0cd02be628df0c1bdcc7683440c60f5d360000000000000002002055af8988150101d32ceaf49364b234ff43b3835b7938ae5981482e7f4bab4cfb6b4644e80be685039f25ab5c62c34ec55654b0ea07bc3d674b1c7aab579dfcb918ee427ba958d194976f7475bd33818080438f4821daf1d48b08ad1d735b458ee0d17b891873ebd83dba84d730f06a8fdd3909d4e4bf8131a63c742fb340002b1f5430c5498910dc937f8cc3a02769175fe65aa5e68d984e223ead73fdb51d09e55f4c128486cb0185b568ff850264788af67d0b9f5e8ace2855de22dfa5ff4565be7971224dd621080ad2d229100579cc4df5f4d783f140cfcb22b67d03b7156904a67dedc0bc94b1fbd9332bdfa058ecece2d3d8000000000000a3a1b102610031b19d3eff91293a2c6cfa447ffc2ba06da9b6118c11c367369a7561cf740d47a8f033befd1b72cf7bca40e76f08745cff370986f1afeef72a89cef50a7670241fcdd9de99088f22549e2fde7625a238a069975814d286ecc02282649fbce0f0cb7178f828fde25def8a0a76b72f68442fe9c1aac701fb04bacc2b7deb52fc0cc75504396a667d9457154a8dcbffca805ed7cdbb4108bc9fc917222a3adc91a051cb422dd432c6293ffac29696fa62696796cff6ebcef2763c8b90ae3c6a3480c56508a8359895e6d718a86479e528a1286049bb5dd455bec2f7e86c18b9c0e517c9bb74f5a765f0dc29b08ee91753582587c7710acf31841333cd7a81c138ed3c1e195c15d9ec329b30cf35d9f46956040afa1733b03d2c3831ea18750ff8fd41146675713c8f3c45bcf9ab70840781efc0092f2d928de77a933d9c8fcd1b3f7482b604c64739d1aeefeaddcc64dacf235d1be47d27e62b58d1d9f912a7b4a2a78d5e000000000000006e2f07d708d2b93b9deb04c3e76a2e6298ce0cc6933bfa1db0fb78439eadc25ac3e7a7eada20d224ee78af155057a7b36b31d0ff6f6b5736e670a2e63d4b3630eebf454e69f2e0bff787b4051dc09c1735c5fddd0a0c22e7046a7053cb823d962613d967b0dc2533944337f23a6473600abd166e35558bc08fba494fe9f68b9b8250d9bc04509ba5c6a01775eadfab21b553f5f4f125d54993981bc32592388251650a912908f14a745c1b2d2b73eb5606ddfbb4034800672bd3700c836ee1ef7a2eb26d4fa0731a307f09672cf90221b306b9d9a7de2ddfdb2fed32ece895cda6db529cbc0b49c8a49be4b3e5a54205c5c64067512fca467d49504a5d6246995eea25e1bf7e0c0cce2f77f68af436d80bf7778f490813da4dde94f5224a246854b70f27aeb791262d74ee76d876ed7452d9cad81f52f4b004af058e6f5f3cbdcad061f7a2c783b9947ed482c2022a218c405f2aafab3893c503d785", @ANYRESDEC]) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000280)='!&(\xa4\x00\x00') bpf$ENABLE_STATS(0x20, &(0x7f0000000540), 0x4) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)=0x2, 0x12) (async) r3 = perf_event_open(&(0x7f00000006c0)={0x0, 0x80, 0x40, 0x9, 0x3, 0x5d, 0x0, 0x1f, 0x4c280, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x1, @perf_bp={&(0x7f0000000400), 0x4}, 0x100000, 0xb05, 0x6, 0x2, 0xa, 0x9, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, r2, 0x4) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0400000000000000"], 0x8) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='memory.swap.events\x00', 0x7a05, 0x1700) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}, 0x10) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x9) (async) r5 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000100)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8923, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000002c0)='ve_\xc5\a\xa2\x05\x00\x00\x00\x00\x00\x00\x00\xe9\xeagc\xd0') 01:18:06 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="0008030000086d6f9f487a74dde5e9fac9f9513154ffb3ff030000f56c8374cbe5d99a130e1f636709e048decbe24bb592299846d7bbad3fc61f86a3798700eb2129cf607c223e4b8c7f1687f6d8df1da48cd67815f62156cf2bb02394b3d16f825976c0b0c36e2db48ade28fe642efb21f16681cd5aeebd2341f5c6ab1ecf05adb78fff445806189faf2b6dc37f77dbf2b0a1e6d4b89eff16e67ea60b26c312f08600b3c1d61a0a9c63469ca436d6d2321df23da24e75309e7036cfc5c36d8127ca878c4a65b0f2089ed5593689cded5d46e67477fad72b4a5f2a10345eaf04e2cd7a8f1780cfb74cb95ecc5f2735c7804a7c563fa8ff0b20f049d025a2cdb36612f6b0eb10f49fb1"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) 01:18:06 executing program 0: syz_clone(0x44100000, &(0x7f0000000140)="cf782c006a8db915cc6e5e51ead2430d9979a83543f09e5f8bff04ba4304132d25b45f270324cde946934b24b531784452c75dc7bb9795180000a35a0350b6523ef61e5a9f2da31d3321420dcf0500000000000000142b546f813359f0e8687afd027de22e8ac94094732f72677c0663097d3f1d14af2156b49f998331342c5e194b2d41051ae94aca0c61fbc19e4c311ad1e1a3e2d7c337ee6a891a91fffebb44cd40deba2af624f28c7a22e66f216bf925f6a955743b9a75cc0bcf06965d6ad35855ca7d24dc50d26ddc8910898f6ae7ab631fd054", 0xd6, 0x0, &(0x7f0000000100), 0x0) 01:18:06 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x0, 0x7d, 0x0, 0x8, 0x0, 0x0, 0x1080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x78, 0x2, @perf_config_ext={0x4, 0x1}, 0x10010, 0x1, 0xffffff05, 0x9, 0xc00, 0x8000, 0x7, 0x0, 0x7, 0x0, 0x2b4d0000000}, r1, 0x5, r5, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r4, &(0x7f0000000180), 0x12) [ 3058.453729][ T9595] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 3058.508346][ T9595] CPU: 1 PID: 9595 Comm: syz-executor.4 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 3058.518806][ T9595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 3058.528934][ T9595] Call Trace: [ 3058.532262][ T9595] [ 3058.535228][ T9595] dump_stack_lvl+0x136/0x150 [ 3058.539975][ T9595] dump_header+0x10a/0xd70 [ 3058.544431][ T9595] oom_kill_process+0x25d/0x600 [ 3058.549333][ T9595] out_of_memory+0x35c/0x1660 [ 3058.554091][ T9595] ? find_held_lock+0x2d/0x110 [ 3058.558342][ T5049] Bluetooth: hci1: command 0x041b tx timeout [ 3058.558886][ T9595] ? oom_killer_disable+0x2b0/0x2b0 [ 3058.570109][ T9595] ? rcu_read_unlock+0x9/0x60 [ 3058.574822][ T9595] ? find_held_lock+0x2d/0x110 [ 3058.579630][ T9595] mem_cgroup_out_of_memory+0x206/0x270 [ 3058.585217][ T9595] ? mem_cgroup_margin+0x130/0x130 [ 3058.590364][ T9595] ? lock_downgrade+0x690/0x690 [ 3058.595268][ T9595] try_charge_memcg+0xf99/0x13a0 [ 3058.600300][ T9595] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3058.606342][ T9595] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3058.612107][ T9595] ? lock_downgrade+0x690/0x690 [ 3058.617004][ T9595] ? lock_downgrade+0x690/0x690 [ 3058.621898][ T9595] ? rcu_read_unlock+0x9/0x60 [ 3058.626619][ T9595] obj_cgroup_charge+0x2af/0x5e0 [ 3058.631620][ T9595] ? copy_process+0x3c0/0x7600 [ 3058.636421][ T9595] kmem_cache_alloc_node+0xa8/0x3e0 [ 3058.641668][ T9595] copy_process+0x3c0/0x7600 [ 3058.646295][ T9595] ? _raw_spin_unlock+0x28/0x40 [ 3058.651187][ T9595] ? wp_page_reuse+0x197/0x570 [ 3058.656007][ T9595] ? pidfd_prepare+0x80/0x80 [ 3058.660669][ T9595] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3058.666708][ T9595] kernel_clone+0xeb/0x890 [ 3058.671168][ T9595] ? create_io_thread+0xe0/0xe0 [ 3058.676093][ T9595] ? do_user_addr_fault+0x2b1/0x1210 [ 3058.681427][ T9595] ? reacquire_held_locks+0x216/0x4e0 [ 3058.686835][ T9595] ? do_user_addr_fault+0x2b1/0x1210 [ 3058.692172][ T9595] ? find_held_lock+0x2d/0x110 [ 3058.696990][ T9595] __do_sys_clone+0xba/0x100 [ 3058.701618][ T9595] ? kernel_clone+0x890/0x890 [ 3058.706349][ T9595] ? syscall_enter_from_user_mode+0x26/0x80 [ 3058.712327][ T9595] do_syscall_64+0x39/0xb0 [ 3058.716799][ T9595] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3058.722780][ T9595] RIP: 0033:0x7f01ce689e9b [ 3058.727218][ T9595] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 3058.746882][ T9595] RSP: 002b:00007ffc03da6040 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 01:18:06 executing program 3: perf_event_open$cgroup(&(0x7f0000000100)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xbea}, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x26e1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f9, 0x0, @perf_config_ext={0x9, 0x4}, 0x0, 0xfff, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="ef2d3900000085822f09001000000000002553b37e608260eecd519368cad87eaf1300000000000000f779e0dbf8e7158f36e2dbdafda6086bd9ab59eb472a36057791af893953b964067d85f777463ab2a48b1bd0a3594cf7de3cfff104e67f9ee075c9a7c919ae745659a2266389279fda5c67ac8c8f16b8162f97547cb26b502eed1bb4ef"], &(0x7f00000000c0)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x4100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0, 0xd}, 0x814a4, 0x3, 0xfffffffe, 0x8, 0x7fff, 0x2, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000005c0)={0x3, 0x80, 0x1, 0x1, 0x40, 0x8, 0x0, 0x4ba, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdffa, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x121d2, 0x2c, 0x2, 0xb, 0x2, 0x61ab, 0x7, 0x0, 0x3, 0x0, 0x4000000005}, 0x0, 0x2000000001000263, 0xffffffffffffffff, 0x4) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x10}) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'team0\x00', 0x8000}) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000001a00)={0x1, &(0x7f0000000500)=[{0xfffe, 0x5, 0x88, 0x9}]}) (async) openat$cgroup_int(r2, &(0x7f00000004c0)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000001a40)=ANY=[@ANYBLOB="8a246f520e30fba77e18acdd01490691934c468da5182d25922aaf51064fbeb270e6b80fad70e76d8b39d84ff02faf12f9316387de287cbcbde5e148f4a1eebcfc8ef65d710000dbff98a79cf6dec115fa0b300000041f143ab2138d8c59deaf9e5bc388a7dd9f7fcb50def29b28f0d54e3163e21685bb559f3ed29725ea74aa5c7a4cfd90a5cb37055c0f5400de37c757ef97800feb287425c576a348793e27780eb4a1b95b571962e7418b57f4426a68e246e9574d1b942077f45c2602dd25060000ed4c5c4154fb03b22bb310adf95be40ed5824a5cc7a7aa5c79712c009cafb67de7ca7f2c17b2390176b96590c315e856fab2fb26305d757e1821a309b2ffffffc885dcfaf144fe0e53d6edb4fd901b39b83590551c2b046f188c90f1e63c7858c94e127064d15392da4a7d6785baa95d2254a2982582d1c44d41de65f205e45f2cc4006b2413aec3af65e0a3b7d46526858e372a6d23c6c77051e2a23eedc032ea832ebcf9d7b764c2aaa8cd85f9d0b3bc5fe235210931d0bd72acc9ddafe1b7feb144ad5aa8e2c22ff63ee5c788b85d4c49c551df77583309dec7f3475255d9e6b24b2c5b7a5127003a69c9e5174f832c786a2e48bf30038581000000000000004d577259fbe709000036c0f4e52d93f765146ec11c582a88ea8efe7ee61855c38b48e7e5ba27e007dcd2e404000000fb4aa324022ea5c1298305753a99fca86d3ce9d7804d1125c8b6452c939305000000901aa93ada424f5240d8394c7c46d774b8d016c0affbca417995e13121ec9bd829e646dc2601317609c048fabb1da12f1d4d8256c0237d278a6f53306e5e81fc646e9e590a40f7c1e537470ea574e900000000000000000000966689382dd3e3f2c288e08558484162a11e997834571deb455d76bbe9ac518b894bccb6a0df2c7e1c1a300fbe8524f07a27403c32a75000351b36ea93cf8d026068367314774afc5a72b1def9cb203b8a5e6cad8d46b897eac7d7a5e785651f17a435521cc31213ae43412d15b51722360c575fa543536abf72fa8473c87a65e5e3f6a6258351c1425b240d3bcfb5b9557a00000600000000000000000413d0b0b60ae80900cb855f4192c7c1a981f659deb2176258412b428bf5ce43bfc8dc7482859b40a2d0000d74c9f2f67927b2dfb3930855ba1c83037c312c446cb74ba6d2cc7ac4052b200311b826ba2ca089b49d93cd00e1e8b49730ff57ba96dbb0d4e46e46569c48028374130e2a3ac6e282181f3308a298433af47aaf1cea5a53e166ce57a1c30c644ed429007d1394d125abe01b5dc73cd762e83419eb728151a19a68b701004f9f858b9b4d16d412c4a5da96624ae8d74f9acf0671ebb4dd8d1865eaaa66e510d863cb52f4379ae70c7c23de9c5d27c6a245a085edf8b99b0456c4cd527552af1dfe772cdbd9450aa31d8bfbd3bafd1670e84c2e030381679b8c9f161daa9726cdee9f6fff06d6086bc398f70128e2b7da22891263ba10ae2c8b622e0207362d3291da4e045e8279e9a18ffbc7790ad9bef742501a391c4b3c499437d6afa3a1905bcd730000000000000000000000000000000000003580af8c3917126763e41282c217a7e80e8985de3e9691608ca18c2a04cab8b033a0353a19949ee77cde99f9833582b5582c099ef7ff07232625b0663ecb92f085e00aef8657b7b09ac0eb6b42b0e80b8c0cd02be628df0c1bdcc7683440c60f5d360000000000000002002055af8988150101d32ceaf49364b234ff43b3835b7938ae5981482e7f4bab4cfb6b4644e80be685039f25ab5c62c34ec55654b0ea07bc3d674b1c7aab579dfcb918ee427ba958d194976f7475bd33818080438f4821daf1d48b08ad1d735b458ee0d17b891873ebd83dba84d730f06a8fdd3909d4e4bf8131a63c742fb340002b1f5430c5498910dc937f8cc3a02769175fe65aa5e68d984e223ead73fdb51d09e55f4c128486cb0185b568ff850264788af67d0b9f5e8ace2855de22dfa5ff4565be7971224dd621080ad2d229100579cc4df5f4d783f140cfcb22b67d03b7156904a67dedc0bc94b1fbd9332bdfa058ecece2d3d8000000000000a3a1b102610031b19d3eff91293a2c6cfa447ffc2ba06da9b6118c11c367369a7561cf740d47a8f033befd1b72cf7bca40e76f08745cff370986f1afeef72a89cef50a7670241fcdd9de99088f22549e2fde7625a238a069975814d286ecc02282649fbce0f0cb7178f828fde25def8a0a76b72f68442fe9c1aac701fb04bacc2b7deb52fc0cc75504396a667d9457154a8dcbffca805ed7cdbb4108bc9fc917222a3adc91a051cb422dd432c6293ffac29696fa62696796cff6ebcef2763c8b90ae3c6a3480c56508a8359895e6d718a86479e528a1286049bb5dd455bec2f7e86c18b9c0e517c9bb74f5a765f0dc29b08ee91753582587c7710acf31841333cd7a81c138ed3c1e195c15d9ec329b30cf35d9f46956040afa1733b03d2c3831ea18750ff8fd41146675713c8f3c45bcf9ab70840781efc0092f2d928de77a933d9c8fcd1b3f7482b604c64739d1aeefeaddcc64dacf235d1be47d27e62b58d1d9f912a7b4a2a78d5e000000000000006e2f07d708d2b93b9deb04c3e76a2e6298ce0cc6933bfa1db0fb78439eadc25ac3e7a7eada20d224ee78af155057a7b36b31d0ff6f6b5736e670a2e63d4b3630eebf454e69f2e0bff787b4051dc09c1735c5fddd0a0c22e7046a7053cb823d962613d967b0dc2533944337f23a6473600abd166e35558bc08fba494fe9f68b9b8250d9bc04509ba5c6a01775eadfab21b553f5f4f125d54993981bc32592388251650a912908f14a745c1b2d2b73eb5606ddfbb4034800672bd3700c836ee1ef7a2eb26d4fa0731a307f09672cf90221b306b9d9a7de2ddfdb2fed32ece895cda6db529cbc0b49c8a49be4b3e5a54205c5c64067512fca467d49504a5d6246995eea25e1bf7e0c0cce2f77f68af436d80bf7778f490813da4dde94f5224a246854b70f27aeb791262d74ee76d876ed7452d9cad81f52f4b004af058e6f5f3cbdcad061f7a2c783b9947ed482c2022a218c405f2aafab3893c503d785", @ANYRESDEC]) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000280)='!&(\xa4\x00\x00') (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000540), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)=0x2, 0x12) (async) r3 = perf_event_open(&(0x7f00000006c0)={0x0, 0x80, 0x40, 0x9, 0x3, 0x5d, 0x0, 0x1f, 0x4c280, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x1, @perf_bp={&(0x7f0000000400), 0x4}, 0x100000, 0xb05, 0x6, 0x2, 0xa, 0x9, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, r2, 0x4) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0400000000000000"], 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='memory.swap.events\x00', 0x7a05, 0x1700) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}, 0x10) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x9) r5 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000100)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8923, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000002c0)='ve_\xc5\a\xa2\x05\x00\x00\x00\x00\x00\x00\x00\xe9\xeagc\xd0') [ 3058.755338][ T9595] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f01ce689e9b [ 3058.763333][ T9595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3058.771332][ T9595] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555566b6400 [ 3058.779333][ T9595] R10: 00005555566b66d0 R11: 0000000000000246 R12: 0000000000000001 [ 3058.787336][ T9595] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc03da6120 [ 3058.795348][ T9595] 01:18:06 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524819e5982a) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000003c0)=0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="0008030000086d6f9f487a74dde5e9fac9f9513154ffb3ff030000f56c8374cbe5d99a130e1f636709e048decbe24bb592299846d7bbad3fc61f86a3798700eb2129cf607c223e4b8c7f1687f6d8df1da48cd67815f62156cf2bb02394b3d16f825976c0b0c36e2db48ade28fe642efb21f16681cd5aeebd2341f5c6ab1ecf05adb78fff445806189faf2b6dc37f77dbf2b0a1e6d4b89eff16e67ea60b26c312f08600b3c1d61a0a9c63469ca436d6d2321df23da24e75309e7036cfc5c36d8127ca878c4a65b0f2089ed5593689cded5d46e67477fad72b4a5f2a10345eaf04e2cd7a8f1780cfb74cb95ecc5f2735c7804a7c563fa8ff0b20f049d025a2cdb36612f6b0eb10f49fb1"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x0, 0x7d, 0x0, 0x8, 0x0, 0x0, 0x1080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x78, 0x2, @perf_config_ext={0x4, 0x1}, 0x10010, 0x1, 0xffffff05, 0x9, 0xc00, 0x8000, 0x7, 0x0, 0x7, 0x0, 0x2b4d0000000}, r1, 0x5, r5, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) close(0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x92008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000200)='./cgroup.net/syz1\x00') write$cgroup_int(r4, &(0x7f0000000180), 0x12) [ 3058.932636][T10352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3058.937645][ T9595] memory: usage 10328kB, limit 0kB, failcnt 892 [ 3058.944385][T10352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3058.946378][ T9595] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3058.990471][ T9595] Memory cgroup stats for /syz4: [ 3058.990697][ T9595] anon 53248 [ 3058.990697][ T9595] file 10436608 [ 3058.990697][ T9595] kernel 86016 [ 3058.990697][ T9595] kernel_stack 0 [ 3058.990697][ T9595] pagetables 8192 [ 3058.990697][ T9595] sec_pagetables 0 [ 3058.990697][ T9595] percpu 0 [ 3058.990697][ T9595] sock 0 [ 3058.990697][ T9595] vmalloc 0 [ 3058.990697][ T9595] shmem 10436608 [ 3058.990697][ T9595] zswap 0 [ 3058.990697][ T9595] zswapped 0 [ 3058.990697][ T9595] file_mapped 241664 [ 3058.990697][ T9595] file_dirty 0 [ 3058.990697][ T9595] file_writeback 0 [ 3058.990697][ T9595] swapcached 0 [ 3058.990697][ T9595] anon_thp 0 [ 3058.990697][ T9595] file_thp 0 [ 3058.990697][ T9595] shmem_thp 0 [ 3058.990697][ T9595] inactive_anon 10489856 [ 3058.990697][ T9595] active_anon 0 [ 3058.990697][ T9595] inactive_file 0 [ 3058.990697][ T9595] active_file 0 [ 3058.990697][ T9595] unevictable 0 [ 3058.990697][ T9595] slab_reclaimable 35584 [ 3058.990697][ T9595] slab_unreclaimable 32296 [ 3058.990697][ T9595] slab 67880 [ 3058.990697][ T9595] workingset_refault_anon 0 [ 3058.990697][ T9595] workingset_refault_file 1 [ 3058.990697][ T9595] workingset_activate_anon 0 [ 3058.990697][ T9595] workingset_activate_file 0 [ 3058.990697][ T9595] workingset_restore_anon 0 [ 3058.990697][ T9595] workingset_restore_file 1 [ 3058.990697][ T9595] workingset_nodereclaim 2 [ 3058.990697][ T9595] pgscan 850 [ 3058.990697][ T9595] pgsteal 205 [ 3058.990697][ T9595] pgscan_kswapd 0 [ 3058.990697][ T9595] pgscan_direct 850 [ 3058.990697][ T9595] pgscan_khugepaged 0 [ 3058.990697][ T9595] pgsteal_kswapd 0 [ 3058.990697][ T9595] pgsteal_direct 205 [ 3058.990697][ T9595] pgsteal_khugepaged 0 [ 3058.990697][ T9595] pgfault 51082 [ 3058.990697][ T9595] pgmajfault 0 [ 3058.990697][ T9595] pgrefill 41396 [ 3058.990697][ T9595] pgactivate 319 [ 3058.990697][ T9595] pgdeactivate 0 [ 3058.990697][ T9595] pglazyfree 0 [ 3058.990697][ T9595] pglazyfreed 0 [ 3058.990697][ T9595] zswpin 0 [ 3058.990697][ T9595] zswpout 0 [ 3058.990697][ T9595] thp_fault_alloc 0 [ 3059.033614][T10352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3059.207406][T10352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3059.253225][T10352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3059.410576][T10352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3059.422223][ T9595] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=9595,uid=0 [ 3059.437949][ T9595] Memory cgroup out of memory: Killed process 9595 (syz-executor.4) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 3059.455844][T10415] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3059.502526][T10415] CPU: 0 PID: 10415 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 3059.513002][T10415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 3059.523095][T10415] Call Trace: [ 3059.526404][T10415] [ 3059.529367][T10415] dump_stack_lvl+0x136/0x150 [ 3059.534109][T10415] dump_header+0x10a/0xd70 [ 3059.538574][T10415] oom_kill_process+0x25d/0x600 [ 3059.543469][T10415] out_of_memory+0x35c/0x1660 [ 3059.548192][T10415] ? oom_killer_disable+0x2b0/0x2b0 [ 3059.553437][T10415] ? mark_held_locks+0x9f/0xe0 [ 3059.558269][T10415] mem_cgroup_out_of_memory+0x206/0x270 [ 3059.563875][T10415] ? mem_cgroup_margin+0x130/0x130 [ 3059.569051][T10415] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 3059.574921][T10415] memory_max_write+0x2f9/0x3c0 [ 3059.579833][T10415] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3059.585954][T10415] ? mark_held_locks+0x9f/0xe0 [ 3059.590759][T10415] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3059.596949][T10415] cgroup_file_write+0x1e2/0x7b0 [ 3059.601905][T10415] ? mem_cgroup_force_empty_write+0x160/0x160 [ 3059.608004][T10415] ? cgroup_get_from_path+0x6e0/0x6e0 [ 3059.613425][T10415] ? cgroup_get_from_path+0x6e0/0x6e0 [ 3059.618835][T10415] kernfs_fop_write_iter+0x3f1/0x600 [ 3059.624155][T10415] vfs_write+0x945/0xd50 [ 3059.628448][T10415] ? kernel_write+0x670/0x670 [ 3059.633178][T10415] ? __fdget_pos+0xca/0x100 [ 3059.637717][T10415] ksys_write+0x12b/0x250 [ 3059.642064][T10415] ? __ia32_sys_read+0xb0/0xb0 [ 3059.646852][T10415] do_syscall_64+0x39/0xb0 [ 3059.651308][T10415] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3059.657227][T10415] RIP: 0033:0x7f56fe28c169 [ 3059.661659][T10415] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3059.681283][T10415] RSP: 002b:00007f56fef2c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3059.689731][T10415] RAX: ffffffffffffffda RBX: 00007f56fe3ac050 RCX: 00007f56fe28c169 [ 3059.697718][T10415] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 3059.705788][T10415] RBP: 00007f56fe2e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3059.713769][T10415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3059.721748][T10415] R13: 00007ffc083f34ff R14: 00007f56fef2c300 R15: 0000000000022000 [ 3059.729748][T10415] [ 3059.748332][ T4594] Bluetooth: hci0: command 0x040f tx timeout [ 3059.767959][T10415] memory: usage 10732kB, limit 0kB, failcnt 1136 [ 3059.806590][T10415] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3059.826578][T10415] Memory cgroup stats for /syz3: [ 3059.828852][T10415] anon 143360 [ 3059.828852][T10415] file 10452992 [ 3059.828852][T10415] kernel 393216 [ 3059.828852][T10415] kernel_stack 98304 [ 3059.828852][T10415] pagetables 77824 [ 3059.828852][T10415] sec_pagetables 0 [ 3059.828852][T10415] percpu 64 [ 3059.828852][T10415] sock 0 [ 3059.828852][T10415] vmalloc 0 [ 3059.828852][T10415] shmem 10452992 [ 3059.828852][T10415] zswap 0 [ 3059.828852][T10415] zswapped 0 [ 3059.828852][T10415] file_mapped 344064 [ 3059.828852][T10415] file_dirty 0 [ 3059.828852][T10415] file_writeback 0 [ 3059.828852][T10415] swapcached 0 [ 3059.828852][T10415] anon_thp 0 [ 3059.828852][T10415] file_thp 0 [ 3059.828852][T10415] shmem_thp 0 [ 3059.828852][T10415] inactive_anon 0 [ 3059.828852][T10415] active_anon 10596352 [ 3059.828852][T10415] inactive_file 0 [ 3059.828852][T10415] active_file 0 [ 3059.828852][T10415] unevictable 0 [ 3059.828852][T10415] slab_reclaimable 52360 [ 3059.828852][T10415] slab_unreclaimable 131888 [ 3059.828852][T10415] slab 184248 [ 3059.828852][T10415] workingset_refault_anon 0 [ 3059.828852][T10415] workingset_refault_file 0 [ 3059.828852][T10415] workingset_activate_anon 0 [ 3059.828852][T10415] workingset_activate_file 0 [ 3059.828852][T10415] workingset_restore_anon 0 [ 3059.828852][T10415] workingset_restore_file 0 [ 3059.828852][T10415] workingset_nodereclaim 0 [ 3059.828852][T10415] pgscan 316 [ 3059.828852][T10415] pgsteal 81 [ 3059.828852][T10415] pgscan_kswapd 0 [ 3059.828852][T10415] pgscan_direct 316 [ 3059.828852][T10415] pgscan_khugepaged 0 [ 3059.828852][T10415] pgsteal_kswapd 0 [ 3059.828852][T10415] pgsteal_direct 81 [ 3059.828852][T10415] pgsteal_khugepaged 0 [ 3059.828852][T10415] pgfault 61880 [ 3059.828852][T10415] pgmajfault 0 [ 3059.828852][T10415] pgrefill 914 [ 3059.828852][T10415] pgactivate 235 [ 3059.828852][T10415] pgdeactivate 0 [ 3059.828852][T10415] pglazyfree 0 [ 3059.828852][T10415] pglazyfreed 0 [ 3059.828852][T10415] zswpin 0 [ 3059.828852][T10415] zswpout 0 [ 3059.828852][T10415] thp_fault_alloc 0 [ 3060.066974][T10415] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=10412,uid=0 [ 3060.123962][T10415] Memory cgroup out of memory: Killed process 10415 (syz-executor.3) total-vm:56728kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3060.375633][T10352] hsr_slave_0: entered promiscuous mode [ 3060.399066][T10352] hsr_slave_1: entered promiscuous mode [ 3060.410497][T10352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3060.428269][T10352] Cannot create hsr debugfs directory [ 3060.556889][ T5049] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3060.572761][ T5049] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3060.583042][ T5049] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3060.590698][ T5049] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3060.598032][ T5049] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3060.605291][T31297] Bluetooth: hci1: command 0x040f tx timeout [ 3061.798830][ T5049] Bluetooth: hci0: command 0x0419 tx timeout [ 3062.074206][T10430] chnl_net:caif_netlink_parms(): no params data found [ 3062.439489][T10343] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3062.478700][T10430] bridge0: port 1(bridge_slave_0) entered blocking state [ 3062.485807][T10430] bridge0: port 1(bridge_slave_0) entered disabled state [ 3062.527628][T10430] bridge_slave_0: entered allmulticast mode [ 3062.548480][T10430] bridge_slave_0: entered promiscuous mode [ 3062.566833][T10343] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3062.606171][T10430] bridge0: port 2(bridge_slave_1) entered blocking state [ 3062.628250][T10430] bridge0: port 2(bridge_slave_1) entered disabled state [ 3062.635431][T10430] bridge_slave_1: entered allmulticast mode [ 3062.652652][T10430] bridge_slave_1: entered promiscuous mode [ 3062.671916][T10343] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3062.688844][ T5049] Bluetooth: hci3: command 0x0409 tx timeout [ 3062.695326][ T5049] Bluetooth: hci1: command 0x0419 tx timeout [ 3062.710486][T10343] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3062.811457][T10352] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3062.842484][T10430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3062.860467][T10352] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3062.885252][T10430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3062.922306][T10430] team0: Port device team_slave_0 added [ 3062.932423][T10352] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3062.944022][T10352] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3062.969473][T10430] team0: Port device team_slave_1 added [ 3063.063553][T10430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3063.071186][T10430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3063.098324][T10430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3063.116831][T10343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3063.132162][T10430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3063.147732][T10430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3063.175731][T10430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3063.202897][ T5531] hsr_slave_0: left promiscuous mode [ 3063.216804][ T5531] hsr_slave_1: left promiscuous mode [ 3063.226110][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3063.245228][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3063.258886][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3063.266310][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3063.286100][ T5531] bridge_slave_1: left allmulticast mode [ 3063.295325][ T5531] bridge_slave_1: left promiscuous mode [ 3063.307601][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 3063.316950][ T5531] bridge_slave_0: left allmulticast mode [ 3063.324158][ T5531] bridge_slave_0: left promiscuous mode [ 3063.331019][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 3063.346006][ T5531] hsr_slave_0: left promiscuous mode [ 3063.352855][ T5531] hsr_slave_1: left promiscuous mode [ 3063.358999][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3063.366419][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3063.376427][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3063.384119][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3063.393648][ T5531] bridge_slave_1: left allmulticast mode [ 3063.399733][ T5531] bridge_slave_1: left promiscuous mode [ 3063.405421][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 3063.414566][ T5531] bridge_slave_0: left allmulticast mode [ 3063.420586][ T5531] bridge_slave_0: left promiscuous mode [ 3063.426268][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 3063.441170][ T5531] hsr_slave_0: left promiscuous mode [ 3063.447250][ T5531] hsr_slave_1: left promiscuous mode [ 3063.457321][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3063.465209][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3063.474682][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3063.483224][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3063.493314][ T5531] bridge_slave_1: left allmulticast mode [ 3063.499430][ T5531] bridge_slave_1: left promiscuous mode [ 3063.505112][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 3063.515008][ T5531] bridge_slave_0: left allmulticast mode [ 3063.532731][ T5531] bridge_slave_0: left promiscuous mode [ 3063.545033][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 3063.566855][ T5531] veth1_macvtap: left promiscuous mode [ 3063.572643][ T5531] veth0_macvtap: left promiscuous mode [ 3063.578772][ T5531] veth1_vlan: left promiscuous mode [ 3063.584781][ T5531] veth0_vlan: left promiscuous mode [ 3063.592631][ T5531] veth1_macvtap: left promiscuous mode [ 3063.598345][ T5531] veth0_macvtap: left promiscuous mode [ 3063.603985][ T5531] veth1_vlan: left promiscuous mode [ 3063.609961][ T5531] veth0_vlan: left promiscuous mode [ 3063.616893][ T5531] veth1_macvtap: left promiscuous mode [ 3063.623143][ T5531] veth0_macvtap: left promiscuous mode [ 3063.629136][ T5531] veth1_vlan: left promiscuous mode [ 3063.634468][ T5531] veth0_vlan: left promiscuous mode [ 3064.058895][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 3064.074774][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 3064.087187][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3064.102880][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3064.181887][ T5531] bond0 (unregistering): Released all slaves [ 3064.322859][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 3064.339857][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 3064.353998][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3064.377657][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3064.455347][ T5531] bond0 (unregistering): Released all slaves [ 3064.612799][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 3064.627173][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 3064.640725][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3064.655479][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3064.731242][ T5531] bond0 (unregistering): Released all slaves [ 3064.760299][ T5049] Bluetooth: hci3: command 0x041b tx timeout [ 3064.809982][T10343] 8021q: adding VLAN 0 to HW filter on device team0 [ 3064.855412][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3064.867683][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3064.921370][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3064.935989][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3064.944527][ T8293] bridge0: port 1(bridge_slave_0) entered blocking state [ 3064.951684][ T8293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3064.959657][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3064.968630][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3064.976954][ T8293] bridge0: port 2(bridge_slave_1) entered blocking state [ 3064.984077][ T8293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3064.991699][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3065.000826][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3065.009974][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3065.020819][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3065.029831][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3065.038475][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3065.061315][T10430] hsr_slave_0: entered promiscuous mode [ 3065.067666][T10430] hsr_slave_1: entered promiscuous mode [ 3065.074213][T10430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3065.082208][T10430] Cannot create hsr debugfs directory [ 3065.088106][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3065.103970][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3065.120908][T10343] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3065.131504][T10343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3065.166595][T10352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3065.175864][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3065.184535][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3065.193179][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3065.201637][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3065.214283][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3065.270001][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3065.294456][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3065.312647][T10352] 8021q: adding VLAN 0 to HW filter on device team0 [ 3065.339170][ T5531] ------------[ cut here ]------------ [ 3065.345020][ T5531] ODEBUG: free active (active state 0) object: ffff8880486394f8 object type: timer_list hint: batadv_dat_purge+0x0/0x70 [ 3065.366526][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3065.376033][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3065.385261][ T5531] WARNING: CPU: 1 PID: 5531 at lib/debugobjects.c:505 debug_print_object+0x194/0x2c0 [ 3065.395018][ T5531] Modules linked in: [ 3065.398983][ T5531] CPU: 1 PID: 5531 Comm: kworker/u4:6 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 3065.409215][ T5531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 3065.419349][ T5531] Workqueue: netns cleanup_net [ 3065.424183][ T5531] RIP: 0010:debug_print_object+0x194/0x2c0 [ 3065.430089][ T5531] Code: df 48 89 fe 48 c1 ee 03 80 3c 16 00 0f 85 c7 00 00 00 48 8b 14 dd 40 25 a7 8a 50 4c 89 ee 48 c7 c7 00 19 a7 8a e8 2c b1 34 fd <0f> 0b 58 83 05 86 5e 63 0a 01 48 83 c4 20 5b 5d 41 5c 41 5d 41 5e [ 3065.449781][ T5531] RSP: 0018:ffffc9000977f860 EFLAGS: 00010286 [ 3065.455896][ T5531] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 3065.463941][ T5531] RDX: ffff88804bc11dc0 RSI: ffffffff814c03f7 RDI: 0000000000000001 [ 3065.472003][ T5531] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 3065.480054][ T5531] R10: 0000000000000001 R11: 00000000003f2530 R12: ffffffff8a4ed280 [ 3065.488045][ T5531] R13: ffffffff8aa71f60 R14: ffff8880550dd210 R15: ffffffff8172bba0 [ 3065.496097][ T5531] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 3065.505184][ T5531] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3065.511851][ T5531] CR2: 00007f1d763dd440 CR3: 0000000027b69000 CR4: 00000000003506e0 [ 3065.519897][ T5531] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3065.527889][ T5531] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3065.535945][ T5531] Call Trace: [ 3065.539289][ T5531] [ 3065.542268][ T5531] ? __batadv_dat_purge.part.0+0x3b0/0x3b0 [ 3065.548095][ T5531] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3065.554005][ T5531] debug_check_no_obj_freed+0x305/0x420 [ 3065.559641][ T5531] slab_free_freelist_hook+0xeb/0x1c0 [ 3065.565050][ T5531] ? kvfree+0x46/0x50 [ 3065.569150][ T5531] __kmem_cache_free+0xaf/0x2d0 [ 3065.574081][ T5531] kvfree+0x46/0x50 [ 3065.577931][ T5531] ? net_get_ownership+0x50/0x50 [ 3065.582988][ T5531] device_release+0xa3/0x240 [ 3065.587637][ T5531] kobject_put+0x1c2/0x4d0 [ 3065.592115][ T5531] netdev_run_todo+0x762/0x1100 [ 3065.597005][ T5531] ? generic_xdp_install+0x4c0/0x4c0 [ 3065.602377][ T5531] ? mutex_is_locked+0x12/0x50 [ 3065.607174][ T5531] ? netdev_freemem+0x60/0x60 [ 3065.611964][ T5531] ? unregister_netdevice_many+0x20/0x20 [ 3065.617644][ T5531] ? sysfs_remove_group+0xc6/0x170 [ 3065.622857][ T5531] ? br_dev_delete+0x116/0x1a0 [ 3065.627726][ T5531] default_device_exit_batch+0x456/0x5b0 [ 3065.633456][ T5531] ? unregister_netdev+0x30/0x30 [ 3065.638477][ T5531] ? unregister_netdev+0x30/0x30 [ 3065.643480][ T5531] ops_exit_list+0x125/0x170 [ 3065.648103][ T5531] cleanup_net+0x4ee/0xb10 [ 3065.652625][ T5531] ? unregister_pernet_device+0x80/0x80 [ 3065.658275][ T5531] ? _raw_spin_unlock_irq+0x23/0x50 [ 3065.663528][ T5531] process_one_work+0x99a/0x15e0 [ 3065.668549][ T5531] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 3065.674056][ T5531] ? spin_bug+0x1c0/0x1c0 [ 3065.678484][ T5531] ? _raw_spin_lock_irq+0x45/0x50 [ 3065.683550][ T5531] worker_thread+0x67d/0x10c0 [ 3065.688319][ T5531] ? process_one_work+0x15e0/0x15e0 [ 3065.693592][ T5531] kthread+0x344/0x440 [ 3065.697669][ T5531] ? kthread_complete_and_exit+0x40/0x40 [ 3065.703362][ T5531] ret_from_fork+0x1f/0x30 [ 3065.707829][ T5531] [ 3065.710907][ T5531] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3065.718207][ T5531] CPU: 1 PID: 5531 Comm: kworker/u4:6 Not tainted 6.4.0-rc3-syzkaller-00232-gf46fab0e36e6 #0 [ 3065.728382][ T5531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 3065.738463][ T5531] Workqueue: netns cleanup_net [ 3065.743247][ T5531] Call Trace: [ 3065.746523][ T5531] [ 3065.749455][ T5531] dump_stack_lvl+0xd9/0x150 [ 3065.754070][ T5531] panic+0x686/0x730 [ 3065.757974][ T5531] ? panic_smp_self_stop+0xa0/0xa0 [ 3065.763093][ T5531] ? show_trace_log_lvl+0x285/0x390 [ 3065.768332][ T5531] ? debug_print_object+0x194/0x2c0 [ 3065.773568][ T5531] check_panic_on_warn+0xb1/0xc0 [ 3065.778532][ T5531] __warn+0xf2/0x390 [ 3065.782465][ T5531] ? debug_print_object+0x194/0x2c0 [ 3065.787687][ T5531] report_bug+0x2da/0x500 [ 3065.792058][ T5531] handle_bug+0x3c/0x70 [ 3065.796223][ T5531] exc_invalid_op+0x18/0x50 [ 3065.800742][ T5531] asm_exc_invalid_op+0x1a/0x20 [ 3065.805626][ T5531] RIP: 0010:debug_print_object+0x194/0x2c0 [ 3065.811460][ T5531] Code: df 48 89 fe 48 c1 ee 03 80 3c 16 00 0f 85 c7 00 00 00 48 8b 14 dd 40 25 a7 8a 50 4c 89 ee 48 c7 c7 00 19 a7 8a e8 2c b1 34 fd <0f> 0b 58 83 05 86 5e 63 0a 01 48 83 c4 20 5b 5d 41 5c 41 5d 41 5e [ 3065.831084][ T5531] RSP: 0018:ffffc9000977f860 EFLAGS: 00010286 [ 3065.837169][ T5531] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 3065.845171][ T5531] RDX: ffff88804bc11dc0 RSI: ffffffff814c03f7 RDI: 0000000000000001 [ 3065.853159][ T5531] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 3065.861141][ T5531] R10: 0000000000000001 R11: 00000000003f2530 R12: ffffffff8a4ed280 [ 3065.869147][ T5531] R13: ffffffff8aa71f60 R14: ffff8880550dd210 R15: ffffffff8172bba0 [ 3065.877162][ T5531] ? calc_wheel_index+0x3d0/0x3d0 [ 3065.882226][ T5531] ? __warn_printk+0x187/0x310 [ 3065.887028][ T5531] ? __batadv_dat_purge.part.0+0x3b0/0x3b0 [ 3065.892878][ T5531] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3065.898718][ T5531] debug_check_no_obj_freed+0x305/0x420 [ 3065.904340][ T5531] slab_free_freelist_hook+0xeb/0x1c0 [ 3065.909755][ T5531] ? kvfree+0x46/0x50 [ 3065.913776][ T5531] __kmem_cache_free+0xaf/0x2d0 [ 3065.918668][ T5531] kvfree+0x46/0x50 [ 3065.922499][ T5531] ? net_get_ownership+0x50/0x50 [ 3065.927450][ T5531] device_release+0xa3/0x240 [ 3065.932055][ T5531] kobject_put+0x1c2/0x4d0 [ 3065.936514][ T5531] netdev_run_todo+0x762/0x1100 [ 3065.941384][ T5531] ? generic_xdp_install+0x4c0/0x4c0 [ 3065.946712][ T5531] ? mutex_is_locked+0x12/0x50 [ 3065.951491][ T5531] ? netdev_freemem+0x60/0x60 [ 3065.956203][ T5531] ? unregister_netdevice_many+0x20/0x20 [ 3065.961851][ T5531] ? sysfs_remove_group+0xc6/0x170 [ 3065.966998][ T5531] ? br_dev_delete+0x116/0x1a0 [ 3065.971779][ T5531] default_device_exit_batch+0x456/0x5b0 [ 3065.977430][ T5531] ? unregister_netdev+0x30/0x30 [ 3065.982403][ T5531] ? unregister_netdev+0x30/0x30 [ 3065.987361][ T5531] ops_exit_list+0x125/0x170 [ 3065.991995][ T5531] cleanup_net+0x4ee/0xb10 [ 3065.996439][ T5531] ? unregister_pernet_device+0x80/0x80 [ 3066.002015][ T5531] ? _raw_spin_unlock_irq+0x23/0x50 [ 3066.007240][ T5531] process_one_work+0x99a/0x15e0 [ 3066.012212][ T5531] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 3066.017639][ T5531] ? spin_bug+0x1c0/0x1c0 [ 3066.021993][ T5531] ? _raw_spin_lock_irq+0x45/0x50 [ 3066.027042][ T5531] worker_thread+0x67d/0x10c0 [ 3066.031749][ T5531] ? process_one_work+0x15e0/0x15e0 [ 3066.036973][ T5531] kthread+0x344/0x440 [ 3066.041077][ T5531] ? kthread_complete_and_exit+0x40/0x40 [ 3066.046740][ T5531] ret_from_fork+0x1f/0x30 [ 3066.051198][ T5531] [ 3066.054464][ T5531] Kernel Offset: disabled [ 3066.059014][ T5531] Rebooting in 86400 seconds..