ase bring it up to get a fully working HSR network [ 2207.515069][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2207.533316][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2207.554474][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2207.564062][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2207.572924][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2207.593063][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2207.602077][T15119] bridge0: port 1(bridge_slave_0) entered blocking state [ 2207.609277][T15119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2207.619890][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2207.635452][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2207.654241][T15119] bridge0: port 2(bridge_slave_1) entered blocking state [ 2207.661258][T25843] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2207.661292][T25843] CPU: 1 PID: 25843 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2207.661318][T25843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2207.661332][T25843] Call Trace: [ 2207.661340][T25843] [ 2207.661350][T25843] dump_stack_lvl+0xd1/0x138 [ 2207.671575][T15119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2207.681895][T25843] dump_header+0x10b/0x85f [ 2207.681929][T25843] oom_kill_process.cold+0x10/0x15 [ 2207.719556][T25843] out_of_memory+0x35c/0x14a0 [ 2207.724294][T25843] ? oom_killer_disable+0x280/0x280 [ 2207.729555][T25843] mem_cgroup_out_of_memory+0x206/0x270 [ 2207.730377][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2207.735125][T25843] ? mem_cgroup_margin+0x130/0x130 [ 2207.735183][T25843] memory_max_write+0x2f9/0x3c0 [ 2207.753019][T25843] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2207.759127][T25843] ? lock_release+0x810/0x810 [ 2207.763846][T25843] cgroup_file_write+0x1e2/0x770 [ 2207.768822][T25843] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2207.774925][T25843] ? kill_css+0x370/0x370 [ 2207.779289][T25843] ? __virt_addr_valid+0x61/0x2e0 [ 2207.780621][T25660] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2207.784344][T25843] ? kill_css+0x370/0x370 [ 2207.795259][T25660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2207.798973][T25843] kernfs_fop_write_iter+0x3f1/0x600 [ 2207.799029][T25843] vfs_write+0x9ed/0xdd0 [ 2207.799063][T25843] ? kernel_write+0x630/0x630 [ 2207.799098][T25843] ? __fget_files+0x26a/0x440 [ 2207.799143][T25843] ksys_write+0x12b/0x250 [ 2207.799172][T25843] ? __ia32_sys_read+0xb0/0xb0 [ 2207.799203][T25843] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2207.843407][T25843] do_syscall_64+0x39/0xb0 [ 2207.847870][T25843] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2207.853817][T25843] RIP: 0033:0x7f707588c0c9 [ 2207.858280][T25843] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2207.877918][T25843] RSP: 002b:00007f7076621168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2207.886365][T25843] RAX: ffffffffffffffda RBX: 00007f70759ac050 RCX: 00007f707588c0c9 [ 2207.894367][T25843] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2207.902365][T25843] RBP: 00007f70758e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2207.910450][T25843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2207.918443][T25843] R13: 00007ffe71eb21bf R14: 00007f7076621300 R15: 0000000000022000 [ 2207.926470][T25843] [ 2207.940829][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2207.967966][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2207.992153][T25843] memory: usage 10668kB, limit 0kB, failcnt 726 [ 2207.997850][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2208.004326][T25843] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2208.017991][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2208.021967][T25843] Memory cgroup stats for /syz1: [ 2208.026151][T25843] anon 118784 [ 2208.026151][T25843] file 10444800 [ 2208.026151][T25843] kernel 360448 [ 2208.026151][T25843] kernel_stack 98304 [ 2208.026151][T25843] pagetables 81920 [ 2208.026151][T25843] sec_pagetables 0 [ 2208.026151][T25843] percpu 64 [ 2208.026151][T25843] sock 0 [ 2208.026151][T25843] vmalloc 0 [ 2208.026151][T25843] shmem 10444800 [ 2208.026151][T25843] zswap 0 [ 2208.026151][T25843] zswapped 0 [ 2208.026151][T25843] file_mapped 397312 [ 2208.026151][T25843] file_dirty 0 [ 2208.026151][T25843] file_writeback 0 [ 2208.026151][T25843] swapcached 0 [ 2208.026151][T25843] anon_thp 0 [ 2208.026151][T25843] file_thp 0 [ 2208.026151][T25843] shmem_thp 0 [ 2208.026151][T25843] inactive_anon 118784 [ 2208.026151][T25843] active_anon 10444800 [ 2208.026151][T25843] inactive_file 0 [ 2208.026151][T25843] active_file 0 [ 2208.026151][T25843] unevictable 0 [ 2208.026151][T25843] slab_reclaimable 42336 [ 2208.026151][T25843] slab_unreclaimable 107208 [ 2208.026151][T25843] slab 149544 [ 2208.148831][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2208.173145][T25843] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=25638,uid=0 [ 2208.178503][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2208.189422][T25843] Memory cgroup out of memory: Killed process 25638 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2208.233749][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2208.258227][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2208.266741][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2208.290632][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2208.298926][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2208.587402][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2208.594886][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2208.614217][T25660] 8021q: adding VLAN 0 to HW filter on device batadv0 10:59:18 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(r2, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 10:59:18 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(r3, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r4, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 10:59:18 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x3c, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:59:18 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2208.639996][T25667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2208.649939][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2208.659045][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2208.699378][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2208.728432][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2208.822224][T25660] device veth0_vlan entered promiscuous mode [ 2208.851367][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2208.873888][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2208.904062][T25660] device veth1_vlan entered promiscuous mode [ 2208.929168][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2208.937900][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2208.967749][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2209.017728][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2209.046789][T25660] device veth0_macvtap entered promiscuous mode [ 2209.078146][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2209.097491][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2209.109170][T25660] device veth1_macvtap entered promiscuous mode [ 2209.140257][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2209.167891][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2209.183120][T25660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2209.217120][T25660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2209.249201][T25660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2209.294511][T25660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2209.333806][T25660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2209.359499][T25660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2209.403707][T25660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2209.424110][T25660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2209.449309][T25660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2209.462785][T25660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2209.475747][T25660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2209.510077][T25660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2209.537618][T25660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2209.558664][T25660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2209.567726][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2209.593807][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2209.617818][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2209.637535][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2209.649319][T25660] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2209.677056][T25660] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2209.706224][T25660] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2209.736680][T25660] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2209.900899][T13808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2209.937101][T13808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2209.953713][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2210.020647][ T5247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2210.059081][ T5247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2210.069430][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2210.089178][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2210.128028][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2210.193471][T25667] device veth0_vlan entered promiscuous mode [ 2210.237343][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2210.245712][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2210.260901][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2210.268926][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2210.290349][T25667] device veth1_vlan entered promiscuous mode [ 2210.361936][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2210.370896][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2210.388135][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2210.396714][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2210.429853][T25667] device veth0_macvtap entered promiscuous mode [ 2210.450488][T25667] device veth1_macvtap entered promiscuous mode [ 2210.493451][T25667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2210.533362][T25667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2210.573884][T25667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2210.597337][T25667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2210.617000][T25667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2210.637113][T25667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2210.659157][T25667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2210.687379][T25667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2210.708729][T25667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2210.716928][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2210.725771][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2210.748436][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2210.768130][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2210.799539][T25667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2210.830954][T25667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2210.864228][T25667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2210.895174][T25667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2210.907326][T25667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2210.929081][T25667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2210.945546][T25667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2210.968880][T10407] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2210.978735][T10407] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2210.986776][T10407] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2210.994399][T25667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2211.005758][T10407] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2211.013313][T10407] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2211.020863][T10407] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2211.073772][T25667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2211.102445][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2211.118767][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2211.140230][T25667] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2211.176251][T25667] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2211.186263][T25667] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2211.195115][T25667] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2211.432787][T13808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2211.501840][T13808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2211.553748][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2211.563670][ T6761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2211.604281][ T6761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2211.671455][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2211.985088][T25892] chnl_net:caif_netlink_parms(): no params data found [ 2212.015719][T25903] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2212.032480][T25903] CPU: 0 PID: 25903 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2212.042947][T25903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2212.053033][T25903] Call Trace: [ 2212.056342][T25903] [ 2212.059301][T25903] dump_stack_lvl+0xd1/0x138 [ 2212.063940][T25903] dump_header+0x10b/0x85f [ 2212.068393][T25903] oom_kill_process.cold+0x10/0x15 [ 2212.073543][T25903] out_of_memory+0x35c/0x14a0 [ 2212.078276][T25903] ? oom_killer_disable+0x280/0x280 [ 2212.083532][T25903] ? mark_held_locks+0x9f/0xe0 [ 2212.088327][T25903] mem_cgroup_out_of_memory+0x206/0x270 [ 2212.093907][T25903] ? mem_cgroup_margin+0x130/0x130 [ 2212.099062][T25903] memory_max_write+0x2f9/0x3c0 [ 2212.103955][T25903] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2212.110040][T25903] ? lock_release+0x810/0x810 [ 2212.114731][T25903] cgroup_file_write+0x1e2/0x770 [ 2212.119697][T25903] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2212.125788][T25903] ? kill_css+0x370/0x370 [ 2212.130149][T25903] ? __virt_addr_valid+0x61/0x2e0 [ 2212.135210][T25903] ? kill_css+0x370/0x370 [ 2212.139558][T25903] kernfs_fop_write_iter+0x3f1/0x600 [ 2212.144876][T25903] vfs_write+0x9ed/0xdd0 [ 2212.149145][T25903] ? kernel_write+0x630/0x630 [ 2212.153843][T25903] ? __fget_files+0x26a/0x440 [ 2212.158550][T25903] ksys_write+0x12b/0x250 [ 2212.162893][T25903] ? __ia32_sys_read+0xb0/0xb0 [ 2212.167683][T25903] do_syscall_64+0x39/0xb0 [ 2212.172129][T25903] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2212.178039][T25903] RIP: 0033:0x7f76bf08c0c9 [ 2212.182465][T25903] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2212.202088][T25903] RSP: 002b:00007f76bdbfe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2212.210513][T25903] RAX: ffffffffffffffda RBX: 00007f76bf1abf80 RCX: 00007f76bf08c0c9 [ 2212.218491][T25903] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2212.226469][T25903] RBP: 00007f76bf0e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2212.234447][T25903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2212.242427][T25903] R13: 00007ffd9ec734ff R14: 00007f76bdbfe300 R15: 0000000000022000 [ 2212.250426][T25903] [ 2212.287464][T10407] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2212.296414][T10407] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2212.304801][T10407] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2212.313076][T25903] memory: usage 10640kB, limit 0kB, failcnt 574 [ 2212.320492][T25903] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2212.334565][T10407] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2212.346936][T10407] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2212.354560][T10407] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2212.363752][T25903] Memory cgroup stats for /syz5: [ 2212.366865][T25903] anon 114688 [ 2212.366865][T25903] file 10448896 [ 2212.366865][T25903] kernel 319488 [ 2212.366865][T25903] kernel_stack 65536 [ 2212.366865][T25903] pagetables 81920 [ 2212.366865][T25903] sec_pagetables 0 [ 2212.366865][T25903] percpu 64 [ 2212.366865][T25903] sock 0 [ 2212.366865][T25903] vmalloc 0 [ 2212.366865][T25903] shmem 10448896 [ 2212.366865][T25903] zswap 0 [ 2212.366865][T25903] zswapped 0 [ 2212.366865][T25903] file_mapped 270336 [ 2212.366865][T25903] file_dirty 0 [ 2212.366865][T25903] file_writeback 0 [ 2212.366865][T25903] swapcached 0 [ 2212.366865][T25903] anon_thp 0 [ 2212.366865][T25903] file_thp 0 [ 2212.366865][T25903] shmem_thp 0 [ 2212.366865][T25903] inactive_anon 114688 [ 2212.366865][T25903] active_anon 10448896 [ 2212.366865][T25903] inactive_file 0 [ 2212.366865][T25903] active_file 0 [ 2212.366865][T25903] unevictable 0 [ 2212.366865][T25903] slab_reclaimable 42720 [ 2212.366865][T25903] slab_unreclaimable 99816 [ 2212.366865][T25903] slab 142536 [ 2212.479275][T25903] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=25900,uid=0 [ 2212.502468][T25903] Memory cgroup out of memory: Killed process 25900 (syz-executor.5) total-vm:54540kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 10:59:22 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 10:59:22 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x60, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:59:22 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(r2, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 10:59:22 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) getpid() openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2212.592632][T25892] bridge0: port 1(bridge_slave_0) entered blocking state [ 2212.602155][T25892] bridge0: port 1(bridge_slave_0) entered disabled state [ 2212.611231][T25892] device bridge_slave_0 entered promiscuous mode 10:59:22 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x61, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:59:22 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) getpid() openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2212.673278][T25892] bridge0: port 2(bridge_slave_1) entered blocking state [ 2212.701155][T25892] bridge0: port 2(bridge_slave_1) entered disabled state [ 2212.708744][T25667] syz-executor.5 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=0 [ 2212.738992][T25892] device bridge_slave_1 entered promiscuous mode [ 2212.781619][T25667] CPU: 0 PID: 25667 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2212.792081][T25667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2212.802167][T25667] Call Trace: [ 2212.805464][T25667] [ 2212.808420][T25667] dump_stack_lvl+0xd1/0x138 [ 2212.813046][T25667] dump_header+0x10b/0x85f [ 2212.817488][T25667] oom_kill_process.cold+0x10/0x15 [ 2212.822634][T25667] out_of_memory+0x35c/0x14a0 [ 2212.827365][T25667] ? find_held_lock+0x2d/0x110 [ 2212.832170][T25667] ? oom_killer_disable+0x280/0x280 [ 2212.837415][T25667] ? find_held_lock+0x2d/0x110 [ 2212.842231][T25667] mem_cgroup_out_of_memory+0x206/0x270 [ 2212.847822][T25667] ? mem_cgroup_margin+0x130/0x130 [ 2212.852980][T25667] ? lock_downgrade+0x6e0/0x6e0 [ 2212.857878][T25667] try_charge_memcg+0xefb/0x12f0 [ 2212.862864][T25667] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2212.868875][T25667] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2212.874623][T25667] ? lock_downgrade+0x6e0/0x6e0 10:59:22 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) getpid() openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 10:59:22 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x62, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2212.879500][T25667] ? lock_downgrade+0x6e0/0x6e0 [ 2212.884373][T25667] ? rcu_read_unlock+0x9/0x60 [ 2212.889100][T25667] obj_cgroup_charge+0x2af/0x5e0 [ 2212.894075][T25667] __kmem_cache_alloc_node+0xb2/0x430 [ 2212.899476][T25667] ? kvmalloc_node+0xa2/0x1a0 [ 2212.904194][T25667] ? kvmalloc_node+0xa2/0x1a0 [ 2212.908912][T25667] __kmalloc_node+0x4d/0xd0 [ 2212.913469][T25667] kvmalloc_node+0xa2/0x1a0 [ 2212.918006][T25667] xt_alloc_table_info+0x40/0xa0 [ 2212.922984][T25667] do_ipt_set_ctl+0x514/0xb10 10:59:22 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) getpid() openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2212.927695][T25667] ? trace_contention_end+0x153/0x1e0 [ 2212.933114][T25667] ? __mutex_lock+0x231/0x1360 [ 2212.937913][T25667] ? compat_do_replace.constprop.0+0x400/0x400 [ 2212.944104][T25667] ? do_ip_setsockopt+0x231/0x3a10 [ 2212.949247][T25667] ? wait_for_completion_io_timeout+0x20/0x20 [ 2212.955387][T25667] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2212.960817][T25667] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2212.966828][T25667] nf_setsockopt+0x87/0xe0 [ 2212.971272][T25667] ip_setsockopt+0xf2/0x110 [ 2212.975813][T25667] tcp_setsockopt+0x9f/0x100 [ 2212.980448][T25667] ? sock_common_recvmsg+0x190/0x190 [ 2212.985760][T25667] __sys_setsockopt+0x2c6/0x5b0 [ 2212.990659][T25667] ? __ia32_sys_recv+0x100/0x100 [ 2212.995639][T25667] ? up_write+0x520/0x520 [ 2213.000010][T25667] ? handle_mm_fault+0x25b/0x850 [ 2213.005005][T25667] __x64_sys_setsockopt+0xbe/0x160 [ 2213.010171][T25667] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2213.016097][T25667] do_syscall_64+0x39/0xb0 [ 2213.020549][T25667] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2213.026471][T25667] RIP: 0033:0x7f76bf08d71a [ 2213.030906][T25667] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2213.050544][T25667] RSP: 002b:00007ffd9ec73068 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2213.058990][T25667] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f76bf08d71a [ 2213.066991][T25667] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 2213.074987][T25667] RBP: 00007ffd9ec73090 R08: 00000000000002d8 R09: ffffffffff000000 [ 2213.082984][T25667] R10: 00007f76bf185d80 R11: 0000000000000206 R12: 00007ffd9ec730f0 [ 2213.087216][T19460] Bluetooth: hci1: command 0x0409 tx timeout [ 2213.090962][T25667] R13: 0000000000000003 R14: 00007ffd9ec7308c R15: 00007f76bf185d20 [ 2213.091002][T25667] [ 2213.179322][T25667] memory: usage 10380kB, limit 0kB, failcnt 593 [ 2213.181649][T25892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2213.185594][T25667] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2213.201631][T25667] Memory cgroup stats for /syz5: [ 2213.201816][T25667] anon 45056 [ 2213.201816][T25667] file 10448896 [ 2213.201816][T25667] kernel 135168 [ 2213.201816][T25667] kernel_stack 0 [ 2213.201816][T25667] pagetables 8192 [ 2213.201816][T25667] sec_pagetables 0 [ 2213.201816][T25667] percpu 64 [ 2213.201816][T25667] sock 0 [ 2213.201816][T25667] vmalloc 0 [ 2213.201816][T25667] shmem 10448896 [ 2213.201816][T25667] zswap 0 [ 2213.201816][T25667] zswapped 0 [ 2213.201816][T25667] file_mapped 245760 [ 2213.201816][T25667] file_dirty 0 [ 2213.201816][T25667] file_writeback 0 [ 2213.201816][T25667] swapcached 0 [ 2213.201816][T25667] anon_thp 0 [ 2213.201816][T25667] file_thp 0 [ 2213.201816][T25667] shmem_thp 0 [ 2213.201816][T25667] inactive_anon 45056 [ 2213.201816][T25667] active_anon 10448896 [ 2213.201816][T25667] inactive_file 0 [ 2213.201816][T25667] active_file 0 [ 2213.201816][T25667] unevictable 0 [ 2213.201816][T25667] slab_reclaimable 37784 [ 2213.201816][T25667] slab_unreclaimable 74584 [ 2213.201816][T25667] slab 112368 [ 2213.307035][T25667] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=25667,uid=0 [ 2213.378298][T25667] Memory cgroup out of memory: Killed process 25667 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2213.403274][T25892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2213.592899][T25892] team0: Port device team_slave_0 added [ 2213.685528][T25892] team0: Port device team_slave_1 added [ 2213.797077][T25892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2213.804068][T25892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2213.830220][T25892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2213.865979][T25892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2213.888885][T25892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2213.950452][T25892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2214.020549][T25906] chnl_net:caif_netlink_parms(): no params data found [ 2214.084495][T25892] device hsr_slave_0 entered promiscuous mode [ 2214.096346][T25892] device hsr_slave_1 entered promiscuous mode [ 2214.105952][T25892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2214.114403][T25892] Cannot create hsr debugfs directory [ 2214.145826][T21387] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2214.263511][T21387] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2214.387803][T21387] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2214.400423][T25906] bridge0: port 1(bridge_slave_0) entered blocking state [ 2214.408272][T25906] bridge0: port 1(bridge_slave_0) entered disabled state [ 2214.416455][T25906] device bridge_slave_0 entered promiscuous mode [ 2214.417042][T19460] Bluetooth: hci2: command 0x0409 tx timeout [ 2214.476608][T21387] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2214.522366][T25906] bridge0: port 2(bridge_slave_1) entered blocking state [ 2214.537719][T25906] bridge0: port 2(bridge_slave_1) entered disabled state [ 2214.556000][T25906] device bridge_slave_1 entered promiscuous mode [ 2214.645146][T25906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2214.879803][T25906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2215.113045][T21387] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2215.128765][T19460] Bluetooth: hci1: command 0x041b tx timeout [ 2215.182241][T25906] team0: Port device team_slave_0 added [ 2215.201078][T25906] team0: Port device team_slave_1 added [ 2215.328703][T19460] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2215.336611][T19460] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2215.345228][T21387] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2215.345393][T19460] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2215.363783][T19460] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2215.371746][T19460] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2215.417497][T25906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2215.424479][T25906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2215.475323][T25906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2215.547915][T21387] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2215.582467][T25906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2215.596143][T25906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2215.647298][T25906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2215.760987][T21387] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2215.937447][T25892] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2215.953703][T25906] device hsr_slave_0 entered promiscuous mode [ 2215.961082][T25906] device hsr_slave_1 entered promiscuous mode [ 2215.968467][T25906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2215.976053][T25906] Cannot create hsr debugfs directory [ 2216.000275][T25892] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2216.088222][T25892] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2216.136025][T25892] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2216.203796][T21387] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2216.331979][T21387] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2216.453579][T21387] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2216.487377][T10407] Bluetooth: hci2: command 0x041b tx timeout [ 2216.573722][T21387] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2216.633362][T25959] chnl_net:caif_netlink_parms(): no params data found [ 2216.718408][T25892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2216.785814][T25892] 8021q: adding VLAN 0 to HW filter on device team0 [ 2216.819809][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2216.828607][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2216.908675][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2216.919389][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2216.938206][T10149] bridge0: port 1(bridge_slave_0) entered blocking state [ 2216.945339][T10149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2216.969355][T25959] bridge0: port 1(bridge_slave_0) entered blocking state [ 2216.976476][T25959] bridge0: port 1(bridge_slave_0) entered disabled state [ 2216.999081][T25959] device bridge_slave_0 entered promiscuous mode [ 2217.097814][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2217.106297][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2217.125425][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2217.138352][T19257] bridge0: port 2(bridge_slave_1) entered blocking state [ 2217.145479][T19257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2217.165835][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2217.176129][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2217.196234][T25959] bridge0: port 2(bridge_slave_1) entered blocking state [ 2217.207356][T10407] Bluetooth: hci1: command 0x040f tx timeout [ 2217.213896][T25959] bridge0: port 2(bridge_slave_1) entered disabled state [ 2217.228355][T25959] device bridge_slave_1 entered promiscuous mode [ 2217.447296][T10407] Bluetooth: hci4: command 0x0409 tx timeout [ 2217.607673][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2217.680720][T25959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2217.704417][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2217.717627][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2217.762151][T25892] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2217.796701][T25892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2217.830229][T25959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2217.909751][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2217.928959][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2217.947761][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2217.961427][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2217.985138][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2218.137965][T25959] team0: Port device team_slave_0 added [ 2218.171088][T25959] team0: Port device team_slave_1 added [ 2218.330687][T25959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2218.338120][T25959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2218.417006][T25959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2218.440779][T25959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2218.457780][T25959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2218.507058][T25959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2218.567302][T10407] Bluetooth: hci2: command 0x040f tx timeout [ 2218.733898][T25892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2218.777819][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2218.785958][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2218.950372][T25959] device hsr_slave_0 entered promiscuous mode [ 2218.977914][T25959] device hsr_slave_1 entered promiscuous mode [ 2218.991687][T25959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2219.016750][T25959] Cannot create hsr debugfs directory [ 2219.175642][T25906] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2219.185753][T25906] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2219.212942][T25906] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2219.259075][T25906] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2219.289861][T10407] Bluetooth: hci1: command 0x0419 tx timeout [ 2219.527060][T10407] Bluetooth: hci4: command 0x041b tx timeout [ 2219.537809][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2219.548075][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2219.645940][T25906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2219.748026][T25906] 8021q: adding VLAN 0 to HW filter on device team0 [ 2219.755064][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2219.764208][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2219.777684][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2219.785534][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2219.809138][T25892] device veth0_vlan entered promiscuous mode [ 2219.887362][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2219.895232][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2219.907999][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2219.916659][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2219.925726][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 2219.932885][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2219.952515][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2219.968551][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2219.986467][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 2219.993625][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2220.012791][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2220.031986][T25892] device veth1_vlan entered promiscuous mode [ 2220.198971][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2220.208502][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2220.216685][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2220.232669][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2220.309688][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2220.319158][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2220.353508][T25906] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2220.387100][T25906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2220.413837][T25892] device veth0_macvtap entered promiscuous mode [ 2220.457801][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2220.466259][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2220.476756][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2220.485516][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2220.494372][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2220.503420][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2220.520205][T25892] device veth1_macvtap entered promiscuous mode [ 2220.561945][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2220.574159][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2220.587865][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2220.618149][T21387] device hsr_slave_0 left promiscuous mode [ 2220.625177][T21387] device hsr_slave_1 left promiscuous mode [ 2220.640153][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2220.648203][T10407] Bluetooth: hci2: command 0x0419 tx timeout [ 2220.667134][T21387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2220.679824][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2220.701648][T21387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2220.716094][T21387] device bridge_slave_1 left promiscuous mode [ 2220.723842][T21387] bridge0: port 2(bridge_slave_1) entered disabled state [ 2220.734822][T21387] device bridge_slave_0 left promiscuous mode [ 2220.741715][T21387] bridge0: port 1(bridge_slave_0) entered disabled state [ 2220.754738][T21387] device hsr_slave_0 left promiscuous mode [ 2220.761411][T21387] device hsr_slave_1 left promiscuous mode [ 2220.768875][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2220.776421][T21387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2220.785148][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2220.792888][T21387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2220.808470][T21387] device bridge_slave_1 left promiscuous mode [ 2220.814628][T21387] bridge0: port 2(bridge_slave_1) entered disabled state [ 2220.822966][T21387] device bridge_slave_0 left promiscuous mode [ 2220.830584][T21387] bridge0: port 1(bridge_slave_0) entered disabled state [ 2220.842005][T21387] device hsr_slave_0 left promiscuous mode [ 2220.852222][T21387] device hsr_slave_1 left promiscuous mode [ 2220.859084][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2220.866507][T21387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2220.877736][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2220.885181][T21387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2220.896835][T21387] device bridge_slave_1 left promiscuous mode [ 2220.904329][T21387] bridge0: port 2(bridge_slave_1) entered disabled state [ 2220.913445][T21387] device bridge_slave_0 left promiscuous mode [ 2220.920382][T21387] bridge0: port 1(bridge_slave_0) entered disabled state [ 2220.939213][T21387] device veth1_macvtap left promiscuous mode [ 2220.945252][T21387] device veth0_macvtap left promiscuous mode [ 2220.953255][T21387] device veth1_vlan left promiscuous mode [ 2220.959279][T21387] device veth0_vlan left promiscuous mode [ 2220.966072][T21387] device veth1_macvtap left promiscuous mode [ 2220.972632][T21387] device veth0_macvtap left promiscuous mode [ 2220.978867][T21387] device veth1_vlan left promiscuous mode [ 2220.984652][T21387] device veth0_vlan left promiscuous mode [ 2220.993129][T21387] device veth1_macvtap left promiscuous mode [ 2220.999472][T21387] device veth0_macvtap left promiscuous mode [ 2221.005600][T21387] device veth1_vlan left promiscuous mode [ 2221.011804][T21387] device veth0_vlan left promiscuous mode [ 2221.361109][T21387] team0 (unregistering): Port device team_slave_1 removed [ 2221.376390][T21387] team0 (unregistering): Port device team_slave_0 removed [ 2221.389780][T21387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2221.405482][T21387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2221.473340][T21387] bond0 (unregistering): Released all slaves [ 2221.529077][ T1201] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.535367][ T1201] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.607382][T10407] Bluetooth: hci4: command 0x040f tx timeout [ 2221.635520][T21387] team0 (unregistering): Port device team_slave_1 removed [ 2221.655154][T21387] team0 (unregistering): Port device team_slave_0 removed [ 2221.671215][T21387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2221.685883][T21387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2221.756483][T21387] bond0 (unregistering): Released all slaves [ 2221.868774][T21387] team0 (unregistering): Port device team_slave_1 removed [ 2221.884792][T21387] team0 (unregistering): Port device team_slave_0 removed [ 2221.899328][T21387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2221.915785][T21387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2221.985660][T21387] bond0 (unregistering): Released all slaves [ 2222.111321][T25892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2222.125647][T25892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2222.137641][T25892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2222.157200][T25892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2222.189970][T25892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2222.239364][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2222.249736][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2222.260949][T25892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2222.287029][T25892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2222.296874][T25892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2222.336989][T25892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2222.356810][T25892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2222.381837][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2222.398400][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2222.419858][T25892] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2222.437033][T25892] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2222.445756][T25892] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2222.457230][T25892] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2222.496688][T25906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2222.553865][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2222.564036][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2222.575280][T25959] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2222.626926][T25959] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2222.647984][T25959] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2222.673246][T25959] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2222.713498][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2222.733473][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2222.766110][T13787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2222.804866][T25906] device veth0_vlan entered promiscuous mode [ 2222.814010][T13787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2222.841861][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2222.850062][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2222.858823][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2222.880540][T25906] device veth1_vlan entered promiscuous mode [ 2222.896235][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2222.909631][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2222.919571][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2222.937831][ T5470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2222.961733][ T5470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2223.023019][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2223.042478][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2223.057742][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2223.066318][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2223.104629][T25906] device veth0_macvtap entered promiscuous mode [ 2223.119550][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2223.159549][T25906] device veth1_macvtap entered promiscuous mode [ 2223.214848][T25959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2223.256922][T25906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2223.355186][T25906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2223.420771][T25906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2223.461600][T25906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2223.487094][T25906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2223.507102][T25906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2223.546922][T25906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2223.570792][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2223.588061][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2223.619540][T25906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2223.647066][T25906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2223.671740][T26065] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2223.682229][T26065] CPU: 1 PID: 26065 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2223.684850][T25906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2223.692653][T26065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2223.692670][T26065] Call Trace: [ 2223.692678][T26065] [ 2223.692689][T26065] dump_stack_lvl+0xd1/0x138 [ 2223.692728][T26065] dump_header+0x10b/0x85f [ 2223.692757][T26065] oom_kill_process.cold+0x10/0x15 [ 2223.692808][T26065] out_of_memory+0x35c/0x14a0 [ 2223.692846][T26065] ? lockdep_hardirqs_on+0x7d/0x100 [ 2223.692881][T26065] ? oom_killer_disable+0x280/0x280 [ 2223.692917][T26065] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 2223.692965][T26065] mem_cgroup_out_of_memory+0x206/0x270 [ 2223.692999][T26065] ? mem_cgroup_margin+0x130/0x130 [ 2223.693064][T26065] memory_max_write+0x2f9/0x3c0 [ 2223.693096][T26065] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2223.693130][T26065] ? lock_release+0x810/0x810 [ 2223.693162][T26065] cgroup_file_write+0x1e2/0x770 [ 2223.693195][T26065] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2223.705328][T10407] Bluetooth: hci4: command 0x0419 tx timeout [ 2223.713700][T26065] ? kill_css+0x370/0x370 [ 2223.713753][T26065] ? kill_css+0x370/0x370 [ 2223.713783][T26065] kernfs_fop_write_iter+0x3f1/0x600 [ 2223.811784][T26065] vfs_write+0x9ed/0xdd0 [ 2223.816075][T26065] ? kernel_write+0x630/0x630 [ 2223.820779][T26065] ? __fget_files+0x26a/0x440 [ 2223.825479][T26065] ksys_write+0x12b/0x250 [ 2223.829839][T26065] ? __ia32_sys_read+0xb0/0xb0 [ 2223.834615][T26065] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2223.840529][T26065] do_syscall_64+0x39/0xb0 [ 2223.844972][T26065] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2223.850913][T26065] RIP: 0033:0x7fa0e8c8c0c9 [ 2223.855342][T26065] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2223.874970][T26065] RSP: 002b:00007fa0e99d0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2223.883397][T26065] RAX: ffffffffffffffda RBX: 00007fa0e8dabf80 RCX: 00007fa0e8c8c0c9 [ 2223.891382][T26065] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2223.899358][T26065] RBP: 00007fa0e8ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2223.907331][T26065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2223.915307][T26065] R13: 00007fff9204e75f R14: 00007fa0e99d0300 R15: 0000000000022000 [ 2223.923306][T26065] [ 2223.957069][T25906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2223.962965][T26065] memory: usage 10620kB, limit 0kB, failcnt 795 [ 2223.966931][T25906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2223.984160][T25906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2223.992659][T26065] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2224.005949][T26065] Memory cgroup stats for /syz4: [ 2224.018710][T25906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2224.031157][T26065] anon 114688 [ 2224.031157][T26065] file 10448896 [ 2224.031157][T26065] kernel 294912 [ 2224.031157][T26065] kernel_stack 65536 [ 2224.031157][T26065] pagetables 77824 [ 2224.031157][T26065] sec_pagetables 0 [ 2224.031157][T26065] percpu 64 [ 2224.031157][T26065] sock 0 [ 2224.031157][T26065] vmalloc 0 [ 2224.031157][T26065] shmem 10448896 [ 2224.031157][T26065] zswap 0 [ 2224.031157][T26065] zswapped 0 [ 2224.031157][T26065] file_mapped 335872 [ 2224.031157][T26065] file_dirty 0 [ 2224.031157][T26065] file_writeback 0 [ 2224.031157][T26065] swapcached 0 [ 2224.031157][T26065] anon_thp 0 [ 2224.031157][T26065] file_thp 0 [ 2224.031157][T26065] shmem_thp 0 [ 2224.031157][T26065] inactive_anon 114688 [ 2224.031157][T26065] active_anon 10448896 [ 2224.031157][T26065] inactive_file 0 [ 2224.031157][T26065] active_file 0 [ 2224.031157][T26065] unevictable 0 [ 2224.031157][T26065] slab_reclaimable 54224 [ 2224.031157][T26065] slab_unreclaimable 73104 [ 2224.031157][T26065] slab 127328 [ 2224.045049][T25959] 8021q: adding VLAN 0 to HW filter on device team0 [ 2224.137183][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2224.145711][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2224.156135][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2224.165317][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2224.190857][T25906] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2224.208593][T25906] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2224.222959][T25906] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2224.234781][T25906] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2224.268246][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2224.273485][T26065] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=26064,uid=0 [ 2224.277659][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2224.300322][T26065] Memory cgroup out of memory: Killed process 26065 (syz-executor.4) total-vm:54540kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:59:34 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(r2, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r3, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 10:59:34 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) getpid() openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2224.318804][ T8507] bridge0: port 1(bridge_slave_0) entered blocking state [ 2224.325920][ T8507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2224.422444][T25892] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2224.437310][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2224.445886][T25892] CPU: 0 PID: 25892 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2224.452319][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2224.456316][T25892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2224.474455][T25892] Call Trace: [ 2224.477758][T25892] [ 2224.480710][T25892] dump_stack_lvl+0xd1/0x138 [ 2224.484518][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2224.485352][T25892] dump_header+0x10b/0x85f [ 2224.493849][T21291] bridge0: port 2(bridge_slave_1) entered blocking state [ 2224.497710][T25892] oom_kill_process.cold+0x10/0x15 [ 2224.497742][T25892] out_of_memory+0x35c/0x14a0 [ 2224.504796][T21291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2224.509854][T25892] ? find_held_lock+0x2d/0x110 [ 2224.526569][T25892] ? oom_killer_disable+0x280/0x280 [ 2224.531806][T25892] ? find_held_lock+0x2d/0x110 [ 2224.531973][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2224.536597][T25892] mem_cgroup_out_of_memory+0x206/0x270 [ 2224.545440][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2224.550000][T25892] ? mem_cgroup_margin+0x130/0x130 [ 2224.550037][T25892] ? lock_downgrade+0x6e0/0x6e0 [ 2224.550080][T25892] try_charge_memcg+0xefb/0x12f0 [ 2224.550114][T25892] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2224.550140][T25892] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2224.550163][T25892] ? lock_downgrade+0x6e0/0x6e0 [ 2224.550213][T25892] obj_cgroup_charge+0x2af/0x5e0 [ 2224.550246][T25892] ? vm_area_dup+0x7d/0x380 [ 2224.550274][T25892] kmem_cache_alloc+0xb5/0x430 [ 2224.550307][T25892] vm_area_dup+0x7d/0x380 [ 2224.550333][T25892] ? copy_page_range+0x1dfe/0x3b40 [ 2224.550380][T25892] ? mas_wr_modify+0x2da/0x16d0 [ 2224.550423][T25892] ? mas_next_nentry+0x610/0xab0 [ 2224.559283][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2224.563383][T25892] ? vm_area_alloc+0x100/0x100 [ 2224.569660][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2224.573156][T25892] ? percpu_counter_add_batch+0xc1/0x180 [ 2224.649230][T25892] ? __vm_enough_memory+0x188/0x390 [ 2224.654450][T25892] ? security_vm_enough_memory_mm+0x89/0xb0 [ 2224.660347][T25892] dup_mmap+0x655/0x10b0 [ 2224.664595][T25892] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2224.669895][T25892] ? lock_downgrade+0x6e0/0x6e0 [ 2224.674752][T25892] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2224.680579][T25892] ? mm_init+0x8e0/0xc10 [ 2224.684820][T25892] copy_process+0x440f/0x7520 [ 2224.689538][T25892] ? _raw_spin_unlock+0x28/0x40 [ 2224.694395][T25892] ? wp_page_reuse+0x197/0x570 [ 2224.699197][T25892] ? __cleanup_sighand+0xb0/0xb0 [ 2224.704153][T25892] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2224.709534][T25892] ? rwlock_bug.part.0+0x90/0x90 [ 2224.714464][T25892] ? lock_chain_count+0x20/0x20 [ 2224.719316][T25892] kernel_clone+0xeb/0x990 [ 2224.723731][T25892] ? create_io_thread+0xf0/0xf0 [ 2224.728581][T25892] ? find_held_lock+0x2d/0x110 [ 2224.733383][T25892] __do_sys_clone+0xba/0x100 [ 2224.737965][T25892] ? kernel_clone+0x990/0x990 [ 2224.742652][T25892] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2224.748564][T25892] do_syscall_64+0x39/0xb0 [ 2224.753031][T25892] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2224.758922][T25892] RIP: 0033:0x7fa0e8c89dfb [ 2224.763330][T25892] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2224.782947][T25892] RSP: 002b:00007fff9204e9a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2224.791352][T25892] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa0e8c89dfb [ 2224.799324][T25892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2224.807298][T25892] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555622f400 [ 2224.815278][T25892] R10: 000055555622f6d0 R11: 0000000000000246 R12: 0000000000000001 [ 2224.823249][T25892] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff9204ea80 [ 2224.831228][T25892] [ 2224.839265][T25892] memory: usage 10420kB, limit 0kB, failcnt 828 [ 2224.845552][T25892] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2224.852616][T25892] Memory cgroup stats for /syz4: [ 2224.852775][T25892] anon 40960 [ 2224.852775][T25892] file 10448896 [ 2224.852775][T25892] kernel 180224 [ 2224.852775][T25892] kernel_stack 32768 [ 2224.852775][T25892] pagetables 16384 [ 2224.852775][T25892] sec_pagetables 0 [ 2224.852775][T25892] percpu 128 [ 2224.852775][T25892] sock 0 [ 2224.852775][T25892] vmalloc 0 [ 2224.852775][T25892] shmem 10448896 [ 2224.852775][T25892] zswap 0 [ 2224.852775][T25892] zswapped 0 [ 2224.852775][T25892] file_mapped 307200 [ 2224.852775][T25892] file_dirty 0 [ 2224.852775][T25892] file_writeback 0 [ 2224.852775][T25892] swapcached 0 [ 2224.852775][T25892] anon_thp 0 [ 2224.852775][T25892] file_thp 0 [ 2224.852775][T25892] shmem_thp 0 [ 2224.852775][T25892] inactive_anon 40960 [ 2224.852775][T25892] active_anon 10448896 [ 2224.852775][T25892] inactive_file 0 [ 2224.852775][T25892] active_file 0 [ 2224.852775][T25892] unevictable 0 [ 2224.852775][T25892] slab_reclaimable 44400 [ 2224.852775][T25892] slab_unreclaimable 65880 [ 2224.852775][T25892] slab 110280 [ 2224.867894][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2224.958053][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2224.966180][T25892] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25892,uid=0 [ 2224.966573][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2224.990515][T25892] Memory cgroup out of memory: Killed process 25892 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2225.037599][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2225.046135][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2225.080383][T25959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2225.132852][T13787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2225.143272][T13787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2225.211524][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2225.269790][ T8442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2225.290609][ T8442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2225.324508][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2225.666885][T26085] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2225.678582][T26085] CPU: 0 PID: 26085 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2225.689040][T26085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2225.699128][T26085] Call Trace: [ 2225.702436][T26085] [ 2225.705403][T26085] dump_stack_lvl+0xd1/0x138 [ 2225.710047][T26085] dump_header+0x10b/0x85f [ 2225.714505][T26085] oom_kill_process.cold+0x10/0x15 [ 2225.719656][T26085] out_of_memory+0x35c/0x14a0 [ 2225.724397][T26085] ? oom_killer_disable+0x280/0x280 [ 2225.729654][T26085] ? mark_held_locks+0x9f/0xe0 [ 2225.734465][T26085] mem_cgroup_out_of_memory+0x206/0x270 [ 2225.740060][T26085] ? mem_cgroup_margin+0x130/0x130 [ 2225.745238][T26085] memory_max_write+0x2f9/0x3c0 [ 2225.750124][T26085] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2225.756212][T26085] ? lock_release+0x810/0x810 [ 2225.760933][T26085] cgroup_file_write+0x1e2/0x770 [ 2225.765911][T26085] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2225.771991][T26085] ? kill_css+0x370/0x370 [ 2225.776349][T26085] ? kill_css+0x370/0x370 [ 2225.780692][T26085] kernfs_fop_write_iter+0x3f1/0x600 [ 2225.786005][T26085] vfs_write+0x9ed/0xdd0 [ 2225.790268][T26085] ? kernel_write+0x630/0x630 [ 2225.794981][T26085] ? __fget_files+0x26a/0x440 [ 2225.799686][T26085] ksys_write+0x12b/0x250 [ 2225.804027][T26085] ? __ia32_sys_read+0xb0/0xb0 [ 2225.808808][T26085] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2225.814737][T26085] do_syscall_64+0x39/0xb0 [ 2225.819179][T26085] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2225.825171][T26085] RIP: 0033:0x7f642ce8c0c9 [ 2225.829596][T26085] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2225.849223][T26085] RSP: 002b:00007f642dc49168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2225.857686][T26085] RAX: ffffffffffffffda RBX: 00007f642cfabf80 RCX: 00007f642ce8c0c9 [ 2225.865676][T26085] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2225.873658][T26085] RBP: 00007f642cee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2225.881638][T26085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2225.889614][T26085] R13: 00007ffdd263cebf R14: 00007f642dc49300 R15: 0000000000022000 [ 2225.897611][T26085] [ 2225.928114][T25959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2225.937460][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2225.944980][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2225.963913][T26085] memory: usage 10628kB, limit 0kB, failcnt 513 [ 2225.983759][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2225.999798][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2226.046093][T25959] device veth0_vlan entered promiscuous mode [ 2226.070736][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2226.086713][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2226.101156][T25959] device veth1_vlan entered promiscuous mode [ 2226.117938][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2226.134828][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2226.143068][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2226.151129][T26085] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2226.168994][T26085] Memory cgroup stats for /syz3: [ 2226.175015][T26085] anon 114688 [ 2226.175015][T26085] file 10436608 [ 2226.175015][T26085] kernel 319488 [ 2226.175015][T26085] kernel_stack 65536 [ 2226.175015][T26085] pagetables 81920 [ 2226.175015][T26085] sec_pagetables 0 [ 2226.175015][T26085] percpu 64 [ 2226.175015][T26085] sock 0 [ 2226.175015][T26085] vmalloc 0 [ 2226.175015][T26085] shmem 10436608 [ 2226.175015][T26085] zswap 0 [ 2226.175015][T26085] zswapped 0 [ 2226.175015][T26085] file_mapped 192512 [ 2226.175015][T26085] file_dirty 0 [ 2226.175015][T26085] file_writeback 0 [ 2226.175015][T26085] swapcached 0 [ 2226.175015][T26085] anon_thp 0 [ 2226.175015][T26085] file_thp 0 [ 2226.175015][T26085] shmem_thp 0 [ 2226.175015][T26085] inactive_anon 114688 [ 2226.175015][T26085] active_anon 10436608 [ 2226.175015][T26085] inactive_file 0 [ 2226.175015][T26085] active_file 0 [ 2226.175015][T26085] unevictable 0 [ 2226.175015][T26085] slab_reclaimable 42896 [ 2226.175015][T26085] slab_unreclaimable 99168 [ 2226.175015][T26085] slab 142064 [ 2226.305096][T25959] device veth0_macvtap entered promiscuous mode [ 2226.334105][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2226.352984][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2226.364725][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2226.381556][T25959] device veth1_macvtap entered promiscuous mode [ 2226.397361][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2226.430965][T25959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2226.437204][T26085] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=25906,uid=0 [ 2226.449296][T25959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.487484][T26085] Memory cgroup out of memory: Killed process 25906 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2226.504477][T25959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2226.504498][T25959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.504515][T25959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2226.504531][T25959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.504545][T25959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2226.504561][T25959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.506235][T25959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2226.588535][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2226.603667][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2226.615859][T25959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2226.634179][T25959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.644603][T25959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2226.666261][T25959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.677231][T25959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2226.699660][T25959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.714987][T25959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2226.726829][T25959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.748881][T25959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2226.757477][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2226.776461][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2226.842248][T25959] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2226.873559][T25959] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2226.904383][T25959] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2226.933839][T25959] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2227.071221][ T5470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2227.097476][ T5470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2227.107742][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 10:59:36 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0), 0x12) 10:59:36 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x63, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:59:36 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2227.160243][ T5470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2227.185629][ T5470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2227.224300][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2227.768591][T26110] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2227.784514][T26110] CPU: 0 PID: 26110 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2227.794974][T26110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2227.805054][T26110] Call Trace: [ 2227.808360][T26110] [ 2227.811317][T26110] dump_stack_lvl+0xd1/0x138 [ 2227.815956][T26110] dump_header+0x10b/0x85f [ 2227.820417][T26110] oom_kill_process.cold+0x10/0x15 [ 2227.825571][T26110] out_of_memory+0x35c/0x14a0 [ 2227.830295][T26110] ? lockdep_hardirqs_on+0x7d/0x100 [ 2227.835541][T26110] ? oom_killer_disable+0x280/0x280 [ 2227.840784][T26110] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 2227.846467][T26110] mem_cgroup_out_of_memory+0x206/0x270 [ 2227.852050][T26110] ? mem_cgroup_margin+0x130/0x130 [ 2227.857225][T26110] memory_max_write+0x2f9/0x3c0 [ 2227.862114][T26110] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2227.868224][T26110] ? lock_release+0x810/0x810 [ 2227.872943][T26110] cgroup_file_write+0x1e2/0x770 [ 2227.877918][T26110] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2227.884023][T26110] ? kill_css+0x370/0x370 [ 2227.888391][T26110] ? __virt_addr_valid+0x61/0x2e0 [ 2227.893472][T26110] ? kill_css+0x370/0x370 [ 2227.897940][T26110] kernfs_fop_write_iter+0x3f1/0x600 [ 2227.903278][T26110] vfs_write+0x9ed/0xdd0 [ 2227.907556][T26110] ? kernel_write+0x630/0x630 [ 2227.912276][T26110] ? __fget_files+0x26a/0x440 [ 2227.917009][T26110] ksys_write+0x12b/0x250 [ 2227.921373][T26110] ? __ia32_sys_read+0xb0/0xb0 [ 2227.926182][T26110] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2227.932119][T26110] do_syscall_64+0x39/0xb0 [ 2227.936583][T26110] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2227.942516][T26110] RIP: 0033:0x7f91c7c8c0c9 [ 2227.946962][T26110] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2227.966603][T26110] RSP: 002b:00007f91c8ad5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2227.975066][T26110] RAX: ffffffffffffffda RBX: 00007f91c7dabf80 RCX: 00007f91c7c8c0c9 [ 2227.983062][T26110] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2227.991062][T26110] RBP: 00007f91c7ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2227.999059][T26110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2228.007057][T26110] R13: 00007ffff6658daf R14: 00007f91c8ad5300 R15: 0000000000022000 [ 2228.015080][T26110] [ 2228.042073][T26110] memory: usage 10636kB, limit 0kB, failcnt 734 [ 2228.054099][T26110] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2228.064009][T26110] Memory cgroup stats for /syz1: [ 2228.073248][T26110] anon 114688 [ 2228.073248][T26110] file 10444800 [ 2228.073248][T26110] kernel 319488 [ 2228.073248][T26110] kernel_stack 65536 [ 2228.073248][T26110] pagetables 81920 [ 2228.073248][T26110] sec_pagetables 0 [ 2228.073248][T26110] percpu 64 [ 2228.073248][T26110] sock 0 [ 2228.073248][T26110] vmalloc 0 [ 2228.073248][T26110] shmem 10444800 [ 2228.073248][T26110] zswap 0 [ 2228.073248][T26110] zswapped 0 [ 2228.073248][T26110] file_mapped 397312 [ 2228.073248][T26110] file_dirty 0 [ 2228.073248][T26110] file_writeback 0 [ 2228.073248][T26110] swapcached 0 [ 2228.073248][T26110] anon_thp 0 [ 2228.073248][T26110] file_thp 0 [ 2228.073248][T26110] shmem_thp 0 [ 2228.073248][T26110] inactive_anon 110592 [ 2228.073248][T26110] active_anon 10444800 [ 2228.073248][T26110] inactive_file 0 [ 2228.073248][T26110] active_file 0 [ 2228.073248][T26110] unevictable 0 [ 2228.073248][T26110] slab_reclaimable 45808 [ 2228.073248][T26110] slab_unreclaimable 101760 [ 2228.073248][T26110] slab 147568 [ 2228.203061][T26110] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=25959,uid=0 [ 2228.227858][T26110] Memory cgroup out of memory: Killed process 25959 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2228.871639][T21387] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2229.008040][T21387] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2229.077774][T21387] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2229.181692][T21387] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2229.330304][T21387] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2229.385760][T21387] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2229.495918][T21387] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2229.586143][T21387] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2229.926194][T19460] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2229.937896][T19460] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2229.950243][T19460] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2229.967934][T19460] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2229.981543][T19460] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 10:59:40 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(r2, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 10:59:40 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(r2, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r3, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 10:59:40 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) getpid() openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 10:59:40 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x70, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:59:40 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0), 0x12) 10:59:40 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x71, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:59:40 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) getpid() openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2230.358279][T26143] chnl_net:caif_netlink_parms(): no params data found 10:59:40 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) getpid() openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 10:59:40 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x72, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:59:40 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) getpid() openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 10:59:40 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x73, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2230.991575][T26143] bridge0: port 1(bridge_slave_0) entered blocking state [ 2231.017147][T26143] bridge0: port 1(bridge_slave_0) entered disabled state [ 2231.025397][T26143] device bridge_slave_0 entered promiscuous mode [ 2231.103826][T26143] bridge0: port 2(bridge_slave_1) entered blocking state [ 2231.111545][T26143] bridge0: port 2(bridge_slave_1) entered disabled state [ 2231.133505][T26143] device bridge_slave_1 entered promiscuous mode [ 2231.261732][T26143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2231.315838][T26143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2231.424894][T26143] team0: Port device team_slave_0 added [ 2231.500155][T26143] team0: Port device team_slave_1 added [ 2231.569060][T26143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2231.576068][T26143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2231.674677][T26143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2231.721259][T26143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2231.755087][T26143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2231.827000][T26143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2231.957429][T26143] device hsr_slave_0 entered promiscuous mode [ 2231.974542][T26143] device hsr_slave_1 entered promiscuous mode [ 2232.013938][T19460] Bluetooth: hci1: command 0x0409 tx timeout [ 2232.034016][T21387] device hsr_slave_0 left promiscuous mode [ 2232.043412][T21387] device hsr_slave_1 left promiscuous mode [ 2232.054981][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2232.065649][T21387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2232.080642][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2232.091904][T21387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2232.102158][T21387] device bridge_slave_1 left promiscuous mode [ 2232.109171][T21387] bridge0: port 2(bridge_slave_1) entered disabled state [ 2232.118095][T21387] device bridge_slave_0 left promiscuous mode [ 2232.124341][T21387] bridge0: port 1(bridge_slave_0) entered disabled state [ 2232.137384][T21387] device hsr_slave_0 left promiscuous mode [ 2232.143853][T21387] device hsr_slave_1 left promiscuous mode [ 2232.150569][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2232.158060][T21387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2232.167734][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2232.175192][T21387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2232.186620][T21387] device bridge_slave_1 left promiscuous mode [ 2232.192972][T21387] bridge0: port 2(bridge_slave_1) entered disabled state [ 2232.203923][T21387] device bridge_slave_0 left promiscuous mode [ 2232.211266][T21387] bridge0: port 1(bridge_slave_0) entered disabled state [ 2232.236443][T21387] device veth1_macvtap left promiscuous mode [ 2232.246565][T21387] device veth0_macvtap left promiscuous mode [ 2232.261119][T21387] device veth1_vlan left promiscuous mode [ 2232.271199][T21387] device veth0_vlan left promiscuous mode [ 2232.283154][T21387] device veth1_macvtap left promiscuous mode [ 2232.295030][T21387] device veth0_macvtap left promiscuous mode [ 2232.306512][T21387] device veth1_vlan left promiscuous mode [ 2232.316844][T21387] device veth0_vlan left promiscuous mode [ 2232.741615][T10407] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2232.750778][T10407] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2232.759971][T10407] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2232.768333][T10407] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2232.777739][T10407] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2232.871365][T21387] team0 (unregistering): Port device team_slave_1 removed [ 2232.883750][T21387] team0 (unregistering): Port device team_slave_0 removed [ 2232.895092][T21387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2232.911986][T21387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2232.975701][T21387] bond0 (unregistering): Released all slaves [ 2233.162762][T21387] team0 (unregistering): Port device team_slave_1 removed [ 2233.199798][T21387] team0 (unregistering): Port device team_slave_0 removed [ 2233.214902][T21387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2233.232674][T21387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2233.257605][T19460] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2233.269169][T19460] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2233.279946][T19460] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2233.294503][T19460] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2233.302178][T19460] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2233.358499][T21387] bond0 (unregistering): Released all slaves [ 2234.061661][T26210] chnl_net:caif_netlink_parms(): no params data found [ 2234.087361][T19460] Bluetooth: hci1: command 0x041b tx timeout [ 2234.103191][T26207] chnl_net:caif_netlink_parms(): no params data found [ 2234.368795][T26207] bridge0: port 1(bridge_slave_0) entered blocking state [ 2234.375927][T26207] bridge0: port 1(bridge_slave_0) entered disabled state [ 2234.408218][T26207] device bridge_slave_0 entered promiscuous mode [ 2234.471694][T26207] bridge0: port 2(bridge_slave_1) entered blocking state [ 2234.497642][T26207] bridge0: port 2(bridge_slave_1) entered disabled state [ 2234.505842][T26207] device bridge_slave_1 entered promiscuous mode [ 2234.654353][T26210] bridge0: port 1(bridge_slave_0) entered blocking state [ 2234.663654][T26210] bridge0: port 1(bridge_slave_0) entered disabled state [ 2234.688273][T26210] device bridge_slave_0 entered promiscuous mode [ 2234.698438][T26207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2234.715796][T26210] bridge0: port 2(bridge_slave_1) entered blocking state [ 2234.737219][T26210] bridge0: port 2(bridge_slave_1) entered disabled state [ 2234.745486][T26210] device bridge_slave_1 entered promiscuous mode [ 2234.816201][T19460] Bluetooth: hci2: command 0x0409 tx timeout [ 2234.861993][T26207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2234.959480][T26210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2235.024787][T26210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2235.040876][T26207] team0: Port device team_slave_0 added [ 2235.055207][T26207] team0: Port device team_slave_1 added [ 2235.067876][T26143] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2235.128545][T26143] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2235.166183][T26210] team0: Port device team_slave_0 added [ 2235.180875][T26207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2235.194239][T26207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2235.230520][T26207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2235.250949][T26143] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2235.270772][T26210] team0: Port device team_slave_1 added [ 2235.277354][T26207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2235.284328][T26207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2235.319251][T26207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2235.337084][T26143] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2235.367172][T19460] Bluetooth: hci4: command 0x0409 tx timeout [ 2235.418399][T26210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2235.425393][T26210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2235.480986][T26210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2235.545837][T26210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2235.553672][T26210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2235.590097][T26210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2235.668679][T26207] device hsr_slave_0 entered promiscuous mode [ 2235.687380][T26207] device hsr_slave_1 entered promiscuous mode [ 2235.697304][T26207] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2235.704899][T26207] Cannot create hsr debugfs directory [ 2235.762322][T26210] device hsr_slave_0 entered promiscuous mode [ 2235.787980][T26210] device hsr_slave_1 entered promiscuous mode [ 2235.797435][T26210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2235.805027][T26210] Cannot create hsr debugfs directory [ 2236.002260][T26143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2236.103913][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2236.128262][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2236.169153][T19460] Bluetooth: hci1: command 0x040f tx timeout [ 2236.197229][T26143] 8021q: adding VLAN 0 to HW filter on device team0 [ 2236.247173][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2236.255878][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2236.270514][T19256] bridge0: port 1(bridge_slave_0) entered blocking state [ 2236.277691][T19256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2236.285939][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2236.295642][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2236.304596][T19256] bridge0: port 2(bridge_slave_1) entered blocking state [ 2236.311754][T19256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2236.320587][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2236.329629][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2236.408257][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2236.416310][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2236.438771][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2236.466817][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2236.501143][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2236.514368][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2236.526201][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2236.574185][T26143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2236.605361][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2236.887589][T19460] Bluetooth: hci2: command 0x041b tx timeout [ 2237.018979][T26207] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2237.102209][T26207] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2237.138272][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2237.145798][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2237.167497][T26207] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2237.206591][T26143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2237.232061][T26207] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2237.457300][T19460] Bluetooth: hci4: command 0x041b tx timeout [ 2237.539202][T26207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2237.628726][T21387] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2237.737681][T21387] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2237.764843][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2237.784089][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2237.795755][T26207] 8021q: adding VLAN 0 to HW filter on device team0 [ 2237.869754][T21387] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2237.966652][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2237.980317][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2237.989879][T21291] bridge0: port 1(bridge_slave_0) entered blocking state [ 2237.997021][T21291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2238.004874][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2238.014172][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2238.031581][T21291] bridge0: port 2(bridge_slave_1) entered blocking state [ 2238.038732][T21291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2238.056019][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2238.079964][T21387] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2238.121764][T26210] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2238.171180][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2238.180122][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2238.189506][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2238.199529][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2238.209199][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2238.223552][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2238.232326][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2238.241356][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2238.249519][T19460] Bluetooth: hci1: command 0x0419 tx timeout [ 2238.258942][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2238.311096][T26210] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2238.333653][T26207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2238.362526][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2238.397613][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2238.412991][T26143] device veth0_vlan entered promiscuous mode [ 2238.462228][T26210] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2238.487912][T26210] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2238.507323][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2238.525611][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2238.560202][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2238.568508][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2238.578019][T26143] device veth1_vlan entered promiscuous mode [ 2238.699111][T26143] device veth0_macvtap entered promiscuous mode [ 2238.728103][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2238.736266][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2238.757783][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2238.766420][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2238.839854][T26143] device veth1_macvtap entered promiscuous mode [ 2238.847586][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2238.855759][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2238.943980][T26143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2238.958926][T26143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2238.968879][T10407] Bluetooth: hci2: command 0x040f tx timeout [ 2238.975297][T26143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2238.985933][T26143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2238.996021][T26143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2239.014701][T26143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2239.035323][T26143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2239.065124][T26143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2239.076065][T26143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2239.094278][T26143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2239.105068][T26143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2239.123363][T26143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2239.148530][T26143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2239.168696][T26143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2239.176134][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2239.192778][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2239.202725][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2239.212150][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2239.238330][T26207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2239.278271][T14608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2239.285752][T14608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2239.331902][T26143] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2239.347224][T26143] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2239.355960][T26143] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2239.378110][T26143] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2239.488587][T26210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2239.527873][T19460] Bluetooth: hci4: command 0x040f tx timeout [ 2239.556739][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2239.565167][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2239.603475][T26210] 8021q: adding VLAN 0 to HW filter on device team0 [ 2239.667243][T14608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2239.676256][T14608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2239.698276][T14608] bridge0: port 1(bridge_slave_0) entered blocking state [ 2239.705404][T14608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2239.721864][T14608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2239.733497][T14608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2239.748257][T14608] bridge0: port 2(bridge_slave_1) entered blocking state [ 2239.755368][T14608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2239.800577][ T5470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2239.810881][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2239.832876][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2239.845035][ T5470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2239.858096][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2239.897752][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2239.905683][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2239.943210][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2239.954442][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2239.994894][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2240.007722][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2240.070414][ T5247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2240.080537][ T5247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2240.092273][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2240.100788][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2240.109861][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2240.119204][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2240.131408][T26210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2240.157387][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2240.200006][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2240.209056][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2240.238528][T26207] device veth0_vlan entered promiscuous mode [ 2240.248287][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2240.256093][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2240.280662][T26207] device veth1_vlan entered promiscuous mode [ 2240.440366][T26207] device veth0_macvtap entered promiscuous mode [ 2240.497203][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2240.505420][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2240.526184][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2240.535249][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2240.566925][T26207] device veth1_macvtap entered promiscuous mode [ 2240.612673][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2240.629133][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2240.640519][T26337] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2240.652007][T26337] CPU: 1 PID: 26337 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2240.662456][T26337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2240.672535][T26337] Call Trace: [ 2240.675834][T26337] [ 2240.678789][T26337] dump_stack_lvl+0xd1/0x138 [ 2240.683423][T26337] dump_header+0x10b/0x85f [ 2240.687878][T26337] oom_kill_process.cold+0x10/0x15 [ 2240.693025][T26337] out_of_memory+0x35c/0x14a0 [ 2240.697761][T26337] ? oom_killer_disable+0x280/0x280 [ 2240.703009][T26337] ? mark_held_locks+0x9f/0xe0 [ 2240.707899][T26337] mem_cgroup_out_of_memory+0x206/0x270 [ 2240.713494][T26337] ? mem_cgroup_margin+0x130/0x130 [ 2240.718676][T26337] memory_max_write+0x2f9/0x3c0 [ 2240.723567][T26337] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2240.729683][T26337] ? lock_release+0x810/0x810 [ 2240.734397][T26337] cgroup_file_write+0x1e2/0x770 [ 2240.739379][T26337] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2240.745480][T26337] ? kill_css+0x370/0x370 [ 2240.749847][T26337] ? __virt_addr_valid+0x61/0x2e0 [ 2240.754927][T26337] ? kill_css+0x370/0x370 [ 2240.759291][T26337] kernfs_fop_write_iter+0x3f1/0x600 [ 2240.764613][T26337] vfs_write+0x9ed/0xdd0 [ 2240.768870][T26337] ? kernel_write+0x630/0x630 [ 2240.773564][T26337] ? __fget_files+0x26a/0x440 [ 2240.778268][T26337] ksys_write+0x12b/0x250 [ 2240.782612][T26337] ? __ia32_sys_read+0xb0/0xb0 [ 2240.787389][T26337] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2240.793301][T26337] do_syscall_64+0x39/0xb0 [ 2240.797743][T26337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2240.803997][T26337] RIP: 0033:0x7f3c5ae8c0c9 [ 2240.808440][T26337] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2240.828146][T26337] RSP: 002b:00007f3c5bc90168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2240.836600][T26337] RAX: ffffffffffffffda RBX: 00007f3c5afabf80 RCX: 00007f3c5ae8c0c9 [ 2240.844578][T26337] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2240.852555][T26337] RBP: 00007f3c5aee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2240.860528][T26337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2240.868503][T26337] R13: 00007ffc356bdb3f R14: 00007f3c5bc90300 R15: 0000000000022000 [ 2240.876508][T26337] [ 2240.935418][T26337] memory: usage 10608kB, limit 0kB, failcnt 610 [ 2240.940787][T26207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2240.945233][T26337] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2240.968182][T26207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2240.987801][T26207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2241.022311][T26207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2241.037115][T26337] Memory cgroup stats for /syz5: [ 2241.039712][T26337] anon 110592 [ 2241.039712][T26337] file 10448896 [ 2241.039712][T26337] kernel 294912 [ 2241.039712][T26337] kernel_stack 65536 [ 2241.039712][T26337] pagetables 81920 [ 2241.039712][T26337] sec_pagetables 0 [ 2241.039712][T26337] percpu 64 [ 2241.039712][T26337] sock 0 [ 2241.039712][T26337] vmalloc 0 [ 2241.039712][T26337] shmem 10448896 [ 2241.039712][T26337] zswap 0 [ 2241.039712][T26337] zswapped 0 [ 2241.039712][T26337] file_mapped 270336 [ 2241.039712][T26337] file_dirty 0 [ 2241.039712][T26337] file_writeback 0 [ 2241.039712][T26337] swapcached 0 [ 2241.039712][T26337] anon_thp 0 [ 2241.039712][T26337] file_thp 0 [ 2241.039712][T26337] shmem_thp 0 [ 2241.039712][T26337] inactive_anon 110592 [ 2241.039712][T26337] active_anon 10448896 [ 2241.039712][T26337] inactive_file 0 [ 2241.039712][T26337] active_file 0 [ 2241.039712][T26337] unevictable 0 [ 2241.039712][T26337] slab_reclaimable 42720 [ 2241.039712][T26337] slab_unreclaimable 72456 [ 2241.039712][T26337] slab 115176 [ 2241.056991][T26207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2241.149492][T19460] Bluetooth: hci2: command 0x0419 tx timeout [ 2241.185968][T26207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2241.191220][T26337] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=26336,uid=0 [ 2241.205018][T26207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2241.212918][T26337] Memory cgroup out of memory: Killed process 26337 (syz-executor.5) total-vm:54540kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2241.243673][T26207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2241.263899][T26207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2241.308152][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2241.316882][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2241.338926][T26207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2241.358685][T26207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2241.381304][T26207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2241.398481][T26207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 10:59:51 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0), 0x12) 10:59:51 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(r2, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2241.410510][T26207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2241.421218][T26207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2241.431339][T26207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2241.443255][T26207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2241.467288][T26207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2241.482550][T21387] device hsr_slave_0 left promiscuous mode [ 2241.494229][T21387] device hsr_slave_1 left promiscuous mode [ 2241.514200][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2241.565114][T21387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2241.586906][T26143] syz-executor.5 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=0 [ 2241.602250][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2241.607114][T19460] Bluetooth: hci4: command 0x0419 tx timeout [ 2241.610989][T26143] CPU: 1 PID: 26143 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2241.626033][T26143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2241.636110][T26143] Call Trace: [ 2241.639407][T26143] [ 2241.642368][T26143] dump_stack_lvl+0xd1/0x138 [ 2241.646996][T26143] dump_header+0x10b/0x85f [ 2241.651440][T26143] oom_kill_process.cold+0x10/0x15 [ 2241.656561][T26143] out_of_memory+0x35c/0x14a0 [ 2241.661262][T26143] ? find_held_lock+0x2d/0x110 [ 2241.666044][T26143] ? oom_killer_disable+0x280/0x280 [ 2241.671262][T26143] ? find_held_lock+0x2d/0x110 [ 2241.676047][T26143] mem_cgroup_out_of_memory+0x206/0x270 [ 2241.681630][T26143] ? mem_cgroup_margin+0x130/0x130 [ 2241.686756][T26143] ? lock_downgrade+0x6e0/0x6e0 [ 2241.691630][T26143] try_charge_memcg+0xefb/0x12f0 [ 2241.696587][T26143] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2241.702594][T26143] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2241.708327][T26143] ? lock_downgrade+0x6e0/0x6e0 [ 2241.713188][T26143] ? lock_downgrade+0x6e0/0x6e0 [ 2241.718045][T26143] ? rcu_read_unlock+0x9/0x60 [ 2241.722748][T26143] obj_cgroup_charge+0x2af/0x5e0 [ 2241.727706][T26143] __kmem_cache_alloc_node+0xb2/0x430 [ 2241.733086][T26143] ? kvmalloc_node+0xa2/0x1a0 [ 2241.737779][T26143] ? kvmalloc_node+0xa2/0x1a0 [ 2241.742469][T26143] __kmalloc_node+0x4d/0xd0 [ 2241.747003][T26143] kvmalloc_node+0xa2/0x1a0 [ 2241.751523][T26143] xt_alloc_table_info+0x40/0xa0 [ 2241.756499][T26143] do_ip6t_set_ctl+0x514/0xb30 [ 2241.761280][T26143] ? trace_contention_end+0x153/0x1e0 [ 2241.766669][T26143] ? __mutex_lock+0x231/0x1360 [ 2241.771451][T26143] ? compat_do_replace.constprop.0+0x410/0x410 [ 2241.777638][T26143] ? find_held_lock+0x2d/0x110 [ 2241.782423][T26143] ? wait_for_completion_io_timeout+0x20/0x20 [ 2241.788514][T26143] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2241.794510][T26143] nf_setsockopt+0x87/0xe0 [ 2241.798939][T26143] ipv6_setsockopt+0x12b/0x190 [ 2241.803719][T26143] tcp_setsockopt+0x9f/0x100 [ 2241.808330][T26143] ? sock_common_recvmsg+0x190/0x190 [ 2241.813625][T26143] __sys_setsockopt+0x2c6/0x5b0 [ 2241.818504][T26143] ? __ia32_sys_recv+0x100/0x100 [ 2241.823461][T26143] ? fd_install+0x201/0x650 [ 2241.827988][T26143] __x64_sys_setsockopt+0xbe/0x160 [ 2241.833132][T26143] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2241.839046][T26143] do_syscall_64+0x39/0xb0 [ 2241.843493][T26143] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2241.849427][T26143] RIP: 0033:0x7f3c5ae8d71a [ 2241.853853][T26143] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2241.873483][T26143] RSP: 002b:00007ffc356bd6a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2241.881906][T26143] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 00007f3c5ae8d71a [ 2241.889887][T26143] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2241.897865][T26143] RBP: 00007ffc356bd6d0 R08: 00000000000003b8 R09: ffffffffff000000 [ 2241.906279][T26143] R10: 00007f3c5af83bc0 R11: 0000000000000206 R12: 00007ffc356bd730 [ 2241.914256][T26143] R13: 0000000000000003 R14: 00007ffc356bd6cc R15: 00007f3c5af83b60 [ 2241.922250][T26143] [ 2241.945183][T21387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2241.989102][T21387] device bridge_slave_1 left promiscuous mode [ 2241.995381][T21387] bridge0: port 2(bridge_slave_1) entered disabled state [ 2242.035358][T21387] device bridge_slave_0 left promiscuous mode [ 2242.041714][T21387] bridge0: port 1(bridge_slave_0) entered disabled state [ 2242.067079][T26143] memory: usage 10356kB, limit 0kB, failcnt 656 [ 2242.077058][T26143] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2242.084909][T21387] device veth1_macvtap left promiscuous mode [ 2242.094242][T26143] Memory cgroup stats for /syz5: [ 2242.094445][T26143] anon 40960 [ 2242.094445][T26143] file 10448896 [ 2242.094445][T26143] kernel 106496 [ 2242.094445][T26143] kernel_stack 0 [ 2242.094445][T26143] pagetables 8192 [ 2242.094445][T26143] sec_pagetables 0 [ 2242.094445][T26143] percpu 64 [ 2242.094445][T26143] sock 0 [ 2242.094445][T26143] vmalloc 0 [ 2242.094445][T26143] shmem 10448896 [ 2242.094445][T26143] zswap 0 [ 2242.094445][T26143] zswapped 0 [ 2242.094445][T26143] file_mapped 245760 [ 2242.094445][T26143] file_dirty 0 [ 2242.094445][T26143] file_writeback 0 [ 2242.094445][T26143] swapcached 0 [ 2242.094445][T26143] anon_thp 0 [ 2242.094445][T26143] file_thp 0 [ 2242.094445][T26143] shmem_thp 0 [ 2242.094445][T26143] inactive_anon 40960 [ 2242.094445][T26143] active_anon 10448896 [ 2242.094445][T26143] inactive_file 0 [ 2242.094445][T26143] active_file 0 [ 2242.094445][T26143] unevictable 0 [ 2242.094445][T26143] slab_reclaimable 38552 [ 2242.094445][T26143] slab_unreclaimable 50592 [ 2242.094445][T26143] slab 89144 [ 2242.117049][T21387] device veth0_macvtap left promiscuous mode [ 2242.259087][T26143] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=26143,uid=0 [ 2242.281150][T21387] device veth1_vlan left promiscuous mode [ 2242.281244][T26143] Memory cgroup out of memory: Killed process 26143 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2242.294467][T21387] device veth0_vlan left promiscuous mode [ 2242.504392][T21387] team0 (unregistering): Port device team_slave_1 removed [ 2242.519649][T21387] team0 (unregistering): Port device team_slave_0 removed [ 2242.532152][T21387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2242.545775][T21387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2242.607043][T21387] bond0 (unregistering): Released all slaves [ 2242.677593][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2242.686128][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2242.695180][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2242.703744][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2242.715906][T26210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2242.726790][T26207] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2242.736742][T26207] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2242.746695][T26207] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2242.756039][T26207] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2242.883835][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2242.913130][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2242.936467][T26210] device veth0_vlan entered promiscuous mode [ 2242.967598][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2242.989859][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2243.031346][ T8442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2243.031369][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2243.051339][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2243.097397][ T8442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2243.105490][T26210] device veth1_vlan entered promiscuous mode [ 2243.107627][ T5470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2243.132066][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2243.140863][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2243.167157][ T5470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2243.177994][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2243.228246][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2243.247884][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2243.307762][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2243.331824][T26210] device veth0_macvtap entered promiscuous mode [ 2243.371733][T26210] device veth1_macvtap entered promiscuous mode [ 2243.435117][T26210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2243.491817][T26210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2243.541820][T26210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2243.599473][T26210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2243.643613][T26210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2243.692117][T26210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2243.743593][T26210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2243.744151][T26365] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2243.766009][T26365] CPU: 1 PID: 26365 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2243.776463][T26365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2243.786544][T26365] Call Trace: [ 2243.789844][T26365] [ 2243.792801][T26365] dump_stack_lvl+0xd1/0x138 [ 2243.797468][T26365] dump_header+0x10b/0x85f [ 2243.801920][T26365] oom_kill_process.cold+0x10/0x15 [ 2243.801980][T26210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2243.807076][T26365] out_of_memory+0x35c/0x14a0 [ 2243.807129][T26365] ? oom_killer_disable+0x280/0x280 [ 2243.807166][T26365] ? mark_held_locks+0x9f/0xe0 [ 2243.807202][T26365] mem_cgroup_out_of_memory+0x206/0x270 [ 2243.837189][T26365] ? mem_cgroup_margin+0x130/0x130 [ 2243.842354][T26365] memory_max_write+0x2f9/0x3c0 [ 2243.847234][T26365] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2243.853326][T26365] ? lock_release+0x810/0x810 [ 2243.858040][T26365] cgroup_file_write+0x1e2/0x770 [ 2243.863001][T26365] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2243.869085][T26365] ? kill_css+0x370/0x370 [ 2243.873450][T26365] ? kill_css+0x370/0x370 [ 2243.877803][T26365] kernfs_fop_write_iter+0x3f1/0x600 [ 2243.883118][T26365] vfs_write+0x9ed/0xdd0 [ 2243.887378][T26365] ? kernel_write+0x630/0x630 [ 2243.892082][T26365] ? kasan_check_range+0x1b/0x190 [ 2243.897137][T26365] ksys_write+0x12b/0x250 [ 2243.901484][T26365] ? __ia32_sys_read+0xb0/0xb0 [ 2243.906265][T26365] ? syscall_enter_from_user_mode+0x30/0xb0 [ 2243.912177][T26365] do_syscall_64+0x39/0xb0 [ 2243.916622][T26365] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2243.922528][T26365] RIP: 0033:0x7fd86448c0c9 [ 2243.926961][T26365] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2243.946586][T26365] RSP: 002b:00007fd8651f0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2243.955011][T26365] RAX: ffffffffffffffda RBX: 00007fd8645abf80 RCX: 00007fd86448c0c9 [ 2243.962989][T26365] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2243.970961][T26365] RBP: 00007fd8644e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2243.978956][T26365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2243.986951][T26365] R13: 00007fffb3adfe2f R14: 00007fd8651f0300 R15: 0000000000022000 [ 2243.994952][T26365] [ 2244.006530][T26210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2244.013991][T26365] memory: usage 10616kB, limit 0kB, failcnt 845 [ 2244.014270][T26365] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2244.034607][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2244.044710][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2244.053240][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2244.062662][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2244.075679][T26210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2244.087883][T26365] Memory cgroup stats for /syz4: [ 2244.094042][T26365] anon 114688 [ 2244.094042][T26365] file 10448896 [ 2244.094042][T26365] kernel 294912 [ 2244.094042][T26365] kernel_stack 65536 [ 2244.094042][T26365] pagetables 77824 [ 2244.094042][T26365] sec_pagetables 0 [ 2244.094042][T26365] percpu 64 [ 2244.094042][T26365] sock 0 [ 2244.094042][T26365] vmalloc 0 [ 2244.094042][T26365] shmem 10448896 [ 2244.094042][T26365] zswap 0 [ 2244.094042][T26365] zswapped 0 [ 2244.094042][T26365] file_mapped 335872 [ 2244.094042][T26365] file_dirty 0 [ 2244.094042][T26365] file_writeback 0 [ 2244.094042][T26365] swapcached 0 [ 2244.094042][T26365] anon_thp 0 [ 2244.094042][T26365] file_thp 0 [ 2244.094042][T26365] shmem_thp 0 [ 2244.094042][T26365] inactive_anon 114688 [ 2244.094042][T26365] active_anon 10448896 [ 2244.094042][T26365] inactive_file 0 [ 2244.094042][T26365] active_file 0 [ 2244.094042][T26365] unevictable 0 [ 2244.094042][T26365] slab_reclaimable 54224 [ 2244.094042][T26365] slab_unreclaimable 73752 [ 2244.094042][T26365] slab 127976 [ 2244.198331][T26210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2244.208520][T26210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2244.219325][T26210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2244.229531][T26210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2244.242632][T26210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2244.253420][T26210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2244.264311][T26210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2244.288598][T26210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2244.303418][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2244.315459][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2244.333016][T26365] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=26361,uid=0 [ 2244.360702][T26210] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2244.385300][T10407] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2244.394449][T26365] Memory cgroup out of memory: Killed process 26365 (syz-executor.4) total-vm:54540kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2244.394732][T10407] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2244.420879][T10407] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2244.423493][T26210] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2244.437715][T10407] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2244.445402][T26210] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2244.454293][T10407] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 10:59:54 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(r2, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r3, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 10:59:54 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) getpid() openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 10:59:54 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x85, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2244.461635][T10407] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2244.505329][T26207] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2244.516247][T26207] CPU: 0 PID: 26207 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2244.526704][T26207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2244.536776][T26207] Call Trace: [ 2244.538498][T26210] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2244.540053][T26207] [ 2244.540066][T26207] dump_stack_lvl+0xd1/0x138 [ 2244.556292][T26207] dump_header+0x10b/0x85f [ 2244.560745][T26207] oom_kill_process.cold+0x10/0x15 [ 2244.565891][T26207] out_of_memory+0x35c/0x14a0 [ 2244.570618][T26207] ? find_held_lock+0x2d/0x110 [ 2244.575417][T26207] ? oom_killer_disable+0x280/0x280 [ 2244.580660][T26207] ? find_held_lock+0x2d/0x110 [ 2244.585467][T26207] mem_cgroup_out_of_memory+0x206/0x270 [ 2244.591055][T26207] ? mem_cgroup_margin+0x130/0x130 [ 2244.596196][T26207] ? lock_downgrade+0x6e0/0x6e0 [ 2244.601075][T26207] try_charge_memcg+0xefb/0x12f0 [ 2244.606032][T26207] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2244.612023][T26207] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2244.617750][T26207] ? lock_downgrade+0x6e0/0x6e0 [ 2244.622640][T26207] obj_cgroup_charge+0x2af/0x5e0 [ 2244.627603][T26207] ? vm_area_dup+0x7d/0x380 [ 2244.632208][T26207] kmem_cache_alloc+0xb5/0x430 [ 2244.636987][T26207] vm_area_dup+0x7d/0x380 [ 2244.641328][T26207] ? copy_page_range+0x1dfe/0x3b40 [ 2244.646493][T26207] ? mas_wr_modify+0x999/0x16d0 [ 2244.651376][T26207] ? mas_next_nentry+0x610/0xab0 [ 2244.656328][T26207] ? vm_area_alloc+0x100/0x100 [ 2244.661133][T26207] ? mas_find+0x211/0xd10 [ 2244.665487][T26207] dup_mmap+0x655/0x10b0 [ 2244.669755][T26207] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2244.675053][T26207] ? lock_downgrade+0x6e0/0x6e0 [ 2244.679944][T26207] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2244.685800][T26207] ? mm_init+0x8e0/0xc10 [ 2244.690078][T26207] copy_process+0x440f/0x7520 [ 2244.694783][T26207] ? _raw_spin_unlock+0x28/0x40 [ 2244.699651][T26207] ? wp_page_reuse+0x197/0x570 [ 2244.704445][T26207] ? __cleanup_sighand+0xb0/0xb0 [ 2244.709390][T26207] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2244.714785][T26207] ? rwlock_bug.part.0+0x90/0x90 [ 2244.719735][T26207] ? lock_chain_count+0x20/0x20 [ 2244.724615][T26207] kernel_clone+0xeb/0x990 [ 2244.729045][T26207] ? create_io_thread+0xf0/0xf0 [ 2244.733911][T26207] ? find_held_lock+0x2d/0x110 [ 2244.738704][T26207] __do_sys_clone+0xba/0x100 [ 2244.743311][T26207] ? kernel_clone+0x990/0x990 [ 2244.748014][T26207] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2244.753924][T26207] do_syscall_64+0x39/0xb0 [ 2244.758364][T26207] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2244.764266][T26207] RIP: 0033:0x7fd864489dfb [ 2244.768693][T26207] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2244.788309][T26207] RSP: 002b:00007fffb3ae0070 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2244.796742][T26207] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd864489dfb [ 2244.804733][T26207] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2244.812723][T26207] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555bb1400 [ 2244.820699][T26207] R10: 0000555555bb16d0 R11: 0000000000000246 R12: 0000000000000001 [ 2244.828673][T26207] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffb3ae0150 [ 2244.836663][T26207] [ 2244.872759][T26207] memory: usage 10452kB, limit 0kB, failcnt 864 [ 2244.894362][T26207] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2244.911734][T26207] Memory cgroup stats for /syz4: [ 2244.911956][T26207] anon 45056 [ 2244.911956][T26207] file 10448896 [ 2244.911956][T26207] kernel 208896 [ 2244.911956][T26207] kernel_stack 32768 [ 2244.911956][T26207] pagetables 8192 [ 2244.911956][T26207] sec_pagetables 0 [ 2244.911956][T26207] percpu 128 [ 2244.911956][T26207] sock 0 [ 2244.911956][T26207] vmalloc 0 [ 2244.911956][T26207] shmem 10448896 [ 2244.911956][T26207] zswap 0 [ 2244.911956][T26207] zswapped 0 [ 2244.911956][T26207] file_mapped 307200 [ 2244.911956][T26207] file_dirty 0 [ 2244.911956][T26207] file_writeback 0 [ 2244.911956][T26207] swapcached 0 [ 2244.911956][T26207] anon_thp 0 [ 2244.911956][T26207] file_thp 0 [ 2244.911956][T26207] shmem_thp 0 [ 2244.911956][T26207] inactive_anon 45056 [ 2244.911956][T26207] active_anon 10448896 [ 2244.911956][T26207] inactive_file 0 [ 2244.911956][T26207] active_file 0 [ 2244.911956][T26207] unevictable 0 [ 2244.911956][T26207] slab_reclaimable 72240 [ 2244.911956][T26207] slab_unreclaimable 77000 [ 2244.911956][T26207] slab 149240 [ 2245.014418][T26207] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=26207,uid=0 [ 2245.031076][T26207] Memory cgroup out of memory: Killed process 26207 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2245.150625][ T5247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2245.207086][ T5247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2245.328356][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2245.342933][ T6761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2245.360741][ T6761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2245.448857][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:59:55 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0), 0x12) 10:59:55 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0), 0x12) 10:59:55 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0xb9, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:59:55 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) getpid() openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 10:59:55 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_int(r2, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r4, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 10:59:55 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0xf0, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:59:55 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) getpid() openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 10:59:55 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r0, &(0x7f00000002c0), 0x12) [ 2245.796815][T26369] chnl_net:caif_netlink_parms(): no params data found [ 2246.127082][T26369] bridge0: port 1(bridge_slave_0) entered blocking state [ 2246.169988][T26369] bridge0: port 1(bridge_slave_0) entered disabled state [ 2246.198319][T26369] device bridge_slave_0 entered promiscuous mode [ 2246.218283][T26369] bridge0: port 2(bridge_slave_1) entered blocking state [ 2246.228472][T26369] bridge0: port 2(bridge_slave_1) entered disabled state [ 2246.236491][T26369] device bridge_slave_1 entered promiscuous mode [ 2246.351497][T26369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2246.392803][T26369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2246.487792][T19460] Bluetooth: hci1: command 0x0409 tx timeout [ 2246.521800][T26369] team0: Port device team_slave_0 added [ 2246.553236][T26369] team0: Port device team_slave_1 added [ 2246.638535][T26369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2246.686218][T26369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2246.723149][T26369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2246.758962][T26369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2246.786328][T26369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2246.853822][T26369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2246.959778][T26369] device hsr_slave_0 entered promiscuous mode [ 2247.004335][T26369] device hsr_slave_1 entered promiscuous mode [ 2247.039913][T26369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2247.071286][T26369] Cannot create hsr debugfs directory [ 2247.322056][T21387] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2247.439595][T21387] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2247.549084][T21387] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2247.738760][T21387] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2248.086765][T21387] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2248.119148][T26369] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2248.165622][T21387] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2248.233676][T26369] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2248.241557][T10407] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2248.250828][T10407] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2248.259834][T10407] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2248.267868][T10407] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2248.276026][T10407] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2248.329675][T26369] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2248.365293][T21387] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2248.410194][T26369] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2248.522911][T21387] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2248.545861][T10407] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2248.555021][T10407] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2248.567080][T10407] Bluetooth: hci1: command 0x041b tx timeout [ 2248.577953][T10407] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2248.586476][T10407] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2248.594397][T10407] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2248.601833][T10407] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2248.959569][T26369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2248.987706][T26369] 8021q: adding VLAN 0 to HW filter on device team0 [ 2249.071597][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2249.079635][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2249.142314][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2249.151356][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2249.161207][T14545] bridge0: port 1(bridge_slave_0) entered blocking state [ 2249.168374][T14545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2249.191256][T26431] chnl_net:caif_netlink_parms(): no params data found [ 2249.226214][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2249.234661][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2249.243860][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2249.253163][T19256] bridge0: port 2(bridge_slave_1) entered blocking state [ 2249.260363][T19256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2249.268558][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2249.277184][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2249.329409][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2249.339072][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2249.348665][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2249.407323][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2249.415591][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2249.433128][T26369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2249.446853][T26369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2249.493445][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2249.517876][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2249.573860][T26436] chnl_net:caif_netlink_parms(): no params data found [ 2249.585037][T26431] bridge0: port 1(bridge_slave_0) entered blocking state [ 2249.603142][T26431] bridge0: port 1(bridge_slave_0) entered disabled state [ 2249.624574][T26431] device bridge_slave_0 entered promiscuous mode [ 2249.666098][T26431] bridge0: port 2(bridge_slave_1) entered blocking state [ 2249.689287][T26431] bridge0: port 2(bridge_slave_1) entered disabled state [ 2249.697891][T26431] device bridge_slave_1 entered promiscuous mode [ 2249.791546][T26431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2249.855710][T26431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2249.980969][T26431] team0: Port device team_slave_0 added [ 2250.007649][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2250.015147][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2250.024837][T26431] team0: Port device team_slave_1 added [ 2250.094560][T26369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2250.115372][T26436] bridge0: port 1(bridge_slave_0) entered blocking state [ 2250.123627][T26436] bridge0: port 1(bridge_slave_0) entered disabled state [ 2250.138890][T26436] device bridge_slave_0 entered promiscuous mode [ 2250.181652][T26431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2250.197116][T26431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2250.241672][T26431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2250.268070][T26436] bridge0: port 2(bridge_slave_1) entered blocking state [ 2250.275208][T26436] bridge0: port 2(bridge_slave_1) entered disabled state [ 2250.295838][T26436] device bridge_slave_1 entered promiscuous mode [ 2250.328189][T10407] Bluetooth: hci2: command 0x0409 tx timeout [ 2250.369310][T26431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2250.376302][T26431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2250.415478][T26431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2250.522492][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2250.534487][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2250.544802][T26436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2250.579162][T26436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2250.647753][T10407] Bluetooth: hci5: command 0x0409 tx timeout [ 2250.654489][T10407] Bluetooth: hci1: command 0x040f tx timeout [ 2250.726505][T26369] device veth0_vlan entered promiscuous mode [ 2250.740971][T26436] team0: Port device team_slave_0 added [ 2250.751053][T26436] team0: Port device team_slave_1 added [ 2250.760168][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2250.769052][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2250.781557][T26431] device hsr_slave_0 entered promiscuous mode [ 2250.792212][T26431] device hsr_slave_1 entered promiscuous mode [ 2250.799830][T26431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2250.808366][T26431] Cannot create hsr debugfs directory [ 2250.845006][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2250.854972][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2250.867469][T26369] device veth1_vlan entered promiscuous mode [ 2250.880320][T21387] device hsr_slave_0 left promiscuous mode [ 2250.887965][T21387] device hsr_slave_1 left promiscuous mode [ 2250.894491][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2250.915099][T21387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2250.927725][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2250.935721][T21387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2250.956086][T21387] device bridge_slave_1 left promiscuous mode [ 2250.965430][T21387] bridge0: port 2(bridge_slave_1) entered disabled state [ 2250.980708][T21387] device bridge_slave_0 left promiscuous mode [ 2250.986989][T21387] bridge0: port 1(bridge_slave_0) entered disabled state [ 2251.001617][T21387] device hsr_slave_0 left promiscuous mode [ 2251.011172][T21387] device hsr_slave_1 left promiscuous mode [ 2251.018176][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2251.025606][T21387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2251.044945][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2251.059575][T21387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2251.077042][T21387] device bridge_slave_1 left promiscuous mode [ 2251.083257][T21387] bridge0: port 2(bridge_slave_1) entered disabled state [ 2251.103396][T21387] device bridge_slave_0 left promiscuous mode [ 2251.115135][T21387] bridge0: port 1(bridge_slave_0) entered disabled state [ 2251.147164][T21387] device veth1_macvtap left promiscuous mode [ 2251.153231][T21387] device veth0_macvtap left promiscuous mode [ 2251.170481][T21387] device veth1_vlan left promiscuous mode [ 2251.176338][T21387] device veth0_vlan left promiscuous mode [ 2251.184600][T21387] device veth1_macvtap left promiscuous mode [ 2251.190955][T21387] device veth0_macvtap left promiscuous mode [ 2251.198833][T21387] device veth1_vlan left promiscuous mode [ 2251.204696][T21387] device veth0_vlan left promiscuous mode [ 2251.626525][T21387] team0 (unregistering): Port device team_slave_1 removed [ 2251.640560][T21387] team0 (unregistering): Port device team_slave_0 removed [ 2251.653341][T21387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2251.669017][T21387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2251.745051][T21387] bond0 (unregistering): Released all slaves [ 2251.873108][T21387] team0 (unregistering): Port device team_slave_1 removed [ 2251.886514][T21387] team0 (unregistering): Port device team_slave_0 removed [ 2251.900665][T21387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2251.915478][T21387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2251.985414][T21387] bond0 (unregistering): Released all slaves [ 2252.043023][T26436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2252.050991][T26436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2252.078673][T26436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2252.092179][T26436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2252.099408][T26436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2252.125767][T26436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2252.147510][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2252.155395][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2252.237083][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2252.245863][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2252.269779][T26369] device veth0_macvtap entered promiscuous mode [ 2252.303741][T26436] device hsr_slave_0 entered promiscuous mode [ 2252.318672][T26436] device hsr_slave_1 entered promiscuous mode [ 2252.340260][T26369] device veth1_macvtap entered promiscuous mode [ 2252.409704][T10407] Bluetooth: hci2: command 0x041b tx timeout [ 2252.437841][T26369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2252.449044][T26369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2252.459326][T26369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2252.476726][T26369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2252.492128][T26369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2252.502837][T26369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2252.514810][T26369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2252.569875][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2252.585398][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2252.599126][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2252.618407][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2252.629541][T26369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2252.647152][T26369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2252.676983][T26369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2252.696982][T26369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2252.706831][T26369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2252.727350][T10407] Bluetooth: hci5: command 0x041b tx timeout [ 2252.733434][T10407] Bluetooth: hci1: command 0x0419 tx timeout [ 2252.747092][T26369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2252.768361][T26369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2252.849271][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2252.858101][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2252.869265][T26369] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2252.887236][T26369] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2252.896005][T26369] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2252.927046][T26369] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2253.169208][ T5470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2253.195117][ T5470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2253.245668][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2253.299504][ T6761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2253.329117][ T6761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2253.355278][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2253.694667][T26431] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2253.767545][T26522] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2253.791898][T26431] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2253.827045][T26522] CPU: 1 PID: 26522 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2253.837518][T26522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2253.847595][T26522] Call Trace: [ 2253.850895][T26522] [ 2253.853858][T26522] dump_stack_lvl+0xd1/0x138 [ 2253.858495][T26522] dump_header+0x10b/0x85f [ 2253.862950][T26522] oom_kill_process.cold+0x10/0x15 [ 2253.868095][T26522] out_of_memory+0x35c/0x14a0 [ 2253.872830][T26522] ? oom_killer_disable+0x280/0x280 [ 2253.878069][T26522] ? mark_held_locks+0x9f/0xe0 [ 2253.882874][T26522] mem_cgroup_out_of_memory+0x206/0x270 [ 2253.888464][T26522] ? mem_cgroup_margin+0x130/0x130 [ 2253.893616][T26522] memory_max_write+0x2f9/0x3c0 [ 2253.898483][T26522] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2253.904574][T26522] cgroup_file_write+0x1e2/0x770 [ 2253.909531][T26522] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2253.915611][T26522] ? kill_css+0x370/0x370 [ 2253.919968][T26522] ? kill_css+0x370/0x370 [ 2253.924327][T26522] kernfs_fop_write_iter+0x3f1/0x600 [ 2253.931652][T26522] vfs_write+0x9ed/0xdd0 [ 2253.935920][T26522] ? kernel_write+0x630/0x630 [ 2253.940630][T26522] ? __fget_files+0x26a/0x440 [ 2253.945336][T26522] ksys_write+0x12b/0x250 [ 2253.949684][T26522] ? __ia32_sys_read+0xb0/0xb0 [ 2253.954481][T26522] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2253.960395][T26522] do_syscall_64+0x39/0xb0 [ 2253.964839][T26522] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2253.970746][T26522] RIP: 0033:0x7fd78c88c0c9 [ 2253.975168][T26522] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2253.994787][T26522] RSP: 002b:00007fd78b3fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2254.003209][T26522] RAX: ffffffffffffffda RBX: 00007fd78c9abf80 RCX: 00007fd78c88c0c9 [ 2254.011183][T26522] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2254.019173][T26522] RBP: 00007fd78c8e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2254.027147][T26522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2254.035207][T26522] R13: 00007ffddc8f0a6f R14: 00007fd78b3fe300 R15: 0000000000022000 [ 2254.043202][T26522] [ 2254.056635][T26522] memory: usage 10600kB, limit 0kB, failcnt 734 [ 2254.088657][T26431] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2254.114558][T26431] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2254.129878][T26522] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2254.172123][T26522] Memory cgroup stats for /syz1: [ 2254.176443][T26522] anon 110592 [ 2254.176443][T26522] file 10444800 [ 2254.176443][T26522] kernel 290816 [ 2254.176443][T26522] kernel_stack 65536 [ 2254.176443][T26522] pagetables 81920 [ 2254.176443][T26522] sec_pagetables 0 [ 2254.176443][T26522] percpu 64 [ 2254.176443][T26522] sock 0 [ 2254.176443][T26522] vmalloc 0 [ 2254.176443][T26522] shmem 10444800 [ 2254.176443][T26522] zswap 0 [ 2254.176443][T26522] zswapped 0 [ 2254.176443][T26522] file_mapped 397312 [ 2254.176443][T26522] file_dirty 0 [ 2254.176443][T26522] file_writeback 0 [ 2254.176443][T26522] swapcached 0 [ 2254.176443][T26522] anon_thp 0 [ 2254.176443][T26522] file_thp 0 [ 2254.176443][T26522] shmem_thp 0 [ 2254.176443][T26522] inactive_anon 110592 [ 2254.176443][T26522] active_anon 10444800 [ 2254.176443][T26522] inactive_file 0 [ 2254.176443][T26522] active_file 0 [ 2254.176443][T26522] unevictable 0 [ 2254.176443][T26522] slab_reclaimable 42720 [ 2254.176443][T26522] slab_unreclaimable 73104 [ 2254.176443][T26522] slab 115824 [ 2254.466623][T26431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2254.487047][T10407] Bluetooth: hci2: command 0x040f tx timeout [ 2254.520056][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2254.530795][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2254.542533][T26431] 8021q: adding VLAN 0 to HW filter on device team0 [ 2254.546367][T26522] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=26521,uid=0 [ 2254.600317][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2254.607791][T26522] Memory cgroup out of memory: Killed process 26521 (syz-executor.1) total-vm:54540kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2254.631151][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2254.664796][T22626] bridge0: port 1(bridge_slave_0) entered blocking state [ 2254.671986][T22626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2254.791494][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2254.800322][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2254.817994][T10407] Bluetooth: hci5: command 0x040f tx timeout [ 2254.868098][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 11:00:04 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(r2, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:00:04 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x300, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:00:04 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r0, &(0x7f00000002c0), 0x12) 11:00:04 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) getpid() openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2254.957586][T22629] bridge0: port 2(bridge_slave_1) entered blocking state [ 2254.964717][T22629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2254.973279][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2254.992129][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 11:00:04 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2255.001420][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2255.013118][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2255.059894][T26369] syz-executor.1 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=0 [ 2255.115481][T26431] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2255.157364][T26369] CPU: 0 PID: 26369 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2255.167841][T26369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2255.177923][T26369] Call Trace: [ 2255.181228][T26369] [ 2255.184176][T26369] dump_stack_lvl+0xd1/0x138 [ 2255.188805][T26369] dump_header+0x10b/0x85f [ 2255.193273][T26369] oom_kill_process.cold+0x10/0x15 [ 2255.198423][T26369] out_of_memory+0x35c/0x14a0 [ 2255.203150][T26369] ? find_held_lock+0x2d/0x110 [ 2255.207955][T26369] ? oom_killer_disable+0x280/0x280 [ 2255.213197][T26369] ? find_held_lock+0x2d/0x110 [ 2255.217999][T26369] mem_cgroup_out_of_memory+0x206/0x270 [ 2255.223591][T26369] ? mem_cgroup_margin+0x130/0x130 [ 2255.228736][T26369] ? lock_downgrade+0x6e0/0x6e0 [ 2255.233630][T26369] try_charge_memcg+0xefb/0x12f0 [ 2255.238604][T26369] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2255.244615][T26369] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2255.250362][T26369] ? lock_downgrade+0x6e0/0x6e0 [ 2255.255240][T26369] ? lock_downgrade+0x6e0/0x6e0 [ 2255.260116][T26369] ? rcu_read_unlock+0x9/0x60 [ 2255.264839][T26369] obj_cgroup_charge+0x2af/0x5e0 [ 2255.269807][T26369] __kmem_cache_alloc_node+0xb2/0x430 [ 2255.275188][T26369] ? kvmalloc_node+0xa2/0x1a0 [ 2255.279882][T26369] ? kvmalloc_node+0xa2/0x1a0 [ 2255.284570][T26369] __kmalloc_node+0x4d/0xd0 [ 2255.289089][T26369] kvmalloc_node+0xa2/0x1a0 [ 2255.293607][T26369] xt_alloc_table_info+0x40/0xa0 [ 2255.298567][T26369] do_ip6t_set_ctl+0x514/0xb30 [ 2255.303337][T26369] ? trace_contention_end+0x153/0x1e0 [ 2255.308727][T26369] ? __mutex_lock+0x231/0x1360 [ 2255.313498][T26369] ? compat_do_replace.constprop.0+0x410/0x410 [ 2255.319669][T26369] ? wait_for_completion_io_timeout+0x20/0x20 [ 2255.325744][T26369] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2255.331158][T26369] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2255.337152][T26369] nf_setsockopt+0x87/0xe0 [ 2255.341586][T26369] ipv6_setsockopt+0x12b/0x190 [ 2255.346364][T26369] tcp_setsockopt+0x9f/0x100 [ 2255.350975][T26369] ? sock_common_recvmsg+0x190/0x190 [ 2255.356284][T26369] __sys_setsockopt+0x2c6/0x5b0 [ 2255.361159][T26369] ? __ia32_sys_recv+0x100/0x100 [ 2255.366108][T26369] ? up_write+0x520/0x520 [ 2255.370455][T26369] ? handle_mm_fault+0x25b/0x850 [ 2255.375422][T26369] __x64_sys_setsockopt+0xbe/0x160 [ 2255.380559][T26369] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2255.386465][T26369] do_syscall_64+0x39/0xb0 [ 2255.390916][T26369] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2255.396818][T26369] RIP: 0033:0x7fd78c88d71a [ 2255.401236][T26369] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2255.420848][T26369] RSP: 002b:00007ffddc8f05d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2255.429268][T26369] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 00007fd78c88d71a [ 2255.437248][T26369] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2255.445225][T26369] RBP: 00007ffddc8f0600 R08: 0000000000000558 R09: fefefefefeff646b [ 2255.453197][T26369] R10: 00007fd78c984940 R11: 0000000000000206 R12: 00007ffddc8f0660 [ 2255.461172][T26369] R13: 0000000000000003 R14: 00007ffddc8f05fc R15: 00007fd78c9848e0 [ 2255.469176][T26369] [ 2255.507285][T26431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2255.527247][T26369] memory: usage 10344kB, limit 0kB, failcnt 753 [ 2255.534366][T26369] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2255.553058][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2255.558876][T26369] Memory cgroup stats for [ 2255.563641][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2255.564108][T26369] /syz1 [ 2255.575716][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2255.592215][T26369] : [ 2255.592396][T26369] anon 40960 [ 2255.592396][T26369] file 10444800 [ 2255.592396][T26369] kernel 106496 [ 2255.592396][T26369] kernel_stack 0 [ 2255.592396][T26369] pagetables 8192 [ 2255.592396][T26369] sec_pagetables 0 [ 2255.592396][T26369] percpu 64 [ 2255.592396][T26369] sock 0 [ 2255.592396][T26369] vmalloc 0 [ 2255.592396][T26369] shmem 10444800 [ 2255.592396][T26369] zswap 0 [ 2255.592396][T26369] zswapped 0 [ 2255.592396][T26369] file_mapped 376832 [ 2255.592396][T26369] file_dirty 0 [ 2255.592396][T26369] file_writeback 0 [ 2255.592396][T26369] swapcached 0 [ 2255.592396][T26369] anon_thp 0 [ 2255.592396][T26369] file_thp 0 [ 2255.592396][T26369] shmem_thp 0 [ 2255.592396][T26369] inactive_anon 40960 [ 2255.592396][T26369] active_anon 10444800 [ 2255.592396][T26369] inactive_file 0 [ 2255.592396][T26369] active_file 0 [ 2255.592396][T26369] unevictable 0 [ 2255.592396][T26369] slab_reclaimable 37784 [ 2255.592396][T26369] slab_unreclaimable 48000 [ 2255.592396][T26369] slab 85784 [ 2255.602551][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2255.787077][T26369] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=26369,uid=0 [ 2255.837179][T26369] Memory cgroup out of memory: Killed process 26369 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2255.867156][T26543] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2255.883046][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2255.907029][T26543] CPU: 1 PID: 26543 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2255.913666][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2255.917481][T26543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2255.917500][T26543] Call Trace: [ 2255.917509][T26543] [ 2255.917520][T26543] dump_stack_lvl+0xd1/0x138 [ 2255.917559][T26543] dump_header+0x10b/0x85f [ 2255.917588][T26543] oom_kill_process.cold+0x10/0x15 [ 2255.917619][T26543] out_of_memory+0x35c/0x14a0 [ 2255.917668][T26543] ? oom_killer_disable+0x280/0x280 [ 2255.917709][T26543] ? find_held_lock+0x2d/0x110 [ 2255.969845][T26543] mem_cgroup_out_of_memory+0x206/0x270 [ 2255.975446][T26543] ? mem_cgroup_margin+0x130/0x130 [ 2255.980615][T26543] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2255.986472][T26543] memory_max_write+0x2f9/0x3c0 [ 2255.991361][T26543] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2255.997470][T26543] ? lock_release+0x810/0x810 [ 2256.002185][T26543] cgroup_file_write+0x1e2/0x770 [ 2256.007163][T26543] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2256.013263][T26543] ? kill_css+0x370/0x370 [ 2256.017621][T26543] ? __virt_addr_valid+0x61/0x2e0 [ 2256.022681][T26543] ? kill_css+0x370/0x370 [ 2256.027027][T26543] kernfs_fop_write_iter+0x3f1/0x600 [ 2256.032350][T26543] vfs_write+0x9ed/0xdd0 [ 2256.036609][T26543] ? kernel_write+0x630/0x630 [ 2256.041302][T26543] ? __fget_files+0x26a/0x440 [ 2256.046004][T26543] ksys_write+0x12b/0x250 [ 2256.050344][T26543] ? __ia32_sys_read+0xb0/0xb0 [ 2256.055206][T26543] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2256.061117][T26543] do_syscall_64+0x39/0xb0 [ 2256.065553][T26543] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2256.071458][T26543] RIP: 0033:0x7fb52308c0c9 [ 2256.075897][T26543] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2256.095624][T26543] RSP: 002b:00007fb523e19168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2256.104047][T26543] RAX: ffffffffffffffda RBX: 00007fb5231abf80 RCX: 00007fb52308c0c9 [ 2256.112025][T26543] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2256.120001][T26543] RBP: 00007fb5230e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2256.127983][T26543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2256.135960][T26543] R13: 00007ffefbd0d73f R14: 00007fb523e19300 R15: 0000000000022000 [ 2256.143954][T26543] [ 2256.301499][T26436] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2256.348217][T26436] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2256.389994][T26436] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2256.417140][T26543] memory: usage 8584kB, limit 0kB, failcnt 871 [ 2256.430691][T26543] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2256.442451][T26436] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2256.457053][T26543] Memory cgroup stats for /syz2: [ 2256.457253][T26543] anon 135168 [ 2256.457253][T26543] file 8355840 [ 2256.457253][T26543] kernel 249856 [ 2256.457253][T26543] kernel_stack 32768 [ 2256.457253][T26543] pagetables 81920 [ 2256.457253][T26543] sec_pagetables 0 [ 2256.457253][T26543] percpu 64 [ 2256.457253][T26543] sock 0 [ 2256.457253][T26543] vmalloc 0 [ 2256.457253][T26543] shmem 8351744 [ 2256.457253][T26543] zswap 0 [ 2256.457253][T26543] zswapped 0 [ 2256.457253][T26543] file_mapped 335872 [ 2256.457253][T26543] file_dirty 0 [ 2256.457253][T26543] file_writeback 0 [ 2256.457253][T26543] swapcached 0 [ 2256.457253][T26543] anon_thp 0 [ 2256.457253][T26543] file_thp 0 [ 2256.457253][T26543] shmem_thp 0 [ 2256.457253][T26543] inactive_anon 135168 [ 2256.457253][T26543] active_anon 8351744 [ 2256.457253][T26543] inactive_file 0 [ 2256.457253][T26543] active_file 4096 [ 2256.457253][T26543] unevictable 0 [ 2256.457253][T26543] slab_reclaimable 36880 [ 2256.457253][T26543] slab_unreclaimable 73104 [ 2256.457253][T26543] slab 109984 [ 2256.577175][T10407] Bluetooth: hci2: command 0x0419 tx timeout [ 2256.658762][T26436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2256.686743][T26436] 8021q: adding VLAN 0 to HW filter on device team0 [ 2256.754474][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2256.772615][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2256.785228][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2256.817573][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2256.826120][ T8507] bridge0: port 1(bridge_slave_0) entered blocking state [ 2256.833295][ T8507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2256.876248][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2256.897148][T10407] Bluetooth: hci5: command 0x0419 tx timeout [ 2256.917772][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2256.944790][ T8507] bridge0: port 2(bridge_slave_1) entered blocking state [ 2256.951970][ T8507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2256.999271][T26431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2257.008729][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2257.016848][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2257.026631][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2257.058032][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2257.084258][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2257.111273][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2257.147198][T26543] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=26542,uid=0 [ 2257.161284][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2257.186290][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2257.193554][T26543] Memory cgroup out of memory: Killed process 26543 (syz-executor.2) total-vm:54540kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2257.212883][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2257.243502][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2257.276066][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2257.305733][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2257.338965][T26436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2257.730643][T21387] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2257.850338][T21387] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2257.908841][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2257.918255][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2257.927949][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2257.935450][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2257.950988][T26436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2258.006310][T21387] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2258.059687][T26431] device veth0_vlan entered promiscuous mode [ 2258.076739][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2258.093513][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2258.134281][T21387] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2258.178220][T26431] device veth1_vlan entered promiscuous mode [ 2258.185252][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2258.201840][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2258.211322][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2258.295203][T26431] device veth0_macvtap entered promiscuous mode [ 2258.303353][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2258.313727][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2258.322803][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2258.335215][T26431] device veth1_macvtap entered promiscuous mode [ 2258.347073][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2258.355392][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2258.415129][T26431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2258.426589][T26431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2258.447049][T26431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2258.482545][T26431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2258.503016][T26431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2258.516302][T26431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2258.532959][T26431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2258.545244][T26431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2258.563834][T26431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2258.583261][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2258.601158][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2258.618339][T26431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2258.640724][T26431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2258.667094][T26431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2258.685528][T26431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2258.696316][T26431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2258.714701][T26431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2258.725504][T26431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2258.744341][T26431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2258.766076][T26431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2258.788812][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2258.805598][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2258.838356][T26431] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2258.847770][T26431] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2258.856493][T26431] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2258.865684][T26431] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2258.893651][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2258.902839][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2258.978491][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2258.986894][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2259.015630][T26436] device veth0_vlan entered promiscuous mode [ 2259.057275][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2259.065094][ T8443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2259.065127][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2259.070675][T26436] device veth1_vlan entered promiscuous mode [ 2259.084456][ T8443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2259.132035][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2259.151476][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2259.202067][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2259.211214][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2259.222067][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2259.234966][T26436] device veth0_macvtap entered promiscuous mode [ 2259.239042][T13808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2259.259979][T13808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2259.274497][T26436] device veth1_macvtap entered promiscuous mode [ 2259.284339][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2259.303938][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2259.313970][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2259.373037][T26436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2259.434501][T26436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2259.451767][T26436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2259.465032][T26436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2259.483380][T26436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2259.494300][T26436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2259.504922][T26436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2259.515874][T26436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 11:00:09 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0), 0x12) 11:00:09 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x480, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:00:09 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r0, &(0x7f00000002c0), 0x12) [ 2259.533776][T26436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2259.546288][T26436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2259.568817][T26436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2259.599043][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2259.637014][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2259.686854][T26436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2259.714967][T26436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2259.756088][T26436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2259.766685][T26436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2259.784995][T26436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2259.795909][T26436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2259.825659][T26436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2259.846373][T26436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2259.868569][T26436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2259.879727][T26436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2259.891370][T26436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2259.901767][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2259.911536][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2259.925754][T26436] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2259.938124][T26436] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2259.949151][T26436] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2259.958179][T26436] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2260.071396][ T6761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2260.094222][ T6761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2260.124862][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2260.138795][ T6761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2260.147528][ T6761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2260.159754][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2260.453964][T21387] device hsr_slave_0 left promiscuous mode [ 2260.468170][T21387] device hsr_slave_1 left promiscuous mode [ 2260.487734][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2260.517734][T21387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2260.539369][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2260.546816][T21387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2260.594048][T21387] device bridge_slave_1 left promiscuous mode [ 2260.613315][T21387] bridge0: port 2(bridge_slave_1) entered disabled state [ 2260.653200][T21387] device bridge_slave_0 left promiscuous mode [ 2260.670296][T21387] bridge0: port 1(bridge_slave_0) entered disabled state [ 2260.690929][T26624] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2260.702711][T26624] CPU: 0 PID: 26624 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2260.713187][T26624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2260.723280][T26624] Call Trace: [ 2260.726584][T26624] [ 2260.729539][T26624] dump_stack_lvl+0xd1/0x138 [ 2260.734179][T26624] dump_header+0x10b/0x85f [ 2260.738643][T26624] oom_kill_process.cold+0x10/0x15 [ 2260.743795][T26624] out_of_memory+0x35c/0x14a0 [ 2260.748530][T26624] ? oom_killer_disable+0x280/0x280 [ 2260.753778][T26624] ? mark_held_locks+0x9f/0xe0 [ 2260.758585][T26624] mem_cgroup_out_of_memory+0x206/0x270 [ 2260.764182][T26624] ? mem_cgroup_margin+0x130/0x130 [ 2260.769366][T26624] memory_max_write+0x2f9/0x3c0 [ 2260.774257][T26624] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2260.780363][T26624] ? lock_release+0x810/0x810 [ 2260.785084][T26624] cgroup_file_write+0x1e2/0x770 [ 2260.790069][T26624] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2260.796170][T26624] ? kill_css+0x370/0x370 [ 2260.800544][T26624] ? __virt_addr_valid+0x61/0x2e0 [ 2260.805626][T26624] ? kill_css+0x370/0x370 [ 2260.809992][T26624] kernfs_fop_write_iter+0x3f1/0x600 [ 2260.815310][T26624] vfs_write+0x9ed/0xdd0 [ 2260.819574][T26624] ? kernel_write+0x630/0x630 [ 2260.824277][T26624] ? __fget_files+0x26a/0x440 [ 2260.828982][T26624] ksys_write+0x12b/0x250 [ 2260.833352][T26624] ? __ia32_sys_read+0xb0/0xb0 [ 2260.838144][T26624] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2260.844080][T26624] do_syscall_64+0x39/0xb0 [ 2260.848528][T26624] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2260.854444][T26624] RIP: 0033:0x7f05ebe8c0c9 [ 2260.858887][T26624] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2260.878525][T26624] RSP: 002b:00007f05ecc9d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2260.886957][T26624] RAX: ffffffffffffffda RBX: 00007f05ebfabf80 RCX: 00007f05ebe8c0c9 [ 2260.894934][T26624] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2260.902911][T26624] RBP: 00007f05ebee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2260.910889][T26624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2260.918867][T26624] R13: 00007ffed73d286f R14: 00007f05ecc9d300 R15: 0000000000022000 [ 2260.926870][T26624] [ 2260.950685][T26624] memory: usage 10632kB, limit 0kB, failcnt 881 [ 2260.962401][T26624] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2260.976032][T21387] device veth1_macvtap left promiscuous mode [ 2260.982398][T21387] device veth0_macvtap left promiscuous mode [ 2260.989002][T21387] device veth1_vlan left promiscuous mode [ 2260.995554][T26624] Memory cgroup stats for /syz4: [ 2260.998662][T21387] device veth0_vlan left promiscuous mode [ 2261.010447][T26624] anon 114688 [ 2261.010447][T26624] file 10452992 [ 2261.010447][T26624] kernel 307200 [ 2261.010447][T26624] kernel_stack 65536 [ 2261.010447][T26624] pagetables 81920 [ 2261.010447][T26624] sec_pagetables 0 [ 2261.010447][T26624] percpu 64 [ 2261.010447][T26624] sock 0 [ 2261.010447][T26624] vmalloc 0 [ 2261.010447][T26624] shmem 10448896 [ 2261.010447][T26624] zswap 0 [ 2261.010447][T26624] zswapped 0 [ 2261.010447][T26624] file_mapped 335872 [ 2261.010447][T26624] file_dirty 0 [ 2261.010447][T26624] file_writeback 0 [ 2261.010447][T26624] swapcached 0 [ 2261.010447][T26624] anon_thp 0 [ 2261.010447][T26624] file_thp 0 [ 2261.010447][T26624] shmem_thp 0 [ 2261.010447][T26624] inactive_anon 114688 [ 2261.010447][T26624] active_anon 10448896 [ 2261.010447][T26624] inactive_file 4096 [ 2261.010447][T26624] active_file 0 [ 2261.010447][T26624] unevictable 0 [ 2261.010447][T26624] slab_reclaimable 54464 [ 2261.010447][T26624] slab_unreclaimable 73752 11:00:10 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_int(r2, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r4, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:00:10 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:00:10 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:00:10 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:00:10 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x500, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:00:10 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r0, &(0x7f00000002c0), 0x12) [ 2261.010447][T26624] slab 128216 [ 2261.108800][T26624] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=26623,uid=0 [ 2261.124834][T26624] Memory cgroup out of memory: Killed process 26623 (syz-executor.4) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 11:00:11 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x600, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2261.249428][T25660] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 11:00:11 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:00:11 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r0, &(0x7f00000002c0), 0x12) [ 2261.303426][T25660] CPU: 0 PID: 25660 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2261.313905][T25660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2261.323984][T25660] Call Trace: [ 2261.327280][T25660] [ 2261.330229][T25660] dump_stack_lvl+0xd1/0x138 [ 2261.334867][T25660] dump_header+0x10b/0x85f [ 2261.339324][T25660] oom_kill_process.cold+0x10/0x15 [ 2261.344467][T25660] out_of_memory+0x35c/0x14a0 [ 2261.349195][T25660] ? find_held_lock+0x2d/0x110 [ 2261.353996][T25660] ? oom_killer_disable+0x280/0x280 [ 2261.359243][T25660] ? find_held_lock+0x2d/0x110 [ 2261.364048][T25660] mem_cgroup_out_of_memory+0x206/0x270 [ 2261.369628][T25660] ? mem_cgroup_margin+0x130/0x130 [ 2261.374769][T25660] ? lock_downgrade+0x6e0/0x6e0 [ 2261.379656][T25660] try_charge_memcg+0xefb/0x12f0 [ 2261.384631][T25660] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2261.390680][T25660] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2261.396425][T25660] ? lock_downgrade+0x6e0/0x6e0 [ 2261.401302][T25660] ? lock_downgrade+0x6e0/0x6e0 [ 2261.406180][T25660] ? rcu_read_unlock+0x9/0x60 [ 2261.410898][T25660] obj_cgroup_charge+0x2af/0x5e0 [ 2261.415876][T25660] ? copy_process+0x3aa/0x7520 [ 2261.420686][T25660] kmem_cache_alloc_node+0xb7/0x460 [ 2261.425916][T25660] copy_process+0x3aa/0x7520 [ 2261.430544][T25660] ? _raw_spin_unlock+0x28/0x40 [ 2261.435430][T25660] ? wp_page_reuse+0x197/0x570 [ 2261.440224][T25660] ? do_wp_page+0x844/0x3370 [ 2261.444862][T25660] ? __cleanup_sighand+0xb0/0xb0 [ 2261.449826][T25660] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2261.455245][T25660] ? rwlock_bug.part.0+0x90/0x90 [ 2261.460209][T25660] ? lock_chain_count+0x20/0x20 [ 2261.465096][T25660] kernel_clone+0xeb/0x990 [ 2261.469543][T25660] ? create_io_thread+0xf0/0xf0 [ 2261.474427][T25660] ? find_held_lock+0x2d/0x110 [ 2261.479226][T25660] __do_sys_clone+0xba/0x100 [ 2261.483854][T25660] ? kernel_clone+0x990/0x990 [ 2261.488578][T25660] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2261.494509][T25660] do_syscall_64+0x39/0xb0 [ 2261.498970][T25660] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2261.504894][T25660] RIP: 0033:0x7fb523089dfb [ 2261.509333][T25660] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2261.528969][T25660] RSP: 002b:00007ffefbd0d980 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2261.537412][T25660] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb523089dfb [ 2261.545406][T25660] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 11:00:11 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x700, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2261.553412][T25660] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555656c400 [ 2261.561404][T25660] R10: 000055555656c6d0 R11: 0000000000000246 R12: 0000000000000001 [ 2261.569395][T25660] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffefbd0da60 [ 2261.577418][T25660] 11:00:11 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:00:11 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r0, &(0x7f00000002c0), 0x12) [ 2261.803297][T25660] memory: usage 8276kB, limit 0kB, failcnt 890 [ 2261.815574][T25660] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2261.826093][T25660] Memory cgroup stats for /syz2: [ 2261.826295][T25660] anon 40960 [ 2261.826295][T25660] file 8355840 [ 2261.826295][T25660] kernel 77824 [ 2261.826295][T25660] kernel_stack 0 [ 2261.826295][T25660] pagetables 8192 [ 2261.826295][T25660] sec_pagetables 0 [ 2261.826295][T25660] percpu 0 [ 2261.826295][T25660] sock 0 [ 2261.826295][T25660] vmalloc 0 [ 2261.826295][T25660] shmem 8351744 [ 2261.826295][T25660] zswap 0 [ 2261.826295][T25660] zswapped 0 [ 2261.826295][T25660] file_mapped 311296 [ 2261.826295][T25660] file_dirty 0 [ 2261.826295][T25660] file_writeback 0 [ 2261.826295][T25660] swapcached 0 [ 2261.826295][T25660] anon_thp 0 [ 2261.826295][T25660] file_thp 0 [ 2261.826295][T25660] shmem_thp 0 [ 2261.826295][T25660] inactive_anon 40960 [ 2261.826295][T25660] active_anon 8351744 [ 2261.826295][T25660] inactive_file 0 [ 2261.826295][T25660] active_file 4096 [ 2261.826295][T25660] unevictable 0 [ 2261.826295][T25660] slab_reclaimable 27824 [ 2261.826295][T25660] slab_unreclaimable 32296 [ 2261.826295][T25660] slab 60120 [ 2262.044923][T25660] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=25660,uid=0 [ 2262.108324][T25660] Memory cgroup out of memory: Killed process 25660 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2262.146627][T26436] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2262.161013][T26436] CPU: 0 PID: 26436 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2262.171473][T26436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2262.181533][T26436] Call Trace: [ 2262.184815][T26436] [ 2262.187748][T26436] dump_stack_lvl+0xd1/0x138 [ 2262.192353][T26436] dump_header+0x10b/0x85f [ 2262.196780][T26436] oom_kill_process.cold+0x10/0x15 [ 2262.201899][T26436] out_of_memory+0x35c/0x14a0 [ 2262.206604][T26436] ? oom_killer_disable+0x280/0x280 [ 2262.211825][T26436] ? find_held_lock+0x2d/0x110 [ 2262.216607][T26436] mem_cgroup_out_of_memory+0x206/0x270 [ 2262.222174][T26436] ? mem_cgroup_margin+0x130/0x130 [ 2262.227316][T26436] ? lock_downgrade+0x6e0/0x6e0 [ 2262.232186][T26436] try_charge_memcg+0xefb/0x12f0 [ 2262.237136][T26436] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2262.243126][T26436] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2262.248852][T26436] ? lock_downgrade+0x6e0/0x6e0 [ 2262.253725][T26436] obj_cgroup_charge+0x2af/0x5e0 [ 2262.258678][T26436] kmem_cache_alloc_lru+0x145/0x760 [ 2262.263879][T26436] ? __d_alloc+0x32/0x980 [ 2262.268224][T26436] __d_alloc+0x32/0x980 [ 2262.272395][T26436] d_alloc+0x4e/0x240 [ 2262.276387][T26436] __lookup_hash+0xc8/0x180 [ 2262.280907][T26436] filename_create+0x1d6/0x4a0 [ 2262.285685][T26436] ? filename_parentat+0x5a0/0x5a0 [ 2262.290805][T26436] ? lock_downgrade+0x6e0/0x6e0 [ 2262.295667][T26436] ? __virt_addr_valid+0x61/0x2e0 [ 2262.300703][T26436] ? __phys_addr+0xc8/0x140 [ 2262.305238][T26436] do_mkdirat+0x9d/0x2f0 [ 2262.309499][T26436] ? __ia32_sys_mknod+0xb0/0xb0 [ 2262.314372][T26436] ? getname_flags.part.0+0x1dd/0x4f0 [ 2262.319762][T26436] __x64_sys_mkdirat+0x119/0x170 [ 2262.324715][T26436] do_syscall_64+0x39/0xb0 [ 2262.329155][T26436] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2262.335146][T26436] RIP: 0033:0x7f05ebe8b0e7 [ 2262.339567][T26436] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2262.359178][T26436] RSP: 002b:00007ffed73d2ac8 EFLAGS: 00000202 ORIG_RAX: 0000000000000102 [ 2262.367596][T26436] RAX: ffffffffffffffda RBX: 00007ffed73d2b50 RCX: 00007f05ebe8b0e7 [ 2262.375573][T26436] RDX: 00000000000001ff RSI: 00007ffed73d2b50 RDI: 00000000ffffff9c [ 2262.383552][T26436] RBP: 00007ffed73d2b2c R08: 0000000000000000 R09: 0000000000000003 [ 2262.391525][T26436] R10: 00007ffed73d2867 R11: 0000000000000202 R12: 0000000000000032 [ 2262.399501][T26436] R13: 0000000000228073 R14: 0000000000000014 R15: 00007ffed73d2b90 [ 2262.407494][T26436] [ 2262.497687][T26436] memory: usage 10348kB, limit 0kB, failcnt 904 [ 2262.506587][T26436] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2262.521336][T26436] Memory cgroup stats for /syz4: [ 2262.521532][T26436] anon 40960 [ 2262.521532][T26436] file 10448896 [ 2262.521532][T26436] kernel 106496 [ 2262.521532][T26436] kernel_stack 0 [ 2262.521532][T26436] pagetables 8192 [ 2262.521532][T26436] sec_pagetables 0 [ 2262.521532][T26436] percpu 64 [ 2262.521532][T26436] sock 0 [ 2262.521532][T26436] vmalloc 0 [ 2262.521532][T26436] shmem 10448896 [ 2262.521532][T26436] zswap 0 [ 2262.521532][T26436] zswapped 0 [ 2262.521532][T26436] file_mapped 307200 [ 2262.521532][T26436] file_dirty 0 [ 2262.521532][T26436] file_writeback 0 [ 2262.521532][T26436] swapcached 0 [ 2262.521532][T26436] anon_thp 0 [ 2262.521532][T26436] file_thp 0 [ 2262.521532][T26436] shmem_thp 0 [ 2262.521532][T26436] inactive_anon 40960 [ 2262.521532][T26436] active_anon 10448896 [ 2262.521532][T26436] inactive_file 0 [ 2262.521532][T26436] active_file 0 [ 2262.521532][T26436] unevictable 0 [ 2262.521532][T26436] slab_reclaimable 41824 [ 2262.521532][T26436] slab_unreclaimable 44080 [ 2262.521532][T26436] slab 85904 [ 2262.621669][T26436] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=26436,uid=0 [ 2262.637941][T26436] Memory cgroup out of memory: Killed process 26436 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2262.657511][T21387] team0 (unregistering): Port device team_slave_1 removed [ 2262.677678][T21387] team0 (unregistering): Port device team_slave_0 removed [ 2262.703741][T21387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2262.732094][T21387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2262.844268][T21387] bond0 (unregistering): Released all slaves [ 2263.440299][T19460] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2263.448969][T19460] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2263.458009][T19460] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2263.466367][T19460] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2263.477732][T19460] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 11:00:13 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_int(r2, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r4, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2263.772431][T26675] chnl_net:caif_netlink_parms(): no params data found [ 2263.976141][T26675] bridge0: port 1(bridge_slave_0) entered blocking state [ 2263.987265][T26675] bridge0: port 1(bridge_slave_0) entered disabled state [ 2263.995508][T26675] device bridge_slave_0 entered promiscuous mode [ 2264.053657][T26675] bridge0: port 2(bridge_slave_1) entered blocking state [ 2264.064521][T26675] bridge0: port 2(bridge_slave_1) entered disabled state [ 2264.073365][T26675] device bridge_slave_1 entered promiscuous mode [ 2264.119481][T26675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2264.146291][T26675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2264.238598][T26675] team0: Port device team_slave_0 added [ 2264.264734][T26675] team0: Port device team_slave_1 added [ 2264.314370][T26675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2264.347878][T26675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2264.375219][T26675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2264.388491][T26675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2264.395460][T26675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2264.422101][T26675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2264.493764][T26675] device hsr_slave_0 entered promiscuous mode [ 2264.515046][T26675] device hsr_slave_1 entered promiscuous mode [ 2264.527909][T26675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2264.535515][T26675] Cannot create hsr debugfs directory [ 2265.527450][T10407] Bluetooth: hci0: command 0x0409 tx timeout [ 2265.556836][T26675] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2265.591659][T26675] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2265.604432][T26675] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2265.614504][T26675] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2265.745737][T21387] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2265.774799][T26675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2265.798068][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2265.806032][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2265.837771][T21387] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2265.866225][T26675] 8021q: adding VLAN 0 to HW filter on device team0 [ 2265.886154][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2265.898938][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2265.910503][ T8507] bridge0: port 1(bridge_slave_0) entered blocking state [ 2265.917665][ T8507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2265.946443][T21387] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2265.968843][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2265.987070][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2265.995922][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2266.017564][T21291] bridge0: port 2(bridge_slave_1) entered blocking state [ 2266.024677][T21291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2266.048269][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2266.067454][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2266.100768][T21387] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2266.157953][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2266.168050][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2266.179415][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2266.196788][T26675] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2266.208964][T26675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2266.234434][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2266.243615][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2266.264801][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2266.273843][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2266.284429][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2266.482841][T21387] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2266.571807][T21387] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2266.627642][T21387] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2266.733344][T21387] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2266.823246][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2266.831500][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2266.854358][T26675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2266.912126][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2266.921687][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2266.982272][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2266.991621][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2267.008622][T26675] device veth0_vlan entered promiscuous mode [ 2267.031256][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2267.044617][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2267.058837][T26675] device veth1_vlan entered promiscuous mode [ 2267.095743][T26675] device veth0_macvtap entered promiscuous mode [ 2267.138549][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2267.148793][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2267.157487][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2267.166460][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2267.178359][T26675] device veth1_macvtap entered promiscuous mode [ 2267.195350][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2267.262605][T26675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2267.273554][T26675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.286303][T26675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2267.307217][T26675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.318937][T26675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2267.330563][T26675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.341057][T26675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2267.351810][T26675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.362087][T26675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2267.373054][T26675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.384930][T26675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2267.405214][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2267.414135][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2267.450199][T26675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2267.461416][T26675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.472142][T26675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2267.483500][T26675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.501715][T26675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2267.515192][T26675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.527616][T26675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2267.538354][T26675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.549202][T26675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2267.562003][T26675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.573693][T26675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2267.590456][T26675] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2267.599522][T26675] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2267.615084][T26675] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2267.626064][T10407] Bluetooth: hci0: command 0x041b tx timeout [ 2267.632663][T26675] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2267.643674][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2267.656549][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2267.817911][T13787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2267.845576][T13787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2267.902012][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2267.931576][T13808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2267.957094][T13808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2267.978053][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2268.339118][T26748] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2268.364025][T26748] CPU: 1 PID: 26748 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2268.374493][T26748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2268.384579][T26748] Call Trace: [ 2268.387881][T26748] [ 2268.390834][T26748] dump_stack_lvl+0xd1/0x138 [ 2268.395476][T26748] dump_header+0x10b/0x85f [ 2268.399929][T26748] oom_kill_process.cold+0x10/0x15 [ 2268.405080][T26748] out_of_memory+0x35c/0x14a0 [ 2268.409819][T26748] ? oom_killer_disable+0x280/0x280 [ 2268.415062][T26748] ? mark_held_locks+0x9f/0xe0 [ 2268.419870][T26748] mem_cgroup_out_of_memory+0x206/0x270 [ 2268.425460][T26748] ? mem_cgroup_margin+0x130/0x130 [ 2268.430635][T26748] memory_max_write+0x2f9/0x3c0 [ 2268.435521][T26748] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2268.441629][T26748] ? lock_release+0x810/0x810 [ 2268.446343][T26748] cgroup_file_write+0x1e2/0x770 [ 2268.451321][T26748] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2268.457421][T26748] ? kill_css+0x370/0x370 [ 2268.461789][T26748] ? __virt_addr_valid+0x61/0x2e0 [ 2268.466880][T26748] ? kill_css+0x370/0x370 [ 2268.471244][T26748] kernfs_fop_write_iter+0x3f1/0x600 [ 2268.476559][T26748] vfs_write+0x9ed/0xdd0 [ 2268.480819][T26748] ? kernel_write+0x630/0x630 [ 2268.485512][T26748] ? __fget_files+0x26a/0x440 [ 2268.490218][T26748] ksys_write+0x12b/0x250 [ 2268.494572][T26748] ? __ia32_sys_read+0xb0/0xb0 [ 2268.499351][T26748] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2268.505267][T26748] do_syscall_64+0x39/0xb0 [ 2268.509702][T26748] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2268.515607][T26748] RIP: 0033:0x7f4326e8c0c9 [ 2268.520030][T26748] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2268.539646][T26748] RSP: 002b:00007f4327c47168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2268.548069][T26748] RAX: ffffffffffffffda RBX: 00007f4326fabf80 RCX: 00007f4326e8c0c9 [ 2268.556048][T26748] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2268.564021][T26748] RBP: 00007f4326ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2268.571997][T26748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2268.579978][T26748] R13: 00007ffe51b1b71f R14: 00007f4327c47300 R15: 0000000000022000 [ 2268.587978][T26748] [ 2268.613562][T26748] memory: usage 10612kB, limit 0kB, failcnt 770 [ 2268.623294][T26748] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2268.632712][T26748] Memory cgroup stats for /syz1: [ 2268.634356][T26748] anon 114688 [ 2268.634356][T26748] file 10444800 [ 2268.634356][T26748] kernel 294912 [ 2268.634356][T26748] kernel_stack 65536 [ 2268.634356][T26748] pagetables 81920 [ 2268.634356][T26748] sec_pagetables 0 [ 2268.634356][T26748] percpu 64 [ 2268.634356][T26748] sock 0 [ 2268.634356][T26748] vmalloc 0 [ 2268.634356][T26748] shmem 10444800 [ 2268.634356][T26748] zswap 0 [ 2268.634356][T26748] zswapped 0 [ 2268.634356][T26748] file_mapped 397312 [ 2268.634356][T26748] file_dirty 0 [ 2268.634356][T26748] file_writeback 0 [ 2268.634356][T26748] swapcached 0 [ 2268.634356][T26748] anon_thp 0 [ 2268.634356][T26748] file_thp 0 [ 2268.634356][T26748] shmem_thp 0 [ 2268.634356][T26748] inactive_anon 114688 [ 2268.634356][T26748] active_anon 10444800 [ 2268.634356][T26748] inactive_file 0 [ 2268.634356][T26748] active_file 0 [ 2268.634356][T26748] unevictable 0 [ 2268.634356][T26748] slab_reclaimable 42720 [ 2268.634356][T26748] slab_unreclaimable 73104 [ 2268.634356][T26748] slab 115824 [ 2268.849906][T26748] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=26675,uid=0 [ 2268.870475][T26748] Memory cgroup out of memory: Killed process 26675 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2269.203669][T21387] device hsr_slave_0 left promiscuous mode [ 2269.212336][T21387] device hsr_slave_1 left promiscuous mode [ 2269.219787][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2269.227551][T21387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2269.237597][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2269.245021][T21387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2269.254828][T21387] device bridge_slave_1 left promiscuous mode [ 2269.261408][T21387] bridge0: port 2(bridge_slave_1) entered disabled state [ 2269.272538][T21387] device bridge_slave_0 left promiscuous mode [ 2269.279153][T21387] bridge0: port 1(bridge_slave_0) entered disabled state [ 2269.292986][T21387] device hsr_slave_0 left promiscuous mode [ 2269.309144][T21387] device hsr_slave_1 left promiscuous mode [ 2269.317885][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2269.325313][T21387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2269.335473][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2269.343277][T21387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2269.352930][T21387] device bridge_slave_1 left promiscuous mode [ 2269.359896][T21387] bridge0: port 2(bridge_slave_1) entered disabled state [ 2269.380469][T21387] device bridge_slave_0 left promiscuous mode [ 2269.386690][T21387] bridge0: port 1(bridge_slave_0) entered disabled state [ 2269.413834][T21387] device veth1_macvtap left promiscuous mode [ 2269.425309][T21387] device veth0_macvtap left promiscuous mode [ 2269.434727][T21387] device veth1_vlan left promiscuous mode [ 2269.445945][T21387] device veth0_vlan left promiscuous mode [ 2269.470799][T21387] device veth1_macvtap left promiscuous mode [ 2269.476892][T21387] device veth0_macvtap left promiscuous mode [ 2269.491493][T21387] device veth1_vlan left promiscuous mode [ 2269.501814][T21387] device veth0_vlan left promiscuous mode [ 2270.087485][T21387] team0 (unregistering): Port device team_slave_1 removed [ 2270.102726][T21387] team0 (unregistering): Port device team_slave_0 removed [ 2270.120485][T21387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2270.133316][T21387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2270.202563][T21387] bond0 (unregistering): Released all slaves [ 2270.334845][T21387] team0 (unregistering): Port device team_slave_1 removed [ 2270.353820][T21387] team0 (unregistering): Port device team_slave_0 removed [ 2270.365502][T21387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2270.382006][T21387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2270.451118][T21387] bond0 (unregistering): Released all slaves 11:00:20 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:00:20 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r4, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:00:20 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:00:20 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x869, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:00:20 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:00:20 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:00:20 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x8e2, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:00:20 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:00:20 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x900, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2271.082083][T26807] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2271.134026][T26807] CPU: 0 PID: 26807 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2271.144500][T26807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2271.154614][T26807] Call Trace: [ 2271.157917][T26807] [ 2271.160862][T26807] dump_stack_lvl+0xd1/0x138 [ 2271.165491][T26807] dump_header+0x10b/0x85f [ 2271.169936][T26807] oom_kill_process.cold+0x10/0x15 [ 2271.175092][T26807] out_of_memory+0x35c/0x14a0 [ 2271.179827][T26807] ? oom_killer_disable+0x280/0x280 [ 2271.185082][T26807] mem_cgroup_out_of_memory+0x206/0x270 [ 2271.190677][T26807] ? mem_cgroup_margin+0x130/0x130 [ 2271.195838][T26807] memory_max_write+0x2f9/0x3c0 [ 2271.200717][T26807] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2271.206808][T26807] ? lock_release+0x810/0x810 [ 2271.211515][T26807] cgroup_file_write+0x1e2/0x770 [ 2271.216487][T26807] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2271.222580][T26807] ? kill_css+0x370/0x370 [ 2271.226943][T26807] ? __virt_addr_valid+0x61/0x2e0 [ 2271.232025][T26807] ? kill_css+0x370/0x370 [ 2271.236389][T26807] kernfs_fop_write_iter+0x3f1/0x600 [ 2271.241723][T26807] vfs_write+0x9ed/0xdd0 [ 2271.246007][T26807] ? kernel_write+0x630/0x630 [ 2271.250727][T26807] ? __fget_files+0x26a/0x440 [ 2271.255449][T26807] ksys_write+0x12b/0x250 [ 2271.259810][T26807] ? __ia32_sys_read+0xb0/0xb0 [ 2271.264599][T26807] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2271.270531][T26807] do_syscall_64+0x39/0xb0 [ 2271.274991][T26807] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2271.280911][T26807] RIP: 0033:0x7efc5068c0c9 [ 2271.285350][T26807] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2271.304981][T26807] RSP: 002b:00007efc513ce168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2271.313416][T26807] RAX: ffffffffffffffda RBX: 00007efc507abf80 RCX: 00007efc5068c0c9 [ 2271.321411][T26807] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000004 11:00:21 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2271.329405][T26807] RBP: 00007efc506e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2271.337399][T26807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2271.345388][T26807] R13: 00007ffc8b244eff R14: 00007efc513ce300 R15: 0000000000022000 [ 2271.353399][T26807] 11:00:21 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0xa00, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:00:21 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0xe00, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2271.957002][T26807] memory: usage 10600kB, limit 0kB, failcnt 513 [ 2271.963314][T26807] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2271.996979][T26807] Memory cgroup stats for /syz3: [ 2271.997212][T26807] anon 135168 [ 2271.997212][T26807] file 10436608 [ 2271.997212][T26807] kernel 249856 [ 2271.997212][T26807] kernel_stack 32768 [ 2271.997212][T26807] pagetables 77824 [ 2271.997212][T26807] sec_pagetables 0 [ 2271.997212][T26807] percpu 64 [ 2271.997212][T26807] sock 0 [ 2271.997212][T26807] vmalloc 0 [ 2271.997212][T26807] shmem 10436608 [ 2271.997212][T26807] zswap 0 [ 2271.997212][T26807] zswapped 0 [ 2271.997212][T26807] file_mapped 192512 [ 2271.997212][T26807] file_dirty 0 [ 2271.997212][T26807] file_writeback 0 [ 2271.997212][T26807] swapcached 0 [ 2271.997212][T26807] anon_thp 0 [ 2271.997212][T26807] file_thp 0 [ 2271.997212][T26807] shmem_thp 0 [ 2271.997212][T26807] inactive_anon 135168 [ 2271.997212][T26807] active_anon 10436608 [ 2271.997212][T26807] inactive_file 0 [ 2271.997212][T26807] active_file 0 [ 2271.997212][T26807] unevictable 0 [ 2271.997212][T26807] slab_reclaimable 37360 [ 2271.997212][T26807] slab_unreclaimable 71808 [ 2271.997212][T26807] slab 109168 [ 2272.162209][T26807] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=26210,uid=0 [ 2272.211594][T26807] Memory cgroup out of memory: Killed process 26210 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2273.247450][T19460] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2273.256256][T19460] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2273.265065][T19460] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2273.273983][T17937] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2273.286670][T17937] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2273.715404][T21387] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2273.821474][T21387] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2273.877361][T26846] chnl_net:caif_netlink_parms(): no params data found [ 2273.952363][T21387] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2273.964425][ T8419] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2273.964556][T10407] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2273.979756][ T8419] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2273.988738][T10407] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2273.996449][ T8419] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2274.009408][T10407] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2274.017959][T10407] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2274.025089][T10407] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2274.032748][T10407] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2274.042986][T10407] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2274.051793][T17937] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2274.144748][T21387] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2274.368051][T26846] bridge0: port 1(bridge_slave_0) entered blocking state [ 2274.375251][T26846] bridge0: port 1(bridge_slave_0) entered disabled state [ 2274.384875][T26846] device bridge_slave_0 entered promiscuous mode [ 2274.426673][T26846] bridge0: port 2(bridge_slave_1) entered blocking state [ 2274.442457][T26846] bridge0: port 2(bridge_slave_1) entered disabled state [ 2274.464692][T26846] device bridge_slave_1 entered promiscuous mode [ 2274.624038][T21387] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2274.749733][T26846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2274.783020][T21387] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2274.806716][T26846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2274.944512][T21387] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2275.043792][T26846] team0: Port device team_slave_0 added [ 2275.093507][T21387] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2275.145972][T26846] team0: Port device team_slave_1 added [ 2275.177444][T26859] chnl_net:caif_netlink_parms(): no params data found [ 2275.307325][T26846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2275.314304][T26846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2275.340789][T26846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2275.354017][T26846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2275.361154][T26846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2275.387175][T17937] Bluetooth: hci0: command 0x0409 tx timeout [ 2275.393210][T26846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2275.413145][T26858] chnl_net:caif_netlink_parms(): no params data found [ 2275.501907][T26859] bridge0: port 1(bridge_slave_0) entered blocking state [ 2275.509879][T26859] bridge0: port 1(bridge_slave_0) entered disabled state [ 2275.518176][T26859] device bridge_slave_0 entered promiscuous mode [ 2275.537486][T26846] device hsr_slave_0 entered promiscuous mode [ 2275.548133][T26846] device hsr_slave_1 entered promiscuous mode [ 2275.583259][T26859] bridge0: port 2(bridge_slave_1) entered blocking state [ 2275.592173][T26859] bridge0: port 2(bridge_slave_1) entered disabled state [ 2275.600796][T26859] device bridge_slave_1 entered promiscuous mode [ 2275.829702][T26859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2275.844684][T26858] bridge0: port 1(bridge_slave_0) entered blocking state [ 2275.853322][T26858] bridge0: port 1(bridge_slave_0) entered disabled state [ 2275.861928][T26858] device bridge_slave_0 entered promiscuous mode [ 2275.873019][T26859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2275.900620][T26858] bridge0: port 2(bridge_slave_1) entered blocking state [ 2275.908050][T26858] bridge0: port 2(bridge_slave_1) entered disabled state [ 2275.919420][T26858] device bridge_slave_1 entered promiscuous mode [ 2275.942206][T26859] team0: Port device team_slave_0 added [ 2275.992039][T26859] team0: Port device team_slave_1 added [ 2276.043238][T26858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2276.074110][T26858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2276.087258][T17937] Bluetooth: hci1: command 0x0409 tx timeout [ 2276.097292][T17937] Bluetooth: hci4: command 0x0409 tx timeout [ 2276.126307][T26859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2276.142821][T26859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2276.177206][T26859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2276.328516][T26859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2276.335509][T26859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2276.379992][T26859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2276.482497][T26858] team0: Port device team_slave_0 added [ 2276.538715][T26858] team0: Port device team_slave_1 added [ 2276.707785][T26858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2276.714781][T26858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2276.776991][T26858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2276.821080][T26859] device hsr_slave_0 entered promiscuous mode [ 2276.837916][T26859] device hsr_slave_1 entered promiscuous mode [ 2276.847356][T26859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2276.854942][T26859] Cannot create hsr debugfs directory [ 2276.944993][T26858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2276.967377][T26858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2277.017024][T26858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2277.199337][T26858] device hsr_slave_0 entered promiscuous mode [ 2277.208816][T26858] device hsr_slave_1 entered promiscuous mode [ 2277.215496][T26858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2277.225391][T26858] Cannot create hsr debugfs directory [ 2277.365846][T26846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2277.402620][T26846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2277.458945][T19460] Bluetooth: hci0: command 0x041b tx timeout [ 2277.532829][T26846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2277.589723][T26846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2277.990836][T26846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2278.050358][T21387] device hsr_slave_0 left promiscuous mode [ 2278.066635][T21387] device hsr_slave_1 left promiscuous mode [ 2278.076570][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2278.101795][T21387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2278.120690][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2278.135172][T21387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2278.146255][T21387] device bridge_slave_1 left promiscuous mode [ 2278.162285][T21387] bridge0: port 2(bridge_slave_1) entered disabled state [ 2278.169850][T19460] Bluetooth: hci4: command 0x041b tx timeout [ 2278.177314][T17937] Bluetooth: hci1: command 0x041b tx timeout [ 2278.184562][T21387] device bridge_slave_0 left promiscuous mode [ 2278.195226][T21387] bridge0: port 1(bridge_slave_0) entered disabled state [ 2278.223264][T21387] device hsr_slave_0 left promiscuous mode [ 2278.230052][T21387] device hsr_slave_1 left promiscuous mode [ 2278.236595][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2278.245480][T21387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2278.255465][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2278.263191][T21387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2278.272794][T21387] device bridge_slave_1 left promiscuous mode [ 2278.279234][T21387] bridge0: port 2(bridge_slave_1) entered disabled state [ 2278.288201][T21387] device bridge_slave_0 left promiscuous mode [ 2278.294423][T21387] bridge0: port 1(bridge_slave_0) entered disabled state [ 2278.312109][T21387] device veth1_macvtap left promiscuous mode [ 2278.318229][T21387] device veth0_macvtap left promiscuous mode [ 2278.324429][T21387] device veth1_vlan left promiscuous mode [ 2278.330535][T21387] device veth0_vlan left promiscuous mode [ 2278.338479][T21387] device veth1_macvtap left promiscuous mode [ 2278.344554][T21387] device veth0_macvtap left promiscuous mode [ 2278.352379][T21387] device veth1_vlan left promiscuous mode [ 2278.358318][T21387] device veth0_vlan left promiscuous mode [ 2278.792964][T21387] team0 (unregistering): Port device team_slave_1 removed [ 2278.805307][T21387] team0 (unregistering): Port device team_slave_0 removed [ 2278.821754][T21387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2278.835657][T21387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2278.902731][T21387] bond0 (unregistering): Released all slaves [ 2279.015551][T21387] team0 (unregistering): Port device team_slave_1 removed [ 2279.030510][T21387] team0 (unregistering): Port device team_slave_0 removed [ 2279.049597][T21387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2279.066757][T21387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2279.132025][T21387] bond0 (unregistering): Released all slaves [ 2279.199119][T26846] 8021q: adding VLAN 0 to HW filter on device team0 [ 2279.216703][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2279.224810][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2279.233710][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2279.244454][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2279.252941][ T8584] bridge0: port 1(bridge_slave_0) entered blocking state [ 2279.260078][ T8584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2279.277374][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2279.285384][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2279.294130][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2279.303128][ T8584] bridge0: port 2(bridge_slave_1) entered blocking state [ 2279.310271][ T8584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2279.317949][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2279.326322][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2279.363120][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2279.374354][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2279.408824][T26846] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2279.444927][T26846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2279.458215][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2279.466701][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2279.498267][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2279.516356][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2279.527837][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2279.537424][T19460] Bluetooth: hci0: command 0x040f tx timeout [ 2279.606192][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2279.669656][T26859] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2279.690580][T26859] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2279.756290][T26859] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2279.805583][T26859] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2280.097351][T26846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2280.106235][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2280.123546][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2280.142025][T26859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2280.218624][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2280.226671][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2280.246519][T26859] 8021q: adding VLAN 0 to HW filter on device team0 [ 2280.253503][T19460] Bluetooth: hci1: command 0x040f tx timeout [ 2280.259898][T17937] Bluetooth: hci4: command 0x040f tx timeout [ 2280.378968][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2280.399066][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2280.427493][T15119] bridge0: port 1(bridge_slave_0) entered blocking state [ 2280.434610][T15119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2280.475541][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2280.497928][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2280.506427][T15119] bridge0: port 2(bridge_slave_1) entered blocking state [ 2280.513582][T15119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2280.535047][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2280.578167][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2280.586255][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2280.608015][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2280.637619][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2280.653199][T26859] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2280.690741][T26859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2280.736586][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2280.748731][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2280.763471][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2280.772401][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2280.788170][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2280.803203][T26858] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2280.829128][T26858] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2280.844083][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2280.860573][T26858] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2280.881697][T26858] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2281.128780][T26858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2281.160813][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2281.187655][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2281.199888][T26858] 8021q: adding VLAN 0 to HW filter on device team0 [ 2281.227357][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2281.236730][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2281.286524][T26846] device veth0_vlan entered promiscuous mode [ 2281.310197][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2281.319687][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2281.337684][T10486] bridge0: port 1(bridge_slave_0) entered blocking state [ 2281.344804][T10486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2281.383811][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2281.404113][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2281.443964][T10486] bridge0: port 2(bridge_slave_1) entered blocking state [ 2281.451155][T10486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2281.483079][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2281.498576][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2281.517199][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2281.541988][T26846] device veth1_vlan entered promiscuous mode [ 2281.587791][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2281.595924][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2281.607603][T17937] Bluetooth: hci0: command 0x0419 tx timeout [ 2281.620731][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2281.651687][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2281.680434][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2281.718312][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2281.735640][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2281.758704][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2281.766189][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2281.781061][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2281.796746][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2281.816648][T26859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2281.837123][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2281.845361][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2281.867788][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2281.876263][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2281.910141][T26858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2281.956597][T26846] device veth0_macvtap entered promiscuous mode [ 2281.988532][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2282.010034][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2282.038333][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2282.049103][T26846] device veth1_macvtap entered promiscuous mode [ 2282.090349][T26846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2282.127382][T26846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.147764][T26846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2282.164962][T26846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.205098][T26846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2282.238179][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2282.246301][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2282.269588][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2282.284091][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2282.294988][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2282.321207][T26846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2282.337110][T17937] Bluetooth: hci1: command 0x0419 tx timeout [ 2282.338079][T26846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.343146][T17937] Bluetooth: hci4: command 0x0419 tx timeout [ 2282.353462][T26846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2282.371225][T26846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.383583][T26846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2282.422489][T26859] device veth0_vlan entered promiscuous mode [ 2282.454354][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2282.466199][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2282.479190][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2282.489836][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2282.535063][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2282.543574][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2282.569499][T26846] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2282.596710][T26846] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2282.613234][T26846] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2282.622500][T26846] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2282.647463][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2282.654987][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2282.665844][T26859] device veth1_vlan entered promiscuous mode [ 2282.681718][T26858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2282.767193][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2282.775439][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2282.797984][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2282.817579][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2282.878559][T26859] device veth0_macvtap entered promiscuous mode [ 2282.906236][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2282.928071][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2282.938225][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2282.954324][T26858] device veth0_vlan entered promiscuous mode [ 2282.963470][T13787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2282.970016][ T1201] ieee802154 phy0 wpan0: encryption failed: -22 [ 2282.977914][ T1201] ieee802154 phy1 wpan1: encryption failed: -22 [ 2282.996223][T13787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2283.013527][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2283.037798][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2283.046449][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2283.067885][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2283.075879][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2283.103643][T26859] device veth1_macvtap entered promiscuous mode [ 2283.145879][T26858] device veth1_vlan entered promiscuous mode [ 2283.159864][T13787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2283.160172][T26859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2283.184367][T13787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2283.196985][T26859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.206826][T26859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2283.220553][T26859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.231071][T26859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2283.241915][T26859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.254070][T26859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2283.273078][T26859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2283.284646][T26859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.302893][T26859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2283.313636][T26859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.327203][T26859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2283.337717][T26859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.348952][T26859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2283.363104][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2283.371076][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2283.379516][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2283.387793][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2283.395909][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2283.404614][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2283.413573][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2283.422345][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2283.458558][T26859] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2283.475962][T26859] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2283.485185][T26859] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2283.494590][T26859] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2283.510364][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2283.545578][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2283.569064][T26858] device veth0_macvtap entered promiscuous mode [ 2283.626616][T26858] device veth1_macvtap entered promiscuous mode [ 2283.736283][T26858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2283.773174][T26858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.788908][T26858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2283.805618][T26858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.822959][T26858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2283.841347][T26858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.858692][T26858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2283.878273][T26858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.918171][T26858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2283.953674][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2283.971530][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2283.993771][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2284.042735][T27003] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2284.054227][T27003] CPU: 0 PID: 27003 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2284.057899][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2284.064659][T27003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2284.082805][T27003] Call Trace: [ 2284.086109][T27003] [ 2284.089063][T27003] dump_stack_lvl+0xd1/0x138 [ 2284.093697][T27003] dump_header+0x10b/0x85f [ 2284.098152][T27003] oom_kill_process.cold+0x10/0x15 [ 2284.103310][T27003] out_of_memory+0x35c/0x14a0 [ 2284.108047][T27003] ? oom_killer_disable+0x280/0x280 [ 2284.113296][T27003] ? mark_held_locks+0x9f/0xe0 [ 2284.118103][T27003] mem_cgroup_out_of_memory+0x206/0x270 [ 2284.123695][T27003] ? mem_cgroup_margin+0x130/0x130 [ 2284.128869][T27003] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 2284.134729][T27003] memory_max_write+0x2f9/0x3c0 [ 2284.139616][T27003] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2284.145719][T27003] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2284.151909][T27003] ? lockdep_hardirqs_on+0x7d/0x100 [ 2284.157144][T27003] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2284.163333][T27003] cgroup_file_write+0x1e2/0x770 [ 2284.168296][T27003] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2284.174375][T27003] ? kill_css+0x370/0x370 [ 2284.178720][T27003] ? lock_is_held_type+0x103/0x140 [ 2284.183857][T27003] ? kill_css+0x370/0x370 [ 2284.188200][T27003] kernfs_fop_write_iter+0x3f1/0x600 [ 2284.193515][T27003] vfs_write+0x9ed/0xdd0 [ 2284.197791][T27003] ? kernel_write+0x630/0x630 [ 2284.202489][T27003] ? __fget_files+0x26a/0x440 [ 2284.207197][T27003] ksys_write+0x12b/0x250 [ 2284.211545][T27003] ? __ia32_sys_read+0xb0/0xb0 [ 2284.216348][T27003] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2284.222267][T27003] do_syscall_64+0x39/0xb0 [ 2284.226702][T27003] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2284.232612][T27003] RIP: 0033:0x7f12ece8c0c9 [ 2284.237038][T27003] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2284.256658][T27003] RSP: 002b:00007f12edb24168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2284.265095][T27003] RAX: ffffffffffffffda RBX: 00007f12ecfabf80 RCX: 00007f12ece8c0c9 [ 2284.273079][T27003] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2284.281053][T27003] RBP: 00007f12ecee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2284.289027][T27003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2284.297005][T27003] R13: 00007fffe67cb0ef R14: 00007f12edb24300 R15: 0000000000022000 [ 2284.305017][T27003] [ 2284.321561][T26858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2284.344264][T26858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2284.361628][T26858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2284.373904][T26858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2284.392901][T26858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2284.410468][T26858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2284.427688][T26858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2284.445268][T26858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2284.456574][T27003] memory: usage 10620kB, limit 0kB, failcnt 921 [ 2284.463625][T26858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2284.463677][T27003] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2284.485865][T27003] Memory cgroup stats for /syz4: [ 2284.486082][T27003] anon 114688 [ 2284.486082][T27003] file 10448896 [ 2284.486082][T27003] kernel 266240 [ 2284.486082][T27003] kernel_stack 32768 [ 2284.486082][T27003] pagetables 77824 [ 2284.486082][T27003] sec_pagetables 0 [ 2284.486082][T27003] percpu 64 [ 2284.486082][T27003] sock 0 [ 2284.486082][T27003] vmalloc 0 [ 2284.486082][T27003] shmem 10448896 [ 2284.486082][T27003] zswap 0 [ 2284.486082][T27003] zswapped 0 [ 2284.486082][T27003] file_mapped 335872 [ 2284.486082][T27003] file_dirty 0 [ 2284.486082][T27003] file_writeback 0 [ 2284.486082][T27003] swapcached 0 [ 2284.486082][T27003] anon_thp 0 [ 2284.486082][T27003] file_thp 0 [ 2284.486082][T27003] shmem_thp 0 [ 2284.486082][T27003] inactive_anon 114688 [ 2284.486082][T27003] active_anon 10448896 [ 2284.486082][T27003] inactive_file 0 [ 2284.486082][T27003] active_file 0 [ 2284.486082][T27003] unevictable 0 [ 2284.486082][T27003] slab_reclaimable 54224 [ 2284.486082][T27003] slab_unreclaimable 73104 [ 2284.486082][T27003] slab 127328 [ 2284.487887][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2284.495316][T27003] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 2284.584077][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2284.607241][T27003] ,cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=27002,uid=0 [ 2284.624559][T27003] Memory cgroup out of memory: Killed process 27003 (syz-executor.4) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2284.637854][ T6761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2284.663426][T26858] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2284.667312][ T6761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2284.680975][T26858] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2284.690354][T26858] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2284.706327][T26858] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2284.752233][T26846] syz-executor.4 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 2284.767093][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2284.799375][T26846] CPU: 0 PID: 26846 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2284.809836][T26846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2284.819910][T26846] Call Trace: [ 2284.823208][T26846] [ 2284.826164][T26846] dump_stack_lvl+0xd1/0x138 [ 2284.830795][T26846] dump_header+0x10b/0x85f [ 2284.835260][T26846] oom_kill_process.cold+0x10/0x15 [ 2284.840409][T26846] out_of_memory+0x35c/0x14a0 [ 2284.845136][T26846] ? find_held_lock+0x2d/0x110 [ 2284.849947][T26846] ? oom_killer_disable+0x280/0x280 [ 2284.855191][T26846] ? find_held_lock+0x2d/0x110 [ 2284.860010][T26846] mem_cgroup_out_of_memory+0x206/0x270 [ 2284.865595][T26846] ? mem_cgroup_margin+0x130/0x130 [ 2284.870742][T26846] ? lock_downgrade+0x6e0/0x6e0 [ 2284.875643][T26846] try_charge_memcg+0xefb/0x12f0 [ 2284.880623][T26846] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2284.886634][T26846] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2284.892380][T26846] ? lock_downgrade+0x6e0/0x6e0 [ 2284.897281][T26846] obj_cgroup_charge+0x2af/0x5e0 [ 2284.902262][T26846] kmem_cache_alloc_lru+0x145/0x760 [ 2284.907488][T26846] ? ext4_alloc_inode+0x28/0x680 [ 2284.912462][T26846] ? ext4_free_in_core_inode+0x70/0x70 [ 2284.917956][T26846] ext4_alloc_inode+0x28/0x680 [ 2284.922757][T26846] ? ext4_free_in_core_inode+0x70/0x70 [ 2284.928248][T26846] alloc_inode+0x61/0x230 [ 2284.932617][T26846] iget_locked+0x1bb/0x700 [ 2284.937078][T26846] __ext4_iget+0x3af/0x4230 [ 2284.941633][T26846] ? ext4_get_projid+0x190/0x190 [ 2284.946607][T26846] ? ext4_fname_prepare_lookup+0x163/0x200 [ 2284.952445][T26846] ? ext4_fname_setup_filename+0x110/0x110 [ 2284.958296][T26846] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2284.963884][T26846] ext4_lookup+0x387/0x700 [ 2284.968329][T26846] ? ext4_resetent+0x2d0/0x2d0 [ 2284.973153][T26846] __lookup_slow+0x24c/0x460 [ 2284.977784][T26846] ? __lookup_hash+0x180/0x180 [ 2284.982587][T26846] ? snd_usb_parse_audio_format.cold+0x4f7/0x534 [ 2284.988961][T26846] ? snd_usb_parse_audio_format.cold+0x4f7/0x534 [ 2284.995330][T26846] ? lookup_fast+0x14e/0x520 [ 2284.999959][T26846] walk_component+0x33f/0x5a0 [ 2285.004674][T26846] path_lookupat+0x1ba/0x840 [ 2285.009316][T26846] filename_lookup+0x1d2/0x590 [ 2285.014118][T26846] ? may_linkat+0x500/0x500 [ 2285.018651][T26846] ? __might_fault+0xd9/0x180 [ 2285.023380][T26846] ? __phys_addr_symbol+0x30/0x70 [ 2285.028439][T26846] ? __check_object_size+0x2e2/0x5a0 [ 2285.033772][T26846] ? strncpy_from_user+0x28b/0x3c0 [ 2285.038931][T26846] ? getname_flags.part.0+0x1dd/0x4f0 [ 2285.044348][T26846] user_path_at_empty+0x46/0x60 [ 2285.049246][T26846] __x64_sys_umount+0xfc/0x190 [ 2285.054044][T26846] ? path_umount+0x10b0/0x10b0 [ 2285.058846][T26846] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2285.064778][T26846] do_syscall_64+0x39/0xb0 [ 2285.069235][T26846] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2285.075161][T26846] RIP: 0033:0x7f12ece8d537 [ 2285.079597][T26846] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2285.099232][T26846] RSP: 002b:00007fffe67ca248 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2285.107679][T26846] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12ece8d537 [ 2285.115662][T26846] RDX: 00007fffe67ca31e RSI: 000000000000000a RDI: 00007fffe67ca310 [ 2285.123625][T26846] RBP: 00007fffe67ca310 R08: 00000000ffffffff R09: 00007fffe67ca0e0 [ 2285.131588][T26846] R10: 0000555556a5f8bb R11: 0000000000000246 R12: 00007f12ecee6b24 [ 2285.139553][T26846] R13: 00007fffe67cb3d0 R14: 0000555556a5f810 R15: 00007fffe67cb410 [ 2285.147558][T26846] [ 2285.166869][T26846] memory: usage 10380kB, limit 0kB, failcnt 940 [ 2285.173303][T26846] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2285.181075][T26846] Memory cgroup stats for /syz4: [ 2285.181264][T26846] anon 45056 [ 2285.181264][T26846] file 10448896 [ 2285.181264][T26846] kernel 114688 [ 2285.181264][T26846] kernel_stack 0 [ 2285.181264][T26846] pagetables 8192 [ 2285.181264][T26846] sec_pagetables 0 [ 2285.181264][T26846] percpu 64 [ 2285.181264][T26846] sock 0 [ 2285.181264][T26846] vmalloc 0 [ 2285.181264][T26846] shmem 10448896 [ 2285.181264][T26846] zswap 0 [ 2285.181264][T26846] zswapped 0 [ 2285.181264][T26846] file_mapped 307200 [ 2285.181264][T26846] file_dirty 0 [ 2285.181264][T26846] file_writeback 0 [ 2285.181264][T26846] swapcached 0 [ 2285.181264][T26846] anon_thp 0 [ 2285.181264][T26846] file_thp 0 [ 2285.181264][T26846] shmem_thp 0 [ 2285.181264][T26846] inactive_anon 36864 [ 2285.181264][T26846] active_anon 10448896 [ 2285.181264][T26846] inactive_file 0 [ 2285.181264][T26846] active_file 0 [ 2285.181264][T26846] unevictable 0 [ 2285.181264][T26846] slab_reclaimable 46320 [ 2285.181264][T26846] slab_unreclaimable 45056 [ 2285.181264][T26846] slab 91376 [ 2285.280089][T21387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2285.299374][T21387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2285.319108][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2285.323262][T26846] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=26846,uid=0 [ 2285.345497][T26846] Memory cgroup out of memory: Killed process 26846 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2285.365744][ T6761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2285.374801][ T6761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2285.386641][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2285.469024][T27024] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2285.479797][T27024] CPU: 1 PID: 27024 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2285.490241][T27024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2285.500305][T27024] Call Trace: [ 2285.503592][T27024] [ 2285.506520][T27024] dump_stack_lvl+0xd1/0x138 [ 2285.511126][T27024] dump_header+0x10b/0x85f [ 2285.515555][T27024] oom_kill_process.cold+0x10/0x15 [ 2285.520695][T27024] out_of_memory+0x35c/0x14a0 [ 2285.525410][T27024] ? oom_killer_disable+0x280/0x280 [ 2285.530641][T27024] mem_cgroup_out_of_memory+0x206/0x270 [ 2285.536233][T27024] ? mem_cgroup_margin+0x130/0x130 [ 2285.541374][T27024] memory_max_write+0x2f9/0x3c0 [ 2285.546244][T27024] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2285.552345][T27024] ? lock_release+0x810/0x810 [ 2285.557053][T27024] cgroup_file_write+0x1e2/0x770 [ 2285.562015][T27024] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2285.568100][T27024] ? kill_css+0x370/0x370 [ 2285.572452][T27024] ? __virt_addr_valid+0x61/0x2e0 [ 2285.577519][T27024] ? kill_css+0x370/0x370 [ 2285.581871][T27024] kernfs_fop_write_iter+0x3f1/0x600 [ 2285.587191][T27024] vfs_write+0x9ed/0xdd0 [ 2285.591455][T27024] ? kernel_write+0x630/0x630 [ 2285.596152][T27024] ? __fget_files+0x26a/0x440 [ 2285.600860][T27024] ksys_write+0x12b/0x250 [ 2285.605202][T27024] ? __ia32_sys_read+0xb0/0xb0 [ 2285.609983][T27024] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2285.615894][T27024] do_syscall_64+0x39/0xb0 [ 2285.620329][T27024] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2285.626235][T27024] RIP: 0033:0x7f6bf768c0c9 [ 2285.630657][T27024] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2285.650268][T27024] RSP: 002b:00007f6bf830d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2285.658688][T27024] RAX: ffffffffffffffda RBX: 00007f6bf77abf80 RCX: 00007f6bf768c0c9 [ 2285.666685][T27024] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2285.674684][T27024] RBP: 00007f6bf76e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2285.682678][T27024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2285.690671][T27024] R13: 00007ffe13d6ae7f R14: 00007f6bf830d300 R15: 0000000000022000 [ 2285.698688][T27024] [ 2285.705751][T27024] memory: usage 8564kB, limit 0kB, failcnt 907 [ 2285.713255][T27024] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2285.720227][T27024] Memory cgroup stats for /syz2: [ 2285.720403][T27024] anon 114688 [ 2285.720403][T27024] file 8355840 [ 2285.720403][T27024] kernel 282624 [ 2285.720403][T27024] kernel_stack 65536 [ 2285.720403][T27024] pagetables 77824 [ 2285.720403][T27024] sec_pagetables 0 [ 2285.720403][T27024] percpu 64 [ 2285.720403][T27024] sock 0 [ 2285.720403][T27024] vmalloc 0 [ 2285.720403][T27024] shmem 8351744 [ 2285.720403][T27024] zswap 0 [ 2285.720403][T27024] zswapped 0 [ 2285.720403][T27024] file_mapped 335872 [ 2285.720403][T27024] file_dirty 0 [ 2285.720403][T27024] file_writeback 0 [ 2285.720403][T27024] swapcached 0 [ 2285.720403][T27024] anon_thp 0 [ 2285.720403][T27024] file_thp 0 [ 2285.720403][T27024] shmem_thp 0 [ 2285.720403][T27024] inactive_anon 86016 [ 2285.720403][T27024] active_anon 8351744 [ 2285.720403][T27024] inactive_file 0 [ 2285.720403][T27024] active_file 4096 [ 2285.720403][T27024] unevictable 0 [ 2285.720403][T27024] slab_reclaimable 36880 [ 2285.720403][T27024] slab_unreclaimable 73752 [ 2285.720403][T27024] slab 110632 [ 2285.731134][ T8443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2285.849527][ T8443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2285.866398][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2285.884352][T27024] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=26859,uid=0 [ 2285.900453][T27024] Memory cgroup out of memory: Killed process 26859 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2285.925905][T27024] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2285.944901][T27024] CPU: 1 PID: 27024 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2285.955368][T27024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2285.965452][T27024] Call Trace: [ 2285.968756][T27024] [ 2285.971712][T27024] dump_stack_lvl+0xd1/0x138 [ 2285.976350][T27024] dump_header+0x10b/0x85f [ 2285.980804][T27024] oom_kill_process.cold+0x10/0x15 [ 2285.985954][T27024] out_of_memory+0x35c/0x14a0 [ 2285.990690][T27024] ? oom_killer_disable+0x280/0x280 [ 2285.995937][T27024] ? find_held_lock+0x2d/0x110 [ 2286.000753][T27024] mem_cgroup_out_of_memory+0x206/0x270 [ 2286.006343][T27024] ? mem_cgroup_margin+0x130/0x130 [ 2286.011513][T27024] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2286.017375][T27024] memory_max_write+0x2f9/0x3c0 [ 2286.022267][T27024] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2286.028377][T27024] ? lock_release+0x810/0x810 [ 2286.033096][T27024] cgroup_file_write+0x1e2/0x770 [ 2286.038076][T27024] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2286.044178][T27024] ? kill_css+0x370/0x370 [ 2286.048555][T27024] ? __virt_addr_valid+0x61/0x2e0 [ 2286.053666][T27024] ? kill_css+0x370/0x370 [ 2286.058040][T27024] kernfs_fop_write_iter+0x3f1/0x600 [ 2286.063379][T27024] vfs_write+0x9ed/0xdd0 [ 2286.067671][T27024] ? kernel_write+0x630/0x630 [ 2286.072391][T27024] ? __fget_files+0x26a/0x440 [ 2286.077119][T27024] ksys_write+0x12b/0x250 [ 2286.081485][T27024] ? __ia32_sys_read+0xb0/0xb0 [ 2286.086288][T27024] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2286.092230][T27024] do_syscall_64+0x39/0xb0 [ 2286.096699][T27024] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2286.102631][T27024] RIP: 0033:0x7f6bf768c0c9 [ 2286.107076][T27024] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2286.126715][T27024] RSP: 002b:00007f6bf830d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2286.135170][T27024] RAX: ffffffffffffffda RBX: 00007f6bf77abf80 RCX: 00007f6bf768c0c9 [ 2286.143169][T27024] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2286.151165][T27024] RBP: 00007f6bf76e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2286.159164][T27024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2286.167160][T27024] R13: 00007ffe13d6ae7f R14: 00007f6bf830d300 R15: 0000000000022000 [ 2286.175178][T27024] [ 2286.207223][T27024] memory: usage 8504kB, limit 0kB, failcnt 907 [ 2286.213436][T27024] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2286.221464][T27024] Memory cgroup stats for /syz2: [ 2286.221688][T27024] anon 98304 [ 2286.221688][T27024] file 8355840 [ 2286.221688][T27024] kernel 237568 [ 2286.221688][T27024] kernel_stack 32768 [ 2286.221688][T27024] pagetables 69632 [ 2286.221688][T27024] sec_pagetables 0 [ 2286.221688][T27024] percpu 64 [ 2286.221688][T27024] sock 0 [ 2286.221688][T27024] vmalloc 0 [ 2286.221688][T27024] shmem 8351744 [ 2286.221688][T27024] zswap 0 [ 2286.221688][T27024] zswapped 0 [ 2286.221688][T27024] file_mapped 335872 [ 2286.221688][T27024] file_dirty 0 [ 2286.221688][T27024] file_writeback 0 [ 2286.221688][T27024] swapcached 0 [ 2286.221688][T27024] anon_thp 0 [ 2286.221688][T27024] file_thp 0 [ 2286.221688][T27024] shmem_thp 0 [ 2286.221688][T27024] inactive_anon 98304 [ 2286.221688][T27024] active_anon 8351744 [ 2286.221688][T27024] inactive_file 0 [ 2286.221688][T27024] active_file 4096 [ 2286.221688][T27024] unevictable 0 [ 2286.221688][T27024] slab_reclaimable 36880 [ 2286.221688][T27024] slab_unreclaimable 73104 [ 2286.221688][T27024] slab 109984 [ 2286.325353][T27024] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=27023,uid=0 [ 2286.351964][T27024] Memory cgroup out of memory: Killed process 27024 (syz-executor.2) total-vm:54540kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2286.379769][T27034] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2286.393845][ T8443] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2286.402704][T27034] CPU: 0 PID: 27034 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2286.414727][T27034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2286.424806][T27034] Call Trace: [ 2286.428116][T27034] [ 2286.431071][T27034] dump_stack_lvl+0xd1/0x138 [ 2286.435708][T27034] dump_header+0x10b/0x85f [ 2286.440159][T27034] oom_kill_process.cold+0x10/0x15 [ 2286.445302][T27034] out_of_memory+0x35c/0x14a0 [ 2286.450016][T27034] ? oom_killer_disable+0x280/0x280 [ 2286.455247][T27034] mem_cgroup_out_of_memory+0x206/0x270 [ 2286.460817][T27034] ? mem_cgroup_margin+0x130/0x130 [ 2286.465964][T27034] memory_max_write+0x2f9/0x3c0 [ 2286.470831][T27034] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2286.476912][T27034] ? lock_release+0x810/0x810 [ 2286.481610][T27034] cgroup_file_write+0x1e2/0x770 [ 2286.486563][T27034] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2286.492638][T27034] ? kill_css+0x370/0x370 [ 2286.496982][T27034] ? __virt_addr_valid+0x61/0x2e0 [ 2286.502032][T27034] ? kill_css+0x370/0x370 [ 2286.506382][T27034] kernfs_fop_write_iter+0x3f1/0x600 [ 2286.511693][T27034] vfs_write+0x9ed/0xdd0 [ 2286.515950][T27034] ? kernel_write+0x630/0x630 [ 2286.520641][T27034] ? __fget_files+0x26a/0x440 [ 2286.525366][T27034] ksys_write+0x12b/0x250 [ 2286.529708][T27034] ? __ia32_sys_read+0xb0/0xb0 [ 2286.534485][T27034] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2286.540397][T27034] do_syscall_64+0x39/0xb0 [ 2286.544834][T27034] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2286.550740][T27034] RIP: 0033:0x7f5b2b08c0c9 [ 2286.555163][T27034] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2286.574780][T27034] RSP: 002b:00007f5b2bd48168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2286.583197][T27034] RAX: ffffffffffffffda RBX: 00007f5b2b1ac050 RCX: 00007f5b2b08c0c9 [ 2286.591174][T27034] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2286.599148][T27034] RBP: 00007f5b2b0e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2286.607124][T27034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2286.615104][T27034] R13: 00007ffdc68b997f R14: 00007f5b2bd48300 R15: 0000000000022000 [ 2286.623103][T27034] [ 2286.648284][T27034] memory: usage 10640kB, limit 0kB, failcnt 789 [ 2286.654680][T27034] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2286.668719][T27034] Memory cgroup stats for /syz1: [ 2286.668942][T27034] anon 118784 [ 2286.668942][T27034] file 10444800 [ 2286.668942][T27034] kernel 331776 [ 2286.668942][T27034] kernel_stack 98304 [ 2286.668942][T27034] pagetables 77824 [ 2286.668942][T27034] sec_pagetables 0 [ 2286.668942][T27034] percpu 64 [ 2286.668942][T27034] sock 0 [ 2286.668942][T27034] vmalloc 0 [ 2286.668942][T27034] shmem 10444800 [ 2286.668942][T27034] zswap 0 [ 2286.668942][T27034] zswapped 0 [ 2286.668942][T27034] file_mapped 397312 [ 2286.668942][T27034] file_dirty 0 [ 2286.668942][T27034] file_writeback 0 [ 2286.668942][T27034] swapcached 0 [ 2286.668942][T27034] anon_thp 0 [ 2286.668942][T27034] file_thp 0 [ 2286.668942][T27034] shmem_thp 0 [ 2286.668942][T27034] inactive_anon 118784 [ 2286.668942][T27034] active_anon 10444800 [ 2286.668942][T27034] inactive_file 0 [ 2286.668942][T27034] active_file 0 [ 2286.668942][T27034] unevictable 0 [ 2286.668942][T27034] slab_reclaimable 42336 [ 2286.668942][T27034] slab_unreclaimable 80496 [ 2286.668942][T27034] slab 122832 [ 2286.827073][T27034] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=27027,uid=0 [ 2286.876867][T27034] Memory cgroup out of memory: Killed process 27027 (syz-executor.1) total-vm:54672kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 11:00:36 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:00:36 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0xf00, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:00:36 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:00:36 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:00:36 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r4, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:00:36 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:00:36 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x1085, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2287.012996][T26858] syz-executor.1 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=0 [ 2287.067725][ T8443] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2287.094897][T26858] CPU: 1 PID: 26858 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2287.105366][T26858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2287.115444][T26858] Call Trace: [ 2287.118738][T26858] [ 2287.121687][T26858] dump_stack_lvl+0xd1/0x138 [ 2287.126315][T26858] dump_header+0x10b/0x85f [ 2287.130760][T26858] oom_kill_process.cold+0x10/0x15 [ 2287.135899][T26858] out_of_memory+0x35c/0x14a0 [ 2287.140615][T26858] ? find_held_lock+0x2d/0x110 [ 2287.145421][T26858] ? oom_killer_disable+0x280/0x280 [ 2287.150663][T26858] ? find_held_lock+0x2d/0x110 [ 2287.155472][T26858] mem_cgroup_out_of_memory+0x206/0x270 [ 2287.161056][T26858] ? mem_cgroup_margin+0x130/0x130 [ 2287.166188][T26858] ? lock_downgrade+0x6e0/0x6e0 [ 2287.171060][T26858] try_charge_memcg+0xefb/0x12f0 [ 2287.176033][T26858] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2287.182028][T26858] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2287.187767][T26858] ? lock_downgrade+0x6e0/0x6e0 [ 2287.192629][T26858] ? lock_downgrade+0x6e0/0x6e0 [ 2287.197482][T26858] ? rcu_read_unlock+0x9/0x60 [ 2287.202183][T26858] obj_cgroup_charge+0x2af/0x5e0 [ 2287.207131][T26858] ? __alloc_file+0x21/0x270 [ 2287.211732][T26858] kmem_cache_alloc+0xb5/0x430 [ 2287.216504][T26858] __alloc_file+0x21/0x270 [ 2287.220930][T26858] alloc_empty_file+0x71/0x170 [ 2287.225706][T26858] path_openat+0xe1/0x2a50 [ 2287.230147][T26858] ? path_lookupat+0x840/0x840 [ 2287.234932][T26858] do_filp_open+0x1ba/0x410 [ 2287.239447][T26858] ? may_open_dev+0xf0/0xf0 [ 2287.243960][T26858] ? find_held_lock+0x2d/0x110 [ 2287.248743][T26858] ? do_raw_spin_lock+0x124/0x2b0 [ 2287.253775][T26858] ? rwlock_bug.part.0+0x90/0x90 [ 2287.258722][T26858] ? _raw_spin_unlock+0x28/0x40 [ 2287.263582][T26858] ? alloc_fd+0x2d8/0x6d0 [ 2287.267924][T26858] do_sys_openat2+0x16d/0x4c0 [ 2287.272603][T26858] ? path_umount+0x6b8/0x10b0 [ 2287.277290][T26858] ? putname+0x102/0x140 [ 2287.281543][T26858] ? build_open_flags+0x6f0/0x6f0 [ 2287.286578][T26858] ? may_mount+0xa0/0xa0 [ 2287.290834][T26858] __x64_sys_openat+0x143/0x1f0 [ 2287.295686][T26858] ? __ia32_sys_open+0x1c0/0x1c0 [ 2287.300631][T26858] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2287.306536][T26858] do_syscall_64+0x39/0xb0 [ 2287.310967][T26858] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2287.316866][T26858] RIP: 0033:0x7f5b2b08bc38 [ 2287.321281][T26858] Code: 24 18 31 c0 41 83 e2 40 75 40 89 f0 25 00 00 41 00 3d 00 00 41 00 74 32 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 40 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 2287.340889][T26858] RSP: 002b:00007ffdc68b8a70 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 2287.349304][T26858] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f5b2b08bc38 [ 2287.357276][T26858] RDX: 0000000000090800 RSI: 00007ffdc68b9c60 RDI: 00000000ffffff9c 11:00:37 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x1800, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2287.365246][T26858] RBP: 00007ffdc68b9c3c R08: 0000000000090800 R09: 00007ffdc68b9c60 [ 2287.373227][T26858] R10: 0000000000000000 R11: 0000000000000287 R12: 00007f5b2b0e6b24 [ 2287.381209][T26858] R13: 00007ffdc68b9c60 R14: 0000000000000006 R15: 00007ffdc68b9ca0 [ 2287.389198][T26858] 11:00:37 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x1840, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2287.541825][T26858] memory: usage 10340kB, limit 0kB, failcnt 808 [ 2287.550696][T26858] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2287.557852][ T8443] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2287.584008][T26858] Memory cgroup stats for /syz1: [ 2287.584187][T26858] anon 36864 [ 2287.584187][T26858] file 10444800 [ 2287.584187][T26858] kernel 106496 [ 2287.584187][T26858] kernel_stack 0 [ 2287.584187][T26858] pagetables 8192 [ 2287.584187][T26858] sec_pagetables 0 [ 2287.584187][T26858] percpu 64 [ 2287.584187][T26858] sock 0 [ 2287.584187][T26858] vmalloc 0 [ 2287.584187][T26858] shmem 10444800 [ 2287.584187][T26858] zswap 0 [ 2287.584187][T26858] zswapped 0 [ 2287.584187][T26858] file_mapped 376832 [ 2287.584187][T26858] file_dirty 0 [ 2287.584187][T26858] file_writeback 0 [ 2287.584187][T26858] swapcached 0 11:00:37 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x1c00, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2287.584187][T26858] anon_thp 0 [ 2287.584187][T26858] file_thp 0 [ 2287.584187][T26858] shmem_thp 0 [ 2287.584187][T26858] inactive_anon 36864 [ 2287.584187][T26858] active_anon 10444800 [ 2287.584187][T26858] inactive_file 0 [ 2287.584187][T26858] active_file 0 [ 2287.584187][T26858] unevictable 0 [ 2287.584187][T26858] slab_reclaimable 38432 [ 2287.584187][T26858] slab_unreclaimable 44080 [ 2287.584187][T26858] slab 82512 11:00:37 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x1f00, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2287.748890][ T8443] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 11:00:37 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2288.018273][T26858] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=26858,uid=0 [ 2288.075017][T26858] Memory cgroup out of memory: Killed process 26858 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2288.111852][T26431] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2288.128359][T26431] CPU: 0 PID: 26431 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2288.138806][T26431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2288.148880][T26431] Call Trace: [ 2288.152191][T26431] [ 2288.155142][T26431] dump_stack_lvl+0xd1/0x138 [ 2288.159749][T26431] dump_header+0x10b/0x85f [ 2288.164172][T26431] oom_kill_process.cold+0x10/0x15 [ 2288.169292][T26431] out_of_memory+0x35c/0x14a0 [ 2288.174004][T26431] ? oom_killer_disable+0x280/0x280 [ 2288.179223][T26431] ? find_held_lock+0x2d/0x110 [ 2288.184007][T26431] mem_cgroup_out_of_memory+0x206/0x270 [ 2288.189571][T26431] ? mem_cgroup_margin+0x130/0x130 [ 2288.194695][T26431] ? lock_downgrade+0x6e0/0x6e0 [ 2288.199567][T26431] try_charge_memcg+0xefb/0x12f0 [ 2288.204521][T26431] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2288.210512][T26431] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2288.216244][T26431] ? lock_downgrade+0x6e0/0x6e0 [ 2288.221101][T26431] ? lock_downgrade+0x6e0/0x6e0 [ 2288.225971][T26431] obj_cgroup_charge+0x2af/0x5e0 [ 2288.230923][T26431] kmem_cache_alloc_lru+0x145/0x760 [ 2288.236142][T26431] ? sock_alloc_inode+0x27/0x1d0 [ 2288.241096][T26431] sock_alloc_inode+0x27/0x1d0 [ 2288.245889][T26431] ? sock_free_inode+0x30/0x30 [ 2288.250659][T26431] alloc_inode+0x61/0x230 [ 2288.255001][T26431] new_inode_pseudo+0x17/0x80 [ 2288.259695][T26431] sock_alloc+0x40/0x260 [ 2288.263946][T26431] __sock_create+0xbd/0x790 [ 2288.268462][T26431] ? blkcg_maybe_throttle_current+0x31f/0xc80 [ 2288.274548][T26431] __sys_socket+0x133/0x250 [ 2288.279078][T26431] ? __sys_socket_file+0x1f0/0x1f0 [ 2288.284213][T26431] __x64_sys_socket+0x73/0xb0 [ 2288.288905][T26431] do_syscall_64+0x39/0xb0 [ 2288.293339][T26431] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2288.299256][T26431] RIP: 0033:0x7fe65308d747 [ 2288.303672][T26431] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2288.323283][T26431] RSP: 002b:00007ffe7296cc68 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 2288.331702][T26431] RAX: ffffffffffffffda RBX: 00007ffe7296d3d0 RCX: 00007fe65308d747 [ 2288.339682][T26431] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 2288.347655][T26431] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffe7296d1e0 [ 2288.355625][T26431] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 2288.363596][T26431] R13: 000000000022e8a2 R14: 0000000000000007 R15: 00007ffe7296d410 [ 2288.371595][T26431] [ 2288.422184][T26431] memory: usage 10332kB, limit 0kB, failcnt 708 [ 2288.430303][T26431] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2288.451842][T26431] Memory cgroup stats for /syz5: [ 2288.452016][T26431] anon 45056 [ 2288.452016][T26431] file 10448896 [ 2288.452016][T26431] kernel 86016 [ 2288.452016][T26431] kernel_stack 0 [ 2288.452016][T26431] pagetables 8192 [ 2288.452016][T26431] sec_pagetables 0 [ 2288.452016][T26431] percpu 0 [ 2288.452016][T26431] sock 0 [ 2288.452016][T26431] vmalloc 0 [ 2288.452016][T26431] shmem 10448896 [ 2288.452016][T26431] zswap 0 [ 2288.452016][T26431] zswapped 0 [ 2288.452016][T26431] file_mapped 245760 [ 2288.452016][T26431] file_dirty 0 [ 2288.452016][T26431] file_writeback 0 [ 2288.452016][T26431] swapcached 0 [ 2288.452016][T26431] anon_thp 0 [ 2288.452016][T26431] file_thp 0 [ 2288.452016][T26431] shmem_thp 0 [ 2288.452016][T26431] inactive_anon 45056 [ 2288.452016][T26431] active_anon 10448896 [ 2288.452016][T26431] inactive_file 0 [ 2288.452016][T26431] active_file 0 [ 2288.452016][T26431] unevictable 0 [ 2288.452016][T26431] slab_reclaimable 35856 [ 2288.452016][T26431] slab_unreclaimable 32600 [ 2288.452016][T26431] slab 68456 [ 2288.571191][T26431] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=26431,uid=0 [ 2288.588312][T26431] Memory cgroup out of memory: Killed process 26431 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2288.632994][T26431] socket: no more sockets 11:00:38 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:00:38 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x2000, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:00:38 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x2085, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2289.326796][ T8443] device hsr_slave_0 left promiscuous mode [ 2289.339952][ T8443] device hsr_slave_1 left promiscuous mode [ 2289.346508][ T8443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2289.355065][ T8443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2289.364770][ T8443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2289.373220][ T8443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2289.383016][ T8443] device bridge_slave_1 left promiscuous mode [ 2289.389583][ T8443] bridge0: port 2(bridge_slave_1) entered disabled state [ 2289.398875][ T8443] device bridge_slave_0 left promiscuous mode [ 2289.405111][ T8443] bridge0: port 1(bridge_slave_0) entered disabled state [ 2289.422800][ T8443] device veth1_macvtap left promiscuous mode [ 2289.432346][ T8443] device veth0_macvtap left promiscuous mode [ 2289.439996][ T8443] device veth1_vlan left promiscuous mode [ 2289.445863][ T8443] device veth0_vlan left promiscuous mode [ 2289.810068][T17937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2289.822846][T17937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2289.834726][T17937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2289.843161][T17937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2289.851177][T17937] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2289.858611][T17937] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2289.929726][ T8443] team0 (unregistering): Port device team_slave_1 removed [ 2289.953911][ T8443] team0 (unregistering): Port device team_slave_0 removed [ 2289.975934][ T8443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2290.001698][ T8443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2290.113462][ T8443] bond0 (unregistering): Released all slaves [ 2290.566814][T27085] chnl_net:caif_netlink_parms(): no params data found [ 2290.655936][T19460] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2290.667650][T19460] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2290.676559][T19460] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2290.686636][T10407] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2290.695805][T10407] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2290.697075][T19460] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2290.707899][T10407] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2290.736120][T10407] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2290.747246][T10407] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2290.758617][T10407] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2290.767652][T19460] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2290.782115][T19460] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2290.898948][T27085] bridge0: port 1(bridge_slave_0) entered blocking state [ 2290.906147][T27085] bridge0: port 1(bridge_slave_0) entered disabled state [ 2290.930531][T27085] device bridge_slave_0 entered promiscuous mode [ 2290.973166][T27085] bridge0: port 2(bridge_slave_1) entered blocking state [ 2290.985863][T27085] bridge0: port 2(bridge_slave_1) entered disabled state [ 2290.995854][T27085] device bridge_slave_1 entered promiscuous mode [ 2291.086875][T27085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2291.100668][T27085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2291.154221][T27085] team0: Port device team_slave_0 added [ 2291.182146][T27085] team0: Port device team_slave_1 added [ 2291.349968][T27085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2291.367204][T27085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2291.442478][T27085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2291.506169][T27085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2291.541753][T27085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2291.613974][T27085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2291.773746][T27085] device hsr_slave_0 entered promiscuous mode [ 2291.788720][T27085] device hsr_slave_1 entered promiscuous mode [ 2291.811429][T27103] chnl_net:caif_netlink_parms(): no params data found [ 2291.822178][T27101] chnl_net:caif_netlink_parms(): no params data found [ 2291.927099][T19460] Bluetooth: hci0: command 0x0409 tx timeout [ 2292.180352][T27103] bridge0: port 1(bridge_slave_0) entered blocking state [ 2292.197187][T27103] bridge0: port 1(bridge_slave_0) entered disabled state [ 2292.218623][T27103] device bridge_slave_0 entered promiscuous mode [ 2292.237704][T27101] bridge0: port 1(bridge_slave_0) entered blocking state [ 2292.244824][T27101] bridge0: port 1(bridge_slave_0) entered disabled state [ 2292.298321][T27101] device bridge_slave_0 entered promiscuous mode [ 2292.420107][T27103] bridge0: port 2(bridge_slave_1) entered blocking state [ 2292.427583][T27103] bridge0: port 2(bridge_slave_1) entered disabled state [ 2292.435906][T27103] device bridge_slave_1 entered promiscuous mode [ 2292.477450][T27101] bridge0: port 2(bridge_slave_1) entered blocking state [ 2292.484641][T27101] bridge0: port 2(bridge_slave_1) entered disabled state [ 2292.518311][T27101] device bridge_slave_1 entered promiscuous mode [ 2292.699536][T27101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2292.726514][T27103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2292.736146][T19460] Bluetooth: hci1: command 0x0409 tx timeout [ 2292.817152][T19460] Bluetooth: hci2: command 0x0409 tx timeout [ 2292.919079][T27101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2292.959270][T27103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2293.111917][T27101] team0: Port device team_slave_0 added [ 2293.220090][T27103] team0: Port device team_slave_0 added [ 2293.239049][T27101] team0: Port device team_slave_1 added [ 2293.359328][T27103] team0: Port device team_slave_1 added [ 2293.450116][T13787] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2293.529569][T27101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2293.542254][T27101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2293.596981][T27101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2293.728142][T27103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2293.735398][T27103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2293.780027][T27103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2293.827390][T13787] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2293.856792][T27101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2293.874180][T27101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2293.907329][T27101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2293.938223][T27103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2293.946036][T27103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2293.983928][T27103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2294.016753][T13787] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2294.017182][T19460] Bluetooth: hci0: command 0x041b tx timeout [ 2294.152284][T13787] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2294.258022][T27103] device hsr_slave_0 entered promiscuous mode [ 2294.266073][T27103] device hsr_slave_1 entered promiscuous mode [ 2294.273421][T27103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2294.306967][T27103] Cannot create hsr debugfs directory [ 2294.334182][T27101] device hsr_slave_0 entered promiscuous mode [ 2294.348528][T27101] device hsr_slave_1 entered promiscuous mode [ 2294.367285][T27101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2294.374872][T27101] Cannot create hsr debugfs directory [ 2294.436466][T27085] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2294.458022][T27085] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2294.508586][T27085] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2294.537611][T27085] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2294.788434][T13787] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2294.807584][T19460] Bluetooth: hci1: command 0x041b tx timeout [ 2294.897311][T19460] Bluetooth: hci2: command 0x041b tx timeout [ 2295.007355][T13787] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2295.167455][T27085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2295.241542][T13787] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2295.417657][T13787] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2295.467361][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2295.475378][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2295.533481][T27085] 8021q: adding VLAN 0 to HW filter on device team0 [ 2295.619034][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2295.628279][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2295.646589][T19257] bridge0: port 1(bridge_slave_0) entered blocking state [ 2295.653758][T19257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2295.671507][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2295.685682][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2295.694780][T19257] bridge0: port 2(bridge_slave_1) entered blocking state [ 2295.701939][T19257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2295.710162][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2295.752744][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2295.762183][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2295.785826][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2295.796037][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2295.805447][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2295.814486][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2295.830850][T27085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2295.851622][T27085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2295.883954][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2295.903801][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2295.912995][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2296.097300][T19460] Bluetooth: hci0: command 0x040f tx timeout [ 2296.111944][T13787] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2296.129356][T27101] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2296.141308][T27101] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2296.151481][T27101] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2296.163387][T27101] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2296.217948][T13787] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2296.309133][T13787] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2296.414328][T13787] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2296.456054][T27101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2296.488048][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2296.501397][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2296.522238][T27101] 8021q: adding VLAN 0 to HW filter on device team0 [ 2296.544955][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2296.558136][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2296.566626][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 2296.573780][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2296.636040][T27085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2296.669170][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2296.677816][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2296.686563][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2296.695846][T14545] bridge0: port 2(bridge_slave_1) entered blocking state [ 2296.703007][T14545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2296.711927][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2296.719535][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2296.727060][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2296.787075][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2296.795968][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2296.809173][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2296.829065][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2296.861330][T27101] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2296.887305][T19460] Bluetooth: hci1: command 0x040f tx timeout [ 2296.894273][T27101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2296.942554][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2296.953836][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2296.967343][T19460] Bluetooth: hci2: command 0x040f tx timeout [ 2296.994399][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2297.036083][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2297.088940][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2297.107508][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2297.137821][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2297.153116][T27085] device veth0_vlan entered promiscuous mode [ 2297.290182][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2297.308075][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2297.332652][T27085] device veth1_vlan entered promiscuous mode [ 2297.359569][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2297.377646][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2297.405620][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2297.693467][T27085] device veth0_macvtap entered promiscuous mode [ 2297.708282][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2297.716217][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2297.725395][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2297.785989][T27101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2297.818104][T27085] device veth1_macvtap entered promiscuous mode [ 2297.877429][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2297.885674][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2297.905310][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2297.913259][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2298.012293][T27085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2298.032806][T27085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.073663][T27085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2298.107119][T27085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.137016][T27085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2298.157157][T27085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.167498][T19460] Bluetooth: hci0: command 0x0419 tx timeout [ 2298.195051][T27085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2298.222330][T27085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.268921][T27085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2298.278647][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2298.287494][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2298.351228][T27085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2298.373080][T27085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.383193][T27085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2298.397955][T27085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.408047][T27085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2298.418689][T27085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.436953][T27085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2298.467164][T27085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.488554][T27085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2298.519008][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2298.537872][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2298.597487][T27085] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2298.606231][T27085] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2298.636966][T27085] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2298.676447][T27085] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2298.932634][T27103] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2298.953706][T27103] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2298.968021][T19460] Bluetooth: hci1: command 0x0419 tx timeout [ 2299.041400][T27103] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2299.057605][ T8419] Bluetooth: hci2: command 0x0419 tx timeout [ 2299.124705][T27103] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2299.161694][ T8443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2299.174096][ T8443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2299.182737][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2299.192008][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2299.217549][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2299.268695][T27101] device veth0_vlan entered promiscuous mode [ 2299.284892][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2299.311301][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2299.346364][T27101] device veth1_vlan entered promiscuous mode [ 2299.364992][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2299.374618][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2299.437809][T21387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2299.458381][T21387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2299.466243][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2299.492272][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2299.536266][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2299.562206][T27101] device veth0_macvtap entered promiscuous mode 11:00:49 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2299.665083][T27101] device veth1_macvtap entered promiscuous mode [ 2299.684156][T27103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2299.715760][T27101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2299.743805][T27101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2299.754160][T27101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2299.765235][T27101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2299.805720][T27101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2299.816568][T27101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2299.836356][T27101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2299.865706][T27101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2299.875752][T27101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2299.898183][T27101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2299.920528][T27101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2299.964958][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2299.973394][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2299.983561][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2299.992491][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2300.004878][T27101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2300.019615][T27101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2300.029899][T27101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2300.040414][T27101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2300.050484][T27101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2300.061034][T27101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2300.071000][T27101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2300.081739][T27101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2300.093057][T27101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2300.103804][T27101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2300.115756][T27101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2300.133157][T27103] 8021q: adding VLAN 0 to HW filter on device team0 [ 2300.147120][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2300.167960][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2300.177557][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2300.197827][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2300.209346][T27101] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2300.220446][T27101] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2300.230020][T27101] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2300.239816][T27101] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2300.277383][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2300.286115][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2300.296117][ T8584] bridge0: port 1(bridge_slave_0) entered blocking state [ 2300.303374][ T8584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2300.312166][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2300.321317][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2300.330452][ T8584] bridge0: port 2(bridge_slave_1) entered blocking state [ 2300.337611][ T8584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2300.345292][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2300.354149][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2300.363832][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2300.378094][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2300.434105][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2300.455295][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2300.464809][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2300.482849][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2300.511064][T27103] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2300.535875][T27103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2300.569432][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2300.587834][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2300.705394][ T5470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2300.730425][ T5470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2300.771704][T13787] device hsr_slave_0 left promiscuous mode [ 2300.786361][T13787] device hsr_slave_1 left promiscuous mode [ 2300.805942][T13787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2300.827161][T13787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2300.836686][T13787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2300.856236][T13787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2300.875517][T13787] device bridge_slave_1 left promiscuous mode [ 2300.884792][T13787] bridge0: port 2(bridge_slave_1) entered disabled state [ 2300.907534][T13787] device bridge_slave_0 left promiscuous mode [ 2300.913787][T13787] bridge0: port 1(bridge_slave_0) entered disabled state [ 2300.941604][T13787] device hsr_slave_0 left promiscuous mode [ 2300.953286][T13787] device hsr_slave_1 left promiscuous mode [ 2300.966293][T13787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2300.987044][T13787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2301.005813][T13787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2301.014253][T13787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2301.025425][T13787] device bridge_slave_1 left promiscuous mode [ 2301.031997][T13787] bridge0: port 2(bridge_slave_1) entered disabled state [ 2301.041070][T13787] device bridge_slave_0 left promiscuous mode [ 2301.047744][T13787] bridge0: port 1(bridge_slave_0) entered disabled state [ 2301.061946][T13787] device hsr_slave_0 left promiscuous mode [ 2301.070573][T13787] device hsr_slave_1 left promiscuous mode [ 2301.077947][T13787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2301.085371][T13787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2301.103705][T13787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2301.121278][T13787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2301.134776][T13787] device bridge_slave_1 left promiscuous mode [ 2301.151293][T13787] bridge0: port 2(bridge_slave_1) entered disabled state [ 2301.165389][T13787] device bridge_slave_0 left promiscuous mode [ 2301.175896][T13787] bridge0: port 1(bridge_slave_0) entered disabled state [ 2301.215549][T13787] device veth1_macvtap left promiscuous mode [ 2301.225337][T13787] device veth0_macvtap left promiscuous mode [ 2301.240821][T13787] device veth1_vlan left promiscuous mode [ 2301.246686][T13787] device veth0_vlan left promiscuous mode [ 2301.264700][T13787] device veth1_macvtap left promiscuous mode [ 2301.274745][T13787] device veth0_macvtap left promiscuous mode [ 2301.286151][T13787] device veth1_vlan left promiscuous mode [ 2301.299814][T13787] device veth0_vlan left promiscuous mode [ 2301.316803][T13787] device veth1_macvtap left promiscuous mode [ 2301.325700][T13787] device veth0_macvtap left promiscuous mode [ 2301.341048][T13787] device veth1_vlan left promiscuous mode [ 2301.350887][T13787] device veth0_vlan left promiscuous mode [ 2302.116829][T13787] team0 (unregistering): Port device team_slave_1 removed [ 2302.134027][T13787] team0 (unregistering): Port device team_slave_0 removed [ 2302.150475][T13787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2302.170098][T13787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2302.231403][T13787] bond0 (unregistering): Released all slaves [ 2302.374373][T13787] team0 (unregistering): Port device team_slave_1 removed [ 2302.392509][T13787] team0 (unregistering): Port device team_slave_0 removed [ 2302.408274][T13787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2302.424229][T13787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2302.486720][T13787] bond0 (unregistering): Released all slaves [ 2302.636983][T13787] team0 (unregistering): Port device team_slave_1 removed [ 2302.651856][T13787] team0 (unregistering): Port device team_slave_0 removed [ 2302.664472][T13787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2302.682781][T13787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2302.753635][T13787] bond0 (unregistering): Released all slaves [ 2302.827795][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2302.838079][ T6761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2302.863544][ T6761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2302.897807][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2303.214761][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2303.223195][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2303.248758][T27103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2303.289198][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2303.366314][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2303.444085][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2303.453784][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2303.454994][T27308] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2303.465076][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2303.493993][T27308] CPU: 0 PID: 27308 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2303.497615][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2303.504425][T27308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2303.521785][T27308] Call Trace: [ 2303.525090][T27308] [ 2303.528046][T27308] dump_stack_lvl+0xd1/0x138 [ 2303.532684][T27308] dump_header+0x10b/0x85f [ 2303.537138][T27308] oom_kill_process.cold+0x10/0x15 [ 2303.542295][T27308] out_of_memory+0x35c/0x14a0 [ 2303.547033][T27308] ? oom_killer_disable+0x280/0x280 [ 2303.548262][T27103] device veth0_vlan entered promiscuous mode [ 2303.552255][T27308] ? mark_held_locks+0x9f/0xe0 [ 2303.563016][T27308] mem_cgroup_out_of_memory+0x206/0x270 [ 2303.568621][T27308] ? mem_cgroup_margin+0x130/0x130 [ 2303.573767][T27308] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 2303.579597][T27308] memory_max_write+0x2f9/0x3c0 [ 2303.584461][T27308] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2303.590554][T27308] ? lock_release+0x810/0x810 [ 2303.595247][T27308] cgroup_file_write+0x1e2/0x770 [ 2303.600207][T27308] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2303.606291][T27308] ? kill_css+0x370/0x370 [ 2303.610638][T27308] ? __virt_addr_valid+0x61/0x2e0 [ 2303.615687][T27308] ? kill_css+0x370/0x370 [ 2303.620028][T27308] kernfs_fop_write_iter+0x3f1/0x600 [ 2303.625338][T27308] vfs_write+0x9ed/0xdd0 [ 2303.629614][T27308] ? kernel_write+0x630/0x630 [ 2303.634310][T27308] ? __fget_files+0x26a/0x440 [ 2303.639014][T27308] ksys_write+0x12b/0x250 [ 2303.643355][T27308] ? __ia32_sys_read+0xb0/0xb0 [ 2303.648132][T27308] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2303.654043][T27308] do_syscall_64+0x39/0xb0 [ 2303.658569][T27308] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2303.664477][T27308] RIP: 0033:0x7f817768c0c9 [ 2303.668899][T27308] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2303.688512][T27308] RSP: 002b:00007f8178301168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2303.696939][T27308] RAX: ffffffffffffffda RBX: 00007f81777abf80 RCX: 00007f817768c0c9 [ 2303.704916][T27308] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2303.712892][T27308] RBP: 00007f81776e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2303.720885][T27308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2303.728861][T27308] R13: 00007ffc98674dbf R14: 00007f8178301300 R15: 0000000000022000 [ 2303.736949][T27308] [ 2303.748366][T27308] memory: usage 10620kB, limit 0kB, failcnt 940 [ 2303.764759][T27103] device veth1_vlan entered promiscuous mode [ 2303.766835][T27308] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2303.806183][T27308] Memory cgroup stats for /syz4: [ 2303.808389][T27308] anon 114688 [ 2303.808389][T27308] file 10448896 [ 2303.808389][T27308] kernel 294912 [ 2303.808389][T27308] kernel_stack 65536 [ 2303.808389][T27308] pagetables 77824 [ 2303.808389][T27308] sec_pagetables 0 [ 2303.808389][T27308] percpu 64 [ 2303.808389][T27308] sock 0 [ 2303.808389][T27308] vmalloc 0 [ 2303.808389][T27308] shmem 10448896 [ 2303.808389][T27308] zswap 0 [ 2303.808389][T27308] zswapped 0 [ 2303.808389][T27308] file_mapped 335872 [ 2303.808389][T27308] file_dirty 0 [ 2303.808389][T27308] file_writeback 0 [ 2303.808389][T27308] swapcached 0 [ 2303.808389][T27308] anon_thp 0 [ 2303.808389][T27308] file_thp 0 [ 2303.808389][T27308] shmem_thp 0 [ 2303.808389][T27308] inactive_anon 114688 [ 2303.808389][T27308] active_anon 10448896 [ 2303.808389][T27308] inactive_file 0 [ 2303.808389][T27308] active_file 0 [ 2303.808389][T27308] unevictable 0 [ 2303.808389][T27308] slab_reclaimable 54464 [ 2303.808389][T27308] slab_unreclaimable 73752 [ 2303.808389][T27308] slab 128216 [ 2303.840549][T27103] device veth0_macvtap entered promiscuous mode [ 2303.925414][T27308] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=27101,uid=0 [ 2303.943420][T27308] Memory cgroup out of memory: Killed process 27101 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2303.996676][T27103] device veth1_macvtap entered promiscuous mode [ 2304.012348][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2304.032606][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2304.046650][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2304.063511][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2304.073977][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2304.084369][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2304.163467][T27103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2304.199368][T27103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2304.214380][T27103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2304.227065][T27103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2304.237329][T27103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2304.248731][T27103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2304.261992][T27103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2304.272036][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2304.281528][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2304.294154][T27103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 11:00:54 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x3c00, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2304.313710][T27103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2304.325384][T27103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2304.355699][T27103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2304.386328][T27103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2304.409732][T27103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2304.430657][T27103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2304.445880][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2304.456730][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2304.476714][T27103] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2304.499413][T27103] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2304.508503][T27103] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2304.517473][T27103] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2304.704616][ T8443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2304.717440][ T8443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2304.732363][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2304.771814][ T8443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2304.793221][ T8443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2304.808195][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2304.875457][T27341] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2304.892515][T27341] CPU: 1 PID: 27341 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2304.902988][T27341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2304.913070][T27341] Call Trace: [ 2304.916371][T27341] [ 2304.919329][T27341] dump_stack_lvl+0xd1/0x138 [ 2304.923964][T27341] dump_header+0x10b/0x85f [ 2304.928431][T27341] oom_kill_process.cold+0x10/0x15 [ 2304.933583][T27341] out_of_memory+0x35c/0x14a0 [ 2304.938319][T27341] ? oom_killer_disable+0x280/0x280 [ 2304.943578][T27341] mem_cgroup_out_of_memory+0x206/0x270 [ 2304.949171][T27341] ? mem_cgroup_margin+0x130/0x130 [ 2304.954352][T27341] memory_max_write+0x2f9/0x3c0 [ 2304.959243][T27341] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2304.965354][T27341] ? lock_release+0x810/0x810 [ 2304.970064][T27341] cgroup_file_write+0x1e2/0x770 [ 2304.975037][T27341] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2304.981117][T27341] ? kill_css+0x370/0x370 [ 2304.985467][T27341] ? __virt_addr_valid+0x61/0x2e0 [ 2304.990521][T27341] ? kill_css+0x370/0x370 [ 2304.994866][T27341] kernfs_fop_write_iter+0x3f1/0x600 [ 2305.000188][T27341] vfs_write+0x9ed/0xdd0 [ 2305.004550][T27341] ? kernel_write+0x630/0x630 [ 2305.009249][T27341] ? __fget_files+0x26a/0x440 [ 2305.013954][T27341] ksys_write+0x12b/0x250 [ 2305.018296][T27341] ? __ia32_sys_read+0xb0/0xb0 [ 2305.023073][T27341] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2305.028984][T27341] do_syscall_64+0x39/0xb0 [ 2305.033432][T27341] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2305.039338][T27341] RIP: 0033:0x7f647d68c0c9 [ 2305.043758][T27341] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2305.063371][T27341] RSP: 002b:00007f647e497168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2305.071791][T27341] RAX: ffffffffffffffda RBX: 00007f647d7abf80 RCX: 00007f647d68c0c9 [ 2305.079772][T27341] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2305.087833][T27341] RBP: 00007f647d6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2305.095807][T27341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2305.103796][T27341] R13: 00007fffadbaccef R14: 00007f647e497300 R15: 0000000000022000 [ 2305.111804][T27341] [ 2305.132613][T27341] memory: usage 8604kB, limit 0kB, failcnt 907 [ 2305.139151][T27341] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2305.146117][T27341] Memory cgroup stats for /syz2: [ 2305.146290][T27341] anon 114688 [ 2305.146290][T27341] file 8355840 [ 2305.146290][T27341] kernel 311296 [ 2305.146290][T27341] kernel_stack 65536 [ 2305.146290][T27341] pagetables 81920 [ 2305.146290][T27341] sec_pagetables 0 [ 2305.146290][T27341] percpu 64 [ 2305.146290][T27341] sock 0 [ 2305.146290][T27341] vmalloc 0 [ 2305.146290][T27341] shmem 8351744 [ 2305.146290][T27341] zswap 0 [ 2305.146290][T27341] zswapped 0 [ 2305.146290][T27341] file_mapped 335872 [ 2305.146290][T27341] file_dirty 4096 [ 2305.146290][T27341] file_writeback 0 [ 2305.146290][T27341] swapcached 0 [ 2305.146290][T27341] anon_thp 0 [ 2305.146290][T27341] file_thp 0 [ 2305.146290][T27341] shmem_thp 0 [ 2305.146290][T27341] inactive_anon 114688 [ 2305.146290][T27341] active_anon 8351744 [ 2305.146290][T27341] inactive_file 0 [ 2305.146290][T27341] active_file 4096 [ 2305.146290][T27341] unevictable 0 [ 2305.146290][T27341] slab_reclaimable 34304 [ 2305.146290][T27341] slab_unreclaimable 102408 [ 2305.146290][T27341] slab 136712 [ 2305.258725][T27341] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=27340,uid=0 11:00:55 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:00:55 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:00:55 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:00:55 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0), 0x12) 11:00:55 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r4, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2305.280418][T27341] Memory cgroup out of memory: Killed process 27340 (syz-executor.2) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 11:00:55 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x3f00, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:00:55 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:00:55 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x4000, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:00:55 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2305.460577][T27103] syz-executor.2 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=0 [ 2305.535994][T27103] CPU: 1 PID: 27103 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2305.546481][T27103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2305.556559][T27103] Call Trace: [ 2305.559851][T27103] [ 2305.562796][T27103] dump_stack_lvl+0xd1/0x138 [ 2305.567468][T27103] dump_header+0x10b/0x85f [ 2305.571917][T27103] oom_kill_process.cold+0x10/0x15 [ 2305.577061][T27103] out_of_memory+0x35c/0x14a0 [ 2305.581787][T27103] ? find_held_lock+0x2d/0x110 [ 2305.586583][T27103] ? oom_killer_disable+0x280/0x280 [ 2305.591822][T27103] ? find_held_lock+0x2d/0x110 [ 2305.596623][T27103] mem_cgroup_out_of_memory+0x206/0x270 [ 2305.602207][T27103] ? mem_cgroup_margin+0x130/0x130 [ 2305.607358][T27103] ? lock_downgrade+0x6e0/0x6e0 [ 2305.612251][T27103] try_charge_memcg+0xefb/0x12f0 [ 2305.617259][T27103] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2305.623266][T27103] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2305.629010][T27103] ? lock_downgrade+0x6e0/0x6e0 11:00:55 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2305.633899][T27103] ? lock_downgrade+0x6e0/0x6e0 [ 2305.638784][T27103] ? rcu_read_unlock+0x9/0x60 [ 2305.643519][T27103] obj_cgroup_charge+0x2af/0x5e0 [ 2305.648499][T27103] ? __alloc_file+0x21/0x270 [ 2305.653134][T27103] kmem_cache_alloc+0xb5/0x430 [ 2305.657932][T27103] __alloc_file+0x21/0x270 [ 2305.662384][T27103] alloc_empty_file+0x71/0x170 [ 2305.667179][T27103] path_openat+0xe1/0x2a50 [ 2305.671724][T27103] ? ___slab_alloc+0x9df/0x1400 [ 2305.676601][T27103] ? path_lookupat+0x840/0x840 [ 2305.681409][T27103] do_filp_open+0x1ba/0x410 11:00:55 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2305.685952][T27103] ? may_open_dev+0xf0/0xf0 [ 2305.690491][T27103] ? find_held_lock+0x2d/0x110 [ 2305.695320][T27103] ? do_raw_spin_lock+0x124/0x2b0 [ 2305.700379][T27103] ? rwlock_bug.part.0+0x90/0x90 [ 2305.705381][T27103] ? _raw_spin_unlock+0x28/0x40 [ 2305.710282][T27103] ? alloc_fd+0x2d8/0x6d0 [ 2305.714642][T27103] do_sys_openat2+0x16d/0x4c0 [ 2305.719380][T27103] ? path_umount+0x6b8/0x10b0 [ 2305.724090][T27103] ? putname+0x102/0x140 [ 2305.728360][T27103] ? build_open_flags+0x6f0/0x6f0 [ 2305.733421][T27103] ? may_mount+0xa0/0xa0 [ 2305.737706][T27103] __x64_sys_openat+0x143/0x1f0 [ 2305.742582][T27103] ? __ia32_sys_open+0x1c0/0x1c0 [ 2305.747550][T27103] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2305.753486][T27103] do_syscall_64+0x39/0xb0 [ 2305.757982][T27103] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2305.763906][T27103] RIP: 0033:0x7f647d68bc38 [ 2305.768347][T27103] Code: 24 18 31 c0 41 83 e2 40 75 40 89 f0 25 00 00 41 00 3d 00 00 41 00 74 32 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 40 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 2305.787982][T27103] RSP: 002b:00007fffadbabde0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 2305.796430][T27103] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f647d68bc38 [ 2305.804436][T27103] RDX: 0000000000090800 RSI: 00007fffadbacfd0 RDI: 00000000ffffff9c [ 2305.812695][T27103] RBP: 00007fffadbacfac R08: 0000000000090800 R09: 00007fffadbacfd0 [ 2305.820691][T27103] R10: 0000000000000000 R11: 0000000000000287 R12: 00007f647d6e6b24 [ 2305.828684][T27103] R13: 00007fffadbacfd0 R14: 000000000000000a R15: 00007fffadbad010 [ 2305.836701][T27103] 11:00:55 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x4018, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2305.886095][T27103] memory: usage 8316kB, limit 0kB, failcnt 926 [ 2305.921090][T27103] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2305.965033][T27103] Memory cgroup stats for /syz2: [ 2305.965254][T27103] anon 36864 [ 2305.965254][T27103] file 8355840 [ 2305.965254][T27103] kernel 122880 [ 2305.965254][T27103] kernel_stack 0 [ 2305.965254][T27103] pagetables 8192 [ 2305.965254][T27103] sec_pagetables 0 [ 2305.965254][T27103] percpu 64 [ 2305.965254][T27103] sock 0 [ 2305.965254][T27103] vmalloc 0 [ 2305.965254][T27103] shmem 8351744 [ 2305.965254][T27103] zswap 0 [ 2305.965254][T27103] zswapped 0 [ 2305.965254][T27103] file_mapped 311296 [ 2305.965254][T27103] file_dirty 4096 [ 2305.965254][T27103] file_writeback 0 [ 2305.965254][T27103] swapcached 0 [ 2305.965254][T27103] anon_thp 0 [ 2305.965254][T27103] file_thp 0 [ 2305.965254][T27103] shmem_thp 0 [ 2305.965254][T27103] inactive_anon 36864 [ 2305.965254][T27103] active_anon 8351744 [ 2305.965254][T27103] inactive_file 0 [ 2305.965254][T27103] active_file 4096 [ 2305.965254][T27103] unevictable 0 [ 2305.965254][T27103] slab_reclaimable 30400 [ 2305.965254][T27103] slab_unreclaimable 70792 [ 2305.965254][T27103] slab 101192 [ 2306.134246][T27103] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=27103,uid=0 [ 2306.186333][T27103] Memory cgroup out of memory: Killed process 27103 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 11:00:56 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2307.677659][T19460] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2307.686595][T19460] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2307.694475][T19460] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2307.702719][T19460] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2307.714745][T19460] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2307.722114][T19460] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2308.053362][T13787] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2308.119415][ T8419] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2308.133011][ T8419] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2308.141172][ T8419] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2308.149346][ T8419] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2308.157322][ T8419] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2308.164658][ T8419] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2308.265601][T13787] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2308.395910][T13787] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2308.537870][T13787] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2308.580606][T19460] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2308.590717][T19460] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2308.608638][T19460] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2308.617485][T19460] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2308.625091][T19460] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2308.633267][T19460] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2308.667850][T27392] chnl_net:caif_netlink_parms(): no params data found [ 2308.926359][T13787] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2308.970234][T27403] chnl_net:caif_netlink_parms(): no params data found [ 2309.058195][T27392] bridge0: port 1(bridge_slave_0) entered blocking state [ 2309.065332][T27392] bridge0: port 1(bridge_slave_0) entered disabled state [ 2309.082606][T27392] device bridge_slave_0 entered promiscuous mode [ 2309.097511][T13787] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2309.120009][T27392] bridge0: port 2(bridge_slave_1) entered blocking state [ 2309.127733][T27392] bridge0: port 2(bridge_slave_1) entered disabled state [ 2309.135996][T27392] device bridge_slave_1 entered promiscuous mode [ 2309.222138][T13787] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2309.258896][T27413] chnl_net:caif_netlink_parms(): no params data found [ 2309.299810][T27392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2309.314875][T13787] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2309.357694][T27392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2309.493506][T27403] bridge0: port 1(bridge_slave_0) entered blocking state [ 2309.500775][T27403] bridge0: port 1(bridge_slave_0) entered disabled state [ 2309.510215][T27403] device bridge_slave_0 entered promiscuous mode [ 2309.534264][T27392] team0: Port device team_slave_0 added [ 2309.561895][T27403] bridge0: port 2(bridge_slave_1) entered blocking state [ 2309.569470][T27403] bridge0: port 2(bridge_slave_1) entered disabled state [ 2309.577746][T27403] device bridge_slave_1 entered promiscuous mode [ 2309.602737][T27392] team0: Port device team_slave_1 added [ 2309.648116][T27413] bridge0: port 1(bridge_slave_0) entered blocking state [ 2309.655241][T27413] bridge0: port 1(bridge_slave_0) entered disabled state [ 2309.678159][T27413] device bridge_slave_0 entered promiscuous mode [ 2309.749423][T27413] bridge0: port 2(bridge_slave_1) entered blocking state [ 2309.761918][T27413] bridge0: port 2(bridge_slave_1) entered disabled state [ 2309.770535][T27413] device bridge_slave_1 entered promiscuous mode [ 2309.777104][ T8419] Bluetooth: hci1: command 0x0409 tx timeout [ 2309.816395][T27392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2309.823533][T27392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2309.854167][T27392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2309.881205][T27403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2309.891093][T27392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2309.898863][T27392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2309.925228][T27392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2309.981305][T27403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2309.998448][T27413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2310.046033][T27413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2310.103127][T27392] device hsr_slave_0 entered promiscuous mode [ 2310.111453][T27392] device hsr_slave_1 entered promiscuous mode [ 2310.118402][T27392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2310.126706][T27392] Cannot create hsr debugfs directory [ 2310.136335][T27403] team0: Port device team_slave_0 added [ 2310.194118][T27403] team0: Port device team_slave_1 added [ 2310.220766][T27413] team0: Port device team_slave_0 added [ 2310.257369][ T8419] Bluetooth: hci2: command 0x0409 tx timeout [ 2310.273154][T27413] team0: Port device team_slave_1 added [ 2310.354300][T27403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2310.362007][T27403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2310.388023][T27403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2310.421678][T27403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2310.430155][T27403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2310.457769][T27403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2310.485906][T27413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2310.494670][T27413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2310.523905][T27413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2310.561019][T27413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2310.573884][T27413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2310.600308][T27413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2310.647143][ T8419] Bluetooth: hci4: command 0x0409 tx timeout [ 2310.731145][T27403] device hsr_slave_0 entered promiscuous mode [ 2310.741252][T27403] device hsr_slave_1 entered promiscuous mode [ 2310.749638][T27403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2310.757612][T27403] Cannot create hsr debugfs directory [ 2310.833543][T27413] device hsr_slave_0 entered promiscuous mode [ 2310.849398][T27413] device hsr_slave_1 entered promiscuous mode [ 2310.860301][T27413] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2310.874763][T27413] Cannot create hsr debugfs directory [ 2311.464370][T13787] device hsr_slave_0 left promiscuous mode [ 2311.507086][T13787] device hsr_slave_1 left promiscuous mode [ 2311.537190][T13787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2311.544662][T13787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2311.579362][T13787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2311.586831][T13787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2311.619255][T13787] device bridge_slave_1 left promiscuous mode [ 2311.625603][T13787] bridge0: port 2(bridge_slave_1) entered disabled state [ 2311.648807][T13787] device bridge_slave_0 left promiscuous mode [ 2311.655072][T13787] bridge0: port 1(bridge_slave_0) entered disabled state [ 2311.697154][T13787] device hsr_slave_0 left promiscuous mode [ 2311.703711][T13787] device hsr_slave_1 left promiscuous mode [ 2311.717190][T13787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2311.724668][T13787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2311.756450][T13787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2311.778516][T13787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2311.799510][T13787] device bridge_slave_1 left promiscuous mode [ 2311.805764][T13787] bridge0: port 2(bridge_slave_1) entered disabled state [ 2311.838835][T13787] device bridge_slave_0 left promiscuous mode [ 2311.845110][T13787] bridge0: port 1(bridge_slave_0) entered disabled state [ 2311.852890][ T8419] Bluetooth: hci1: command 0x041b tx timeout [ 2311.895518][T13787] device veth1_macvtap left promiscuous mode [ 2311.907275][T13787] device veth0_macvtap left promiscuous mode [ 2311.913441][T13787] device veth1_vlan left promiscuous mode [ 2311.935243][T13787] device veth0_vlan left promiscuous mode [ 2311.988023][T13787] device veth1_macvtap left promiscuous mode [ 2311.994111][T13787] device veth0_macvtap left promiscuous mode [ 2312.017126][T13787] device veth1_vlan left promiscuous mode [ 2312.023031][T13787] device veth0_vlan left promiscuous mode [ 2312.337186][ T8419] Bluetooth: hci2: command 0x041b tx timeout [ 2312.727176][ T8419] Bluetooth: hci4: command 0x041b tx timeout [ 2312.903189][T13787] team0 (unregistering): Port device team_slave_1 removed [ 2312.933767][T13787] team0 (unregistering): Port device team_slave_0 removed [ 2312.963340][T13787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2313.005515][T13787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2313.125011][T13787] bond0 (unregistering): Released all slaves [ 2313.411291][T13787] team0 (unregistering): Port device team_slave_1 removed [ 2313.445441][T13787] team0 (unregistering): Port device team_slave_0 removed [ 2313.483787][T13787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2313.515270][T13787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2313.686406][T13787] bond0 (unregistering): Released all slaves [ 2313.927035][ T8419] Bluetooth: hci1: command 0x040f tx timeout [ 2314.417340][ T8419] Bluetooth: hci2: command 0x040f tx timeout [ 2314.462832][T27392] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2314.473783][T27392] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2314.532678][T27392] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2314.576860][T27392] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2314.647677][T27403] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2314.724114][T27403] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2314.751397][T27413] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2314.772362][T27403] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2314.796703][T27403] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2314.808714][ T8419] Bluetooth: hci4: command 0x040f tx timeout [ 2314.817743][T27413] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2314.850971][T27413] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2314.924139][T27413] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2314.973213][T27392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2315.017911][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2315.025774][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2315.062495][T27392] 8021q: adding VLAN 0 to HW filter on device team0 [ 2315.089367][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2315.103963][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2315.127676][T19256] bridge0: port 1(bridge_slave_0) entered blocking state [ 2315.134809][T19256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2315.158576][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2315.206171][T27403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2315.226729][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2315.247839][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2315.256426][T10149] bridge0: port 2(bridge_slave_1) entered blocking state [ 2315.263569][T10149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2315.287477][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2315.322120][T27392] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2315.350347][T27392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2315.371350][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2315.390776][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2315.425287][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2315.446839][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2315.467766][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2315.476444][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2315.507790][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2315.547833][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2315.555905][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2315.578251][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2315.586154][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2315.610107][T27403] 8021q: adding VLAN 0 to HW filter on device team0 [ 2315.684283][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2315.694237][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2315.705108][T19256] bridge0: port 1(bridge_slave_0) entered blocking state [ 2315.712280][T19256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2315.751965][T27413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2315.778975][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2315.788787][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2315.804430][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2315.827742][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 2315.834864][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2315.857473][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2315.909312][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2315.928541][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2315.958591][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2315.977752][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2315.986223][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2316.008429][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2316.017358][ T8419] Bluetooth: hci1: command 0x0419 tx timeout [ 2316.027238][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2316.035097][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2316.055221][T27403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2316.124872][T27413] 8021q: adding VLAN 0 to HW filter on device team0 [ 2316.140063][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2316.153594][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2316.165880][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2316.181646][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2316.195987][T27392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2316.238884][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2316.257585][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2316.266876][ T8584] bridge0: port 1(bridge_slave_0) entered blocking state [ 2316.274049][ T8584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2316.337932][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2316.346004][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2316.387658][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2316.396130][T15119] bridge0: port 2(bridge_slave_1) entered blocking state [ 2316.403293][T15119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2316.447333][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2316.456222][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2316.489808][ T8419] Bluetooth: hci2: command 0x0419 tx timeout [ 2316.514199][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2316.549380][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2316.595770][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2316.604408][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2316.655152][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2316.685008][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2316.694122][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2316.713250][T27413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2316.778580][T27403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2316.814937][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2316.833766][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2316.897189][ T8419] Bluetooth: hci4: command 0x0419 tx timeout [ 2316.928518][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2316.938159][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2316.961583][T27403] device veth0_vlan entered promiscuous mode [ 2316.995893][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2317.014488][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2317.028669][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2317.036579][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2317.053198][T27403] device veth1_vlan entered promiscuous mode [ 2317.103396][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2317.113149][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2317.165548][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2317.188653][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2317.210450][T27392] device veth0_vlan entered promiscuous mode [ 2317.221865][T27403] device veth0_macvtap entered promiscuous mode [ 2317.235660][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2317.245309][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2317.254624][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2317.274155][T27403] device veth1_macvtap entered promiscuous mode [ 2317.285919][T27392] device veth1_vlan entered promiscuous mode [ 2317.298742][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2317.308156][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2317.316045][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2317.324876][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2317.364178][T27392] device veth0_macvtap entered promiscuous mode [ 2317.387585][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2317.396054][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2317.405381][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2317.413979][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2317.421576][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2317.429853][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2317.442301][T27392] device veth1_macvtap entered promiscuous mode [ 2317.451190][T27403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2317.461845][T27403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2317.472476][T27403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2317.483213][T27403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2317.495719][T27403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2317.510435][T27413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2317.533741][T27392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2317.554469][T27392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2317.565139][T27392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2317.582666][T27392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2317.592784][T27392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2317.610714][T27392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2317.625341][T27392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2317.633850][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2317.643398][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2317.652389][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2317.662524][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2317.671477][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2317.682435][T27403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2317.697791][T27403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2317.707858][T27403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2317.718377][T27403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2317.729378][T27403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2317.749380][T27392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2317.776559][T27392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2317.797009][T27392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2317.808085][T27392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2317.818361][T27392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2317.829146][T27392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2317.840783][T27392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2317.849179][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2317.858764][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2317.874898][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2317.884044][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2317.900333][T27403] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2317.913035][T27403] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2317.922382][T27403] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2317.932686][T27403] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2317.946524][T27392] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2317.955581][T27392] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2317.964596][T27392] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2317.973466][T27392] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2318.145602][T13787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2318.169979][ T6761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2318.200697][T13787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2318.208540][ T6761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2318.235149][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2318.243442][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2318.253711][T13787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2318.275205][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2318.282603][T13787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2318.284596][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2318.300908][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2318.310101][ T8442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2318.315926][T27413] device veth0_vlan entered promiscuous mode [ 2318.332798][ T8442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2318.341447][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2318.350394][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2318.370444][T27413] device veth1_vlan entered promiscuous mode [ 2318.382052][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2318.395530][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2318.404506][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2318.413288][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2318.450677][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2318.459026][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2318.486072][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 11:01:08 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:01:08 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:01:08 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x6000, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2318.501410][T27413] device veth0_macvtap entered promiscuous mode [ 2318.536465][T27413] device veth1_macvtap entered promiscuous mode [ 2318.610633][T27413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2318.622639][T27413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2318.636067][T27413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2318.652930][T27413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2318.663155][T27413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2318.673744][T27413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2318.683602][T27413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2318.694444][T27413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2318.705966][T27413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2318.718289][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2318.726494][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2318.735167][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2318.743945][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2318.758470][T27413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2318.769125][T27413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2318.780414][T27413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2318.791033][T27413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2318.801141][T27413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2318.822642][T27413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2318.833193][T27413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2318.843773][T27413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2318.854930][T27413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2318.867303][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2318.876016][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2318.888369][T27413] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2318.897776][T27413] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2318.906498][T27413] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2318.915678][T27413] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2319.002381][ T8442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2319.012379][ T8442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2319.031182][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2319.054948][ T6761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2319.063947][ T6761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2319.081832][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2319.514913][T27555] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2319.526033][T27555] CPU: 1 PID: 27555 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2319.536493][T27555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2319.546574][T27555] Call Trace: [ 2319.549891][T27555] [ 2319.552845][T27555] dump_stack_lvl+0xd1/0x138 [ 2319.557480][T27555] dump_header+0x10b/0x85f [ 2319.561934][T27555] oom_kill_process.cold+0x10/0x15 [ 2319.567083][T27555] out_of_memory+0x35c/0x14a0 [ 2319.571812][T27555] ? lockdep_hardirqs_on+0x7d/0x100 [ 2319.577055][T27555] ? oom_killer_disable+0x280/0x280 [ 2319.582301][T27555] ? mem_cgroup_out_of_memory+0x199/0x270 [ 2319.588074][T27555] mem_cgroup_out_of_memory+0x206/0x270 [ 2319.593663][T27555] ? mem_cgroup_margin+0x130/0x130 [ 2319.598815][T27555] memory_max_write+0x2f9/0x3c0 [ 2319.603680][T27555] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2319.609759][T27555] ? lock_release+0x810/0x810 [ 2319.614466][T27555] cgroup_file_write+0x1e2/0x770 [ 2319.619427][T27555] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2319.625504][T27555] ? kill_css+0x370/0x370 [ 2319.629855][T27555] ? __virt_addr_valid+0x61/0x2e0 [ 2319.634906][T27555] ? kill_css+0x370/0x370 [ 2319.639264][T27555] kernfs_fop_write_iter+0x3f1/0x600 [ 2319.644578][T27555] vfs_write+0x9ed/0xdd0 [ 2319.648845][T27555] ? kernel_write+0x630/0x630 [ 2319.653546][T27555] ? __fget_files+0x26a/0x440 [ 2319.658249][T27555] ksys_write+0x12b/0x250 [ 2319.662593][T27555] ? __ia32_sys_read+0xb0/0xb0 [ 2319.667386][T27555] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2319.673298][T27555] do_syscall_64+0x39/0xb0 [ 2319.677738][T27555] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2319.683647][T27555] RIP: 0033:0x7f3e14c8c0c9 [ 2319.688070][T27555] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2319.707685][T27555] RSP: 002b:00007f3e15a67168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2319.716110][T27555] RAX: ffffffffffffffda RBX: 00007f3e14dabf80 RCX: 00007f3e14c8c0c9 [ 2319.724086][T27555] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2319.732064][T27555] RBP: 00007f3e14ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2319.740040][T27555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2319.748025][T27555] R13: 00007fff599274af R14: 00007f3e15a67300 R15: 0000000000022000 [ 2319.756018][T27555] [ 2319.780010][T27555] memory: usage 10628kB, limit 0kB, failcnt 940 [ 2319.787278][T27555] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2319.794453][T27555] Memory cgroup stats for /syz4: [ 2319.802232][T27555] anon 114688 [ 2319.802232][T27555] file 10452992 [ 2319.802232][T27555] kernel 307200 [ 2319.802232][T27555] kernel_stack 65536 [ 2319.802232][T27555] pagetables 81920 [ 2319.802232][T27555] sec_pagetables 0 [ 2319.802232][T27555] percpu 64 [ 2319.802232][T27555] sock 0 [ 2319.802232][T27555] vmalloc 0 [ 2319.802232][T27555] shmem 10448896 [ 2319.802232][T27555] zswap 0 [ 2319.802232][T27555] zswapped 0 [ 2319.802232][T27555] file_mapped 335872 [ 2319.802232][T27555] file_dirty 4096 [ 2319.802232][T27555] file_writeback 0 [ 2319.802232][T27555] swapcached 0 [ 2319.802232][T27555] anon_thp 0 [ 2319.802232][T27555] file_thp 0 [ 2319.802232][T27555] shmem_thp 0 [ 2319.802232][T27555] inactive_anon 73728 [ 2319.802232][T27555] active_anon 10448896 [ 2319.802232][T27555] inactive_file 0 [ 2319.802232][T27555] active_file 0 [ 2319.802232][T27555] unevictable 0 [ 2319.802232][T27555] slab_reclaimable 54464 [ 2319.802232][T27555] slab_unreclaimable 73104 [ 2319.802232][T27555] slab 127568 [ 2319.932756][T27555] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=27554,uid=0 [ 2319.961896][T27555] Memory cgroup out of memory: Killed process 27554 (syz-executor.4) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 11:01:10 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r3, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:01:10 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:01:10 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:01:10 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0), 0x12) 11:01:10 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x6100, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:01:10 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:01:10 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x6200, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2320.302739][T27413] syz-executor.4 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 2320.352465][T27413] CPU: 0 PID: 27413 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2320.362943][T27413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2320.373028][T27413] Call Trace: [ 2320.376337][T27413] [ 2320.379288][T27413] dump_stack_lvl+0xd1/0x138 [ 2320.383911][T27413] dump_header+0x10b/0x85f [ 2320.388361][T27413] oom_kill_process.cold+0x10/0x15 [ 2320.393506][T27413] out_of_memory+0x35c/0x14a0 [ 2320.398230][T27413] ? find_held_lock+0x2d/0x110 [ 2320.403040][T27413] ? oom_killer_disable+0x280/0x280 [ 2320.408295][T27413] ? find_held_lock+0x2d/0x110 [ 2320.413097][T27413] mem_cgroup_out_of_memory+0x206/0x270 [ 2320.418665][T27413] ? mem_cgroup_margin+0x130/0x130 [ 2320.423791][T27413] ? lock_downgrade+0x6e0/0x6e0 [ 2320.428664][T27413] try_charge_memcg+0xefb/0x12f0 [ 2320.433619][T27413] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2320.439605][T27413] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2320.445327][T27413] ? lock_downgrade+0x6e0/0x6e0 [ 2320.450201][T27413] obj_cgroup_charge+0x2af/0x5e0 [ 2320.455151][T27413] kmem_cache_alloc_lru+0x145/0x760 [ 2320.460363][T27413] ? ext4_alloc_inode+0x28/0x680 [ 2320.465330][T27413] ? ext4_free_in_core_inode+0x70/0x70 [ 2320.470809][T27413] ext4_alloc_inode+0x28/0x680 [ 2320.475594][T27413] ? ext4_free_in_core_inode+0x70/0x70 [ 2320.481063][T27413] alloc_inode+0x61/0x230 [ 2320.485407][T27413] iget_locked+0x1bb/0x700 [ 2320.489844][T27413] __ext4_iget+0x3af/0x4230 [ 2320.494374][T27413] ? ext4_get_projid+0x190/0x190 [ 2320.499350][T27413] ? ext4_fname_prepare_lookup+0x163/0x200 [ 2320.505174][T27413] ? ext4_fname_setup_filename+0x110/0x110 [ 2320.511012][T27413] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2320.516580][T27413] ext4_lookup+0x387/0x700 [ 2320.521006][T27413] ? ext4_resetent+0x2d0/0x2d0 [ 2320.525812][T27413] __lookup_slow+0x24c/0x460 [ 2320.530412][T27413] ? __lookup_hash+0x180/0x180 [ 2320.535201][T27413] ? snd_usb_parse_audio_format.cold+0x4f7/0x534 [ 2320.541552][T27413] ? snd_usb_parse_audio_format.cold+0x4f7/0x534 [ 2320.547913][T27413] ? lookup_fast+0x14e/0x520 [ 2320.552517][T27413] walk_component+0x33f/0x5a0 [ 2320.557209][T27413] path_lookupat+0x1ba/0x840 [ 2320.561821][T27413] filename_lookup+0x1d2/0x590 [ 2320.566599][T27413] ? may_linkat+0x500/0x500 [ 2320.571112][T27413] ? __might_fault+0xd9/0x180 [ 2320.575808][T27413] ? __phys_addr_symbol+0x30/0x70 [ 2320.580845][T27413] ? __check_object_size+0x2e2/0x5a0 [ 2320.586148][T27413] ? strncpy_from_user+0x28b/0x3c0 [ 2320.591275][T27413] ? getname_flags.part.0+0x1dd/0x4f0 [ 2320.596682][T27413] user_path_at_empty+0x46/0x60 [ 2320.601550][T27413] __x64_sys_umount+0xfc/0x190 [ 2320.606331][T27413] ? path_umount+0x10b0/0x10b0 [ 2320.611121][T27413] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2320.617028][T27413] do_syscall_64+0x39/0xb0 [ 2320.621464][T27413] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2320.627366][T27413] RIP: 0033:0x7f3e14c8d537 [ 2320.631783][T27413] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 11:01:10 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:01:10 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r0, &(0x7f00000002c0), 0x12) 11:01:10 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0), 0x12) [ 2320.651406][T27413] RSP: 002b:00007fff59926608 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2320.659824][T27413] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3e14c8d537 [ 2320.667797][T27413] RDX: 00007fff599266de RSI: 000000000000000a RDI: 00007fff599266d0 [ 2320.675780][T27413] RBP: 00007fff599266d0 R08: 00000000ffffffff R09: 00007fff599264a0 [ 2320.683757][T27413] R10: 00005555557278bb R11: 0000000000000246 R12: 00007f3e14ce6b24 [ 2320.691911][T27413] R13: 00007fff59927790 R14: 0000555555727810 R15: 00007fff599277d0 [ 2320.699911][T27413] 11:01:10 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:01:10 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x6300, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2320.947647][T27413] memory: usage 10364kB, limit 0kB, failcnt 959 [ 2320.953956][T27413] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2320.971675][T27413] Memory cgroup stats for /syz4: [ 2320.971900][T27413] anon 45056 [ 2320.971900][T27413] file 10448896 [ 2320.971900][T27413] kernel 118784 [ 2320.971900][T27413] kernel_stack 0 [ 2320.971900][T27413] pagetables 8192 [ 2320.971900][T27413] sec_pagetables 0 [ 2320.971900][T27413] percpu 64 [ 2320.971900][T27413] sock 0 [ 2320.971900][T27413] vmalloc 0 [ 2320.971900][T27413] shmem 10448896 [ 2320.971900][T27413] zswap 0 [ 2320.971900][T27413] zswapped 0 [ 2320.971900][T27413] file_mapped 307200 [ 2320.971900][T27413] file_dirty 0 [ 2320.971900][T27413] file_writeback 0 [ 2320.971900][T27413] swapcached 0 [ 2320.971900][T27413] anon_thp 0 [ 2320.971900][T27413] file_thp 0 [ 2320.971900][T27413] shmem_thp 0 [ 2320.971900][T27413] inactive_anon 45056 [ 2320.971900][T27413] active_anon 10448896 [ 2320.971900][T27413] inactive_file 0 [ 2320.971900][T27413] active_file 0 [ 2320.971900][T27413] unevictable 0 [ 2320.971900][T27413] slab_reclaimable 46320 [ 2320.971900][T27413] slab_unreclaimable 44728 [ 2320.971900][T27413] slab 91048 [ 2321.091491][T27413] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=27413,uid=0 [ 2321.114283][T27413] Memory cgroup out of memory: Killed process 27413 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 11:01:12 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000002c0), 0x12) [ 2322.395020][T13787] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2322.534997][T13787] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2322.631170][T13787] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2322.769652][T13787] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2322.974121][ T8419] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2322.983891][ T8419] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2322.996205][ T8419] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2323.003881][ T8419] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2323.012513][ T8419] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2323.317209][T27644] chnl_net:caif_netlink_parms(): no params data found [ 2323.404064][T27644] bridge0: port 1(bridge_slave_0) entered blocking state [ 2323.411429][T27644] bridge0: port 1(bridge_slave_0) entered disabled state [ 2323.420433][T27644] device bridge_slave_0 entered promiscuous mode [ 2323.439678][T27644] bridge0: port 2(bridge_slave_1) entered blocking state [ 2323.448425][T27644] bridge0: port 2(bridge_slave_1) entered disabled state [ 2323.456595][T27644] device bridge_slave_1 entered promiscuous mode [ 2323.503488][T27644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2323.517361][T27644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2323.579381][T27644] team0: Port device team_slave_0 added [ 2323.606461][T27644] team0: Port device team_slave_1 added [ 2323.660829][T27644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2323.676106][T27644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2323.713788][T27644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2323.750482][T27644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2323.766476][T27644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2323.801733][T27644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2323.904004][T27644] device hsr_slave_0 entered promiscuous mode [ 2323.918930][T27644] device hsr_slave_1 entered promiscuous mode [ 2323.926787][T27644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2323.955049][T27644] Cannot create hsr debugfs directory [ 2323.996576][T13787] device hsr_slave_0 left promiscuous mode [ 2324.003443][T13787] device hsr_slave_1 left promiscuous mode [ 2324.012111][T13787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2324.019912][T13787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2324.030228][T13787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2324.037718][T13787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2324.055864][T13787] device bridge_slave_1 left promiscuous mode [ 2324.064847][T13787] bridge0: port 2(bridge_slave_1) entered disabled state [ 2324.082080][T13787] device bridge_slave_0 left promiscuous mode [ 2324.092755][T13787] bridge0: port 1(bridge_slave_0) entered disabled state [ 2324.111259][T13787] device veth1_macvtap left promiscuous mode [ 2324.125204][T13787] device veth0_macvtap left promiscuous mode [ 2324.131821][T13787] device veth1_vlan left promiscuous mode [ 2324.145659][T13787] device veth0_vlan left promiscuous mode [ 2324.363574][T13787] team0 (unregistering): Port device team_slave_1 removed [ 2324.377838][T13787] team0 (unregistering): Port device team_slave_0 removed [ 2324.390921][T13787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2324.408969][T13787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2324.475494][T13787] bond0 (unregistering): Released all slaves [ 2325.057127][ T8419] Bluetooth: hci4: command 0x0409 tx timeout [ 2325.376811][T27644] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2325.401173][T27644] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2325.428946][T27644] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2325.450481][T27644] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2325.597970][T27644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2325.624367][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2325.632980][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2325.651867][T27644] 8021q: adding VLAN 0 to HW filter on device team0 [ 2325.673884][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2325.697733][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2325.706297][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 2325.713501][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2325.747453][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2325.767682][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2325.776396][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2325.807570][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 2325.814699][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2325.837431][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2325.846376][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2325.881296][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2325.900182][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2325.916737][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2325.925483][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2325.942591][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2325.957615][T27644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2325.981232][T27644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2325.999176][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2326.018280][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2326.388184][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2326.395736][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2326.407818][T27644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2326.429682][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2326.439427][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2326.471163][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2326.480734][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2326.500691][T27644] device veth0_vlan entered promiscuous mode [ 2326.509723][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2326.518391][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2326.531673][T27644] device veth1_vlan entered promiscuous mode [ 2326.556029][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2326.564862][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2326.575286][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2326.584361][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2326.595634][T27644] device veth0_macvtap entered promiscuous mode [ 2326.612862][T27644] device veth1_macvtap entered promiscuous mode [ 2326.620444][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2326.629689][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2326.649794][T27644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2326.668681][T27644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2326.679841][T27644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2326.702658][T27644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2326.715885][T27644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2326.737312][T27644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2326.774059][T27644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2326.793327][T27644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2326.831666][T27644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2326.842375][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2326.867909][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2326.879056][T27644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2326.890829][T27644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2326.901831][T27644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2326.912599][T27644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2326.923704][T27644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2326.939580][T27644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2326.967279][T27644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2326.986946][T27644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2327.015143][T27644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2327.031395][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2327.044876][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2327.068760][T27644] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2327.087543][T27644] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2327.096278][T27644] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2327.127563][ T8419] Bluetooth: hci4: command 0x041b tx timeout [ 2327.128516][T27644] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2327.288203][ T5470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2327.302479][ T5470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2327.320518][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2327.360090][ T5470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2327.397526][ T5470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2327.415326][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2327.488616][T27726] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2327.499011][T27726] CPU: 0 PID: 27726 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2327.509459][T27726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2327.519545][T27726] Call Trace: [ 2327.522848][T27726] [ 2327.525799][T27726] dump_stack_lvl+0xd1/0x138 [ 2327.530436][T27726] dump_header+0x10b/0x85f [ 2327.534891][T27726] oom_kill_process.cold+0x10/0x15 [ 2327.540037][T27726] out_of_memory+0x35c/0x14a0 [ 2327.544769][T27726] ? oom_killer_disable+0x280/0x280 [ 2327.550024][T27726] mem_cgroup_out_of_memory+0x206/0x270 [ 2327.555615][T27726] ? mem_cgroup_margin+0x130/0x130 [ 2327.560779][T27726] memory_max_write+0x2f9/0x3c0 [ 2327.565651][T27726] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2327.571730][T27726] ? lock_release+0x810/0x810 [ 2327.576421][T27726] cgroup_file_write+0x1e2/0x770 [ 2327.581379][T27726] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2327.587456][T27726] ? kill_css+0x370/0x370 [ 2327.591803][T27726] ? __virt_addr_valid+0x61/0x2e0 [ 2327.596854][T27726] ? kill_css+0x370/0x370 [ 2327.601197][T27726] kernfs_fop_write_iter+0x3f1/0x600 [ 2327.606506][T27726] vfs_write+0x9ed/0xdd0 [ 2327.610778][T27726] ? kernel_write+0x630/0x630 [ 2327.615470][T27726] ? __fget_files+0x26a/0x440 [ 2327.620172][T27726] ksys_write+0x12b/0x250 [ 2327.624514][T27726] ? __ia32_sys_read+0xb0/0xb0 [ 2327.629298][T27726] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2327.635214][T27726] do_syscall_64+0x39/0xb0 [ 2327.639650][T27726] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2327.645555][T27726] RIP: 0033:0x7fbe5a68c0c9 [ 2327.650028][T27726] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2327.669646][T27726] RSP: 002b:00007fbe5b352168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2327.678066][T27726] RAX: ffffffffffffffda RBX: 00007fbe5a7abf80 RCX: 00007fbe5a68c0c9 [ 2327.686069][T27726] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2327.694042][T27726] RBP: 00007fbe5a6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2327.702018][T27726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2327.709996][T27726] R13: 00007ffc329db62f R14: 00007fbe5b352300 R15: 0000000000022000 [ 2327.717995][T27726] [ 2327.750366][T27726] memory: usage 8580kB, limit 0kB, failcnt 943 [ 2327.756670][T27726] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2327.769456][T27726] Memory cgroup stats for /syz2: [ 2327.769668][T27726] anon 114688 [ 2327.769668][T27726] file 8355840 [ 2327.769668][T27726] kernel 278528 [ 2327.769668][T27726] kernel_stack 65536 [ 2327.769668][T27726] pagetables 77824 [ 2327.769668][T27726] sec_pagetables 0 [ 2327.769668][T27726] percpu 64 [ 2327.769668][T27726] sock 0 [ 2327.769668][T27726] vmalloc 0 [ 2327.769668][T27726] shmem 8351744 [ 2327.769668][T27726] zswap 0 [ 2327.769668][T27726] zswapped 0 [ 2327.769668][T27726] file_mapped 335872 [ 2327.769668][T27726] file_dirty 4096 [ 2327.769668][T27726] file_writeback 0 [ 2327.769668][T27726] swapcached 0 [ 2327.769668][T27726] anon_thp 0 [ 2327.769668][T27726] file_thp 0 [ 2327.769668][T27726] shmem_thp 0 [ 2327.769668][T27726] inactive_anon 114688 [ 2327.769668][T27726] active_anon 8351744 [ 2327.769668][T27726] inactive_file 0 [ 2327.769668][T27726] active_file 4096 [ 2327.769668][T27726] unevictable 0 [ 2327.769668][T27726] slab_reclaimable 39456 [ 2327.769668][T27726] slab_unreclaimable 72456 [ 2327.769668][T27726] slab 111912 [ 2327.876400][T27726] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=27725,uid=0 11:01:17 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0), 0x12) 11:01:17 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r3, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2327.898961][T27726] Memory cgroup out of memory: Killed process 27725 (syz-executor.2) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 11:01:17 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r0, &(0x7f00000002c0), 0x12) 11:01:17 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x6908, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:01:17 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:01:17 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000002c0), 0x12) 11:01:17 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x7000, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:01:17 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:01:17 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r0, &(0x7f00000002c0), 0x12) 11:01:17 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000002c0), 0x12) [ 2328.136731][T27644] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 11:01:18 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x7100, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2328.189810][T27644] CPU: 1 PID: 27644 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2328.200288][T27644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2328.210372][T27644] Call Trace: [ 2328.213676][T27644] [ 2328.216626][T27644] dump_stack_lvl+0xd1/0x138 [ 2328.221257][T27644] dump_header+0x10b/0x85f [ 2328.225704][T27644] oom_kill_process.cold+0x10/0x15 [ 2328.230851][T27644] out_of_memory+0x35c/0x14a0 [ 2328.235579][T27644] ? find_held_lock+0x2d/0x110 11:01:18 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2328.240383][T27644] ? oom_killer_disable+0x280/0x280 [ 2328.245628][T27644] ? find_held_lock+0x2d/0x110 [ 2328.250432][T27644] mem_cgroup_out_of_memory+0x206/0x270 [ 2328.256017][T27644] ? mem_cgroup_margin+0x130/0x130 [ 2328.261160][T27644] ? lock_downgrade+0x6e0/0x6e0 [ 2328.266065][T27644] try_charge_memcg+0xefb/0x12f0 [ 2328.271038][T27644] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2328.277051][T27644] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2328.282801][T27644] ? lock_downgrade+0x6e0/0x6e0 [ 2328.287703][T27644] obj_cgroup_charge+0x2af/0x5e0 [ 2328.292675][T27644] ? vm_area_dup+0x7d/0x380 [ 2328.297216][T27644] kmem_cache_alloc+0xb5/0x430 [ 2328.302017][T27644] vm_area_dup+0x7d/0x380 [ 2328.306378][T27644] ? copy_page_range+0x1dfe/0x3b40 [ 2328.311564][T27644] ? mas_next_nentry+0x610/0xab0 [ 2328.316535][T27644] ? vm_area_alloc+0x100/0x100 [ 2328.321346][T27644] ? mas_find+0x211/0xd10 [ 2328.325721][T27644] dup_mmap+0x655/0x10b0 [ 2328.330012][T27644] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2328.335329][T27644] ? lock_downgrade+0x6e0/0x6e0 [ 2328.340226][T27644] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2328.346087][T27644] ? mm_init+0x8e0/0xc10 [ 2328.350364][T27644] copy_process+0x440f/0x7520 [ 2328.355125][T27644] ? _raw_spin_unlock+0x28/0x40 [ 2328.360010][T27644] ? wp_page_reuse+0x197/0x570 [ 2328.364831][T27644] ? __cleanup_sighand+0xb0/0xb0 [ 2328.369796][T27644] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2328.375211][T27644] ? rwlock_bug.part.0+0x90/0x90 [ 2328.380178][T27644] ? lock_chain_count+0x20/0x20 [ 2328.385070][T27644] kernel_clone+0xeb/0x990 [ 2328.389523][T27644] ? create_io_thread+0xf0/0xf0 [ 2328.394503][T27644] ? find_held_lock+0x2d/0x110 [ 2328.399317][T27644] __do_sys_clone+0xba/0x100 [ 2328.403935][T27644] ? kernel_clone+0x990/0x990 [ 2328.408656][T27644] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2328.414592][T27644] do_syscall_64+0x39/0xb0 [ 2328.419050][T27644] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2328.424984][T27644] RIP: 0033:0x7fbe5a689dfb [ 2328.429429][T27644] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2328.449069][T27644] RSP: 002b:00007ffc329db870 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2328.457515][T27644] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbe5a689dfb [ 2328.465512][T27644] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2328.473506][T27644] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555707f400 [ 2328.481498][T27644] R10: 000055555707f6d0 R11: 0000000000000246 R12: 0000000000000001 [ 2328.489492][T27644] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc329db950 [ 2328.497517][T27644] [ 2328.850952][T27644] memory: usage 8380kB, limit 0kB, failcnt 967 [ 2328.869751][T27644] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2328.877177][T27644] Memory cgroup stats for /syz2: [ 2328.877385][T27644] anon 45056 [ 2328.877385][T27644] file 8355840 [ 2328.877385][T27644] kernel 180224 [ 2328.877385][T27644] kernel_stack 32768 [ 2328.877385][T27644] pagetables 24576 [ 2328.877385][T27644] sec_pagetables 0 [ 2328.877385][T27644] percpu 128 [ 2328.877385][T27644] sock 0 [ 2328.877385][T27644] vmalloc 0 [ 2328.877385][T27644] shmem 8351744 [ 2328.877385][T27644] zswap 0 [ 2328.877385][T27644] zswapped 0 [ 2328.877385][T27644] file_mapped 311296 [ 2328.877385][T27644] file_dirty 4096 [ 2328.877385][T27644] file_writeback 0 [ 2328.877385][T27644] swapcached 0 [ 2328.877385][T27644] anon_thp 0 [ 2328.877385][T27644] file_thp 0 [ 2328.877385][T27644] shmem_thp 0 [ 2328.877385][T27644] inactive_anon 45056 [ 2328.877385][T27644] active_anon 8351744 [ 2328.877385][T27644] inactive_file 0 [ 2328.877385][T27644] active_file 4096 [ 2328.877385][T27644] unevictable 0 [ 2328.877385][T27644] slab_reclaimable 30400 [ 2328.877385][T27644] slab_unreclaimable 66632 [ 2328.877385][T27644] slab 97032 [ 2328.984946][T27644] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=27644,uid=0 [ 2329.007099][T27644] Memory cgroup out of memory: Killed process 27644 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2330.135970][ T8419] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2330.146310][ T8419] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2330.154307][ T8419] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2330.162862][ T8419] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2330.170723][ T8419] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2330.178764][ T8419] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2330.368438][T27793] chnl_net:caif_netlink_parms(): no params data found [ 2330.464238][T27793] bridge0: port 1(bridge_slave_0) entered blocking state [ 2330.471541][T27793] bridge0: port 1(bridge_slave_0) entered disabled state [ 2330.480235][T27793] device bridge_slave_0 entered promiscuous mode [ 2330.489385][T27793] bridge0: port 2(bridge_slave_1) entered blocking state [ 2330.496563][T27793] bridge0: port 2(bridge_slave_1) entered disabled state [ 2330.506724][T27793] device bridge_slave_1 entered promiscuous mode [ 2330.535607][T27793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2330.547641][T27793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2330.580233][T27793] team0: Port device team_slave_0 added [ 2330.588557][T27793] team0: Port device team_slave_1 added [ 2330.614839][T27793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2330.621972][T27793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2330.648833][T27793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2330.661959][T27793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2330.669329][T27793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2330.695758][T27793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2330.739860][T27793] device hsr_slave_0 entered promiscuous mode [ 2330.746810][T27793] device hsr_slave_1 entered promiscuous mode [ 2330.754070][T27793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2330.762152][T27793] Cannot create hsr debugfs directory [ 2331.333836][T27793] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2331.343924][T27793] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2331.354959][T27793] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2331.365170][T27793] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2331.504810][T27793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2331.535634][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2331.547700][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2331.559052][T27793] 8021q: adding VLAN 0 to HW filter on device team0 [ 2331.578373][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2331.587817][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2331.596413][T14545] bridge0: port 1(bridge_slave_0) entered blocking state [ 2331.603597][T14545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2331.645434][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2331.662398][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2331.674949][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 11:01:21 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0), 0x12) [ 2331.689774][T21291] bridge0: port 2(bridge_slave_1) entered blocking state [ 2331.696970][T21291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2331.737353][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2331.746251][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2331.767966][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2331.843759][ T8442] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2331.883213][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2331.892329][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2331.904090][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2331.913264][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2331.926586][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2331.936702][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2331.947735][T27793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2331.967777][ T8442] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2332.035886][ T8442] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2332.116883][ T8442] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2332.249031][ T8419] Bluetooth: hci4: command 0x0409 tx timeout [ 2332.447374][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2332.454891][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2332.468294][T27793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2333.095163][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2333.104368][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2333.157953][ T8442] device hsr_slave_0 left promiscuous mode [ 2333.165220][ T8442] device hsr_slave_1 left promiscuous mode [ 2333.181776][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2333.195138][ T8442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2333.214436][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2333.222145][ T8442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2333.232254][ T8442] device bridge_slave_1 left promiscuous mode [ 2333.238907][ T8442] bridge0: port 2(bridge_slave_1) entered disabled state [ 2333.250963][ T8442] device bridge_slave_0 left promiscuous mode [ 2333.257456][ T8442] bridge0: port 1(bridge_slave_0) entered disabled state [ 2333.274714][ T8442] device veth1_macvtap left promiscuous mode [ 2333.282526][ T8442] device veth0_macvtap left promiscuous mode [ 2333.303399][ T8442] device veth1_vlan left promiscuous mode [ 2333.312326][ T8442] device veth0_vlan left promiscuous mode [ 2333.631208][ T8442] team0 (unregistering): Port device team_slave_1 removed [ 2333.671009][ T8442] team0 (unregistering): Port device team_slave_0 removed [ 2333.709586][ T8442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2333.726609][ T8442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2333.853022][ T8442] bond0 (unregistering): Released all slaves [ 2333.902299][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2333.910647][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2333.921742][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2333.930772][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2333.940040][T27793] device veth0_vlan entered promiscuous mode [ 2333.956221][T27793] device veth1_vlan entered promiscuous mode [ 2334.044097][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2334.053419][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2334.073710][T27793] device veth0_macvtap entered promiscuous mode [ 2334.088215][T27793] device veth1_macvtap entered promiscuous mode [ 2334.118882][T27793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2334.130247][T27793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2334.140531][T27793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2334.151872][T27793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2334.162040][T27793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2334.175095][T27793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2334.185853][T27793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2334.196754][T27793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2334.215587][T27793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2334.228247][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2334.236546][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2334.245716][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2334.255149][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2334.274398][T27793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2334.289750][T27793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2334.307357][T27793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2334.325892][T27793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2334.327051][ T8419] Bluetooth: hci4: command 0x041b tx timeout [ 2334.354897][T27793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2334.365693][T27793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2334.384386][T27793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2334.396642][T27793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2334.419558][T27793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2334.428522][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2334.445608][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2334.461657][T27793] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2334.479944][T27793] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2334.497024][T27793] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2334.505788][T27793] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2334.629430][ T8443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2334.655882][ T8443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2334.680087][T13787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2334.710593][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2334.727697][T13787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2334.743357][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2335.171681][T27907] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2335.182424][T27907] CPU: 0 PID: 27907 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2335.192883][T27907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2335.202975][T27907] Call Trace: [ 2335.206290][T27907] [ 2335.209252][T27907] dump_stack_lvl+0xd1/0x138 [ 2335.213891][T27907] dump_header+0x10b/0x85f [ 2335.218343][T27907] oom_kill_process.cold+0x10/0x15 [ 2335.223487][T27907] out_of_memory+0x35c/0x14a0 [ 2335.228215][T27907] ? oom_killer_disable+0x280/0x280 [ 2335.233476][T27907] ? mark_held_locks+0x9f/0xe0 [ 2335.238273][T27907] mem_cgroup_out_of_memory+0x206/0x270 [ 2335.243854][T27907] ? mem_cgroup_margin+0x130/0x130 [ 2335.249023][T27907] memory_max_write+0x2f9/0x3c0 [ 2335.253890][T27907] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2335.259997][T27907] ? lock_release+0x810/0x810 [ 2335.264691][T27907] cgroup_file_write+0x1e2/0x770 [ 2335.269648][T27907] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2335.275726][T27907] ? kill_css+0x370/0x370 [ 2335.280075][T27907] ? __virt_addr_valid+0x61/0x2e0 [ 2335.285216][T27907] ? kill_css+0x370/0x370 [ 2335.289559][T27907] kernfs_fop_write_iter+0x3f1/0x600 [ 2335.294890][T27907] vfs_write+0x9ed/0xdd0 [ 2335.299146][T27907] ? kernel_write+0x630/0x630 [ 2335.303860][T27907] ksys_write+0x12b/0x250 [ 2335.308199][T27907] ? __ia32_sys_read+0xb0/0xb0 [ 2335.313162][T27907] ? syscall_enter_from_user_mode+0x30/0xb0 [ 2335.319083][T27907] do_syscall_64+0x39/0xb0 [ 2335.323544][T27907] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2335.329461][T27907] RIP: 0033:0x7feabc28c0c9 [ 2335.333884][T27907] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2335.353501][T27907] RSP: 002b:00007feabd07c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2335.361926][T27907] RAX: ffffffffffffffda RBX: 00007feabc3abf80 RCX: 00007feabc28c0c9 [ 2335.369901][T27907] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2335.377893][T27907] RBP: 00007feabc2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2335.385871][T27907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2335.393844][T27907] R13: 00007ffe7c0c3fff R14: 00007feabd07c300 R15: 0000000000022000 [ 2335.401853][T27907] [ 2335.416804][T27907] memory: usage 10620kB, limit 0kB, failcnt 976 [ 2335.423791][T27907] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2335.436730][T27907] Memory cgroup stats for /syz4: [ 2335.440360][T27907] anon 114688 [ 2335.440360][T27907] file 10448896 [ 2335.440360][T27907] kernel 299008 [ 2335.440360][T27907] kernel_stack 65536 [ 2335.440360][T27907] pagetables 81920 [ 2335.440360][T27907] sec_pagetables 0 [ 2335.440360][T27907] percpu 64 [ 2335.440360][T27907] sock 0 [ 2335.440360][T27907] vmalloc 0 [ 2335.440360][T27907] shmem 10448896 [ 2335.440360][T27907] zswap 0 [ 2335.440360][T27907] zswapped 0 [ 2335.440360][T27907] file_mapped 335872 [ 2335.440360][T27907] file_dirty 0 [ 2335.440360][T27907] file_writeback 0 [ 2335.440360][T27907] swapcached 0 [ 2335.440360][T27907] anon_thp 0 [ 2335.440360][T27907] file_thp 0 [ 2335.440360][T27907] shmem_thp 0 [ 2335.440360][T27907] inactive_anon 114688 [ 2335.440360][T27907] active_anon 10448896 [ 2335.440360][T27907] inactive_file 0 [ 2335.440360][T27907] active_file 0 [ 2335.440360][T27907] unevictable 0 [ 2335.440360][T27907] slab_reclaimable 54464 [ 2335.440360][T27907] slab_unreclaimable 73104 [ 2335.440360][T27907] slab 127568 [ 2335.560504][T27907] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=27906,uid=0 [ 2335.578473][T27907] Memory cgroup out of memory: Killed process 27906 (syz-executor.4) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 11:01:25 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r3, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:01:25 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:01:25 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x7200, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:01:25 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:01:25 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:01:25 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0), 0x12) 11:01:25 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:01:25 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x7300, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:01:25 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:01:25 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r0, &(0x7f00000002c0), 0x12) [ 2335.859568][T27793] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2335.910468][T27793] CPU: 1 PID: 27793 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2335.920964][T27793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2335.931047][T27793] Call Trace: [ 2335.934341][T27793] [ 2335.937287][T27793] dump_stack_lvl+0xd1/0x138 [ 2335.941921][T27793] dump_header+0x10b/0x85f [ 2335.946376][T27793] oom_kill_process.cold+0x10/0x15 [ 2335.951536][T27793] out_of_memory+0x35c/0x14a0 [ 2335.956265][T27793] ? find_held_lock+0x2d/0x110 [ 2335.961067][T27793] ? oom_killer_disable+0x280/0x280 [ 2335.966314][T27793] ? find_held_lock+0x2d/0x110 [ 2335.971212][T27793] mem_cgroup_out_of_memory+0x206/0x270 [ 2335.976800][T27793] ? mem_cgroup_margin+0x130/0x130 [ 2335.981950][T27793] ? lock_downgrade+0x6e0/0x6e0 [ 2335.986897][T27793] try_charge_memcg+0xefb/0x12f0 [ 2335.991871][T27793] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2335.997908][T27793] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2336.003652][T27793] ? lock_downgrade+0x6e0/0x6e0 [ 2336.008533][T27793] ? lock_downgrade+0x6e0/0x6e0 [ 2336.013428][T27793] obj_cgroup_charge+0x2af/0x5e0 [ 2336.018407][T27793] kmem_cache_alloc_lru+0x145/0x760 [ 2336.023633][T27793] ? sock_alloc_inode+0x27/0x1d0 [ 2336.028613][T27793] sock_alloc_inode+0x27/0x1d0 [ 2336.033426][T27793] ? sock_free_inode+0x30/0x30 [ 2336.038220][T27793] alloc_inode+0x61/0x230 [ 2336.042605][T27793] new_inode_pseudo+0x17/0x80 [ 2336.047300][T27793] sock_alloc+0x40/0x260 [ 2336.051559][T27793] __sock_create+0xbd/0x790 [ 2336.056083][T27793] __sys_socket+0x133/0x250 [ 2336.060597][T27793] ? __sys_socket_file+0x1f0/0x1f0 [ 2336.065766][T27793] __x64_sys_socket+0x73/0xb0 [ 2336.070472][T27793] do_syscall_64+0x39/0xb0 [ 2336.074909][T27793] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2336.080821][T27793] RIP: 0033:0x7feabc28d747 [ 2336.085281][T27793] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 11:01:25 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:01:25 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r0, &(0x7f00000002c0), 0x12) [ 2336.104898][T27793] RSP: 002b:00007ffe7c0c3b78 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 2336.113404][T27793] RAX: ffffffffffffffda RBX: 00007ffe7c0c42e0 RCX: 00007feabc28d747 [ 2336.121386][T27793] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 2336.129381][T27793] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffe7c0c40f0 [ 2336.137368][T27793] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 2336.145349][T27793] R13: 000000000023a0b6 R14: 0000000000000013 R15: 00007ffe7c0c4320 [ 2336.153345][T27793] [ 2336.201500][T27793] memory: usage 10356kB, limit 0kB, failcnt 995 [ 2336.235632][T27793] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2336.294580][T27793] Memory cgroup stats for /syz4: [ 2336.294808][T27793] anon 45056 [ 2336.294808][T27793] file 10448896 [ 2336.294808][T27793] kernel 110592 [ 2336.294808][T27793] kernel_stack 0 [ 2336.294808][T27793] pagetables 8192 [ 2336.294808][T27793] sec_pagetables 0 [ 2336.294808][T27793] percpu 64 [ 2336.294808][T27793] sock 0 [ 2336.294808][T27793] vmalloc 0 [ 2336.294808][T27793] shmem 10448896 [ 2336.294808][T27793] zswap 0 [ 2336.294808][T27793] zswapped 0 [ 2336.294808][T27793] file_mapped 307200 [ 2336.294808][T27793] file_dirty 0 [ 2336.294808][T27793] file_writeback 0 [ 2336.294808][T27793] swapcached 0 [ 2336.294808][T27793] anon_thp 0 [ 2336.294808][T27793] file_thp 0 [ 2336.294808][T27793] shmem_thp 0 [ 2336.294808][T27793] inactive_anon 45056 [ 2336.294808][T27793] active_anon 10448896 [ 2336.294808][T27793] inactive_file 0 [ 2336.294808][T27793] active_file 0 [ 2336.294808][T27793] unevictable 0 [ 2336.294808][T27793] slab_reclaimable 44400 [ 2336.294808][T27793] slab_unreclaimable 44080 [ 2336.294808][T27793] slab 88480 [ 2336.407025][T10407] Bluetooth: hci4: command 0x040f tx timeout [ 2336.636989][T27793] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=27793,uid=0 [ 2336.687082][T27793] Memory cgroup out of memory: Killed process 27793 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2336.788466][T27793] socket: no more sockets 11:01:27 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(r2, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r3, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:01:27 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x8004, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:01:27 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:01:27 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r0, &(0x7f00000002c0), 0x12) 11:01:27 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2337.444625][T27960] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2337.469575][T27960] CPU: 0 PID: 27960 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2337.480054][T27960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2337.490121][T27960] Call Trace: [ 2337.493405][T27960] [ 2337.496342][T27960] dump_stack_lvl+0xd1/0x138 [ 2337.500956][T27960] dump_header+0x10b/0x85f [ 2337.505406][T27960] oom_kill_process.cold+0x10/0x15 [ 2337.510532][T27960] out_of_memory+0x35c/0x14a0 [ 2337.515241][T27960] ? oom_killer_disable+0x280/0x280 [ 2337.520473][T27960] mem_cgroup_out_of_memory+0x206/0x270 [ 2337.526058][T27960] ? mem_cgroup_margin+0x130/0x130 [ 2337.531210][T27960] memory_max_write+0x2f9/0x3c0 [ 2337.536078][T27960] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2337.542164][T27960] ? lock_release+0x810/0x810 [ 2337.546856][T27960] cgroup_file_write+0x1e2/0x770 [ 2337.551819][T27960] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2337.557901][T27960] ? kill_css+0x370/0x370 [ 2337.562243][T27960] ? __virt_addr_valid+0x61/0x2e0 [ 2337.567302][T27960] ? kill_css+0x370/0x370 [ 2337.571687][T27960] kernfs_fop_write_iter+0x3f1/0x600 [ 2337.577011][T27960] vfs_write+0x9ed/0xdd0 [ 2337.581282][T27960] ? kernel_write+0x630/0x630 [ 2337.585987][T27960] ? __fget_files+0x26a/0x440 [ 2337.590705][T27960] ksys_write+0x12b/0x250 [ 2337.595052][T27960] ? __ia32_sys_read+0xb0/0xb0 [ 2337.599827][T27960] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2337.605746][T27960] do_syscall_64+0x39/0xb0 [ 2337.610187][T27960] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2337.616103][T27960] RIP: 0033:0x7f3b3b68c0c9 [ 2337.620610][T27960] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2337.640240][T27960] RSP: 002b:00007f3b3c35f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2337.648669][T27960] RAX: ffffffffffffffda RBX: 00007f3b3b7abf80 RCX: 00007f3b3b68c0c9 [ 2337.656645][T27960] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2337.664620][T27960] RBP: 00007f3b3b6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2337.672596][T27960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2337.680571][T27960] R13: 00007fffa64b760f R14: 00007f3b3c35f300 R15: 0000000000022000 [ 2337.688570][T27960] [ 2337.738694][ T8442] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2337.787562][T27960] memory: usage 10616kB, limit 0kB, failcnt 825 [ 2337.796230][T27960] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2337.811828][T27960] Memory cgroup stats for /syz1: [ 2337.812059][T27960] anon 139264 [ 2337.812059][T27960] file 10444800 [ 2337.812059][T27960] kernel 286720 [ 2337.812059][T27960] kernel_stack 65536 [ 2337.812059][T27960] pagetables 77824 [ 2337.812059][T27960] sec_pagetables 0 [ 2337.812059][T27960] percpu 64 [ 2337.812059][T27960] sock 0 [ 2337.812059][T27960] vmalloc 0 [ 2337.812059][T27960] shmem 10444800 [ 2337.812059][T27960] zswap 0 [ 2337.812059][T27960] zswapped 0 [ 2337.812059][T27960] file_mapped 397312 [ 2337.812059][T27960] file_dirty 0 [ 2337.812059][T27960] file_writeback 0 [ 2337.812059][T27960] swapcached 0 [ 2337.812059][T27960] anon_thp 0 [ 2337.812059][T27960] file_thp 0 [ 2337.812059][T27960] shmem_thp 0 [ 2337.812059][T27960] inactive_anon 139264 [ 2337.812059][T27960] active_anon 10444800 [ 2337.812059][T27960] inactive_file 0 [ 2337.812059][T27960] active_file 0 [ 2337.812059][T27960] unevictable 0 [ 2337.812059][T27960] slab_reclaimable 42336 [ 2337.812059][T27960] slab_unreclaimable 71808 [ 2337.812059][T27960] slab 114144 [ 2337.941926][ T8442] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2337.962820][T27960] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=27955,uid=0 [ 2338.026290][T27960] Memory cgroup out of memory: Killed process 27955 (syz-executor.1) total-vm:54540kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2338.057713][ T8442] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2338.108760][T27961] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2338.137113][T27961] CPU: 0 PID: 27961 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2338.147596][T27961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2338.157682][T27961] Call Trace: [ 2338.160982][T27961] [ 2338.163937][T27961] dump_stack_lvl+0xd1/0x138 [ 2338.168573][T27961] dump_header+0x10b/0x85f [ 2338.173049][T27961] oom_kill_process.cold+0x10/0x15 [ 2338.178210][T27961] out_of_memory+0x35c/0x14a0 [ 2338.182949][T27961] ? oom_killer_disable+0x280/0x280 [ 2338.188241][T27961] mem_cgroup_out_of_memory+0x206/0x270 [ 2338.193839][T27961] ? mem_cgroup_margin+0x130/0x130 [ 2338.199039][T27961] memory_max_write+0x2f9/0x3c0 [ 2338.203912][T27961] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2338.210002][T27961] ? lock_release+0x810/0x810 [ 2338.214707][T27961] cgroup_file_write+0x1e2/0x770 [ 2338.219749][T27961] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2338.225824][T27961] ? kill_css+0x370/0x370 [ 2338.230252][T27961] ? __virt_addr_valid+0x61/0x2e0 [ 2338.235308][T27961] ? kill_css+0x370/0x370 [ 2338.239649][T27961] kernfs_fop_write_iter+0x3f1/0x600 [ 2338.245309][T27961] vfs_write+0x9ed/0xdd0 [ 2338.249569][T27961] ? kernel_write+0x630/0x630 [ 2338.254266][T27961] ? __fget_files+0x26a/0x440 [ 2338.258970][T27961] ksys_write+0x12b/0x250 [ 2338.263315][T27961] ? __ia32_sys_read+0xb0/0xb0 [ 2338.268091][T27961] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2338.274003][T27961] do_syscall_64+0x39/0xb0 [ 2338.278438][T27961] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2338.284344][T27961] RIP: 0033:0x7f10cce8c0c9 [ 2338.288788][T27961] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2338.308401][T27961] RSP: 002b:00007f10cdb97168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2338.316822][T27961] RAX: ffffffffffffffda RBX: 00007f10ccfabf80 RCX: 00007f10cce8c0c9 [ 2338.324803][T27961] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2338.332779][T27961] RBP: 00007f10ccee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2338.340753][T27961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2338.348727][T27961] R13: 00007fff493eed1f R14: 00007f10cdb97300 R15: 0000000000022000 [ 2338.356722][T27961] [ 2338.376849][ T8442] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2338.600133][T27961] memory: usage 10608kB, limit 0kB, failcnt 513 [ 2338.606586][T27961] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2338.620766][T27961] Memory cgroup stats for /syz3: [ 2338.620963][T27961] anon 139264 [ 2338.620963][T27961] file 10436608 [ 2338.620963][T27961] kernel 253952 [ 2338.620963][T27961] kernel_stack 32768 [ 2338.620963][T27961] pagetables 77824 [ 2338.620963][T27961] sec_pagetables 0 [ 2338.620963][T27961] percpu 64 [ 2338.620963][T27961] sock 0 [ 2338.620963][T27961] vmalloc 0 [ 2338.620963][T27961] shmem 10436608 [ 2338.620963][T27961] zswap 0 [ 2338.620963][T27961] zswapped 0 [ 2338.620963][T27961] file_mapped 192512 [ 2338.620963][T27961] file_dirty 0 [ 2338.620963][T27961] file_writeback 0 [ 2338.620963][T27961] swapcached 0 [ 2338.620963][T27961] anon_thp 0 [ 2338.620963][T27961] file_thp 0 [ 2338.620963][T27961] shmem_thp 0 [ 2338.620963][T27961] inactive_anon 139264 [ 2338.620963][T27961] active_anon 10436608 [ 2338.620963][T27961] inactive_file 0 [ 2338.620963][T27961] active_file 0 [ 2338.620963][T27961] unevictable 0 [ 2338.620963][T27961] slab_reclaimable 41624 [ 2338.620963][T27961] slab_unreclaimable 71808 [ 2338.620963][T27961] slab 113432 [ 2338.721040][ T8419] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2338.730987][ T8419] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2338.756938][T27961] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=27958,uid=0 [ 2338.772814][ T8419] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2338.781155][ T8419] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2338.783759][T27961] Memory cgroup out of memory: Killed process 27961 (syz-executor.3) total-vm:54540kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2338.804714][ T8419] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2338.814601][ T8419] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2339.101244][T27972] chnl_net:caif_netlink_parms(): no params data found [ 2339.186566][T27972] bridge0: port 1(bridge_slave_0) entered blocking state [ 2339.193936][T27972] bridge0: port 1(bridge_slave_0) entered disabled state [ 2339.205062][T27972] device bridge_slave_0 entered promiscuous mode [ 2339.224017][T27972] bridge0: port 2(bridge_slave_1) entered blocking state [ 2339.237067][T27972] bridge0: port 2(bridge_slave_1) entered disabled state [ 2339.245361][T27972] device bridge_slave_1 entered promiscuous mode [ 2339.287476][T27972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2339.306124][T27972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2339.338471][T27972] team0: Port device team_slave_0 added [ 2339.360886][T27972] team0: Port device team_slave_1 added [ 2339.397261][T27972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2339.404269][T27972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2339.434875][T27972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2339.472883][T27972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2339.480048][T27972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2339.506118][T27972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2339.592282][T27972] device hsr_slave_0 entered promiscuous mode [ 2339.603040][T27972] device hsr_slave_1 entered promiscuous mode [ 2339.613652][T27972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2339.627226][T27972] Cannot create hsr debugfs directory [ 2339.690122][ T8442] device hsr_slave_0 left promiscuous mode [ 2339.696808][ T8442] device hsr_slave_1 left promiscuous mode [ 2339.712239][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2339.731467][ T8442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2339.745891][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2339.758351][ T8442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2339.776876][ T8442] device bridge_slave_1 left promiscuous mode [ 2339.784579][ T8442] bridge0: port 2(bridge_slave_1) entered disabled state [ 2339.800613][ T8442] device bridge_slave_0 left promiscuous mode [ 2339.806967][ T8442] bridge0: port 1(bridge_slave_0) entered disabled state [ 2339.833921][ T8442] device veth1_macvtap left promiscuous mode [ 2339.846644][ T8442] device veth0_macvtap left promiscuous mode [ 2339.862064][ T8442] device veth1_vlan left promiscuous mode [ 2339.875330][ T8442] device veth0_vlan left promiscuous mode [ 2340.104554][ T8442] team0 (unregistering): Port device team_slave_1 removed [ 2340.116387][ T8442] team0 (unregistering): Port device team_slave_0 removed [ 2340.136717][ T8442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2340.149930][ T8442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2340.216716][ T8442] bond0 (unregistering): Released all slaves [ 2340.887316][T10407] Bluetooth: hci4: command 0x0409 tx timeout [ 2340.978633][T27972] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2341.010141][T27972] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2341.038711][T27972] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2341.054822][T27972] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2341.204227][T27972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2341.232471][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2341.248220][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2341.266812][T27972] 8021q: adding VLAN 0 to HW filter on device team0 [ 2341.282714][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2341.298694][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2341.313058][T19256] bridge0: port 1(bridge_slave_0) entered blocking state [ 2341.320216][T19256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2341.357004][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2341.365188][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2341.374716][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2341.383553][T14545] bridge0: port 2(bridge_slave_1) entered blocking state [ 2341.390715][T14545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2341.399398][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2341.408554][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2341.427763][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2341.469940][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2341.488389][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2341.508309][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2341.516805][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2341.545207][T27972] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2341.584675][T27972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2341.623736][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2341.644172][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2341.987764][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2341.995291][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2342.015153][T27972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2342.063196][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2342.077532][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2342.117088][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2342.125642][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2342.144273][T27972] device veth0_vlan entered promiscuous mode [ 2342.151716][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2342.171998][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2342.193117][T27972] device veth1_vlan entered promiscuous mode [ 2342.242623][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2342.251545][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2342.278191][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2342.286876][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2342.308238][T27972] device veth0_macvtap entered promiscuous mode [ 2342.345784][T27972] device veth1_macvtap entered promiscuous mode [ 2342.364991][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2342.376874][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2342.395537][T27972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2342.415041][T27972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2342.425445][T27972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2342.442965][T27972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2342.453342][T27972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2342.470861][T27972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2342.485696][T27972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2342.509150][T27972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2342.526256][T27972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2342.549481][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2342.559334][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2342.582423][T27972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2342.593450][T27972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2342.604357][T27972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2342.615161][T27972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2342.625388][T27972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2342.643617][T27972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2342.653759][T27972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2342.664474][T27972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2342.676227][T27972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2342.697402][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2342.706277][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2342.732501][T27972] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2342.746343][T27972] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2342.756393][T27972] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2342.766131][T27972] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2342.878422][T13808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2342.886529][T13808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2342.923547][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2342.944997][ T8442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2342.954198][ T8442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2342.968273][T10407] Bluetooth: hci4: command 0x041b tx timeout [ 2342.970779][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:01:32 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, 0x0, 0x0) 11:01:32 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x8500, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:01:32 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(r2, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r3, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:01:32 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:01:32 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:01:32 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2343.116490][T27403] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 2343.147201][T27403] CPU: 0 PID: 27403 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2343.157683][T27403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2343.167789][T27403] Call Trace: [ 2343.171084][T27403] [ 2343.174030][T27403] dump_stack_lvl+0xd1/0x138 [ 2343.178648][T27403] dump_header+0x10b/0x85f [ 2343.183082][T27403] oom_kill_process.cold+0x10/0x15 [ 2343.188211][T27403] out_of_memory+0x35c/0x14a0 [ 2343.192921][T27403] ? find_held_lock+0x2d/0x110 [ 2343.197825][T27403] ? oom_killer_disable+0x280/0x280 [ 2343.203069][T27403] ? find_held_lock+0x2d/0x110 [ 2343.207877][T27403] mem_cgroup_out_of_memory+0x206/0x270 [ 2343.213469][T27403] ? mem_cgroup_margin+0x130/0x130 [ 2343.218621][T27403] ? lock_downgrade+0x6e0/0x6e0 [ 2343.223527][T27403] try_charge_memcg+0xefb/0x12f0 [ 2343.228514][T27403] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2343.234632][T27403] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2343.240394][T27403] ? lock_downgrade+0x6e0/0x6e0 [ 2343.245297][T27403] ? lock_downgrade+0x6e0/0x6e0 [ 2343.250197][T27403] ? rcu_read_unlock+0x9/0x60 [ 2343.255002][T27403] obj_cgroup_charge+0x2af/0x5e0 [ 2343.259974][T27403] ? copy_process+0x3aa/0x7520 [ 2343.264760][T27403] kmem_cache_alloc_node+0xb7/0x460 [ 2343.269983][T27403] copy_process+0x3aa/0x7520 [ 2343.274582][T27403] ? _raw_spin_unlock+0x28/0x40 [ 2343.279447][T27403] ? wp_page_reuse+0x197/0x570 [ 2343.284228][T27403] ? do_wp_page+0x844/0x3370 [ 2343.288839][T27403] ? __cleanup_sighand+0xb0/0xb0 [ 2343.293786][T27403] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2343.299178][T27403] ? rwlock_bug.part.0+0x90/0x90 [ 2343.304129][T27403] ? lock_chain_count+0x20/0x20 [ 2343.308998][T27403] kernel_clone+0xeb/0x990 [ 2343.313430][T27403] ? create_io_thread+0xf0/0xf0 [ 2343.318294][T27403] ? find_held_lock+0x2d/0x110 [ 2343.323086][T27403] __do_sys_clone+0xba/0x100 [ 2343.327686][T27403] ? kernel_clone+0x990/0x990 [ 2343.332390][T27403] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2343.338299][T27403] do_syscall_64+0x39/0xb0 [ 2343.342734][T27403] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2343.348635][T27403] RIP: 0033:0x7f3b3b689dfb [ 2343.353054][T27403] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2343.372678][T27403] RSP: 002b:00007fffa64b7850 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2343.381105][T27403] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3b3b689dfb [ 2343.389082][T27403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2343.397053][T27403] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555568f7400 [ 2343.405030][T27403] R10: 00005555568f76d0 R11: 0000000000000246 R12: 0000000000000001 11:01:33 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:01:33 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x8510, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2343.413013][T27403] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffa64b7930 [ 2343.421002][T27403] 11:01:33 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:01:33 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, 0x0, 0x0) 11:01:33 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x8520, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:01:33 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:01:33 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0xb900, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:01:33 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, 0x0, 0x0) [ 2344.038360][T27403] memory: usage 10328kB, limit 0kB, failcnt 844 [ 2344.057604][T27403] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2344.099601][T27403] Memory cgroup stats for /syz1: [ 2344.099807][T27403] anon 45056 [ 2344.099807][T27403] file 10444800 [ 2344.099807][T27403] kernel 86016 [ 2344.099807][T27403] kernel_stack 0 [ 2344.099807][T27403] pagetables 8192 [ 2344.099807][T27403] sec_pagetables 0 [ 2344.099807][T27403] percpu 0 [ 2344.099807][T27403] sock 0 [ 2344.099807][T27403] vmalloc 0 [ 2344.099807][T27403] shmem 10444800 [ 2344.099807][T27403] zswap 0 [ 2344.099807][T27403] zswapped 0 [ 2344.099807][T27403] file_mapped 376832 [ 2344.099807][T27403] file_dirty 0 [ 2344.099807][T27403] file_writeback 0 [ 2344.099807][T27403] swapcached 0 [ 2344.099807][T27403] anon_thp 0 [ 2344.099807][T27403] file_thp 0 [ 2344.099807][T27403] shmem_thp 0 [ 2344.099807][T27403] inactive_anon 45056 [ 2344.099807][T27403] active_anon 10444800 [ 2344.099807][T27403] inactive_file 0 [ 2344.099807][T27403] active_file 0 [ 2344.099807][T27403] unevictable 0 [ 2344.099807][T27403] slab_reclaimable 35856 [ 2344.099807][T27403] slab_unreclaimable 32296 [ 2344.099807][T27403] slab 68152 [ 2344.222970][T27403] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=27403,uid=0 [ 2344.245518][T27403] Memory cgroup out of memory: Killed process 27403 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2344.270077][T27085] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 2344.292401][T27085] CPU: 0 PID: 27085 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2344.302882][T27085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2344.312968][T27085] Call Trace: [ 2344.316270][T27085] [ 2344.319221][T27085] dump_stack_lvl+0xd1/0x138 [ 2344.323855][T27085] dump_header+0x10b/0x85f [ 2344.328305][T27085] oom_kill_process.cold+0x10/0x15 [ 2344.333460][T27085] out_of_memory+0x35c/0x14a0 [ 2344.338188][T27085] ? oom_killer_disable+0x280/0x280 [ 2344.343439][T27085] ? find_held_lock+0x2d/0x110 [ 2344.348250][T27085] mem_cgroup_out_of_memory+0x206/0x270 [ 2344.353850][T27085] ? mem_cgroup_margin+0x130/0x130 [ 2344.359013][T27085] ? lock_downgrade+0x6e0/0x6e0 [ 2344.363907][T27085] try_charge_memcg+0xefb/0x12f0 [ 2344.368889][T27085] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2344.374900][T27085] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2344.380648][T27085] ? lock_downgrade+0x6e0/0x6e0 [ 2344.385532][T27085] ? lock_downgrade+0x6e0/0x6e0 [ 2344.390411][T27085] ? rcu_read_unlock+0x9/0x60 [ 2344.395145][T27085] obj_cgroup_charge+0x2af/0x5e0 [ 2344.400119][T27085] ? copy_process+0x3aa/0x7520 [ 2344.404921][T27085] kmem_cache_alloc_node+0xb7/0x460 [ 2344.410157][T27085] copy_process+0x3aa/0x7520 [ 2344.414779][T27085] ? _raw_spin_unlock+0x28/0x40 [ 2344.419663][T27085] ? wp_page_reuse+0x197/0x570 [ 2344.424470][T27085] ? do_wp_page+0x844/0x3370 [ 2344.429105][T27085] ? __cleanup_sighand+0xb0/0xb0 [ 2344.434075][T27085] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2344.439496][T27085] ? rwlock_bug.part.0+0x90/0x90 [ 2344.444469][T27085] ? lock_chain_count+0x20/0x20 [ 2344.449354][T27085] kernel_clone+0xeb/0x990 [ 2344.453807][T27085] ? create_io_thread+0xf0/0xf0 [ 2344.458699][T27085] ? find_held_lock+0x2d/0x110 [ 2344.463513][T27085] __do_sys_clone+0xba/0x100 [ 2344.468143][T27085] ? kernel_clone+0x990/0x990 [ 2344.472867][T27085] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2344.478800][T27085] do_syscall_64+0x39/0xb0 [ 2344.483256][T27085] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2344.489181][T27085] RIP: 0033:0x7f10cce89dfb [ 2344.493622][T27085] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2344.513259][T27085] RSP: 002b:00007fff493eef60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2344.521707][T27085] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10cce89dfb [ 2344.529708][T27085] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2344.537705][T27085] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556fd2400 [ 2344.545700][T27085] R10: 0000555556fd26d0 R11: 0000000000000246 R12: 0000000000000001 [ 2344.553696][T27085] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff493ef040 [ 2344.561715][T27085] [ 2344.577927][ T1201] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.584255][ T1201] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.615466][T27085] memory: usage 10320kB, limit 0kB, failcnt 532 [ 2344.627987][T27085] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2344.638209][T27085] Memory cgroup stats for /syz3: [ 2344.638410][T27085] anon 45056 [ 2344.638410][T27085] file 10436608 [ 2344.638410][T27085] kernel 86016 [ 2344.638410][T27085] kernel_stack 0 [ 2344.638410][T27085] pagetables 8192 [ 2344.638410][T27085] sec_pagetables 0 [ 2344.638410][T27085] percpu 0 [ 2344.638410][T27085] sock 0 [ 2344.638410][T27085] vmalloc 0 [ 2344.638410][T27085] shmem 10436608 [ 2344.638410][T27085] zswap 0 [ 2344.638410][T27085] zswapped 0 [ 2344.638410][T27085] file_mapped 172032 [ 2344.638410][T27085] file_dirty 0 [ 2344.638410][T27085] file_writeback 0 [ 2344.638410][T27085] swapcached 0 [ 2344.638410][T27085] anon_thp 0 [ 2344.638410][T27085] file_thp 0 [ 2344.638410][T27085] shmem_thp 0 [ 2344.638410][T27085] inactive_anon 45056 [ 2344.638410][T27085] active_anon 10436608 [ 2344.638410][T27085] inactive_file 0 [ 2344.638410][T27085] active_file 0 [ 2344.638410][T27085] unevictable 0 [ 2344.638410][T27085] slab_reclaimable 35144 [ 2344.638410][T27085] slab_unreclaimable 32296 [ 2344.638410][T27085] slab 67440 [ 2344.752924][T27085] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=27085,uid=0 [ 2344.774572][T27085] Memory cgroup out of memory: Killed process 27085 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2344.798975][T27392] syz-executor.5 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 2344.820814][T27392] CPU: 0 PID: 27392 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2344.831285][T27392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2344.841370][T27392] Call Trace: [ 2344.844666][T27392] [ 2344.847617][T27392] dump_stack_lvl+0xd1/0x138 [ 2344.852246][T27392] dump_header+0x10b/0x85f [ 2344.856693][T27392] oom_kill_process.cold+0x10/0x15 [ 2344.861843][T27392] out_of_memory+0x35c/0x14a0 [ 2344.866574][T27392] ? oom_killer_disable+0x280/0x280 [ 2344.871822][T27392] ? find_held_lock+0x2d/0x110 [ 2344.876631][T27392] mem_cgroup_out_of_memory+0x206/0x270 [ 2344.882222][T27392] ? mem_cgroup_margin+0x130/0x130 [ 2344.887374][T27392] ? lock_downgrade+0x6e0/0x6e0 [ 2344.892272][T27392] try_charge_memcg+0xefb/0x12f0 [ 2344.897251][T27392] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2344.903267][T27392] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2344.909014][T27392] ? lock_downgrade+0x6e0/0x6e0 [ 2344.913915][T27392] obj_cgroup_charge+0x2af/0x5e0 [ 2344.918893][T27392] kmem_cache_alloc_lru+0x145/0x760 [ 2344.924118][T27392] ? ext4_alloc_inode+0x28/0x680 [ 2344.929090][T27392] ? ext4_free_in_core_inode+0x70/0x70 [ 2344.934585][T27392] ext4_alloc_inode+0x28/0x680 [ 2344.939382][T27392] ? ext4_free_in_core_inode+0x70/0x70 [ 2344.944871][T27392] alloc_inode+0x61/0x230 [ 2344.949241][T27392] iget_locked+0x1bb/0x700 [ 2344.953703][T27392] __ext4_iget+0x3af/0x4230 [ 2344.958263][T27392] ? ext4_get_projid+0x190/0x190 [ 2344.963322][T27392] ? ext4_fname_prepare_lookup+0x163/0x200 [ 2344.969160][T27392] ? ext4_fname_setup_filename+0x110/0x110 [ 2344.975018][T27392] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2344.980615][T27392] ext4_lookup+0x387/0x700 [ 2344.985065][T27392] ? ext4_resetent+0x2d0/0x2d0 [ 2344.989886][T27392] __lookup_slow+0x24c/0x460 [ 2344.994505][T27392] ? __lookup_hash+0x180/0x180 [ 2344.999312][T27392] ? snd_usb_parse_audio_format.cold+0x4f7/0x534 [ 2345.005688][T27392] ? snd_usb_parse_audio_format.cold+0x4f7/0x534 [ 2345.012065][T27392] ? lookup_fast+0x14e/0x520 [ 2345.016698][T27392] walk_component+0x33f/0x5a0 [ 2345.021421][T27392] path_lookupat+0x1ba/0x840 [ 2345.026055][T27392] filename_lookup+0x1d2/0x590 [ 2345.030855][T27392] ? may_linkat+0x500/0x500 [ 2345.035387][T27392] ? __might_fault+0xd9/0x180 [ 2345.040115][T27392] ? __phys_addr_symbol+0x30/0x70 [ 2345.045175][T27392] ? __check_object_size+0x2e2/0x5a0 [ 2345.050497][T27392] ? strncpy_from_user+0x28b/0x3c0 [ 2345.055654][T27392] ? getname_flags.part.0+0x1dd/0x4f0 [ 2345.061072][T27392] user_path_at_empty+0x46/0x60 [ 2345.065970][T27392] __x64_sys_umount+0xfc/0x190 [ 2345.070771][T27392] ? path_umount+0x10b0/0x10b0 [ 2345.075572][T27392] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2345.081505][T27392] do_syscall_64+0x39/0xb0 [ 2345.085958][T27392] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2345.091885][T27392] RIP: 0033:0x7f2e96c8d537 [ 2345.096326][T27392] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2345.115970][T27392] RSP: 002b:00007fff135ec1c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2345.124423][T27392] RAX: ffffffffffffffda RBX: 0000000000000020 RCX: 00007f2e96c8d537 [ 2345.132421][T27392] RDX: 00007fff135ec29d RSI: 000000000000000a RDI: 00007fff135ec290 [ 2345.140418][T27392] RBP: 00007fff135ec290 R08: 00000000ffffffff R09: 00007fff135ec060 [ 2345.148412][T27392] R10: 0000555556f54853 R11: 0000000000000246 R12: 00007f2e96ce6b24 [ 2345.156407][T27392] R13: 00007fff135ed350 R14: 0000555556f54810 R15: 00007fff135ed390 [ 2345.164423][T27392] [ 2345.175301][T10407] Bluetooth: hci4: command 0x040f tx timeout [ 2345.180988][T27392] memory: usage 10360kB, limit 0kB, failcnt 744 [ 2345.227704][T27392] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2345.234610][T27392] Memory cgroup stats for /syz5: [ 2345.234810][T27392] anon 45056 [ 2345.234810][T27392] file 10448896 [ 2345.234810][T27392] kernel 90112 [ 2345.234810][T27392] kernel_stack 0 [ 2345.234810][T27392] pagetables 8192 [ 2345.234810][T27392] sec_pagetables 0 [ 2345.234810][T27392] percpu 0 [ 2345.234810][T27392] sock 0 [ 2345.234810][T27392] vmalloc 0 [ 2345.234810][T27392] shmem 10448896 [ 2345.234810][T27392] zswap 0 [ 2345.234810][T27392] zswapped 0 [ 2345.234810][T27392] file_mapped 245760 [ 2345.234810][T27392] file_dirty 0 [ 2345.234810][T27392] file_writeback 0 [ 2345.234810][T27392] swapcached 0 [ 2345.234810][T27392] anon_thp 0 [ 2345.234810][T27392] file_thp 0 [ 2345.234810][T27392] shmem_thp 0 [ 2345.234810][T27392] inactive_anon 45056 [ 2345.234810][T27392] active_anon 10448896 [ 2345.234810][T27392] inactive_file 0 [ 2345.234810][T27392] active_file 0 [ 2345.234810][T27392] unevictable 0 [ 2345.234810][T27392] slab_reclaimable 42720 [ 2345.234810][T27392] slab_unreclaimable 33248 [ 2345.234810][T27392] slab 75968 [ 2345.347909][T27392] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=27392,uid=0 [ 2345.363841][T27392] Memory cgroup out of memory: Killed process 27392 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2345.499495][T21387] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2345.712412][T21387] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2345.827653][ T8419] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2345.836620][ T8419] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2345.845141][ T8419] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2345.855772][ T8419] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2345.865686][ T8419] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2345.969628][T21387] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2346.065538][T21387] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2346.320729][T28114] chnl_net:caif_netlink_parms(): no params data found [ 2346.444382][T28114] bridge0: port 1(bridge_slave_0) entered blocking state [ 2346.455678][T28114] bridge0: port 1(bridge_slave_0) entered disabled state [ 2346.469106][T28114] device bridge_slave_0 entered promiscuous mode [ 2346.509428][T28114] bridge0: port 2(bridge_slave_1) entered blocking state [ 2346.516500][T28114] bridge0: port 2(bridge_slave_1) entered disabled state [ 2346.525012][T28114] device bridge_slave_1 entered promiscuous mode [ 2346.557799][T28114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2346.569846][T28114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2346.608154][T28114] team0: Port device team_slave_0 added [ 2346.617297][T28114] team0: Port device team_slave_1 added [ 2346.642503][T28114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2346.650109][T28114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2346.678683][T28114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2346.695624][T28114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2346.702834][T28114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2346.732772][T28114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2346.787566][T28114] device hsr_slave_0 entered promiscuous mode [ 2346.794790][T28114] device hsr_slave_1 entered promiscuous mode [ 2346.802872][T28114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2346.811391][T28114] Cannot create hsr debugfs directory [ 2347.207082][ T8419] Bluetooth: hci4: command 0x0419 tx timeout [ 2347.351174][T21387] device hsr_slave_0 left promiscuous mode [ 2347.387171][T21387] device hsr_slave_1 left promiscuous mode [ 2347.396015][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2347.407078][T21387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2347.429263][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2347.436698][T21387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2347.469605][T21387] device bridge_slave_1 left promiscuous mode [ 2347.475886][T21387] bridge0: port 2(bridge_slave_1) entered disabled state [ 2347.498189][T21387] device bridge_slave_0 left promiscuous mode [ 2347.504463][T21387] bridge0: port 1(bridge_slave_0) entered disabled state [ 2347.543118][T21387] device veth1_macvtap left promiscuous mode [ 2347.557201][T21387] device veth0_macvtap left promiscuous mode [ 2347.563364][T21387] device veth1_vlan left promiscuous mode [ 2347.577432][T21387] device veth0_vlan left promiscuous mode [ 2347.927449][T10407] Bluetooth: hci0: command 0x0409 tx timeout [ 2348.078948][T21387] team0 (unregistering): Port device team_slave_1 removed [ 2348.127668][T21387] team0 (unregistering): Port device team_slave_0 removed [ 2348.167685][T21387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2348.205115][T21387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2348.359679][T21387] bond0 (unregistering): Released all slaves [ 2348.713051][T28114] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2348.723139][T28114] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2348.741136][T28114] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2348.766847][T28114] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2348.947945][T28114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2348.974477][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2348.982959][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2349.008542][T28114] 8021q: adding VLAN 0 to HW filter on device team0 [ 2349.037013][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2349.045742][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2349.077617][T10149] bridge0: port 1(bridge_slave_0) entered blocking state [ 2349.084733][T10149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2349.107413][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2349.116166][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2349.148171][T10149] bridge0: port 2(bridge_slave_1) entered blocking state [ 2349.155287][T10149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2349.170107][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2349.184167][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2349.216529][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2349.226145][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2349.248605][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2349.267943][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2349.276427][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2349.297892][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2349.321826][T28114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2349.347944][T28114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2349.358719][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2349.377807][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2349.858026][T28114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2349.867307][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2349.874811][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2350.007184][T10407] Bluetooth: hci0: command 0x041b tx timeout [ 2350.366228][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2350.375747][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2350.440741][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2350.456264][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2350.479876][T28114] device veth0_vlan entered promiscuous mode [ 2350.488063][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2350.497714][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2350.522662][T28114] device veth1_vlan entered promiscuous mode [ 2350.557731][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2350.565909][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2350.598477][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2350.607947][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2350.628899][T28114] device veth0_macvtap entered promiscuous mode [ 2350.649124][T28114] device veth1_macvtap entered promiscuous mode [ 2350.693696][T28114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2350.727075][T28114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.746949][T28114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2350.762389][T28114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.786951][T28114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2350.797949][T28114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.809096][T28114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2350.819841][T28114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.832064][T28114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2350.841632][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2350.855308][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2350.865315][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2350.907753][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2350.925226][T28114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2350.941948][T28114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.958994][T28114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2350.978840][T28114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.994763][T28114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2351.005895][T28114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2351.022868][T28114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2351.033631][T28114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2351.052583][T28114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2351.068949][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2351.085656][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2351.098121][T28114] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2351.106854][T28114] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2351.117621][T28114] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2351.126345][T28114] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2351.256429][ T5470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2351.270688][ T5470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2351.343173][T13808] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2351.376068][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2351.406403][T21387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2351.429821][T21387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2351.478776][T13808] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2351.508102][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2351.602757][T13808] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2351.830501][T13808] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2351.926261][T28215] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2351.957099][T28215] CPU: 0 PID: 28215 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2351.967576][T28215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2351.977656][T28215] Call Trace: [ 2351.980968][T28215] [ 2351.983930][T28215] dump_stack_lvl+0xd1/0x138 [ 2351.988570][T28215] dump_header+0x10b/0x85f [ 2351.993022][T28215] oom_kill_process.cold+0x10/0x15 [ 2351.998169][T28215] out_of_memory+0x35c/0x14a0 [ 2352.002906][T28215] ? oom_killer_disable+0x280/0x280 [ 2352.008159][T28215] ? mark_held_locks+0x9f/0xe0 [ 2352.012970][T28215] mem_cgroup_out_of_memory+0x206/0x270 [ 2352.018564][T28215] ? mem_cgroup_margin+0x130/0x130 [ 2352.023746][T28215] memory_max_write+0x2f9/0x3c0 [ 2352.028639][T28215] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2352.034754][T28215] ? lock_release+0x810/0x810 [ 2352.039468][T28215] cgroup_file_write+0x1e2/0x770 [ 2352.044441][T28215] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2352.050541][T28215] ? kill_css+0x370/0x370 [ 2352.054899][T28215] ? __virt_addr_valid+0x61/0x2e0 [ 2352.059974][T28215] ? kill_css+0x370/0x370 [ 2352.064335][T28215] kernfs_fop_write_iter+0x3f1/0x600 [ 2352.069665][T28215] vfs_write+0x9ed/0xdd0 [ 2352.073925][T28215] ? kernel_write+0x630/0x630 [ 2352.078619][T28215] ? __fget_files+0x26a/0x440 [ 2352.083323][T28215] ksys_write+0x12b/0x250 [ 2352.087664][T28215] ? __ia32_sys_read+0xb0/0xb0 [ 2352.092443][T28215] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2352.098356][T28215] do_syscall_64+0x39/0xb0 [ 2352.102791][T28215] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2352.108694][T28215] RIP: 0033:0x7ff17028c0c9 [ 2352.113118][T28215] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2352.132739][T28215] RSP: 002b:00007ff16edfe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2352.141162][T28215] RAX: ffffffffffffffda RBX: 00007ff1703abf80 RCX: 00007ff17028c0c9 [ 2352.149137][T28215] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2352.157111][T28215] RBP: 00007ff1702e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2352.165106][T28215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2352.173092][T28215] R13: 00007ffe4a6e1ddf R14: 00007ff16edfe300 R15: 0000000000022000 [ 2352.181083][T28215] [ 2352.189842][T10407] Bluetooth: hci0: command 0x040f tx timeout [ 2352.198389][T28215] memory: usage 10620kB, limit 0kB, failcnt 1012 [ 2352.216320][T28215] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2352.227351][T28215] Memory cgroup stats for /syz4: [ 2352.233247][T28215] anon 114688 [ 2352.233247][T28215] file 10448896 [ 2352.233247][T28215] kernel 303104 [ 2352.233247][T28215] kernel_stack 65536 [ 2352.233247][T28215] pagetables 81920 [ 2352.233247][T28215] sec_pagetables 0 [ 2352.233247][T28215] percpu 64 [ 2352.233247][T28215] sock 0 [ 2352.233247][T28215] vmalloc 0 [ 2352.233247][T28215] shmem 10448896 [ 2352.233247][T28215] zswap 0 [ 2352.233247][T28215] zswapped 0 [ 2352.233247][T28215] file_mapped 335872 [ 2352.233247][T28215] file_dirty 0 [ 2352.233247][T28215] file_writeback 0 [ 2352.233247][T28215] swapcached 0 [ 2352.233247][T28215] anon_thp 0 [ 2352.233247][T28215] file_thp 0 [ 2352.233247][T28215] shmem_thp 0 [ 2352.233247][T28215] inactive_anon 114688 [ 2352.233247][T28215] active_anon 10448896 [ 2352.233247][T28215] inactive_file 0 [ 2352.233247][T28215] active_file 0 [ 2352.233247][T28215] unevictable 0 [ 2352.233247][T28215] slab_reclaimable 54224 [ 2352.233247][T28215] slab_unreclaimable 73104 [ 2352.233247][T28215] slab 127328 [ 2352.331439][T13808] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2352.342731][T28215] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=28114,uid=0 [ 2352.360421][T28215] Memory cgroup out of memory: Killed process 28114 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2352.447833][T13808] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2352.509946][T13808] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2352.574149][T13808] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2353.771621][T13808] device hsr_slave_0 left promiscuous mode [ 2353.786415][T13808] device hsr_slave_1 left promiscuous mode [ 2353.793343][T13808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2353.808426][T13808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2353.823288][T13808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2353.832185][T13808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2353.849193][T13808] device bridge_slave_1 left promiscuous mode [ 2353.855453][T13808] bridge0: port 2(bridge_slave_1) entered disabled state [ 2353.875045][T13808] device bridge_slave_0 left promiscuous mode [ 2353.881661][T13808] bridge0: port 1(bridge_slave_0) entered disabled state [ 2353.902349][T13808] device hsr_slave_0 left promiscuous mode [ 2353.915369][T13808] device hsr_slave_1 left promiscuous mode [ 2353.922084][T13808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2353.936712][T13808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2353.955461][T13808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2353.963159][T13808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2353.979422][T13808] device bridge_slave_1 left promiscuous mode [ 2353.985718][T13808] bridge0: port 2(bridge_slave_1) entered disabled state [ 2354.003418][T13808] device bridge_slave_0 left promiscuous mode [ 2354.012723][T13808] bridge0: port 1(bridge_slave_0) entered disabled state [ 2354.042335][T13808] device veth1_macvtap left promiscuous mode [ 2354.052017][T13808] device veth0_macvtap left promiscuous mode [ 2354.062589][T13808] device veth1_vlan left promiscuous mode [ 2354.071178][T13808] device veth0_vlan left promiscuous mode [ 2354.083696][T13808] device veth1_macvtap left promiscuous mode [ 2354.094605][T13808] device veth0_macvtap left promiscuous mode [ 2354.105276][T13808] device veth1_vlan left promiscuous mode [ 2354.114143][T13808] device veth0_vlan left promiscuous mode [ 2354.373437][T13808] team0 (unregistering): Port device team_slave_1 removed [ 2354.388898][T13808] team0 (unregistering): Port device team_slave_0 removed [ 2354.405962][T13808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2354.426459][T13808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2354.488621][T13808] bond0 (unregistering): Released all slaves [ 2354.641362][T13808] team0 (unregistering): Port device team_slave_1 removed [ 2354.661995][T13808] team0 (unregistering): Port device team_slave_0 removed [ 2354.674148][T13808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2354.687849][T13808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2354.747360][T13808] bond0 (unregistering): Released all slaves 11:01:44 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(r2, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r3, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:01:44 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0xe208, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:01:44 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:01:44 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:01:45 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:01:45 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0), 0x12) 11:01:45 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0xf000, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:01:45 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0xff00, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2355.298537][T28283] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2355.356988][T28283] CPU: 1 PID: 28283 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2355.367461][T28283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2355.377528][T28283] Call Trace: [ 2355.380809][T28283] [ 2355.383755][T28283] dump_stack_lvl+0xd1/0x138 [ 2355.388380][T28283] dump_header+0x10b/0x85f [ 2355.392811][T28283] oom_kill_process.cold+0x10/0x15 [ 2355.397930][T28283] out_of_memory+0x35c/0x14a0 [ 2355.402637][T28283] ? oom_killer_disable+0x280/0x280 [ 2355.407865][T28283] mem_cgroup_out_of_memory+0x206/0x270 [ 2355.413434][T28283] ? mem_cgroup_margin+0x130/0x130 [ 2355.420321][T28283] memory_max_write+0x2f9/0x3c0 [ 2355.425196][T28283] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2355.431282][T28283] ? lock_release+0x810/0x810 [ 2355.435970][T28283] cgroup_file_write+0x1e2/0x770 [ 2355.440942][T28283] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2355.447021][T28283] ? kill_css+0x370/0x370 [ 2355.451364][T28283] ? __virt_addr_valid+0x61/0x2e0 [ 2355.456501][T28283] ? kill_css+0x370/0x370 [ 2355.460842][T28283] kernfs_fop_write_iter+0x3f1/0x600 [ 2355.466162][T28283] vfs_write+0x9ed/0xdd0 [ 2355.470416][T28283] ? kernel_write+0x630/0x630 [ 2355.475104][T28283] ? __fget_files+0x26a/0x440 [ 2355.479803][T28283] ksys_write+0x12b/0x250 [ 2355.484141][T28283] ? __ia32_sys_read+0xb0/0xb0 [ 2355.488914][T28283] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2355.494825][T28283] do_syscall_64+0x39/0xb0 [ 2355.499261][T28283] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2355.505166][T28283] RIP: 0033:0x7f1921e8c0c9 [ 2355.509584][T28283] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2355.529197][T28283] RSP: 002b:00007f1922c8d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2355.537620][T28283] RAX: ffffffffffffffda RBX: 00007f1921fabf80 RCX: 00007f1921e8c0c9 [ 2355.545595][T28283] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2355.553574][T28283] RBP: 00007f1921ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2355.561545][T28283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2355.569522][T28283] R13: 00007ffd3420efff R14: 00007f1922c8d300 R15: 0000000000022000 [ 2355.577513][T28283] [ 2355.631023][T28283] memory: usage 8588kB, limit 0kB, failcnt 984 [ 2355.641376][T28283] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2355.649847][T28283] Memory cgroup stats for /syz2: [ 2355.650068][T28283] anon 139264 [ 2355.650068][T28283] file 8355840 [ 2355.650068][T28283] kernel 286720 [ 2355.650068][T28283] kernel_stack 65536 [ 2355.650068][T28283] pagetables 81920 [ 2355.650068][T28283] sec_pagetables 0 [ 2355.650068][T28283] percpu 64 [ 2355.650068][T28283] sock 0 [ 2355.650068][T28283] vmalloc 0 [ 2355.650068][T28283] shmem 8351744 [ 2355.650068][T28283] zswap 0 [ 2355.650068][T28283] zswapped 0 [ 2355.650068][T28283] file_mapped 335872 [ 2355.650068][T28283] file_dirty 0 [ 2355.650068][T28283] file_writeback 0 [ 2355.650068][T28283] swapcached 0 [ 2355.650068][T28283] anon_thp 0 [ 2355.650068][T28283] file_thp 0 [ 2355.650068][T28283] shmem_thp 0 [ 2355.650068][T28283] inactive_anon 139264 [ 2355.650068][T28283] active_anon 8351744 [ 2355.650068][T28283] inactive_file 0 [ 2355.650068][T28283] active_file 4096 11:01:45 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0xffff, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2355.650068][T28283] unevictable 0 [ 2355.650068][T28283] slab_reclaimable 36880 [ 2355.650068][T28283] slab_unreclaimable 71808 [ 2355.650068][T28283] slab 108688 11:01:45 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:01:45 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(r2, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r3, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0), 0x12) [ 2355.815981][T28283] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=28280,uid=0 11:01:45 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:01:45 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:01:45 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2356.164084][T28283] Memory cgroup out of memory: Killed process 28280 (syz-executor.2) total-vm:56588kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 11:01:46 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2356.376206][T27972] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 2356.396937][T27972] CPU: 0 PID: 27972 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2356.407402][T27972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2356.417477][T27972] Call Trace: [ 2356.420770][T27972] [ 2356.423725][T27972] dump_stack_lvl+0xd1/0x138 [ 2356.428347][T27972] dump_header+0x10b/0x85f [ 2356.432775][T27972] oom_kill_process.cold+0x10/0x15 [ 2356.437901][T27972] out_of_memory+0x35c/0x14a0 [ 2356.442600][T27972] ? find_held_lock+0x2d/0x110 [ 2356.447384][T27972] ? oom_killer_disable+0x280/0x280 [ 2356.452605][T27972] ? find_held_lock+0x2d/0x110 [ 2356.457388][T27972] mem_cgroup_out_of_memory+0x206/0x270 [ 2356.462952][T27972] ? mem_cgroup_margin+0x130/0x130 [ 2356.468083][T27972] ? lock_downgrade+0x6e0/0x6e0 [ 2356.472953][T27972] try_charge_memcg+0xefb/0x12f0 [ 2356.477905][T27972] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2356.483902][T27972] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2356.489631][T27972] ? lock_downgrade+0x6e0/0x6e0 [ 2356.494498][T27972] ? lock_downgrade+0x6e0/0x6e0 [ 2356.499368][T27972] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2356.504925][T27972] __alloc_pages+0x1f3/0x5b0 [ 2356.509528][T27972] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2356.516325][T27972] alloc_pages+0x1aa/0x270 [ 2356.520754][T27972] pte_alloc_one+0x1a/0x230 [ 2356.525272][T27972] __pte_alloc+0x6d/0x260 [ 2356.529615][T27972] ? pmd_install+0x160/0x160 [ 2356.534229][T27972] copy_page_range+0x17a8/0x3b40 [ 2356.539214][T27972] ? mas_store+0x206/0x2e0 [ 2356.543642][T27972] ? handle_mm_fault+0x850/0x850 [ 2356.548607][T27972] ? up_write+0x1b0/0x520 [ 2356.552952][T27972] dup_mmap+0xc10/0x10b0 [ 2356.557226][T27972] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2356.562518][T27972] ? lock_downgrade+0x6e0/0x6e0 [ 2356.567381][T27972] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2356.573219][T27972] ? mm_init+0x8e0/0xc10 [ 2356.577472][T27972] copy_process+0x440f/0x7520 [ 2356.582161][T27972] ? _raw_spin_unlock+0x28/0x40 [ 2356.587024][T27972] ? wp_page_reuse+0x197/0x570 [ 2356.591818][T27972] ? __cleanup_sighand+0xb0/0xb0 [ 2356.596778][T27972] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2356.602172][T27972] ? rwlock_bug.part.0+0x90/0x90 [ 2356.607118][T27972] ? lock_chain_count+0x20/0x20 [ 2356.611977][T27972] kernel_clone+0xeb/0x990 [ 2356.616407][T27972] ? create_io_thread+0xf0/0xf0 [ 2356.621275][T27972] ? find_held_lock+0x2d/0x110 [ 2356.626065][T27972] __do_sys_clone+0xba/0x100 [ 2356.630665][T27972] ? kernel_clone+0x990/0x990 [ 2356.635367][T27972] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2356.641276][T27972] do_syscall_64+0x39/0xb0 [ 2356.645709][T27972] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2356.651608][T27972] RIP: 0033:0x7f1921e89dfb [ 2356.656043][T27972] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2356.675741][T27972] RSP: 002b:00007ffd3420f240 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2356.684183][T27972] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1921e89dfb [ 2356.692157][T27972] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2356.700131][T27972] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555569bc400 [ 2356.708103][T27972] R10: 00005555569bc6d0 R11: 0000000000000246 R12: 0000000000000001 [ 2356.716077][T27972] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd3420f320 [ 2356.724069][T27972] [ 2356.907130][T27972] memory: usage 8392kB, limit 0kB, failcnt 1031 [ 2356.913438][T27972] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2356.941032][T27972] Memory cgroup stats for /syz2: [ 2356.941234][T27972] anon 45056 [ 2356.941234][T27972] file 8355840 [ 2356.941234][T27972] kernel 192512 [ 2356.941234][T27972] kernel_stack 32768 [ 2356.941234][T27972] pagetables 36864 [ 2356.941234][T27972] sec_pagetables 0 [ 2356.941234][T27972] percpu 128 [ 2356.941234][T27972] sock 0 [ 2356.941234][T27972] vmalloc 0 [ 2356.941234][T27972] shmem 8351744 [ 2356.941234][T27972] zswap 0 [ 2356.941234][T27972] zswapped 0 [ 2356.941234][T27972] file_mapped 311296 [ 2356.941234][T27972] file_dirty 0 [ 2356.941234][T27972] file_writeback 0 [ 2356.941234][T27972] swapcached 0 [ 2356.941234][T27972] anon_thp 0 [ 2356.941234][T27972] file_thp 0 [ 2356.941234][T27972] shmem_thp 0 [ 2356.941234][T27972] inactive_anon 45056 [ 2356.941234][T27972] active_anon 8351744 [ 2356.941234][T27972] inactive_file 4096 [ 2356.941234][T27972] active_file 0 [ 2356.941234][T27972] unevictable 0 [ 2356.941234][T27972] slab_reclaimable 30400 [ 2356.941234][T27972] slab_unreclaimable 67560 [ 2356.941234][T27972] slab 97960 [ 2357.151252][T27972] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=27972,uid=0 [ 2357.172049][T27972] Memory cgroup out of memory: Killed process 27972 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2357.587605][ T8419] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2357.596379][ T8419] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2357.605022][ T8419] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2357.613089][ T8419] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2357.621340][ T8419] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2358.032564][T28313] chnl_net:caif_netlink_parms(): no params data found [ 2358.352625][T28313] bridge0: port 1(bridge_slave_0) entered blocking state [ 2358.389119][T28313] bridge0: port 1(bridge_slave_0) entered disabled state [ 2358.397744][ T8419] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2358.407532][ T8419] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2358.415501][ T8419] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2358.423424][ T8419] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2358.423724][T28313] device bridge_slave_0 entered promiscuous mode [ 2358.437797][ T8419] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2358.450630][ T8419] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2358.533019][T28313] bridge0: port 2(bridge_slave_1) entered blocking state [ 2358.543368][T28313] bridge0: port 2(bridge_slave_1) entered disabled state [ 2358.592218][T28313] device bridge_slave_1 entered promiscuous mode [ 2358.707416][T10407] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2358.719382][T10407] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2358.728490][T10407] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2358.736031][T10407] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2358.743468][T10407] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2358.750320][T28313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2358.791879][ T8419] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2358.812066][ T8419] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2358.818803][T28313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2358.828636][ T8419] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2358.836454][ T8419] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2358.844103][ T8419] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2358.851482][ T8419] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2358.966143][T13808] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2359.063438][T28313] team0: Port device team_slave_0 added [ 2359.135511][T13808] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2359.194989][T28313] team0: Port device team_slave_1 added [ 2359.246389][T13808] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2359.305213][T28335] chnl_net:caif_netlink_parms(): no params data found [ 2359.332973][T13808] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2359.356056][T28313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2359.366483][T28313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2359.396623][T28313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2359.480933][T28313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2359.489417][T28313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2359.516621][T28313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2359.665910][T13808] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2359.695642][T28313] device hsr_slave_0 entered promiscuous mode [ 2359.701994][T10407] Bluetooth: hci0: command 0x0409 tx timeout [ 2359.715176][T28313] device hsr_slave_1 entered promiscuous mode [ 2359.763050][T13808] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2359.877084][T13808] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2359.922481][T28335] bridge0: port 1(bridge_slave_0) entered blocking state [ 2359.949268][T28335] bridge0: port 1(bridge_slave_0) entered disabled state [ 2359.961334][T28335] device bridge_slave_0 entered promiscuous mode [ 2360.007691][T13808] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2360.037241][T28335] bridge0: port 2(bridge_slave_1) entered blocking state [ 2360.044366][T28335] bridge0: port 2(bridge_slave_1) entered disabled state [ 2360.060232][T28335] device bridge_slave_1 entered promiscuous mode [ 2360.072174][T28338] chnl_net:caif_netlink_parms(): no params data found [ 2360.136209][T28335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2360.177079][T28342] chnl_net:caif_netlink_parms(): no params data found [ 2360.190931][T28335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2360.341878][T28335] team0: Port device team_slave_0 added [ 2360.405117][T28338] bridge0: port 1(bridge_slave_0) entered blocking state [ 2360.415402][T28338] bridge0: port 1(bridge_slave_0) entered disabled state [ 2360.436509][T28338] device bridge_slave_0 entered promiscuous mode [ 2360.458143][T28335] team0: Port device team_slave_1 added [ 2360.487063][T28338] bridge0: port 2(bridge_slave_1) entered blocking state [ 2360.494257][T28338] bridge0: port 2(bridge_slave_1) entered disabled state [ 2360.501863][T10407] Bluetooth: hci1: command 0x0409 tx timeout [ 2360.528330][T28338] device bridge_slave_1 entered promiscuous mode [ 2360.737025][T28342] bridge0: port 1(bridge_slave_0) entered blocking state [ 2360.744154][T28342] bridge0: port 1(bridge_slave_0) entered disabled state [ 2360.768502][T28342] device bridge_slave_0 entered promiscuous mode [ 2360.786140][T28335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2360.806684][T28335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2360.832913][T10407] Bluetooth: hci2: command 0x0409 tx timeout [ 2360.877036][T28335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2360.887949][ T8419] Bluetooth: hci4: command 0x0409 tx timeout [ 2360.971273][T28342] bridge0: port 2(bridge_slave_1) entered blocking state [ 2360.997118][T28342] bridge0: port 2(bridge_slave_1) entered disabled state [ 2361.005421][T28342] device bridge_slave_1 entered promiscuous mode [ 2361.071244][T28335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2361.091765][T28335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2361.129761][T28335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2361.153523][T28338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2361.369099][T28338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2361.410840][T28342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2361.518943][T28342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2361.622676][T28335] device hsr_slave_0 entered promiscuous mode [ 2361.630650][T28335] device hsr_slave_1 entered promiscuous mode [ 2361.647569][T28335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2361.655176][T28335] Cannot create hsr debugfs directory [ 2361.777131][T10407] Bluetooth: hci0: command 0x041b tx timeout [ 2361.799838][T28338] team0: Port device team_slave_0 added [ 2361.865988][T28342] team0: Port device team_slave_0 added [ 2361.891279][T28338] team0: Port device team_slave_1 added [ 2361.954680][T28342] team0: Port device team_slave_1 added [ 2362.124729][T28342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2362.132677][T28342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2362.160078][T28342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2362.172447][T28338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2362.182380][T28338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2362.210276][T28338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2362.265393][T28342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2362.272588][T28342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2362.307900][T28342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2362.321265][T28338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2362.334374][T28338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2362.361305][T28338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2362.565934][T28338] device hsr_slave_0 entered promiscuous mode [ 2362.576529][T28338] device hsr_slave_1 entered promiscuous mode [ 2362.577104][T10407] Bluetooth: hci1: command 0x041b tx timeout [ 2362.591915][T28338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2362.603965][T28338] Cannot create hsr debugfs directory [ 2362.618819][T28342] device hsr_slave_0 entered promiscuous mode [ 2362.635753][T28342] device hsr_slave_1 entered promiscuous mode [ 2362.644168][T28342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2362.652720][T28342] Cannot create hsr debugfs directory [ 2362.662371][T28313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2362.707162][T28313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2362.798938][T28313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2362.854284][T28313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2362.897021][T10407] Bluetooth: hci2: command 0x041b tx timeout [ 2362.986262][T10407] Bluetooth: hci4: command 0x041b tx timeout [ 2363.566993][T13808] device hsr_slave_0 left promiscuous mode [ 2363.578631][T13808] device hsr_slave_1 left promiscuous mode [ 2363.594762][T13808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2363.603678][T13808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2363.623476][T13808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2363.636498][T13808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2363.650161][T13808] device bridge_slave_1 left promiscuous mode [ 2363.656450][T13808] bridge0: port 2(bridge_slave_1) entered disabled state [ 2363.717806][T13808] device bridge_slave_0 left promiscuous mode [ 2363.724082][T13808] bridge0: port 1(bridge_slave_0) entered disabled state [ 2363.787585][T13808] device hsr_slave_0 left promiscuous mode [ 2363.797506][T13808] device hsr_slave_1 left promiscuous mode [ 2363.827201][T13808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2363.834689][T13808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2363.857033][T10407] Bluetooth: hci0: command 0x040f tx timeout [ 2363.865818][T13808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2363.886973][T13808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2363.896444][T13808] device bridge_slave_1 left promiscuous mode [ 2363.907229][T13808] bridge0: port 2(bridge_slave_1) entered disabled state [ 2363.928190][T13808] device bridge_slave_0 left promiscuous mode [ 2363.934430][T13808] bridge0: port 1(bridge_slave_0) entered disabled state [ 2364.004280][T13808] device veth1_macvtap left promiscuous mode [ 2364.017069][T13808] device veth0_macvtap left promiscuous mode [ 2364.023313][T13808] device veth1_vlan left promiscuous mode [ 2364.037368][T13808] device veth0_vlan left promiscuous mode [ 2364.045539][T13808] device veth1_macvtap left promiscuous mode [ 2364.061036][T13808] device veth0_macvtap left promiscuous mode [ 2364.073337][T13808] device veth1_vlan left promiscuous mode [ 2364.079662][T13808] device veth0_vlan left promiscuous mode [ 2364.647272][T10407] Bluetooth: hci1: command 0x040f tx timeout [ 2364.967035][T10407] Bluetooth: hci2: command 0x040f tx timeout [ 2365.047080][T10407] Bluetooth: hci4: command 0x040f tx timeout [ 2365.077870][T13808] team0 (unregistering): Port device team_slave_1 removed [ 2365.118527][T13808] team0 (unregistering): Port device team_slave_0 removed [ 2365.167999][T13808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2365.202051][T13808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2365.414946][T13808] bond0 (unregistering): Released all slaves [ 2365.740774][T13808] team0 (unregistering): Port device team_slave_1 removed [ 2365.776308][T13808] team0 (unregistering): Port device team_slave_0 removed [ 2365.814131][T13808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2365.873725][T13808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2365.927100][T10407] Bluetooth: hci0: command 0x0419 tx timeout [ 2366.030995][T13808] bond0 (unregistering): Released all slaves [ 2366.148658][T28313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2366.225495][T28313] 8021q: adding VLAN 0 to HW filter on device team0 [ 2366.270430][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2366.279135][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2366.297536][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2366.306247][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2366.315340][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 2366.322531][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2366.347349][T28335] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2366.417186][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2366.425346][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2366.444152][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2366.454467][T10149] bridge0: port 2(bridge_slave_1) entered blocking state [ 2366.461667][T10149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2366.479257][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2366.498012][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2366.518965][T28335] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2366.568613][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2366.591757][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2366.611057][T28335] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2366.665960][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2366.679768][T28335] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2366.704341][T28313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2366.737138][T10407] Bluetooth: hci1: command 0x0419 tx timeout [ 2366.737402][T28313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2366.761716][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2366.778249][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2366.795915][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2366.804710][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2366.826366][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2367.047539][T10407] Bluetooth: hci2: command 0x0419 tx timeout [ 2367.058021][T28335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2367.084580][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2367.095521][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2367.109491][T28335] 8021q: adding VLAN 0 to HW filter on device team0 [ 2367.136493][T10407] Bluetooth: hci4: command 0x0419 tx timeout [ 2367.152500][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2367.162493][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2367.171483][T10486] bridge0: port 1(bridge_slave_0) entered blocking state [ 2367.178651][T10486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2367.187300][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2367.196081][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2367.205397][T10486] bridge0: port 2(bridge_slave_1) entered blocking state [ 2367.212638][T10486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2367.227092][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2367.235996][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2367.307947][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2367.316064][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2367.340055][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2367.358158][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2367.387731][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2367.407562][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2367.426249][T28335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2367.451971][T28335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2367.478893][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2367.497981][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2367.709292][T28342] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2367.792809][T28342] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2367.965704][T28342] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2367.992218][T28313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2368.024168][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2368.032865][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2368.048715][T28342] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2368.280026][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2368.289874][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2368.320967][T28313] device veth0_vlan entered promiscuous mode [ 2368.360967][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2368.369812][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2368.402024][T28313] device veth1_vlan entered promiscuous mode [ 2368.438202][T28335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2368.445425][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2368.464076][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2368.472241][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2368.487204][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2368.602289][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2368.617735][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2368.631890][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2368.664491][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2368.695117][T28342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2368.730012][T28313] device veth0_macvtap entered promiscuous mode [ 2368.792863][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2368.807867][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2368.816250][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2368.849011][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2368.867124][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2368.896348][T28335] device veth0_vlan entered promiscuous mode [ 2368.914664][T28313] device veth1_macvtap entered promiscuous mode [ 2368.949640][T28338] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2368.977305][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2368.994107][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2369.008115][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2369.018608][T28335] device veth1_vlan entered promiscuous mode [ 2369.051426][T28342] 8021q: adding VLAN 0 to HW filter on device team0 [ 2369.066556][T28338] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2369.077282][T28313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2369.102223][T28313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2369.130911][T28313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2369.154520][T28313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2369.187095][T28313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2369.206104][T28313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2369.247056][T28338] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2369.258388][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2369.277796][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2369.313611][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2369.334853][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2369.344379][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2369.360423][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2369.373765][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2369.393865][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2369.402979][T14545] bridge0: port 1(bridge_slave_0) entered blocking state [ 2369.410148][T14545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2369.425116][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2369.433998][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2369.452487][T14545] bridge0: port 2(bridge_slave_1) entered blocking state [ 2369.459662][T14545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2369.474577][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2369.490553][T28313] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2369.524168][T28313] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2369.557416][T28313] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2369.566961][T28313] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2369.607646][T28338] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2369.625464][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2369.633905][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2369.657892][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2369.666481][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2369.709352][T28335] device veth0_macvtap entered promiscuous mode [ 2369.773561][T28335] device veth1_macvtap entered promiscuous mode [ 2369.801931][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2369.817822][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2369.838290][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2369.847756][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2369.856179][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2369.874647][T28342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2369.896432][T28342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2369.919434][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2369.929311][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2369.939489][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2369.978662][T28335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2370.002530][T28335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2370.037063][T28335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2370.056970][T28335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2370.078718][T28335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2370.118551][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2370.134721][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2370.184862][T28335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2370.199502][T28335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2370.233352][T28335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2370.257003][T28335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2370.278351][T28335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2370.319017][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2370.328849][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2370.344524][T28335] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2370.355342][T28335] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2370.373848][T28335] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2370.388667][T28335] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2370.400803][ T5470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2370.435342][ T5470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2370.436336][T28338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2370.482087][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2370.561927][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2370.598510][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2370.609093][T28338] 8021q: adding VLAN 0 to HW filter on device team0 [ 2370.614062][ T8443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2370.656514][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2370.665987][ T8443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2370.674365][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2370.683968][T10149] bridge0: port 1(bridge_slave_0) entered blocking state [ 2370.691124][T10149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2370.705970][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2370.713544][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2370.731259][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2370.745195][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2370.764329][T28342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2370.788661][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2370.802939][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2370.812092][T10149] bridge0: port 2(bridge_slave_1) entered blocking state [ 2370.819339][T10149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2370.827889][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2370.848293][T13808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2370.856486][T13808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2370.887997][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2370.927538][T13787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2370.931381][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2370.935597][T13787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2370.956782][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2370.994525][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2371.004446][T28522] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2371.017463][T28522] CPU: 0 PID: 28522 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2371.027947][T28522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2371.028331][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2371.038010][T28522] Call Trace: [ 2371.038020][T28522] [ 2371.038031][T28522] dump_stack_lvl+0xd1/0x138 [ 2371.038068][T28522] dump_header+0x10b/0x85f [ 2371.038096][T28522] oom_kill_process.cold+0x10/0x15 [ 2371.038124][T28522] out_of_memory+0x35c/0x14a0 [ 2371.065081][T28338] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2371.065827][T28522] ? oom_killer_disable+0x280/0x280 [ 2371.076023][T28338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2371.080802][T28522] ? find_held_lock+0x2d/0x110 [ 2371.080850][T28522] mem_cgroup_out_of_memory+0x206/0x270 [ 2371.080893][T28522] ? mem_cgroup_margin+0x130/0x130 [ 2371.112236][T28522] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2371.118081][T28522] memory_max_write+0x2f9/0x3c0 [ 2371.122948][T28522] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2371.129032][T28522] ? lock_release+0x810/0x810 [ 2371.133726][T28522] cgroup_file_write+0x1e2/0x770 [ 2371.138699][T28522] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2371.144781][T28522] ? kill_css+0x370/0x370 [ 2371.149128][T28522] ? __virt_addr_valid+0x61/0x2e0 [ 2371.154181][T28522] ? kill_css+0x370/0x370 [ 2371.158528][T28522] kernfs_fop_write_iter+0x3f1/0x600 [ 2371.163841][T28522] vfs_write+0x9ed/0xdd0 [ 2371.168100][T28522] ? kernel_write+0x630/0x630 [ 2371.172793][T28522] ? __fget_files+0x26a/0x440 [ 2371.177494][T28522] ksys_write+0x12b/0x250 [ 2371.181838][T28522] ? __ia32_sys_read+0xb0/0xb0 [ 2371.186634][T28522] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2371.192551][T28522] do_syscall_64+0x39/0xb0 [ 2371.196988][T28522] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2371.202896][T28522] RIP: 0033:0x7fd31608c0c9 [ 2371.207317][T28522] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2371.226954][T28522] RSP: 002b:00007fd314bfe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2371.235374][T28522] RAX: ffffffffffffffda RBX: 00007fd3161abf80 RCX: 00007fd31608c0c9 [ 2371.243352][T28522] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2371.251331][T28522] RBP: 00007fd3160e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2371.259305][T28522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2371.267286][T28522] R13: 00007fff49ce606f R14: 00007fd314bfe300 R15: 0000000000022000 [ 2371.275286][T28522] [ 2371.297781][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2371.305378][T28522] memory: usage 10616kB, limit 0kB, failcnt 861 [ 2371.317915][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2371.326471][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2371.340202][T28522] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2371.376977][T28522] Memory cgroup stats for /syz1: [ 2371.377183][T28522] anon 114688 [ 2371.377183][T28522] file 10444800 [ 2371.377183][T28522] kernel 286720 [ 2371.377183][T28522] kernel_stack 65536 [ 2371.377183][T28522] pagetables 81920 [ 2371.377183][T28522] sec_pagetables 0 [ 2371.377183][T28522] percpu 64 [ 2371.377183][T28522] sock 0 [ 2371.377183][T28522] vmalloc 0 [ 2371.377183][T28522] shmem 10444800 [ 2371.377183][T28522] zswap 0 [ 2371.377183][T28522] zswapped 0 [ 2371.377183][T28522] file_mapped 397312 [ 2371.377183][T28522] file_dirty 0 [ 2371.377183][T28522] file_writeback 0 [ 2371.377183][T28522] swapcached 0 [ 2371.377183][T28522] anon_thp 0 [ 2371.377183][T28522] file_thp 0 [ 2371.377183][T28522] shmem_thp 0 [ 2371.377183][T28522] inactive_anon 114688 [ 2371.377183][T28522] active_anon 10444800 [ 2371.377183][T28522] inactive_file 0 [ 2371.377183][T28522] active_file 0 [ 2371.377183][T28522] unevictable 0 [ 2371.377183][T28522] slab_reclaimable 44912 [ 2371.377183][T28522] slab_unreclaimable 73104 [ 2371.377183][T28522] slab 118016 [ 2371.477341][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2371.491982][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2371.515462][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2371.633816][T28522] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=28313,uid=0 [ 2371.703433][T28522] Memory cgroup out of memory: Killed process 28313 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2371.757688][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2371.765366][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2371.809806][T28338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2371.856588][T28533] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2371.882092][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2371.885351][T28533] CPU: 0 PID: 28533 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2371.891441][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2371.900603][T28533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2371.900619][T28533] Call Trace: [ 2371.900627][T28533] [ 2371.900636][T28533] dump_stack_lvl+0xd1/0x138 [ 2371.900676][T28533] dump_header+0x10b/0x85f [ 2371.900705][T28533] oom_kill_process.cold+0x10/0x15 [ 2371.939183][T28533] out_of_memory+0x35c/0x14a0 [ 2371.943935][T28533] ? oom_killer_disable+0x280/0x280 [ 2371.949200][T28533] mem_cgroup_out_of_memory+0x206/0x270 [ 2371.954802][T28533] ? mem_cgroup_margin+0x130/0x130 [ 2371.959981][T28533] memory_max_write+0x2f9/0x3c0 [ 2371.964870][T28533] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2371.970978][T28533] ? lock_release+0x810/0x810 [ 2371.975730][T28533] cgroup_file_write+0x1e2/0x770 [ 2371.980713][T28533] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2371.986819][T28533] ? kill_css+0x370/0x370 [ 2371.991181][T28533] ? __virt_addr_valid+0x61/0x2e0 [ 2371.996242][T28533] ? kill_css+0x370/0x370 [ 2372.000588][T28533] kernfs_fop_write_iter+0x3f1/0x600 [ 2372.005900][T28533] vfs_write+0x9ed/0xdd0 [ 2372.010181][T28533] ? kernel_write+0x630/0x630 [ 2372.014881][T28533] ? __fget_files+0x26a/0x440 [ 2372.019584][T28533] ksys_write+0x12b/0x250 [ 2372.023924][T28533] ? __ia32_sys_read+0xb0/0xb0 [ 2372.028703][T28533] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2372.034620][T28533] do_syscall_64+0x39/0xb0 [ 2372.039056][T28533] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2372.044961][T28533] RIP: 0033:0x7ff360c8c0c9 [ 2372.049381][T28533] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2372.069016][T28533] RSP: 002b:00007ff36190f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2372.077441][T28533] RAX: ffffffffffffffda RBX: 00007ff360dabf80 RCX: 00007ff360c8c0c9 [ 2372.085420][T28533] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2372.093404][T28533] RBP: 00007ff360ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2372.101379][T28533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2372.109352][T28533] R13: 00007fff07eb597f R14: 00007ff36190f300 R15: 0000000000022000 [ 2372.117349][T28533] [ 2372.158541][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2372.168057][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2372.209005][T28533] memory: usage 10580kB, limit 0kB, failcnt 549 [ 2372.215312][T28533] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2372.223226][T28533] Memory cgroup stats for /syz3: [ 2372.223446][T28533] anon 114688 [ 2372.223446][T28533] file 10436608 [ 2372.223446][T28533] kernel 282624 [ 2372.223446][T28533] kernel_stack 65536 [ 2372.223446][T28533] pagetables 77824 [ 2372.223446][T28533] sec_pagetables 0 [ 2372.223446][T28533] percpu 64 [ 2372.223446][T28533] sock 0 [ 2372.223446][T28533] vmalloc 0 [ 2372.223446][T28533] shmem 10436608 [ 2372.223446][T28533] zswap 0 [ 2372.223446][T28533] zswapped 0 [ 2372.223446][T28533] file_mapped 192512 [ 2372.223446][T28533] file_dirty 0 [ 2372.223446][T28533] file_writeback 0 [ 2372.223446][T28533] swapcached 0 [ 2372.223446][T28533] anon_thp 0 [ 2372.223446][T28533] file_thp 0 [ 2372.223446][T28533] shmem_thp 0 [ 2372.223446][T28533] inactive_anon 114688 [ 2372.223446][T28533] active_anon 10436608 [ 2372.223446][T28533] inactive_file 0 [ 2372.223446][T28533] active_file 0 [ 2372.223446][T28533] unevictable 0 [ 2372.223446][T28533] slab_reclaimable 41624 [ 2372.223446][T28533] slab_unreclaimable 71808 [ 2372.223446][T28533] slab 113432 [ 2372.331289][T28533] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=28335,uid=0 [ 2372.332250][T28342] device veth0_vlan entered promiscuous mode [ 2372.362947][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2372.373428][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2372.377130][T28533] Memory cgroup out of memory: Killed process 28335 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2372.404946][T28342] device veth1_vlan entered promiscuous mode 11:02:02 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2372.507868][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2372.516039][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2372.525482][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2372.555458][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2372.598910][T28342] device veth0_macvtap entered promiscuous mode [ 2372.652373][ T8442] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2372.690090][T28342] device veth1_macvtap entered promiscuous mode [ 2372.837528][ T8442] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2372.872355][T28342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2372.913353][T28342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2372.923687][T28342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2372.962045][T28342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2372.994427][T28342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2373.033335][T28342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2373.074894][T28342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2373.085768][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2373.102070][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2373.150279][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2373.163115][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2373.206571][ T8442] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2373.231615][T28342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2373.257980][T28342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2373.272054][T28342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2373.283120][T28342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2373.307237][T28342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2373.326920][T28342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2373.358926][T28342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2373.368984][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2373.387688][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2373.396480][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2373.412649][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2373.436707][ T8442] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2373.509502][T28342] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2373.543948][T28342] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 11:02:03 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2373.562284][T28342] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2373.571449][T28342] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2373.629222][T28338] device veth0_vlan entered promiscuous mode [ 2373.637225][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2373.645625][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2373.703165][T28338] device veth1_vlan entered promiscuous mode [ 2373.766764][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2373.798663][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2373.806616][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2373.831234][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2373.890041][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2373.900292][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2373.919053][T28338] device veth0_macvtap entered promiscuous mode [ 2373.990003][T21387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2373.996298][T28338] device veth1_macvtap entered promiscuous mode [ 2374.004949][T21387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2374.061050][T28338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2374.072561][T28338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2374.094552][T28338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2374.111960][T28338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2374.124546][T28338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2374.141870][T28338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2374.153613][T28338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2374.171566][T28338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2374.184786][T28338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2374.201799][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2374.215112][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2374.224851][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2374.233164][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2374.242322][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2374.284352][T28338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2374.295957][T28338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2374.306278][T28338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2374.318034][T28338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2374.329389][T28338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2374.340252][T28338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2374.350502][T28338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2374.361289][T28338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2374.373037][T28338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2374.383872][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2374.384386][T13808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2374.406672][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2374.419169][T13808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2374.447787][T28338] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2374.456551][T28338] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2374.472170][T28338] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2374.482617][T28338] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2374.514502][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2374.667818][ T8443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2374.675973][ T8443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2374.784728][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2374.834271][ T8443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2374.847626][ T8443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2374.872591][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:02:04 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0), 0x12) 11:02:04 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:04 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:04 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:04 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:02:04 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(r2, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r3, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0), 0x12) 11:02:04 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:02:04 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0), 0x12) 11:02:04 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(r2, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r3, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0), 0x12) 11:02:05 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x14}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:02:05 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, 0x0, 0x0) 11:02:05 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:02:05 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(r2, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r3, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r0, &(0x7f00000002c0), 0x12) [ 2375.419058][ T8442] device hsr_slave_0 left promiscuous mode [ 2375.432123][ T8442] device hsr_slave_1 left promiscuous mode [ 2375.455212][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2375.467019][ T8442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2375.500818][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2375.567810][ T8442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2375.589643][ T8442] device bridge_slave_1 left promiscuous mode [ 2375.595924][ T8442] bridge0: port 2(bridge_slave_1) entered disabled state [ 2375.647018][ T8442] device bridge_slave_0 left promiscuous mode [ 2375.653312][ T8442] bridge0: port 1(bridge_slave_0) entered disabled state [ 2375.739187][ T8442] device veth1_macvtap left promiscuous mode [ 2375.745286][ T8442] device veth0_macvtap left promiscuous mode [ 2375.783405][ T8442] device veth1_vlan left promiscuous mode [ 2375.803818][ T8442] device veth0_vlan left promiscuous mode [ 2376.383017][ T8442] team0 (unregistering): Port device team_slave_1 removed [ 2376.432229][ T8442] team0 (unregistering): Port device team_slave_0 removed [ 2376.454129][ T8442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2376.481868][ T8442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2376.624476][ T8442] bond0 (unregistering): Released all slaves [ 2377.150622][ T8419] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2377.159692][ T8419] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2377.177869][ T8419] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2377.190171][ T8419] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2377.199239][ T8419] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2377.206570][ T8419] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2377.676030][T28644] chnl_net:caif_netlink_parms(): no params data found [ 2377.918758][T28644] bridge0: port 1(bridge_slave_0) entered blocking state [ 2377.925917][T28644] bridge0: port 1(bridge_slave_0) entered disabled state [ 2377.974916][T28644] device bridge_slave_0 entered promiscuous mode [ 2377.989678][ T8419] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2378.003968][ T8419] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2378.014535][ T8419] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2378.022199][ T8419] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2378.024567][T28644] bridge0: port 2(bridge_slave_1) entered blocking state [ 2378.036994][ T8419] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2378.087732][T28644] bridge0: port 2(bridge_slave_1) entered disabled state [ 2378.115255][T10407] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2378.124678][T10407] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2378.133236][T10407] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2378.142539][T10407] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2378.150474][T10407] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2378.158278][T10407] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2378.170297][T28644] device bridge_slave_1 entered promiscuous mode [ 2378.288845][T28644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2378.352542][T28644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2378.503600][T28644] team0: Port device team_slave_0 added [ 2378.568205][T28644] team0: Port device team_slave_1 added [ 2378.690608][T28644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2378.704300][T28644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2378.749903][T28644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2378.770251][T28644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2378.797018][T28644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2378.849087][T28644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2378.919683][T28665] chnl_net:caif_netlink_parms(): no params data found [ 2379.021183][T28644] device hsr_slave_0 entered promiscuous mode [ 2379.037571][T28644] device hsr_slave_1 entered promiscuous mode [ 2379.050093][T28663] chnl_net:caif_netlink_parms(): no params data found [ 2379.289417][T10407] Bluetooth: hci0: command 0x0409 tx timeout [ 2379.292232][T28665] bridge0: port 1(bridge_slave_0) entered blocking state [ 2379.305422][T28665] bridge0: port 1(bridge_slave_0) entered disabled state [ 2379.314176][T28665] device bridge_slave_0 entered promiscuous mode [ 2379.363916][T28665] bridge0: port 2(bridge_slave_1) entered blocking state [ 2379.377106][T28665] bridge0: port 2(bridge_slave_1) entered disabled state [ 2379.385498][T28665] device bridge_slave_1 entered promiscuous mode [ 2379.410680][T28663] bridge0: port 1(bridge_slave_0) entered blocking state [ 2379.418335][T28663] bridge0: port 1(bridge_slave_0) entered disabled state [ 2379.426782][T28663] device bridge_slave_0 entered promiscuous mode [ 2379.488848][ T8442] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2379.504559][T28663] bridge0: port 2(bridge_slave_1) entered blocking state [ 2379.516043][T28663] bridge0: port 2(bridge_slave_1) entered disabled state [ 2379.524395][T28663] device bridge_slave_1 entered promiscuous mode [ 2379.592843][ T8442] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2379.625151][T28665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2379.741746][T28665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2379.820058][ T8442] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2379.860382][T28663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2379.982492][T28665] team0: Port device team_slave_0 added [ 2380.003186][T28663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2380.049446][ T8442] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2380.087131][ T8419] Bluetooth: hci1: command 0x0409 tx timeout [ 2380.228387][T28665] team0: Port device team_slave_1 added [ 2380.247419][ T8419] Bluetooth: hci5: command 0x0409 tx timeout [ 2380.430636][T28663] team0: Port device team_slave_0 added [ 2380.442006][T28665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2380.453307][T28665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2380.482463][T28665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2380.502583][T28663] team0: Port device team_slave_1 added [ 2380.518810][T28665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2380.525808][T28665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2380.552697][T28665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2380.591743][T28663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2380.600456][T28663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2380.637196][T28663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2380.741488][T28663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2380.753534][T28663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2380.813245][T28663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2380.881305][T28665] device hsr_slave_0 entered promiscuous mode [ 2380.918736][T28665] device hsr_slave_1 entered promiscuous mode [ 2380.925543][T28665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2380.947029][T28665] Cannot create hsr debugfs directory [ 2381.082576][T28663] device hsr_slave_0 entered promiscuous mode [ 2381.128454][T28663] device hsr_slave_1 entered promiscuous mode [ 2381.147220][T28663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2381.154831][T28663] Cannot create hsr debugfs directory [ 2381.367078][ T8419] Bluetooth: hci0: command 0x041b tx timeout [ 2381.510584][T28644] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2381.541257][T28644] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2381.574909][T28644] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2381.613897][T28644] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2381.811451][T28644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2381.864927][T28644] 8021q: adding VLAN 0 to HW filter on device team0 [ 2381.881307][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2381.890332][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2382.002296][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2382.024953][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2382.054341][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 2382.061533][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2382.077400][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2382.097567][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2382.117302][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 2382.124439][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2382.144967][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2382.172057][ T8419] Bluetooth: hci1: command 0x041b tx timeout [ 2382.208875][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2382.217886][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2382.226739][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2382.237139][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2382.254585][T28644] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2382.267599][T28644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2382.280466][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2382.289121][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2382.299239][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2382.308790][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2382.318276][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2382.337006][ T8419] Bluetooth: hci5: command 0x041b tx timeout [ 2382.370034][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2382.604849][T28665] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2382.668533][ T8442] device hsr_slave_0 left promiscuous mode [ 2382.687142][ T8442] device hsr_slave_1 left promiscuous mode [ 2382.707322][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2382.714793][ T8442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2382.749429][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2382.757018][ T8442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2382.779431][ T8442] device bridge_slave_1 left promiscuous mode [ 2382.785683][ T8442] bridge0: port 2(bridge_slave_1) entered disabled state [ 2382.818772][ T8442] device bridge_slave_0 left promiscuous mode [ 2382.837376][ T8442] bridge0: port 1(bridge_slave_0) entered disabled state [ 2382.897274][ T8442] device veth1_macvtap left promiscuous mode [ 2382.903396][ T8442] device veth0_macvtap left promiscuous mode [ 2382.917114][ T8442] device veth1_vlan left promiscuous mode [ 2382.922984][ T8442] device veth0_vlan left promiscuous mode [ 2383.398275][ T8442] team0 (unregistering): Port device team_slave_1 removed [ 2383.414424][ T8442] team0 (unregistering): Port device team_slave_0 removed [ 2383.431043][ T8442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2383.447715][ T8419] Bluetooth: hci0: command 0x040f tx timeout [ 2383.457055][ T8442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2383.561710][ T8442] bond0 (unregistering): Released all slaves [ 2383.643838][T28665] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2383.676298][T28665] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2383.797367][T28665] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2383.928792][T28644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2383.940459][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2383.961093][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2384.030749][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2384.040717][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2384.083344][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2384.099526][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2384.109513][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2384.119274][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2384.149538][T28644] device veth0_vlan entered promiscuous mode [ 2384.212228][T28665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2384.231280][T28644] device veth1_vlan entered promiscuous mode [ 2384.247306][ T8419] Bluetooth: hci1: command 0x040f tx timeout [ 2384.272733][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2384.281961][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2384.290450][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2384.321146][T28665] 8021q: adding VLAN 0 to HW filter on device team0 [ 2384.375630][T28663] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2384.386166][T28663] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2384.407489][ T8419] Bluetooth: hci5: command 0x040f tx timeout [ 2384.426833][T28663] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2384.456191][T28663] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2384.482774][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2384.492779][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2384.510418][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2384.524859][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 2384.532093][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2384.587841][T28644] device veth0_macvtap entered promiscuous mode [ 2384.601000][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2384.622123][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2384.652642][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2384.677816][T14545] bridge0: port 2(bridge_slave_1) entered blocking state [ 2384.685046][T14545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2384.717320][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2384.726273][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2384.754156][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2384.772255][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2384.793452][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2384.852052][T28644] device veth1_macvtap entered promiscuous mode [ 2384.873106][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2384.889082][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2384.915454][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2384.931581][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2384.943237][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2384.960950][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2384.986023][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2385.009654][T28665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2385.048428][T28644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2385.078194][T28644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.096934][T28644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2385.116766][T28644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.131398][T28644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2385.148502][T28644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.165761][T28644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2385.190031][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2385.213091][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2385.251444][T28644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2385.262519][T28644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.284335][T28644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2385.333322][T28644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.376592][T28644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2385.397000][T28644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.418492][T28644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2385.451247][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2385.467894][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2385.490170][T28663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2385.502634][T28644] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2385.512810][T28644] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2385.522105][T28644] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2385.531453][ T8419] Bluetooth: hci0: command 0x0419 tx timeout [ 2385.537923][T28644] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2385.564192][T28663] 8021q: adding VLAN 0 to HW filter on device team0 [ 2385.590808][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2385.608367][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2385.650211][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2385.665310][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2385.688063][T15119] bridge0: port 1(bridge_slave_0) entered blocking state [ 2385.695228][T15119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2385.730302][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2385.765791][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2385.781255][T15119] bridge0: port 2(bridge_slave_1) entered blocking state [ 2385.788444][T15119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2385.863364][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2385.879597][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2385.897935][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2385.918019][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2385.937913][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2385.987529][T28663] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2386.016102][T28663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2386.054942][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2386.067686][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2386.076216][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2386.102006][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2386.122596][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2386.168237][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2386.176085][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2386.207617][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2386.220026][T28665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2386.220333][ T8443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2386.297378][ T8443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2386.322976][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2386.330725][ T8419] Bluetooth: hci1: command 0x0419 tx timeout [ 2386.349750][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2386.374239][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2386.385209][ T6761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2386.413840][ T6761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2386.423147][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2386.432764][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2386.445483][T28665] device veth0_vlan entered promiscuous mode [ 2386.454037][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2386.462968][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2386.477547][T28665] device veth1_vlan entered promiscuous mode [ 2386.485176][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2386.492931][ T8419] Bluetooth: hci5: command 0x0419 tx timeout [ 2386.517823][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 11:02:16 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2386.570854][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2386.580655][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2386.595032][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2386.621377][T28665] device veth0_macvtap entered promiscuous mode [ 2386.643568][T28665] device veth1_macvtap entered promiscuous mode [ 2386.708199][T28665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2386.746969][T28665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2386.756838][T28665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2386.797057][T28665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2386.826973][T28665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2386.840941][T28665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2386.850883][T28665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2386.878423][T28665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2386.896776][T28665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2386.916541][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2386.936470][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2386.945033][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2386.961927][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2386.996529][T28665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2387.012305][T28665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2387.024390][T28665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2387.034948][T28665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2387.044832][T28665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2387.056372][T28665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2387.066627][T28665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2387.078421][T28665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2387.095385][T28665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2387.115624][T28663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2387.137198][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2387.146076][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2387.167921][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2387.175479][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2387.190893][T28665] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2387.204044][T28665] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2387.213741][T28665] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2387.222863][T28665] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2387.260813][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2387.271848][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2387.323207][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2387.333151][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2387.358658][T28663] device veth0_vlan entered promiscuous mode [ 2387.383052][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2387.390888][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2387.422608][T28663] device veth1_vlan entered promiscuous mode [ 2387.452518][ T6761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2387.465508][ T6761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2387.470299][T28663] device veth0_macvtap entered promiscuous mode [ 2387.487382][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2387.496277][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2387.504826][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2387.512975][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2387.521707][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2387.531539][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2387.546042][T28663] device veth1_macvtap entered promiscuous mode [ 2387.567046][ T8442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2387.581195][ T8442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2387.585972][T28663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2387.600466][T28663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2387.611290][T28663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2387.622135][T28663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2387.632323][T28663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2387.646265][T28663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2387.656351][T28663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2387.667898][T28663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2387.678519][T28663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2387.689331][T28663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2387.701380][T28663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2387.712821][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2387.721651][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2387.729587][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2387.738443][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2387.753168][T28663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2387.764099][T28663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2387.774266][T28663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2387.785039][T28663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2387.797370][T28663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2387.807897][T28663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2387.817886][T28663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2387.828701][T28663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2387.838682][T28663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2387.850170][T28663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2387.865942][T28663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2387.894253][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2387.904680][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2387.923960][T28663] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2387.933691][T28798] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2387.933728][T28798] CPU: 0 PID: 28798 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2387.933755][T28798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2387.933771][T28798] Call Trace: [ 2387.933779][T28798] [ 2387.933790][T28798] dump_stack_lvl+0xd1/0x138 [ 2387.933831][T28798] dump_header+0x10b/0x85f [ 2387.933862][T28798] oom_kill_process.cold+0x10/0x15 [ 2387.933893][T28798] out_of_memory+0x35c/0x14a0 [ 2387.933944][T28798] ? oom_killer_disable+0x280/0x280 [ 2387.933996][T28798] mem_cgroup_out_of_memory+0x206/0x270 [ 2387.934036][T28798] ? mem_cgroup_margin+0x130/0x130 [ 2387.934093][T28798] memory_max_write+0x2f9/0x3c0 [ 2387.934133][T28798] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2387.934168][T28798] ? lock_release+0x810/0x810 [ 2387.934199][T28798] cgroup_file_write+0x1e2/0x770 [ 2387.934233][T28798] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2387.934263][T28798] ? kill_css+0x370/0x370 [ 2387.934292][T28798] ? __virt_addr_valid+0x61/0x2e0 [ 2387.934342][T28798] ? kill_css+0x370/0x370 [ 2387.934373][T28798] kernfs_fop_write_iter+0x3f1/0x600 [ 2387.934419][T28798] vfs_write+0x9ed/0xdd0 [ 2387.934451][T28798] ? kernel_write+0x630/0x630 [ 2387.934484][T28798] ? __fget_files+0x26a/0x440 [ 2387.934532][T28798] ksys_write+0x12b/0x250 [ 2387.934560][T28798] ? __ia32_sys_read+0xb0/0xb0 [ 2387.934592][T28798] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2387.934632][T28798] do_syscall_64+0x39/0xb0 [ 2387.934669][T28798] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2387.934697][T28798] RIP: 0033:0x7f772fa8c0c9 [ 2387.934720][T28798] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2387.947440][T28663] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2387.955264][T28798] RSP: 002b:00007f77307f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2387.955294][T28798] RAX: ffffffffffffffda RBX: 00007f772fbabf80 RCX: 00007f772fa8c0c9 [ 2387.955312][T28798] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2387.965598][T28663] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2387.968653][T28798] RBP: 00007f772fae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2387.968672][T28798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2387.968689][T28798] R13: 00007ffd822a0d0f R14: 00007f77307f9300 R15: 0000000000022000 [ 2387.968728][T28798] [ 2388.001386][T28798] memory: usage 8584kB, limit 0kB, failcnt 1048 [ 2388.006723][T28663] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2388.012011][T28798] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2388.211842][T28798] Memory cgroup stats for /syz2: [ 2388.212024][T28798] anon 114688 [ 2388.212024][T28798] file 8355840 [ 2388.212024][T28798] kernel 278528 [ 2388.212024][T28798] kernel_stack 65536 [ 2388.212024][T28798] pagetables 77824 [ 2388.212024][T28798] sec_pagetables 0 [ 2388.212024][T28798] percpu 64 [ 2388.212024][T28798] sock 0 [ 2388.212024][T28798] vmalloc 0 [ 2388.212024][T28798] shmem 8351744 [ 2388.212024][T28798] zswap 0 [ 2388.212024][T28798] zswapped 0 [ 2388.212024][T28798] file_mapped 335872 [ 2388.212024][T28798] file_dirty 4096 [ 2388.212024][T28798] file_writeback 0 [ 2388.212024][T28798] swapcached 0 [ 2388.212024][T28798] anon_thp 0 [ 2388.212024][T28798] file_thp 0 [ 2388.212024][T28798] shmem_thp 0 [ 2388.212024][T28798] inactive_anon 114688 [ 2388.212024][T28798] active_anon 8351744 [ 2388.212024][T28798] inactive_file 0 [ 2388.212024][T28798] active_file 4096 [ 2388.212024][T28798] unevictable 0 [ 2388.212024][T28798] slab_reclaimable 34304 [ 2388.212024][T28798] slab_unreclaimable 72456 [ 2388.212024][T28798] slab 106760 [ 2388.315936][T28798] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=28797,uid=0 [ 2388.338864][T28798] Memory cgroup out of memory: Killed process 28797 (syz-executor.2) total-vm:56588kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2388.442100][ T8442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2388.454609][ T8442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2388.483076][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2388.508320][ T8442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2388.516452][ T8442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2388.529042][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2388.614521][T28803] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2388.625230][T28803] CPU: 0 PID: 28803 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2388.635690][T28803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2388.645783][T28803] Call Trace: [ 2388.649087][T28803] [ 2388.652043][T28803] dump_stack_lvl+0xd1/0x138 [ 2388.656680][T28803] dump_header+0x10b/0x85f [ 2388.661133][T28803] oom_kill_process.cold+0x10/0x15 [ 2388.666277][T28803] out_of_memory+0x35c/0x14a0 [ 2388.671018][T28803] ? oom_killer_disable+0x280/0x280 [ 2388.676279][T28803] mem_cgroup_out_of_memory+0x206/0x270 [ 2388.681875][T28803] ? mem_cgroup_margin+0x130/0x130 [ 2388.687049][T28803] memory_max_write+0x2f9/0x3c0 [ 2388.691934][T28803] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2388.698048][T28803] ? lock_release+0x810/0x810 [ 2388.702763][T28803] cgroup_file_write+0x1e2/0x770 [ 2388.707745][T28803] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2388.713855][T28803] ? kill_css+0x370/0x370 [ 2388.718220][T28803] ? __virt_addr_valid+0x61/0x2e0 [ 2388.723295][T28803] ? kill_css+0x370/0x370 [ 2388.727663][T28803] kernfs_fop_write_iter+0x3f1/0x600 [ 2388.732999][T28803] vfs_write+0x9ed/0xdd0 [ 2388.737285][T28803] ? kernel_write+0x630/0x630 [ 2388.742001][T28803] ? __fget_files+0x26a/0x440 [ 2388.746734][T28803] ksys_write+0x12b/0x250 [ 2388.751100][T28803] ? __ia32_sys_read+0xb0/0xb0 [ 2388.755898][T28803] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2388.761848][T28803] do_syscall_64+0x39/0xb0 [ 2388.766320][T28803] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2388.772253][T28803] RIP: 0033:0x7f0f15c8c0c9 [ 2388.776696][T28803] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2388.796345][T28803] RSP: 002b:00007f0f16a56168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2388.804804][T28803] RAX: ffffffffffffffda RBX: 00007f0f15dabf80 RCX: 00007f0f15c8c0c9 [ 2388.812810][T28803] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2388.820811][T28803] RBP: 00007f0f15ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2388.828812][T28803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2388.836811][T28803] R13: 00007ffcacfece6f R14: 00007f0f16a56300 R15: 0000000000022000 [ 2388.844830][T28803] [ 2388.856963][T28803] memory: usage 10608kB, limit 0kB, failcnt 549 [ 2388.863381][T28803] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2388.872751][T28803] Memory cgroup stats for /syz3: [ 2388.872960][T28803] anon 114688 [ 2388.872960][T28803] file 10436608 [ 2388.872960][T28803] kernel 290816 [ 2388.872960][T28803] kernel_stack 65536 [ 2388.872960][T28803] pagetables 81920 [ 2388.872960][T28803] sec_pagetables 0 [ 2388.872960][T28803] percpu 64 [ 2388.872960][T28803] sock 0 [ 2388.872960][T28803] vmalloc 0 [ 2388.872960][T28803] shmem 10436608 [ 2388.872960][T28803] zswap 0 [ 2388.872960][T28803] zswapped 0 [ 2388.872960][T28803] file_mapped 192512 [ 2388.872960][T28803] file_dirty 0 [ 2388.872960][T28803] file_writeback 0 [ 2388.872960][T28803] swapcached 0 [ 2388.872960][T28803] anon_thp 0 [ 2388.872960][T28803] file_thp 0 [ 2388.872960][T28803] shmem_thp 0 [ 2388.872960][T28803] inactive_anon 114688 [ 2388.872960][T28803] active_anon 10436608 [ 2388.872960][T28803] inactive_file 0 [ 2388.872960][T28803] active_file 0 [ 2388.872960][T28803] unevictable 0 [ 2388.872960][T28803] slab_reclaimable 41624 [ 2388.872960][T28803] slab_unreclaimable 75696 [ 2388.872960][T28803] slab 117320 [ 2388.981710][T28803] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=28802,uid=0 11:02:18 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:18 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, 0x0, 0x0) 11:02:18 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:02:18 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(r2, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r3, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r0, &(0x7f00000002c0), 0x12) 11:02:18 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:18 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2389.002314][T28803] Memory cgroup out of memory: Killed process 28802 (syz-executor.3) total-vm:54540kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 11:02:18 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:02:18 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, 0x0, 0x0) 11:02:18 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2389.081265][T28665] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 2389.127188][T28665] CPU: 1 PID: 28665 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2389.137752][T28665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2389.147831][T28665] Call Trace: [ 2389.151128][T28665] [ 2389.154081][T28665] dump_stack_lvl+0xd1/0x138 [ 2389.158713][T28665] dump_header+0x10b/0x85f [ 2389.163158][T28665] oom_kill_process.cold+0x10/0x15 [ 2389.168295][T28665] out_of_memory+0x35c/0x14a0 [ 2389.173014][T28665] ? find_held_lock+0x2d/0x110 [ 2389.177813][T28665] ? oom_killer_disable+0x280/0x280 [ 2389.183053][T28665] ? find_held_lock+0x2d/0x110 [ 2389.187857][T28665] mem_cgroup_out_of_memory+0x206/0x270 [ 2389.193443][T28665] ? mem_cgroup_margin+0x130/0x130 [ 2389.198643][T28665] ? lock_downgrade+0x6e0/0x6e0 [ 2389.203528][T28665] try_charge_memcg+0xefb/0x12f0 [ 2389.208484][T28665] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2389.214480][T28665] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2389.220207][T28665] ? lock_downgrade+0x6e0/0x6e0 [ 2389.225075][T28665] ? lock_downgrade+0x6e0/0x6e0 [ 2389.229935][T28665] ? rcu_read_unlock+0x9/0x60 [ 2389.234635][T28665] obj_cgroup_charge+0x2af/0x5e0 [ 2389.239590][T28665] ? copy_process+0x3aa/0x7520 [ 2389.244362][T28665] kmem_cache_alloc_node+0xb7/0x460 [ 2389.249570][T28665] copy_process+0x3aa/0x7520 [ 2389.254169][T28665] ? _raw_spin_unlock+0x28/0x40 [ 2389.259031][T28665] ? wp_page_reuse+0x197/0x570 [ 2389.263821][T28665] ? do_wp_page+0x844/0x3370 [ 2389.268428][T28665] ? __cleanup_sighand+0xb0/0xb0 [ 2389.273370][T28665] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2389.278760][T28665] ? rwlock_bug.part.0+0x90/0x90 [ 2389.283702][T28665] ? lock_chain_count+0x20/0x20 [ 2389.288559][T28665] kernel_clone+0xeb/0x990 [ 2389.292986][T28665] ? create_io_thread+0xf0/0xf0 [ 2389.297848][T28665] ? find_held_lock+0x2d/0x110 [ 2389.302650][T28665] __do_sys_clone+0xba/0x100 [ 2389.307334][T28665] ? kernel_clone+0x990/0x990 [ 2389.312045][T28665] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2389.317972][T28665] do_syscall_64+0x39/0xb0 [ 2389.322414][T28665] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2389.328312][T28665] RIP: 0033:0x7f772fa89dfb [ 2389.332729][T28665] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2389.352354][T28665] RSP: 002b:00007ffd822a0f50 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2389.360774][T28665] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f772fa89dfb [ 2389.368753][T28665] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2389.376723][T28665] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555728d400 [ 2389.384694][T28665] R10: 000055555728d6d0 R11: 0000000000000246 R12: 0000000000000001 [ 2389.392664][T28665] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd822a1030 [ 2389.400652][T28665] 11:02:19 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1b}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:02:19 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(r2, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r3, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r0, &(0x7f00000002c0), 0x12) 11:02:19 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(r2, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r3, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0), 0x12) [ 2389.660475][T28665] memory: usage 8300kB, limit 0kB, failcnt 1067 [ 2389.666819][T28665] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2389.683508][T28665] Memory cgroup stats for /syz2: [ 2389.683737][T28665] anon 45056 [ 2389.683737][T28665] file 8355840 [ 2389.683737][T28665] kernel 98304 [ 2389.683737][T28665] kernel_stack 0 [ 2389.683737][T28665] pagetables 8192 [ 2389.683737][T28665] sec_pagetables 0 [ 2389.683737][T28665] percpu 64 [ 2389.683737][T28665] sock 0 [ 2389.683737][T28665] vmalloc 0 [ 2389.683737][T28665] shmem 8351744 [ 2389.683737][T28665] zswap 0 [ 2389.683737][T28665] zswapped 0 [ 2389.683737][T28665] file_mapped 311296 [ 2389.683737][T28665] file_dirty 4096 [ 2389.683737][T28665] file_writeback 0 [ 2389.683737][T28665] swapcached 0 [ 2389.683737][T28665] anon_thp 0 [ 2389.683737][T28665] file_thp 0 [ 2389.683737][T28665] shmem_thp 0 [ 2389.683737][T28665] inactive_anon 45056 [ 2389.683737][T28665] active_anon 8351744 [ 2389.683737][T28665] inactive_file 0 [ 2389.683737][T28665] active_file 4096 [ 2389.683737][T28665] unevictable 0 [ 2389.683737][T28665] slab_reclaimable 30400 [ 2389.683737][T28665] slab_unreclaimable 44080 [ 2389.683737][T28665] slab 74480 [ 2389.784989][T28665] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=28665,uid=0 [ 2389.802218][T28665] Memory cgroup out of memory: Killed process 28665 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2389.826038][T28663] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2389.838480][T28663] CPU: 1 PID: 28663 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2389.848936][T28663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2389.859012][T28663] Call Trace: [ 2389.862311][T28663] [ 2389.865265][T28663] dump_stack_lvl+0xd1/0x138 [ 2389.869898][T28663] dump_header+0x10b/0x85f [ 2389.874353][T28663] oom_kill_process.cold+0x10/0x15 [ 2389.879500][T28663] out_of_memory+0x35c/0x14a0 [ 2389.884228][T28663] ? oom_killer_disable+0x280/0x280 [ 2389.889483][T28663] ? find_held_lock+0x2d/0x110 [ 2389.894292][T28663] mem_cgroup_out_of_memory+0x206/0x270 [ 2389.899881][T28663] ? mem_cgroup_margin+0x130/0x130 [ 2389.905028][T28663] ? lock_downgrade+0x6e0/0x6e0 [ 2389.909924][T28663] try_charge_memcg+0xefb/0x12f0 [ 2389.914916][T28663] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2389.920933][T28663] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2389.926682][T28663] ? lock_downgrade+0x6e0/0x6e0 [ 2389.931600][T28663] obj_cgroup_charge+0x2af/0x5e0 [ 2389.936614][T28663] kmem_cache_alloc_lru+0x145/0x760 [ 2389.941837][T28663] ? __d_alloc+0x32/0x980 [ 2389.946204][T28663] __d_alloc+0x32/0x980 [ 2389.950437][T28663] ? __lock_acquire+0x166e/0x56d0 [ 2389.955495][T28663] d_alloc+0x4e/0x240 [ 2389.959515][T28663] d_alloc_parallel+0xe8/0x1410 [ 2389.964413][T28663] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2389.970424][T28663] ? __d_lookup_rcu+0x4c0/0x4c0 [ 2389.975314][T28663] ? lockdep_init_map_type+0x21e/0x800 [ 2389.980803][T28663] ? lockdep_init_map_type+0x21e/0x800 [ 2389.986312][T28663] __lookup_slow+0x193/0x460 [ 2389.990938][T28663] ? __lookup_hash+0x180/0x180 [ 2389.995751][T28663] ? snd_usb_parse_audio_format.cold+0x4f7/0x534 [ 2390.002134][T28663] ? snd_usb_parse_audio_format.cold+0x4f7/0x534 [ 2390.008510][T28663] ? lookup_fast+0x14e/0x520 [ 2390.013142][T28663] walk_component+0x33f/0x5a0 [ 2390.017943][T28663] path_lookupat+0x1ba/0x840 [ 2390.022584][T28663] filename_lookup+0x1d2/0x590 [ 2390.027389][T28663] ? may_linkat+0x500/0x500 [ 2390.031926][T28663] ? __might_fault+0xd9/0x180 [ 2390.036649][T28663] ? __phys_addr_symbol+0x30/0x70 [ 2390.041710][T28663] ? __check_object_size+0x2e2/0x5a0 [ 2390.047034][T28663] ? strncpy_from_user+0x28b/0x3c0 [ 2390.052190][T28663] ? getname_flags.part.0+0x1dd/0x4f0 [ 2390.057612][T28663] user_path_at_empty+0x46/0x60 [ 2390.062505][T28663] __x64_sys_umount+0xfc/0x190 [ 2390.067325][T28663] ? path_umount+0x10b0/0x10b0 [ 2390.072129][T28663] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2390.078065][T28663] do_syscall_64+0x39/0xb0 [ 2390.082519][T28663] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2390.088466][T28663] RIP: 0033:0x7f0f15c8d537 [ 2390.093344][T28663] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2390.112984][T28663] RSP: 002b:00007ffcacfebfc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2390.121435][T28663] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0f15c8d537 [ 2390.129439][T28663] RDX: 00007ffcacfec09a RSI: 000000000000000a RDI: 00007ffcacfec090 [ 2390.137451][T28663] RBP: 00007ffcacfec090 R08: 00000000ffffffff R09: 00007ffcacfebe60 [ 2390.145447][T28663] R10: 0000555556d59873 R11: 0000000000000246 R12: 00007f0f15ce6b24 [ 2390.153444][T28663] R13: 00007ffcacfed150 R14: 0000555556d59810 R15: 00007ffcacfed190 [ 2390.161463][T28663] [ 2390.197189][T28663] memory: usage 10336kB, limit 0kB, failcnt 572 [ 2390.203501][T28663] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2390.219362][T28663] Memory cgroup stats for /syz3: [ 2390.219562][T28663] anon 40960 [ 2390.219562][T28663] file 10436608 [ 2390.219562][T28663] kernel 106496 [ 2390.219562][T28663] kernel_stack 0 [ 2390.219562][T28663] pagetables 8192 [ 2390.219562][T28663] sec_pagetables 0 [ 2390.219562][T28663] percpu 64 [ 2390.219562][T28663] sock 0 [ 2390.219562][T28663] vmalloc 0 [ 2390.219562][T28663] shmem 10436608 [ 2390.219562][T28663] zswap 0 [ 2390.219562][T28663] zswapped 0 [ 2390.219562][T28663] file_mapped 172032 [ 2390.219562][T28663] file_dirty 0 [ 2390.219562][T28663] file_writeback 0 [ 2390.219562][T28663] swapcached 0 [ 2390.219562][T28663] anon_thp 0 [ 2390.219562][T28663] file_thp 0 [ 2390.219562][T28663] shmem_thp 0 [ 2390.219562][T28663] inactive_anon 40960 [ 2390.219562][T28663] active_anon 10436608 [ 2390.219562][T28663] inactive_file 0 [ 2390.219562][T28663] active_file 0 [ 2390.219562][T28663] unevictable 0 [ 2390.219562][T28663] slab_reclaimable 38104 [ 2390.219562][T28663] slab_unreclaimable 44728 [ 2390.219562][T28663] slab 82832 [ 2390.321262][T28663] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=28663,uid=0 [ 2390.341753][T28663] Memory cgroup out of memory: Killed process 28663 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2391.254710][T21387] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2391.380753][T21387] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2391.475208][T21387] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2391.538091][T21387] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 11:02:22 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:22 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:22 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:02:22 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(r3, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r4, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:22 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(r2, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r3, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:22 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:22 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:22 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x21}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:02:22 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(r3, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r4, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:22 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:02:22 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:22 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(r3, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r4, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:22 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:22 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:22 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:02:22 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2d}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2392.882889][T28898] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2392.977654][T28898] CPU: 1 PID: 28898 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2392.988149][T28898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2392.998240][T28898] Call Trace: [ 2393.001577][T28898] [ 2393.004533][T28898] dump_stack_lvl+0xd1/0x138 [ 2393.009174][T28898] dump_header+0x10b/0x85f [ 2393.013631][T28898] oom_kill_process.cold+0x10/0x15 [ 2393.018786][T28898] out_of_memory+0x35c/0x14a0 [ 2393.023515][T28898] ? oom_killer_disable+0x280/0x280 [ 2393.028769][T28898] mem_cgroup_out_of_memory+0x206/0x270 [ 2393.034362][T28898] ? mem_cgroup_margin+0x130/0x130 [ 2393.039540][T28898] memory_max_write+0x2f9/0x3c0 [ 2393.044428][T28898] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2393.050532][T28898] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2393.056732][T28898] cgroup_file_write+0x1e2/0x770 [ 2393.061714][T28898] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2393.067815][T28898] ? kill_css+0x370/0x370 [ 2393.072191][T28898] ? kill_css+0x370/0x370 [ 2393.076554][T28898] kernfs_fop_write_iter+0x3f1/0x600 [ 2393.081888][T28898] vfs_write+0x9ed/0xdd0 [ 2393.086172][T28898] ? kernel_write+0x630/0x630 [ 2393.090889][T28898] ? __fget_files+0x26a/0x440 [ 2393.095599][T28898] ksys_write+0x12b/0x250 [ 2393.099946][T28898] ? __ia32_sys_read+0xb0/0xb0 [ 2393.104727][T28898] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2393.110642][T28898] do_syscall_64+0x39/0xb0 [ 2393.115079][T28898] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2393.120989][T28898] RIP: 0033:0x7f3feea8c0c9 [ 2393.125429][T28898] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2393.145048][T28898] RSP: 002b:00007f3fef7a9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2393.153471][T28898] RAX: ffffffffffffffda RBX: 00007f3feebabf80 RCX: 00007f3feea8c0c9 [ 2393.161456][T28898] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2393.169431][T28898] RBP: 00007f3feeae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2393.177406][T28898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2393.185384][T28898] R13: 00007ffe786d72cf R14: 00007f3fef7a9300 R15: 0000000000022000 [ 2393.193381][T28898] [ 2393.253555][T28898] memory: usage 10624kB, limit 0kB, failcnt 744 [ 2393.262753][T21387] device hsr_slave_0 left promiscuous mode [ 2393.270582][T28898] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2393.278781][T21387] device hsr_slave_1 left promiscuous mode [ 2393.284821][T28898] Memory cgroup stats for /syz5: [ 2393.285051][T28898] anon 139264 [ 2393.285051][T28898] file 10448896 [ 2393.285051][T28898] kernel 258048 [ 2393.285051][T28898] kernel_stack 32768 [ 2393.285051][T28898] pagetables 77824 [ 2393.285051][T28898] sec_pagetables 0 [ 2393.285051][T28898] percpu 64 [ 2393.285051][T28898] sock 0 [ 2393.285051][T28898] vmalloc 0 [ 2393.285051][T28898] shmem 10448896 [ 2393.285051][T28898] zswap 0 [ 2393.285051][T28898] zswapped 0 [ 2393.285051][T28898] file_mapped 270336 [ 2393.285051][T28898] file_dirty 0 [ 2393.285051][T28898] file_writeback 0 [ 2393.285051][T28898] swapcached 0 [ 2393.285051][T28898] anon_thp 0 [ 2393.285051][T28898] file_thp 0 [ 2393.285051][T28898] shmem_thp 0 [ 2393.285051][T28898] inactive_anon 139264 [ 2393.285051][T28898] active_anon 10448896 [ 2393.285051][T28898] inactive_file 0 [ 2393.285051][T28898] active_file 0 [ 2393.285051][T28898] unevictable 0 [ 2393.285051][T28898] slab_reclaimable 42720 [ 2393.285051][T28898] slab_unreclaimable 73104 [ 2393.285051][T28898] slab 115824 [ 2393.383980][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2393.414401][T21387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2393.426439][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2393.444907][T21387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2393.458952][T28898] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=28894,uid=0 [ 2393.478176][T21387] device bridge_slave_1 left promiscuous mode [ 2393.484433][T21387] bridge0: port 2(bridge_slave_1) entered disabled state [ 2393.503804][T21387] device bridge_slave_0 left promiscuous mode [ 2393.512807][T28898] Memory cgroup out of memory: Killed process 28898 (syz-executor.5) total-vm:56588kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2393.538029][T21387] bridge0: port 1(bridge_slave_0) entered disabled state [ 2393.556708][T21387] device veth1_macvtap left promiscuous mode 11:02:23 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(r3, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r4, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2393.568348][T21387] device veth0_macvtap left promiscuous mode [ 2393.583725][T21387] device veth1_vlan left promiscuous mode [ 2393.624581][T21387] device veth0_vlan left promiscuous mode [ 2393.685665][T28338] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2393.709700][T28338] CPU: 0 PID: 28338 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2393.720168][T28338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2393.730236][T28338] Call Trace: [ 2393.733522][T28338] [ 2393.736455][T28338] dump_stack_lvl+0xd1/0x138 [ 2393.741066][T28338] dump_header+0x10b/0x85f [ 2393.745495][T28338] oom_kill_process.cold+0x10/0x15 [ 2393.750619][T28338] out_of_memory+0x35c/0x14a0 [ 2393.755317][T28338] ? find_held_lock+0x2d/0x110 [ 2393.760099][T28338] ? oom_killer_disable+0x280/0x280 [ 2393.765317][T28338] ? find_held_lock+0x2d/0x110 [ 2393.770119][T28338] mem_cgroup_out_of_memory+0x206/0x270 [ 2393.775683][T28338] ? mem_cgroup_margin+0x130/0x130 [ 2393.780811][T28338] ? lock_downgrade+0x6e0/0x6e0 [ 2393.785682][T28338] try_charge_memcg+0xefb/0x12f0 [ 2393.790633][T28338] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2393.796629][T28338] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2393.802354][T28338] ? lock_downgrade+0x6e0/0x6e0 [ 2393.807212][T28338] ? lock_downgrade+0x6e0/0x6e0 [ 2393.812080][T28338] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2393.817658][T28338] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2393.823838][T28338] copy_process+0x4e3/0x7520 [ 2393.828449][T28338] ? _raw_spin_unlock+0x28/0x40 [ 2393.833323][T28338] ? wp_page_reuse+0x197/0x570 [ 2393.838114][T28338] ? do_wp_page+0x844/0x3370 [ 2393.842730][T28338] ? __cleanup_sighand+0xb0/0xb0 [ 2393.847691][T28338] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2393.853084][T28338] ? rwlock_bug.part.0+0x90/0x90 [ 2393.858031][T28338] ? lock_chain_count+0x20/0x20 [ 2393.862912][T28338] kernel_clone+0xeb/0x990 [ 2393.867341][T28338] ? create_io_thread+0xf0/0xf0 [ 2393.872207][T28338] ? find_held_lock+0x2d/0x110 [ 2393.876996][T28338] __do_sys_clone+0xba/0x100 [ 2393.881595][T28338] ? kernel_clone+0x990/0x990 [ 2393.886302][T28338] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2393.892210][T28338] do_syscall_64+0x39/0xb0 [ 2393.896640][T28338] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2393.902542][T28338] RIP: 0033:0x7f3feea89dfb [ 2393.906964][T28338] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2393.926591][T28338] RSP: 002b:00007ffe786d7510 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2393.935031][T28338] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3feea89dfb [ 2393.943003][T28338] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2393.950977][T28338] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555555f0400 [ 2393.958953][T28338] R10: 00005555555f06d0 R11: 0000000000000246 R12: 0000000000000001 [ 2393.966924][T28338] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe786d75f0 [ 2393.974912][T28338] [ 2394.146976][T28338] memory: usage 10384kB, limit 0kB, failcnt 769 [ 2394.153376][T28338] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2394.176602][T28338] Memory cgroup stats for /syz5: [ 2394.176810][T28338] anon 45056 [ 2394.176810][T28338] file 10448896 [ 2394.176810][T28338] kernel 139264 [ 2394.176810][T28338] kernel_stack 0 [ 2394.176810][T28338] pagetables 8192 [ 2394.176810][T28338] sec_pagetables 0 [ 2394.176810][T28338] percpu 64 [ 2394.176810][T28338] sock 0 [ 2394.176810][T28338] vmalloc 0 [ 2394.176810][T28338] shmem 10448896 [ 2394.176810][T28338] zswap 0 [ 2394.176810][T28338] zswapped 0 [ 2394.176810][T28338] file_mapped 245760 [ 2394.176810][T28338] file_dirty 0 [ 2394.176810][T28338] file_writeback 0 [ 2394.176810][T28338] swapcached 0 [ 2394.176810][T28338] anon_thp 0 [ 2394.176810][T28338] file_thp 0 [ 2394.176810][T28338] shmem_thp 0 [ 2394.176810][T28338] inactive_anon 45056 [ 2394.176810][T28338] active_anon 10448896 [ 2394.176810][T28338] inactive_file 0 [ 2394.176810][T28338] active_file 0 [ 2394.176810][T28338] unevictable 0 [ 2394.176810][T28338] slab_reclaimable 36624 [ 2394.176810][T28338] slab_unreclaimable 51576 [ 2394.176810][T28338] slab 88200 [ 2394.357145][T28338] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=28338,uid=0 [ 2394.400229][T28338] Memory cgroup out of memory: Killed process 28338 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2394.554777][T21387] team0 (unregistering): Port device team_slave_1 removed [ 2394.566675][T21387] team0 (unregistering): Port device team_slave_0 removed [ 2394.583364][T21387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2394.605223][T21387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2394.751063][T21387] bond0 (unregistering): Released all slaves [ 2394.795427][T10407] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2394.804043][T10407] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2394.813100][T10407] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2394.820869][T10407] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2394.831653][T10407] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2395.108755][T28932] chnl_net:caif_netlink_parms(): no params data found [ 2395.256743][T28932] bridge0: port 1(bridge_slave_0) entered blocking state [ 2395.271935][T28932] bridge0: port 1(bridge_slave_0) entered disabled state [ 2395.283963][T28932] device bridge_slave_0 entered promiscuous mode [ 2395.298973][T28932] bridge0: port 2(bridge_slave_1) entered blocking state [ 2395.306152][T28932] bridge0: port 2(bridge_slave_1) entered disabled state [ 2395.314753][T28932] device bridge_slave_1 entered promiscuous mode [ 2395.359967][T28932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2395.389719][T28932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2395.462703][T28932] team0: Port device team_slave_0 added [ 2395.490266][T28932] team0: Port device team_slave_1 added [ 2395.539117][T28932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2395.556922][T28932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2395.627754][T28932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2395.669123][T28932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2395.676119][T28932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2395.737751][T28932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2395.867025][T28932] device hsr_slave_0 entered promiscuous mode [ 2395.878390][T28932] device hsr_slave_1 entered promiscuous mode [ 2395.896958][T28932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2395.904562][T28932] Cannot create hsr debugfs directory [ 2395.997286][ T8419] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2396.006569][ T8419] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2396.014825][ T8419] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2396.022705][ T8419] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2396.030544][ T8419] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2396.700609][T28957] chnl_net:caif_netlink_parms(): no params data found [ 2396.874262][T28932] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2396.888500][ T8419] Bluetooth: hci1: command 0x0409 tx timeout [ 2396.910399][T28932] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2396.950392][T28932] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2397.010226][T28932] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2397.027324][T28957] bridge0: port 1(bridge_slave_0) entered blocking state [ 2397.055051][T28957] bridge0: port 1(bridge_slave_0) entered disabled state [ 2397.089217][T28957] device bridge_slave_0 entered promiscuous mode [ 2397.129716][T28957] bridge0: port 2(bridge_slave_1) entered blocking state [ 2397.136856][T28957] bridge0: port 2(bridge_slave_1) entered disabled state [ 2397.158862][T28957] device bridge_slave_1 entered promiscuous mode [ 2397.239193][T28957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2397.286099][T28957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2397.380585][T28957] team0: Port device team_slave_0 added [ 2397.392692][T28932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2397.409830][T28957] team0: Port device team_slave_1 added [ 2397.445391][T28932] 8021q: adding VLAN 0 to HW filter on device team0 [ 2397.456166][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2397.465145][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2397.508566][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2397.518231][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2397.526752][T10149] bridge0: port 1(bridge_slave_0) entered blocking state [ 2397.533927][T10149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2397.567509][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2397.576785][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2397.607621][T10149] bridge0: port 2(bridge_slave_1) entered blocking state [ 2397.614758][T10149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2397.637367][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2397.646746][T28957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2397.655981][T28957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2397.688196][T28957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2397.709170][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2397.718150][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2397.727519][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2397.737927][T28957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2397.744903][T28957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2397.804510][T28957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2397.829902][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2397.838794][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2397.849052][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2397.857839][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2397.866203][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2397.875559][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2397.891355][T28932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2397.969524][T28957] device hsr_slave_0 entered promiscuous mode [ 2398.007375][T28957] device hsr_slave_1 entered promiscuous mode [ 2398.027182][T28957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2398.034794][T28957] Cannot create hsr debugfs directory [ 2398.087387][ T8419] Bluetooth: hci2: command 0x0409 tx timeout [ 2398.325459][T28957] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2398.445090][T28957] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2398.481067][T28932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2398.504851][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2398.512857][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2398.549457][T28957] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2398.611508][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2398.628789][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2398.707640][T28957] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2398.749919][T21387] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2398.815835][T28932] device veth0_vlan entered promiscuous mode [ 2398.851384][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2398.860530][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2398.893666][T28932] device veth1_vlan entered promiscuous mode [ 2398.977226][ T8419] Bluetooth: hci1: command 0x041b tx timeout [ 2398.984193][T21387] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2399.077569][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2399.085458][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2399.107402][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2399.147544][T21387] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2399.230352][T28932] device veth0_macvtap entered promiscuous mode [ 2399.241137][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2399.251984][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2399.278035][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2399.290971][T21387] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2399.331888][T28932] device veth1_macvtap entered promiscuous mode [ 2399.393738][T28932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2399.419095][T28932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2399.429388][T28932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2399.439958][T28932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2399.452192][T28932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2399.462839][T28932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2399.482674][T28932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2399.495902][T28932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2399.518138][T28932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2399.539718][T28932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2399.560014][T28932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2399.611704][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2399.637816][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2399.657536][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2399.673261][T28932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2399.688302][T28932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2399.699046][T28932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2399.709846][T28932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2399.721356][T28932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2399.731985][T28932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2399.742113][T28932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2399.752697][T28932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2399.762772][T28932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2399.773564][T28932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2399.785152][T28932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2399.794380][T28957] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2399.813865][T28957] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2399.823789][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2399.832708][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2399.844058][T28932] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2399.853498][T28932] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2399.862565][T28932] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2399.871557][T28932] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2399.884246][T28957] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2399.930381][T28957] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2400.124582][ T6761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2400.148889][ T6761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2400.167993][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2400.177510][ T8419] Bluetooth: hci2: command 0x041b tx timeout [ 2400.210321][T13808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2400.229375][T13808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2400.286125][T28957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2400.295339][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2400.314445][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2400.322574][T15119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 11:02:30 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r3, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:30 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(r3, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r4, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:30 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:30 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x33}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:02:30 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(r3, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r4, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2400.442247][T28957] 8021q: adding VLAN 0 to HW filter on device team0 11:02:30 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000002c0), 0x12) 11:02:30 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x3a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2400.506147][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2400.527653][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2400.545818][T29029] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2400.564183][T19256] bridge0: port 1(bridge_slave_0) entered blocking state [ 2400.571409][T19256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2400.610616][T29029] CPU: 0 PID: 29029 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2400.621094][T29029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2400.631177][T29029] Call Trace: [ 2400.634519][T29029] [ 2400.637476][T29029] dump_stack_lvl+0xd1/0x138 [ 2400.642115][T29029] dump_header+0x10b/0x85f [ 2400.646572][T29029] oom_kill_process.cold+0x10/0x15 [ 2400.651726][T29029] out_of_memory+0x35c/0x14a0 [ 2400.656463][T29029] ? oom_killer_disable+0x280/0x280 [ 2400.661723][T29029] mem_cgroup_out_of_memory+0x206/0x270 [ 2400.667353][T29029] ? mem_cgroup_margin+0x130/0x130 [ 2400.672527][T29029] memory_max_write+0x2f9/0x3c0 [ 2400.677412][T29029] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2400.683517][T29029] ? lock_release+0x810/0x810 [ 2400.688250][T29029] cgroup_file_write+0x1e2/0x770 [ 2400.693225][T29029] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2400.699316][T29029] ? kill_css+0x370/0x370 [ 2400.703665][T29029] ? __virt_addr_valid+0x61/0x2e0 [ 2400.708727][T29029] ? kill_css+0x370/0x370 [ 2400.713072][T29029] kernfs_fop_write_iter+0x3f1/0x600 [ 2400.718386][T29029] vfs_write+0x9ed/0xdd0 [ 2400.722648][T29029] ? kernel_write+0x630/0x630 [ 2400.727360][T29029] ? __fget_files+0x26a/0x440 [ 2400.732080][T29029] ksys_write+0x12b/0x250 [ 2400.736422][T29029] ? __ia32_sys_read+0xb0/0xb0 [ 2400.741200][T29029] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2400.747113][T29029] do_syscall_64+0x39/0xb0 [ 2400.751552][T29029] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2400.757456][T29029] RIP: 0033:0x7f390468c0c9 [ 2400.761879][T29029] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2400.781493][T29029] RSP: 002b:00007f3905493168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2400.789916][T29029] RAX: ffffffffffffffda RBX: 00007f39047abf80 RCX: 00007f390468c0c9 [ 2400.797910][T29029] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2400.805883][T29029] RBP: 00007f39046e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2400.813857][T29029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2400.821835][T29029] R13: 00007ffd62309b2f R14: 00007f3905493300 R15: 0000000000022000 [ 2400.829846][T29029] [ 2400.871914][T29029] memory: usage 10628kB, limit 0kB, failcnt 1012 [ 2400.878481][T29029] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2400.900132][T29029] Memory cgroup stats for /syz4: [ 2400.900324][T29029] anon 131072 [ 2400.900324][T29029] file 10448896 [ 2400.900324][T29029] kernel 303104 [ 2400.900324][T29029] kernel_stack 65536 [ 2400.900324][T29029] pagetables 81920 [ 2400.900324][T29029] sec_pagetables 0 [ 2400.900324][T29029] percpu 64 [ 2400.900324][T29029] sock 0 [ 2400.900324][T29029] vmalloc 0 [ 2400.900324][T29029] shmem 10448896 [ 2400.900324][T29029] zswap 0 [ 2400.900324][T29029] zswapped 0 [ 2400.900324][T29029] file_mapped 335872 [ 2400.900324][T29029] file_dirty 0 [ 2400.900324][T29029] file_writeback 0 [ 2400.900324][T29029] swapcached 0 [ 2400.900324][T29029] anon_thp 0 [ 2400.900324][T29029] file_thp 0 [ 2400.900324][T29029] shmem_thp 0 [ 2400.900324][T29029] inactive_anon 131072 [ 2400.900324][T29029] active_anon 10448896 [ 2400.900324][T29029] inactive_file 0 [ 2400.900324][T29029] active_file 0 [ 2400.900324][T29029] unevictable 0 [ 2400.900324][T29029] slab_reclaimable 51264 [ 2400.900324][T29029] slab_unreclaimable 72456 [ 2400.900324][T29029] slab 123720 [ 2401.022963][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2401.035566][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2401.047582][T10407] Bluetooth: hci1: command 0x040f tx timeout [ 2401.073329][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2401.100962][T10149] bridge0: port 2(bridge_slave_1) entered blocking state [ 2401.108163][T10149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2401.177453][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2401.198007][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2401.290709][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2401.330792][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2401.378654][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2401.427369][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2401.435777][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2401.517701][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2401.529011][T28957] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2401.588349][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2401.636227][T29029] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=29025,uid=0 [ 2401.684155][T29029] Memory cgroup out of memory: Killed process 29029 (syz-executor.4) total-vm:54540kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2401.995604][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2402.004006][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2402.018802][T28957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2402.084421][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2402.094449][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2402.146823][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2402.165739][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2402.194738][T28957] device veth0_vlan entered promiscuous mode [ 2402.202717][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2402.211369][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2402.224936][T28957] device veth1_vlan entered promiscuous mode [ 2402.257173][ T8419] Bluetooth: hci2: command 0x040f tx timeout [ 2402.295611][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2402.305759][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2402.325170][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2402.345767][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2402.370822][T28957] device veth0_macvtap entered promiscuous mode [ 2402.395551][T21387] device hsr_slave_0 left promiscuous mode [ 2402.416197][T21387] device hsr_slave_1 left promiscuous mode [ 2402.427912][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2402.435362][T21387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2402.445476][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2402.453205][T21387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2402.462928][T21387] device bridge_slave_1 left promiscuous mode [ 2402.469460][T21387] bridge0: port 2(bridge_slave_1) entered disabled state [ 2402.482817][T21387] device bridge_slave_0 left promiscuous mode [ 2402.495886][T21387] bridge0: port 1(bridge_slave_0) entered disabled state [ 2402.519215][T21387] device hsr_slave_0 left promiscuous mode [ 2402.525683][T21387] device hsr_slave_1 left promiscuous mode [ 2402.542859][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2402.550861][T21387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2402.561069][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2402.569301][T21387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2402.579070][T21387] device bridge_slave_1 left promiscuous mode [ 2402.585344][T21387] bridge0: port 2(bridge_slave_1) entered disabled state [ 2402.595714][T21387] device bridge_slave_0 left promiscuous mode [ 2402.622050][T21387] bridge0: port 1(bridge_slave_0) entered disabled state [ 2402.678387][T21387] device veth1_macvtap left promiscuous mode [ 2402.684504][T21387] device veth0_macvtap left promiscuous mode [ 2402.707119][T21387] device veth1_vlan left promiscuous mode [ 2402.713012][T21387] device veth0_vlan left promiscuous mode [ 2402.746296][T21387] device veth1_macvtap left promiscuous mode [ 2402.766853][T21387] device veth0_macvtap left promiscuous mode [ 2402.777464][T21387] device veth1_vlan left promiscuous mode [ 2402.783344][T21387] device veth0_vlan left promiscuous mode [ 2403.060457][T10407] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2403.071585][T10407] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2403.082660][T10407] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2403.092746][T10407] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2403.107502][T10407] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2403.115626][T10407] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2403.127318][ T8419] Bluetooth: hci1: command 0x0419 tx timeout [ 2403.299793][T21387] team0 (unregistering): Port device team_slave_1 removed [ 2403.316761][T21387] team0 (unregistering): Port device team_slave_0 removed [ 2403.331367][T21387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2403.344968][T21387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2403.416688][T21387] bond0 (unregistering): Released all slaves [ 2403.563265][T21387] team0 (unregistering): Port device team_slave_1 removed [ 2403.577680][T21387] team0 (unregistering): Port device team_slave_0 removed [ 2403.592549][T21387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2403.616759][T21387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2403.685211][T21387] bond0 (unregistering): Released all slaves [ 2403.734514][T28957] device veth1_macvtap entered promiscuous mode [ 2403.747286][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2403.793588][T28957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2403.813776][T28957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2403.826115][T28957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2403.836781][T28957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2403.846935][T28957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2403.857963][T28957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2403.868974][T28957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2403.879694][T28957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2403.911152][T28957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2403.926851][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2403.935925][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2403.962232][T28957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2403.983163][T28957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2403.995724][T28957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2404.017708][T28957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2404.038009][T28957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2404.059079][T28957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2404.075759][T28957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2404.097632][T28957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2404.118486][T28957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2404.130451][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2404.145735][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2404.184502][T28957] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2404.203527][T28957] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2404.215460][T28957] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2404.235313][T28957] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2404.326986][ T8419] Bluetooth: hci2: command 0x0419 tx timeout [ 2404.445314][T13808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2404.467674][T13808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2404.491101][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2404.524165][T29074] chnl_net:caif_netlink_parms(): no params data found [ 2404.546578][T13787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2404.562891][T13787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2404.590193][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2404.726580][T29074] bridge0: port 1(bridge_slave_0) entered blocking state [ 2404.728015][T29098] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2404.735476][T29074] bridge0: port 1(bridge_slave_0) entered disabled state [ 2404.745490][T29098] CPU: 0 PID: 29098 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2404.762263][T29098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2404.772329][T29098] Call Trace: [ 2404.775612][T29098] [ 2404.778547][T29098] dump_stack_lvl+0xd1/0x138 [ 2404.783162][T29098] dump_header+0x10b/0x85f [ 2404.787593][T29098] oom_kill_process.cold+0x10/0x15 [ 2404.792716][T29098] out_of_memory+0x35c/0x14a0 [ 2404.797424][T29098] ? oom_killer_disable+0x280/0x280 [ 2404.802655][T29098] mem_cgroup_out_of_memory+0x206/0x270 [ 2404.808221][T29098] ? mem_cgroup_margin+0x130/0x130 [ 2404.813391][T29098] memory_max_write+0x2f9/0x3c0 [ 2404.818255][T29098] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2404.824444][T29098] ? lock_release+0x810/0x810 [ 2404.829145][T29098] cgroup_file_write+0x1e2/0x770 [ 2404.834108][T29098] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2404.840193][T29098] ? kill_css+0x370/0x370 [ 2404.844542][T29098] ? __virt_addr_valid+0x61/0x2e0 [ 2404.849601][T29098] ? kill_css+0x370/0x370 [ 2404.853949][T29098] kernfs_fop_write_iter+0x3f1/0x600 [ 2404.859268][T29098] vfs_write+0x9ed/0xdd0 [ 2404.863551][T29098] ? kernel_write+0x630/0x630 [ 2404.868267][T29098] ? __fget_files+0x26a/0x440 [ 2404.872972][T29098] ksys_write+0x12b/0x250 [ 2404.877315][T29098] ? __ia32_sys_read+0xb0/0xb0 [ 2404.882097][T29098] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2404.888011][T29098] do_syscall_64+0x39/0xb0 [ 2404.892449][T29098] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2404.898356][T29098] RIP: 0033:0x7f516828c0c9 [ 2404.902786][T29098] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2404.922421][T29098] RSP: 002b:00007f5168fd8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2404.930851][T29098] RAX: ffffffffffffffda RBX: 00007f51683abf80 RCX: 00007f516828c0c9 [ 2404.938827][T29098] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2404.946804][T29098] RBP: 00007f51682e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2404.954800][T29098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2404.962789][T29098] R13: 00007ffeb51837cf R14: 00007f5168fd8300 R15: 0000000000022000 [ 2404.970821][T29098] [ 2404.993084][T29098] memory: usage 10632kB, limit 0kB, failcnt 589 [ 2405.002200][T29098] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2405.015869][T29098] Memory cgroup stats for /syz3: [ 2405.016062][T29098] anon 114688 [ 2405.016062][T29098] file 10436608 [ 2405.016062][T29098] kernel 315392 [ 2405.016062][T29098] kernel_stack 65536 [ 2405.016062][T29098] pagetables 77824 [ 2405.016062][T29098] sec_pagetables 0 [ 2405.016062][T29098] percpu 64 [ 2405.016062][T29098] sock 0 [ 2405.016062][T29098] vmalloc 0 [ 2405.016062][T29098] shmem 10436608 [ 2405.016062][T29098] zswap 0 [ 2405.016062][T29098] zswapped 0 [ 2405.016062][T29098] file_mapped 192512 [ 2405.016062][T29098] file_dirty 0 [ 2405.016062][T29098] file_writeback 0 [ 2405.016062][T29098] swapcached 0 [ 2405.016062][T29098] anon_thp 0 [ 2405.016062][T29098] file_thp 0 [ 2405.016062][T29098] shmem_thp 0 [ 2405.016062][T29098] inactive_anon 114688 [ 2405.016062][T29098] active_anon 10436608 [ 2405.016062][T29098] inactive_file 0 [ 2405.016062][T29098] active_file 0 [ 2405.016062][T29098] unevictable 0 [ 2405.016062][T29098] slab_reclaimable 41624 [ 2405.016062][T29098] slab_unreclaimable 102408 [ 2405.016062][T29098] slab 144032 [ 2405.020350][T29074] device bridge_slave_0 entered promiscuous mode [ 2405.025840][T29098] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 2405.135779][ T8419] Bluetooth: hci5: command 0x0409 tx timeout [ 2405.150464][T29098] ,cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=28957,uid=0 [ 2405.164067][T29074] bridge0: port 2(bridge_slave_1) entered blocking state [ 2405.171806][T29074] bridge0: port 2(bridge_slave_1) entered disabled state [ 2405.177164][T29098] Memory cgroup out of memory: Killed process 28957 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2405.179984][T29074] device bridge_slave_1 entered promiscuous mode [ 2405.260913][T29074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2405.289004][T29074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2405.369875][T29074] team0: Port device team_slave_0 added [ 2405.425400][T29074] team0: Port device team_slave_1 added [ 2405.485785][T29074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2405.497151][T29074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2405.557581][T29074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2405.586686][T29074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2405.607787][T29074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2405.639859][T29074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2405.763754][T29074] device hsr_slave_0 entered promiscuous mode [ 2405.778566][T29074] device hsr_slave_1 entered promiscuous mode [ 2405.800162][T29074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2405.817076][T29074] Cannot create hsr debugfs directory [ 2405.849801][ T1201] ieee802154 phy0 wpan0: encryption failed: -22 [ 2405.856221][ T1201] ieee802154 phy1 wpan1: encryption failed: -22 11:02:36 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:36 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x43}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:02:36 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000002c0), 0x12) 11:02:36 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r0, &(0x7f00000002c0), 0x12) 11:02:36 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(r3, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r4, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:36 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x51}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:02:36 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000002c0), 0x12) [ 2406.283131][T28932] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 2406.357562][T28932] CPU: 0 PID: 28932 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2406.368040][T28932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2406.378118][T28932] Call Trace: [ 2406.381419][T28932] [ 2406.384364][T28932] dump_stack_lvl+0xd1/0x138 [ 2406.388988][T28932] dump_header+0x10b/0x85f [ 2406.393430][T28932] oom_kill_process.cold+0x10/0x15 [ 2406.398572][T28932] out_of_memory+0x35c/0x14a0 11:02:36 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x76}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2406.403287][T28932] ? find_held_lock+0x2d/0x110 [ 2406.408091][T28932] ? oom_killer_disable+0x280/0x280 [ 2406.413342][T28932] ? find_held_lock+0x2d/0x110 [ 2406.418152][T28932] mem_cgroup_out_of_memory+0x206/0x270 [ 2406.423741][T28932] ? mem_cgroup_margin+0x130/0x130 [ 2406.428892][T28932] ? lock_downgrade+0x6e0/0x6e0 [ 2406.433790][T28932] try_charge_memcg+0xefb/0x12f0 [ 2406.438772][T28932] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2406.444781][T28932] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2406.450530][T28932] ? lock_downgrade+0x6e0/0x6e0 [ 2406.455412][T28932] ? lock_downgrade+0x6e0/0x6e0 [ 2406.460293][T28932] ? rcu_read_unlock+0x9/0x60 [ 2406.465018][T28932] obj_cgroup_charge+0x2af/0x5e0 [ 2406.469990][T28932] ? copy_process+0x3aa/0x7520 [ 2406.474779][T28932] kmem_cache_alloc_node+0xb7/0x460 [ 2406.480024][T28932] copy_process+0x3aa/0x7520 [ 2406.484643][T28932] ? _raw_spin_unlock+0x28/0x40 [ 2406.489526][T28932] ? wp_page_reuse+0x197/0x570 [ 2406.494325][T28932] ? do_wp_page+0x844/0x3370 [ 2406.498960][T28932] ? __cleanup_sighand+0xb0/0xb0 11:02:36 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8d}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2406.503922][T28932] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2406.509337][T28932] ? rwlock_bug.part.0+0x90/0x90 [ 2406.514304][T28932] ? lock_chain_count+0x20/0x20 [ 2406.519184][T28932] kernel_clone+0xeb/0x990 [ 2406.523630][T28932] ? create_io_thread+0xf0/0xf0 [ 2406.528516][T28932] ? find_held_lock+0x2d/0x110 [ 2406.533327][T28932] __do_sys_clone+0xba/0x100 [ 2406.537963][T28932] ? kernel_clone+0x990/0x990 [ 2406.542693][T28932] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2406.548626][T28932] do_syscall_64+0x39/0xb0 [ 2406.553081][T28932] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2406.559006][T28932] RIP: 0033:0x7f2c4b089dfb [ 2406.563442][T28932] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2406.586549][T28932] RSP: 002b:00007fff7b286350 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2406.594992][T28932] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2c4b089dfb [ 2406.602989][T28932] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2406.610985][T28932] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555574ed400 [ 2406.618981][T28932] R10: 00005555574ed6d0 R11: 0000000000000246 R12: 0000000000000001 [ 2406.626978][T28932] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff7b286430 [ 2406.634996][T28932] [ 2406.865313][T28932] memory: usage 8276kB, limit 0kB, failcnt 1103 [ 2406.871783][T28932] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2406.886565][T28932] Memory cgroup stats for /syz2: [ 2406.886774][T28932] anon 40960 [ 2406.886774][T28932] file 8355840 [ 2406.886774][T28932] kernel 77824 [ 2406.886774][T28932] kernel_stack 0 [ 2406.886774][T28932] pagetables 8192 [ 2406.886774][T28932] sec_pagetables 0 [ 2406.886774][T28932] percpu 0 [ 2406.886774][T28932] sock 0 [ 2406.886774][T28932] vmalloc 0 [ 2406.886774][T28932] shmem 8351744 [ 2406.886774][T28932] zswap 0 [ 2406.886774][T28932] zswapped 0 [ 2406.886774][T28932] file_mapped 311296 [ 2406.886774][T28932] file_dirty 0 [ 2406.886774][T28932] file_writeback 0 [ 2406.886774][T28932] swapcached 0 [ 2406.886774][T28932] anon_thp 0 [ 2406.886774][T28932] file_thp 0 [ 2406.886774][T28932] shmem_thp 0 [ 2406.886774][T28932] inactive_anon 40960 [ 2406.886774][T28932] active_anon 8351744 [ 2406.886774][T28932] inactive_file 0 [ 2406.886774][T28932] active_file 4096 [ 2406.886774][T28932] unevictable 0 [ 2406.886774][T28932] slab_reclaimable 27824 [ 2406.886774][T28932] slab_unreclaimable 32296 [ 2406.886774][T28932] slab 60120 [ 2407.024860][T28932] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=28932,uid=0 [ 2407.068787][T28932] Memory cgroup out of memory: Killed process 28932 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2407.072041][T29074] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2407.107074][T28342] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 2407.131601][T28342] CPU: 1 PID: 28342 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2407.142065][T28342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2407.152141][T28342] Call Trace: [ 2407.155435][T28342] [ 2407.158379][T28342] dump_stack_lvl+0xd1/0x138 [ 2407.163006][T28342] dump_header+0x10b/0x85f [ 2407.167453][T28342] oom_kill_process.cold+0x10/0x15 [ 2407.172591][T28342] out_of_memory+0x35c/0x14a0 [ 2407.177316][T28342] ? oom_killer_disable+0x280/0x280 [ 2407.182557][T28342] ? find_held_lock+0x2d/0x110 [ 2407.187359][T28342] mem_cgroup_out_of_memory+0x206/0x270 [ 2407.192939][T28342] ? mem_cgroup_margin+0x130/0x130 [ 2407.198086][T28342] ? lock_downgrade+0x6e0/0x6e0 [ 2407.202980][T28342] try_charge_memcg+0xefb/0x12f0 [ 2407.207954][T28342] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2407.213958][T28342] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2407.219696][T28342] ? lock_downgrade+0x6e0/0x6e0 [ 2407.224571][T28342] ? lock_downgrade+0x6e0/0x6e0 [ 2407.229439][T28342] ? rcu_read_unlock+0x9/0x60 [ 2407.234157][T28342] obj_cgroup_charge+0x2af/0x5e0 [ 2407.239136][T28342] ? copy_process+0x3aa/0x7520 [ 2407.243927][T28342] kmem_cache_alloc_node+0xb7/0x460 [ 2407.245883][ T8419] Bluetooth: hci5: command 0x041b tx timeout [ 2407.249134][T28342] copy_process+0x3aa/0x7520 [ 2407.249162][T28342] ? _raw_spin_unlock+0x28/0x40 [ 2407.264555][T28342] ? wp_page_reuse+0x197/0x570 [ 2407.269332][T28342] ? do_wp_page+0x844/0x3370 [ 2407.273939][T28342] ? __cleanup_sighand+0xb0/0xb0 [ 2407.278883][T28342] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2407.284272][T28342] ? rwlock_bug.part.0+0x90/0x90 [ 2407.289222][T28342] ? lock_chain_count+0x20/0x20 [ 2407.294084][T28342] kernel_clone+0xeb/0x990 [ 2407.298511][T28342] ? create_io_thread+0xf0/0xf0 [ 2407.303393][T28342] ? find_held_lock+0x2d/0x110 [ 2407.308184][T28342] __do_sys_clone+0xba/0x100 [ 2407.312781][T28342] ? kernel_clone+0x990/0x990 [ 2407.317482][T28342] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2407.323389][T28342] do_syscall_64+0x39/0xb0 [ 2407.327833][T28342] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2407.333739][T28342] RIP: 0033:0x7f3904689dfb [ 2407.338163][T28342] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2407.357800][T28342] RSP: 002b:00007ffd62309d70 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2407.366225][T28342] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3904689dfb [ 2407.374201][T28342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2407.382177][T28342] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555569c0400 [ 2407.390150][T28342] R10: 00005555569c06d0 R11: 0000000000000246 R12: 0000000000000001 [ 2407.398125][T28342] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd62309e50 [ 2407.406134][T28342] [ 2407.417596][T28342] memory: usage 10336kB, limit 0kB, failcnt 1031 [ 2407.423969][T28342] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2407.469738][T29074] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2407.487222][T28342] Memory cgroup stats for /syz4: [ 2407.487419][T28342] anon 40960 [ 2407.487419][T28342] file 10448896 [ 2407.487419][T28342] kernel 94208 [ 2407.487419][T28342] kernel_stack 0 [ 2407.487419][T28342] pagetables 8192 [ 2407.487419][T28342] sec_pagetables 0 [ 2407.487419][T28342] percpu 0 [ 2407.487419][T28342] sock 0 [ 2407.487419][T28342] vmalloc 0 [ 2407.487419][T28342] shmem 10448896 [ 2407.487419][T28342] zswap 0 [ 2407.487419][T28342] zswapped 0 [ 2407.487419][T28342] file_mapped 307200 [ 2407.487419][T28342] file_dirty 0 [ 2407.487419][T28342] file_writeback 0 [ 2407.487419][T28342] swapcached 0 [ 2407.487419][T28342] anon_thp 0 [ 2407.487419][T28342] file_thp 0 [ 2407.487419][T28342] shmem_thp 0 [ 2407.487419][T28342] inactive_anon 40960 [ 2407.487419][T28342] active_anon 10448896 [ 2407.487419][T28342] inactive_file 0 [ 2407.487419][T28342] active_file 0 [ 2407.487419][T28342] unevictable 0 [ 2407.487419][T28342] slab_reclaimable 41824 [ 2407.487419][T28342] slab_unreclaimable 32296 [ 2407.487419][T28342] slab 74120 [ 2407.595353][T29074] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2407.644500][T28342] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=28342,uid=0 [ 2407.660476][T28342] Memory cgroup out of memory: Killed process 28342 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2407.686339][T29074] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2407.930737][T29074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2407.950513][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2407.968487][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2407.979800][T29074] 8021q: adding VLAN 0 to HW filter on device team0 [ 2408.049723][T21387] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.089305][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2408.107696][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2408.116217][T10486] bridge0: port 1(bridge_slave_0) entered blocking state [ 2408.123363][T10486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2408.187747][T21387] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.227712][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2408.235782][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2408.250939][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2408.260095][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 2408.267259][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2408.286020][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2408.296736][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2408.313858][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2408.336354][T29074] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2408.362838][T29074] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2408.381173][T21387] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.417304][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2408.426063][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2408.448379][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2408.463323][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2408.487846][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2408.496385][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2408.524137][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2408.638196][T21387] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.893737][T21387] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.981684][T21387] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2409.029521][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2409.037781][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2409.053235][T29074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2409.076116][T21387] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2409.163800][T21387] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2409.456600][ T8419] Bluetooth: hci5: command 0x040f tx timeout [ 2409.628859][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2409.639656][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2409.683200][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2409.693816][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2409.704371][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2409.713266][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2409.723946][T29074] device veth0_vlan entered promiscuous mode [ 2409.762245][T29074] device veth1_vlan entered promiscuous mode [ 2409.817020][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2409.825691][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2409.836795][T29074] device veth0_macvtap entered promiscuous mode [ 2409.849309][T29074] device veth1_macvtap entered promiscuous mode [ 2409.882314][T29074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2409.895039][T29074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2409.905692][T29074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2409.916728][T29074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2409.927295][T29074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2409.938381][T29074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2409.948626][T29074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2409.960906][T29074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2409.971482][T29074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2409.982338][T29074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2409.994575][T29074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2410.007062][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2410.024011][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2410.032841][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2410.042262][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2410.070507][T29074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2410.084006][T29074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2410.094922][T29074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2410.105794][T29074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2410.117406][T29074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2410.129244][T29074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2410.139441][T29074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2410.150224][T29074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2410.160487][T29074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2410.172384][T29074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2410.191908][T29074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2410.207449][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2410.216225][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2410.236118][T29074] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2410.249979][T29074] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2410.260089][T29074] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2410.271313][T29074] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2410.392134][ T8442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2410.418585][ T8442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2410.441573][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2410.441658][T13787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2410.480427][T13787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2410.493604][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:02:40 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r4, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:40 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:40 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa4}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:02:40 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:40 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r0, &(0x7f00000002c0), 0x12) 11:02:40 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(r3, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r4, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:40 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:40 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa5}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:02:40 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xaa}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:02:40 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:40 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:02:40 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2411.265907][T21387] device hsr_slave_0 left promiscuous mode [ 2411.305871][T21387] device hsr_slave_1 left promiscuous mode [ 2411.344455][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2411.351421][T29193] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2411.377322][T29193] CPU: 1 PID: 29193 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2411.387827][T29193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2411.397895][T29193] Call Trace: [ 2411.401185][T29193] [ 2411.404123][T29193] dump_stack_lvl+0xd1/0x138 [ 2411.408746][T29193] dump_header+0x10b/0x85f [ 2411.413180][T29193] oom_kill_process.cold+0x10/0x15 [ 2411.418478][T29193] out_of_memory+0x35c/0x14a0 [ 2411.423181][T29193] ? lockdep_hardirqs_on+0x7d/0x100 [ 2411.428399][T29193] ? oom_killer_disable+0x280/0x280 [ 2411.433623][T29193] ? mem_cgroup_out_of_memory+0x199/0x270 [ 2411.439377][T29193] mem_cgroup_out_of_memory+0x206/0x270 [ 2411.444950][T29193] ? mem_cgroup_margin+0x130/0x130 [ 2411.450102][T29193] memory_max_write+0x2f9/0x3c0 [ 2411.454971][T29193] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2411.461048][T29193] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2411.467218][T29193] ? lockdep_hardirqs_on+0x7d/0x100 [ 2411.472433][T29193] cgroup_file_write+0x1e2/0x770 [ 2411.477388][T29193] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2411.483468][T29193] ? kill_css+0x370/0x370 [ 2411.487830][T29193] ? kill_css+0x370/0x370 [ 2411.492177][T29193] kernfs_fop_write_iter+0x3f1/0x600 [ 2411.497502][T29193] vfs_write+0x9ed/0xdd0 [ 2411.501773][T29193] ? kernel_write+0x630/0x630 [ 2411.506469][T29193] ? __fget_files+0x26a/0x440 [ 2411.511178][T29193] ksys_write+0x12b/0x250 [ 2411.515520][T29193] ? __ia32_sys_read+0xb0/0xb0 [ 2411.520315][T29193] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2411.526233][T29193] do_syscall_64+0x39/0xb0 [ 2411.530669][T29193] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2411.536572][T29193] RIP: 0033:0x7f858588c0c9 [ 2411.540999][T29193] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2411.560613][T29193] RSP: 002b:00007f85864ff168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2411.569055][T29193] RAX: ffffffffffffffda RBX: 00007f85859abf80 RCX: 00007f858588c0c9 [ 2411.577034][T29193] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2411.585011][T29193] RBP: 00007f85858e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2411.592987][T29193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2411.600962][T29193] R13: 00007ffebea3b64f R14: 00007f85864ff300 R15: 0000000000022000 [ 2411.608972][T29193] [ 2411.627895][T10407] Bluetooth: hci5: command 0x0419 tx timeout [ 2411.650857][T21387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2411.684825][T29193] memory: usage 10620kB, limit 0kB, failcnt 786 [ 2411.703598][T29193] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2411.707406][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2411.711104][T29193] Memory cgroup stats for /syz5: [ 2411.718381][T29193] anon 139264 [ 2411.718381][T29193] file 10448896 [ 2411.718381][T29193] kernel 253952 [ 2411.718381][T29193] kernel_stack 32768 [ 2411.718381][T29193] pagetables 77824 [ 2411.718381][T29193] sec_pagetables 0 [ 2411.718381][T29193] percpu 64 [ 2411.718381][T29193] sock 0 [ 2411.718381][T29193] vmalloc 0 [ 2411.718381][T29193] shmem 10448896 [ 2411.718381][T29193] zswap 0 [ 2411.718381][T29193] zswapped 0 [ 2411.718381][T29193] file_mapped 270336 [ 2411.718381][T29193] file_dirty 0 [ 2411.718381][T29193] file_writeback 0 [ 2411.718381][T29193] swapcached 0 [ 2411.718381][T29193] anon_thp 0 [ 2411.718381][T29193] file_thp 0 [ 2411.718381][T29193] shmem_thp 0 [ 2411.718381][T29193] inactive_anon 139264 [ 2411.718381][T29193] active_anon 10448896 [ 2411.718381][T29193] inactive_file 0 [ 2411.718381][T29193] active_file 0 [ 2411.718381][T29193] unevictable 0 [ 2411.718381][T29193] slab_reclaimable 43104 [ 2411.718381][T29193] slab_unreclaimable 73104 [ 2411.718381][T29193] slab 116208 [ 2411.758866][T21387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2411.933506][T21387] device bridge_slave_1 left promiscuous mode [ 2411.947727][T21387] bridge0: port 2(bridge_slave_1) entered disabled state [ 2411.949950][T29193] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=29192,uid=0 [ 2411.972060][T21387] device bridge_slave_0 left promiscuous mode [ 2411.987104][T21387] bridge0: port 1(bridge_slave_0) entered disabled state [ 2412.015468][T29193] Memory cgroup out of memory: Killed process 29193 (syz-executor.5) total-vm:56588kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2412.033300][T21387] device hsr_slave_0 left promiscuous mode [ 2412.041949][T21387] device hsr_slave_1 left promiscuous mode [ 2412.059452][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2412.076089][T21387] batman_adv: batadv0: Removing interface: batadv_slave_0 11:02:41 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x3c00, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:02:41 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb4}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:02:41 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2412.102986][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2412.137498][T21387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2412.163997][T21387] device bridge_slave_1 left promiscuous mode [ 2412.217795][T21387] bridge0: port 2(bridge_slave_1) entered disabled state [ 2412.225869][T28644] syz-executor.1 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=0 [ 2412.242690][T21387] device bridge_slave_0 left promiscuous mode [ 2412.257288][T21387] bridge0: port 1(bridge_slave_0) entered disabled state [ 2412.265260][T28644] CPU: 1 PID: 28644 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2412.275705][T28644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2412.285792][T28644] Call Trace: [ 2412.289089][T28644] [ 2412.292041][T28644] dump_stack_lvl+0xd1/0x138 [ 2412.296667][T28644] dump_header+0x10b/0x85f [ 2412.301114][T28644] oom_kill_process.cold+0x10/0x15 [ 2412.306249][T28644] out_of_memory+0x35c/0x14a0 [ 2412.310971][T28644] ? find_held_lock+0x2d/0x110 [ 2412.315775][T28644] ? oom_killer_disable+0x280/0x280 [ 2412.321012][T28644] ? find_held_lock+0x2d/0x110 [ 2412.325810][T28644] mem_cgroup_out_of_memory+0x206/0x270 [ 2412.331390][T28644] ? mem_cgroup_margin+0x130/0x130 [ 2412.336536][T28644] ? lock_downgrade+0x6e0/0x6e0 [ 2412.341431][T28644] try_charge_memcg+0xefb/0x12f0 [ 2412.346406][T28644] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2412.352419][T28644] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2412.358158][T28644] ? lock_downgrade+0x6e0/0x6e0 [ 2412.363037][T28644] ? lock_downgrade+0x6e0/0x6e0 [ 2412.367912][T28644] ? rcu_read_unlock+0x9/0x60 [ 2412.372634][T28644] obj_cgroup_charge+0x2af/0x5e0 [ 2412.377603][T28644] __kmem_cache_alloc_node+0xb2/0x430 [ 2412.383006][T28644] ? kvmalloc_node+0xa2/0x1a0 [ 2412.387716][T28644] ? kvmalloc_node+0xa2/0x1a0 [ 2412.392419][T28644] __kmalloc_node+0x4d/0xd0 [ 2412.396957][T28644] kvmalloc_node+0xa2/0x1a0 [ 2412.401500][T28644] alloc_fdtable+0xf4/0x2a0 [ 2412.406033][T28644] dup_fd+0x722/0xcb0 [ 2412.410067][T28644] copy_process+0x24ea/0x7520 [ 2412.414773][T28644] ? _raw_spin_unlock+0x28/0x40 [ 2412.419654][T28644] ? wp_page_reuse+0x197/0x570 [ 2412.424458][T28644] ? __cleanup_sighand+0xb0/0xb0 [ 2412.429420][T28644] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2412.434836][T28644] ? rwlock_bug.part.0+0x90/0x90 [ 2412.439803][T28644] ? lock_chain_count+0x20/0x20 [ 2412.444687][T28644] kernel_clone+0xeb/0x990 [ 2412.449132][T28644] ? create_io_thread+0xf0/0xf0 [ 2412.454040][T28644] ? find_held_lock+0x2d/0x110 [ 2412.458844][T28644] __do_sys_clone+0xba/0x100 [ 2412.463466][T28644] ? kernel_clone+0x990/0x990 [ 2412.468205][T28644] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2412.474175][T28644] do_syscall_64+0x39/0xb0 [ 2412.478614][T28644] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2412.484540][T28644] RIP: 0033:0x7f4cf2889dfb [ 2412.489578][T28644] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2412.509189][T28644] RSP: 002b:00007ffee37741e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2412.517622][T28644] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4cf2889dfb [ 2412.525611][T28644] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2412.533588][T28644] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556264400 [ 2412.541564][T28644] R10: 00005555562646d0 R11: 0000000000000246 R12: 0000000000000001 [ 2412.549550][T28644] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffee37742c0 [ 2412.557538][T28644] [ 2412.574854][T21387] device veth1_macvtap left promiscuous mode [ 2412.577554][T28644] memory: usage 10364kB, limit 0kB, failcnt 910 [ 2412.584989][T21387] device veth0_macvtap left promiscuous mode [ 2412.587279][T28644] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2412.598928][T21387] device veth1_vlan left promiscuous mode [ 2412.600101][T28644] Memory cgroup stats for /syz1: [ 2412.605757][T21387] device veth0_vlan left promiscuous mode [ 2412.605895][T28644] anon 40960 [ 2412.605895][T28644] file 10444800 [ 2412.605895][T28644] kernel 126976 [ 2412.605895][T28644] kernel_stack 32768 [ 2412.605895][T28644] pagetables 8192 [ 2412.605895][T28644] sec_pagetables 0 [ 2412.605895][T28644] percpu 0 [ 2412.605895][T28644] sock 0 [ 2412.605895][T28644] vmalloc 0 [ 2412.605895][T28644] shmem 10444800 [ 2412.605895][T28644] zswap 0 [ 2412.605895][T28644] zswapped 0 [ 2412.605895][T28644] file_mapped 376832 [ 2412.605895][T28644] file_dirty 0 [ 2412.605895][T28644] file_writeback 0 [ 2412.605895][T28644] swapcached 0 [ 2412.605895][T28644] anon_thp 0 [ 2412.605895][T28644] file_thp 0 [ 2412.605895][T28644] shmem_thp 0 [ 2412.605895][T28644] inactive_anon 40960 [ 2412.605895][T28644] active_anon 10444800 [ 2412.605895][T28644] inactive_file 0 [ 2412.605895][T28644] active_file 0 [ 2412.605895][T28644] unevictable 0 [ 2412.605895][T28644] slab_reclaimable 35856 [ 2412.605895][T28644] slab_unreclaimable 41200 [ 2412.605895][T28644] slab 77056 [ 2412.717511][T28644] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=28644,uid=0 [ 2412.734796][T28644] Memory cgroup out of memory: Killed process 28644 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2412.752352][T21387] device veth1_macvtap left promiscuous mode [ 2412.758727][T21387] device veth0_macvtap left promiscuous mode [ 2412.764776][T29074] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2412.775345][T21387] device veth1_vlan left promiscuous mode [ 2412.781319][T21387] device veth0_vlan left promiscuous mode [ 2412.785155][T29074] CPU: 1 PID: 29074 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2412.797481][T29074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2412.807528][T29074] Call Trace: [ 2412.810796][T29074] [ 2412.813717][T29074] dump_stack_lvl+0xd1/0x138 [ 2412.818309][T29074] dump_header+0x10b/0x85f [ 2412.822732][T29074] oom_kill_process.cold+0x10/0x15 [ 2412.827863][T29074] out_of_memory+0x35c/0x14a0 [ 2412.832601][T29074] ? oom_killer_disable+0x280/0x280 [ 2412.837809][T29074] ? find_held_lock+0x2d/0x110 [ 2412.842582][T29074] mem_cgroup_out_of_memory+0x206/0x270 [ 2412.848149][T29074] ? mem_cgroup_margin+0x130/0x130 [ 2412.853264][T29074] ? lock_downgrade+0x6e0/0x6e0 [ 2412.858123][T29074] try_charge_memcg+0xefb/0x12f0 [ 2412.863056][T29074] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2412.869027][T29074] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2412.874734][T29074] ? lock_downgrade+0x6e0/0x6e0 [ 2412.879580][T29074] ? lock_downgrade+0x6e0/0x6e0 [ 2412.884422][T29074] ? rcu_read_unlock+0x9/0x60 [ 2412.889102][T29074] obj_cgroup_charge+0x2af/0x5e0 [ 2412.894032][T29074] ? sk_prot_alloc+0x5f/0x290 [ 2412.898702][T29074] kmem_cache_alloc+0xb5/0x430 [ 2412.903454][T29074] ? inet_create+0x324/0xea0 [ 2412.908036][T29074] sk_prot_alloc+0x5f/0x290 [ 2412.912532][T29074] sk_alloc+0x3a/0x7a0 [ 2412.916612][T29074] inet_create+0x399/0xea0 [ 2412.921031][T29074] __sock_create+0x359/0x790 [ 2412.925620][T29074] __sys_socket+0x133/0x250 [ 2412.930141][T29074] ? __sys_socket_file+0x1f0/0x1f0 [ 2412.935295][T29074] __x64_sys_socket+0x73/0xb0 [ 2412.940003][T29074] do_syscall_64+0x39/0xb0 [ 2412.944416][T29074] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2412.950318][T29074] RIP: 0033:0x7f858588d747 [ 2412.954746][T29074] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2412.974382][T29074] RSP: 002b:00007ffebea3b1f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000029 [ 2412.982870][T29074] RAX: ffffffffffffffda RBX: 00007ffebea3b930 RCX: 00007f858588d747 [ 2412.990868][T29074] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 2412.998898][T29074] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffebea3b270 [ 2413.006903][T29074] R10: 0000000000000010 R11: 0000000000000206 R12: 0000000000000032 [ 2413.015064][T29074] R13: 000000000024ccb6 R14: 0000000000000014 R15: 00007ffebea3b970 [ 2413.023079][T29074] [ 2413.032787][T29074] memory: usage 10352kB, limit 0kB, failcnt 820 [ 2413.041180][T29074] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2413.049571][T29074] Memory cgroup stats for /syz5: [ 2413.049769][T29074] anon 45056 [ 2413.049769][T29074] file 10448896 [ 2413.049769][T29074] kernel 102400 [ 2413.049769][T29074] kernel_stack 0 [ 2413.049769][T29074] pagetables 8192 [ 2413.049769][T29074] sec_pagetables 0 [ 2413.049769][T29074] percpu 64 [ 2413.049769][T29074] sock 0 [ 2413.049769][T29074] vmalloc 0 [ 2413.049769][T29074] shmem 10448896 [ 2413.049769][T29074] zswap 0 [ 2413.049769][T29074] zswapped 0 [ 2413.049769][T29074] file_mapped 245760 [ 2413.049769][T29074] file_dirty 0 [ 2413.049769][T29074] file_writeback 0 [ 2413.049769][T29074] swapcached 0 [ 2413.049769][T29074] anon_thp 0 [ 2413.049769][T29074] file_thp 0 [ 2413.049769][T29074] shmem_thp 0 [ 2413.049769][T29074] inactive_anon 45056 [ 2413.049769][T29074] active_anon 10448896 [ 2413.049769][T29074] inactive_file 0 [ 2413.049769][T29074] active_file 0 [ 2413.049769][T29074] unevictable 0 [ 2413.049769][T29074] slab_reclaimable 37400 [ 2413.049769][T29074] slab_unreclaimable 44080 [ 2413.049769][T29074] slab 81480 [ 2413.156597][T29074] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=29074,uid=0 [ 2413.193769][T29074] Memory cgroup out of memory: Killed process 29074 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2413.259287][T10407] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2413.275233][T10407] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2413.287265][T10407] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2413.298285][T10407] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2413.305753][T10407] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2413.543030][T21387] team0 (unregistering): Port device team_slave_1 removed [ 2413.559022][T21387] team0 (unregistering): Port device team_slave_0 removed [ 2413.575509][T21387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2413.597014][T21387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2413.789231][T21387] bond0 (unregistering): Released all slaves [ 2413.891036][ T8419] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2413.901229][ T8419] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2413.909998][ T8419] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2413.923886][ T8419] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2413.931824][ T8419] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2413.939339][ T8419] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2413.992321][T10407] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2414.004247][T10407] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2414.015176][T10407] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2414.024819][T10407] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2414.032907][T10407] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2414.040535][T10407] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2414.104382][T21387] team0 (unregistering): Port device team_slave_1 removed [ 2414.118841][T21387] team0 (unregistering): Port device team_slave_0 removed [ 2414.133409][T21387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2414.146451][T21387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2414.213752][T21387] bond0 (unregistering): Released all slaves [ 2414.631226][T29212] chnl_net:caif_netlink_parms(): no params data found [ 2414.991996][T29212] bridge0: port 1(bridge_slave_0) entered blocking state [ 2414.999666][T29212] bridge0: port 1(bridge_slave_0) entered disabled state [ 2415.008309][T29212] device bridge_slave_0 entered promiscuous mode [ 2415.026178][T29212] bridge0: port 2(bridge_slave_1) entered blocking state [ 2415.051289][T29212] bridge0: port 2(bridge_slave_1) entered disabled state [ 2415.060041][T29212] device bridge_slave_1 entered promiscuous mode [ 2415.118148][T29212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2415.140828][T29218] chnl_net:caif_netlink_parms(): no params data found [ 2415.153065][T29212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2415.175949][T29216] chnl_net:caif_netlink_parms(): no params data found [ 2415.251826][T29212] team0: Port device team_slave_0 added [ 2415.319442][T29212] team0: Port device team_slave_1 added [ 2415.367213][T10407] Bluetooth: hci0: command 0x0409 tx timeout [ 2415.479271][T29212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2415.486276][T29212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2415.567356][T29212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2415.621468][T29212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2415.638180][T29212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2415.687250][T29212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2415.740853][T29218] bridge0: port 1(bridge_slave_0) entered blocking state [ 2415.759447][T29218] bridge0: port 1(bridge_slave_0) entered disabled state [ 2415.775104][T29218] device bridge_slave_0 entered promiscuous mode [ 2415.877317][T29218] bridge0: port 2(bridge_slave_1) entered blocking state [ 2415.884447][T29218] bridge0: port 2(bridge_slave_1) entered disabled state [ 2415.904999][T29218] device bridge_slave_1 entered promiscuous mode [ 2415.976523][T29216] bridge0: port 1(bridge_slave_0) entered blocking state [ 2415.986059][T29216] bridge0: port 1(bridge_slave_0) entered disabled state [ 2416.007285][T10407] Bluetooth: hci1: command 0x0409 tx timeout [ 2416.018372][T29216] device bridge_slave_0 entered promiscuous mode [ 2416.060388][T29212] device hsr_slave_0 entered promiscuous mode [ 2416.067728][T29212] device hsr_slave_1 entered promiscuous mode [ 2416.083609][T29212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2416.092321][T10407] Bluetooth: hci2: command 0x0409 tx timeout [ 2416.100747][T29212] Cannot create hsr debugfs directory [ 2416.119615][T29218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2416.128878][T29216] bridge0: port 2(bridge_slave_1) entered blocking state [ 2416.135982][T29216] bridge0: port 2(bridge_slave_1) entered disabled state [ 2416.154519][T29216] device bridge_slave_1 entered promiscuous mode [ 2416.176789][T29218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2416.274286][T29216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2416.305398][T29218] team0: Port device team_slave_0 added [ 2416.320083][T29216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2416.341275][T29218] team0: Port device team_slave_1 added [ 2416.508439][T29218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2416.515729][T29218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2416.559377][T29218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2416.592130][T29216] team0: Port device team_slave_0 added [ 2416.612351][T29216] team0: Port device team_slave_1 added [ 2416.628011][T29218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2416.635000][T29218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2416.705410][T29218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2417.038476][T29216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2417.045471][T29216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2417.140329][T29216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2417.217549][T29216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2417.224551][T29216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2417.317063][T29216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2417.400367][T29218] device hsr_slave_0 entered promiscuous mode [ 2417.447223][ T8419] Bluetooth: hci0: command 0x041b tx timeout [ 2417.447436][T29218] device hsr_slave_1 entered promiscuous mode [ 2417.497104][T29218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2417.504798][T29218] Cannot create hsr debugfs directory [ 2417.651727][T29216] device hsr_slave_0 entered promiscuous mode [ 2417.675833][T29216] device hsr_slave_1 entered promiscuous mode [ 2417.694125][T29216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2417.705137][T29216] Cannot create hsr debugfs directory [ 2417.897979][T21387] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2418.027801][T21387] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2418.087154][ T8419] Bluetooth: hci1: command 0x041b tx timeout [ 2418.151125][T21387] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2418.176963][ T8419] Bluetooth: hci2: command 0x041b tx timeout [ 2418.201168][T29212] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2418.227539][T21387] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2418.281656][T29212] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2418.356073][T29212] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2418.450478][T29212] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2418.788154][T21387] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2418.894624][T21387] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2418.966076][T29212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2419.038113][T21387] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2419.085773][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2419.106532][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2419.130949][T29212] 8021q: adding VLAN 0 to HW filter on device team0 [ 2419.195414][T21387] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2419.270839][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2419.288066][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2419.307475][T14545] bridge0: port 1(bridge_slave_0) entered blocking state [ 2419.314601][T14545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2419.360269][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2419.385561][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2419.404649][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2419.414979][T14545] bridge0: port 2(bridge_slave_1) entered blocking state [ 2419.422145][T14545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2419.439342][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2419.517882][T29216] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2419.537085][ T8419] Bluetooth: hci0: command 0x040f tx timeout [ 2419.558765][T29218] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2419.569555][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2419.579061][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2419.589289][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2419.651695][T29218] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2419.676726][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2419.684939][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2419.695764][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2419.716609][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2419.725627][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2419.788972][T29216] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2419.837572][T29212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2419.853788][T29218] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2419.958938][T29216] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2419.996296][T29218] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2420.061827][T29216] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2420.167050][ T8419] Bluetooth: hci1: command 0x040f tx timeout [ 2420.246986][ T8419] Bluetooth: hci2: command 0x040f tx timeout [ 2420.388255][T29218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2420.495417][T29218] 8021q: adding VLAN 0 to HW filter on device team0 [ 2420.503617][T29216] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2420.535125][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2420.548186][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2420.598993][T29216] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2420.620154][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2420.630667][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2420.640430][T29323] bridge0: port 1(bridge_slave_0) entered blocking state [ 2420.647596][T29323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2420.656080][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2420.665583][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2420.674507][T29323] bridge0: port 2(bridge_slave_1) entered blocking state [ 2420.681691][T29323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2420.690150][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2420.699404][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2420.708835][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2420.722458][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2420.734865][T29216] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2420.755299][T29216] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2420.804280][T29212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2420.815935][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2420.824990][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2420.833461][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2420.846728][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2420.917670][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2420.926168][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2420.944987][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2420.955537][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2420.978821][T29218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2421.017584][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2421.026409][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2421.143050][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2421.157817][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2421.178336][T29212] device veth0_vlan entered promiscuous mode [ 2421.242696][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2421.251037][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2421.276329][T29212] device veth1_vlan entered promiscuous mode [ 2421.471182][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2421.484627][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2421.493766][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2421.503242][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2421.516323][T29212] device veth0_macvtap entered promiscuous mode [ 2421.542212][T29216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2421.581915][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2421.596660][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2421.607449][ T8419] Bluetooth: hci0: command 0x0419 tx timeout [ 2421.614040][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2421.626468][T29212] device veth1_macvtap entered promiscuous mode [ 2421.645599][T29216] 8021q: adding VLAN 0 to HW filter on device team0 [ 2421.667537][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2421.675682][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2421.684575][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2421.692563][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2421.701323][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2421.710011][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 2421.717174][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2421.740243][T29218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2421.765998][T29212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2421.777310][T29212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2421.789211][T29212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2421.799893][T29212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2421.810318][T29212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2421.821001][T29212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2421.831132][T29212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2421.842528][T29212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2421.856216][T29212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2421.874133][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2421.891870][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2421.901375][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2421.910330][T14545] bridge0: port 2(bridge_slave_1) entered blocking state [ 2421.917498][T14545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2421.925193][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2421.934141][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2421.943784][T14545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2421.957760][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2421.971959][T29212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2421.986115][T29212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2421.996029][T29212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2422.006909][T29212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2422.016742][T29212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2422.030168][T29212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2422.040260][T29212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2422.051310][T29212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2422.062977][T29212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2422.075276][T29212] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2422.084645][T29212] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2422.107219][T29212] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2422.115975][T29212] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2422.155267][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2422.164077][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2422.173586][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2422.221343][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2422.232791][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2422.242821][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2422.247260][ T8419] Bluetooth: hci1: command 0x0419 tx timeout [ 2422.252572][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2422.266290][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2422.275030][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2422.324859][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2422.333105][ T8419] Bluetooth: hci2: command 0x0419 tx timeout [ 2422.341620][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2422.353388][T29216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2422.383178][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2422.391672][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2422.408462][T29218] device veth0_vlan entered promiscuous mode [ 2422.436715][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2422.447815][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2422.461663][T29218] device veth1_vlan entered promiscuous mode [ 2422.490577][ T6761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2422.523471][ T6761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2422.582500][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2422.608031][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2422.616797][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2422.650847][ T5247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2422.660840][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2422.672161][ T5247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2422.677874][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2422.702679][T29218] device veth0_macvtap entered promiscuous mode [ 2422.737720][T29218] device veth1_macvtap entered promiscuous mode [ 2422.748252][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2422.756295][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2422.771257][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2422.829508][T29218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2422.842718][T29218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2422.857824][T29218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2422.868396][T29218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2422.878658][T29218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2422.897641][T29218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2422.908084][T29218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2422.918777][T29218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2422.929160][T29218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2422.939846][T29218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2422.956566][T29218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2422.975947][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2423.003706][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2423.034243][T29218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2423.046016][T29218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2423.056616][T29218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2423.080114][T29218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2423.095567][T29218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2423.106561][T29218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2423.126256][T29218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2423.147169][T29218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2423.167279][T29218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2423.185857][T29218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2423.208853][T29218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2423.241953][T21387] device hsr_slave_0 left promiscuous mode [ 2423.251133][T21387] device hsr_slave_1 left promiscuous mode [ 2423.257962][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2423.265629][T21387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2423.277239][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2423.284673][T21387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2423.295653][T21387] device bridge_slave_1 left promiscuous mode [ 2423.311370][T21387] bridge0: port 2(bridge_slave_1) entered disabled state [ 2423.324519][T21387] device bridge_slave_0 left promiscuous mode [ 2423.337918][T21387] bridge0: port 1(bridge_slave_0) entered disabled state [ 2423.360517][T21387] device hsr_slave_0 left promiscuous mode [ 2423.369118][T21387] device hsr_slave_1 left promiscuous mode [ 2423.378269][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2423.385710][T21387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2423.404676][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2423.414270][T21387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2423.424261][T21387] device bridge_slave_1 left promiscuous mode [ 2423.430928][T21387] bridge0: port 2(bridge_slave_1) entered disabled state [ 2423.443886][T21387] device bridge_slave_0 left promiscuous mode [ 2423.452946][T21387] bridge0: port 1(bridge_slave_0) entered disabled state [ 2423.480289][T21387] device hsr_slave_0 left promiscuous mode [ 2423.486822][T21387] device hsr_slave_1 left promiscuous mode [ 2423.502709][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2423.514168][T21387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2423.543689][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2423.555133][T21387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2423.574234][T21387] device bridge_slave_1 left promiscuous mode [ 2423.584734][T21387] bridge0: port 2(bridge_slave_1) entered disabled state [ 2423.603001][T21387] device bridge_slave_0 left promiscuous mode [ 2423.616573][T21387] bridge0: port 1(bridge_slave_0) entered disabled state [ 2423.652667][T21387] device veth1_macvtap left promiscuous mode [ 2423.658944][T21387] device veth0_macvtap left promiscuous mode [ 2423.665083][T21387] device veth1_vlan left promiscuous mode [ 2423.671137][T21387] device veth0_vlan left promiscuous mode [ 2423.679022][T21387] device veth1_macvtap left promiscuous mode [ 2423.685185][T21387] device veth0_macvtap left promiscuous mode [ 2423.692133][T21387] device veth1_vlan left promiscuous mode [ 2423.698104][T21387] device veth0_vlan left promiscuous mode [ 2423.706054][T21387] device veth1_macvtap left promiscuous mode [ 2423.712434][T21387] device veth0_macvtap left promiscuous mode [ 2423.718923][T21387] device veth1_vlan left promiscuous mode [ 2423.724796][T21387] device veth0_vlan left promiscuous mode [ 2424.105895][T21387] team0 (unregistering): Port device team_slave_1 removed [ 2424.121447][T21387] team0 (unregistering): Port device team_slave_0 removed [ 2424.135632][T21387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2424.150552][T21387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2424.214406][T21387] bond0 (unregistering): Released all slaves [ 2424.385074][T21387] team0 (unregistering): Port device team_slave_1 removed [ 2424.400925][T21387] team0 (unregistering): Port device team_slave_0 removed [ 2424.415250][T21387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2424.432509][T21387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2424.495712][T21387] bond0 (unregistering): Released all slaves [ 2424.630112][T21387] team0 (unregistering): Port device team_slave_1 removed [ 2424.644912][T21387] team0 (unregistering): Port device team_slave_0 removed [ 2424.658564][T21387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2424.674181][T21387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2424.741174][T21387] bond0 (unregistering): Released all slaves [ 2424.806064][T29216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2424.836685][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2424.845644][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2424.899284][T29218] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2424.910900][T29218] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2424.921433][T29218] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2424.939408][T29218] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2425.182055][ T8442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2425.206976][ T8442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2425.215117][T13808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2425.238306][T13808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2425.254514][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2425.274996][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2425.296547][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2425.307734][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2425.433163][T29392] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2425.467152][T29392] CPU: 1 PID: 29392 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2425.477630][T29392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2425.487718][T29392] Call Trace: [ 2425.491026][T29392] [ 2425.493983][T29392] dump_stack_lvl+0xd1/0x138 [ 2425.498621][T29392] dump_header+0x10b/0x85f [ 2425.503077][T29392] oom_kill_process.cold+0x10/0x15 [ 2425.508225][T29392] out_of_memory+0x35c/0x14a0 [ 2425.512961][T29392] ? oom_killer_disable+0x280/0x280 [ 2425.518222][T29392] mem_cgroup_out_of_memory+0x206/0x270 [ 2425.523821][T29392] ? mem_cgroup_margin+0x130/0x130 [ 2425.529001][T29392] memory_max_write+0x2f9/0x3c0 [ 2425.533880][T29392] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2425.539964][T29392] ? lock_release+0x810/0x810 [ 2425.544652][T29392] cgroup_file_write+0x1e2/0x770 [ 2425.549609][T29392] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2425.555686][T29392] ? kill_css+0x370/0x370 [ 2425.560044][T29392] ? __virt_addr_valid+0x61/0x2e0 [ 2425.565100][T29392] ? kill_css+0x370/0x370 [ 2425.569442][T29392] kernfs_fop_write_iter+0x3f1/0x600 [ 2425.574755][T29392] vfs_write+0x9ed/0xdd0 [ 2425.579015][T29392] ? kernel_write+0x630/0x630 [ 2425.583711][T29392] ? __fget_files+0x26a/0x440 [ 2425.588411][T29392] ksys_write+0x12b/0x250 [ 2425.592750][T29392] ? __ia32_sys_read+0xb0/0xb0 [ 2425.597526][T29392] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2425.603443][T29392] do_syscall_64+0x39/0xb0 [ 2425.607878][T29392] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2425.613784][T29392] RIP: 0033:0x7f691008c0c9 [ 2425.618215][T29392] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2425.637853][T29392] RSP: 002b:00007f690ebfe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2425.646279][T29392] RAX: ffffffffffffffda RBX: 00007f69101abf80 RCX: 00007f691008c0c9 [ 2425.654262][T29392] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2425.662256][T29392] RBP: 00007f69100e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2425.670232][T29392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2425.678211][T29392] R13: 00007ffe86e04c7f R14: 00007f690ebfe300 R15: 0000000000022000 [ 2425.686214][T29392] [ 2425.714928][T29392] memory: usage 10620kB, limit 0kB, failcnt 589 [ 2425.722098][T29392] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2425.737958][T29392] Memory cgroup stats for /syz3: [ 2425.738165][T29392] anon 110592 [ 2425.738165][T29392] file 10436608 [ 2425.738165][T29392] kernel 290816 [ 2425.738165][T29392] kernel_stack 65536 [ 2425.738165][T29392] pagetables 81920 [ 2425.738165][T29392] sec_pagetables 0 [ 2425.738165][T29392] percpu 64 [ 2425.738165][T29392] sock 0 [ 2425.738165][T29392] vmalloc 0 [ 2425.738165][T29392] shmem 10436608 [ 2425.738165][T29392] zswap 0 [ 2425.738165][T29392] zswapped 0 [ 2425.738165][T29392] file_mapped 192512 [ 2425.738165][T29392] file_dirty 0 [ 2425.738165][T29392] file_writeback 0 [ 2425.738165][T29392] swapcached 0 [ 2425.738165][T29392] anon_thp 0 [ 2425.738165][T29392] file_thp 0 [ 2425.738165][T29392] shmem_thp 0 [ 2425.738165][T29392] inactive_anon 110592 [ 2425.738165][T29392] active_anon 10436608 [ 2425.738165][T29392] inactive_file 0 [ 2425.738165][T29392] active_file 0 [ 2425.738165][T29392] unevictable 0 [ 2425.738165][T29392] slab_reclaimable 44200 [ 2425.738165][T29392] slab_unreclaimable 72456 [ 2425.738165][T29392] slab 116656 [ 2425.738253][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready 11:02:55 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:55 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb5}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2425.743270][T29392] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=29390,uid=0 [ 2425.867562][T29392] Memory cgroup out of memory: Killed process 29390 (syz-executor.3) total-vm:54540kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2425.924247][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2425.962105][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2425.978666][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2426.007885][T29216] device veth0_vlan entered promiscuous mode [ 2426.020926][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2426.045288][T29218] syz-executor.3 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=0 [ 2426.065210][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2426.079092][T29216] device veth1_vlan entered promiscuous mode [ 2426.091636][T29218] CPU: 0 PID: 29218 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2426.102097][T29218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2426.112179][T29218] Call Trace: [ 2426.115466][T29218] [ 2426.118398][T29218] dump_stack_lvl+0xd1/0x138 [ 2426.123003][T29218] dump_header+0x10b/0x85f [ 2426.127429][T29218] oom_kill_process.cold+0x10/0x15 [ 2426.132545][T29218] out_of_memory+0x35c/0x14a0 [ 2426.137260][T29218] ? find_held_lock+0x2d/0x110 [ 2426.142034][T29218] ? oom_killer_disable+0x280/0x280 [ 2426.147245][T29218] ? find_held_lock+0x2d/0x110 [ 2426.152029][T29218] mem_cgroup_out_of_memory+0x206/0x270 [ 2426.157614][T29218] ? mem_cgroup_margin+0x130/0x130 [ 2426.162737][T29218] ? lock_downgrade+0x6e0/0x6e0 [ 2426.167605][T29218] try_charge_memcg+0xefb/0x12f0 [ 2426.172557][T29218] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2426.178565][T29218] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2426.184292][T29218] ? lock_downgrade+0x6e0/0x6e0 [ 2426.189155][T29218] ? lock_downgrade+0x6e0/0x6e0 [ 2426.194014][T29218] ? rcu_read_unlock+0x9/0x60 [ 2426.198709][T29218] obj_cgroup_charge+0x2af/0x5e0 [ 2426.203656][T29218] __kmem_cache_alloc_node+0xb2/0x430 [ 2426.209026][T29218] ? kvmalloc_node+0xa2/0x1a0 [ 2426.213721][T29218] ? kvmalloc_node+0xa2/0x1a0 [ 2426.218402][T29218] __kmalloc_node+0x4d/0xd0 [ 2426.222919][T29218] kvmalloc_node+0xa2/0x1a0 [ 2426.227431][T29218] xt_alloc_table_info+0x40/0xa0 [ 2426.232381][T29218] do_ip6t_set_ctl+0x514/0xb30 [ 2426.237147][T29218] ? trace_contention_end+0x153/0x1e0 [ 2426.242529][T29218] ? __mutex_lock+0x231/0x1360 [ 2426.247297][T29218] ? compat_do_replace.constprop.0+0x410/0x410 [ 2426.253459][T29218] ? find_held_lock+0x2d/0x110 [ 2426.258249][T29218] ? wait_for_completion_io_timeout+0x20/0x20 [ 2426.264331][T29218] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2426.270328][T29218] nf_setsockopt+0x87/0xe0 [ 2426.274751][T29218] ipv6_setsockopt+0x12b/0x190 [ 2426.279520][T29218] tcp_setsockopt+0x9f/0x100 [ 2426.284123][T29218] ? sock_common_recvmsg+0x190/0x190 [ 2426.289408][T29218] __sys_setsockopt+0x2c6/0x5b0 [ 2426.294269][T29218] ? __ia32_sys_recv+0x100/0x100 [ 2426.299217][T29218] ? fd_install+0x201/0x650 [ 2426.303735][T29218] __x64_sys_setsockopt+0xbe/0x160 [ 2426.308862][T29218] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2426.314758][T29218] do_syscall_64+0x39/0xb0 [ 2426.319184][T29218] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2426.325083][T29218] RIP: 0033:0x7f691008d71a [ 2426.329497][T29218] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2426.349103][T29218] RSP: 002b:00007ffe86e047e8 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 2426.357518][T29218] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 00007f691008d71a [ 2426.365487][T29218] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2426.373456][T29218] RBP: 00007ffe86e04810 R08: 00000000000003b8 R09: ffffffffff000000 [ 2426.381437][T29218] R10: 00007f6910183bc0 R11: 0000000000000202 R12: 00007ffe86e04870 [ 2426.389405][T29218] R13: 0000000000000003 R14: 00007ffe86e0480c R15: 00007f6910183b60 [ 2426.397387][T29218] [ 2426.430001][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2426.447609][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2426.451291][T29218] memory: usage 10344kB, limit 0kB, failcnt 638 [ 2426.459292][T29216] device veth0_macvtap entered promiscuous mode [ 2426.463247][T29218] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2426.477065][T29218] Memory cgroup stats for /syz3: [ 2426.477255][T29218] anon 40960 [ 2426.477255][T29218] file 10436608 [ 2426.477255][T29218] kernel 106496 [ 2426.477255][T29218] kernel_stack 0 [ 2426.477255][T29218] pagetables 8192 [ 2426.477255][T29218] sec_pagetables 0 [ 2426.477255][T29218] percpu 64 [ 2426.477255][T29218] sock 0 [ 2426.477255][T29218] vmalloc 0 [ 2426.477255][T29218] shmem 10436608 [ 2426.477255][T29218] zswap 0 [ 2426.477255][T29218] zswapped 0 [ 2426.477255][T29218] file_mapped 172032 [ 2426.477255][T29218] file_dirty 0 [ 2426.477255][T29218] file_writeback 0 [ 2426.477255][T29218] swapcached 0 [ 2426.477255][T29218] anon_thp 0 [ 2426.477255][T29218] file_thp 0 [ 2426.477255][T29218] shmem_thp 0 [ 2426.477255][T29218] inactive_anon 40960 [ 2426.477255][T29218] active_anon 10436608 [ 2426.477255][T29218] inactive_file 0 [ 2426.477255][T29218] active_file 0 [ 2426.477255][T29218] unevictable 0 [ 2426.477255][T29218] slab_reclaimable 37840 [ 2426.477255][T29218] slab_unreclaimable 50592 [ 2426.477255][T29218] slab 88432 [ 2426.488097][T29216] device veth1_macvtap entered promiscuous mode [ 2426.605862][T29218] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=29218,uid=0 [ 2426.628375][T29216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2426.639353][T29216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2426.650090][T29216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2426.662253][T29216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2426.672442][T29216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2426.683178][T29216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2426.696614][T29216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2426.707748][T29216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2426.719253][T29216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2426.731095][T29216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2426.736834][T29218] Memory cgroup out of memory: Killed process 29218 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2426.756894][T29216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2426.776898][T29216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2426.793922][T29216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2426.807919][T29216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2426.829922][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2426.845749][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2426.854796][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2426.871465][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2426.883513][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2426.907726][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2426.959446][T29216] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2426.978014][T29216] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2426.986755][T29216] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2427.001302][T29216] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2427.098112][ T8442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2427.106185][ T8442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2427.152410][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2427.187658][ T5247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2427.204444][ T5247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2427.215632][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2427.326815][T29417] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2427.345863][T29417] CPU: 1 PID: 29417 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2427.356325][T29417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2427.366424][T29417] Call Trace: [ 2427.369721][T29417] [ 2427.372672][T29417] dump_stack_lvl+0xd1/0x138 [ 2427.377303][T29417] dump_header+0x10b/0x85f [ 2427.381752][T29417] oom_kill_process.cold+0x10/0x15 [ 2427.386898][T29417] out_of_memory+0x35c/0x14a0 [ 2427.391629][T29417] ? oom_killer_disable+0x280/0x280 [ 2427.396878][T29417] mem_cgroup_out_of_memory+0x206/0x270 [ 2427.402466][T29417] ? mem_cgroup_margin+0x130/0x130 [ 2427.407648][T29417] memory_max_write+0x2f9/0x3c0 [ 2427.412532][T29417] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2427.418633][T29417] ? lock_release+0x810/0x810 [ 2427.423365][T29417] cgroup_file_write+0x1e2/0x770 [ 2427.428336][T29417] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2427.434430][T29417] ? kill_css+0x370/0x370 [ 2427.438789][T29417] ? __virt_addr_valid+0x61/0x2e0 [ 2427.443860][T29417] ? kill_css+0x370/0x370 [ 2427.448223][T29417] kernfs_fop_write_iter+0x3f1/0x600 [ 2427.453557][T29417] vfs_write+0x9ed/0xdd0 [ 2427.457835][T29417] ? kernel_write+0x630/0x630 [ 2427.462533][T29417] ? __fget_files+0x26a/0x440 [ 2427.467234][T29417] ksys_write+0x12b/0x250 [ 2427.471575][T29417] ? __ia32_sys_read+0xb0/0xb0 [ 2427.476350][T29417] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2427.482264][T29417] do_syscall_64+0x39/0xb0 [ 2427.486702][T29417] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2427.492606][T29417] RIP: 0033:0x7fa9d108c0c9 [ 2427.497028][T29417] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2427.516642][T29417] RSP: 002b:00007fa9d1da1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2427.525065][T29417] RAX: ffffffffffffffda RBX: 00007fa9d11abf80 RCX: 00007fa9d108c0c9 [ 2427.533042][T29417] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2427.541018][T29417] RBP: 00007fa9d10e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2427.548997][T29417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2427.556990][T29417] R13: 00007ffc782db54f R14: 00007fa9d1da1300 R15: 0000000000022000 [ 2427.565004][T29417] [ 2427.588222][T29417] memory: usage 10644kB, limit 0kB, failcnt 1048 [ 2427.594729][T29417] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2427.607813][T29417] Memory cgroup stats for /syz4: [ 2427.608031][T29417] anon 114688 [ 2427.608031][T29417] file 10448896 [ 2427.608031][T29417] kernel 323584 [ 2427.608031][T29417] kernel_stack 65536 [ 2427.608031][T29417] pagetables 77824 [ 2427.608031][T29417] sec_pagetables 0 [ 2427.608031][T29417] percpu 64 [ 2427.608031][T29417] sock 0 [ 2427.608031][T29417] vmalloc 0 [ 2427.608031][T29417] shmem 10448896 [ 2427.608031][T29417] zswap 0 [ 2427.608031][T29417] zswapped 0 [ 2427.608031][T29417] file_mapped 335872 [ 2427.608031][T29417] file_dirty 0 [ 2427.608031][T29417] file_writeback 0 [ 2427.608031][T29417] swapcached 0 [ 2427.608031][T29417] anon_thp 0 [ 2427.608031][T29417] file_thp 0 [ 2427.608031][T29417] shmem_thp 0 [ 2427.608031][T29417] inactive_anon 114688 [ 2427.608031][T29417] active_anon 10448896 [ 2427.608031][T29417] inactive_file 0 [ 2427.608031][T29417] active_file 0 [ 2427.608031][T29417] unevictable 0 [ 2427.608031][T29417] slab_reclaimable 51264 [ 2427.608031][T29417] slab_unreclaimable 101112 [ 2427.608031][T29417] slab 152376 [ 2427.717983][T29417] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=29416,uid=0 [ 2427.739900][T29417] Memory cgroup out of memory: Killed process 29416 (syz-executor.4) total-vm:54540kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 11:02:57 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x3c00, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:02:57 executing program 4: perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(r3, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r4, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:57 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r4, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:57 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xbb}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:02:57 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:57 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:02:57 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc2}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2427.899566][T29216] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2427.956974][T29216] CPU: 0 PID: 29216 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2427.967455][T29216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2427.977537][T29216] Call Trace: [ 2427.980840][T29216] [ 2427.983820][T29216] dump_stack_lvl+0xd1/0x138 [ 2427.988461][T29216] dump_header+0x10b/0x85f [ 2427.992915][T29216] oom_kill_process.cold+0x10/0x15 [ 2427.998057][T29216] out_of_memory+0x35c/0x14a0 [ 2428.002777][T29216] ? find_held_lock+0x2d/0x110 [ 2428.007584][T29216] ? oom_killer_disable+0x280/0x280 [ 2428.012829][T29216] ? find_held_lock+0x2d/0x110 [ 2428.017635][T29216] mem_cgroup_out_of_memory+0x206/0x270 [ 2428.023224][T29216] ? mem_cgroup_margin+0x130/0x130 [ 2428.028370][T29216] ? lock_downgrade+0x6e0/0x6e0 [ 2428.033273][T29216] try_charge_memcg+0xefb/0x12f0 [ 2428.038249][T29216] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2428.044262][T29216] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2428.050010][T29216] ? lock_downgrade+0x6e0/0x6e0 [ 2428.054921][T29216] obj_cgroup_charge+0x2af/0x5e0 [ 2428.059901][T29216] kmem_cache_alloc_lru+0x145/0x760 [ 2428.065124][T29216] ? __d_alloc+0x32/0x980 [ 2428.069490][T29216] __d_alloc+0x32/0x980 [ 2428.073685][T29216] d_alloc+0x4e/0x240 [ 2428.077703][T29216] __lookup_hash+0xc8/0x180 [ 2428.082247][T29216] filename_create+0x1d6/0x4a0 [ 2428.087050][T29216] ? filename_parentat+0x5a0/0x5a0 [ 2428.092197][T29216] ? lock_downgrade+0x6e0/0x6e0 [ 2428.097085][T29216] ? __virt_addr_valid+0x61/0x2e0 [ 2428.102144][T29216] ? __phys_addr+0xc8/0x140 [ 2428.106692][T29216] do_mkdirat+0x9d/0x2f0 [ 2428.110978][T29216] ? __ia32_sys_mknod+0xb0/0xb0 [ 2428.115882][T29216] ? getname_flags.part.0+0x1dd/0x4f0 [ 2428.121299][T29216] __x64_sys_mkdirat+0x119/0x170 [ 2428.126281][T29216] do_syscall_64+0x39/0xb0 [ 2428.130746][T29216] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2428.136677][T29216] RIP: 0033:0x7fa9d108b0e7 [ 2428.141116][T29216] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2428.160752][T29216] RSP: 002b:00007ffc782db7a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000102 [ 2428.169199][T29216] RAX: ffffffffffffffda RBX: 00007ffc782db830 RCX: 00007fa9d108b0e7 [ 2428.177201][T29216] RDX: 00000000000001ff RSI: 00007ffc782db830 RDI: 00000000ffffff9c [ 2428.185228][T29216] RBP: 00007ffc782db80c R08: 0000000000000000 R09: 0000000000000003 [ 2428.193223][T29216] R10: 00007ffc782db547 R11: 0000000000000202 R12: 0000000000000032 [ 2428.201217][T29216] R13: 000000000025097a R14: 0000000000000013 R15: 00007ffc782db870 [ 2428.209234][T29216] 11:02:58 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc3}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:02:58 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:02:58 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc5}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:02:58 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xcb}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:02:58 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd1}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2428.897145][T29216] memory: usage 10376kB, limit 0kB, failcnt 1067 [ 2428.925126][T29216] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2428.945462][T29216] Memory cgroup stats for /syz4: [ 2428.945651][T29216] anon 40960 [ 2428.945651][T29216] file 10448896 [ 2428.945651][T29216] kernel 135168 [ 2428.945651][T29216] kernel_stack 0 [ 2428.945651][T29216] pagetables 8192 [ 2428.945651][T29216] sec_pagetables 0 [ 2428.945651][T29216] percpu 64 [ 2428.945651][T29216] sock 0 [ 2428.945651][T29216] vmalloc 0 [ 2428.945651][T29216] shmem 10448896 [ 2428.945651][T29216] zswap 0 [ 2428.945651][T29216] zswapped 0 [ 2428.945651][T29216] file_mapped 307200 [ 2428.945651][T29216] file_dirty 0 [ 2428.945651][T29216] file_writeback 0 [ 2428.945651][T29216] swapcached 0 [ 2428.945651][T29216] anon_thp 0 [ 2428.945651][T29216] file_thp 0 [ 2428.945651][T29216] shmem_thp 0 [ 2428.945651][T29216] inactive_anon 40960 [ 2428.945651][T29216] active_anon 10448896 [ 2428.945651][T29216] inactive_file 0 [ 2428.945651][T29216] active_file 0 [ 2428.945651][T29216] unevictable 0 [ 2428.945651][T29216] slab_reclaimable 41824 [ 2428.945651][T29216] slab_unreclaimable 70792 [ 2428.945651][T29216] slab 112616 [ 2429.242267][T29216] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=29216,uid=0 [ 2429.289935][T29216] Memory cgroup out of memory: Killed process 29216 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2429.352748][T29212] syz-executor.2 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 2429.377067][T29212] CPU: 0 PID: 29212 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2429.387553][T29212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2429.397631][T29212] Call Trace: [ 2429.400938][T29212] [ 2429.403894][T29212] dump_stack_lvl+0xd1/0x138 [ 2429.408527][T29212] dump_header+0x10b/0x85f [ 2429.412975][T29212] oom_kill_process.cold+0x10/0x15 [ 2429.418119][T29212] out_of_memory+0x35c/0x14a0 [ 2429.422847][T29212] ? oom_killer_disable+0x280/0x280 [ 2429.428095][T29212] ? find_held_lock+0x2d/0x110 [ 2429.432904][T29212] mem_cgroup_out_of_memory+0x206/0x270 [ 2429.438498][T29212] ? mem_cgroup_margin+0x130/0x130 [ 2429.443648][T29212] ? lock_downgrade+0x6e0/0x6e0 [ 2429.448549][T29212] try_charge_memcg+0xefb/0x12f0 [ 2429.453526][T29212] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2429.459533][T29212] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2429.465292][T29212] ? lock_downgrade+0x6e0/0x6e0 [ 2429.470203][T29212] obj_cgroup_charge+0x2af/0x5e0 [ 2429.475168][T29212] kmem_cache_alloc_lru+0x145/0x760 [ 2429.480397][T29212] ? ext4_alloc_inode+0x28/0x680 [ 2429.485352][T29212] ? ext4_free_in_core_inode+0x70/0x70 [ 2429.490914][T29212] ext4_alloc_inode+0x28/0x680 [ 2429.495687][T29212] ? ext4_free_in_core_inode+0x70/0x70 [ 2429.501155][T29212] alloc_inode+0x61/0x230 [ 2429.505502][T29212] iget_locked+0x1bb/0x700 [ 2429.509941][T29212] __ext4_iget+0x3af/0x4230 [ 2429.514472][T29212] ? ext4_get_projid+0x190/0x190 [ 2429.519424][T29212] ? ext4_fname_prepare_lookup+0x163/0x200 [ 2429.525241][T29212] ? ext4_fname_setup_filename+0x110/0x110 [ 2429.531083][T29212] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2429.536670][T29212] ext4_lookup+0x387/0x700 [ 2429.541098][T29212] ? ext4_resetent+0x2d0/0x2d0 [ 2429.545912][T29212] __lookup_slow+0x24c/0x460 [ 2429.550518][T29212] ? __lookup_hash+0x180/0x180 [ 2429.555300][T29212] ? snd_usb_parse_audio_format.cold+0x4f7/0x534 [ 2429.561667][T29212] ? snd_usb_parse_audio_format.cold+0x4f7/0x534 [ 2429.568904][T29212] ? lookup_fast+0x14e/0x520 [ 2429.573512][T29212] walk_component+0x33f/0x5a0 [ 2429.578206][T29212] path_lookupat+0x1ba/0x840 [ 2429.582833][T29212] filename_lookup+0x1d2/0x590 [ 2429.587635][T29212] ? may_linkat+0x500/0x500 [ 2429.592183][T29212] ? __might_fault+0xd9/0x180 [ 2429.596900][T29212] ? __phys_addr_symbol+0x30/0x70 [ 2429.601945][T29212] ? __check_object_size+0x2e2/0x5a0 [ 2429.607350][T29212] ? strncpy_from_user+0x28b/0x3c0 [ 2429.612484][T29212] ? getname_flags.part.0+0x1dd/0x4f0 [ 2429.617881][T29212] user_path_at_empty+0x46/0x60 [ 2429.622756][T29212] __x64_sys_umount+0xfc/0x190 [ 2429.627533][T29212] ? path_umount+0x10b0/0x10b0 [ 2429.632319][T29212] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2429.638313][T29212] do_syscall_64+0x39/0xb0 [ 2429.642753][T29212] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2429.648742][T29212] RIP: 0033:0x7f6f0b88d537 [ 2429.653184][T29212] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2429.672819][T29212] RSP: 002b:00007ffc0d4fa418 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2429.681260][T29212] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f6f0b88d537 [ 2429.689237][T29212] RDX: 00007ffc0d4fa4ec RSI: 000000000000000a RDI: 00007ffc0d4fa4e0 [ 2429.697211][T29212] RBP: 00007ffc0d4fa4e0 R08: 00000000ffffffff R09: 00007ffc0d4fa2b0 [ 2429.705207][T29212] R10: 0000555555756853 R11: 0000000000000246 R12: 00007f6f0b8e6b24 [ 2429.713179][T29212] R13: 00007ffc0d4fb5a0 R14: 0000555555756810 R15: 00007ffc0d4fb5e0 [ 2429.721172][T29212] [ 2429.870457][T29212] memory: usage 8292kB, limit 0kB, failcnt 1139 [ 2429.881359][T29212] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2429.889690][T29212] Memory cgroup stats for /syz2: [ 2429.889889][T29212] anon 45056 [ 2429.889889][T29212] file 8355840 [ 2429.889889][T29212] kernel 86016 [ 2429.889889][T29212] kernel_stack 0 [ 2429.889889][T29212] pagetables 8192 [ 2429.889889][T29212] sec_pagetables 0 [ 2429.889889][T29212] percpu 0 [ 2429.889889][T29212] sock 0 [ 2429.889889][T29212] vmalloc 0 [ 2429.889889][T29212] shmem 8351744 [ 2429.889889][T29212] zswap 0 [ 2429.889889][T29212] zswapped 0 [ 2429.889889][T29212] file_mapped 311296 [ 2429.889889][T29212] file_dirty 0 [ 2429.889889][T29212] file_writeback 0 [ 2429.889889][T29212] swapcached 0 [ 2429.889889][T29212] anon_thp 0 [ 2429.889889][T29212] file_thp 0 [ 2429.889889][T29212] shmem_thp 0 [ 2429.889889][T29212] inactive_anon 45056 [ 2429.889889][T29212] active_anon 8351744 [ 2429.889889][T29212] inactive_file 0 [ 2429.889889][T29212] active_file 4096 [ 2429.889889][T29212] unevictable 0 [ 2429.889889][T29212] slab_reclaimable 34128 [ 2429.889889][T29212] slab_unreclaimable 32944 [ 2429.889889][T29212] slab 67072 [ 2430.001285][T29212] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=29212,uid=0 [ 2430.022837][T29212] Memory cgroup out of memory: Killed process 29212 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2430.526688][T10407] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2430.536682][T10407] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2430.545607][T10407] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2430.568556][T19460] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2430.580930][T19460] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2430.588502][T19460] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2430.908613][T29460] chnl_net:caif_netlink_parms(): no params data found [ 2431.211173][T29460] bridge0: port 1(bridge_slave_0) entered blocking state [ 2431.244145][ T8419] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2431.253915][ T8419] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2431.263268][ T8419] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2431.271158][ T8419] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2431.272160][T29460] bridge0: port 1(bridge_slave_0) entered disabled state [ 2431.286099][ T8419] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2431.322951][T29460] device bridge_slave_0 entered promiscuous mode [ 2431.397092][T29460] bridge0: port 2(bridge_slave_1) entered blocking state [ 2431.404227][T29460] bridge0: port 2(bridge_slave_1) entered disabled state [ 2431.436931][T29460] device bridge_slave_1 entered promiscuous mode [ 2431.494755][ T8419] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2431.504020][ T8419] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2431.512529][ T8419] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2431.520452][ T8419] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2431.530890][ T8419] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2431.539892][ T8419] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2431.553340][T29460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2431.579404][T29460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2431.670299][T21387] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2431.805485][T29460] team0: Port device team_slave_0 added [ 2431.835104][T21387] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2431.855493][T29460] team0: Port device team_slave_1 added [ 2431.939781][T21387] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2432.035554][T29460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2432.044116][T29460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2432.071346][T29460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2432.088880][T21387] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2432.127843][T29460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2432.134832][T29460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2432.161763][T29460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2432.366235][T29460] device hsr_slave_0 entered promiscuous mode [ 2432.383219][T29460] device hsr_slave_1 entered promiscuous mode [ 2432.587372][T29486] chnl_net:caif_netlink_parms(): no params data found [ 2432.611120][T21387] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2432.657155][T19460] Bluetooth: hci0: command 0x0409 tx timeout [ 2432.710379][T21387] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2432.758915][T29481] chnl_net:caif_netlink_parms(): no params data found [ 2432.799961][T21387] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2432.939627][T29486] bridge0: port 1(bridge_slave_0) entered blocking state [ 2432.946979][T29486] bridge0: port 1(bridge_slave_0) entered disabled state [ 2432.955949][T29486] device bridge_slave_0 entered promiscuous mode [ 2432.996555][T21387] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2433.022461][T29486] bridge0: port 2(bridge_slave_1) entered blocking state [ 2433.057075][T29486] bridge0: port 2(bridge_slave_1) entered disabled state [ 2433.065392][T29486] device bridge_slave_1 entered promiscuous mode [ 2433.223376][T29486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2433.271654][T29486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2433.306007][T29481] bridge0: port 1(bridge_slave_0) entered blocking state [ 2433.317083][T29481] bridge0: port 1(bridge_slave_0) entered disabled state [ 2433.334825][T29481] device bridge_slave_0 entered promiscuous mode [ 2433.362582][T29481] bridge0: port 2(bridge_slave_1) entered blocking state [ 2433.368345][T19460] Bluetooth: hci1: command 0x0409 tx timeout [ 2433.437179][T29481] bridge0: port 2(bridge_slave_1) entered disabled state [ 2433.445571][T29481] device bridge_slave_1 entered promiscuous mode [ 2433.607078][T19460] Bluetooth: hci2: command 0x0409 tx timeout [ 2433.740530][T29486] team0: Port device team_slave_0 added [ 2433.762548][T29481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2433.789654][T29481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2433.874022][T21387] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2433.904210][T29486] team0: Port device team_slave_1 added [ 2434.076999][T21387] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2434.139861][T29486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2434.157011][T29486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2434.246218][T29486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2434.288126][T29486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2434.295130][T29486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2434.329064][T29486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2434.387685][T21387] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2434.455858][T29481] team0: Port device team_slave_0 added [ 2434.466648][T29481] team0: Port device team_slave_1 added [ 2434.533916][T21387] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2434.604849][T29486] device hsr_slave_0 entered promiscuous mode [ 2434.617329][T29486] device hsr_slave_1 entered promiscuous mode [ 2434.624118][T29486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2434.647709][T29486] Cannot create hsr debugfs directory [ 2434.699048][T29481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2434.706043][T29481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2434.732498][T19460] Bluetooth: hci0: command 0x041b tx timeout [ 2434.766581][T29481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2434.780956][T29481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2434.789252][T29481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2434.815508][T29481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2434.827883][T29460] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2434.859779][T29460] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2434.885425][T29460] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2434.898112][T29460] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2434.972296][T29481] device hsr_slave_0 entered promiscuous mode [ 2434.999437][T29481] device hsr_slave_1 entered promiscuous mode [ 2435.017775][T29481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2435.025402][T29481] Cannot create hsr debugfs directory [ 2435.447046][T19460] Bluetooth: hci1: command 0x041b tx timeout [ 2435.687185][T19460] Bluetooth: hci2: command 0x041b tx timeout [ 2435.773712][T29460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2435.901171][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2435.910660][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2435.922472][T29460] 8021q: adding VLAN 0 to HW filter on device team0 [ 2435.954954][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2435.964858][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2435.975764][T22629] bridge0: port 1(bridge_slave_0) entered blocking state [ 2435.982934][T22629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2436.048973][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2436.067303][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2436.087030][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2436.095632][T22626] bridge0: port 2(bridge_slave_1) entered blocking state [ 2436.102801][T22626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2436.127378][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2436.348946][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2436.380505][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2436.398439][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2436.424786][T29460] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2436.443481][T29460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2436.476643][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2436.486338][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2436.495992][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2436.506130][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2436.515813][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2436.597494][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2436.811081][T19460] Bluetooth: hci0: command 0x040f tx timeout [ 2436.832061][T29486] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2437.037243][T29486] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2437.055337][T29486] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2437.107593][T29486] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2437.181357][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2437.199914][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2437.241402][T29460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2437.527133][T19460] Bluetooth: hci1: command 0x040f tx timeout [ 2437.659655][T29481] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2437.680081][T29481] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2437.721516][T29486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2437.735408][T29481] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2437.756667][T29481] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2437.767259][T19460] Bluetooth: hci2: command 0x040f tx timeout [ 2437.835537][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2437.860616][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2437.883704][T29486] 8021q: adding VLAN 0 to HW filter on device team0 [ 2437.960011][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2437.978325][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2437.996270][T10483] bridge0: port 1(bridge_slave_0) entered blocking state [ 2438.003443][T10483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2438.022551][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2438.032138][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2438.040909][T10483] bridge0: port 2(bridge_slave_1) entered blocking state [ 2438.048076][T10483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2438.055940][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2438.065106][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2438.121221][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2438.134723][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2438.157763][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2438.166640][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2438.176821][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2438.212882][T29486] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2438.238500][T29486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2438.253109][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2438.262303][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2438.271986][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2438.281008][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2438.289993][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2438.331683][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2438.348031][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2438.356462][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2438.379247][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2438.387621][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2438.417429][T29460] device veth0_vlan entered promiscuous mode [ 2438.445705][T21387] device hsr_slave_0 left promiscuous mode [ 2438.457669][T21387] device hsr_slave_1 left promiscuous mode [ 2438.477114][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2438.484584][T21387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2438.509918][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2438.524821][T21387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2438.550582][T21387] device bridge_slave_1 left promiscuous mode [ 2438.556914][T21387] bridge0: port 2(bridge_slave_1) entered disabled state [ 2438.578759][T21387] device bridge_slave_0 left promiscuous mode [ 2438.585024][T21387] bridge0: port 1(bridge_slave_0) entered disabled state [ 2438.601250][T21387] device hsr_slave_0 left promiscuous mode [ 2438.608573][T21387] device hsr_slave_1 left promiscuous mode [ 2438.615086][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2438.623102][T21387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2438.633314][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2438.641319][T21387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2438.651934][T21387] device bridge_slave_1 left promiscuous mode [ 2438.659971][T21387] bridge0: port 2(bridge_slave_1) entered disabled state [ 2438.677693][T21387] device bridge_slave_0 left promiscuous mode [ 2438.683957][T21387] bridge0: port 1(bridge_slave_0) entered disabled state [ 2438.702897][T21387] device hsr_slave_0 left promiscuous mode [ 2438.709966][T21387] device hsr_slave_1 left promiscuous mode [ 2438.716570][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2438.734426][T21387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2438.753634][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2438.764728][T21387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2438.785315][T21387] device bridge_slave_1 left promiscuous mode [ 2438.795910][T21387] bridge0: port 2(bridge_slave_1) entered disabled state [ 2438.814933][T21387] device bridge_slave_0 left promiscuous mode [ 2438.823974][T21387] bridge0: port 1(bridge_slave_0) entered disabled state [ 2438.854158][T21387] device veth1_macvtap left promiscuous mode [ 2438.860587][T21387] device veth0_macvtap left promiscuous mode [ 2438.866737][T21387] device veth1_vlan left promiscuous mode [ 2438.873883][T21387] device veth0_vlan left promiscuous mode [ 2438.883048][T21387] device veth1_macvtap left promiscuous mode [ 2438.890906][T19460] Bluetooth: hci0: command 0x0419 tx timeout [ 2438.897536][T21387] device veth0_macvtap left promiscuous mode [ 2438.903684][T21387] device veth1_vlan left promiscuous mode [ 2438.910403][T21387] device veth0_vlan left promiscuous mode [ 2438.918827][T21387] device veth1_macvtap left promiscuous mode [ 2438.924900][T21387] device veth0_macvtap left promiscuous mode [ 2438.931556][T21387] device veth1_vlan left promiscuous mode [ 2438.937607][T21387] device veth0_vlan left promiscuous mode [ 2439.368639][T21387] team0 (unregistering): Port device team_slave_1 removed [ 2439.385906][T21387] team0 (unregistering): Port device team_slave_0 removed [ 2439.398931][T21387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2439.412593][T21387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2439.481970][T21387] bond0 (unregistering): Released all slaves [ 2439.607177][ T8419] Bluetooth: hci1: command 0x0419 tx timeout [ 2439.619815][T21387] team0 (unregistering): Port device team_slave_1 removed [ 2439.634981][T21387] team0 (unregistering): Port device team_slave_0 removed [ 2439.648250][T21387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2439.666231][T21387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2439.733384][T21387] bond0 (unregistering): Released all slaves [ 2439.847097][ T8419] Bluetooth: hci2: command 0x0419 tx timeout [ 2439.873185][T21387] team0 (unregistering): Port device team_slave_1 removed [ 2439.888154][T21387] team0 (unregistering): Port device team_slave_0 removed [ 2439.900457][T21387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2439.913266][T21387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2439.976092][T21387] bond0 (unregistering): Released all slaves [ 2440.038921][T29481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2440.054988][T29460] device veth1_vlan entered promiscuous mode [ 2440.074459][T29481] 8021q: adding VLAN 0 to HW filter on device team0 [ 2440.116547][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2440.125680][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2440.203504][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2440.217649][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2440.233396][T22629] bridge0: port 1(bridge_slave_0) entered blocking state [ 2440.240591][T22629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2440.274806][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2440.287757][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2440.296688][T22629] bridge0: port 2(bridge_slave_1) entered blocking state [ 2440.303872][T22629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2440.321758][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2440.331096][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2440.349131][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2440.362363][T29460] device veth0_macvtap entered promiscuous mode [ 2440.387323][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2440.395987][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2440.406015][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2440.429221][T29460] device veth1_macvtap entered promiscuous mode [ 2440.442704][T29481] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2440.454436][T29481] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2440.483572][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2440.505480][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2440.525035][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2440.534712][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2440.550541][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2440.563689][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2440.580272][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2440.596023][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2440.607568][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2440.616203][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2440.659977][T29486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2440.671980][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2440.681484][T29460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2440.692585][T29460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2440.704228][T29460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2440.722299][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2440.732706][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2440.749374][T29460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2440.764814][T29460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2440.777000][T29460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2440.821466][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2440.831726][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2440.847639][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2440.867737][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2440.902317][T29460] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2440.917443][T29460] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2440.926210][T29460] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2440.935426][T29460] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2440.950541][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2440.966146][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2441.006780][T29481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2441.036723][T29486] device veth0_vlan entered promiscuous mode [ 2441.048445][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2441.067375][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2441.075348][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2441.092053][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2441.112314][T29486] device veth1_vlan entered promiscuous mode [ 2441.174403][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2441.183505][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2441.294848][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2441.303596][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2441.315806][T13808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2441.331493][T29481] device veth0_vlan entered promiscuous mode [ 2441.346973][T13808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2441.354494][T29481] device veth1_vlan entered promiscuous mode [ 2441.369917][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2441.386461][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2441.395458][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2441.410240][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2441.435732][T29486] device veth0_macvtap entered promiscuous mode [ 2441.456441][ T5247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2441.457149][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2441.471717][ T5247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2441.487898][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2441.496702][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2441.510104][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2441.520446][T29486] device veth1_macvtap entered promiscuous mode [ 2441.546210][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2441.554433][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2441.572813][T29481] device veth0_macvtap entered promiscuous mode [ 2441.586023][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 11:03:11 executing program 5: bpf$MAP_CREATE(0x8, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 11:03:11 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r4, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2441.611138][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2441.624484][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2441.650130][T29481] device veth1_macvtap entered promiscuous mode 11:03:11 executing program 4: perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(r3, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r4, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:03:11 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd2}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2441.674645][T29486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2441.705994][T29486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2441.752670][T29486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2441.813683][T29486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2441.837254][T29486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2441.854171][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2441.867876][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2441.876632][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2441.925198][T29486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2441.963484][T29486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2441.987063][T29486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2442.024638][T29486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2442.059007][T29486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2442.070610][T29481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2442.097203][T29481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2442.113813][T29481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2442.152773][T29481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2442.192600][T29481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2442.213047][T29481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2442.255470][T29481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2442.275399][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2442.294222][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2442.304383][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2442.347709][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2442.371660][T29486] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2442.390797][T29486] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2442.417301][T29486] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2442.436778][T29486] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2442.482097][T29481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2442.516955][T29481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2442.544354][T29481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2442.567201][T29481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2442.586914][T29481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2442.606905][T29481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2442.628349][T29481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2442.643532][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2442.664850][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2442.728501][T29481] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2442.756986][T29481] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2442.765751][T29481] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2442.781601][T29481] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2442.939650][ T6761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2442.977001][ T6761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2442.994692][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2443.026816][ T6761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2443.049185][ T6761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2443.054451][ T5247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2443.080921][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2443.082619][ T5247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2443.129020][T13808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2443.142161][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2443.157727][T13808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2443.167602][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2443.294826][T29672] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2443.319300][T29672] CPU: 1 PID: 29672 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2443.329802][T29672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2443.339893][T29672] Call Trace: [ 2443.343235][T29672] [ 2443.346189][T29672] dump_stack_lvl+0xd1/0x138 [ 2443.350827][T29672] dump_header+0x10b/0x85f [ 2443.355283][T29672] oom_kill_process.cold+0x10/0x15 [ 2443.360434][T29672] out_of_memory+0x35c/0x14a0 [ 2443.365174][T29672] ? oom_killer_disable+0x280/0x280 [ 2443.370436][T29672] mem_cgroup_out_of_memory+0x206/0x270 [ 2443.376075][T29672] ? mem_cgroup_margin+0x130/0x130 [ 2443.381257][T29672] memory_max_write+0x2f9/0x3c0 [ 2443.386147][T29672] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2443.392261][T29672] ? lock_release+0x810/0x810 [ 2443.396977][T29672] cgroup_file_write+0x1e2/0x770 [ 2443.401974][T29672] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2443.408077][T29672] ? kill_css+0x370/0x370 [ 2443.412444][T29672] ? __virt_addr_valid+0x61/0x2e0 [ 2443.417533][T29672] ? kill_css+0x370/0x370 [ 2443.421904][T29672] kernfs_fop_write_iter+0x3f1/0x600 [ 2443.427238][T29672] vfs_write+0x9ed/0xdd0 [ 2443.431520][T29672] ? kernel_write+0x630/0x630 [ 2443.436238][T29672] ? __fget_files+0x26a/0x440 [ 2443.440975][T29672] ksys_write+0x12b/0x250 [ 2443.445342][T29672] ? __ia32_sys_read+0xb0/0xb0 [ 2443.450138][T29672] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2443.456080][T29672] do_syscall_64+0x39/0xb0 [ 2443.460544][T29672] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2443.466484][T29672] RIP: 0033:0x7f4b6628c0c9 [ 2443.470928][T29672] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2443.490576][T29672] RSP: 002b:00007f4b67096168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2443.499031][T29672] RAX: ffffffffffffffda RBX: 00007f4b663abf80 RCX: 00007f4b6628c0c9 [ 2443.507033][T29672] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2443.515031][T29672] RBP: 00007f4b662e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2443.523028][T29672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2443.531024][T29672] R13: 00007fff4facdf9f R14: 00007f4b67096300 R15: 0000000000022000 [ 2443.539045][T29672] [ 2443.611525][T29672] memory: usage 10596kB, limit 0kB, failcnt 927 [ 2443.618179][T29672] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2443.637621][T29672] Memory cgroup stats for /syz1: [ 2443.637845][T29672] anon 114688 [ 2443.637845][T29672] file 10444800 [ 2443.637845][T29672] kernel 290816 [ 2443.637845][T29672] kernel_stack 65536 [ 2443.637845][T29672] pagetables 81920 [ 2443.637845][T29672] sec_pagetables 0 [ 2443.637845][T29672] percpu 64 [ 2443.637845][T29672] sock 0 [ 2443.637845][T29672] vmalloc 0 [ 2443.637845][T29672] shmem 10444800 [ 2443.637845][T29672] zswap 0 [ 2443.637845][T29672] zswapped 0 [ 2443.637845][T29672] file_mapped 397312 [ 2443.637845][T29672] file_dirty 0 [ 2443.637845][T29672] file_writeback 0 [ 2443.637845][T29672] swapcached 0 [ 2443.637845][T29672] anon_thp 0 [ 2443.637845][T29672] file_thp 0 [ 2443.637845][T29672] shmem_thp 0 [ 2443.637845][T29672] inactive_anon 114688 [ 2443.637845][T29672] active_anon 10444800 [ 2443.637845][T29672] inactive_file 0 [ 2443.637845][T29672] active_file 0 [ 2443.637845][T29672] unevictable 0 [ 2443.637845][T29672] slab_reclaimable 42336 [ 2443.637845][T29672] slab_unreclaimable 71808 [ 2443.637845][T29672] slab 114144 [ 2443.823323][T29672] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=29671,uid=0 [ 2443.845853][T29672] Memory cgroup out of memory: Killed process 29671 (syz-executor.1) total-vm:54540kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2443.874838][T29674] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2443.900219][T29674] CPU: 1 PID: 29674 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2443.910709][T29674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2443.920797][T29674] Call Trace: [ 2443.924103][T29674] [ 2443.927058][T29674] dump_stack_lvl+0xd1/0x138 [ 2443.932129][T29674] dump_header+0x10b/0x85f [ 2443.936581][T29674] oom_kill_process.cold+0x10/0x15 [ 2443.941734][T29674] out_of_memory+0x35c/0x14a0 [ 2443.946471][T29674] ? oom_killer_disable+0x280/0x280 [ 2443.951731][T29674] mem_cgroup_out_of_memory+0x206/0x270 [ 2443.957321][T29674] ? mem_cgroup_margin+0x130/0x130 [ 2443.962490][T29674] memory_max_write+0x2f9/0x3c0 [ 2443.967381][T29674] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2443.973485][T29674] ? lock_release+0x810/0x810 [ 2443.978200][T29674] cgroup_file_write+0x1e2/0x770 [ 2443.983184][T29674] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2443.989286][T29674] ? kill_css+0x370/0x370 [ 2443.993651][T29674] ? __virt_addr_valid+0x61/0x2e0 [ 2443.998739][T29674] ? kill_css+0x370/0x370 [ 2444.003118][T29674] kernfs_fop_write_iter+0x3f1/0x600 [ 2444.008450][T29674] vfs_write+0x9ed/0xdd0 [ 2444.012731][T29674] ? kernel_write+0x630/0x630 [ 2444.017444][T29674] ? __fget_files+0x26a/0x440 [ 2444.022179][T29674] ksys_write+0x12b/0x250 [ 2444.026538][T29674] ? __ia32_sys_read+0xb0/0xb0 [ 2444.031331][T29674] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2444.037265][T29674] do_syscall_64+0x39/0xb0 [ 2444.041729][T29674] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2444.047654][T29674] RIP: 0033:0x7f0b89e8c0c9 [ 2444.052098][T29674] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2444.071743][T29674] RSP: 002b:00007f0b8ac18168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2444.080191][T29674] RAX: ffffffffffffffda RBX: 00007f0b89fabf80 RCX: 00007f0b89e8c0c9 [ 2444.088193][T29674] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2444.096187][T29674] RBP: 00007f0b89ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2444.104608][T29674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2444.112611][T29674] R13: 00007fff97b74d7f R14: 00007f0b8ac18300 R15: 0000000000022000 [ 2444.120632][T29674] [ 2444.132625][T19460] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2444.141279][T19460] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2444.153437][T19460] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2444.159018][T29674] memory: usage 10616kB, limit 0kB, failcnt 655 [ 2444.171821][T19460] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2444.179767][T19460] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2444.187282][T19460] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2444.191987][T29674] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2444.257787][T29674] Memory cgroup stats for /syz3: [ 2444.257976][T29674] anon 114688 [ 2444.257976][T29674] file 10436608 [ 2444.257976][T29674] kernel 286720 [ 2444.257976][T29674] kernel_stack 32768 [ 2444.257976][T29674] pagetables 81920 [ 2444.257976][T29674] sec_pagetables 0 [ 2444.257976][T29674] percpu 64 [ 2444.257976][T29674] sock 0 [ 2444.257976][T29674] vmalloc 0 [ 2444.257976][T29674] shmem 10436608 [ 2444.257976][T29674] zswap 0 [ 2444.257976][T29674] zswapped 0 [ 2444.257976][T29674] file_mapped 192512 [ 2444.257976][T29674] file_dirty 0 [ 2444.257976][T29674] file_writeback 0 [ 2444.257976][T29674] swapcached 0 [ 2444.257976][T29674] anon_thp 0 [ 2444.257976][T29674] file_thp 0 [ 2444.257976][T29674] shmem_thp 0 [ 2444.257976][T29674] inactive_anon 114688 [ 2444.257976][T29674] active_anon 10436608 [ 2444.257976][T29674] inactive_file 0 [ 2444.257976][T29674] active_file 0 [ 2444.257976][T29674] unevictable 0 [ 2444.257976][T29674] slab_reclaimable 41624 [ 2444.257976][T29674] slab_unreclaimable 98520 [ 2444.257976][T29674] slab 140144 [ 2444.320078][ T8419] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2444.369514][ T8419] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2444.378561][T29674] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=29481,uid=0 [ 2444.394254][ T8419] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2444.409356][ T8419] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2444.417529][ T8419] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2444.424800][ T8419] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2444.447801][T29674] Memory cgroup out of memory: Killed process 29481 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2444.475337][T29486] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 2444.513006][T29486] CPU: 1 PID: 29486 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2444.523475][T29486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2444.533564][T29486] Call Trace: [ 2444.536850][T29486] [ 2444.539801][T29486] dump_stack_lvl+0xd1/0x138 [ 2444.544408][T29486] dump_header+0x10b/0x85f [ 2444.548845][T29486] oom_kill_process.cold+0x10/0x15 [ 2444.553967][T29486] out_of_memory+0x35c/0x14a0 [ 2444.558670][T29486] ? oom_killer_disable+0x280/0x280 [ 2444.563889][T29486] ? find_held_lock+0x2d/0x110 [ 2444.568693][T29486] mem_cgroup_out_of_memory+0x206/0x270 [ 2444.574260][T29486] ? mem_cgroup_margin+0x130/0x130 [ 2444.579390][T29486] ? lock_downgrade+0x6e0/0x6e0 [ 2444.584363][T29486] try_charge_memcg+0xefb/0x12f0 [ 2444.589329][T29486] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2444.595321][T29486] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2444.601061][T29486] ? lock_downgrade+0x6e0/0x6e0 [ 2444.605950][T29486] ? lock_downgrade+0x6e0/0x6e0 [ 2444.610821][T29486] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2444.616387][T29486] __alloc_pages+0x1f3/0x5b0 [ 2444.620999][T29486] ? vm_normal_page+0x14a/0x2a0 [ 2444.625881][T29486] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2444.632672][T29486] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2444.638683][T29486] ? __lock_acquire+0xbc3/0x56d0 [ 2444.643640][T29486] alloc_pages+0x1aa/0x270 [ 2444.648073][T29486] pte_alloc_one+0x1a/0x230 [ 2444.652603][T29486] __pte_alloc+0x6d/0x260 [ 2444.656952][T29486] ? pmd_install+0x160/0x160 [ 2444.661555][T29486] ? hugepage_vma_check+0x24e/0x830 [ 2444.666776][T29486] __handle_mm_fault+0x38cf/0x3c90 [ 2444.671926][T29486] ? vm_iomap_memory+0x190/0x190 [ 2444.676913][T29486] handle_mm_fault+0x1b6/0x850 [ 2444.681699][T29486] do_user_addr_fault+0x475/0x1210 [ 2444.686845][T29486] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2444.692434][T29486] exc_page_fault+0x98/0x170 [ 2444.697045][T29486] asm_exc_page_fault+0x26/0x30 [ 2444.701909][T29486] RIP: 0033:0x7f4b6625a7d5 [ 2444.706334][T29486] Code: e8 4b 8d 0c 2f 48 8b 6c 24 18 48 39 d3 48 89 4b 60 0f 95 c2 48 83 c8 01 0f b6 d2 48 c1 e2 02 4c 09 ea 48 83 ca 01 49 89 57 08 <48> 89 41 08 49 83 c7 10 eb b3 48 8d 3d 6a 0d 0a 00 e8 75 c9 ff ff [ 2444.725951][T29486] RSP: 002b:00007fff4faccf40 EFLAGS: 00010206 [ 2444.732027][T29486] RAX: 00000000000187c1 RBX: 00007f4b663885e0 RCX: 0000555557400840 [ 2444.740006][T29486] RDX: 0000000000008041 RSI: 0000000000000000 RDI: 0000000000000004 [ 2444.747981][T29486] RBP: 0000000000008030 R08: 0000000000000003 R09: 00007f4b66388640 [ 2444.755959][T29486] R10: 0000000000000231 R11: 0000000000000000 R12: 0000000000000802 [ 2444.763931][T29486] R13: 0000000000008040 R14: 0000000000000804 R15: 00005555573f8800 [ 2444.771924][T29486] [ 2444.797266][T29486] memory: usage 10344kB, limit 0kB, failcnt 946 [ 2444.803560][T29486] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2444.844135][T29486] Memory cgroup stats for /syz1: [ 2444.844338][T29486] anon 36864 [ 2444.844338][T29486] file 10444800 [ 2444.844338][T29486] kernel 106496 [ 2444.844338][T29486] kernel_stack 0 [ 2444.844338][T29486] pagetables 8192 [ 2444.844338][T29486] sec_pagetables 0 [ 2444.844338][T29486] percpu 64 [ 2444.844338][T29486] sock 0 [ 2444.844338][T29486] vmalloc 0 [ 2444.844338][T29486] shmem 10444800 [ 2444.844338][T29486] zswap 0 [ 2444.844338][T29486] zswapped 0 [ 2444.844338][T29486] file_mapped 376832 [ 2444.844338][T29486] file_dirty 0 [ 2444.844338][T29486] file_writeback 0 [ 2444.844338][T29486] swapcached 0 [ 2444.844338][T29486] anon_thp 0 [ 2444.844338][T29486] file_thp 0 [ 2444.844338][T29486] shmem_thp 0 [ 2444.844338][T29486] inactive_anon 36864 [ 2444.844338][T29486] active_anon 10444800 [ 2444.844338][T29486] inactive_file 0 [ 2444.844338][T29486] active_file 0 [ 2444.844338][T29486] unevictable 0 [ 2444.844338][T29486] slab_reclaimable 38816 [ 2444.844338][T29486] slab_unreclaimable 44728 [ 2444.844338][T29486] slab 83544 [ 2445.017917][T29486] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=29486,uid=0 [ 2445.034841][T29486] Memory cgroup out of memory: Killed process 29486 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2445.251224][T29684] chnl_net:caif_netlink_parms(): no params data found [ 2445.577675][T29684] bridge0: port 1(bridge_slave_0) entered blocking state [ 2445.584884][T29684] bridge0: port 1(bridge_slave_0) entered disabled state [ 2445.615576][T29684] device bridge_slave_0 entered promiscuous mode [ 2445.651959][T29684] bridge0: port 2(bridge_slave_1) entered blocking state [ 2445.667254][T29684] bridge0: port 2(bridge_slave_1) entered disabled state [ 2445.675520][T29684] device bridge_slave_1 entered promiscuous mode [ 2445.699856][T29686] chnl_net:caif_netlink_parms(): no params data found 11:03:15 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0), 0x12) 11:03:15 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd3}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:03:15 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x5}, 0x48) 11:03:15 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2445.811311][T29684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 11:03:15 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x6, 0x3, &(0x7f0000000e40)=@framed, &(0x7f0000000ec0)='syzkaller\x00', 0x0, 0x7a, &(0x7f0000000f00)=""/122, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2445.926377][T29684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 11:03:15 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 11:03:15 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf90}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:03:15 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0), 0x12) [ 2446.169501][T29686] bridge0: port 1(bridge_slave_0) entered blocking state 11:03:16 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@base={0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48) [ 2446.211041][T29686] bridge0: port 1(bridge_slave_0) entered disabled state [ 2446.226295][T29686] device bridge_slave_0 entered promiscuous mode [ 2446.250409][ T8419] Bluetooth: hci4: command 0x0409 tx timeout [ 2446.273551][T29686] bridge0: port 2(bridge_slave_1) entered blocking state [ 2446.291861][T29686] bridge0: port 2(bridge_slave_1) entered disabled state [ 2446.332761][T29686] device bridge_slave_1 entered promiscuous mode [ 2446.428956][T29684] team0: Port device team_slave_0 added [ 2446.453090][T29684] team0: Port device team_slave_1 added [ 2446.489367][ T8419] Bluetooth: hci5: command 0x0409 tx timeout [ 2446.511030][T29686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2446.560043][T29684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2446.593759][T29684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2446.673307][T29684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2446.707301][T29686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2446.745229][T29684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2446.762827][T29684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2446.810207][T29684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2446.896949][ T6761] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2447.001650][ T6761] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2447.029723][T29686] team0: Port device team_slave_0 added [ 2447.038711][T29686] team0: Port device team_slave_1 added [ 2447.052996][T29684] device hsr_slave_0 entered promiscuous mode [ 2447.067715][T29684] device hsr_slave_1 entered promiscuous mode [ 2447.077388][T29684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2447.084986][T29684] Cannot create hsr debugfs directory [ 2447.112555][ T6761] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2447.232022][ T6761] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2447.298094][T29686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2447.305081][T29686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2447.387119][T29686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2447.436504][T29686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2447.456937][T29686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2447.527201][T29686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2447.622544][T29686] device hsr_slave_0 entered promiscuous mode [ 2447.647826][T29686] device hsr_slave_1 entered promiscuous mode [ 2447.654509][T29686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2447.675070][T29686] Cannot create hsr debugfs directory [ 2447.835783][T19460] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2447.887045][T19460] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2447.896428][T19460] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2447.904680][T19460] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2447.912071][T19460] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2447.982982][ T6761] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2448.217943][ T6761] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2448.317692][ T6761] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2448.328190][ T8419] Bluetooth: hci4: command 0x041b tx timeout [ 2448.542913][ T8419] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2448.555450][ T8419] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2448.563849][ T8419] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2448.571001][T10407] Bluetooth: hci5: command 0x041b tx timeout [ 2448.579143][ T8419] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2448.587735][ T8419] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2448.595016][ T8419] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2448.628506][ T6761] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2449.158649][T29748] chnl_net:caif_netlink_parms(): no params data found [ 2449.509670][T29755] chnl_net:caif_netlink_parms(): no params data found [ 2449.697213][T29748] bridge0: port 1(bridge_slave_0) entered blocking state [ 2449.704342][T29748] bridge0: port 1(bridge_slave_0) entered disabled state [ 2449.729022][T29748] device bridge_slave_0 entered promiscuous mode [ 2449.819539][T29748] bridge0: port 2(bridge_slave_1) entered blocking state [ 2449.826680][T29748] bridge0: port 2(bridge_slave_1) entered disabled state [ 2449.848323][T29748] device bridge_slave_1 entered promiscuous mode [ 2449.926979][ T8419] Bluetooth: hci1: command 0x0409 tx timeout [ 2450.007498][T29686] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2450.031997][T29748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2450.122748][T29686] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2450.161091][T29748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2450.208719][T29755] bridge0: port 1(bridge_slave_0) entered blocking state [ 2450.215844][T29755] bridge0: port 1(bridge_slave_0) entered disabled state [ 2450.245167][T29755] device bridge_slave_0 entered promiscuous mode [ 2450.279466][T29686] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2450.333218][T29755] bridge0: port 2(bridge_slave_1) entered blocking state [ 2450.343813][T29755] bridge0: port 2(bridge_slave_1) entered disabled state [ 2450.372958][T29755] device bridge_slave_1 entered promiscuous mode [ 2450.387734][T29686] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2450.407039][ T8419] Bluetooth: hci4: command 0x040f tx timeout [ 2450.462023][T29748] team0: Port device team_slave_0 added [ 2450.602813][T29748] team0: Port device team_slave_1 added [ 2450.643542][T29755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2450.647049][ T8419] Bluetooth: hci2: command 0x0409 tx timeout [ 2450.655016][T19460] Bluetooth: hci5: command 0x040f tx timeout [ 2450.686073][T29684] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2450.710601][T29755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2450.755029][T29684] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2450.803993][T29748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2450.814227][T29748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2450.842889][T29748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2450.856717][T29748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2450.864076][T29748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2450.894841][T29748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2450.918012][T29684] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2450.937399][T29684] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2451.007666][T29755] team0: Port device team_slave_0 added [ 2451.053475][T29748] device hsr_slave_0 entered promiscuous mode [ 2451.062224][T29748] device hsr_slave_1 entered promiscuous mode [ 2451.081238][T29748] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2451.095787][T29748] Cannot create hsr debugfs directory [ 2451.104163][T29755] team0: Port device team_slave_1 added [ 2451.188152][T29755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2451.195129][T29755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2451.227284][T29755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2451.240478][T29755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2451.247712][T29755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2451.274271][T29755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2451.396416][T29684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2451.422139][T29755] device hsr_slave_0 entered promiscuous mode [ 2451.438513][T29755] device hsr_slave_1 entered promiscuous mode [ 2451.456408][T29755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2451.466685][T29755] Cannot create hsr debugfs directory [ 2451.493961][T29686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2451.565515][T29684] 8021q: adding VLAN 0 to HW filter on device team0 [ 2451.583041][ T6761] device hsr_slave_0 left promiscuous mode [ 2451.592055][ T6761] device hsr_slave_1 left promiscuous mode [ 2451.599264][ T6761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2451.606695][ T6761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2451.626374][ T6761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2451.634455][ T6761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2451.644931][ T6761] device bridge_slave_1 left promiscuous mode [ 2451.652474][ T6761] bridge0: port 2(bridge_slave_1) entered disabled state [ 2451.661581][ T6761] device bridge_slave_0 left promiscuous mode [ 2451.677105][ T6761] bridge0: port 1(bridge_slave_0) entered disabled state [ 2451.744297][ T6761] device hsr_slave_0 left promiscuous mode [ 2451.775757][ T6761] device hsr_slave_1 left promiscuous mode [ 2451.807654][ T6761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2451.815115][ T6761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2451.869710][ T6761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2451.897141][ T6761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2451.919154][ T6761] device bridge_slave_1 left promiscuous mode [ 2451.925388][ T6761] bridge0: port 2(bridge_slave_1) entered disabled state [ 2452.007296][T17937] Bluetooth: hci1: command 0x041b tx timeout [ 2452.037481][ T6761] device bridge_slave_0 left promiscuous mode [ 2452.043752][ T6761] bridge0: port 1(bridge_slave_0) entered disabled state [ 2452.217741][ T6761] device veth1_macvtap left promiscuous mode [ 2452.223853][ T6761] device veth0_macvtap left promiscuous mode [ 2452.246504][ T6761] device veth1_vlan left promiscuous mode [ 2452.267166][ T6761] device veth0_vlan left promiscuous mode [ 2452.308327][ T6761] device veth1_macvtap left promiscuous mode [ 2452.314411][ T6761] device veth0_macvtap left promiscuous mode [ 2452.335506][ T6761] device veth1_vlan left promiscuous mode [ 2452.347115][ T6761] device veth0_vlan left promiscuous mode [ 2452.487318][T17937] Bluetooth: hci4: command 0x0419 tx timeout [ 2452.727254][T17937] Bluetooth: hci5: command 0x0419 tx timeout [ 2452.727262][T19460] Bluetooth: hci2: command 0x041b tx timeout [ 2452.891700][ T6761] team0 (unregistering): Port device team_slave_1 removed [ 2452.919043][ T6761] team0 (unregistering): Port device team_slave_0 removed [ 2452.944826][ T6761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2452.987504][ T6761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2453.084570][ T6761] bond0 (unregistering): Released all slaves [ 2453.292119][ T6761] team0 (unregistering): Port device team_slave_1 removed [ 2453.308043][ T6761] team0 (unregistering): Port device team_slave_0 removed [ 2453.332759][ T6761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2453.360845][ T6761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2453.504906][ T6761] bond0 (unregistering): Released all slaves [ 2453.572003][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2453.589960][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2453.645189][T29686] 8021q: adding VLAN 0 to HW filter on device team0 [ 2453.681019][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2453.694373][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2453.702994][T22626] bridge0: port 1(bridge_slave_0) entered blocking state [ 2453.710129][T22626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2453.718953][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2453.726601][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2453.734526][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2453.743292][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2453.751658][T22626] bridge0: port 2(bridge_slave_1) entered blocking state [ 2453.758871][T22626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2453.766616][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2453.822906][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2453.831782][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2453.840776][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2453.850833][ T8584] bridge0: port 1(bridge_slave_0) entered blocking state [ 2453.857983][ T8584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2453.865771][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2453.883674][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2453.903816][ T8584] bridge0: port 2(bridge_slave_1) entered blocking state [ 2453.910968][ T8584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2453.918890][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2453.936580][T29684] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2453.949869][T29684] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2454.019028][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2454.027169][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2454.035634][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2454.044675][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2454.053321][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2454.061890][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2454.070587][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2454.079114][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2454.087327][T17937] Bluetooth: hci1: command 0x040f tx timeout [ 2454.087427][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2454.108979][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2454.123203][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2454.132341][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2454.140622][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2454.226345][T29686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2454.276827][T29686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2454.383348][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2454.391475][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2454.411148][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2454.419275][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2454.427853][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2454.737834][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2454.745332][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2454.783335][T29684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2454.807363][T17937] Bluetooth: hci2: command 0x040f tx timeout [ 2454.912706][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2454.934726][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2454.955758][T29684] device veth0_vlan entered promiscuous mode [ 2454.980705][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2454.989620][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2455.072234][T29684] device veth1_vlan entered promiscuous mode [ 2455.088212][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2455.095988][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2455.104760][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2455.164091][T29686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2455.191408][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2455.204838][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2455.236155][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2455.297121][T29684] device veth0_macvtap entered promiscuous mode [ 2455.306825][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2455.337951][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2455.348801][T29684] device veth1_macvtap entered promiscuous mode [ 2455.375042][T29684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2455.390092][T29684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2455.416933][T29684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2455.448295][T29684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2455.489244][T29684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2455.503254][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2455.529711][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2455.539153][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2455.557588][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2455.569602][T29684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2455.587855][T29684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2455.606440][T29684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2455.619067][T29684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2455.631342][T29684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2455.657767][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2455.666523][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2455.699593][T29684] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2455.727721][T29684] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2455.737691][T29684] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2455.746414][T29684] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2455.990956][T29755] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2456.060508][ T5470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2456.076951][ T5470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2456.089461][T29755] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2456.144020][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2456.164394][T29755] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2456.167078][T17937] Bluetooth: hci1: command 0x0419 tx timeout [ 2456.226906][T29755] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2456.287379][ T5470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2456.295485][ T5470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2456.349074][T29748] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2456.387742][T29748] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2456.410353][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2456.441002][T29748] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2456.494330][T29748] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2456.554247][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2456.568752][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2456.663831][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2456.678475][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2456.717616][T29755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2456.729151][T29686] device veth0_vlan entered promiscuous mode [ 2456.742248][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2456.768330][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2456.796399][T29686] device veth1_vlan entered promiscuous mode [ 2456.848247][T29755] 8021q: adding VLAN 0 to HW filter on device team0 [ 2456.860619][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2456.887607][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2456.887663][T17937] Bluetooth: hci2: command 0x0419 tx timeout [ 2456.987533][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2457.005440][T29863] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2457.006551][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2457.016220][T29863] CPU: 1 PID: 29863 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2457.034354][T29863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2457.044439][T29863] Call Trace: [ 2457.047735][T29863] [ 2457.050694][T29863] dump_stack_lvl+0xd1/0x138 [ 2457.055328][T29863] dump_header+0x10b/0x85f [ 2457.059788][T29863] oom_kill_process.cold+0x10/0x15 [ 2457.064938][T29863] out_of_memory+0x35c/0x14a0 [ 2457.069666][T29863] ? lockdep_hardirqs_on+0x7d/0x100 [ 2457.074906][T29863] ? oom_killer_disable+0x280/0x280 [ 2457.076177][T10486] bridge0: port 1(bridge_slave_0) entered blocking state [ 2457.080124][T29863] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 2457.080176][T29863] mem_cgroup_out_of_memory+0x206/0x270 [ 2457.087261][T10486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2457.092804][T29863] ? mem_cgroup_margin+0x130/0x130 [ 2457.110697][T29863] memory_max_write+0x2f9/0x3c0 [ 2457.115598][T29863] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2457.121696][T29863] ? cgroup_file_write+0x192/0x770 [ 2457.126832][T29863] cgroup_file_write+0x1e2/0x770 [ 2457.131789][T29863] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2457.137865][T29863] ? kill_css+0x370/0x370 [ 2457.142220][T29863] ? kill_css+0x370/0x370 [ 2457.146563][T29863] kernfs_fop_write_iter+0x3f1/0x600 [ 2457.151879][T29863] vfs_write+0x9ed/0xdd0 [ 2457.156135][T29863] ? kernel_write+0x630/0x630 [ 2457.160829][T29863] ? __fget_files+0x26a/0x440 [ 2457.165530][T29863] ksys_write+0x12b/0x250 [ 2457.169875][T29863] ? __ia32_sys_read+0xb0/0xb0 [ 2457.174657][T29863] ? syscall_enter_from_user_mode+0x30/0xb0 [ 2457.180568][T29863] do_syscall_64+0x39/0xb0 [ 2457.185005][T29863] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2457.190912][T29863] RIP: 0033:0x7f1dcc08c0c9 [ 2457.195333][T29863] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2457.214953][T29863] RSP: 002b:00007f1dccd2d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2457.223378][T29863] RAX: ffffffffffffffda RBX: 00007f1dcc1abf80 RCX: 00007f1dcc08c0c9 [ 2457.231353][T29863] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 2457.239332][T29863] RBP: 00007f1dcc0e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2457.247312][T29863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2457.255290][T29863] R13: 00007ffc5ff092ff R14: 00007f1dccd2d300 R15: 0000000000022000 [ 2457.263284][T29863] [ 2457.278197][T29863] memory: usage 8608kB, limit 0kB, failcnt 1139 [ 2457.280641][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2457.302508][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2457.312635][T29863] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2457.317649][T10486] bridge0: port 2(bridge_slave_1) entered blocking state [ 2457.326727][T10486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2457.356343][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2457.364514][T29863] Memory cgroup stats for /syz2: [ 2457.365704][T29863] anon 118784 [ 2457.365704][T29863] file 8355840 [ 2457.365704][T29863] kernel 327680 [ 2457.365704][T29863] kernel_stack 98304 [ 2457.365704][T29863] pagetables 77824 [ 2457.365704][T29863] sec_pagetables 0 [ 2457.365704][T29863] percpu 64 [ 2457.365704][T29863] sock 0 [ 2457.365704][T29863] vmalloc 0 [ 2457.365704][T29863] shmem 8351744 [ 2457.365704][T29863] zswap 0 [ 2457.365704][T29863] zswapped 0 [ 2457.365704][T29863] file_mapped 335872 [ 2457.365704][T29863] file_dirty 0 [ 2457.365704][T29863] file_writeback 0 [ 2457.365704][T29863] swapcached 0 [ 2457.365704][T29863] anon_thp 0 [ 2457.365704][T29863] file_thp 0 [ 2457.365704][T29863] shmem_thp 0 [ 2457.365704][T29863] inactive_anon 118784 [ 2457.365704][T29863] active_anon 8351744 [ 2457.365704][T29863] inactive_file 0 [ 2457.365704][T29863] active_file 4096 [ 2457.365704][T29863] unevictable 0 [ 2457.365704][T29863] slab_reclaimable 40464 [ 2457.365704][T29863] slab_unreclaimable 81792 [ 2457.365704][T29863] slab 122256 [ 2457.390152][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2457.531901][T29748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2457.562094][T29686] device veth0_macvtap entered promiscuous mode [ 2457.581957][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2457.597376][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2457.605550][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2457.615924][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2457.625184][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2457.659205][T29686] device veth1_macvtap entered promiscuous mode [ 2457.664541][T29863] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=29862,uid=0 [ 2457.686958][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2457.703366][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2457.716422][T29863] Memory cgroup out of memory: Killed process 29863 (syz-executor.2) total-vm:56720kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2457.743773][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 11:03:27 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r4, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2457.754502][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2457.773737][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2457.803957][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2457.844292][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2457.871407][T29748] 8021q: adding VLAN 0 to HW filter on device team0 [ 2457.890239][T29755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2457.927905][T29755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2457.957952][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2457.961246][T29684] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2457.966418][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2458.001359][T29684] CPU: 0 PID: 29684 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2458.011814][T29684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2458.021887][T29684] Call Trace: [ 2458.025182][T29684] [ 2458.027578][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2458.028113][T29684] dump_stack_lvl+0xd1/0x138 [ 2458.036690][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2458.040728][T29684] dump_header+0x10b/0x85f [ 2458.040763][T29684] oom_kill_process.cold+0x10/0x15 [ 2458.040791][T29684] out_of_memory+0x35c/0x14a0 [ 2458.040835][T29684] ? find_held_lock+0x2d/0x110 [ 2458.067799][T29684] ? oom_killer_disable+0x280/0x280 [ 2458.073038][T29684] ? find_held_lock+0x2d/0x110 [ 2458.077841][T29684] mem_cgroup_out_of_memory+0x206/0x270 [ 2458.083425][T29684] ? mem_cgroup_margin+0x130/0x130 [ 2458.088582][T29684] ? lock_downgrade+0x6e0/0x6e0 [ 2458.093479][T29684] try_charge_memcg+0xefb/0x12f0 [ 2458.098452][T29684] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2458.104464][T29684] ? lock_downgrade+0x6e0/0x6e0 [ 2458.107447][T19256] bridge0: port 1(bridge_slave_0) entered blocking state [ 2458.109357][T29684] charge_memcg+0x90/0x3b0 [ 2458.116387][T19256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2458.120746][T29684] __mem_cgroup_charge+0x2b/0x90 [ 2458.120775][T29684] ? copy_mc_to_kernel+0x3e/0x90 [ 2458.137863][T29684] do_wp_page+0x7ec/0x3370 [ 2458.139384][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2458.142302][T29684] ? lock_release+0x810/0x810 [ 2458.154338][T29684] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2458.159746][T29684] ? do_raw_spin_lock+0x124/0x2b0 [ 2458.164793][T29684] ? rwlock_bug.part.0+0x90/0x90 [ 2458.169761][T29684] ? lock_chain_count+0x20/0x20 [ 2458.174644][T29684] __handle_mm_fault+0x1f58/0x3c90 [ 2458.179798][T29684] ? vm_iomap_memory+0x190/0x190 [ 2458.184795][T29684] handle_mm_fault+0x1b6/0x850 [ 2458.189600][T29684] do_user_addr_fault+0x475/0x1210 [ 2458.194753][T29684] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2458.200339][T29684] exc_page_fault+0x98/0x170 [ 2458.204960][T29684] asm_exc_page_fault+0x26/0x30 [ 2458.209838][T29684] RIP: 0033:0x7f1dcc05b58a [ 2458.214270][T29684] Code: 44 89 c8 87 07 83 f8 01 7e d5 45 31 d2 ba 01 00 00 00 be 81 00 00 00 89 d8 0f 05 eb c2 0f 1f 00 c3 0f 1f 80 00 00 00 00 31 c0 <87> 05 e8 f8 c7 00 83 f8 01 7e c9 45 31 d2 ba 01 00 00 00 be 81 00 [ 2458.233896][T29684] RSP: 002b:00007ffc5ff09530 EFLAGS: 00010246 [ 2458.239988][T29684] RAX: 0000000000000000 RBX: 00000000000000ca RCX: 00007f1dcc089dfb [ 2458.247978][T29684] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f1dcc1885e0 [ 2458.255965][T29684] RBP: 0000000000000001 R08: 00007f1dcc1885e0 R09: 0000000000000000 [ 2458.263954][T29684] R10: 00005555563636d0 R11: 0000000000000246 R12: 0000000000000001 [ 2458.271945][T29684] R13: 0000000000000006 R14: 0000000000000001 R15: 00007ffc5ff09620 [ 2458.279954][T29684] [ 2458.303074][T29686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2458.303137][T29684] memory: usage 8432kB, limit 0kB, failcnt 1203 [ 2458.319919][T29684] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2458.326784][T29684] Memory cgroup stats for /syz2: [ 2458.337248][T29684] anon 53248 [ 2458.337248][T29684] file 8355840 [ 2458.337248][T29684] kernel 225280 [ 2458.337248][T29684] kernel_stack 32768 [ 2458.337248][T29684] pagetables 57344 [ 2458.337248][T29684] sec_pagetables 0 [ 2458.337248][T29684] percpu 128 [ 2458.337248][T29684] sock 0 [ 2458.337248][T29684] vmalloc 0 [ 2458.337248][T29684] shmem 8351744 [ 2458.337248][T29684] zswap 0 [ 2458.337248][T29684] zswapped 0 [ 2458.337248][T29684] file_mapped 311296 [ 2458.337248][T29684] file_dirty 0 [ 2458.337248][T29684] file_writeback 0 [ 2458.337248][T29684] swapcached 0 [ 2458.337248][T29684] anon_thp 0 [ 2458.337248][T29684] file_thp 0 [ 2458.337248][T29684] shmem_thp 0 [ 2458.337248][T29684] inactive_anon 53248 [ 2458.337248][T29684] active_anon 8351744 [ 2458.337248][T29684] inactive_file 0 [ 2458.337248][T29684] active_file 4096 [ 2458.337248][T29684] unevictable 0 [ 2458.337248][T29684] slab_reclaimable 30400 [ 2458.337248][T29684] slab_unreclaimable 72768 [ 2458.337248][T29684] slab 103168 [ 2458.346927][T29686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2458.475249][T29686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2458.497449][T29686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2458.515529][T29686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2458.516750][T29684] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=29684,uid=0 [ 2458.544545][T29684] Memory cgroup out of memory: Killed process 29684 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2458.556072][T29686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2458.595255][T29686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2458.628146][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2458.647870][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2458.667828][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2458.676560][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2458.692044][T22629] bridge0: port 2(bridge_slave_1) entered blocking state [ 2458.699189][T22629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2458.713840][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2458.724351][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2458.749977][T29686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2458.770371][T29686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2458.786406][T29686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2458.806436][T29686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2458.817062][T29686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2458.827964][T29686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2458.839779][T29686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2458.850587][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2458.882172][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2458.913883][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2458.932433][T29686] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2458.955873][T29686] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2458.975722][T29686] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2458.985870][T29686] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2459.029141][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2459.043565][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2459.054004][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2459.070368][T19256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2459.132841][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2459.147609][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2459.175168][T29748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2459.206417][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2459.224974][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2459.266920][T29755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2459.334947][ T6761] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2459.422245][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2459.444251][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2459.477917][ T5470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2459.484726][T29755] device veth0_vlan entered promiscuous mode [ 2459.485935][ T5470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2459.570577][T29755] device veth1_vlan entered promiscuous mode [ 2459.577932][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2459.600197][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2459.625658][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2459.638357][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2459.646289][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2459.661537][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2459.680482][T13787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2459.708587][T13787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2459.726874][T29755] device veth0_macvtap entered promiscuous mode [ 2459.769162][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2459.787616][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2459.795537][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2459.812785][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2459.836270][T29755] device veth1_macvtap entered promiscuous mode [ 2459.862691][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2459.893249][T29755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2459.946926][T29755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2459.963608][T29755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2459.972885][T29895] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2459.985266][T29755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2459.992451][T29895] CPU: 0 PID: 29895 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2460.005135][T29755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2460.005460][T29895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2460.025948][T29895] Call Trace: [ 2460.028380][T29755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2460.029225][T29895] [ 2460.041972][T29895] dump_stack_lvl+0xd1/0x138 [ 2460.046603][T29895] dump_header+0x10b/0x85f [ 2460.051052][T29895] oom_kill_process.cold+0x10/0x15 [ 2460.051707][T29755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2460.056176][T29895] out_of_memory+0x35c/0x14a0 [ 2460.071391][T29895] ? oom_killer_disable+0x280/0x280 [ 2460.076647][T29895] mem_cgroup_out_of_memory+0x206/0x270 [ 2460.082235][T29895] ? mem_cgroup_margin+0x130/0x130 [ 2460.083182][T29755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2460.087385][T29895] memory_max_write+0x2f9/0x3c0 [ 2460.087420][T29895] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2460.087451][T29895] ? lock_release+0x810/0x810 [ 2460.087483][T29895] cgroup_file_write+0x1e2/0x770 [ 2460.087515][T29895] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2460.087548][T29895] ? kill_css+0x370/0x370 [ 2460.087577][T29895] ? __virt_addr_valid+0x61/0x2e0 [ 2460.087620][T29895] ? kill_css+0x370/0x370 [ 2460.087648][T29895] kernfs_fop_write_iter+0x3f1/0x600 [ 2460.087692][T29895] vfs_write+0x9ed/0xdd0 [ 2460.087726][T29895] ? kernel_write+0x630/0x630 [ 2460.087761][T29895] ? __fget_files+0x26a/0x440 [ 2460.087806][T29895] ksys_write+0x12b/0x250 [ 2460.127618][T29755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2460.128465][T29895] ? __ia32_sys_read+0xb0/0xb0 [ 2460.128504][T29895] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2460.136436][T29755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2460.137820][T29895] do_syscall_64+0x39/0xb0 [ 2460.137863][T29895] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2460.143210][T29755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2460.147358][T29895] RIP: 0033:0x7f4e0a48c0c9 [ 2460.147381][T29895] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2460.147405][T29895] RSP: 002b:00007f4e0b1be168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2460.147430][T29895] RAX: ffffffffffffffda RBX: 00007f4e0a5abf80 RCX: 00007f4e0a48c0c9 [ 2460.167254][T29755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2460.168257][T29895] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2460.173090][T29755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2460.178880][T29895] RBP: 00007f4e0a4e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2460.178900][T29895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2460.178915][T29895] R13: 00007fff089bfb5f R14: 00007f4e0b1be300 R15: 0000000000022000 [ 2460.178954][T29895] [ 2460.210225][T29895] memory: usage 10636kB, limit 0kB, failcnt 1084 [ 2460.248742][T29755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2460.259749][T29895] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2460.281420][T29755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2460.294664][T29895] Memory cgroup stats for [ 2460.306915][T29755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2460.322569][T29895] /syz4 [ 2460.334451][T29755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2460.352606][T29895] : [ 2460.377368][T29895] anon 110592 [ 2460.377368][T29895] file 10452992 [ 2460.377368][T29895] kernel 311296 [ 2460.377368][T29895] kernel_stack 65536 [ 2460.377368][T29895] pagetables 77824 [ 2460.377368][T29895] sec_pagetables 0 [ 2460.377368][T29895] percpu 64 [ 2460.377368][T29895] sock 0 [ 2460.377368][T29895] vmalloc 0 [ 2460.377368][T29895] shmem 10448896 [ 2460.377368][T29895] zswap 0 [ 2460.377368][T29895] zswapped 0 [ 2460.377368][T29895] file_mapped 335872 [ 2460.377368][T29895] file_dirty 4096 [ 2460.377368][T29895] file_writeback 0 [ 2460.377368][T29895] swapcached 0 [ 2460.377368][T29895] anon_thp 0 [ 2460.377368][T29895] file_thp 0 [ 2460.377368][T29895] shmem_thp 0 [ 2460.377368][T29895] inactive_anon 69632 [ 2460.377368][T29895] active_anon 10448896 [ 2460.377368][T29895] inactive_file 0 [ 2460.377368][T29895] active_file 0 [ 2460.377368][T29895] unevictable 0 [ 2460.377368][T29895] slab_reclaimable 64888 [ 2460.377368][T29895] slab_unreclaimable 75696 [ 2460.377368][T29895] slab 140584 [ 2460.380121][T29755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2460.515957][T29895] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=29686,uid=0 [ 2460.541221][T29895] Memory cgroup out of memory: Killed process 29686 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2460.607829][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2460.616617][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2460.625564][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2460.634654][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2460.657286][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2460.664789][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2460.684534][T29748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2460.694093][T29755] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2460.714545][T29755] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2460.726644][T29755] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2460.749322][T29755] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2460.846726][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2460.856096][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2460.938082][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2460.955474][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 11:03:30 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6800}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:03:30 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeec48d124107cee2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:03:30 executing program 4: perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(r3, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r4, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:03:30 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r4, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) [ 2460.995812][T29748] device veth0_vlan entered promiscuous mode [ 2461.024259][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2461.033168][T22629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 11:03:30 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x6, 0x3, &(0x7f0000000e40)=@framed, &(0x7f0000000ec0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000f80), 0x8, 0x10, 0x0}, 0x80) [ 2461.104556][T29748] device veth1_vlan entered promiscuous mode [ 2461.174238][ T6761] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2461.233766][T13808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2461.262594][T13808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2461.314866][ T6761] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2461.375410][T29748] device veth0_macvtap entered promiscuous mode [ 2461.394555][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2461.413489][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2461.422282][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2461.440661][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2461.468215][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2461.502101][T29748] device veth1_macvtap entered promiscuous mode [ 2461.518295][ T6761] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2461.560356][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2461.560942][ T5247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2461.587713][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2461.596997][ T5247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2461.606181][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2461.655108][T29748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2461.709974][T29748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2461.743566][T29748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2461.777014][T29748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2461.796895][T29748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2461.819380][T29748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2461.829764][T29748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2461.840859][T29748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2461.854068][T29748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2461.866651][T29748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2461.879338][T29748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2461.886676][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2461.899075][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2461.935113][T29748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2461.956151][T29748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2461.966740][T29748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2461.977618][T29748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2461.989693][T29748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2462.000391][T29748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2462.011460][T29748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2462.022681][T29748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2462.032742][T29748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2462.047220][T29748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2462.061021][T29748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2462.080074][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2462.092065][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2462.113533][T29748] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2462.122423][T29748] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2462.131868][T29748] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2462.140927][T29748] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2462.291225][T13787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2462.303077][T13787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2462.329956][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2462.346195][ T5247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2462.355491][ T5247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2462.404437][T22626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2462.468341][T29907] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2462.478739][T29907] CPU: 1 PID: 29907 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2462.489184][T29907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2462.499262][T29907] Call Trace: [ 2462.502564][T29907] [ 2462.505516][T29907] dump_stack_lvl+0xd1/0x138 [ 2462.510151][T29907] dump_header+0x10b/0x85f [ 2462.514605][T29907] oom_kill_process.cold+0x10/0x15 [ 2462.519750][T29907] out_of_memory+0x35c/0x14a0 [ 2462.524490][T29907] ? oom_killer_disable+0x280/0x280 [ 2462.529746][T29907] mem_cgroup_out_of_memory+0x206/0x270 [ 2462.535339][T29907] ? mem_cgroup_margin+0x130/0x130 [ 2462.540505][T29907] memory_max_write+0x2f9/0x3c0 [ 2462.545371][T29907] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2462.551452][T29907] ? lock_release+0x810/0x810 [ 2462.556145][T29907] cgroup_file_write+0x1e2/0x770 [ 2462.561097][T29907] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2462.567177][T29907] ? kill_css+0x370/0x370 [ 2462.571516][T29907] ? __virt_addr_valid+0x61/0x2e0 [ 2462.576565][T29907] ? kill_css+0x370/0x370 [ 2462.580905][T29907] kernfs_fop_write_iter+0x3f1/0x600 [ 2462.586213][T29907] vfs_write+0x9ed/0xdd0 [ 2462.590470][T29907] ? kernel_write+0x630/0x630 [ 2462.595162][T29907] ? __fget_files+0x26a/0x440 [ 2462.599862][T29907] ksys_write+0x12b/0x250 [ 2462.604202][T29907] ? __ia32_sys_read+0xb0/0xb0 [ 2462.608977][T29907] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2462.614889][T29907] do_syscall_64+0x39/0xb0 [ 2462.619323][T29907] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2462.625228][T29907] RIP: 0033:0x7f069da8c0c9 [ 2462.629649][T29907] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2462.649269][T29907] RSP: 002b:00007f069e855168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2462.657693][T29907] RAX: ffffffffffffffda RBX: 00007f069dbabf80 RCX: 00007f069da8c0c9 [ 2462.665669][T29907] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2462.673651][T29907] RBP: 00007f069dae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2462.681632][T29907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2462.689604][T29907] R13: 00007ffe2d59610f R14: 00007f069e855300 R15: 0000000000022000 [ 2462.697603][T29907] [ 2462.717017][T29907] memory: usage 10632kB, limit 0kB, failcnt 982 [ 2462.733375][T29907] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2462.742794][T29907] Memory cgroup stats for /syz1: [ 2462.742996][T29907] anon 114688 [ 2462.742996][T29907] file 10444800 [ 2462.742996][T29907] kernel 290816 [ 2462.742996][T29907] kernel_stack 65536 [ 2462.742996][T29907] pagetables 81920 [ 2462.742996][T29907] sec_pagetables 0 [ 2462.742996][T29907] percpu 64 [ 2462.742996][T29907] sock 0 [ 2462.742996][T29907] vmalloc 0 [ 2462.742996][T29907] shmem 10444800 [ 2462.742996][T29907] zswap 0 [ 2462.742996][T29907] zswapped 0 [ 2462.742996][T29907] file_mapped 397312 [ 2462.742996][T29907] file_dirty 0 [ 2462.742996][T29907] file_writeback 0 [ 2462.742996][T29907] swapcached 0 [ 2462.742996][T29907] anon_thp 0 [ 2462.742996][T29907] file_thp 0 [ 2462.742996][T29907] shmem_thp 0 [ 2462.742996][T29907] inactive_anon 114688 [ 2462.742996][T29907] active_anon 10444800 [ 2462.742996][T29907] inactive_file 0 [ 2462.742996][T29907] active_file 0 [ 2462.742996][T29907] unevictable 0 [ 2462.742996][T29907] slab_reclaimable 44912 [ 2462.742996][T29907] slab_unreclaimable 73104 [ 2462.742996][T29907] slab 118016 [ 2462.862213][T29907] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=29748,uid=0 [ 2462.878435][T29907] Memory cgroup out of memory: Killed process 29748 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2463.262211][ T8419] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2463.270569][ T8419] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2463.286143][T19460] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2463.299660][T19460] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2463.307236][T19460] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2463.501386][ T6761] device hsr_slave_0 left promiscuous mode [ 2463.514366][ T6761] device hsr_slave_1 left promiscuous mode [ 2463.527273][ T6761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2463.534709][ T6761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2463.552982][ T6761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2463.564960][ T6761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2463.578706][ T6761] device bridge_slave_1 left promiscuous mode [ 2463.584948][ T6761] bridge0: port 2(bridge_slave_1) entered disabled state [ 2463.611957][ T6761] device bridge_slave_0 left promiscuous mode [ 2463.624221][ T6761] bridge0: port 1(bridge_slave_0) entered disabled state [ 2463.635472][ T6761] device veth1_macvtap left promiscuous mode [ 2463.646756][ T6761] device veth0_macvtap left promiscuous mode [ 2463.653650][ T6761] device veth1_vlan left promiscuous mode [ 2463.663510][ T6761] device veth0_vlan left promiscuous mode [ 2463.841328][ T6761] team0 (unregistering): Port device team_slave_1 removed [ 2463.859178][ T6761] team0 (unregistering): Port device team_slave_0 removed [ 2463.873543][ T6761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface 11:03:33 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:03:33 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}], {0x85}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:03:33 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x14, 0x1, &(0x7f0000000740)=@raw=[@func], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 11:03:33 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0xf3d}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) openat$cgroup_ro(r3, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000340)='memory.min\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r4, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x3, 0x83, 0x0, 0x0, 0x64ade, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x8084b, 0x22, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) 11:03:33 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0), 0x12) 11:03:33 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2463.895835][ T6761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface 11:03:33 executing program 5: bpf$OBJ_GET_PROG(0x2, 0x0, 0x0) 11:03:33 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, 0x0, 0x0) 11:03:33 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}], {0x95, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:03:33 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0x3, &(0x7f0000001900)=@framed, &(0x7f0000001980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2464.298327][ T6761] bond0 (unregistering): Released all slaves [ 2464.599088][T29920] chnl_net:caif_netlink_parms(): no params data found [ 2464.695041][T29920] bridge0: port 1(bridge_slave_0) entered blocking state [ 2464.702924][T29920] bridge0: port 1(bridge_slave_0) entered disabled state [ 2464.713355][T29920] device bridge_slave_0 entered promiscuous mode [ 2464.722478][T29920] bridge0: port 2(bridge_slave_1) entered blocking state [ 2464.730305][T29920] bridge0: port 2(bridge_slave_1) entered disabled state [ 2464.738781][T29920] device bridge_slave_1 entered promiscuous mode [ 2464.784556][T29920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2464.796459][T29920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2464.831219][T29920] team0: Port device team_slave_0 added [ 2464.850538][T29920] team0: Port device team_slave_1 added [ 2464.919016][T29920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2464.926021][T29920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2464.976994][T29920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2465.009063][T29920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2465.016053][T29920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2465.067480][T29920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2465.112747][T29920] device hsr_slave_0 entered promiscuous mode [ 2465.128059][T29920] device hsr_slave_1 entered promiscuous mode [ 2465.137196][T29920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2465.144788][T29920] Cannot create hsr debugfs directory [ 2465.377947][T19460] Bluetooth: hci1: command 0x0409 tx timeout [ 2465.961649][T29920] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2465.987194][T29920] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2466.006641][T29920] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2466.049274][T29920] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2466.128253][T17937] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2466.136609][T17937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2466.146479][T17937] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2466.154435][T17937] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2466.162262][T17937] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2466.170752][T17937] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2466.410219][T29920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2466.455843][T29920] 8021q: adding VLAN 0 to HW filter on device team0 [ 2466.533775][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2466.541818][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2466.570709][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2466.588250][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2466.596773][T10486] bridge0: port 1(bridge_slave_0) entered blocking state [ 2466.603947][T10486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2466.612638][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2466.621709][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2466.630931][T10486] bridge0: port 2(bridge_slave_1) entered blocking state [ 2466.638082][T10486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2466.646573][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2466.691229][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2466.707941][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2466.727953][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2466.757449][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2466.794656][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2466.806758][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2466.823611][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2466.833602][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2466.850665][T21291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2466.867165][T29920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2466.878458][T29975] chnl_net:caif_netlink_parms(): no params data found [ 2467.101579][T29975] bridge0: port 1(bridge_slave_0) entered blocking state [ 2467.129793][T29975] bridge0: port 1(bridge_slave_0) entered disabled state [ 2467.150866][T29975] device bridge_slave_0 entered promiscuous mode [ 2467.179417][T29975] bridge0: port 2(bridge_slave_1) entered blocking state [ 2467.186601][T29975] bridge0: port 2(bridge_slave_1) entered disabled state [ 2467.211703][T29975] device bridge_slave_1 entered promiscuous mode [ 2467.262260][T29975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2467.283350][T29975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2467.300301][ T1201] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.306637][ T1201] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.358948][T29975] team0: Port device team_slave_0 added [ 2467.377051][T29975] team0: Port device team_slave_1 added [ 2467.439789][T29975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2467.446789][T29975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2467.455614][T17937] Bluetooth: hci1: command 0x041b tx timeout [ 2467.482425][T29975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2467.535898][ T6761] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2467.553262][T29975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2467.572434][T29975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2467.611904][T29975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2467.679173][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2467.686677][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2467.710186][ T6761] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2467.739888][T29920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2467.794377][ T6761] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2467.830924][T29975] device hsr_slave_0 entered promiscuous mode [ 2467.838490][T29975] device hsr_slave_1 entered promiscuous mode [ 2467.857602][T29975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2467.865190][T29975] Cannot create hsr debugfs directory [ 2467.887260][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2467.896118][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2467.924855][ T6761] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2468.148176][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2468.156616][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2468.170269][T29920] device veth0_vlan entered promiscuous mode [ 2468.184070][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2468.192527][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2468.214799][T29920] device veth1_vlan entered promiscuous mode [ 2468.247630][T19460] Bluetooth: hci4: command 0x0409 tx timeout [ 2468.317016][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2468.325184][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2468.348291][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2468.357310][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2468.371674][T29920] device veth0_macvtap entered promiscuous mode [ 2468.404789][T29920] device veth1_macvtap entered promiscuous mode [ 2468.462211][T29975] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2468.514884][T29920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2468.546895][T29920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2468.556745][T29920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2468.597032][T29920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2468.616887][T29920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2468.635936][T29920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2468.687084][T29920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2468.711151][T29920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2468.722854][T29920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2468.733963][T29920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2468.746557][T29920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2468.771564][T29920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2468.786625][T29920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2468.796751][T29920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2468.807911][T29920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2468.818061][T29920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2468.837060][T29920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2468.856934][T29920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2468.887332][T29920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2468.906908][T29920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2468.921969][T29920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2468.938323][T29920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2468.958370][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2468.966744][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2468.987844][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2469.004749][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2469.015259][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2469.033826][T19257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2469.088493][T29975] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2469.120979][T29920] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2469.134564][T29920] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2469.143853][T29920] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2469.166888][T29920] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2469.206668][T29975] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2469.311200][T29975] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2469.390784][ T8442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2469.417193][ T8442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2469.423305][T21387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2469.426742][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2469.441805][T21387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2469.449542][ T6761] ------------[ cut here ]------------ [ 2469.455005][ T6761] DEBUG_LOCKS_WARN_ON(1) [ 2469.455076][ T6761] WARNING: CPU: 1 PID: 6761 at kernel/locking/lockdep.c:231 __lock_acquire+0xecf/0x56d0 [ 2469.469039][ T6761] Modules linked in: [ 2469.472916][ T6761] CPU: 1 PID: 6761 Comm: kworker/u4:8 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2469.483073][ T6761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2469.493118][ T6761] Workqueue: netns cleanup_net [ 2469.497891][ T6761] RIP: 0010:__lock_acquire+0xecf/0x56d0 [ 2469.503422][ T6761] Code: 68 1a 73 8e e8 a2 de 6b 00 8b 05 14 80 0f 0d 85 c0 0f 85 79 f8 ff ff 48 c7 c6 40 51 4c 8a 48 c7 c7 a0 4a 4c 8a e8 91 f7 5b 08 <0f> 0b 31 c0 e9 73 f7 ff ff 48 63 5c 24 18 be 08 00 00 00 48 89 d8 [ 2469.523028][ T6761] RSP: 0018:ffffc900034cf5e0 EFLAGS: 00010086 [ 2469.529093][ T6761] RAX: 0000000000000000 RBX: 0000000000000909 RCX: 0000000000000000 [ 2469.537060][ T6761] RDX: ffff888042771d40 RSI: ffffffff8166710c RDI: fffff52000699eae [ 2469.545016][ T6761] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 2469.552968][ T6761] R10: 0000000080000002 R11: 0000000000000001 R12: 0000000000000003 [ 2469.560922][ T6761] R13: ffff888042771d40 R14: ffff888042772778 R15: dffffc0000000000 [ 2469.568876][ T6761] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 2469.577787][ T6761] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2469.584370][ T6761] CR2: 00007f06738929ee CR3: 00000000787d4000 CR4: 00000000003506e0 [ 2469.592326][ T6761] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2469.600287][ T6761] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2469.608242][ T6761] Call Trace: [ 2469.611506][ T6761] [ 2469.614428][ T6761] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2469.620398][ T6761] ? find_held_lock+0x2d/0x110 [ 2469.625155][ T6761] lock_acquire+0x1e3/0x630 [ 2469.629653][ T6761] ? finish_task_switch.isra.0+0x130/0xc80 [ 2469.635451][ T6761] ? lock_release+0x810/0x810 [ 2469.640112][ T6761] ? find_held_lock+0x2d/0x110 [ 2469.644864][ T6761] ? __schedule+0xb02/0x5450 [ 2469.649444][ T6761] ? lock_downgrade+0x6e0/0x6e0 [ 2469.654283][ T6761] finish_task_switch.isra.0+0x192/0xc80 [ 2469.659922][ T6761] ? finish_task_switch.isra.0+0x130/0xc80 [ 2469.665719][ T6761] ? __switch_to+0x5d0/0x10a0 [ 2469.670377][ T6761] ? __switch_to_asm+0x3e/0x60 [ 2469.675129][ T6761] __schedule+0xb92/0x5450 [ 2469.679535][ T6761] ? lockdep_hardirqs_on+0x7d/0x100 [ 2469.684716][ T6761] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2469.690340][ T6761] ? io_schedule_timeout+0x150/0x150 [ 2469.695614][ T6761] ? __mutex_lock+0xa43/0x1360 [ 2469.700361][ T6761] schedule+0xde/0x1b0 [ 2469.704432][ T6761] schedule_preempt_disabled+0x13/0x20 [ 2469.709873][ T6761] __mutex_lock+0xa48/0x1360 [ 2469.714446][ T6761] ? devlink_pernet_pre_exit+0x10a/0x220 [ 2469.720115][ T6761] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 2469.725645][ T6761] ? lock_downgrade+0x6e0/0x6e0 [ 2469.730479][ T6761] ? devlink_try_get+0x15d/0x1e0 [ 2469.735408][ T6761] devlink_pernet_pre_exit+0x10a/0x220 [ 2469.740867][ T6761] ? devlinks_xa_find_get+0x220/0x220 [ 2469.746226][ T6761] ? cttimeout_net_pre_exit+0x10d/0x500 [ 2469.751796][ T6761] ? devlinks_xa_find_get+0x220/0x220 [ 2469.757160][ T6761] cleanup_net+0x455/0xb10 [ 2469.761570][ T6761] ? unregister_pernet_device+0x80/0x80 [ 2469.767104][ T6761] process_one_work+0x9bf/0x1710 [ 2469.772036][ T6761] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 2469.777395][ T6761] ? rwlock_bug.part.0+0x90/0x90 [ 2469.782329][ T6761] ? _raw_spin_lock_irq+0x45/0x50 [ 2469.787357][ T6761] worker_thread+0x669/0x1090 [ 2469.792022][ T6761] ? process_one_work+0x1710/0x1710 [ 2469.797204][ T6761] kthread+0x2e8/0x3a0 [ 2469.801254][ T6761] ? kthread_complete_and_exit+0x40/0x40 [ 2469.806870][ T6761] ret_from_fork+0x1f/0x30 [ 2469.811291][ T6761] [ 2469.814296][ T6761] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2469.821552][ T6761] CPU: 1 PID: 6761 Comm: kworker/u4:8 Not tainted 6.2.0-rc2-syzkaller-00410-g0eb9d19e2201 #0 [ 2469.831696][ T6761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2469.841749][ T6761] Workqueue: netns cleanup_net [ 2469.846513][ T6761] Call Trace: [ 2469.849777][ T6761] [ 2469.852694][ T6761] dump_stack_lvl+0xd1/0x138 [ 2469.857278][ T6761] panic+0x2cc/0x626 [ 2469.861186][ T6761] ? panic_print_sys_info.part.0+0x110/0x110 [ 2469.867157][ T6761] ? __lock_acquire+0xecf/0x56d0 [ 2469.872082][ T6761] check_panic_on_warn.cold+0x19/0x35 [ 2469.877444][ T6761] __warn+0xf2/0x1a0 [ 2469.881325][ T6761] ? __wake_up_klogd.part.0+0x99/0xf0 [ 2469.886685][ T6761] ? __lock_acquire+0xecf/0x56d0 [ 2469.891610][ T6761] report_bug+0x1c0/0x210 [ 2469.895929][ T6761] handle_bug+0x3c/0x70 [ 2469.900077][ T6761] exc_invalid_op+0x18/0x50 [ 2469.904577][ T6761] asm_exc_invalid_op+0x1a/0x20 [ 2469.909416][ T6761] RIP: 0010:__lock_acquire+0xecf/0x56d0 [ 2469.914948][ T6761] Code: 68 1a 73 8e e8 a2 de 6b 00 8b 05 14 80 0f 0d 85 c0 0f 85 79 f8 ff ff 48 c7 c6 40 51 4c 8a 48 c7 c7 a0 4a 4c 8a e8 91 f7 5b 08 <0f> 0b 31 c0 e9 73 f7 ff ff 48 63 5c 24 18 be 08 00 00 00 48 89 d8 [ 2469.934552][ T6761] RSP: 0018:ffffc900034cf5e0 EFLAGS: 00010086 [ 2469.940603][ T6761] RAX: 0000000000000000 RBX: 0000000000000909 RCX: 0000000000000000 [ 2469.948558][ T6761] RDX: ffff888042771d40 RSI: ffffffff8166710c RDI: fffff52000699eae [ 2469.956515][ T6761] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 2469.964481][ T6761] R10: 0000000080000002 R11: 0000000000000001 R12: 0000000000000003 [ 2469.972437][ T6761] R13: ffff888042771d40 R14: ffff888042772778 R15: dffffc0000000000 [ 2469.980408][ T6761] ? vprintk+0x8c/0xa0 [ 2469.984469][ T6761] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2469.990608][ T6761] ? find_held_lock+0x2d/0x110 [ 2469.995368][ T6761] lock_acquire+0x1e3/0x630 [ 2469.999852][ T6761] ? finish_task_switch.isra.0+0x130/0xc80 [ 2470.005650][ T6761] ? lock_release+0x810/0x810 [ 2470.010309][ T6761] ? find_held_lock+0x2d/0x110 [ 2470.015062][ T6761] ? __schedule+0xb02/0x5450 [ 2470.019651][ T6761] ? lock_downgrade+0x6e0/0x6e0 [ 2470.024492][ T6761] finish_task_switch.isra.0+0x192/0xc80 [ 2470.030126][ T6761] ? finish_task_switch.isra.0+0x130/0xc80 [ 2470.035931][ T6761] ? __switch_to+0x5d0/0x10a0 [ 2470.040601][ T6761] ? __switch_to_asm+0x3e/0x60 [ 2470.045367][ T6761] __schedule+0xb92/0x5450 [ 2470.049780][ T6761] ? lockdep_hardirqs_on+0x7d/0x100 [ 2470.054965][ T6761] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2470.060595][ T6761] ? io_schedule_timeout+0x150/0x150 [ 2470.065878][ T6761] ? __mutex_lock+0xa43/0x1360 [ 2470.070663][ T6761] schedule+0xde/0x1b0 [ 2470.074730][ T6761] schedule_preempt_disabled+0x13/0x20 [ 2470.080187][ T6761] __mutex_lock+0xa48/0x1360 [ 2470.084784][ T6761] ? devlink_pernet_pre_exit+0x10a/0x220 [ 2470.090424][ T6761] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 2470.095962][ T6761] ? lock_downgrade+0x6e0/0x6e0 [ 2470.100800][ T6761] ? devlink_try_get+0x15d/0x1e0 [ 2470.105734][ T6761] devlink_pernet_pre_exit+0x10a/0x220 [ 2470.111181][ T6761] ? devlinks_xa_find_get+0x220/0x220 [ 2470.116541][ T6761] ? cttimeout_net_pre_exit+0x10d/0x500 [ 2470.122090][ T6761] ? devlinks_xa_find_get+0x220/0x220 [ 2470.127451][ T6761] cleanup_net+0x455/0xb10 [ 2470.131873][ T6761] ? unregister_pernet_device+0x80/0x80 [ 2470.137422][ T6761] process_one_work+0x9bf/0x1710 [ 2470.142349][ T6761] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 2470.147706][ T6761] ? rwlock_bug.part.0+0x90/0x90 [ 2470.152627][ T6761] ? _raw_spin_lock_irq+0x45/0x50 [ 2470.157641][ T6761] worker_thread+0x669/0x1090 [ 2470.162320][ T6761] ? process_one_work+0x1710/0x1710 [ 2470.167517][ T6761] kthread+0x2e8/0x3a0 [ 2470.171571][ T6761] ? kthread_complete_and_exit+0x40/0x40 [ 2470.177201][ T6761] ret_from_fork+0x1f/0x30 [ 2470.181612][ T6761] [ 2471.251125][ T6761] Shutting down cpus with NMI [ 2471.256244][ T6761] Kernel Offset: disabled [ 2471.260560][ T6761] Rebooting in 86400 seconds..