erface: batadv_slave_1 [ 2728.547430][T15511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2728.573477][T27851] Bluetooth: hci1: command 0x0409 tx timeout [ 2728.584646][T15511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2728.597820][T15508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2728.605460][T15508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2728.660260][T15508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2728.682239][T15508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2728.689207][T15508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2728.737823][T15508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2728.790335][ T2242] Bluetooth: hci2: command 0x0409 tx timeout [ 2728.874954][T15508] hsr_slave_0: entered promiscuous mode [ 2728.892529][T15508] hsr_slave_1: entered promiscuous mode [ 2728.911142][T15511] hsr_slave_0: entered promiscuous mode [ 2728.927230][T15511] hsr_slave_1: entered promiscuous mode [ 2728.970825][T15511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2728.978426][T15511] Cannot create hsr debugfs directory [ 2730.449887][T15508] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2730.467687][T15508] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2730.495413][T15508] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2730.511889][T15508] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2730.552711][T15511] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2730.569655][T15511] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2730.596576][T15511] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2730.613806][T15511] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2730.630430][ T2242] Bluetooth: hci1: command 0x041b tx timeout [ 2730.704265][T15508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2730.747032][T15508] 8021q: adding VLAN 0 to HW filter on device team0 [ 2730.764964][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2730.773993][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2730.812550][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2730.821768][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2730.831356][ T5041] bridge0: port 1(bridge_slave_0) entered blocking state [ 2730.838455][ T5041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2730.849849][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2730.858755][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2730.870266][ T2242] Bluetooth: hci2: command 0x041b tx timeout [ 2730.875274][ T5041] bridge0: port 2(bridge_slave_1) entered blocking state [ 2730.883381][ T5041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2730.910485][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2730.918344][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2730.927094][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2730.936195][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2730.945132][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2730.957320][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2730.971126][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2730.979895][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2731.008716][T15508] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2731.027734][T15508] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2731.043604][T15511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2731.054735][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2731.063496][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2731.072326][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2731.083880][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2731.092431][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2731.110845][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2731.118659][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2731.143898][T15511] 8021q: adding VLAN 0 to HW filter on device team0 [ 2731.156711][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2731.171738][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2731.198568][T14475] bridge0: port 1(bridge_slave_0) entered blocking state [ 2731.205722][T14475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2731.246008][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2731.263161][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2731.273109][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2731.281995][T14476] bridge0: port 2(bridge_slave_1) entered blocking state [ 2731.289100][T14476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2731.297255][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2731.306264][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2731.315492][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2731.324825][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2731.346599][T15511] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2731.362201][T15511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2731.374377][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2731.391062][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2731.399773][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2731.408890][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2731.417647][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2731.427711][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2731.448887][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2731.467762][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2731.533924][T15508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2731.542340][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2731.549836][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2731.571202][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2731.587946][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2731.621639][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2731.629995][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2731.641159][T15508] veth0_vlan: entered promiscuous mode [ 2731.651565][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2731.659348][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2731.669901][T15508] veth1_vlan: entered promiscuous mode [ 2731.699702][T15508] veth0_macvtap: entered promiscuous mode [ 2731.709202][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2731.718414][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2731.728371][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2731.737437][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2731.762920][T15508] veth1_macvtap: entered promiscuous mode [ 2731.772558][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2731.791288][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2731.808138][T15508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2731.840122][T15508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2731.849955][T15508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2731.877983][T15508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2731.895873][T15508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2731.907558][T15508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2731.928409][T15508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2731.939639][T15508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2731.957463][T15508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2731.967975][T15508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2731.998637][T15508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2732.018625][T15508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2732.038917][T15508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2732.057981][T15508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2732.068769][T15508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2732.091201][T15508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2732.108691][T15508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2732.126818][T15508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2732.138765][T15508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2732.159119][T15508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2732.179595][T15508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2732.199164][T15508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2732.208187][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2732.217635][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2732.226872][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2732.249971][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2732.271425][T15508] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2732.281777][T15508] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2732.291667][T15508] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2732.301956][T15508] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2732.346127][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2732.353910][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2732.373139][T15511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2732.452680][ T1221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2732.496200][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2732.506758][ T1221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2732.515806][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2732.539637][T15511] veth0_vlan: entered promiscuous mode [ 2732.553888][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2732.563212][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2732.576029][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2732.591120][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2732.599024][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2732.618860][T15511] veth1_vlan: entered promiscuous mode [ 2732.631881][ T5181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2732.640025][ T5181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2732.663658][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2732.680709][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2732.689377][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2732.711201][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2732.711250][ T2242] Bluetooth: hci1: command 0x040f tx timeout [ 2732.720725][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2732.736234][T15511] veth0_macvtap: entered promiscuous mode [ 2732.787988][T15511] veth1_macvtap: entered promiscuous mode [ 2732.874889][T15511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2732.897822][T15630] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2732.905655][T15511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2732.919129][T15511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2732.921799][T15630] CPU: 0 PID: 15630 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2732.930038][T15511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2732.939931][T15630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2732.939948][T15630] Call Trace: [ 2732.939956][T15630] [ 2732.939965][T15630] dump_stack_lvl+0x136/0x150 [ 2732.940015][T15630] dump_header+0x10a/0xd70 [ 2732.940047][T15630] oom_kill_process+0x25d/0x600 [ 2732.940077][T15630] out_of_memory+0x35c/0x1660 [ 2732.950514][T27851] Bluetooth: hci2: command 0x040f tx timeout [ 2732.959914][T15630] ? io_schedule_timeout+0x150/0x150 [ 2732.970278][T15511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2732.970757][T15630] ? oom_killer_disable+0x2b0/0x2b0 [ 2732.975169][T15511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2732.979993][T15630] ? kernfs_notify+0x1ac/0x410 [ 2732.988240][T15511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2732.990610][T15630] mem_cgroup_out_of_memory+0x206/0x270 [ 2732.990655][T15630] ? mem_cgroup_margin+0x130/0x130 [ 2732.990705][T15630] memory_max_write+0x2f9/0x3c0 [ 2732.997384][T15511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2733.006339][T15630] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2733.006384][T15630] ? lock_sync+0x190/0x190 [ 2733.006422][T15630] cgroup_file_write+0x1e2/0x7b0 [ 2733.078305][T15630] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2733.084402][T15630] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2733.089788][T15630] ? __virt_addr_valid+0x61/0x2e0 [ 2733.094848][T15630] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2733.100320][T15630] kernfs_fop_write_iter+0x3f1/0x600 [ 2733.105638][T15630] vfs_write+0x945/0xd50 [ 2733.109890][T15630] ? kernel_write+0x670/0x670 [ 2733.114582][T15630] ? __fget_files+0x26a/0x480 [ 2733.119292][T15630] ksys_write+0x12b/0x250 [ 2733.123624][T15630] ? __ia32_sys_read+0xb0/0xb0 [ 2733.128394][T15630] ? syscall_enter_from_user_mode+0x26/0x80 [ 2733.134306][T15630] do_syscall_64+0x39/0xb0 [ 2733.138738][T15630] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2733.144648][T15630] RIP: 0033:0x7f11b668c169 [ 2733.149068][T15630] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2733.168686][T15630] RSP: 002b:00007f11b7403168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2733.177110][T15630] RAX: ffffffffffffffda RBX: 00007f11b67ac050 RCX: 00007f11b668c169 [ 2733.185087][T15630] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000007 [ 2733.193059][T15630] RBP: 00007f11b66e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2733.201047][T15630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2733.209024][T15630] R13: 00007fff05acf1af R14: 00007f11b7403300 R15: 0000000000022000 [ 2733.217017][T15630] [ 2733.226707][T15511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2733.237272][T15511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2733.247266][T15511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2733.251724][T15630] memory: usage 8956kB, limit 0kB, failcnt 2435 [ 2733.257794][T15511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2733.270262][T15630] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2733.275935][T15511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2733.292434][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2733.301220][T15630] Memory cgroup stats for /syz3: [ 2733.301425][T15630] anon 200704 [ 2733.301425][T15630] file 8351744 [ 2733.301425][T15630] kernel 598016 [ 2733.301425][T15630] kernel_stack 163840 [ 2733.301425][T15630] pagetables 155648 [ 2733.301425][T15630] sec_pagetables 0 [ 2733.301425][T15630] percpu 128 [ 2733.301425][T15630] sock 0 [ 2733.301425][T15630] vmalloc 0 [ 2733.301425][T15630] shmem 8351744 [ 2733.301425][T15630] zswap 0 [ 2733.301425][T15630] zswapped 0 [ 2733.301425][T15630] file_mapped 241664 [ 2733.301425][T15630] file_dirty 0 [ 2733.301425][T15630] file_writeback 0 [ 2733.301425][T15630] swapcached 0 [ 2733.301425][T15630] anon_thp 0 [ 2733.301425][T15630] file_thp 0 [ 2733.301425][T15630] shmem_thp 0 [ 2733.301425][T15630] inactive_anon 8458240 [ 2733.301425][T15630] active_anon 69632 [ 2733.301425][T15630] inactive_file 0 [ 2733.301425][T15630] active_file 0 [ 2733.301425][T15630] unevictable 0 [ 2733.301425][T15630] slab_reclaimable 48592 [ 2733.301425][T15630] slab_unreclaimable 188216 [ 2733.301425][T15630] slab 236808 [ 2733.301425][T15630] workingset_refault_anon 0 [ 2733.301425][T15630] workingset_refault_file 1 [ 2733.301425][T15630] workingset_activate_anon 0 [ 2733.301425][T15630] workingset_activate_file 0 [ 2733.301425][T15630] workingset_restore_anon 0 [ 2733.301425][T15630] workingset_restore_file 0 [ 2733.301425][T15630] workingset_nodereclaim 0 [ 2733.301425][T15630] pgscan 199 [ 2733.301425][T15630] pgsteal 86 [ 2733.301425][T15630] pgscan_kswapd 0 [ 2733.301425][T15630] pgscan_direct 199 [ 2733.301425][T15630] pgscan_khugepaged 0 [ 2733.301425][T15630] pgsteal_kswapd 0 [ 2733.301425][T15630] pgsteal_direct 86 [ 2733.301425][T15630] pgsteal_khugepaged 0 [ 2733.301425][T15630] pgfault 89351 [ 2733.301425][T15630] pgmajfault 0 [ 2733.301425][T15630] pgrefill 192043 [ 2733.301425][T15630] pgactivate 113 [ 2733.301425][T15630] pgdeactivate 0 [ 2733.301425][T15630] pglazyfree 0 [ 2733.301425][T15630] pglazyfreed 0 [ 2733.301425][T15630] zswpin 0 [ 2733.301425][T15630] zswpout 0 [ 2733.301425][T15630] thp_fault_alloc 0 [ 2733.309755][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2733.502421][T15630] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15508,uid=0 [ 2733.518103][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2733.519990][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2733.533826][T15630] Memory cgroup out of memory: Killed process 15508 (syz-executor.3) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2733.575049][T15511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2733.586535][T15511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2733.597394][T15511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2733.608823][T15511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2733.619271][T15511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2733.630952][T15511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2733.641090][T15511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2733.651753][T15511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2733.661837][T15511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2733.674655][T15511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2733.684676][T15511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2733.695379][T15511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2733.707034][T15511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2733.734354][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2733.744301][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2733.784654][T15511] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2733.793504][T15511] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2733.802707][T15511] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2733.811502][T15511] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2733.935490][T19644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2733.961934][T19644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2734.012008][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2734.027210][ T5181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2734.045321][ T5181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2734.066580][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2734.249839][T15644] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2734.288882][T15644] CPU: 1 PID: 15644 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2734.299345][T15644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2734.309417][T15644] Call Trace: [ 2734.312708][T15644] [ 2734.315654][T15644] dump_stack_lvl+0x136/0x150 [ 2734.320363][T15644] dump_header+0x10a/0xd70 [ 2734.324774][T15644] oom_kill_process+0x25d/0x600 [ 2734.329617][T15644] out_of_memory+0x35c/0x1660 [ 2734.334292][T15644] ? oom_killer_disable+0x2b0/0x2b0 [ 2734.339477][T15644] ? find_held_lock+0x2d/0x110 [ 2734.344238][T15644] mem_cgroup_out_of_memory+0x206/0x270 [ 2734.349781][T15644] ? mem_cgroup_margin+0x130/0x130 [ 2734.354888][T15644] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2734.360689][T15644] memory_max_write+0x2f9/0x3c0 [ 2734.365533][T15644] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2734.371592][T15644] ? lock_sync+0x190/0x190 [ 2734.376003][T15644] cgroup_file_write+0x1e2/0x7b0 [ 2734.380928][T15644] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2734.387002][T15644] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2734.392380][T15644] ? __virt_addr_valid+0x61/0x2e0 [ 2734.397436][T15644] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2734.402798][T15644] kernfs_fop_write_iter+0x3f1/0x600 [ 2734.408079][T15644] vfs_write+0x945/0xd50 [ 2734.412312][T15644] ? kernel_write+0x670/0x670 [ 2734.417000][T15644] ? __fget_files+0x26a/0x480 [ 2734.421686][T15644] ksys_write+0x12b/0x250 [ 2734.426003][T15644] ? __ia32_sys_read+0xb0/0xb0 [ 2734.430759][T15644] ? syscall_enter_from_user_mode+0x26/0x80 [ 2734.436727][T15644] do_syscall_64+0x39/0xb0 [ 2734.441206][T15644] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2734.447149][T15644] RIP: 0033:0x7f1ea008c169 [ 2734.451558][T15644] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2734.471165][T15644] RSP: 002b:00007f1ea0d81168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2734.479569][T15644] RAX: ffffffffffffffda RBX: 00007f1ea01abf80 RCX: 00007f1ea008c169 [ 2734.487530][T15644] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000004 [ 2734.495502][T15644] RBP: 00007f1ea00e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2734.503462][T15644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2734.511421][T15644] R13: 00007ffd3826afbf R14: 00007f1ea0d81300 R15: 0000000000022000 [ 2734.519391][T15644] [ 2734.536744][T15644] memory: usage 9068kB, limit 0kB, failcnt 2524 [ 2734.543449][T15644] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2734.551783][T15644] Memory cgroup stats for /syz0: [ 2734.552000][T15644] anon 90112 [ 2734.552000][T15644] file 8851456 [ 2734.552000][T15644] kernel 344064 [ 2734.552000][T15644] kernel_stack 65536 [ 2734.552000][T15644] pagetables 77824 [ 2734.552000][T15644] sec_pagetables 0 [ 2734.552000][T15644] percpu 64 [ 2734.552000][T15644] sock 0 [ 2734.552000][T15644] vmalloc 0 [ 2734.552000][T15644] shmem 8343552 [ 2734.552000][T15644] zswap 0 [ 2734.552000][T15644] zswapped 0 [ 2734.552000][T15644] file_mapped 274432 [ 2734.552000][T15644] file_dirty 507904 [ 2734.552000][T15644] file_writeback 0 [ 2734.552000][T15644] swapcached 0 [ 2734.552000][T15644] anon_thp 0 [ 2734.552000][T15644] file_thp 0 [ 2734.552000][T15644] shmem_thp 0 [ 2734.552000][T15644] inactive_anon 8347648 [ 2734.552000][T15644] active_anon 86016 [ 2734.552000][T15644] inactive_file 0 [ 2734.552000][T15644] active_file 507904 [ 2734.552000][T15644] unevictable 0 [ 2734.552000][T15644] slab_reclaimable 73640 [ 2734.552000][T15644] slab_unreclaimable 87312 [ 2734.552000][T15644] slab 160952 [ 2734.552000][T15644] workingset_refault_anon 0 [ 2734.552000][T15644] workingset_refault_file 0 [ 2734.552000][T15644] workingset_activate_anon 0 [ 2734.552000][T15644] workingset_activate_file 0 [ 2734.552000][T15644] workingset_restore_anon 0 [ 2734.552000][T15644] workingset_restore_file 0 [ 2734.552000][T15644] workingset_nodereclaim 0 [ 2734.552000][T15644] pgscan 875 [ 2734.552000][T15644] pgsteal 403 [ 2734.552000][T15644] pgscan_kswapd 0 [ 2734.552000][T15644] pgscan_direct 875 [ 2734.552000][T15644] pgscan_khugepaged 0 [ 2734.552000][T15644] pgsteal_kswapd 0 [ 2734.552000][T15644] pgsteal_direct 403 [ 2734.552000][T15644] pgsteal_khugepaged 0 [ 2734.552000][T15644] pgfault 128923 [ 2734.552000][T15644] pgmajfault 0 [ 2734.552000][T15644] pgrefill 1276565 [ 2734.552000][T15644] pgactivate 472 [ 2734.552000][T15644] pgdeactivate 0 [ 2734.552000][T15644] pglazyfree 0 [ 2734.552000][T15644] pglazyfreed 0 [ 2734.552000][T15644] zswpin 0 [ 2734.552000][T15644] zswpout 0 [ 2734.743278][T15644] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=15643,uid=0 [ 2734.758978][T15644] Memory cgroup out of memory: Killed process 15643 (syz-executor.0) total-vm:50840kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2735.031205][ T2242] Bluetooth: hci2: command 0x0419 tx timeout 08:02:45 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x0) (async) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r2, @ANYRES8=r4], 0x12) (async) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000001c0)={r5}) recvmsg$unix(r6, &(0x7f0000002640)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000002540)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/111, 0x6f}, {&(0x7f0000000340)=""/91, 0x5b}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/142, 0x8e}, {&(0x7f0000002500)=""/54, 0x36}], 0x6, &(0x7f00000025c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x1) r7 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) (async) write$cgroup_int(r7, &(0x7f0000000180), 0x12) 08:02:45 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x85ffffff, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:02:45 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r9, &(0x7f0000000200)=ANY=[@ANYRES8=r8, @ANYRES8=r10], 0x12) write$cgroup_subtree(r9, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRES8=r6], 0x12) openat$cgroup_ro(r5, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r14 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r13, &(0x7f0000000200)=ANY=[@ANYRES8=r12, @ANYRES8=r14], 0x12) openat$cgroup_ro(r13, &(0x7f0000000040)='blkio.bfq.empty_time\x00', 0x0, 0x0) 08:02:45 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3f00}, 0x0, 0x0, r0, 0x0) 08:02:45 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x0, 0x9, 0xffc5, 0x1b208d76dec320ae, 0x8, 0x80000000, 0xcc, 0x0, 0x200, 0x0, 0x8000}, r5, 0x0, r2, 0x1) close(r4) 08:02:45 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='memory.max\x00') r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_int(r2, &(0x7f0000000280)='cpuset.mem_exclusive\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES8=r6], 0x12) write$cgroup_int(r5, &(0x7f0000000200)=0x1000000040000, 0x12) r7 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r11 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r10, &(0x7f0000000200)=ANY=[@ANYRES8=r9, @ANYRES8=r11], 0x12) openat$cgroup_ro(r10, &(0x7f0000000240)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r7, r12, 0x0, 0x7, &(0x7f0000000140)='cgroup\x00'}, 0x30) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 2736.149185][T15511] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 08:02:45 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x93010000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:02:45 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x400001}, 0x0, 0x0, r0, 0x0) [ 2736.235517][T15511] CPU: 0 PID: 15511 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2736.236132][ T8046] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2736.245963][T15511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2736.245980][T15511] Call Trace: [ 2736.245988][T15511] [ 2736.245998][T15511] dump_stack_lvl+0x136/0x150 [ 2736.246047][T15511] dump_header+0x10a/0xd70 [ 2736.281754][T15511] oom_kill_process+0x25d/0x600 [ 2736.286657][T15511] out_of_memory+0x35c/0x1660 [ 2736.291365][T15511] ? find_held_lock+0x2d/0x110 [ 2736.296156][T15511] ? oom_killer_disable+0x2b0/0x2b0 [ 2736.301379][T15511] ? rcu_read_unlock+0x9/0x60 [ 2736.306083][T15511] ? find_held_lock+0x2d/0x110 [ 2736.311225][T15511] mem_cgroup_out_of_memory+0x206/0x270 [ 2736.316808][T15511] ? mem_cgroup_margin+0x130/0x130 [ 2736.321961][T15511] ? lock_downgrade+0x690/0x690 [ 2736.326883][T15511] try_charge_memcg+0xf99/0x13a0 [ 2736.331866][T15511] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2736.337890][T15511] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2736.343649][T15511] ? lock_downgrade+0x690/0x690 [ 2736.348541][T15511] ? lock_downgrade+0x690/0x690 [ 2736.353427][T15511] ? rcu_read_unlock+0x9/0x60 [ 2736.358143][T15511] obj_cgroup_charge+0x2af/0x5e0 [ 2736.363121][T15511] ? copy_process+0x3c0/0x7600 [ 2736.367923][T15511] kmem_cache_alloc_node+0xa8/0x3e0 [ 2736.373254][T15511] copy_process+0x3c0/0x7600 [ 2736.377881][T15511] ? _raw_spin_unlock+0x28/0x40 08:02:45 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0xb9031a00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2736.382770][T15511] ? wp_page_reuse+0x197/0x570 [ 2736.387597][T15511] ? pidfd_prepare+0x80/0x80 [ 2736.392232][T15511] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2736.398255][T15511] kernel_clone+0xeb/0x890 [ 2736.402718][T15511] ? create_io_thread+0xe0/0xe0 [ 2736.407603][T15511] ? do_user_addr_fault+0x2b1/0x1210 [ 2736.412926][T15511] ? reacquire_held_locks+0x216/0x4e0 [ 2736.418333][T15511] ? do_user_addr_fault+0x2b1/0x1210 [ 2736.423662][T15511] ? find_held_lock+0x2d/0x110 [ 2736.428462][T15511] __do_sys_clone+0xba/0x100 [ 2736.433098][T15511] ? kernel_clone+0x890/0x890 [ 2736.437825][T15511] ? syscall_enter_from_user_mode+0x26/0x80 [ 2736.443761][T15511] do_syscall_64+0x39/0xb0 [ 2736.448223][T15511] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2736.454155][T15511] RIP: 0033:0x7f1ea0089e9b [ 2736.458592][T15511] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2736.478227][T15511] RSP: 002b:00007ffd3826b200 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 08:02:45 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0xba000000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2736.486679][T15511] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1ea0089e9b [ 2736.494677][T15511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2736.502672][T15511] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555562f1400 [ 2736.510671][T15511] R10: 00005555562f16d0 R11: 0000000000000246 R12: 0000000000000001 [ 2736.518682][T15511] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd3826b2e0 [ 2736.526692][T15511] 08:02:45 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, r0, 0x0) 08:02:45 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0xca000000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:02:45 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r5], 0x12) openat$cgroup_ro(r4, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 08:02:45 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1004000}, 0x0, 0x0, r0, 0x0) [ 2736.920163][T15511] memory: usage 8264kB, limit 0kB, failcnt 2565 [ 2736.927664][T15511] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2736.949077][T15511] Memory cgroup stats for /syz0: [ 2736.949307][T15511] anon 36864 [ 2736.949307][T15511] file 8343552 [ 2736.949307][T15511] kernel 81920 [ 2736.949307][T15511] kernel_stack 0 [ 2736.949307][T15511] pagetables 8192 [ 2736.949307][T15511] sec_pagetables 0 [ 2736.949307][T15511] percpu 0 [ 2736.949307][T15511] sock 0 [ 2736.949307][T15511] vmalloc 0 [ 2736.949307][T15511] shmem 8343552 [ 2736.949307][T15511] zswap 0 [ 2736.949307][T15511] zswapped 0 [ 2736.949307][T15511] file_mapped 249856 [ 2736.949307][T15511] file_dirty 0 [ 2736.949307][T15511] file_writeback 0 [ 2736.949307][T15511] swapcached 0 [ 2736.949307][T15511] anon_thp 0 [ 2736.949307][T15511] file_thp 0 [ 2736.949307][T15511] shmem_thp 0 [ 2736.949307][T15511] inactive_anon 8151040 [ 2736.949307][T15511] active_anon 229376 [ 2736.949307][T15511] inactive_file 0 [ 2736.949307][T15511] active_file 0 [ 2736.949307][T15511] unevictable 0 [ 2736.949307][T15511] slab_reclaimable 28464 [ 2736.949307][T15511] slab_unreclaimable 32296 [ 2736.949307][T15511] slab 60760 [ 2736.949307][T15511] workingset_refault_anon 0 [ 2736.949307][T15511] workingset_refault_file 0 [ 2736.949307][T15511] workingset_activate_anon 0 [ 2736.949307][T15511] workingset_activate_file 0 [ 2736.949307][T15511] workingset_restore_anon 0 [ 2736.949307][T15511] workingset_restore_file 0 [ 2736.949307][T15511] workingset_nodereclaim 0 [ 2736.949307][T15511] pgscan 875 [ 2736.949307][T15511] pgsteal 403 [ 2736.949307][T15511] pgscan_kswapd 0 [ 2736.949307][T15511] pgscan_direct 875 [ 2736.949307][T15511] pgscan_khugepaged 0 [ 2736.949307][T15511] pgsteal_kswapd 0 [ 2736.949307][T15511] pgsteal_direct 403 [ 2736.949307][T15511] pgsteal_khugepaged 0 [ 2736.949307][T15511] pgfault 128935 [ 2736.949307][T15511] pgmajfault 0 [ 2736.949307][T15511] pgrefill 1286981 [ 2736.949307][T15511] pgactivate 472 [ 2736.949307][T15511] pgdeactivate 0 [ 2736.949307][T15511] pglazyfree 0 [ 2736.949307][T15511] pglazyfreed 0 [ 2736.949307][T15511] zswpin 0 [ 2736.949307][T15511] zswpout 0 [ 2736.949307][T15511] thp_fault_alloc 0 [ 2737.314461][T15511] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=15511,uid=0 [ 2737.330557][T15511] Memory cgroup out of memory: Killed process 15511 (syz-executor.0) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2737.348176][T15648] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2737.377983][T15648] CPU: 1 PID: 15648 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2737.388454][T15648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2737.398515][T15648] Call Trace: [ 2737.401788][T15648] [ 2737.404709][T15648] dump_stack_lvl+0x136/0x150 [ 2737.409395][T15648] dump_header+0x10a/0xd70 [ 2737.413812][T15648] oom_kill_process+0x25d/0x600 [ 2737.418655][T15648] out_of_memory+0x35c/0x1660 [ 2737.423325][T15648] ? oom_killer_disable+0x2b0/0x2b0 [ 2737.428519][T15648] ? rcu_read_unlock+0x9/0x60 [ 2737.433195][T15648] ? find_held_lock+0x2d/0x110 [ 2737.437959][T15648] mem_cgroup_out_of_memory+0x206/0x270 [ 2737.443505][T15648] ? mem_cgroup_margin+0x130/0x130 [ 2737.448612][T15648] ? lock_downgrade+0x690/0x690 [ 2737.453470][T15648] try_charge_memcg+0xf99/0x13a0 [ 2737.458408][T15648] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2737.464385][T15648] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2737.470111][T15648] ? lock_downgrade+0x690/0x690 [ 2737.474981][T15648] ? lock_downgrade+0x690/0x690 [ 2737.479835][T15648] obj_cgroup_charge+0x2af/0x5e0 [ 2737.484781][T15648] ? vm_area_dup+0x23/0x300 [ 2737.489275][T15648] kmem_cache_alloc+0xb1/0x3b0 [ 2737.494038][T15648] vm_area_dup+0x23/0x300 [ 2737.498361][T15648] __split_vma+0x199/0x830 [ 2737.502786][T15648] ? expand_stack+0x20/0x20 [ 2737.507292][T15648] ? vma_shrink+0x5c0/0x5c0 [ 2737.511799][T15648] ? mark_held_locks+0x9f/0xe0 [ 2737.516564][T15648] ? percpu_counter_add_batch+0x199/0x1e0 [ 2737.522283][T15648] ? lockdep_hardirqs_on+0x7d/0x100 [ 2737.527479][T15648] split_vma+0xc6/0x110 [ 2737.531635][T15648] mprotect_fixup+0x891/0xbd0 [ 2737.536313][T15648] ? change_protection+0x3e40/0x3e40 [ 2737.541599][T15648] do_mprotect_pkey+0x87f/0xd50 [ 2737.546461][T15648] ? mprotect_fixup+0xbd0/0xbd0 [ 2737.551313][T15648] ? up_write+0x1b4/0x520 [ 2737.555646][T15648] ? do_futex+0x360/0x360 [ 2737.559977][T15648] __x64_sys_mprotect+0x78/0xb0 [ 2737.564826][T15648] do_syscall_64+0x39/0xb0 [ 2737.569243][T15648] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2737.575146][T15648] RIP: 0033:0x7f47a4c8c277 [ 2737.579561][T15648] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2737.599160][T15648] RSP: 002b:00007ffdaecf0fb8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 2737.607564][T15648] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007f47a4c8c277 [ 2737.615525][T15648] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f47a59cb000 [ 2737.623495][T15648] RBP: 00007ffdaecf1090 R08: 00000000ffffffff R09: 00007f47a59ea700 [ 2737.631481][T15648] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffdaecf11b0 [ 2737.639462][T15648] R13: 00007f47a59ea700 R14: 0000000000000000 R15: 0000000000022000 [ 2737.647443][T15648] [ 2737.655369][T15648] memory: usage 10996kB, limit 0kB, failcnt 2305 [ 2737.691482][T15648] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2737.732156][T15648] Memory cgroup stats for /syz2: [ 2737.732392][T15648] anon 147456 [ 2737.732392][T15648] file 10719232 [ 2737.732392][T15648] kernel 393216 [ 2737.732392][T15648] kernel_stack 98304 [ 2737.732392][T15648] pagetables 86016 [ 2737.732392][T15648] sec_pagetables 0 [ 2737.732392][T15648] percpu 64 [ 2737.732392][T15648] sock 0 [ 2737.732392][T15648] vmalloc 0 [ 2737.732392][T15648] shmem 10440704 [ 2737.732392][T15648] zswap 0 [ 2737.732392][T15648] zswapped 0 [ 2737.732392][T15648] file_mapped 262144 [ 2737.732392][T15648] file_dirty 278528 [ 2737.732392][T15648] file_writeback 0 [ 2737.732392][T15648] swapcached 0 [ 2737.732392][T15648] anon_thp 0 [ 2737.732392][T15648] file_thp 0 [ 2737.732392][T15648] shmem_thp 0 [ 2737.732392][T15648] inactive_anon 10440704 [ 2737.732392][T15648] active_anon 147456 [ 2737.732392][T15648] inactive_file 0 [ 2737.732392][T15648] active_file 278528 [ 2737.732392][T15648] unevictable 0 [ 2737.732392][T15648] slab_reclaimable 71112 [ 2737.732392][T15648] slab_unreclaimable 102536 [ 2737.732392][T15648] slab 173648 [ 2737.732392][T15648] workingset_refault_anon 0 [ 2737.732392][T15648] workingset_refault_file 0 [ 2737.732392][T15648] workingset_activate_anon 0 [ 2737.732392][T15648] workingset_activate_file 0 [ 2737.732392][T15648] workingset_restore_anon 0 [ 2737.732392][T15648] workingset_restore_file 0 [ 2737.732392][T15648] workingset_nodereclaim 0 [ 2737.732392][T15648] pgscan 1924 [ 2737.732392][T15648] pgsteal 31 [ 2737.732392][T15648] pgscan_kswapd 0 [ 2737.732392][T15648] pgscan_direct 1924 [ 2737.732392][T15648] pgscan_khugepaged 0 [ 2737.732392][T15648] pgsteal_kswapd 0 [ 2737.732392][T15648] pgsteal_direct 31 [ 2737.732392][T15648] pgsteal_khugepaged 0 [ 2737.732392][T15648] pgfault 72005 [ 2737.732392][T15648] pgmajfault 0 [ 2737.732392][T15648] pgrefill 1217471 [ 2737.732392][T15648] pgactivate 1893 [ 2737.732392][T15648] pgdeactivate 0 [ 2737.732392][T15648] pglazyfree 0 [ 2737.732392][T15648] pglazyfreed 0 [ 2737.732392][T15648] zswpin 0 [ 2737.732392][T15648] zswpout 0 [ 2737.922545][T15648] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=15648,uid=0 [ 2737.939265][T15648] Memory cgroup out of memory: Killed process 15648 (syz-executor.2) total-vm:54812kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 08:02:47 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) (async) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) r10 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r9, &(0x7f0000000200)=ANY=[@ANYRES8=r8, @ANYRES8=r10], 0x12) (async) write$cgroup_subtree(r9, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRES8=r6], 0x12) openat$cgroup_ro(r5, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) (async, rerun: 32) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) (rerun: 32) write$cgroup_int(r1, &(0x7f0000000180), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) (async) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r14 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r13, &(0x7f0000000200)=ANY=[@ANYRES8=r12, @ANYRES8=r14], 0x12) (async) openat$cgroup_ro(r13, &(0x7f0000000040)='blkio.bfq.empty_time\x00', 0x0, 0x0) 08:02:47 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0xda000000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:02:47 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, r0, 0x0) 08:02:47 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='memory.max\x00') (async) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_int(r2, &(0x7f0000000280)='cpuset.mem_exclusive\x00', 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) (async) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES8=r6], 0x12) write$cgroup_int(r5, &(0x7f0000000200)=0x1000000040000, 0x12) r7 = getpid() (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) (async) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) r11 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r10, &(0x7f0000000200)=ANY=[@ANYRES8=r9, @ANYRES8=r11], 0x12) (async) openat$cgroup_ro(r10, &(0x7f0000000240)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) (async) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r7, r12, 0x0, 0x7, &(0x7f0000000140)='cgroup\x00'}, 0x30) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 08:02:47 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x0, 0x9, 0xffc5, 0x1b208d76dec320ae, 0x8, 0x80000000, 0xcc, 0x0, 0x200, 0x0, 0x8000}, r5, 0x0, r2, 0x1) close(r4) 08:02:47 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0xe4080000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:02:47 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, r0, 0x0) [ 2738.191038][T15338] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2738.233340][T15338] CPU: 0 PID: 15338 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2738.243807][T15338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2738.253882][T15338] Call Trace: [ 2738.257181][T15338] [ 2738.260127][T15338] dump_stack_lvl+0x136/0x150 [ 2738.264850][T15338] dump_header+0x10a/0xd70 [ 2738.269294][T15338] oom_kill_process+0x25d/0x600 [ 2738.274181][T15338] out_of_memory+0x35c/0x1660 [ 2738.278897][T15338] ? find_held_lock+0x2d/0x110 [ 2738.283702][T15338] ? oom_killer_disable+0x2b0/0x2b0 [ 2738.288923][T15338] ? rcu_read_unlock+0x9/0x60 [ 2738.293631][T15338] ? find_held_lock+0x2d/0x110 [ 2738.298443][T15338] mem_cgroup_out_of_memory+0x206/0x270 [ 2738.304032][T15338] ? mem_cgroup_margin+0x130/0x130 [ 2738.309177][T15338] ? lock_downgrade+0x690/0x690 [ 2738.314080][T15338] try_charge_memcg+0xf99/0x13a0 [ 2738.319068][T15338] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2738.325091][T15338] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2738.330851][T15338] ? lock_downgrade+0x690/0x690 [ 2738.335735][T15338] ? lock_downgrade+0x690/0x690 [ 2738.340612][T15338] obj_cgroup_charge+0x2af/0x5e0 [ 2738.345572][T15338] ? __d_alloc+0x32/0x980 [ 2738.349908][T15338] kmem_cache_alloc_lru+0x142/0x600 [ 2738.355128][T15338] __d_alloc+0x32/0x980 [ 2738.359293][T15338] ? __lock_acquire+0x1916/0x5df0 [ 2738.364336][T15338] d_alloc+0x4e/0x240 [ 2738.368328][T15338] d_alloc_parallel+0xe8/0x1530 [ 2738.373202][T15338] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2738.379205][T15338] ? is_bpf_text_address+0x9d/0x1b0 [ 2738.384424][T15338] ? __d_lookup_rcu+0x4e0/0x4e0 [ 2738.389289][T15338] ? lockdep_init_map_type+0x21e/0x810 [ 2738.394771][T15338] ? lockdep_init_map_type+0x21e/0x810 [ 2738.400262][T15338] __lookup_slow+0x193/0x460 [ 2738.404868][T15338] ? lookup_one_qstr_excl+0x180/0x180 [ 2738.410269][T15338] ? lookup_fast+0x14e/0x520 [ 2738.414870][T15338] walk_component+0x33f/0x5a0 [ 2738.419559][T15338] path_lookupat+0x1ba/0x840 [ 2738.424253][T15338] filename_lookup+0x1d2/0x590 [ 2738.429765][T15338] ? may_linkat+0x3b0/0x3b0 [ 2738.434287][T15338] ? __might_fault+0xe2/0x190 [ 2738.439001][T15338] ? __phys_addr_symbol+0x30/0x70 [ 2738.444046][T15338] ? __check_object_size+0x323/0x730 [ 2738.449352][T15338] ? strncpy_from_user+0x1f8/0x350 [ 2738.454484][T15338] ? getname_flags.part.0+0x1dd/0x4f0 [ 2738.459880][T15338] user_path_at_empty+0x46/0x60 [ 2738.464766][T15338] __x64_sys_umount+0xfc/0x190 [ 2738.469549][T15338] ? path_umount+0x10b0/0x10b0 [ 2738.474325][T15338] ? syscall_enter_from_user_mode+0x26/0x80 [ 2738.480238][T15338] do_syscall_64+0x39/0xb0 [ 2738.485645][T15338] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2738.491563][T15338] RIP: 0033:0x7f47a4c8d5d7 [ 2738.495988][T15338] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2738.515613][T15338] RSP: 002b:00007ffdaecf0178 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2738.524040][T15338] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 00007f47a4c8d5d7 08:02:47 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0xfe030000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:02:47 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, r0, 0x0) [ 2738.532026][T15338] RDX: 00007ffdaecf024e RSI: 000000000000000a RDI: 00007ffdaecf0240 [ 2738.540004][T15338] RBP: 00007ffdaecf0240 R08: 00000000ffffffff R09: 00007ffdaecf0010 [ 2738.547981][T15338] R10: 0000555557000853 R11: 0000000000000246 R12: 00007f47a4ce6cdc [ 2738.555964][T15338] R13: 00007ffdaecf1300 R14: 0000555557000810 R15: 00007ffdaecf1340 [ 2738.563959][T15338] 08:02:47 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0xff000000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2738.679905][ T8046] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2738.947933][ T8046] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2738.976162][T15338] memory: usage 10640kB, limit 0kB, failcnt 2348 [ 2738.982720][T15338] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2739.005416][T27851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2739.014058][T15338] Memory cgroup stats for /syz2: [ 2739.014263][T15338] anon 45056 [ 2739.014263][T15338] file 10719232 [ 2739.014263][T15338] kernel 131072 [ 2739.014263][T15338] kernel_stack 0 [ 2739.014263][T15338] pagetables 8192 [ 2739.014263][T15338] sec_pagetables 0 [ 2739.014263][T15338] percpu 64 [ 2739.014263][T15338] sock 0 [ 2739.014263][T15338] vmalloc 0 [ 2739.014263][T15338] shmem 10440704 [ 2739.014263][T15338] zswap 0 [ 2739.014263][T15338] zswapped 0 [ 2739.014263][T15338] file_mapped 237568 [ 2739.014263][T15338] file_dirty 278528 [ 2739.014263][T15338] file_writeback 0 [ 2739.014263][T15338] swapcached 0 [ 2739.014263][T15338] anon_thp 0 [ 2739.014263][T15338] file_thp 0 [ 2739.014263][T15338] shmem_thp 0 [ 2739.014263][T15338] inactive_anon 10440704 [ 2739.014263][T15338] active_anon 45056 [ 2739.014263][T15338] inactive_file 0 [ 2739.014263][T15338] active_file 278528 [ 2739.014263][T15338] unevictable 0 [ 2739.014263][T15338] slab_reclaimable 59496 [ 2739.014263][T15338] slab_unreclaimable 44920 [ 2739.014263][T15338] slab 104416 [ 2739.014263][T15338] workingset_refault_anon 0 [ 2739.014263][T15338] workingset_refault_file 0 [ 2739.014263][T15338] workingset_activate_anon 0 [ 2739.014263][T15338] workingset_activate_file 0 [ 2739.014263][T15338] workingset_restore_anon 0 [ 2739.014263][T15338] workingset_restore_file 0 [ 2739.014263][T15338] workingset_nodereclaim 0 [ 2739.014263][T15338] pgscan 1924 [ 2739.014263][T15338] pgsteal 31 [ 2739.014263][T15338] pgscan_kswapd 0 [ 2739.014263][T15338] pgscan_direct 1924 [ 2739.014263][T15338] pgscan_khugepaged 0 [ 2739.014263][T15338] pgsteal_kswapd 0 [ 2739.014263][T15338] pgsteal_direct 31 [ 2739.014263][T15338] pgsteal_khugepaged 0 [ 2739.014263][T15338] pgfault 72010 [ 2739.014263][T15338] pgmajfault 0 [ 2739.014263][T15338] pgrefill 1228623 [ 2739.014263][T15338] pgactivate 1893 [ 2739.014263][T15338] pgdeactivate 0 [ 2739.014263][T15338] pglazyfree 0 [ 2739.014263][T15338] pglazyfreed 0 [ 2739.014263][T15338] zswpin 0 [ 2739.014263][T15338] zswpout 0 [ 2739.015394][T27851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2739.019259][T15338] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset= [ 2739.215328][T27851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2739.230949][T27851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2739.238409][T27851] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2739.247694][T27851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2739.298431][T15338] syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=15338,uid=0 [ 2739.353204][ T8046] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2739.374285][T15338] Memory cgroup out of memory: Killed process 15338 (syz-executor.2) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:0 [ 2739.836776][T15691] chnl_net:caif_netlink_parms(): no params data found [ 2739.981484][T15691] bridge0: port 1(bridge_slave_0) entered blocking state [ 2739.988683][T15691] bridge0: port 1(bridge_slave_0) entered disabled state [ 2739.996842][T15691] bridge_slave_0: entered allmulticast mode [ 2740.005005][T15691] bridge_slave_0: entered promiscuous mode [ 2740.019438][T15691] bridge0: port 2(bridge_slave_1) entered blocking state [ 2740.026839][T15691] bridge0: port 2(bridge_slave_1) entered disabled state [ 2740.034105][T15691] bridge_slave_1: entered allmulticast mode [ 2740.041121][T15691] bridge_slave_1: entered promiscuous mode [ 2740.083742][T15691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2740.096056][T15691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2740.152949][T15691] team0: Port device team_slave_0 added [ 2740.162096][T15691] team0: Port device team_slave_1 added [ 2740.205808][T15691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2740.216874][T15691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2740.253241][T15691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2740.291547][T15691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2740.298523][T15691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2740.326441][T15691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2740.378126][T15691] hsr_slave_0: entered promiscuous mode [ 2740.384527][T15691] hsr_slave_1: entered promiscuous mode [ 2740.392297][T15691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2740.399924][T15691] Cannot create hsr debugfs directory [ 2740.650194][ T8046] hsr_slave_0: left promiscuous mode [ 2740.666212][ T8046] hsr_slave_1: left promiscuous mode [ 2740.690236][ T8046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2740.697789][ T8046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2740.732377][ T8046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2740.739836][ T8046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2740.772448][ T8046] bridge_slave_1: left allmulticast mode [ 2740.778137][ T8046] bridge_slave_1: left promiscuous mode [ 2740.800245][ T8046] bridge0: port 2(bridge_slave_1) entered disabled state [ 2740.830650][ T8046] bridge_slave_0: left allmulticast mode [ 2740.836327][ T8046] bridge_slave_0: left promiscuous mode [ 2740.850317][ T8046] bridge0: port 1(bridge_slave_0) entered disabled state [ 2740.910336][ T8046] veth1_macvtap: left promiscuous mode [ 2740.915887][ T8046] veth0_macvtap: left promiscuous mode [ 2740.930250][ T8046] veth1_vlan: left promiscuous mode [ 2740.935571][ T8046] veth0_vlan: left promiscuous mode [ 2741.270227][T27851] Bluetooth: hci1: command 0x0409 tx timeout [ 2741.450493][ T8046] team0 (unregistering): Port device team_slave_1 removed [ 2741.478706][ T8046] team0 (unregistering): Port device team_slave_0 removed [ 2741.515924][ T8046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2741.537093][ T8046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2741.694429][ T8046] bond0 (unregistering): Released all slaves [ 2742.179673][T15691] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2742.205410][T15691] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2742.231358][T15691] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2742.258373][T15691] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2742.413051][T15691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2742.443762][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2742.455511][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2742.473995][T15691] 8021q: adding VLAN 0 to HW filter on device team0 [ 2742.499408][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2742.514915][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2742.526396][T18608] bridge0: port 1(bridge_slave_0) entered blocking state [ 2742.533556][T18608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2742.552609][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2742.561660][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2742.570753][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2742.580682][ T8432] bridge0: port 2(bridge_slave_1) entered blocking state [ 2742.588752][ T8432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2742.599980][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2742.614391][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2742.642096][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2742.651840][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2742.661104][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2742.669872][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2742.678988][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2742.689103][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2742.714814][T15691] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2742.730532][T15691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2742.753543][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2742.762918][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2742.771891][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2743.083656][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2743.091812][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2743.101796][T15691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2743.138977][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2743.149462][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2743.181686][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2743.199500][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2743.211433][T15691] veth0_vlan: entered promiscuous mode [ 2743.228078][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2743.237651][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2743.249148][T15691] veth1_vlan: entered promiscuous mode [ 2743.301892][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2743.310021][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2743.331021][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2743.350613][T27851] Bluetooth: hci1: command 0x041b tx timeout [ 2743.350985][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2743.386500][T15691] veth0_macvtap: entered promiscuous mode [ 2743.415581][T15691] veth1_macvtap: entered promiscuous mode [ 2743.457395][T15691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2743.480239][T15691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.501811][T15691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2743.529363][T15691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.545550][T15691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2743.557322][T15691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.569365][T15691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2743.588509][T15691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.599459][T15691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2743.638344][T15691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.660123][T15691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2743.680712][T15691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.701717][T15691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2743.709352][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2743.730946][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2743.739093][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2743.760947][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2743.783162][T15691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2743.800213][T15691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.810043][T15691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2743.840114][T15691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.849945][T15691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2743.890168][T15691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.900012][T15691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2743.919093][T15691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.929070][T15691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2743.939570][T15691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.949535][T15691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2743.969795][T15691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2743.989745][T15691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2744.000720][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2744.009411][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2744.038567][T15691] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2744.048468][T15691] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2744.060386][T15691] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2744.069114][T15691] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2744.208303][T15391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2744.235123][T15391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2744.269785][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2744.297069][ T8046] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2744.329051][T21574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2744.352964][T21574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2744.363702][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2744.407856][ T8046] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2744.494361][ T8046] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2744.589232][ T8046] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2744.911528][T15773] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2744.940343][T15773] CPU: 0 PID: 15773 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2744.950812][T15773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2744.960895][T15773] Call Trace: [ 2744.964199][T15773] [ 2744.967151][T15773] dump_stack_lvl+0x136/0x150 [ 2744.971880][T15773] dump_header+0x10a/0xd70 [ 2744.976350][T15773] oom_kill_process+0x25d/0x600 [ 2744.981243][T15773] out_of_memory+0x35c/0x1660 [ 2744.985967][T15773] ? oom_killer_disable+0x2b0/0x2b0 [ 2744.991200][T15773] ? mark_held_locks+0x9f/0xe0 [ 2744.996010][T15773] mem_cgroup_out_of_memory+0x206/0x270 [ 2745.001597][T15773] ? mem_cgroup_margin+0x130/0x130 [ 2745.006742][T15773] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 2745.012572][T15773] memory_max_write+0x2f9/0x3c0 [ 2745.017445][T15773] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2745.023536][T15773] ? lock_sync+0x190/0x190 [ 2745.027973][T15773] cgroup_file_write+0x1e2/0x7b0 [ 2745.032928][T15773] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2745.039017][T15773] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2745.044401][T15773] ? __virt_addr_valid+0x61/0x2e0 [ 2745.049453][T15773] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2745.054835][T15773] kernfs_fop_write_iter+0x3f1/0x600 [ 2745.060149][T15773] vfs_write+0x945/0xd50 [ 2745.064403][T15773] ? kernel_write+0x670/0x670 [ 2745.069089][T15773] ? __fget_files+0x26a/0x480 [ 2745.073800][T15773] ksys_write+0x12b/0x250 [ 2745.078135][T15773] ? __ia32_sys_read+0xb0/0xb0 [ 2745.082912][T15773] ? syscall_enter_from_user_mode+0x30/0x80 [ 2745.088828][T15773] do_syscall_64+0x39/0xb0 [ 2745.093268][T15773] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2745.099186][T15773] RIP: 0033:0x7f21ca68c169 [ 2745.103604][T15773] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2745.123217][T15773] RSP: 002b:00007f21cb441168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2745.131637][T15773] RAX: ffffffffffffffda RBX: 00007f21ca7abf80 RCX: 00007f21ca68c169 [ 2745.139609][T15773] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 2745.147584][T15773] RBP: 00007f21ca6e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2745.155557][T15773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2745.163529][T15773] R13: 00007ffc2af3080f R14: 00007f21cb441300 R15: 0000000000022000 [ 2745.171519][T15773] [ 2745.192905][ T8046] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2745.305241][ T8046] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2745.360184][T15773] memory: usage 8896kB, limit 0kB, failcnt 2435 [ 2745.366471][T15773] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2745.387979][T15773] Memory cgroup stats for /syz3: [ 2745.388213][T15773] anon 225280 [ 2745.388213][T15773] file 8351744 [ 2745.388213][T15773] kernel 471040 [ 2745.388213][T15773] kernel_stack 65536 [ 2745.388213][T15773] pagetables 155648 [ 2745.388213][T15773] sec_pagetables 0 [ 2745.388213][T15773] percpu 128 [ 2745.388213][T15773] sock 0 [ 2745.388213][T15773] vmalloc 0 [ 2745.388213][T15773] shmem 8351744 [ 2745.388213][T15773] zswap 0 [ 2745.388213][T15773] zswapped 0 [ 2745.388213][T15773] file_mapped 241664 [ 2745.388213][T15773] file_dirty 0 [ 2745.388213][T15773] file_writeback 0 [ 2745.388213][T15773] swapcached 0 [ 2745.388213][T15773] anon_thp 0 [ 2745.388213][T15773] file_thp 0 [ 2745.388213][T15773] shmem_thp 0 [ 2745.388213][T15773] inactive_anon 8458240 [ 2745.388213][T15773] active_anon 118784 [ 2745.388213][T15773] inactive_file 0 [ 2745.388213][T15773] active_file 0 [ 2745.388213][T15773] unevictable 0 [ 2745.388213][T15773] slab_reclaimable 42424 [ 2745.388213][T15773] slab_unreclaimable 157832 [ 2745.388213][T15773] slab 200256 [ 2745.388213][T15773] workingset_refault_anon 0 [ 2745.388213][T15773] workingset_refault_file 1 [ 2745.388213][T15773] workingset_activate_anon 0 [ 2745.388213][T15773] workingset_activate_file 0 [ 2745.388213][T15773] workingset_restore_anon 0 [ 2745.388213][T15773] workingset_restore_file 0 [ 2745.388213][T15773] workingset_nodereclaim 0 [ 2745.388213][T15773] pgscan 199 [ 2745.388213][T15773] pgsteal 86 [ 2745.388213][T15773] pgscan_kswapd 0 [ 2745.388213][T15773] pgscan_direct 199 [ 2745.388213][T15773] pgscan_khugepaged 0 [ 2745.388213][T15773] pgsteal_kswapd 0 [ 2745.388213][T15773] pgsteal_direct 86 [ 2745.388213][T15773] pgsteal_khugepaged 0 [ 2745.388213][T15773] pgfault 89416 [ 2745.388213][T15773] pgmajfault 0 [ 2745.388213][T15773] pgrefill 192043 [ 2745.388213][T15773] pgactivate 113 [ 2745.388213][T15773] pgdeactivate 0 [ 2745.388213][T15773] pglazyfree 0 [ 2745.388213][T15773] pglazyfreed 0 [ 2745.388213][T15773] zswpin 0 [ 2745.388213][T15773] zswpout 0 [ 2745.388213][T15773] thp_fault_alloc 0 [ 2745.430251][T27851] Bluetooth: hci1: command 0x040f tx timeout [ 2745.632520][ T8046] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2745.698211][T15773] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15772,uid=0 08:02:55 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r5], 0x12) openat$cgroup_ro(r4, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 08:02:55 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xb000000}, 0x0, 0x0, r0, 0x0) 08:02:55 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0xfffff000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:02:55 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='memory.max\x00') (async) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_int(r2, &(0x7f0000000280)='cpuset.mem_exclusive\x00', 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES8=r6], 0x12) write$cgroup_int(r5, &(0x7f0000000200)=0x1000000040000, 0x12) (async) r7 = getpid() (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async, rerun: 32) r11 = socket$kcm(0x2, 0x1000000000000002, 0x0) (rerun: 32) write$cgroup_subtree(r10, &(0x7f0000000200)=ANY=[@ANYRES8=r9, @ANYRES8=r11], 0x12) (async, rerun: 64) openat$cgroup_ro(r10, &(0x7f0000000240)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) (async, rerun: 64) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r7, r12, 0x0, 0x7, &(0x7f0000000140)='cgroup\x00'}, 0x30) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 2745.750972][ T8046] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2745.769762][T15773] Memory cgroup out of memory: Killed process 15773 (syz-executor.3) total-vm:54548kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 08:02:55 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1324c, 0x0, 0xffc5, 0x1b208d76dec320ae, 0x8, 0x80000000, 0xcc, 0x0, 0x200, 0x0, 0x8000}, r5, 0x0, r2, 0x1) close(r4) 08:02:55 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) (async) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) close(r8) (async) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r9, &(0x7f0000000200)=ANY=[@ANYRES8=r8, @ANYRES8=r10], 0x12) write$cgroup_subtree(r9, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRES8=r6], 0x12) (async, rerun: 64) openat$cgroup_ro(r5, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) (rerun: 64) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) r14 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r13, &(0x7f0000000200)=ANY=[@ANYRES8=r12, @ANYRES8=r14], 0x12) (async, rerun: 64) openat$cgroup_ro(r13, &(0x7f0000000040)='blkio.bfq.empty_time\x00', 0x0, 0x0) (rerun: 64) 08:02:55 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0xffffff3f, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:02:55 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0x0, r0, 0x0) [ 2746.049276][T15691] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 08:02:55 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0xffffff85, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:02:55 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3f000000}, 0x0, 0x0, r0, 0x0) [ 2746.130861][T15691] CPU: 1 PID: 15691 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2746.141319][T15691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2746.151393][T15691] Call Trace: [ 2746.154689][T15691] [ 2746.157634][T15691] dump_stack_lvl+0x136/0x150 [ 2746.162355][T15691] dump_header+0x10a/0xd70 [ 2746.166797][T15691] oom_kill_process+0x25d/0x600 [ 2746.171677][T15691] out_of_memory+0x35c/0x1660 [ 2746.176387][T15691] ? find_held_lock+0x2d/0x110 [ 2746.181184][T15691] ? oom_killer_disable+0x2b0/0x2b0 [ 2746.186412][T15691] ? rcu_read_unlock+0x9/0x60 [ 2746.191117][T15691] ? find_held_lock+0x2d/0x110 [ 2746.195917][T15691] mem_cgroup_out_of_memory+0x206/0x270 [ 2746.201497][T15691] ? mem_cgroup_margin+0x130/0x130 [ 2746.206640][T15691] ? lock_downgrade+0x690/0x690 [ 2746.211544][T15691] try_charge_memcg+0xf99/0x13a0 [ 2746.216527][T15691] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2746.222643][T15691] ? get_mem_cgroup_from_objcg+0xa1/0x280 08:02:55 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0xffffffff, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2746.228401][T15691] ? lock_downgrade+0x690/0x690 [ 2746.233293][T15691] ? lock_downgrade+0x690/0x690 [ 2746.238197][T15691] __memcg_kmem_charge_page+0x16e/0x3c0 [ 2746.243785][T15691] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2746.249984][T15691] copy_process+0x4f9/0x7600 [ 2746.254633][T15691] ? _raw_spin_unlock+0x28/0x40 [ 2746.259518][T15691] ? wp_page_reuse+0x197/0x570 [ 2746.264331][T15691] ? pidfd_prepare+0x80/0x80 [ 2746.268973][T15691] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2746.274990][T15691] kernel_clone+0xeb/0x890 08:02:55 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 2746.279442][T15691] ? create_io_thread+0xe0/0xe0 [ 2746.284320][T15691] ? do_user_addr_fault+0x2b1/0x1210 [ 2746.289636][T15691] ? reacquire_held_locks+0x216/0x4e0 [ 2746.295038][T15691] ? do_user_addr_fault+0x2b1/0x1210 [ 2746.300366][T15691] ? find_held_lock+0x2d/0x110 [ 2746.305203][T15691] __do_sys_clone+0xba/0x100 [ 2746.309828][T15691] ? kernel_clone+0x890/0x890 [ 2746.314550][T15691] ? syscall_enter_from_user_mode+0x26/0x80 [ 2746.320483][T15691] do_syscall_64+0x39/0xb0 [ 2746.324942][T15691] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2746.330873][T15691] RIP: 0033:0x7f21ca689e9b [ 2746.335308][T15691] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2746.354940][T15691] RSP: 002b:00007ffc2af30a50 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2746.363375][T15691] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f21ca689e9b [ 2746.371368][T15691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2746.379357][T15691] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555663d400 [ 2746.387347][T15691] R10: 000055555663d6d0 R11: 0000000000000246 R12: 0000000000000001 [ 2746.395334][T15691] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc2af30b30 [ 2746.403345][T15691] [ 2746.620274][T15691] memory: usage 8608kB, limit 0kB, failcnt 2476 [ 2746.629749][T15691] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2746.675238][T15691] Memory cgroup stats for /syz3: [ 2746.675464][T15691] anon 143360 [ 2746.675464][T15691] file 8351744 [ 2746.675464][T15691] kernel 319488 [ 2746.675464][T15691] kernel_stack 32768 [ 2746.675464][T15691] pagetables 81920 [ 2746.675464][T15691] sec_pagetables 0 [ 2746.675464][T15691] percpu 128 [ 2746.675464][T15691] sock 0 [ 2746.675464][T15691] vmalloc 0 [ 2746.675464][T15691] shmem 8351744 [ 2746.675464][T15691] zswap 0 [ 2746.675464][T15691] zswapped 0 [ 2746.675464][T15691] file_mapped 241664 [ 2746.675464][T15691] file_dirty 0 [ 2746.675464][T15691] file_writeback 0 [ 2746.675464][T15691] swapcached 0 [ 2746.675464][T15691] anon_thp 0 [ 2746.675464][T15691] file_thp 0 [ 2746.675464][T15691] shmem_thp 0 [ 2746.675464][T15691] inactive_anon 8458240 [ 2746.675464][T15691] active_anon 36864 [ 2746.675464][T15691] inactive_file 0 [ 2746.675464][T15691] active_file 0 [ 2746.675464][T15691] unevictable 0 [ 2746.675464][T15691] slab_reclaimable 35952 [ 2746.675464][T15691] slab_unreclaimable 131064 [ 2746.675464][T15691] slab 167016 [ 2746.675464][T15691] workingset_refault_anon 0 [ 2746.675464][T15691] workingset_refault_file 1 [ 2746.675464][T15691] workingset_activate_anon 0 [ 2746.675464][T15691] workingset_activate_file 0 [ 2746.675464][T15691] workingset_restore_anon 0 [ 2746.675464][T15691] workingset_restore_file 0 [ 2746.675464][T15691] workingset_nodereclaim 0 [ 2746.675464][T15691] pgscan 199 [ 2746.675464][T15691] pgsteal 86 [ 2746.675464][T15691] pgscan_kswapd 0 [ 2746.675464][T15691] pgscan_direct 199 [ 2746.675464][T15691] pgscan_khugepaged 0 [ 2746.675464][T15691] pgsteal_kswapd 0 [ 2746.675464][T15691] pgsteal_direct 86 [ 2746.675464][T15691] pgsteal_khugepaged 0 [ 2746.675464][T15691] pgfault 89427 [ 2746.675464][T15691] pgmajfault 0 [ 2746.675464][T15691] pgrefill 192043 [ 2746.675464][T15691] pgactivate 113 [ 2746.675464][T15691] pgdeactivate 0 [ 2746.675464][T15691] pglazyfree 0 [ 2746.675464][T15691] pglazyfreed 0 [ 2746.675464][T15691] zswpin 0 [ 2746.675464][T15691] zswpout 0 [ 2746.675464][T15691] thp_fault_alloc 0 [ 2747.178463][T15691] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15691,uid=0 [ 2747.197940][T15691] Memory cgroup out of memory: Killed process 15691 (syz-executor.3) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2747.964331][ T8046] hsr_slave_0: left promiscuous mode [ 2747.969784][ T2242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2747.977938][ T2242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2747.986118][ T8046] hsr_slave_1: left promiscuous mode [ 2747.997719][ T2242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2748.005058][ T8046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2748.008432][ T2242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2748.020197][ T2242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2748.020882][ T8046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2748.038924][ T8046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2748.046508][ T8046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2748.056213][ T8046] bridge_slave_1: left allmulticast mode [ 2748.062099][ T8046] bridge_slave_1: left promiscuous mode [ 2748.067879][ T8046] bridge0: port 2(bridge_slave_1) entered disabled state [ 2748.077681][ T8046] bridge_slave_0: left allmulticast mode [ 2748.089894][ T8046] bridge_slave_0: left promiscuous mode [ 2748.095948][ T8046] bridge0: port 1(bridge_slave_0) entered disabled state [ 2748.108639][ T8046] hsr_slave_0: left promiscuous mode [ 2748.114503][ T8046] hsr_slave_1: left promiscuous mode [ 2748.120597][ T8046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2748.128014][ T8046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2748.136677][ T8046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2748.144271][ T8046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2748.154121][ T8046] bridge_slave_1: left allmulticast mode [ 2748.159757][ T8046] bridge_slave_1: left promiscuous mode [ 2748.165711][ T8046] bridge0: port 2(bridge_slave_1) entered disabled state [ 2748.174904][ T8046] bridge_slave_0: left allmulticast mode [ 2748.182794][ T8046] bridge_slave_0: left promiscuous mode [ 2748.188516][ T8046] bridge0: port 1(bridge_slave_0) entered disabled state [ 2748.215897][ T8046] veth1_macvtap: left promiscuous mode [ 2748.226119][ T8046] veth0_macvtap: left promiscuous mode [ 2748.239169][ T8046] veth1_vlan: left promiscuous mode [ 2748.249064][ T8046] veth0_vlan: left promiscuous mode [ 2748.266222][ T8046] veth1_macvtap: left promiscuous mode [ 2748.275354][ T8046] veth0_macvtap: left promiscuous mode [ 2748.283497][ T8046] veth1_vlan: left promiscuous mode [ 2748.288932][ T8046] veth0_vlan: left promiscuous mode [ 2748.450966][T27851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2748.462688][T27851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2748.470868][T27851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2748.479547][T27851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2748.489167][T27851] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2748.496730][T27851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2748.659462][ T8046] team0 (unregistering): Port device team_slave_1 removed [ 2748.677839][ T8046] team0 (unregistering): Port device team_slave_0 removed [ 2748.691020][ T8046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2748.705546][ T8046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2748.769093][ T8046] bond0 (unregistering): Released all slaves [ 2748.869772][ T8046] team0 (unregistering): Port device team_slave_1 removed [ 2748.887732][ T8046] team0 (unregistering): Port device team_slave_0 removed [ 2748.898727][ T8046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2748.915947][ T8046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2748.978545][ T8046] bond0 (unregistering): Released all slaves 08:02:58 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async, rerun: 64) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) (rerun: 64) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r5], 0x12) (async) openat$cgroup_ro(r4, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 08:02:58 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:02:58 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) [ 2749.423473][T15837] chnl_net:caif_netlink_parms(): no params data found [ 2749.508393][T15841] chnl_net:caif_netlink_parms(): no params data found [ 2749.709498][T15837] bridge0: port 1(bridge_slave_0) entered blocking state [ 2749.727606][T15837] bridge0: port 1(bridge_slave_0) entered disabled state [ 2749.761709][T15837] bridge_slave_0: entered allmulticast mode [ 2749.768748][T15837] bridge_slave_0: entered promiscuous mode [ 2749.786791][T15841] bridge0: port 1(bridge_slave_0) entered blocking state [ 2749.799883][T15841] bridge0: port 1(bridge_slave_0) entered disabled state [ 2749.816526][T15841] bridge_slave_0: entered allmulticast mode [ 2749.826141][T15841] bridge_slave_0: entered promiscuous mode [ 2749.836941][T15841] bridge0: port 2(bridge_slave_1) entered blocking state [ 2749.852684][T15841] bridge0: port 2(bridge_slave_1) entered disabled state [ 2749.859861][T15841] bridge_slave_1: entered allmulticast mode [ 2749.867126][T15841] bridge_slave_1: entered promiscuous mode [ 2749.875964][T15837] bridge0: port 2(bridge_slave_1) entered blocking state [ 2749.884101][T15837] bridge0: port 2(bridge_slave_1) entered disabled state [ 2749.891346][T15837] bridge_slave_1: entered allmulticast mode [ 2749.899278][T15837] bridge_slave_1: entered promiscuous mode [ 2749.954943][T15841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2749.967463][T15837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2749.979268][T15837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2750.007822][T15841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2750.071330][T27851] Bluetooth: hci1: command 0x0409 tx timeout [ 2750.094670][T15837] team0: Port device team_slave_0 added [ 2750.119480][T15841] team0: Port device team_slave_0 added [ 2750.134828][T15837] team0: Port device team_slave_1 added [ 2750.153818][T15841] team0: Port device team_slave_1 added [ 2750.234615][T15837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2750.241660][T15837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2750.300121][T15837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2750.322942][T15837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2750.330007][T15837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2750.360192][T15837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2750.406233][T15841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2750.417057][T15841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2750.447023][T15841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2750.480411][T15841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2750.487382][T15841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2750.519432][T15841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2750.550388][T27851] Bluetooth: hci2: command 0x0409 tx timeout [ 2750.573730][T15837] hsr_slave_0: entered promiscuous mode [ 2750.589992][T15837] hsr_slave_1: entered promiscuous mode [ 2750.712708][T15841] hsr_slave_0: entered promiscuous mode [ 2750.730586][T15841] hsr_slave_1: entered promiscuous mode [ 2750.740463][T15841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2750.748044][T15841] Cannot create hsr debugfs directory [ 2752.022509][T15837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2752.057724][T15837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2752.105030][T15837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2752.141503][T15837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2752.150262][T27851] Bluetooth: hci1: command 0x041b tx timeout [ 2752.170897][T15841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2752.182426][T15841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2752.226909][ T8046] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2752.250564][T15841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2752.265651][T15841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2752.303928][ T8046] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2752.430912][ T8046] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2752.523709][ T8046] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2752.569348][T15837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2752.620830][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2752.628639][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2752.630205][T27851] Bluetooth: hci2: command 0x041b tx timeout [ 2752.659435][T15837] 8021q: adding VLAN 0 to HW filter on device team0 [ 2752.696691][T15841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2752.720609][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2752.729354][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2752.738347][ T2619] bridge0: port 1(bridge_slave_0) entered blocking state [ 2752.745507][ T2619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2752.784584][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2752.795736][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2752.805186][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2752.814543][T23455] bridge0: port 2(bridge_slave_1) entered blocking state [ 2752.821716][T23455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2752.830018][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2752.841150][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2752.858775][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2752.889803][T15841] 8021q: adding VLAN 0 to HW filter on device team0 [ 2752.906976][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2752.980943][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2752.999616][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2753.008807][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2753.025313][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2753.041671][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2753.058535][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2753.069165][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2753.086442][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2753.097460][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2753.120566][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2753.129324][ T8432] bridge0: port 1(bridge_slave_0) entered blocking state [ 2753.136470][ T8432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2753.144718][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2753.153860][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2753.162794][ T8432] bridge0: port 2(bridge_slave_1) entered blocking state [ 2753.169920][ T8432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2753.178384][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2753.189022][T15837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2753.217579][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2753.226952][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2753.244075][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2753.279073][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2753.294812][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2753.313855][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2753.327310][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2753.345214][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2753.355955][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2753.364829][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2753.373986][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2753.382564][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2753.392997][T15841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2753.562211][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2753.571144][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2753.586012][T15837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2753.632435][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2753.651132][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2753.695541][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2753.709832][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2753.721662][T15837] veth0_vlan: entered promiscuous mode [ 2753.738597][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2753.746864][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2753.762470][T15837] veth1_vlan: entered promiscuous mode [ 2753.809876][T15841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2753.823399][T15837] veth0_macvtap: entered promiscuous mode [ 2753.833158][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2753.843055][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2753.852069][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2753.859522][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2753.868946][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2753.877860][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2753.892142][T15837] veth1_macvtap: entered promiscuous mode [ 2753.908972][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2753.926130][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2753.955947][T15837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2753.967265][T15837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2753.978951][T15837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2753.990375][T15837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2754.008280][T15837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2754.019537][T15837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2754.029453][T15837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2754.040605][T15837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2754.050853][T15837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2754.061390][T15837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2754.073357][T15837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2754.100574][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2754.109423][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2754.120318][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2754.131056][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2754.152114][T15837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2754.172576][T15837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2754.182952][T15837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2754.194475][T15837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2754.204681][T15837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2754.215328][T15837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2754.226358][T15837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2754.237827][T27851] Bluetooth: hci1: command 0x040f tx timeout [ 2754.244932][T15837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2754.255524][T15837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2754.266415][T15837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2754.277843][T15837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2754.297833][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2754.307506][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2754.316809][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2754.325642][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2754.350402][T15841] veth0_vlan: entered promiscuous mode [ 2754.362268][T15837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2754.376798][T15837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2754.386678][T15837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2754.396111][T15837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2754.413729][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2754.421690][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2754.431783][T15841] veth1_vlan: entered promiscuous mode [ 2754.477710][ T8046] hsr_slave_0: left promiscuous mode [ 2754.486725][ T8046] hsr_slave_1: left promiscuous mode [ 2754.498293][ T8046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2754.509881][ T8046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2754.528078][ T8046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2754.538455][ T8046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2754.557245][ T8046] bridge_slave_1: left allmulticast mode [ 2754.566984][ T8046] bridge_slave_1: left promiscuous mode [ 2754.577611][ T8046] bridge0: port 2(bridge_slave_1) entered disabled state [ 2754.595314][ T8046] bridge_slave_0: left allmulticast mode [ 2754.605369][ T8046] bridge_slave_0: left promiscuous mode [ 2754.618008][ T8046] bridge0: port 1(bridge_slave_0) entered disabled state [ 2754.648818][ T8046] veth1_macvtap: left promiscuous mode [ 2754.654690][ T8046] veth0_macvtap: left promiscuous mode [ 2754.660899][ T8046] veth1_vlan: left promiscuous mode [ 2754.666276][ T8046] veth0_vlan: left promiscuous mode [ 2754.711105][T27851] Bluetooth: hci2: command 0x040f tx timeout [ 2754.989784][ T8046] team0 (unregistering): Port device team_slave_1 removed [ 2755.007283][ T8046] team0 (unregistering): Port device team_slave_0 removed [ 2755.021998][ T8046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2755.038886][ T8046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2755.127744][ T8046] bond0 (unregistering): Released all slaves [ 2755.280434][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2755.300898][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2755.334804][T15841] veth0_macvtap: entered promiscuous mode [ 2755.345119][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2755.368128][T15841] veth1_macvtap: entered promiscuous mode [ 2755.375325][T19644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2755.393921][T19644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2755.430875][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2755.432462][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2755.453433][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2755.463680][T15841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2755.484639][T15841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2755.499117][T15841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2755.519761][T15841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2755.543047][T15841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2755.559319][T15841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2755.577828][T15841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2755.588571][T15841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2755.598966][T15841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2755.611985][T15841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2755.625154][T15841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2755.634052][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2755.651034][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2755.659799][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2755.687569][T15841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2755.698685][T15841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2755.709406][T15841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2755.724049][T15841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2755.735258][T15841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2755.746778][T15841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2755.757133][T15841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2755.768270][T15841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2755.778645][T15841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2755.790426][T15841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2755.802088][T15841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2755.825278][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2755.835299][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2755.867964][T15841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2755.880889][T15841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2755.889627][T15841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2755.899113][T15841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2756.027741][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2756.032759][T15983] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2756.048445][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2756.061266][T15983] CPU: 0 PID: 15983 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2756.071716][T15983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2756.081789][T15983] Call Trace: [ 2756.085083][T15983] [ 2756.088030][T15983] dump_stack_lvl+0x136/0x150 [ 2756.092754][T15983] dump_header+0x10a/0xd70 [ 2756.097207][T15983] oom_kill_process+0x25d/0x600 [ 2756.102089][T15983] out_of_memory+0x35c/0x1660 [ 2756.106805][T15983] ? oom_killer_disable+0x2b0/0x2b0 [ 2756.112032][T15983] ? find_held_lock+0x2d/0x110 [ 2756.116831][T15983] mem_cgroup_out_of_memory+0x206/0x270 [ 2756.122412][T15983] ? mem_cgroup_margin+0x130/0x130 [ 2756.127566][T15983] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2756.133411][T15983] memory_max_write+0x2f9/0x3c0 [ 2756.138305][T15983] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2756.144418][T15983] ? lock_sync+0x190/0x190 [ 2756.148875][T15983] cgroup_file_write+0x1e2/0x7b0 [ 2756.153851][T15983] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2756.159965][T15983] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2756.165369][T15983] ? __virt_addr_valid+0x61/0x2e0 [ 2756.170442][T15983] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2756.175839][T15983] kernfs_fop_write_iter+0x3f1/0x600 [ 2756.181169][T15983] vfs_write+0x945/0xd50 [ 2756.185446][T15983] ? kernel_write+0x670/0x670 [ 2756.190153][T15983] ? __fget_files+0x26a/0x480 [ 2756.194973][T15983] ksys_write+0x12b/0x250 [ 2756.199331][T15983] ? __ia32_sys_read+0xb0/0xb0 [ 2756.204128][T15983] ? syscall_enter_from_user_mode+0x26/0x80 [ 2756.210063][T15983] do_syscall_64+0x39/0xb0 [ 2756.214530][T15983] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2756.220470][T15983] RIP: 0033:0x7fc845c8c169 [ 2756.224905][T15983] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2756.244538][T15983] RSP: 002b:00007fc846943168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2756.252979][T15983] RAX: ffffffffffffffda RBX: 00007fc845dac120 RCX: 00007fc845c8c169 [ 2756.260969][T15983] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000004 [ 2756.268963][T15983] RBP: 00007fc845ce7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2756.276956][T15983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2756.284947][T15983] R13: 00007ffdcca3e11f R14: 00007fc846943300 R15: 0000000000022000 [ 2756.292982][T15983] [ 2756.321145][ T2242] Bluetooth: hci1: command 0x0419 tx timeout [ 2756.328064][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2756.374757][T19644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2756.383081][T15983] memory: usage 8772kB, limit 0kB, failcnt 2626 [ 2756.393913][T19644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2756.401813][T15983] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2756.412843][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2756.428580][T15983] Memory cgroup stats for /syz0: [ 2756.428776][T15983] anon 94208 [ 2756.428776][T15983] file 8343552 [ 2756.428776][T15983] kernel 536576 [ 2756.428776][T15983] kernel_stack 131072 [ 2756.428776][T15983] pagetables 77824 [ 2756.428776][T15983] sec_pagetables 0 [ 2756.428776][T15983] percpu 64 [ 2756.428776][T15983] sock 0 [ 2756.428776][T15983] vmalloc 0 [ 2756.428776][T15983] shmem 8343552 [ 2756.428776][T15983] zswap 0 [ 2756.428776][T15983] zswapped 0 [ 2756.428776][T15983] file_mapped 274432 [ 2756.428776][T15983] file_dirty 0 [ 2756.428776][T15983] file_writeback 0 [ 2756.428776][T15983] swapcached 0 [ 2756.428776][T15983] anon_thp 0 [ 2756.428776][T15983] file_thp 0 [ 2756.428776][T15983] shmem_thp 0 [ 2756.428776][T15983] inactive_anon 8118272 [ 2756.428776][T15983] active_anon 319488 [ 2756.428776][T15983] inactive_file 0 [ 2756.428776][T15983] active_file 0 [ 2756.428776][T15983] unevictable 0 [ 2756.428776][T15983] slab_reclaimable 104728 [ 2756.428776][T15983] slab_unreclaimable 192896 [ 2756.428776][T15983] slab 297624 [ 2756.428776][T15983] workingset_refault_anon 0 [ 2756.428776][T15983] workingset_refault_file 0 [ 2756.428776][T15983] workingset_activate_anon 0 [ 2756.428776][T15983] workingset_activate_file 0 [ 2756.428776][T15983] workingset_restore_anon 0 [ 2756.428776][T15983] workingset_restore_file 0 [ 2756.428776][T15983] workingset_nodereclaim 0 [ 2756.428776][T15983] pgscan 875 [ 2756.428776][T15983] pgsteal 403 [ 2756.428776][T15983] pgscan_kswapd 0 [ 2756.428776][T15983] pgscan_direct 875 [ 2756.428776][T15983] pgscan_khugepaged 0 [ 2756.428776][T15983] pgsteal_kswapd 0 [ 2756.428776][T15983] pgsteal_direct 403 [ 2756.428776][T15983] pgsteal_khugepaged 0 [ 2756.428776][T15983] pgfault 128982 [ 2756.428776][T15983] pgmajfault 0 [ 2756.428776][T15983] pgrefill 1286981 [ 2756.428776][T15983] pgactivate 472 [ 2756.428776][T15983] pgdeactivate 0 [ 2756.428776][T15983] pglazyfree 0 [ 2756.428776][T15983] pglazyfreed 0 [ 2756.428776][T15983] zswpin 0 [ 2756.428776][T15983] zswpout 0 [ 2756.428776][T15983] thp_fault_alloc 0 [ 2756.619593][T15983] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=15837,uid=0 [ 2756.637421][T15983] Memory cgroup out of memory: Killed process 15837 (syz-executor.0) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2756.790493][ T2242] Bluetooth: hci2: command 0x0419 tx timeout 08:03:07 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000040)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 08:03:07 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1324c, 0x0, 0xffc5, 0x1b208d76dec320ae, 0x8, 0x80000000, 0xcc, 0x0, 0x200, 0x0, 0x8000}, r5, 0x0, r2, 0x1) close(r4) 08:03:07 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:03:07 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r0, 0x0) 08:03:07 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x3f, 0x6, 0x1, 0x40, 0x0, 0x8, 0x480, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}, 0x10040, 0x3, 0x9, 0x6, 0x9, 0x4, 0x781d, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0x8, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='}\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_int(r3, &(0x7f0000000180), 0x12) 08:03:07 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='fsi_master_rw_result\x00'}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x40, 0x6, 0x5, 0x4, 0x0, 0x4, 0x20000, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x1b21c, 0x1a, 0x0, 0x9, 0x0, 0xff, 0xff, 0x0, 0x7f, 0x0, 0xf}, 0x0, 0x7, r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 08:03:07 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:03:07 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, r0, 0x0) [ 2758.544087][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 08:03:07 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:03:07 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x0, 0x0, r0, 0x0) 08:03:08 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:03:08 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xb00}, 0x0, 0x0, r0, 0x0) 08:03:08 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000040)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000040)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) (async) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 2758.886023][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2758.928007][T16058] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2758.983649][T16058] CPU: 1 PID: 16058 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2758.994133][T16058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2759.004221][T16058] Call Trace: [ 2759.007527][T16058] [ 2759.012393][T16058] dump_stack_lvl+0x136/0x150 [ 2759.017122][T16058] dump_header+0x10a/0xd70 [ 2759.021571][T16058] oom_kill_process+0x25d/0x600 [ 2759.026443][T16058] out_of_memory+0x35c/0x1660 [ 2759.031136][T16058] ? io_schedule_timeout+0x150/0x150 [ 2759.036436][T16058] ? oom_killer_disable+0x2b0/0x2b0 [ 2759.041645][T16058] ? kernfs_notify+0x1ac/0x410 [ 2759.046443][T16058] mem_cgroup_out_of_memory+0x206/0x270 [ 2759.052019][T16058] ? mem_cgroup_margin+0x130/0x130 [ 2759.057170][T16058] memory_max_write+0x2f9/0x3c0 [ 2759.062047][T16058] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2759.068161][T16058] ? lock_sync+0x190/0x190 [ 2759.072618][T16058] cgroup_file_write+0x1e2/0x7b0 [ 2759.077584][T16058] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2759.083682][T16058] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2759.089073][T16058] ? __virt_addr_valid+0x61/0x2e0 [ 2759.094129][T16058] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2759.099512][T16058] kernfs_fop_write_iter+0x3f1/0x600 [ 2759.104823][T16058] vfs_write+0x945/0xd50 [ 2759.109081][T16058] ? kernel_write+0x670/0x670 [ 2759.113784][T16058] ? __fget_files+0x26a/0x480 [ 2759.118502][T16058] ksys_write+0x12b/0x250 [ 2759.122839][T16058] ? __ia32_sys_read+0xb0/0xb0 [ 2759.127611][T16058] ? syscall_enter_from_user_mode+0x26/0x80 [ 2759.133526][T16058] do_syscall_64+0x39/0xb0 [ 2759.137966][T16058] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2759.143879][T16058] RIP: 0033:0x7f8a1aa8c169 [ 2759.148303][T16058] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2759.167919][T16058] RSP: 002b:00007f8a1b704168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2759.176342][T16058] RAX: ffffffffffffffda RBX: 00007f8a1ababf80 RCX: 00007f8a1aa8c169 [ 2759.184318][T16058] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000004 [ 2759.192297][T16058] RBP: 00007f8a1aae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2759.200275][T16058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2759.208247][T16058] R13: 00007ffc999f876f R14: 00007f8a1b704300 R15: 0000000000022000 [ 2759.216241][T16058] 08:03:08 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1324c, 0x0, 0xffc5, 0x1b208d76dec320ae, 0x8, 0x80000000, 0xcc, 0x0, 0x200, 0x0, 0x8000}, r5, 0x0, r2, 0x1) close(r4) 08:03:08 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, r0, 0x0) 08:03:08 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2759.381047][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2759.583873][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2759.588171][T16058] memory: usage 11168kB, limit 0kB, failcnt 2365 [ 2759.696211][T16058] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2759.786144][T16058] Memory cgroup stats for /syz2: [ 2759.786402][T16058] anon 139264 [ 2759.786402][T16058] file 10952704 [ 2759.786402][T16058] kernel 303104 [ 2759.786402][T16058] kernel_stack 32768 [ 2759.786402][T16058] pagetables 81920 [ 2759.786402][T16058] sec_pagetables 0 [ 2759.786402][T16058] percpu 64 [ 2759.786402][T16058] sock 0 [ 2759.786402][T16058] vmalloc 0 [ 2759.786402][T16058] shmem 10440704 [ 2759.786402][T16058] zswap 0 [ 2759.786402][T16058] zswapped 0 [ 2759.786402][T16058] file_mapped 262144 [ 2759.786402][T16058] file_dirty 512000 [ 2759.786402][T16058] file_writeback 0 [ 2759.786402][T16058] swapcached 0 [ 2759.786402][T16058] anon_thp 0 [ 2759.786402][T16058] file_thp 0 [ 2759.786402][T16058] shmem_thp 0 [ 2759.786402][T16058] inactive_anon 10440704 [ 2759.786402][T16058] active_anon 139264 [ 2759.786402][T16058] inactive_file 0 [ 2759.786402][T16058] active_file 512000 [ 2759.786402][T16058] unevictable 0 [ 2759.786402][T16058] slab_reclaimable 77080 [ 2759.786402][T16058] slab_unreclaimable 78744 [ 2759.786402][T16058] slab 155824 [ 2759.786402][T16058] workingset_refault_anon 0 [ 2759.786402][T16058] workingset_refault_file 0 [ 2759.786402][T16058] workingset_activate_anon 0 [ 2759.786402][T16058] workingset_activate_file 0 [ 2759.786402][T16058] workingset_restore_anon 0 [ 2759.786402][T16058] workingset_restore_file 0 [ 2759.786402][T16058] workingset_nodereclaim 0 [ 2759.786402][T16058] pgscan 1924 [ 2759.786402][T16058] pgsteal 31 [ 2759.786402][T16058] pgscan_kswapd 0 [ 2759.786402][T16058] pgscan_direct 1924 [ 2759.786402][T16058] pgscan_khugepaged 0 [ 2759.786402][T16058] pgsteal_kswapd 0 [ 2759.786402][T16058] pgsteal_direct 31 [ 2759.786402][T16058] pgsteal_khugepaged 0 [ 2759.786402][T16058] pgfault 72375 [ 2759.786402][T16058] pgmajfault 0 [ 2759.786402][T16058] pgrefill 1241247 [ 2759.786402][T16058] pgactivate 1893 [ 2759.786402][T16058] pgdeactivate 0 [ 2759.786402][T16058] pglazyfree 0 [ 2759.786402][T16058] pglazyfreed 0 [ 2759.786402][T16058] zswpin 0 [ 2759.786402][T16058] zswpout 0 [ 2760.083610][T16058] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=15841,uid=0 [ 2760.118447][T16058] Memory cgroup out of memory: Killed process 15841 (syz-executor.2) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2760.881706][ T51] hsr_slave_0: left promiscuous mode [ 2760.887669][ T51] hsr_slave_1: left promiscuous mode [ 2760.909877][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2760.929127][ T2242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2760.936921][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2760.937109][ T2242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2760.959717][ T2242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2760.964600][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2760.975152][ T5048] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2760.983027][ T5048] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2761.006939][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2761.016727][ T51] bridge_slave_1: left allmulticast mode [ 2761.029343][ T51] bridge_slave_1: left promiscuous mode [ 2761.037871][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 2761.058998][ T51] bridge_slave_0: left allmulticast mode [ 2761.067521][ T51] bridge_slave_0: left promiscuous mode [ 2761.082851][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 2761.104082][ T51] veth1_macvtap: left promiscuous mode [ 2761.109619][ T51] veth0_macvtap: left promiscuous mode [ 2761.126168][ T51] veth1_vlan: left promiscuous mode [ 2761.137539][ T51] veth0_vlan: left promiscuous mode [ 2761.351475][T27851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2761.362524][T27851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2761.371161][T27851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2761.379786][T27851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2761.388472][T27851] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2761.396639][T27851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2761.457633][ T51] team0 (unregistering): Port device team_slave_1 removed [ 2761.472852][ T51] team0 (unregistering): Port device team_slave_0 removed [ 2761.489587][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2761.505529][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2761.571120][ T51] bond0 (unregistering): Released all slaves [ 2761.819387][T16113] chnl_net:caif_netlink_parms(): no params data found [ 2762.001429][T16120] chnl_net:caif_netlink_parms(): no params data found [ 2762.018772][T16113] bridge0: port 1(bridge_slave_0) entered blocking state [ 2762.043239][T16113] bridge0: port 1(bridge_slave_0) entered disabled state [ 2762.050941][T16113] bridge_slave_0: entered allmulticast mode [ 2762.057885][T16113] bridge_slave_0: entered promiscuous mode [ 2762.089862][T16113] bridge0: port 2(bridge_slave_1) entered blocking state [ 2762.097452][T16113] bridge0: port 2(bridge_slave_1) entered disabled state [ 2762.113284][T16113] bridge_slave_1: entered allmulticast mode [ 2762.125736][T16113] bridge_slave_1: entered promiscuous mode [ 2762.229832][T16113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2762.255314][T16113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2762.372830][T16113] team0: Port device team_slave_0 added [ 2762.401264][T16113] team0: Port device team_slave_1 added [ 2762.407228][T16120] bridge0: port 1(bridge_slave_0) entered blocking state [ 2762.418205][T16120] bridge0: port 1(bridge_slave_0) entered disabled state [ 2762.425899][T16120] bridge_slave_0: entered allmulticast mode [ 2762.433519][T16120] bridge_slave_0: entered promiscuous mode [ 2762.441741][T16120] bridge0: port 2(bridge_slave_1) entered blocking state [ 2762.448837][T16120] bridge0: port 2(bridge_slave_1) entered disabled state [ 2762.456450][T16120] bridge_slave_1: entered allmulticast mode [ 2762.463622][T16120] bridge_slave_1: entered promiscuous mode [ 2762.508141][T16113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2762.515849][T16113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2762.544048][T16113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2762.578377][T16120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2762.594895][T16113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2762.602389][T16113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2762.640143][T16113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2762.663208][T16120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2762.719494][T16120] team0: Port device team_slave_0 added [ 2762.745798][T16120] team0: Port device team_slave_1 added [ 2762.778661][T16113] hsr_slave_0: entered promiscuous mode [ 2762.795463][T16113] hsr_slave_1: entered promiscuous mode [ 2762.848771][T16120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2762.865154][T16120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2762.892228][T16120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2762.939341][T16120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2762.950132][T16120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2763.024654][T16120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2763.035508][ T5048] Bluetooth: hci1: command 0x0409 tx timeout [ 2763.201773][T16120] hsr_slave_0: entered promiscuous mode [ 2763.225528][T16120] hsr_slave_1: entered promiscuous mode [ 2763.243256][T16120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2763.259452][T16120] Cannot create hsr debugfs directory [ 2763.430385][ T5048] Bluetooth: hci2: command 0x0409 tx timeout [ 2764.007173][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2764.150935][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2764.277709][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2764.370898][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2764.575879][T16113] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2764.617855][T16113] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2764.641391][T16113] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2764.677322][T16113] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2764.783655][T16120] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2764.802509][T16120] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2764.830005][T16120] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2764.839778][T16120] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2764.933278][T16113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2764.975764][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2764.984009][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2764.995438][T16113] 8021q: adding VLAN 0 to HW filter on device team0 [ 2765.008465][T16120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2765.026769][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2765.035456][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2765.045679][T11060] bridge0: port 1(bridge_slave_0) entered blocking state [ 2765.052796][T11060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2765.062427][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2765.081777][T16120] 8021q: adding VLAN 0 to HW filter on device team0 [ 2765.096423][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2765.107849][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2765.115946][ T5048] Bluetooth: hci1: command 0x041b tx timeout [ 2765.122958][T14476] bridge0: port 2(bridge_slave_1) entered blocking state [ 2765.130101][T14476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2765.137867][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2765.145842][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2765.154151][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2765.181164][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2765.189634][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2765.198560][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2765.208147][ T2619] bridge0: port 1(bridge_slave_0) entered blocking state [ 2765.215279][ T2619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2765.223542][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2765.232467][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2765.241112][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2765.249678][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2765.258434][ T2619] bridge0: port 2(bridge_slave_1) entered blocking state [ 2765.265574][ T2619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2765.293020][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2765.300925][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2765.308591][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2765.317847][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2765.326661][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2765.335074][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2765.343594][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2765.352220][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2765.362137][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2765.371031][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2765.396048][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2765.404935][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2765.415224][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2765.424129][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2765.433339][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2765.442478][T16113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2765.476104][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2765.484852][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2765.497305][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2765.506612][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2765.510297][ T5048] Bluetooth: hci2: command 0x041b tx timeout [ 2765.528590][T16120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2765.811088][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2765.818566][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2765.881360][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2765.889363][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2765.902840][ T51] hsr_slave_0: left promiscuous mode [ 2765.908929][ T51] hsr_slave_1: left promiscuous mode [ 2765.915850][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2765.924196][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2765.933887][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2765.941579][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2765.951810][ T51] bridge_slave_1: left allmulticast mode [ 2765.957482][ T51] bridge_slave_1: left promiscuous mode [ 2765.963590][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 2765.976769][ T51] bridge_slave_0: left allmulticast mode [ 2765.984979][ T51] bridge_slave_0: left promiscuous mode [ 2765.995423][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 2766.019148][ T51] veth1_macvtap: left promiscuous mode [ 2766.028769][ T51] veth0_macvtap: left promiscuous mode [ 2766.040554][ T51] veth1_vlan: left promiscuous mode [ 2766.045881][ T51] veth0_vlan: left promiscuous mode [ 2766.399783][ T51] team0 (unregistering): Port device team_slave_1 removed [ 2766.426501][ T51] team0 (unregistering): Port device team_slave_0 removed [ 2766.448637][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2766.476176][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2766.622152][ T51] bond0 (unregistering): Released all slaves [ 2766.720964][T16113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2766.739615][T16120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2766.780370][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2766.789638][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2766.858490][T16113] veth0_vlan: entered promiscuous mode [ 2766.867303][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2766.877091][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2766.889960][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2766.899986][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2766.925812][T16113] veth1_vlan: entered promiscuous mode [ 2766.943677][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2766.952757][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2766.961102][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2766.983676][T16120] veth0_vlan: entered promiscuous mode [ 2766.990551][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2766.998917][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2767.009801][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2767.024672][T16120] veth1_vlan: entered promiscuous mode [ 2767.037259][T16113] veth0_macvtap: entered promiscuous mode [ 2767.044763][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2767.055006][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2767.063193][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2767.072063][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2767.081083][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2767.096076][T16113] veth1_macvtap: entered promiscuous mode [ 2767.111400][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2767.119602][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2767.137416][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2767.173890][T16113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2767.190389][ T5048] Bluetooth: hci1: command 0x040f tx timeout [ 2767.213405][T16113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2767.236276][T16113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2767.247115][T16113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2767.258578][T16113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2767.269229][T16113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2767.279203][T16113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2767.290188][T16113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2767.302195][T16113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2767.321651][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2767.338907][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2767.348570][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2767.369495][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2767.386212][T16120] veth0_macvtap: entered promiscuous mode [ 2767.399556][T16113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2767.411426][T16113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2767.423726][T16113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2767.434520][T16113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2767.444591][T16113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2767.455340][T16113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2767.465743][T16113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2767.476485][T16113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2767.488078][T16113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2767.499991][T16120] veth1_macvtap: entered promiscuous mode [ 2767.511972][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2767.521050][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2767.529132][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2767.538557][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2767.555685][T16113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2767.569142][T16113] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2767.578557][T16113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2767.588304][T16113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2767.598273][ T5048] Bluetooth: hci2: command 0x040f tx timeout [ 2767.617739][T16120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2767.650105][T16120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2767.659949][T16120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2767.684355][T16120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2767.702315][T16120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2767.721248][T16120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2767.736922][T16120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2767.749390][T16120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2767.779995][T16120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2767.797511][T16120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2767.809081][T16120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2767.835802][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2767.859406][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2767.879893][T16120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2767.900722][T16120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2767.930886][T16120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2767.941414][T16120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2767.959035][T16120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2767.977868][T16120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2767.988041][T16120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2768.006881][T16120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2768.019579][T16120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2768.038108][T16120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2768.049733][T16120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2768.110662][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2768.121590][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2768.142263][T16120] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2768.154239][T16120] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2768.180102][T16120] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2768.188927][T16120] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2768.294221][T21574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2768.330728][T21574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2768.344574][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2768.368188][ T5181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2768.389859][ T5181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2768.411719][T19644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2768.417873][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2768.428329][T19644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2768.457463][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2768.520472][T21574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2768.529623][T21574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2768.573361][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2769.237954][T16248] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2769.264528][T16248] CPU: 0 PID: 16248 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2769.274994][T16248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2769.285079][T16248] Call Trace: [ 2769.288377][T16248] [ 2769.291331][T16248] dump_stack_lvl+0x136/0x150 [ 2769.296061][T16248] dump_header+0x10a/0xd70 [ 2769.300523][T16248] oom_kill_process+0x25d/0x600 [ 2769.305411][T16248] out_of_memory+0x35c/0x1660 [ 2769.310116][T16248] ? lockdep_hardirqs_on+0x7d/0x100 [ 2769.315344][T16248] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2769.321529][T16248] ? oom_killer_disable+0x2b0/0x2b0 [ 2769.326746][T16248] mem_cgroup_out_of_memory+0x206/0x270 [ 2769.332313][T16248] ? mem_cgroup_margin+0x130/0x130 [ 2769.337455][T16248] memory_max_write+0x2f9/0x3c0 [ 2769.342333][T16248] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2769.348423][T16248] ? cgroup_file_write+0x8e/0x7b0 [ 2769.353463][T16248] cgroup_file_write+0x1e2/0x7b0 [ 2769.358412][T16248] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2769.364505][T16248] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2769.369885][T16248] ? __virt_addr_valid+0x61/0x2e0 [ 2769.374938][T16248] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2769.380327][T16248] kernfs_fop_write_iter+0x3f1/0x600 [ 2769.385634][T16248] vfs_write+0x945/0xd50 [ 2769.389887][T16248] ? kernel_write+0x670/0x670 [ 2769.394580][T16248] ? __fget_files+0x26a/0x480 [ 2769.399292][T16248] ksys_write+0x12b/0x250 [ 2769.403625][T16248] ? __ia32_sys_read+0xb0/0xb0 [ 2769.408393][T16248] ? syscall_enter_from_user_mode+0x26/0x80 [ 2769.414305][T16248] do_syscall_64+0x39/0xb0 [ 2769.418742][T16248] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2769.424654][T16248] RIP: 0033:0x7fe144a8c169 [ 2769.429074][T16248] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2769.448694][T16248] RSP: 002b:00007fe14583e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2769.457116][T16248] RAX: ffffffffffffffda RBX: 00007fe144babf80 RCX: 00007fe144a8c169 [ 2769.465092][T16248] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 2769.473066][T16248] RBP: 00007fe144ae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2769.481038][T16248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2769.489008][T16248] R13: 00007ffee29ffbbf R14: 00007fe14583e300 R15: 0000000000022000 [ 2769.497011][T16248] [ 2769.525478][T16248] memory: usage 8864kB, limit 0kB, failcnt 2493 [ 2769.528901][ T5048] Bluetooth: hci1: command 0x0419 tx timeout [ 2769.540600][T16248] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2769.547790][T16248] Memory cgroup stats for /syz3: [ 2769.548066][T16248] anon 217088 [ 2769.548066][T16248] file 8351744 [ 2769.548066][T16248] kernel 503808 [ 2769.548066][T16248] kernel_stack 98304 [ 2769.548066][T16248] pagetables 159744 [ 2769.548066][T16248] sec_pagetables 0 [ 2769.548066][T16248] percpu 128 [ 2769.548066][T16248] sock 0 [ 2769.548066][T16248] vmalloc 0 [ 2769.548066][T16248] shmem 8351744 [ 2769.548066][T16248] zswap 0 [ 2769.548066][T16248] zswapped 0 [ 2769.548066][T16248] file_mapped 241664 [ 2769.548066][T16248] file_dirty 0 [ 2769.548066][T16248] file_writeback 0 [ 2769.548066][T16248] swapcached 0 [ 2769.548066][T16248] anon_thp 0 [ 2769.548066][T16248] file_thp 0 [ 2769.548066][T16248] shmem_thp 0 [ 2769.548066][T16248] inactive_anon 8458240 [ 2769.548066][T16248] active_anon 110592 [ 2769.548066][T16248] inactive_file 0 [ 2769.548066][T16248] active_file 0 [ 2769.548066][T16248] unevictable 0 [ 2769.548066][T16248] slab_reclaimable 42808 [ 2769.548066][T16248] slab_unreclaimable 157832 [ 2769.548066][T16248] slab 200640 [ 2769.548066][T16248] workingset_refault_anon 0 [ 2769.548066][T16248] workingset_refault_file 1 [ 2769.548066][T16248] workingset_activate_anon 0 [ 2769.548066][T16248] workingset_activate_file 0 [ 2769.548066][T16248] workingset_restore_anon 0 [ 2769.548066][T16248] workingset_restore_file 0 [ 2769.548066][T16248] workingset_nodereclaim 0 [ 2769.548066][T16248] pgscan 199 [ 2769.548066][T16248] pgsteal 86 [ 2769.548066][T16248] pgscan_kswapd 0 [ 2769.548066][T16248] pgscan_direct 199 [ 2769.548066][T16248] pgscan_khugepaged 0 [ 2769.548066][T16248] pgsteal_kswapd 0 [ 2769.548066][T16248] pgsteal_direct 86 [ 2769.548066][T16248] pgsteal_khugepaged 0 [ 2769.548066][T16248] pgfault 89489 [ 2769.548066][T16248] pgmajfault 0 [ 2769.548066][T16248] pgrefill 192043 [ 2769.548066][T16248] pgactivate 113 [ 2769.548066][T16248] pgdeactivate 0 [ 2769.548066][T16248] pglazyfree 0 [ 2769.548066][T16248] pglazyfreed 0 [ 2769.548066][T16248] zswpin 0 [ 2769.548066][T16248] zswpout 0 [ 2769.548066][T16248] thp_fault_alloc 0 [ 2769.740088][ T5048] Bluetooth: hci2: command 0x0419 tx timeout [ 2769.746374][T16248] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16247,uid=0 08:03:19 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x3f, 0x6, 0x1, 0x40, 0x0, 0x8, 0x480, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}, 0x10040, 0x3, 0x9, 0x6, 0x9, 0x4, 0x781d, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0x8, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='}\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_int(r3, &(0x7f0000000180), 0x12) 08:03:19 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0x0, 0x0, r0, 0x0) 08:03:19 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:03:19 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1324c, 0x9, 0x0, 0x1b208d76dec320ae, 0x8, 0x80000000, 0xcc, 0x0, 0x200, 0x0, 0x8000}, r5, 0x0, r2, 0x1) close(r4) 08:03:19 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='fsi_master_rw_result\x00'}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x40, 0x6, 0x5, 0x4, 0x0, 0x4, 0x20000, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x1b21c, 0x1a, 0x0, 0x9, 0x0, 0xff, 0xff, 0x0, 0x7f, 0x0, 0xf}, 0x0, 0x7, r2, 0x1) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x7bc03) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 2769.788620][T16248] Memory cgroup out of memory: Killed process 16248 (syz-executor.3) total-vm:54548kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 08:03:19 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000040)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 08:03:19 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x400001}, 0x0, 0x0, r0, 0x0) 08:03:19 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2769.996279][T16113] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2770.048889][T16113] CPU: 1 PID: 16113 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2770.059346][T16113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2770.069413][T16113] Call Trace: [ 2770.072695][T16113] [ 2770.075626][T16113] dump_stack_lvl+0x136/0x150 [ 2770.080336][T16113] dump_header+0x10a/0xd70 [ 2770.084765][T16113] oom_kill_process+0x25d/0x600 [ 2770.089625][T16113] out_of_memory+0x35c/0x1660 [ 2770.094313][T16113] ? find_held_lock+0x2d/0x110 [ 2770.099090][T16113] ? oom_killer_disable+0x2b0/0x2b0 [ 2770.104296][T16113] ? rcu_read_unlock+0x9/0x60 [ 2770.108995][T16113] ? find_held_lock+0x2d/0x110 [ 2770.113773][T16113] mem_cgroup_out_of_memory+0x206/0x270 [ 2770.119329][T16113] ? mem_cgroup_margin+0x130/0x130 [ 2770.124452][T16113] ? lock_downgrade+0x690/0x690 [ 2770.129331][T16113] try_charge_memcg+0xf99/0x13a0 [ 2770.134291][T16113] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2770.140292][T16113] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2770.146123][T16113] ? lock_downgrade+0x690/0x690 [ 2770.151077][T16113] ? lock_downgrade+0x690/0x690 [ 2770.155941][T16113] ? rcu_read_unlock+0x9/0x60 [ 2770.160640][T16113] obj_cgroup_charge+0x2af/0x5e0 [ 2770.165599][T16113] ? sk_prot_alloc+0x5f/0x290 [ 2770.170287][T16113] kmem_cache_alloc+0xb1/0x3b0 [ 2770.175064][T16113] ? inet_create+0x324/0xfa0 [ 2770.179660][T16113] sk_prot_alloc+0x5f/0x290 [ 2770.184178][T16113] sk_alloc+0x3a/0x7f0 [ 2770.188264][T16113] inet_create+0x399/0xfa0 [ 2770.192692][T16113] __sock_create+0x380/0x850 [ 2770.197294][T16113] __sys_socket+0x133/0x250 [ 2770.201802][T16113] ? __sys_socket_file+0x1d0/0x1d0 [ 2770.206928][T16113] __x64_sys_socket+0x73/0xb0 [ 2770.211613][T16113] do_syscall_64+0x39/0xb0 [ 2770.216048][T16113] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2770.221958][T16113] RIP: 0033:0x7fe144a8d7e7 [ 2770.226373][T16113] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2770.245996][T16113] RSP: 002b:00007ffee29ff738 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 2770.254421][T16113] RAX: ffffffffffffffda RBX: 00007ffee29ffea0 RCX: 00007fe144a8d7e7 [ 2770.262398][T16113] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 2770.270372][T16113] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffee29ffcb0 [ 2770.278535][T16113] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 2770.286524][T16113] R13: 00000000002a4298 R14: 0000000000000009 R15: 00007ffee29ffee0 [ 2770.294798][T16113] 08:03:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRESOCT=r2, @ANYRES8=r3], 0x12) r4 = getpid() perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x9, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x9009, 0xc9, 0xfff, 0x3, 0x7, 0x4, 0x0, 0x0, 0x8101, 0x0, 0x800000000006d}, r4, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r4, r2, 0x0, 0x12e, &(0x7f00000005c0)='cgroup,\xa1\x8b~\xb5\xca\xad\x12/&l\xbfo\xf6v23\x01,\x99\xedhs\x1b\xc0x\x89\x7f\xe2\x88\x85\x9d\xf2\x1c\xd0\xad\xb1\xbd\xba\xf0\xafL\x18\x84\x82\x89u\x8b@G\x8fM\xfa\xd3N\xa5\b?\x10\x81@$\xb7\x02\x14U\xb0p:,\b W\x18\xc1|,\xfb4\xf1k\xcds\x9f\x9e\xc6\x981\x18\xef\xcf\t,Z\x92C\x14\xc8%F\xae\xa3\xdc\x10\xf2\xe5t\xea3\r0\xe4\x9dV\x9c\x10\x13W\xaa\xe3\xef#\xe9\"\r\xd9\xc7$t\x9f\xdc\xea\x7f\x91\xd5*\xa2I4\x81\xc1;[\xbc\x10g\xeaqysG\xe3n\n\x18\x91mB\x8a\xc2\x13\x19\xcf\xd5g\xb6k\x02\xc3\xade\xf9N\xb23+\xf2\xcb\xa7\x15\xba\xceSq\xd1#!<\xe95\x0e\x94[\x03\xd3\xcdU\xe3.\x03\xc5i\xda\x9as\xdd\x87\x11\xba\x8b8`\"\xfc\xc3!S\x16\xa0H\x1b\x987\xb0\x8b$CT\x97<\xe8\x81\xcc\xe8J\v`.\xd8\xb8\x1f\xaai\x9aMqHa\xadJ!k\t\x00\x10\xe5\x98\xe8\xa6T\x1a\xa7R`V\x9a$\xccf\xeb\xf5\x03K\xd8*\"\x05\xb8\x91{\xbb\xd7\xdb\n\x99%\xbfYm\xb3\xcd\x7f8\xf4S\xfb\xb8A\xc5\xa5F\xf1\xdb\xcb$y\x98\xbaYJ1\xe5BX\x7f\xeb>\xe7I\x11\xc8\'F)\x98\x90\x1c\xe6M)\xe0\xca\xfeQok\xb7$\xe0\xc1\xd1)\x8f\xcd\xa6\xbcp\xb4\x14\x8f\xa0\xeb\xd7\xebY\xc2G,w\xec\x9c#W\xd9\xd3\aL\xa7\'\xc5\xa8$\xa4_)\b\xec\x95\xd8\xb0\x00\x88\xb7[ E2\xca\fW\xae\xef\xb4\x1c}\x9d\xe3e{\xc9>T\x18y?\xe1]O-X\xb2\xfblP\xc2\x15\xaf\xa9\x86\x91c\x9f\x16\x1e7i\xdduw6\xadrE\xcb\xac\xcc\x91\x02\xfc\xaa\xaa\xc3\x1d\xc7\x84\x1c)\xb6\x12\xb0\xbf\xa0\x06S\xab5\xa1?\f\xc6\x19Q&SS\xc7\x10\xcd\x1e\xc3\xc0\xa5\x8e\xe5\x0e\x1b\xdf\xcdD$\xf6\x84X+\x9a`9;\x86=\xb8$\x1b.\r\x05\x90L\x1d_\xd2\xec\xf7\xc5D\xb3F\x18J'}, 0x22) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, 0x0) 08:03:19 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, r0, 0x0) 08:03:19 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:03:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRESOCT=r2, @ANYRES8=r3], 0x12) r4 = getpid() perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x9, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x9009, 0xc9, 0xfff, 0x3, 0x7, 0x4, 0x0, 0x0, 0x8101, 0x0, 0x800000000006d}, r4, 0x11, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x9, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x9009, 0xc9, 0xfff, 0x3, 0x7, 0x4, 0x0, 0x0, 0x8101, 0x0, 0x800000000006d}, r4, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r4, r2, 0x0, 0x12e, &(0x7f00000005c0)='cgroup,\xa1\x8b~\xb5\xca\xad\x12/&l\xbfo\xf6v23\x01,\x99\xedhs\x1b\xc0x\x89\x7f\xe2\x88\x85\x9d\xf2\x1c\xd0\xad\xb1\xbd\xba\xf0\xafL\x18\x84\x82\x89u\x8b@G\x8fM\xfa\xd3N\xa5\b?\x10\x81@$\xb7\x02\x14U\xb0p:,\b W\x18\xc1|,\xfb4\xf1k\xcds\x9f\x9e\xc6\x981\x18\xef\xcf\t,Z\x92C\x14\xc8%F\xae\xa3\xdc\x10\xf2\xe5t\xea3\r0\xe4\x9dV\x9c\x10\x13W\xaa\xe3\xef#\xe9\"\r\xd9\xc7$t\x9f\xdc\xea\x7f\x91\xd5*\xa2I4\x81\xc1;[\xbc\x10g\xeaqysG\xe3n\n\x18\x91mB\x8a\xc2\x13\x19\xcf\xd5g\xb6k\x02\xc3\xade\xf9N\xb23+\xf2\xcb\xa7\x15\xba\xceSq\xd1#!<\xe95\x0e\x94[\x03\xd3\xcdU\xe3.\x03\xc5i\xda\x9as\xdd\x87\x11\xba\x8b8`\"\xfc\xc3!S\x16\xa0H\x1b\x987\xb0\x8b$CT\x97<\xe8\x81\xcc\xe8J\v`.\xd8\xb8\x1f\xaai\x9aMqHa\xadJ!k\t\x00\x10\xe5\x98\xe8\xa6T\x1a\xa7R`V\x9a$\xccf\xeb\xf5\x03K\xd8*\"\x05\xb8\x91{\xbb\xd7\xdb\n\x99%\xbfYm\xb3\xcd\x7f8\xf4S\xfb\xb8A\xc5\xa5F\xf1\xdb\xcb$y\x98\xbaYJ1\xe5BX\x7f\xeb>\xe7I\x11\xc8\'F)\x98\x90\x1c\xe6M)\xe0\xca\xfeQok\xb7$\xe0\xc1\xd1)\x8f\xcd\xa6\xbcp\xb4\x14\x8f\xa0\xeb\xd7\xebY\xc2G,w\xec\x9c#W\xd9\xd3\aL\xa7\'\xc5\xa8$\xa4_)\b\xec\x95\xd8\xb0\x00\x88\xb7[ E2\xca\fW\xae\xef\xb4\x1c}\x9d\xe3e{\xc9>T\x18y?\xe1]O-X\xb2\xfblP\xc2\x15\xaf\xa9\x86\x91c\x9f\x16\x1e7i\xdduw6\xadrE\xcb\xac\xcc\x91\x02\xfc\xaa\xaa\xc3\x1d\xc7\x84\x1c)\xb6\x12\xb0\xbf\xa0\x06S\xab5\xa1?\f\xc6\x19Q&SS\xc7\x10\xcd\x1e\xc3\xc0\xa5\x8e\xe5\x0e\x1b\xdf\xcdD$\xf6\x84X+\x9a`9;\x86=\xb8$\x1b.\r\x05\x90L\x1d_\xd2\xec\xf7\xc5D\xb3F\x18J'}, 0x22) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x7bc03) (async) write$cgroup_int(r6, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, 0x0) [ 2770.846387][T16113] memory: usage 8600kB, limit 0kB, failcnt 2525 [ 2770.860182][T16113] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2770.867121][T16113] Memory cgroup stats for /syz3: [ 2770.867344][T16113] anon 147456 [ 2770.867344][T16113] file 8351744 [ 2770.867344][T16113] kernel 307200 [ 2770.867344][T16113] kernel_stack 32768 [ 2770.867344][T16113] pagetables 81920 [ 2770.867344][T16113] sec_pagetables 0 [ 2770.867344][T16113] percpu 128 [ 2770.867344][T16113] sock 0 [ 2770.867344][T16113] vmalloc 0 [ 2770.867344][T16113] shmem 8351744 [ 2770.867344][T16113] zswap 0 [ 2770.867344][T16113] zswapped 0 [ 2770.867344][T16113] file_mapped 241664 [ 2770.867344][T16113] file_dirty 0 [ 2770.867344][T16113] file_writeback 0 [ 2770.867344][T16113] swapcached 0 [ 2770.867344][T16113] anon_thp 0 [ 2770.867344][T16113] file_thp 0 [ 2770.867344][T16113] shmem_thp 0 [ 2770.867344][T16113] inactive_anon 8458240 [ 2770.867344][T16113] active_anon 40960 [ 2770.867344][T16113] inactive_file 0 [ 2770.867344][T16113] active_file 0 [ 2770.867344][T16113] unevictable 0 [ 2770.867344][T16113] slab_reclaimable 37496 [ 2770.867344][T16113] slab_unreclaimable 123440 [ 2770.867344][T16113] slab 160936 [ 2770.867344][T16113] workingset_refault_anon 0 [ 2770.867344][T16113] workingset_refault_file 1 [ 2770.867344][T16113] workingset_activate_anon 0 [ 2770.867344][T16113] workingset_activate_file 0 [ 2770.867344][T16113] workingset_restore_anon 0 [ 2770.867344][T16113] workingset_restore_file 0 [ 2770.867344][T16113] workingset_nodereclaim 0 [ 2770.867344][T16113] pgscan 199 [ 2770.867344][T16113] pgsteal 86 [ 2770.867344][T16113] pgscan_kswapd 0 [ 2770.867344][T16113] pgscan_direct 199 [ 2770.867344][T16113] pgscan_khugepaged 0 [ 2770.867344][T16113] pgsteal_kswapd 0 [ 2770.867344][T16113] pgsteal_direct 86 [ 2770.867344][T16113] pgsteal_khugepaged 0 [ 2770.867344][T16113] pgfault 89492 [ 2770.867344][T16113] pgmajfault 0 [ 2770.867344][T16113] pgrefill 192043 [ 2770.867344][T16113] pgactivate 113 [ 2770.867344][T16113] pgdeactivate 0 [ 2770.867344][T16113] pglazyfree 0 [ 2770.867344][T16113] pglazyfreed 0 [ 2770.867344][T16113] zswpin 0 [ 2770.867344][T16113] zswpout 0 [ 2770.867344][T16113] thp_fault_alloc 0 [ 2771.077811][T16113] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16113,uid=0 [ 2771.101964][T16113] Memory cgroup out of memory: Killed process 16113 (syz-executor.3) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 08:03:20 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1004000}, 0x0, 0x0, r0, 0x0) 08:03:20 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:03:20 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x3f, 0x6, 0x1, 0x40, 0x0, 0x8, 0x480, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}, 0x10040, 0x3, 0x9, 0x6, 0x9, 0x4, 0x781d, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0x8, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='}\x00') (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000180), 0x12) 08:03:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) (async) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRESOCT=r2, @ANYRES8=r3], 0x12) r4 = getpid() perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x9, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x9009, 0xc9, 0xfff, 0x3, 0x7, 0x4, 0x0, 0x0, 0x8101, 0x0, 0x800000000006d}, r4, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r4, r2, 0x0, 0x12e, &(0x7f00000005c0)='cgroup,\xa1\x8b~\xb5\xca\xad\x12/&l\xbfo\xf6v23\x01,\x99\xedhs\x1b\xc0x\x89\x7f\xe2\x88\x85\x9d\xf2\x1c\xd0\xad\xb1\xbd\xba\xf0\xafL\x18\x84\x82\x89u\x8b@G\x8fM\xfa\xd3N\xa5\b?\x10\x81@$\xb7\x02\x14U\xb0p:,\b W\x18\xc1|,\xfb4\xf1k\xcds\x9f\x9e\xc6\x981\x18\xef\xcf\t,Z\x92C\x14\xc8%F\xae\xa3\xdc\x10\xf2\xe5t\xea3\r0\xe4\x9dV\x9c\x10\x13W\xaa\xe3\xef#\xe9\"\r\xd9\xc7$t\x9f\xdc\xea\x7f\x91\xd5*\xa2I4\x81\xc1;[\xbc\x10g\xeaqysG\xe3n\n\x18\x91mB\x8a\xc2\x13\x19\xcf\xd5g\xb6k\x02\xc3\xade\xf9N\xb23+\xf2\xcb\xa7\x15\xba\xceSq\xd1#!<\xe95\x0e\x94[\x03\xd3\xcdU\xe3.\x03\xc5i\xda\x9as\xdd\x87\x11\xba\x8b8`\"\xfc\xc3!S\x16\xa0H\x1b\x987\xb0\x8b$CT\x97<\xe8\x81\xcc\xe8J\v`.\xd8\xb8\x1f\xaai\x9aMqHa\xadJ!k\t\x00\x10\xe5\x98\xe8\xa6T\x1a\xa7R`V\x9a$\xccf\xeb\xf5\x03K\xd8*\"\x05\xb8\x91{\xbb\xd7\xdb\n\x99%\xbfYm\xb3\xcd\x7f8\xf4S\xfb\xb8A\xc5\xa5F\xf1\xdb\xcb$y\x98\xbaYJ1\xe5BX\x7f\xeb>\xe7I\x11\xc8\'F)\x98\x90\x1c\xe6M)\xe0\xca\xfeQok\xb7$\xe0\xc1\xd1)\x8f\xcd\xa6\xbcp\xb4\x14\x8f\xa0\xeb\xd7\xebY\xc2G,w\xec\x9c#W\xd9\xd3\aL\xa7\'\xc5\xa8$\xa4_)\b\xec\x95\xd8\xb0\x00\x88\xb7[ E2\xca\fW\xae\xef\xb4\x1c}\x9d\xe3e{\xc9>T\x18y?\xe1]O-X\xb2\xfblP\xc2\x15\xaf\xa9\x86\x91c\x9f\x16\x1e7i\xdduw6\xadrE\xcb\xac\xcc\x91\x02\xfc\xaa\xaa\xc3\x1d\xc7\x84\x1c)\xb6\x12\xb0\xbf\xa0\x06S\xab5\xa1?\f\xc6\x19Q&SS\xc7\x10\xcd\x1e\xc3\xc0\xa5\x8e\xe5\x0e\x1b\xdf\xcdD$\xf6\x84X+\x9a`9;\x86=\xb8$\x1b.\r\x05\x90L\x1d_\xd2\xec\xf7\xc5D\xb3F\x18J'}, 0x22) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r6 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x7bc03) (async) write$cgroup_int(r6, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, 0x0) [ 2771.881033][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2772.046380][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2772.137857][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2772.263504][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2772.529549][ T5048] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2772.554110][ T5048] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2772.562626][ T5048] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2772.571082][ T5048] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2772.579003][ T5048] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2772.833689][T16343] chnl_net:caif_netlink_parms(): no params data found [ 2772.917419][T16343] bridge0: port 1(bridge_slave_0) entered blocking state [ 2772.936174][T16343] bridge0: port 1(bridge_slave_0) entered disabled state [ 2772.948819][T16343] bridge_slave_0: entered allmulticast mode [ 2772.965133][T16343] bridge_slave_0: entered promiscuous mode [ 2772.976819][T16343] bridge0: port 2(bridge_slave_1) entered blocking state [ 2772.989042][T16343] bridge0: port 2(bridge_slave_1) entered disabled state [ 2772.999906][T16343] bridge_slave_1: entered allmulticast mode [ 2773.015033][T16343] bridge_slave_1: entered promiscuous mode [ 2773.075379][T16343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2773.100620][T16343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2773.153986][T16343] team0: Port device team_slave_0 added [ 2773.163364][T16343] team0: Port device team_slave_1 added [ 2773.202482][T16343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2773.221320][T16343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2773.258471][T16343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2773.272861][T16343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2773.283273][T16343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2773.318810][T16343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2773.376932][T16343] hsr_slave_0: entered promiscuous mode [ 2773.383956][T16343] hsr_slave_1: entered promiscuous mode [ 2773.391255][T16343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2773.398921][T16343] Cannot create hsr debugfs directory [ 2773.568182][ T51] hsr_slave_0: left promiscuous mode [ 2773.574560][ T51] hsr_slave_1: left promiscuous mode [ 2773.583736][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2773.591943][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2773.602292][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2773.609721][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2773.621369][ T51] bridge_slave_1: left allmulticast mode [ 2773.627041][ T51] bridge_slave_1: left promiscuous mode [ 2773.645765][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 2773.682810][ T51] bridge_slave_0: left allmulticast mode [ 2773.699583][ T51] bridge_slave_0: left promiscuous mode [ 2773.705798][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 2773.727698][ T51] veth1_macvtap: left promiscuous mode [ 2773.742715][ T51] veth0_macvtap: left promiscuous mode [ 2773.748323][ T51] veth1_vlan: left promiscuous mode [ 2773.761571][ T51] veth0_vlan: left promiscuous mode [ 2774.096479][T27851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2774.116905][T27851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2774.127010][T27851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2774.134957][T27851] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2774.144663][T27851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2774.172433][ T51] team0 (unregistering): Port device team_slave_1 removed [ 2774.187192][ T51] team0 (unregistering): Port device team_slave_0 removed [ 2774.201400][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2774.218284][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2774.284681][ T51] bond0 (unregistering): Released all slaves [ 2774.630353][ T5048] Bluetooth: hci1: command 0x0409 tx timeout [ 2774.712025][ T1208] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.718363][ T1208] ieee802154 phy1 wpan1: encryption failed: -22 [ 2774.933598][T16381] chnl_net:caif_netlink_parms(): no params data found [ 2775.182068][T16381] bridge0: port 1(bridge_slave_0) entered blocking state [ 2775.220392][T16381] bridge0: port 1(bridge_slave_0) entered disabled state [ 2775.227614][T16381] bridge_slave_0: entered allmulticast mode [ 2775.261321][T16381] bridge_slave_0: entered promiscuous mode [ 2775.330202][T16381] bridge0: port 2(bridge_slave_1) entered blocking state [ 2775.337387][T16381] bridge0: port 2(bridge_slave_1) entered disabled state [ 2775.350523][T16381] bridge_slave_1: entered allmulticast mode [ 2775.357473][T16381] bridge_slave_1: entered promiscuous mode [ 2775.411760][T16343] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2775.432070][T16343] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2775.475569][T16381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2775.493637][T16343] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2775.520459][T16381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2775.596167][T16343] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2775.633092][T16381] team0: Port device team_slave_0 added [ 2775.661845][T16381] team0: Port device team_slave_1 added [ 2775.750279][T16381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2775.757263][T16381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2775.828549][T16381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2775.873378][T16381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2775.900330][T16381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2775.950095][T16381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2776.053667][T16381] hsr_slave_0: entered promiscuous mode [ 2776.060396][T16381] hsr_slave_1: entered promiscuous mode [ 2776.230320][ T5048] Bluetooth: hci4: command 0x0409 tx timeout [ 2776.305776][T16343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2776.394149][T16343] 8021q: adding VLAN 0 to HW filter on device team0 [ 2776.412791][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2776.421622][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2776.491773][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2776.500967][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2776.509451][T24745] bridge0: port 1(bridge_slave_0) entered blocking state [ 2776.516611][T24745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2776.526080][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2776.534930][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2776.547298][T24745] bridge0: port 2(bridge_slave_1) entered blocking state [ 2776.554440][T24745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2776.562724][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2776.596450][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2776.604798][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2776.614648][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2776.626475][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2776.635705][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2776.644203][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2776.653115][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2776.710197][ T5048] Bluetooth: hci1: command 0x041b tx timeout [ 2776.727931][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2776.737085][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2776.745992][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2776.754847][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2776.771380][T16343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2776.917560][T16381] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2776.932673][T16381] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2776.946213][T16381] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2776.956531][T16381] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2777.080504][T16381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2777.108425][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2777.118457][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2777.137955][T16381] 8021q: adding VLAN 0 to HW filter on device team0 [ 2777.156426][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2777.165079][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2777.174020][T14475] bridge0: port 1(bridge_slave_0) entered blocking state [ 2777.181168][T14475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2777.188803][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2777.197523][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2777.205986][T14475] bridge0: port 2(bridge_slave_1) entered blocking state [ 2777.213107][T14475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2777.234816][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2777.242725][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2777.252110][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2777.259499][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2777.267189][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2777.276424][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2777.285899][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2777.302542][T16343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2777.318501][T16381] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2777.329577][T16381] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2777.342272][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2777.349987][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2777.359782][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2777.368379][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2777.377182][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2777.385658][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2777.394445][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2777.403758][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2777.442497][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2777.462759][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2777.494032][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2777.512664][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2777.531819][T16343] veth0_vlan: entered promiscuous mode [ 2777.544122][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2777.559103][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2777.572503][T16343] veth1_vlan: entered promiscuous mode [ 2777.609961][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2777.627733][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2777.640569][T16343] veth0_macvtap: entered promiscuous mode [ 2777.657564][T16343] veth1_macvtap: entered promiscuous mode [ 2777.691059][T16343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2777.703034][T16343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2777.712988][T16343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2777.723507][T16343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2777.733399][T16343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2777.744298][T16343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2777.765412][T16343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2777.776368][T16343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2777.786542][T16343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2777.806161][T16343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2777.826516][T16343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2777.852766][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2777.861790][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2777.869855][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2777.879571][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2777.891466][T16343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2777.904039][T16343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2777.915251][T16343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2777.926182][T16343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2777.938150][T16343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2777.948952][T16343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2777.967191][T16343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2777.979134][T16343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2777.996705][T16343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2778.009772][T16343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2778.031890][T16343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2778.051221][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2778.062657][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2778.082117][T16343] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2778.102487][T16343] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2778.111962][T16343] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2778.121008][T16343] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2778.137773][T16381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2778.149027][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2778.159539][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2778.217824][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2778.227137][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2778.249976][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2778.269107][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2778.279801][T16381] veth0_vlan: entered promiscuous mode [ 2778.296773][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2778.306938][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2778.310703][ T5048] Bluetooth: hci4: command 0x041b tx timeout [ 2778.325500][T16381] veth1_vlan: entered promiscuous mode [ 2778.361652][ T5181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2778.369710][ T5181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2778.399406][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2778.408221][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2778.416623][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2778.425728][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2778.435546][T16381] veth0_macvtap: entered promiscuous mode [ 2778.447899][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2778.456261][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2778.467228][T21574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2778.477216][T16381] veth1_macvtap: entered promiscuous mode [ 2778.490586][T21574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2778.500779][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2778.509622][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2778.533411][T16381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2778.544064][T16381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2778.559490][T16381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2778.576877][T16381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2778.587009][T16381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2778.597736][T16381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2778.620125][T16381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2778.637120][T16381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2778.654865][T16381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2778.677365][T16381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2778.695518][T16381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2778.720643][T16381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2778.725717][T16451] syz-executor.2 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_NOFAIL|__GFP_ZERO|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 2778.750218][T16451] CPU: 1 PID: 16451 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2778.760666][T16451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2778.770741][T16451] Call Trace: [ 2778.774038][T16451] [ 2778.776986][T16451] dump_stack_lvl+0x136/0x150 [ 2778.781710][T16451] dump_header+0x10a/0xd70 [ 2778.786166][T16451] oom_kill_process+0x25d/0x600 [ 2778.790131][ T5048] Bluetooth: hci1: command 0x040f tx timeout [ 2778.791027][T16451] out_of_memory+0x35c/0x1660 [ 2778.791062][T16451] ? find_held_lock+0x2d/0x110 [ 2778.806461][T16451] ? oom_killer_disable+0x2b0/0x2b0 [ 2778.811687][T16451] ? rcu_read_unlock+0x9/0x60 [ 2778.816396][T16451] ? find_held_lock+0x2d/0x110 [ 2778.821200][T16451] mem_cgroup_out_of_memory+0x206/0x270 [ 2778.826788][T16451] ? mem_cgroup_margin+0x130/0x130 [ 2778.831941][T16451] ? lock_downgrade+0x690/0x690 [ 2778.836843][T16451] try_charge_memcg+0xf99/0x13a0 [ 2778.841832][T16451] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2778.845222][T16381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2778.847855][T16451] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2778.847897][T16451] ? lock_downgrade+0x690/0x690 [ 2778.865370][T16381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2778.865621][T16451] ? lock_downgrade+0x690/0x690 [ 2778.877394][T16381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2778.880843][T16451] obj_cgroup_charge+0x2af/0x5e0 [ 2778.880892][T16451] ? alloc_buffer_head+0x24/0x150 [ 2778.880929][T16451] kmem_cache_alloc+0xb1/0x3b0 [ 2778.880971][T16451] alloc_buffer_head+0x24/0x150 [ 2778.881011][T16451] folio_alloc_buffers+0x2f2/0x810 [ 2778.881061][T16451] folio_create_empty_buffers+0x2c/0x470 [ 2778.881107][T16451] ext4_block_write_begin+0xb9c/0xde0 [ 2778.895860][T16381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2778.900827][T16451] ? lockdep_hardirqs_on+0x7d/0x100 [ 2778.900864][T16451] ? ext4_da_release_space+0x530/0x530 [ 2778.900899][T16451] ? ext4_bmap+0x280/0x280 [ 2778.906108][T16381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2778.910485][T16451] ? __filemap_get_folio+0x1f8/0x990 [ 2778.910530][T16451] ext4_da_write_begin+0x407/0x8c0 [ 2778.910576][T16451] ? ext4_write_begin+0x1030/0x1030 [ 2778.917415][T16381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2778.921304][T16451] generic_perform_write+0x256/0x570 [ 2778.921353][T16451] ? generic_file_readonly_mmap+0x180/0x180 [ 2778.921410][T16451] ? iunique+0x370/0x370 [ 2778.921451][T16451] ext4_buffered_write_iter+0x15b/0x460 [ 2778.928594][T16381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2778.937241][T16451] ext4_file_write_iter+0xbe0/0x1740 [ 2778.937288][T16451] ? ext4_file_mmap+0x6c0/0x6c0 [ 2778.937330][T16451] vfs_write+0x945/0xd50 [ 2778.937357][T16451] ? kernel_write+0x670/0x670 [ 2778.945079][T16381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2778.947978][T16451] ? __fget_files+0x26a/0x480 [ 2778.952919][T16381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2778.962193][T16451] ksys_write+0x12b/0x250 [ 2778.962226][T16451] ? __ia32_sys_read+0xb0/0xb0 [ 2778.962252][T16451] ? syscall_enter_from_user_mode+0x26/0x80 [ 2778.962296][T16451] do_syscall_64+0x39/0xb0 [ 2778.962333][T16451] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2778.968780][T16381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2778.972706][T16451] RIP: 0033:0x7fdcbcc8c169 [ 2778.972730][T16451] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2778.972754][T16451] RSP: 002b:00007fdcbd9df168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2778.972778][T16451] RAX: ffffffffffffffda RBX: 00007fdcbcdabf80 RCX: 00007fdcbcc8c169 [ 2778.972795][T16451] RDX: 000000000007bc03 RSI: 0000000020000200 RDI: 0000000000000005 [ 2778.972809][T16451] RBP: 00007fdcbcce7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2778.972824][T16451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2778.972839][T16451] R13: 00007ffcb82a179f R14: 00007fdcbd9df300 R15: 0000000000022000 [ 2778.979959][T16381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2778.988428][T16451] [ 2779.089162][T16451] memory: usage 10824kB, limit 0kB, failcnt 2384 [ 2779.094855][T16381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2779.113080][T16451] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2779.150270][T16381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2779.194577][T16451] Memory cgroup stats for /syz2: [ 2779.224087][T16451] anon 86016 [ 2779.224087][T16451] file 10612736 [ 2779.224087][T16451] kernel 368640 [ 2779.224087][T16451] kernel_stack 98304 [ 2779.224087][T16451] pagetables 77824 [ 2779.224087][T16451] sec_pagetables 0 [ 2779.224087][T16451] percpu 64 [ 2779.224087][T16451] sock 0 [ 2779.224087][T16451] vmalloc 0 [ 2779.224087][T16451] shmem 10440704 [ 2779.224087][T16451] zswap 0 [ 2779.224087][T16451] zswapped 0 [ 2779.224087][T16451] file_mapped 262144 [ 2779.224087][T16451] file_dirty 167936 [ 2779.224087][T16451] file_writeback 0 [ 2779.224087][T16451] swapcached 0 [ 2779.224087][T16451] anon_thp 0 [ 2779.224087][T16451] file_thp 0 [ 2779.224087][T16451] shmem_thp 0 [ 2779.224087][T16451] inactive_anon 86016 [ 2779.224087][T16451] active_anon 10440704 [ 2779.224087][T16451] inactive_file 172032 [ 2779.224087][T16451] active_file 0 [ 2779.224087][T16451] unevictable 0 [ 2779.224087][T16451] slab_reclaimable 72456 [ 2779.224087][T16451] slab_unreclaimable 93840 [ 2779.224087][T16451] slab 166296 [ 2779.224087][T16451] workingset_refault_anon 0 [ 2779.224087][T16451] workingset_refault_file 0 [ 2779.224087][T16451] workingset_activate_anon 0 [ 2779.224087][T16451] workingset_activate_file 0 [ 2779.224087][T16451] workingset_restore_anon 0 [ 2779.224087][T16451] workingset_restore_file 0 [ 2779.224087][T16451] workingset_nodereclaim 0 [ 2779.224087][T16451] pgscan 1924 [ 2779.224087][T16451] pgsteal 31 [ 2779.224087][T16451] pgscan_kswapd 0 [ 2779.224087][T16451] pgscan_direct 1924 [ 2779.224087][T16451] pgscan_khugepaged 0 [ 2779.224087][T16451] pgsteal_kswapd 0 [ 2779.224087][T16451] pgsteal_direct 31 [ 2779.224087][T16451] pgsteal_khugepaged 0 [ 2779.224087][T16451] pgfault 72459 [ 2779.224087][T16451] pgmajfault 0 [ 2779.224087][T16451] pgrefill 1245695 [ 2779.224087][T16451] pgactivate 1893 [ 2779.224087][T16451] pgdeactivate 0 [ 2779.224087][T16451] pglazyfree 0 [ 2779.224087][T16451] pglazyfreed 0 [ 2779.224087][T16451] zswpin 0 [ 2779.224087][T16451] zswpout 0 [ 2779.248704][T16381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2779.419957][T16451] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=16343,uid=0 [ 2779.440367][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2779.452648][T16451] Memory cgroup out of memory: Killed process 16343 (syz-executor.2) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2779.453174][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2779.497062][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2779.506989][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2779.529835][T16381] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2779.542686][T16381] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2779.552060][T16381] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2779.560851][T16381] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2779.743709][T19644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2779.760175][T19644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2779.776768][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2779.808584][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2779.818022][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2779.832867][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2779.966714][T16474] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2779.986284][T16474] CPU: 1 PID: 16474 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2779.996741][T16474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2780.006819][T16474] Call Trace: [ 2780.010115][T16474] [ 2780.013064][T16474] dump_stack_lvl+0x136/0x150 [ 2780.017787][T16474] dump_header+0x10a/0xd70 [ 2780.022240][T16474] oom_kill_process+0x25d/0x600 [ 2780.027133][T16474] out_of_memory+0x35c/0x1660 [ 2780.031843][T16474] ? io_schedule_timeout+0x150/0x150 [ 2780.037157][T16474] ? oom_killer_disable+0x2b0/0x2b0 [ 2780.042376][T16474] ? kernfs_notify+0x1ac/0x410 [ 2780.047218][T16474] mem_cgroup_out_of_memory+0x206/0x270 [ 2780.052814][T16474] ? mem_cgroup_margin+0x130/0x130 [ 2780.057976][T16474] memory_max_write+0x2f9/0x3c0 [ 2780.062868][T16474] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2780.068976][T16474] ? lock_sync+0x190/0x190 [ 2780.073429][T16474] cgroup_file_write+0x1e2/0x7b0 [ 2780.078400][T16474] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2780.084501][T16474] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2780.089903][T16474] ? __virt_addr_valid+0x61/0x2e0 [ 2780.094975][T16474] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2780.100374][T16474] kernfs_fop_write_iter+0x3f1/0x600 [ 2780.105699][T16474] vfs_write+0x945/0xd50 [ 2780.109966][T16474] ? kernel_write+0x670/0x670 [ 2780.114667][T16474] ? __fget_files+0x26a/0x480 [ 2780.119398][T16474] ksys_write+0x12b/0x250 [ 2780.123749][T16474] ? __ia32_sys_read+0xb0/0xb0 [ 2780.128531][T16474] ? syscall_enter_from_user_mode+0x26/0x80 [ 2780.134460][T16474] do_syscall_64+0x39/0xb0 [ 2780.138912][T16474] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2780.144837][T16474] RIP: 0033:0x7ff93ac8c169 [ 2780.149271][T16474] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2780.168900][T16474] RSP: 002b:00007ff9397dd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2780.177334][T16474] RAX: ffffffffffffffda RBX: 00007ff93adac120 RCX: 00007ff93ac8c169 [ 2780.185324][T16474] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 2780.193309][T16474] RBP: 00007ff93ace7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2780.201294][T16474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2780.209288][T16474] R13: 00007ffe870b435f R14: 00007ff9397dd300 R15: 0000000000022000 [ 2780.217303][T16474] [ 2780.248629][T16474] memory: usage 8928kB, limit 0kB, failcnt 2542 [ 2780.254981][T16474] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2780.262739][T16474] Memory cgroup stats for /syz3: [ 2780.262961][T16474] anon 196608 [ 2780.262961][T16474] file 8351744 [ 2780.262961][T16474] kernel 581632 [ 2780.262961][T16474] kernel_stack 163840 [ 2780.262961][T16474] pagetables 155648 [ 2780.262961][T16474] sec_pagetables 0 [ 2780.262961][T16474] percpu 128 [ 2780.262961][T16474] sock 0 [ 2780.262961][T16474] vmalloc 0 [ 2780.262961][T16474] shmem 8351744 [ 2780.262961][T16474] zswap 0 [ 2780.262961][T16474] zswapped 0 [ 2780.262961][T16474] file_mapped 241664 [ 2780.262961][T16474] file_dirty 0 [ 2780.262961][T16474] file_writeback 0 [ 2780.262961][T16474] swapcached 0 [ 2780.262961][T16474] anon_thp 0 [ 2780.262961][T16474] file_thp 0 [ 2780.262961][T16474] shmem_thp 0 [ 2780.262961][T16474] inactive_anon 8458240 [ 2780.262961][T16474] active_anon 90112 [ 2780.262961][T16474] inactive_file 0 [ 2780.262961][T16474] active_file 0 [ 2780.262961][T16474] unevictable 0 [ 2780.262961][T16474] slab_reclaimable 42808 [ 2780.262961][T16474] slab_unreclaimable 176488 [ 2780.262961][T16474] slab 219296 [ 2780.262961][T16474] workingset_refault_anon 0 [ 2780.262961][T16474] workingset_refault_file 1 [ 2780.262961][T16474] workingset_activate_anon 0 [ 2780.262961][T16474] workingset_activate_file 0 [ 2780.262961][T16474] workingset_restore_anon 0 [ 2780.262961][T16474] workingset_restore_file 0 [ 2780.262961][T16474] workingset_nodereclaim 0 [ 2780.262961][T16474] pgscan 199 [ 2780.262961][T16474] pgsteal 86 [ 2780.262961][T16474] pgscan_kswapd 0 [ 2780.262961][T16474] pgscan_direct 199 [ 2780.262961][T16474] pgscan_khugepaged 0 [ 2780.262961][T16474] pgsteal_kswapd 0 [ 2780.262961][T16474] pgsteal_direct 86 [ 2780.262961][T16474] pgsteal_khugepaged 0 [ 2780.262961][T16474] pgfault 89537 [ 2780.262961][T16474] pgmajfault 0 [ 2780.262961][T16474] pgrefill 192043 [ 2780.262961][T16474] pgactivate 113 [ 2780.262961][T16474] pgdeactivate 0 [ 2780.262961][T16474] pglazyfree 0 [ 2780.262961][T16474] pglazyfreed 0 [ 2780.262961][T16474] zswpin 0 [ 2780.262961][T16474] zswpout 0 [ 2780.262961][T16474] thp_fault_alloc 0 [ 2780.455586][ T5048] Bluetooth: hci4: command 0x040f tx timeout [ 2780.471475][T16474] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16469,uid=0 [ 2780.487632][T16474] Memory cgroup out of memory: Killed process 16469 (syz-executor.3) total-vm:50972kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 08:03:30 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='fsi_master_rw_result\x00'}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x40, 0x6, 0x5, 0x4, 0x0, 0x4, 0x20000, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x1b21c, 0x1a, 0x0, 0x9, 0x0, 0xff, 0xff, 0x0, 0x7f, 0x0, 0xf}, 0x0, 0x7, r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 08:03:30 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1324c, 0x9, 0x0, 0x1b208d76dec320ae, 0x8, 0x80000000, 0xcc, 0x0, 0x200, 0x0, 0x8000}, r5, 0x0, r2, 0x1) close(r4) 08:03:30 executing program 0: r0 = syz_clone(0x400, &(0x7f0000000240)="cd840497235eb82df4a3110459f633ecd2ed2a90ab1c5d4db0f9f5610a83d93badfc6194a4d8c35ec18c428a70dda9585758294811ee52f5d8b884be52aacb1683b047d48336a67dcc18a6ba23824769a8f6fb26dfe1ea8cc1e100f4020cc8728789d34ed9535dbbda44a3dcb8d174f23e258995ca897a0b6ff08ceb27caf10d4b365b4b62c968d13179bfecef849e05c8129d0c0292650710f02d0d9691635b5e3f5eac", 0xa4, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000300)="e85e6c5cc87c56c1a3281fe6a9c40b40c8714212f8acb46fec4027d8db1ea9ef17393f7007bdefed28847278628c8d2724504d94809f4e882f9546b6965da82e229f535640335535cc4f42d9e5c8b057e42657891a035a4ee25ae5cd1d683614b8de0fcedd01ac3fd1f1c477ee9ee4e8841a4962b3cece76af75b278331c6c7640d7e56a524092f0c631bb983a49ddb5a1eaa5eb25d2a6562ad23822577ab77ca576d6998aae4d20") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(r1) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) r3 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r5 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f00000003c0), 0x2, 0x0) close(r5) write$cgroup_int(r4, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, 0x0) write$cgroup_int(r3, &(0x7f0000000180), 0x12) 08:03:30 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:03:30 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, r0, 0x0) 08:03:30 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 08:03:30 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2781.656486][T16381] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 08:03:30 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, r0, 0x0) [ 2781.710399][T16381] CPU: 1 PID: 16381 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2781.720866][T16381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2781.730955][T16381] Call Trace: [ 2781.734255][T16381] [ 2781.737204][T16381] dump_stack_lvl+0x136/0x150 [ 2781.741931][T16381] dump_header+0x10a/0xd70 [ 2781.746379][T16381] oom_kill_process+0x25d/0x600 [ 2781.751260][T16381] out_of_memory+0x35c/0x1660 [ 2781.755969][T16381] ? find_held_lock+0x2d/0x110 [ 2781.760770][T16381] ? oom_killer_disable+0x2b0/0x2b0 [ 2781.765999][T16381] ? rcu_read_unlock+0x9/0x60 [ 2781.770716][T16381] ? find_held_lock+0x2d/0x110 [ 2781.775511][T16381] mem_cgroup_out_of_memory+0x206/0x270 [ 2781.781091][T16381] ? mem_cgroup_margin+0x130/0x130 [ 2781.786235][T16381] ? lock_downgrade+0x690/0x690 [ 2781.793052][T16381] try_charge_memcg+0xf99/0x13a0 [ 2781.798040][T16381] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2781.804073][T16381] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2781.809833][T16381] ? lock_downgrade+0x690/0x690 [ 2781.814723][T16381] ? lock_downgrade+0x690/0x690 [ 2781.819625][T16381] ? rcu_read_unlock+0x9/0x60 [ 2781.824344][T16381] obj_cgroup_charge+0x2af/0x5e0 [ 2781.829327][T16381] ? copy_process+0x3c0/0x7600 [ 2781.834125][T16381] kmem_cache_alloc_node+0xa8/0x3e0 [ 2781.839371][T16381] copy_process+0x3c0/0x7600 [ 2781.843997][T16381] ? _raw_spin_unlock+0x28/0x40 [ 2781.848888][T16381] ? wp_page_reuse+0x197/0x570 [ 2781.853706][T16381] ? pidfd_prepare+0x80/0x80 [ 2781.858345][T16381] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2781.864373][T16381] kernel_clone+0xeb/0x890 [ 2781.868830][T16381] ? create_io_thread+0xe0/0xe0 [ 2781.873707][T16381] ? do_user_addr_fault+0x2b1/0x1210 [ 2781.879029][T16381] ? reacquire_held_locks+0x216/0x4e0 [ 2781.884439][T16381] ? do_user_addr_fault+0x2b1/0x1210 [ 2781.895065][T16381] ? find_held_lock+0x2d/0x110 [ 2781.899874][T16381] __do_sys_clone+0xba/0x100 [ 2781.904500][T16381] ? kernel_clone+0x890/0x890 [ 2781.909574][T16381] ? syscall_enter_from_user_mode+0x26/0x80 [ 2781.915601][T16381] do_syscall_64+0x39/0xb0 [ 2781.920069][T16381] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2781.926437][T16381] RIP: 0033:0x7ff93ac89e9b [ 2781.930875][T16381] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2781.950509][T16381] RSP: 002b:00007ffe870b45a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 08:03:31 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:03:31 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000100)=0x5, 0x12) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000140)='#$*@)-|\r,\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 2781.958949][T16381] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff93ac89e9b [ 2781.966944][T16381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2781.975024][T16381] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555dc7400 [ 2781.983021][T16381] R10: 0000555555dc76d0 R11: 0000000000000246 R12: 0000000000000001 [ 2781.991015][T16381] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe870b4680 [ 2781.999120][T16381] [ 2782.081555][ T5181] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 08:03:31 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:03:31 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, r0, 0x0) 08:03:31 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0, r0, 0x0) [ 2782.480181][ T5048] Bluetooth: hci4: command 0x0419 tx timeout [ 2782.540316][T16381] memory: usage 8600kB, limit 0kB, failcnt 2561 [ 2782.546624][T16381] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2782.595300][T16381] Memory cgroup stats for /syz3: [ 2782.595540][T16381] anon 151552 [ 2782.595540][T16381] file 8351744 [ 2782.595540][T16381] kernel 290816 [ 2782.595540][T16381] kernel_stack 32768 [ 2782.595540][T16381] pagetables 81920 [ 2782.595540][T16381] sec_pagetables 0 [ 2782.595540][T16381] percpu 64 [ 2782.595540][T16381] sock 0 [ 2782.595540][T16381] vmalloc 0 [ 2782.595540][T16381] shmem 8351744 [ 2782.595540][T16381] zswap 0 [ 2782.595540][T16381] zswapped 0 [ 2782.595540][T16381] file_mapped 241664 [ 2782.595540][T16381] file_dirty 0 [ 2782.595540][T16381] file_writeback 0 [ 2782.595540][T16381] swapcached 0 [ 2782.595540][T16381] anon_thp 0 [ 2782.595540][T16381] file_thp 0 [ 2782.595540][T16381] shmem_thp 0 [ 2782.595540][T16381] inactive_anon 8458240 [ 2782.595540][T16381] active_anon 45056 [ 2782.595540][T16381] inactive_file 0 [ 2782.595540][T16381] active_file 0 [ 2782.595540][T16381] unevictable 0 [ 2782.595540][T16381] slab_reclaimable 35952 [ 2782.595540][T16381] slab_unreclaimable 111768 [ 2782.595540][T16381] slab 147720 [ 2782.595540][T16381] workingset_refault_anon 0 [ 2782.595540][T16381] workingset_refault_file 1 [ 2782.595540][T16381] workingset_activate_anon 0 [ 2782.595540][T16381] workingset_activate_file 0 [ 2782.595540][T16381] workingset_restore_anon 0 [ 2782.595540][T16381] workingset_restore_file 0 [ 2782.595540][T16381] workingset_nodereclaim 0 [ 2782.595540][T16381] pgscan 199 [ 2782.595540][T16381] pgsteal 86 [ 2782.595540][T16381] pgscan_kswapd 0 [ 2782.595540][T16381] pgscan_direct 199 [ 2782.595540][T16381] pgscan_khugepaged 0 [ 2782.595540][T16381] pgsteal_kswapd 0 08:03:31 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1324c, 0x9, 0x0, 0x1b208d76dec320ae, 0x8, 0x80000000, 0xcc, 0x0, 0x200, 0x0, 0x8000}, r5, 0x0, r2, 0x1) close(r4) 08:03:31 executing program 0: r0 = syz_clone(0x400, &(0x7f0000000240)="cd840497235eb82df4a3110459f633ecd2ed2a90ab1c5d4db0f9f5610a83d93badfc6194a4d8c35ec18c428a70dda9585758294811ee52f5d8b884be52aacb1683b047d48336a67dcc18a6ba23824769a8f6fb26dfe1ea8cc1e100f4020cc8728789d34ed9535dbbda44a3dcb8d174f23e258995ca897a0b6ff08ceb27caf10d4b365b4b62c968d13179bfecef849e05c8129d0c0292650710f02d0d9691635b5e3f5eac", 0xa4, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000300)="e85e6c5cc87c56c1a3281fe6a9c40b40c8714212f8acb46fec4027d8db1ea9ef17393f7007bdefed28847278628c8d2724504d94809f4e882f9546b6965da82e229f535640335535cc4f42d9e5c8b057e42657891a035a4ee25ae5cd1d683614b8de0fcedd01ac3fd1f1c477ee9ee4e8841a4962b3cece76af75b278331c6c7640d7e56a524092f0c631bb983a49ddb5a1eaa5eb25d2a6562ad23822577ab77ca576d6998aae4d20") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(r1) (async, rerun: 32) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) (async, rerun: 32) openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) r3 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) (async, rerun: 32) r5 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f00000003c0), 0x2, 0x0) close(r5) (async) write$cgroup_int(r4, &(0x7f0000000200), 0x7bc03) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000180), 0x12) 08:03:31 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:03:31 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xb000000}, 0x0, 0x0, r0, 0x0) [ 2782.595540][T16381] pgsteal_direct 86 [ 2782.595540][T16381] pgsteal_khugepaged 0 [ 2782.595540][T16381] pgfault 89549 [ 2782.595540][T16381] pgmajfault 0 [ 2782.595540][T16381] pgrefill 192043 [ 2782.595540][T16381] pgactivate 113 [ 2782.595540][T16381] pgdeactivate 0 [ 2782.595540][T16381] pglazyfree 0 [ 2782.595540][T16381] pglazyfreed 0 [ 2782.595540][T16381] zswpin 0 [ 2782.595540][T16381] zswpout 0 [ 2782.595540][T16381] thp_fault_alloc 0 [ 2783.120764][ T5181] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2783.180109][T16381] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16381,uid=0 [ 2783.209830][T16381] Memory cgroup out of memory: Killed process 16381 (syz-executor.3) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2783.272600][ T5181] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 08:03:32 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:03:32 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 08:03:32 executing program 0: r0 = syz_clone(0x400, &(0x7f0000000240)="cd840497235eb82df4a3110459f633ecd2ed2a90ab1c5d4db0f9f5610a83d93badfc6194a4d8c35ec18c428a70dda9585758294811ee52f5d8b884be52aacb1683b047d48336a67dcc18a6ba23824769a8f6fb26dfe1ea8cc1e100f4020cc8728789d34ed9535dbbda44a3dcb8d174f23e258995ca897a0b6ff08ceb27caf10d4b365b4b62c968d13179bfecef849e05c8129d0c0292650710f02d0d9691635b5e3f5eac", 0xa4, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000300)="e85e6c5cc87c56c1a3281fe6a9c40b40c8714212f8acb46fec4027d8db1ea9ef17393f7007bdefed28847278628c8d2724504d94809f4e882f9546b6965da82e229f535640335535cc4f42d9e5c8b057e42657891a035a4ee25ae5cd1d683614b8de0fcedd01ac3fd1f1c477ee9ee4e8841a4962b3cece76af75b278331c6c7640d7e56a524092f0c631bb983a49ddb5a1eaa5eb25d2a6562ad23822577ab77ca576d6998aae4d20") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(r1) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) r3 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r5 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f00000003c0), 0x2, 0x0) close(r5) write$cgroup_int(r4, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, 0x0) write$cgroup_int(r3, &(0x7f0000000180), 0x12) syz_clone(0x400, &(0x7f0000000240)="cd840497235eb82df4a3110459f633ecd2ed2a90ab1c5d4db0f9f5610a83d93badfc6194a4d8c35ec18c428a70dda9585758294811ee52f5d8b884be52aacb1683b047d48336a67dcc18a6ba23824769a8f6fb26dfe1ea8cc1e100f4020cc8728789d34ed9535dbbda44a3dcb8d174f23e258995ca897a0b6ff08ceb27caf10d4b365b4b62c968d13179bfecef849e05c8129d0c0292650710f02d0d9691635b5e3f5eac", 0xa4, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000300)="e85e6c5cc87c56c1a3281fe6a9c40b40c8714212f8acb46fec4027d8db1ea9ef17393f7007bdefed28847278628c8d2724504d94809f4e882f9546b6965da82e229f535640335535cc4f42d9e5c8b057e42657891a035a4ee25ae5cd1d683614b8de0fcedd01ac3fd1f1c477ee9ee4e8841a4962b3cece76af75b278331c6c7640d7e56a524092f0c631bb983a49ddb5a1eaa5eb25d2a6562ad23822577ab77ca576d6998aae4d20") (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) close(r1) (async) openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) (async) openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f00000003c0), 0x2, 0x0) (async) close(r5) (async) write$cgroup_int(r4, &(0x7f0000000200), 0x7bc03) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000180), 0x12) (async) 08:03:32 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0x0, r0, 0x0) [ 2783.542933][ T5181] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2784.410894][ T5048] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2784.420784][ T5048] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2784.428733][T27851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2784.437851][T27851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2784.445659][T27851] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2784.452916][T27851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2785.103888][T16591] chnl_net:caif_netlink_parms(): no params data found [ 2785.475330][T16591] bridge0: port 1(bridge_slave_0) entered blocking state [ 2785.489079][T16591] bridge0: port 1(bridge_slave_0) entered disabled state [ 2785.510375][T16591] bridge_slave_0: entered allmulticast mode [ 2785.517487][T16591] bridge_slave_0: entered promiscuous mode [ 2785.563351][ T5181] hsr_slave_0: left promiscuous mode [ 2785.572785][ T5181] hsr_slave_1: left promiscuous mode [ 2785.578790][ T5181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2785.600277][ T5181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2785.622253][ T5181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2785.640272][ T5181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2785.659199][ T5181] bridge_slave_1: left allmulticast mode [ 2785.670348][ T5181] bridge_slave_1: left promiscuous mode [ 2785.690854][ T5181] bridge0: port 2(bridge_slave_1) entered disabled state [ 2785.704764][ T5181] bridge_slave_0: left allmulticast mode [ 2785.715959][ T5181] bridge_slave_0: left promiscuous mode [ 2785.721780][ T5181] bridge0: port 1(bridge_slave_0) entered disabled state [ 2785.745603][ T5181] veth1_macvtap: left promiscuous mode [ 2785.788951][ T5181] veth0_macvtap: left promiscuous mode [ 2785.794838][ T5181] veth1_vlan: left promiscuous mode [ 2785.810182][ T5181] veth0_vlan: left promiscuous mode [ 2786.215161][ T5181] team0 (unregistering): Port device team_slave_1 removed [ 2786.233455][ T5181] team0 (unregistering): Port device team_slave_0 removed [ 2786.248896][ T5181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2786.276949][ T5181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2786.453432][ T5181] bond0 (unregistering): Released all slaves [ 2786.470514][T27851] Bluetooth: hci1: command 0x0409 tx timeout [ 2786.536439][T16591] bridge0: port 2(bridge_slave_1) entered blocking state [ 2786.543741][T16591] bridge0: port 2(bridge_slave_1) entered disabled state [ 2786.553694][T16591] bridge_slave_1: entered allmulticast mode [ 2786.561011][T16591] bridge_slave_1: entered promiscuous mode [ 2786.624626][T16591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2786.636317][T16591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2786.678334][T16591] team0: Port device team_slave_0 added [ 2786.704703][T16591] team0: Port device team_slave_1 added [ 2786.741707][T16591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2786.748694][T16591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2786.788936][T16591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2786.820248][T16591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2786.827222][T16591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2786.864100][T16591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2786.919691][T16591] hsr_slave_0: entered promiscuous mode [ 2786.927966][T16591] hsr_slave_1: entered promiscuous mode [ 2786.937896][T16591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2786.954012][T16591] Cannot create hsr debugfs directory [ 2787.844750][T16591] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2787.874346][T16591] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2787.892069][T16591] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2787.906578][T16591] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2788.032120][T16591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2788.051489][T16591] 8021q: adding VLAN 0 to HW filter on device team0 [ 2788.058590][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2788.067468][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2788.104230][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2788.113497][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2788.131499][T23455] bridge0: port 1(bridge_slave_0) entered blocking state [ 2788.138605][T23455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2788.164068][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2788.180784][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2788.189245][T23455] bridge0: port 2(bridge_slave_1) entered blocking state [ 2788.196385][T23455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2788.218254][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2788.242396][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2788.250767][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2788.259612][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2788.269244][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2788.278247][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2788.296810][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2788.315823][T16591] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2788.328222][T16591] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2788.344528][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2788.360842][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2788.369291][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2788.378627][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2788.388327][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2788.412145][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2788.550257][T27851] Bluetooth: hci1: command 0x041b tx timeout [ 2788.759917][T16591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2788.785153][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2788.794831][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2788.832658][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2788.841938][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2788.872604][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2788.881475][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2788.892445][T16591] veth0_vlan: entered promiscuous mode [ 2788.904284][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2788.914878][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2788.926425][T16591] veth1_vlan: entered promiscuous mode [ 2788.971311][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2788.979434][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2788.997069][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2789.006409][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2789.017939][T16591] veth0_macvtap: entered promiscuous mode [ 2789.049460][T21574] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2789.067675][T16591] veth1_macvtap: entered promiscuous mode [ 2789.087073][T16591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2789.098703][T16591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2789.109360][T16591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2789.121232][T16591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2789.140260][T16591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2789.160158][T16591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2789.169985][T16591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2789.210101][T16591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2789.230096][T16591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2789.241960][T16591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2789.260200][T16591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2789.280162][T16591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2789.299151][T16591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2789.310453][T16591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2789.329235][T16591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2789.339124][T16591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2789.349926][T16591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2789.360808][T16591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2789.371299][T16591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2789.381301][T16591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2789.391946][T16591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2789.401974][T16591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2789.413599][T16591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2789.425374][T16591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2789.435910][T16591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2789.447408][T16591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2789.457943][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2789.468575][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2789.490930][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2789.499739][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2789.522211][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2789.550948][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2789.577247][T21574] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2789.598468][T16591] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2789.616206][T16591] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2789.626974][T16591] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2789.644156][T16591] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2789.669797][T21574] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2789.757646][T21574] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2789.823229][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2789.872486][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2789.882476][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2789.928149][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2789.962123][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2789.998376][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2790.224609][T16674] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2790.244635][T16674] CPU: 1 PID: 16674 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2790.255089][T16674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2790.265148][T16674] Call Trace: [ 2790.268423][T16674] [ 2790.271358][T16674] dump_stack_lvl+0x136/0x150 [ 2790.276063][T16674] dump_header+0x10a/0xd70 [ 2790.280523][T16674] oom_kill_process+0x25d/0x600 [ 2790.285433][T16674] out_of_memory+0x35c/0x1660 [ 2790.290135][T16674] ? io_schedule_timeout+0x150/0x150 [ 2790.295486][T16674] ? oom_killer_disable+0x2b0/0x2b0 [ 2790.300698][T16674] ? kernfs_notify+0x1ac/0x410 [ 2790.305503][T16674] mem_cgroup_out_of_memory+0x206/0x270 [ 2790.311241][T16674] ? mem_cgroup_margin+0x130/0x130 [ 2790.316497][T16674] memory_max_write+0x2f9/0x3c0 [ 2790.321539][T16674] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2790.327653][T16674] ? lock_sync+0x190/0x190 [ 2790.332095][T16674] cgroup_file_write+0x1e2/0x7b0 [ 2790.337050][T16674] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2790.343156][T16674] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2790.349434][T16674] ? __virt_addr_valid+0x61/0x2e0 [ 2790.354500][T16674] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2790.359888][T16674] kernfs_fop_write_iter+0x3f1/0x600 [ 2790.365201][T16674] vfs_write+0x945/0xd50 [ 2790.369462][T16674] ? kernel_write+0x670/0x670 [ 2790.374167][T16674] ? __fget_files+0x26a/0x480 [ 2790.378896][T16674] ksys_write+0x12b/0x250 [ 2790.383243][T16674] ? __ia32_sys_read+0xb0/0xb0 [ 2790.388018][T16674] ? syscall_enter_from_user_mode+0x26/0x80 [ 2790.393952][T16674] do_syscall_64+0x39/0xb0 [ 2790.398420][T16674] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2790.404344][T16674] RIP: 0033:0x7fb53b68c169 [ 2790.408768][T16674] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2790.428386][T16674] RSP: 002b:00007fb53c3da168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2790.437151][T16674] RAX: ffffffffffffffda RBX: 00007fb53b7abf80 RCX: 00007fb53b68c169 [ 2790.445129][T16674] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000004 [ 2790.453098][T16674] RBP: 00007fb53b6e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2790.461068][T16674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2790.469036][T16674] R13: 00007fffa4be70bf R14: 00007fb53c3da300 R15: 0000000000022000 [ 2790.477020][T16674] [ 2790.490718][T16674] memory: usage 11136kB, limit 0kB, failcnt 2384 [ 2790.497103][T16674] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2790.519052][T16674] Memory cgroup stats for /syz2: [ 2790.519280][T16674] anon 114688 [ 2790.519280][T16674] file 10952704 [ 2790.519280][T16674] kernel 323584 [ 2790.519280][T16674] kernel_stack 65536 [ 2790.519280][T16674] pagetables 77824 [ 2790.519280][T16674] sec_pagetables 0 [ 2790.519280][T16674] percpu 64 [ 2790.519280][T16674] sock 0 [ 2790.519280][T16674] vmalloc 0 [ 2790.519280][T16674] shmem 10440704 [ 2790.519280][T16674] zswap 0 [ 2790.519280][T16674] zswapped 0 [ 2790.519280][T16674] file_mapped 262144 [ 2790.519280][T16674] file_dirty 512000 [ 2790.519280][T16674] file_writeback 0 [ 2790.519280][T16674] swapcached 0 [ 2790.519280][T16674] anon_thp 0 [ 2790.519280][T16674] file_thp 0 [ 2790.519280][T16674] shmem_thp 0 [ 2790.519280][T16674] inactive_anon 114688 [ 2790.519280][T16674] active_anon 10440704 [ 2790.519280][T16674] inactive_file 0 [ 2790.519280][T16674] active_file 512000 [ 2790.519280][T16674] unevictable 0 [ 2790.519280][T16674] slab_reclaimable 76696 [ 2790.519280][T16674] slab_unreclaimable 79312 [ 2790.519280][T16674] slab 156008 [ 2790.519280][T16674] workingset_refault_anon 0 [ 2790.519280][T16674] workingset_refault_file 0 [ 2790.519280][T16674] workingset_activate_anon 0 [ 2790.519280][T16674] workingset_activate_file 0 [ 2790.519280][T16674] workingset_restore_anon 0 [ 2790.519280][T16674] workingset_restore_file 0 [ 2790.519280][T16674] workingset_nodereclaim 0 [ 2790.519280][T16674] pgscan 1924 [ 2790.519280][T16674] pgsteal 31 [ 2790.519280][T16674] pgscan_kswapd 0 [ 2790.519280][T16674] pgscan_direct 1924 [ 2790.519280][T16674] pgscan_khugepaged 0 [ 2790.519280][T16674] pgsteal_kswapd 0 [ 2790.519280][T16674] pgsteal_direct 31 [ 2790.519280][T16674] pgsteal_khugepaged 0 [ 2790.519280][T16674] pgfault 72649 [ 2790.519280][T16674] pgmajfault 0 [ 2790.519280][T16674] pgrefill 1253695 [ 2790.519280][T16674] pgactivate 1893 [ 2790.519280][T16674] pgdeactivate 0 [ 2790.519280][T16674] pglazyfree 0 [ 2790.519280][T16674] pglazyfreed 0 [ 2790.519280][T16674] zswpin 0 [ 2790.519280][T16674] zswpout 0 [ 2790.708388][T27851] Bluetooth: hci1: command 0x040f tx timeout [ 2790.720883][T16674] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=16672,uid=0 08:03:40 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000100)=0x5, 0x12) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000140)='#$*@)-|\r,\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 08:03:40 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, 0x0, 0x0, r0, 0x0) 08:03:40 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2790.779642][T16674] Memory cgroup out of memory: Killed process 16672 (syz-executor.2) total-vm:54548kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 08:03:40 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1324c, 0x9, 0xffc5, 0x0, 0x8, 0x80000000, 0xcc, 0x0, 0x200, 0x0, 0x8000}, r5, 0x0, r2, 0x1) close(r4) 08:03:40 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 08:03:40 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000100)=0x1) write$cgroup_int(r1, &(0x7f0000000180), 0x12) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r2}, 0x8) 08:03:40 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:03:40 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0x0, r0, 0x0) 08:03:40 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:03:40 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000100)=0x1) (async) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000100)=0x1) write$cgroup_int(r1, &(0x7f0000000180), 0x12) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r2}, 0x8) [ 2791.075009][T16591] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2791.134945][T16591] CPU: 0 PID: 16591 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2791.145411][T16591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2791.155502][T16591] Call Trace: [ 2791.158801][T16591] [ 2791.161754][T16591] dump_stack_lvl+0x136/0x150 [ 2791.166491][T16591] dump_header+0x10a/0xd70 [ 2791.170933][T16591] oom_kill_process+0x25d/0x600 [ 2791.175819][T16591] out_of_memory+0x35c/0x1660 [ 2791.180533][T16591] ? find_held_lock+0x2d/0x110 [ 2791.185330][T16591] ? oom_killer_disable+0x2b0/0x2b0 [ 2791.190567][T16591] ? rcu_read_unlock+0x9/0x60 [ 2791.195281][T16591] ? find_held_lock+0x2d/0x110 [ 2791.200083][T16591] mem_cgroup_out_of_memory+0x206/0x270 [ 2791.205674][T16591] ? mem_cgroup_margin+0x130/0x130 [ 2791.210819][T16591] ? lock_downgrade+0x690/0x690 [ 2791.215726][T16591] try_charge_memcg+0xf99/0x13a0 [ 2791.220718][T16591] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2791.226832][T16591] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2791.232594][T16591] ? lock_downgrade+0x690/0x690 [ 2791.237486][T16591] ? lock_downgrade+0x690/0x690 [ 2791.242394][T16591] __memcg_kmem_charge_page+0x16e/0x3c0 [ 2791.247986][T16591] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2791.254181][T16591] copy_process+0x1442/0x7600 [ 2791.258907][T16591] ? _raw_spin_unlock+0x28/0x40 [ 2791.263793][T16591] ? wp_page_reuse+0x197/0x570 [ 2791.268604][T16591] ? pidfd_prepare+0x80/0x80 [ 2791.273238][T16591] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2791.279260][T16591] kernel_clone+0xeb/0x890 [ 2791.283714][T16591] ? create_io_thread+0xe0/0xe0 [ 2791.288592][T16591] ? do_user_addr_fault+0x2b1/0x1210 [ 2791.293913][T16591] ? reacquire_held_locks+0x216/0x4e0 [ 2791.299318][T16591] ? do_user_addr_fault+0x2b1/0x1210 [ 2791.304646][T16591] ? find_held_lock+0x2d/0x110 [ 2791.309440][T16591] __do_sys_clone+0xba/0x100 [ 2791.314075][T16591] ? kernel_clone+0x890/0x890 [ 2791.318903][T16591] ? syscall_enter_from_user_mode+0x26/0x80 [ 2791.324844][T16591] do_syscall_64+0x39/0xb0 [ 2791.329299][T16591] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2791.335236][T16591] RIP: 0033:0x7fb53b689e9b [ 2791.339672][T16591] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2791.359301][T16591] RSP: 002b:00007fffa4be7300 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2791.367731][T16591] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb53b689e9b [ 2791.375719][T16591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 08:03:40 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) (async) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000100)=0x1) (async) write$cgroup_int(r1, &(0x7f0000000180), 0x12) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r2}, 0x8) [ 2791.383706][T16591] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556849400 [ 2791.391692][T16591] R10: 00005555568496d0 R11: 0000000000000246 R12: 0000000000000001 [ 2791.399680][T16591] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffa4be73e0 [ 2791.407694][T16591] 08:03:40 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1000001000}, 0x0, 0x0, r0, 0x0) [ 2791.769659][T16591] memory: usage 10352kB, limit 0kB, failcnt 2418 [ 2791.777803][T16591] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2791.785152][T16591] Memory cgroup stats for /syz2: [ 2791.785372][T16591] anon 45056 [ 2791.785372][T16591] file 10444800 [ 2791.785372][T16591] kernel 110592 [ 2791.785372][T16591] kernel_stack 0 [ 2791.785372][T16591] pagetables 8192 [ 2791.785372][T16591] sec_pagetables 0 [ 2791.785372][T16591] percpu 64 [ 2791.785372][T16591] sock 0 [ 2791.785372][T16591] vmalloc 0 [ 2791.785372][T16591] shmem 10440704 [ 2791.785372][T16591] zswap 0 [ 2791.785372][T16591] zswapped 0 [ 2791.785372][T16591] file_mapped 237568 [ 2791.785372][T16591] file_dirty 4096 [ 2791.785372][T16591] file_writeback 0 [ 2791.785372][T16591] swapcached 0 [ 2791.785372][T16591] anon_thp 0 [ 2791.785372][T16591] file_thp 0 [ 2791.785372][T16591] shmem_thp 0 [ 2791.785372][T16591] inactive_anon 36864 [ 2791.785372][T16591] active_anon 10448896 [ 2791.785372][T16591] inactive_file 0 [ 2791.785372][T16591] active_file 4096 [ 2791.785372][T16591] unevictable 0 [ 2791.785372][T16591] slab_reclaimable 35376 [ 2791.785372][T16591] slab_unreclaimable 51896 [ 2791.785372][T16591] slab 87272 [ 2791.785372][T16591] workingset_refault_anon 0 [ 2791.785372][T16591] workingset_refault_file 0 [ 2791.785372][T16591] workingset_activate_anon 0 [ 2791.785372][T16591] workingset_activate_file 0 [ 2791.785372][T16591] workingset_restore_anon 0 [ 2791.785372][T16591] workingset_restore_file 0 [ 2791.785372][T16591] workingset_nodereclaim 0 [ 2791.785372][T16591] pgscan 1924 [ 2791.785372][T16591] pgsteal 31 [ 2791.785372][T16591] pgscan_kswapd 0 [ 2791.785372][T16591] pgscan_direct 1924 [ 2791.785372][T16591] pgscan_khugepaged 0 [ 2791.785372][T16591] pgsteal_kswapd 0 [ 2791.785372][T16591] pgsteal_direct 31 [ 2791.785372][T16591] pgsteal_khugepaged 0 [ 2791.785372][T16591] pgfault 72661 [ 2791.785372][T16591] pgmajfault 0 [ 2791.785372][T16591] pgrefill 1257219 [ 2791.785372][T16591] pgactivate 1893 [ 2791.785372][T16591] pgdeactivate 0 [ 2791.785372][T16591] pglazyfree 0 [ 2791.785372][T16591] pglazyfreed 0 [ 2791.785372][T16591] zswpin 0 [ 2791.785372][T16591] zswpout 0 [ 2791.785372][T16591] thp_fault_alloc 0 [ 2791.983496][T16591] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=16591,uid=0 [ 2792.001345][T16591] Memory cgroup out of memory: Killed process 16591 (syz-executor.2) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2792.096793][T21574] hsr_slave_0: left promiscuous mode [ 2792.112535][T21574] hsr_slave_1: left promiscuous mode [ 2792.134614][T21574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2792.142237][T21574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2792.152179][T21574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2792.159600][T21574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2792.178121][T21574] bridge_slave_1: left allmulticast mode [ 2792.184990][T21574] bridge_slave_1: left promiscuous mode [ 2792.199426][T21574] bridge0: port 2(bridge_slave_1) entered disabled state [ 2792.218532][T21574] bridge_slave_0: left allmulticast mode [ 2792.224333][T21574] bridge_slave_0: left promiscuous mode [ 2792.230093][T21574] bridge0: port 1(bridge_slave_0) entered disabled state [ 2792.253555][T21574] veth1_macvtap: left promiscuous mode [ 2792.259102][T21574] veth0_macvtap: left promiscuous mode [ 2792.273033][T21574] veth1_vlan: left promiscuous mode [ 2792.278362][T21574] veth0_vlan: left promiscuous mode [ 2792.707454][T21574] team0 (unregistering): Port device team_slave_1 removed [ 2792.734475][T21574] team0 (unregistering): Port device team_slave_0 removed [ 2792.758752][T21574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2792.796614][T21574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2792.975806][T21574] bond0 (unregistering): Released all slaves [ 2793.055023][ T2242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2793.064047][ T2242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2793.073586][ T2242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2793.083796][ T2242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2793.098980][ T2242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2793.108325][ T2242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2793.423187][T16748] chnl_net:caif_netlink_parms(): no params data found [ 2793.560640][T16748] bridge0: port 1(bridge_slave_0) entered blocking state [ 2793.571506][T16748] bridge0: port 1(bridge_slave_0) entered disabled state [ 2793.578709][T16748] bridge_slave_0: entered allmulticast mode [ 2793.606037][T16748] bridge_slave_0: entered promiscuous mode [ 2793.642457][T16748] bridge0: port 2(bridge_slave_1) entered blocking state [ 2793.649638][T16748] bridge0: port 2(bridge_slave_1) entered disabled state [ 2793.657651][T16748] bridge_slave_1: entered allmulticast mode [ 2793.665578][T16748] bridge_slave_1: entered promiscuous mode [ 2793.695425][T16748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2793.707166][T16748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2793.786364][T16748] team0: Port device team_slave_0 added [ 2793.801245][T16748] team0: Port device team_slave_1 added [ 2793.862447][T16748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2793.869440][T16748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2793.897105][T16748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2793.910411][T16748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2793.917375][T16748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2793.959961][T16748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2794.020813][T16748] hsr_slave_0: entered promiscuous mode [ 2794.028433][T16748] hsr_slave_1: entered promiscuous mode [ 2794.757686][T16748] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2794.772829][T16748] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2794.782778][T16748] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2794.800222][T16748] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2794.935118][T16748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2794.968738][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2794.985908][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2794.999779][T16748] 8021q: adding VLAN 0 to HW filter on device team0 [ 2795.026878][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2795.041178][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2795.049652][T24745] bridge0: port 1(bridge_slave_0) entered blocking state [ 2795.056794][T24745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2795.089833][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2795.103996][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2795.121990][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 08:03:44 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000100)=0x5, 0x12) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000140)='#$*@)-|\r,\x00') (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x7bc03) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 08:03:44 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:03:44 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, r0, 0x0) 08:03:44 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0x20, 0xd, 0x2, 0x0, 0x1, 0x4100, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2fb, 0x0, @perf_config_ext={0x70, 0x2}, 0x1080, 0x401, 0x6, 0x6, 0x3, 0x6, 0xffff, 0x0, 0x689, 0x0, 0x1}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0x6a) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r6, @ANYRES8=r8], 0x12) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000240)='!:]-') write$cgroup_int(r4, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, 0x0) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 2795.138426][T18608] bridge0: port 2(bridge_slave_1) entered blocking state [ 2795.145564][T18608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2795.191197][ T2242] Bluetooth: hci1: command 0x0409 tx timeout [ 2795.202887][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2795.258833][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2795.274544][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2795.349027][T16796] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2795.363973][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2795.381150][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2795.389162][T16796] CPU: 1 PID: 16796 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2795.399608][T16796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2795.409692][T16796] Call Trace: [ 2795.412989][T16796] [ 2795.415943][T16796] dump_stack_lvl+0x136/0x150 [ 2795.420672][T16796] dump_header+0x10a/0xd70 [ 2795.425141][T16796] oom_kill_process+0x25d/0x600 [ 2795.430036][T16796] out_of_memory+0x35c/0x1660 [ 2795.434754][T16796] ? oom_killer_disable+0x2b0/0x2b0 [ 2795.439988][T16796] ? kernfs_notify+0x1ac/0x410 [ 2795.444797][T16796] ? find_held_lock+0x2d/0x110 [ 2795.449604][T16796] mem_cgroup_out_of_memory+0x206/0x270 [ 2795.455196][T16796] ? mem_cgroup_margin+0x130/0x130 [ 2795.460363][T16796] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2795.466232][T16796] memory_max_write+0x2f9/0x3c0 [ 2795.471146][T16796] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2795.477268][T16796] ? lock_sync+0x190/0x190 [ 2795.481729][T16796] cgroup_file_write+0x1e2/0x7b0 [ 2795.486702][T16796] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2795.492801][T16796] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2795.498192][T16796] ? __virt_addr_valid+0x61/0x2e0 [ 2795.503252][T16796] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2795.508640][T16796] kernfs_fop_write_iter+0x3f1/0x600 [ 2795.513956][T16796] vfs_write+0x945/0xd50 [ 2795.518211][T16796] ? kernel_write+0x670/0x670 [ 2795.522901][T16796] ? __fget_files+0x26a/0x480 [ 2795.527614][T16796] ksys_write+0x12b/0x250 [ 2795.531952][T16796] ? __ia32_sys_read+0xb0/0xb0 [ 2795.536724][T16796] ? syscall_enter_from_user_mode+0x26/0x80 [ 2795.542638][T16796] do_syscall_64+0x39/0xb0 [ 2795.547078][T16796] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2795.552993][T16796] RIP: 0033:0x7f458628c169 [ 2795.557425][T16796] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2795.577070][T16796] RSP: 002b:00007f4586f76168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2795.585507][T16796] RAX: ffffffffffffffda RBX: 00007f45863abf80 RCX: 00007f458628c169 [ 2795.593490][T16796] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000004 [ 2795.601471][T16796] RBP: 00007f45862e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2795.609461][T16796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2795.617439][T16796] R13: 00007fffe82e8c5f R14: 00007f4586f76300 R15: 0000000000022000 [ 2795.625532][T16796] [ 2795.651951][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2795.690328][T16796] memory: usage 8588kB, limit 0kB, failcnt 2626 [ 2795.696308][T16748] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2795.710116][T16796] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2795.730811][T16796] Memory cgroup stats for /syz0: [ 2795.731042][T16796] anon 143360 [ 2795.731042][T16796] file 8343552 [ 2795.731042][T16796] kernel 307200 [ 2795.731042][T16796] kernel_stack 65536 [ 2795.731042][T16796] pagetables 77824 [ 2795.731042][T16796] sec_pagetables 0 [ 2795.731042][T16796] percpu 64 [ 2795.731042][T16796] sock 0 [ 2795.731042][T16796] vmalloc 0 [ 2795.731042][T16796] shmem 8343552 [ 2795.731042][T16796] zswap 0 [ 2795.731042][T16796] zswapped 0 [ 2795.731042][T16796] file_mapped 274432 [ 2795.731042][T16796] file_dirty 0 [ 2795.731042][T16796] file_writeback 0 [ 2795.731042][T16796] swapcached 0 [ 2795.731042][T16796] anon_thp 0 [ 2795.731042][T16796] file_thp 0 [ 2795.731042][T16796] shmem_thp 0 [ 2795.731042][T16796] inactive_anon 8118272 [ 2795.731042][T16796] active_anon 368640 [ 2795.731042][T16796] inactive_file 0 [ 2795.731042][T16796] active_file 0 [ 2795.731042][T16796] unevictable 0 [ 2795.731042][T16796] slab_reclaimable 41360 [ 2795.731042][T16796] slab_unreclaimable 85936 [ 2795.731042][T16796] slab 127296 [ 2795.731042][T16796] workingset_refault_anon 0 [ 2795.731042][T16796] workingset_refault_file 0 [ 2795.731042][T16796] workingset_activate_anon 0 [ 2795.731042][T16796] workingset_activate_file 0 [ 2795.731042][T16796] workingset_restore_anon 0 [ 2795.731042][T16796] workingset_restore_file 0 [ 2795.731042][T16796] workingset_nodereclaim 0 [ 2795.731042][T16796] pgscan 875 [ 2795.731042][T16796] pgsteal 403 [ 2795.731042][T16796] pgscan_kswapd 0 [ 2795.731042][T16796] pgscan_direct 875 [ 2795.731042][T16796] pgscan_khugepaged 0 [ 2795.731042][T16796] pgsteal_kswapd 0 [ 2795.731042][T16796] pgsteal_direct 403 [ 2795.731042][T16796] pgsteal_khugepaged 0 [ 2795.731042][T16796] pgfault 130773 [ 2795.731042][T16796] pgmajfault 0 [ 2795.731042][T16796] pgrefill 1286981 [ 2795.731042][T16796] pgactivate 472 [ 2795.731042][T16796] pgdeactivate 0 [ 2795.731042][T16796] pglazyfree 0 [ 2795.731042][T16796] pglazyfreed 0 [ 2795.731042][T16796] zswpin 0 [ 2795.731042][T16796] zswpout 0 [ 2795.731042][T16796] thp_fault_alloc 0 [ 2795.922351][T16748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2795.949660][T16796] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=16793,uid=0 [ 2795.966038][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2795.984631][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2796.001006][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2796.017453][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2796.027300][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2796.067038][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2796.091804][T16796] Memory cgroup out of memory: Killed process 16796 (syz-executor.0) total-vm:54548kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2796.311263][T21574] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2796.349633][T16748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2796.368067][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2796.378810][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2796.437500][T21574] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2796.460345][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2796.469085][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2796.498769][T16748] veth0_vlan: entered promiscuous mode [ 2796.516507][T21574] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2796.570675][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2796.579136][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2796.641609][T21574] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2796.666363][T16748] veth1_vlan: entered promiscuous mode [ 2796.679590][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2796.697953][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2796.706576][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2796.775350][T16748] veth0_macvtap: entered promiscuous mode [ 2796.787100][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2796.795976][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2796.804835][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2796.836817][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2796.858033][T16748] veth1_macvtap: entered promiscuous mode [ 2796.877907][T16748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2796.888827][T16748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2796.908083][T16748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2796.919859][T16748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2796.938625][T16748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2796.949450][T16748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2796.968830][T16748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2796.989674][T16748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2797.009761][T16748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2797.028508][T16748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2797.038762][T16748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2797.064334][T16748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2797.079632][T16748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2797.105296][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2797.125594][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2797.134865][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2797.171258][T16748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2797.182632][T16748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2797.193120][T16748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2797.206056][T16748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2797.216038][T16748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2797.226655][T16748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2797.236537][T16748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2797.247056][T16748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2797.257015][T16748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2797.267595][T16748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2797.277591][T27851] Bluetooth: hci1: command 0x041b tx timeout [ 2797.284698][T16748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2797.295191][T16748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2797.306866][T16748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2797.318604][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2797.328975][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2797.347706][T16748] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2797.357505][T16748] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2797.366825][T16748] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2797.375613][T16748] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2797.485435][T19644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2797.499066][T19644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2797.525062][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2797.525583][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2797.533703][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2797.560598][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2797.663637][T16838] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2797.683368][T16838] CPU: 0 PID: 16838 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2797.693822][T16838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2797.703879][T16838] Call Trace: [ 2797.707154][T16838] [ 2797.710085][T16838] dump_stack_lvl+0x136/0x150 [ 2797.714788][T16838] dump_header+0x10a/0xd70 [ 2797.719212][T16838] oom_kill_process+0x25d/0x600 [ 2797.724075][T16838] out_of_memory+0x35c/0x1660 [ 2797.728760][T16838] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 2797.734587][T16838] ? oom_killer_disable+0x2b0/0x2b0 [ 2797.739795][T16838] ? find_held_lock+0x2d/0x110 [ 2797.744660][T16838] mem_cgroup_out_of_memory+0x206/0x270 [ 2797.750222][T16838] ? mem_cgroup_margin+0x130/0x130 [ 2797.755349][T16838] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2797.761177][T16838] memory_max_write+0x2f9/0x3c0 [ 2797.766054][T16838] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2797.772158][T16838] ? lock_sync+0x190/0x190 [ 2797.776627][T16838] cgroup_file_write+0x1e2/0x7b0 [ 2797.781592][T16838] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2797.787683][T16838] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2797.793070][T16838] ? __virt_addr_valid+0x61/0x2e0 [ 2797.798129][T16838] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2797.803520][T16838] kernfs_fop_write_iter+0x3f1/0x600 [ 2797.808833][T16838] vfs_write+0x945/0xd50 [ 2797.813085][T16838] ? kernel_write+0x670/0x670 [ 2797.817771][T16838] ? __fget_files+0x26a/0x480 [ 2797.822480][T16838] ksys_write+0x12b/0x250 [ 2797.826817][T16838] ? __ia32_sys_read+0xb0/0xb0 [ 2797.831589][T16838] ? syscall_enter_from_user_mode+0x26/0x80 [ 2797.837501][T16838] do_syscall_64+0x39/0xb0 [ 2797.841940][T16838] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2797.847853][T16838] RIP: 0033:0x7f734508c169 [ 2797.852272][T16838] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2797.871887][T16838] RSP: 002b:00007f7343bdd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2797.880322][T16838] RAX: ffffffffffffffda RBX: 00007f73451ac050 RCX: 00007f734508c169 [ 2797.888299][T16838] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000004 [ 2797.896284][T16838] RBP: 00007f73450e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2797.904260][T16838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2797.912243][T16838] R13: 00007ffcd53cb76f R14: 00007f7343bdd300 R15: 0000000000022000 [ 2797.920236][T16838] [ 2797.941462][T16838] memory: usage 8932kB, limit 0kB, failcnt 2590 [ 2797.947857][T16838] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2797.955342][T16838] Memory cgroup stats for /syz3: [ 2797.955536][T16838] anon 196608 [ 2797.955536][T16838] file 8351744 [ 2797.955536][T16838] kernel 589824 [ 2797.955536][T16838] kernel_stack 163840 [ 2797.955536][T16838] pagetables 155648 [ 2797.955536][T16838] sec_pagetables 0 [ 2797.955536][T16838] percpu 128 [ 2797.955536][T16838] sock 0 [ 2797.955536][T16838] vmalloc 0 [ 2797.955536][T16838] shmem 8351744 [ 2797.955536][T16838] zswap 0 [ 2797.955536][T16838] zswapped 0 [ 2797.955536][T16838] file_mapped 241664 [ 2797.955536][T16838] file_dirty 0 [ 2797.955536][T16838] file_writeback 0 [ 2797.955536][T16838] swapcached 0 [ 2797.955536][T16838] anon_thp 0 [ 2797.955536][T16838] file_thp 0 [ 2797.955536][T16838] shmem_thp 0 [ 2797.955536][T16838] inactive_anon 8458240 [ 2797.955536][T16838] active_anon 90112 [ 2797.955536][T16838] inactive_file 0 [ 2797.955536][T16838] active_file 0 [ 2797.955536][T16838] unevictable 0 [ 2797.955536][T16838] slab_reclaimable 42808 [ 2797.955536][T16838] slab_unreclaimable 175840 [ 2797.955536][T16838] slab 218648 [ 2797.955536][T16838] workingset_refault_anon 0 [ 2797.955536][T16838] workingset_refault_file 1 [ 2797.955536][T16838] workingset_activate_anon 0 [ 2797.955536][T16838] workingset_activate_file 0 [ 2797.955536][T16838] workingset_restore_anon 0 [ 2797.955536][T16838] workingset_restore_file 0 [ 2797.955536][T16838] workingset_nodereclaim 0 [ 2797.955536][T16838] pgscan 199 [ 2797.955536][T16838] pgsteal 86 [ 2797.955536][T16838] pgscan_kswapd 0 [ 2797.955536][T16838] pgscan_direct 199 [ 2797.955536][T16838] pgscan_khugepaged 0 [ 2797.955536][T16838] pgsteal_kswapd 0 [ 2797.955536][T16838] pgsteal_direct 86 [ 2797.955536][T16838] pgsteal_khugepaged 0 [ 2797.955536][T16838] pgfault 89593 [ 2797.955536][T16838] pgmajfault 0 [ 2797.955536][T16838] pgrefill 192043 [ 2797.955536][T16838] pgactivate 113 [ 2797.955536][T16838] pgdeactivate 0 [ 2797.955536][T16838] pglazyfree 0 [ 2797.955536][T16838] pglazyfreed 0 [ 2797.955536][T16838] zswpin 0 [ 2797.955536][T16838] zswpout 0 [ 2797.955536][T16838] thp_fault_alloc 0 [ 2798.179761][T16838] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16748,uid=0 [ 2798.203537][T16838] Memory cgroup out of memory: Killed process 16748 (syz-executor.3) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2798.467819][T21574] hsr_slave_0: left promiscuous mode [ 2798.475386][T21574] hsr_slave_1: left promiscuous mode [ 2798.481422][T21574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2798.488818][T21574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2798.499469][T21574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2798.507274][T21574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2798.516052][T21574] bridge_slave_1: left allmulticast mode [ 2798.524297][T21574] bridge_slave_1: left promiscuous mode [ 2798.530068][T21574] bridge0: port 2(bridge_slave_1) entered disabled state [ 2798.546153][T21574] bridge_slave_0: left allmulticast mode [ 2798.553412][T21574] bridge_slave_0: left promiscuous mode [ 2798.559078][T21574] bridge0: port 1(bridge_slave_0) entered disabled state [ 2798.573290][T21574] veth1_macvtap: left promiscuous mode [ 2798.579057][T21574] veth0_macvtap: left promiscuous mode [ 2798.585994][T21574] veth1_vlan: left promiscuous mode [ 2798.593148][T21574] veth0_vlan: left promiscuous mode [ 2798.792222][T21574] team0 (unregistering): Port device team_slave_1 removed [ 2798.809337][T21574] team0 (unregistering): Port device team_slave_0 removed [ 2798.827278][T21574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2798.843355][T21574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2798.905590][T21574] bond0 (unregistering): Released all slaves 08:03:50 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='cgroup\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 08:03:50 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1324c, 0x9, 0xffc5, 0x0, 0x8, 0x80000000, 0xcc, 0x0, 0x200, 0x0, 0x8000}, r5, 0x0, r2, 0x1) close(r4) 08:03:50 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:03:50 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10000010000000}, 0x0, 0x0, r0, 0x0) 08:03:50 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000280)=@raw=[@exit, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x2d, &(0x7f00000001c0)=""/45, 0x41100, 0x11, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000002c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x4, 0x80000000, 0x8}, 0x10}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) recvmsg(r2, &(0x7f0000001900)={&(0x7f0000000480)=@llc, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/21, 0x15}, {&(0x7f0000001580)=""/188, 0xbc}, {&(0x7f0000001640)=""/214, 0xd6}, {&(0x7f0000001740)=""/11, 0xb}, {&(0x7f0000001780)=""/16, 0x10}], 0x6, &(0x7f0000001840)=""/154, 0x9a}, 0x21) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYRES8=r5, @ANYRES8=r7], 0x12) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@map=r6, r8, 0x1b}, 0x10) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 08:03:50 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0x20, 0xd, 0x2, 0x0, 0x1, 0x4100, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2fb, 0x0, @perf_config_ext={0x70, 0x2}, 0x1080, 0x401, 0x6, 0x6, 0x3, 0x6, 0xffff, 0x0, 0x689, 0x0, 0x1}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0x6a) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r6, @ANYRES8=r8], 0x12) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000240)='!:]-') write$cgroup_int(r4, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, 0x0) write$cgroup_int(r2, &(0x7f0000000180), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0x20, 0xd, 0x2, 0x0, 0x1, 0x4100, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2fb, 0x0, @perf_config_ext={0x70, 0x2}, 0x1080, 0x401, 0x6, 0x6, 0x3, 0x6, 0xffff, 0x0, 0x689, 0x0, 0x1}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0x6a) (async) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r3, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) close(r6) (async) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r6, @ANYRES8=r8], 0x12) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000240)='!:]-') (async) write$cgroup_int(r4, &(0x7f0000000200), 0x7bc03) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000180), 0x12) (async) [ 2801.198051][T16120] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 2801.271770][T16120] CPU: 1 PID: 16120 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2801.282248][T16120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2801.292507][T16120] Call Trace: [ 2801.295811][T16120] [ 2801.298768][T16120] dump_stack_lvl+0x136/0x150 [ 2801.303495][T16120] dump_header+0x10a/0xd70 [ 2801.307945][T16120] oom_kill_process+0x25d/0x600 [ 2801.312830][T16120] out_of_memory+0x35c/0x1660 [ 2801.317541][T16120] ? find_held_lock+0x2d/0x110 [ 2801.322359][T16120] ? oom_killer_disable+0x2b0/0x2b0 [ 2801.327595][T16120] ? rcu_read_unlock+0x9/0x60 [ 2801.332302][T16120] ? find_held_lock+0x2d/0x110 [ 2801.337085][T16120] mem_cgroup_out_of_memory+0x206/0x270 [ 2801.342651][T16120] ? mem_cgroup_margin+0x130/0x130 [ 2801.347783][T16120] ? lock_downgrade+0x690/0x690 [ 2801.352674][T16120] try_charge_memcg+0xf99/0x13a0 [ 2801.357647][T16120] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2801.363656][T16120] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2801.369495][T16120] ? lock_downgrade+0x690/0x690 [ 2801.374367][T16120] ? lock_downgrade+0x690/0x690 [ 2801.379236][T16120] ? rcu_read_unlock+0x9/0x60 [ 2801.383935][T16120] obj_cgroup_charge+0x2af/0x5e0 [ 2801.388898][T16120] ? copy_process+0x3c0/0x7600 [ 2801.393686][T16120] kmem_cache_alloc_node+0xa8/0x3e0 [ 2801.398905][T16120] copy_process+0x3c0/0x7600 [ 2801.403604][T16120] ? _raw_spin_unlock+0x28/0x40 [ 2801.408472][T16120] ? wp_page_reuse+0x197/0x570 [ 2801.413268][T16120] ? pidfd_prepare+0x80/0x80 [ 2801.417881][T16120] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2801.423882][T16120] kernel_clone+0xeb/0x890 [ 2801.428320][T16120] ? create_io_thread+0xe0/0xe0 [ 2801.433180][T16120] ? do_user_addr_fault+0x2b1/0x1210 [ 2801.438498][T16120] ? reacquire_held_locks+0x216/0x4e0 [ 2801.443903][T16120] ? do_user_addr_fault+0x2b1/0x1210 [ 2801.449229][T16120] ? find_held_lock+0x2d/0x110 [ 2801.454022][T16120] __do_sys_clone+0xba/0x100 [ 2801.458637][T16120] ? kernel_clone+0x890/0x890 [ 2801.463346][T16120] ? syscall_enter_from_user_mode+0x26/0x80 [ 2801.469259][T16120] do_syscall_64+0x39/0xb0 [ 2801.473697][T16120] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2801.479614][T16120] RIP: 0033:0x7f4586289e9b [ 2801.484036][T16120] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2801.503667][T16120] RSP: 002b:00007fffe82e8ea0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2801.512119][T16120] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4586289e9b 08:03:50 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:03:50 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000100000000}, 0x0, 0x0, r0, 0x0) [ 2801.520098][T16120] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2801.528076][T16120] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555563db400 [ 2801.536051][T16120] R10: 00005555563db6d0 R11: 0000000000000246 R12: 0000000000000001 [ 2801.544057][T16120] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffe82e8f80 [ 2801.552059][T16120] 08:03:50 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, r0, 0x0) 08:03:50 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xba, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2801.711052][T21574] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 08:03:51 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0x0, r0, 0x0) 08:03:51 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xca, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:03:51 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='cgroup\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 08:03:51 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xda, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:03:51 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1324c, 0x9, 0xffc5, 0x0, 0x8, 0x80000000, 0xcc, 0x0, 0x200, 0x0, 0x8000}, r5, 0x0, r2, 0x1) close(r4) 08:03:51 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, r0, 0x0) [ 2802.391915][T21574] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2802.529826][T21574] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2802.540302][T16120] memory: usage 8276kB, limit 0kB, failcnt 2645 [ 2802.540324][T16120] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2802.540339][T16120] Memory cgroup stats for /syz0: [ 2802.540537][T16120] anon 49152 [ 2802.540537][T16120] file 8343552 [ 2802.540537][T16120] kernel 81920 [ 2802.540537][T16120] kernel_stack 0 [ 2802.540537][T16120] pagetables 8192 [ 2802.540537][T16120] sec_pagetables 0 [ 2802.540537][T16120] percpu 0 [ 2802.540537][T16120] sock 0 [ 2802.540537][T16120] vmalloc 0 [ 2802.540537][T16120] shmem 8343552 [ 2802.540537][T16120] zswap 0 [ 2802.540537][T16120] zswapped 0 [ 2802.540537][T16120] file_mapped 249856 [ 2802.540537][T16120] file_dirty 0 [ 2802.540537][T16120] file_writeback 0 [ 2802.540537][T16120] swapcached 0 [ 2802.540537][T16120] anon_thp 0 [ 2802.540537][T16120] file_thp 0 [ 2802.540537][T16120] shmem_thp 0 [ 2802.540537][T16120] inactive_anon 8118272 [ 2802.540537][T16120] active_anon 274432 [ 2802.540537][T16120] inactive_file 0 [ 2802.540537][T16120] active_file 0 [ 2802.540537][T16120] unevictable 0 [ 2802.540537][T16120] slab_reclaimable 26776 [ 2802.540537][T16120] slab_unreclaimable 32296 [ 2802.540537][T16120] slab 59072 [ 2802.540537][T16120] workingset_refault_anon 0 [ 2802.540537][T16120] workingset_refault_file 0 [ 2802.540537][T16120] workingset_activate_anon 0 [ 2802.540537][T16120] workingset_activate_file 0 [ 2802.540537][T16120] workingset_restore_anon 0 [ 2802.540537][T16120] workingset_restore_file 0 [ 2802.540537][T16120] workingset_nodereclaim 0 [ 2802.540537][T16120] pgscan 875 [ 2802.540537][T16120] pgsteal 403 [ 2802.540537][T16120] pgscan_kswapd 0 [ 2802.540537][T16120] pgscan_direct 875 [ 2802.540537][T16120] pgscan_khugepaged 0 [ 2802.540537][T16120] pgsteal_kswapd 0 [ 2802.540537][T16120] pgsteal_direct 403 [ 2802.540537][T16120] pgsteal_khugepaged 0 [ 2802.540537][T16120] pgfault 130782 [ 2802.540537][T16120] pgmajfault 0 [ 2802.540537][T16120] pgrefill 1286981 [ 2802.540537][T16120] pgactivate 472 [ 2802.540537][T16120] pgdeactivate 0 [ 2802.540537][T16120] pglazyfree 0 [ 2802.540537][T16120] pglazyfreed 0 [ 2802.540537][T16120] zswpin 0 [ 2802.540537][T16120] zswpout 0 [ 2802.540537][T16120] thp_fault_alloc 0 [ 2802.863867][T21574] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2802.983575][T16120] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=16120,uid=0 [ 2803.006356][T16120] Memory cgroup out of memory: Killed process 16120 (syz-executor.0) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2803.653714][ T2242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2803.668284][ T2242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2803.678263][ T2242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2803.686259][ T2242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2803.693905][ T2242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2803.701361][ T2242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2803.953509][T16974] chnl_net:caif_netlink_parms(): no params data found [ 2804.149201][T16974] bridge0: port 1(bridge_slave_0) entered blocking state [ 2804.180154][T16974] bridge0: port 1(bridge_slave_0) entered disabled state [ 2804.187385][T16974] bridge_slave_0: entered allmulticast mode [ 2804.208806][T16974] bridge_slave_0: entered promiscuous mode [ 2804.244589][T16974] bridge0: port 2(bridge_slave_1) entered blocking state [ 2804.269275][T16974] bridge0: port 2(bridge_slave_1) entered disabled state [ 2804.287774][T16974] bridge_slave_1: entered allmulticast mode [ 2804.296043][T27851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2804.301277][T16974] bridge_slave_1: entered promiscuous mode [ 2804.304080][T27851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2804.318562][T27851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2804.328080][T27851] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2804.336152][T27851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2804.367253][T21574] hsr_slave_0: left promiscuous mode [ 2804.375529][T21574] hsr_slave_1: left promiscuous mode [ 2804.387317][T21574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2804.401977][T21574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2804.411309][T21574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2804.418718][T21574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2804.427732][T21574] bridge_slave_1: left allmulticast mode [ 2804.433545][T21574] bridge_slave_1: left promiscuous mode [ 2804.439198][T21574] bridge0: port 2(bridge_slave_1) entered disabled state [ 2804.451545][T21574] bridge_slave_0: left allmulticast mode [ 2804.457196][T21574] bridge_slave_0: left promiscuous mode [ 2804.462929][T21574] bridge0: port 1(bridge_slave_0) entered disabled state [ 2804.479018][T21574] veth1_macvtap: left promiscuous mode [ 2804.484606][T21574] veth0_macvtap: left promiscuous mode [ 2804.490367][T21574] veth1_vlan: left promiscuous mode [ 2804.495677][T21574] veth0_vlan: left promiscuous mode [ 2804.657522][T21574] team0 (unregistering): Port device team_slave_1 removed [ 2804.671491][T21574] team0 (unregistering): Port device team_slave_0 removed [ 2804.685274][T21574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2804.698191][T21574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2804.757012][T21574] bond0 (unregistering): Released all slaves [ 2804.858760][T16974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2804.930988][T16974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2804.994782][T16974] team0: Port device team_slave_0 added [ 2805.041724][T16974] team0: Port device team_slave_1 added [ 2805.126503][T16974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2805.133568][T16974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2805.160335][T16974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2805.184010][T16974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2805.207107][T16974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2805.243943][T16974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2805.259161][T16996] chnl_net:caif_netlink_parms(): no params data found [ 2805.366591][T16974] hsr_slave_0: entered promiscuous mode [ 2805.389728][T16974] hsr_slave_1: entered promiscuous mode [ 2805.533910][T16996] bridge0: port 1(bridge_slave_0) entered blocking state [ 2805.541601][T16996] bridge0: port 1(bridge_slave_0) entered disabled state [ 2805.548858][T16996] bridge_slave_0: entered allmulticast mode [ 2805.568147][T16996] bridge_slave_0: entered promiscuous mode [ 2805.611672][T16996] bridge0: port 2(bridge_slave_1) entered blocking state [ 2805.618782][T16996] bridge0: port 2(bridge_slave_1) entered disabled state [ 2805.642576][T16996] bridge_slave_1: entered allmulticast mode [ 2805.650310][T16996] bridge_slave_1: entered promiscuous mode [ 2805.746805][T16996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2805.759213][T27851] Bluetooth: hci1: command 0x0409 tx timeout [ 2805.779608][T16996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2805.975801][T16996] team0: Port device team_slave_0 added [ 2806.056259][T16996] team0: Port device team_slave_1 added [ 2806.241763][T16996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2806.248746][T16996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2806.320074][T16996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2806.390360][T27851] Bluetooth: hci2: command 0x0409 tx timeout [ 2806.500926][T16996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2806.507908][T16996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2806.608392][T16996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2806.875306][T16996] hsr_slave_0: entered promiscuous mode [ 2806.905472][T16996] hsr_slave_1: entered promiscuous mode [ 2806.940200][T16996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2806.947792][T16996] Cannot create hsr debugfs directory [ 2807.178940][T16974] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2807.211237][T16974] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2807.243088][T16974] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2807.265852][T16974] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2807.334868][T21574] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2807.447786][T21574] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2807.526493][T21574] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2807.644865][T21574] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2807.668812][T16974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2807.696541][T16974] 8021q: adding VLAN 0 to HW filter on device team0 [ 2807.728401][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2807.737217][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2807.786615][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2807.803020][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2807.812650][ T8432] bridge0: port 1(bridge_slave_0) entered blocking state [ 2807.819761][ T8432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2807.829033][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2807.837341][T27851] Bluetooth: hci1: command 0x041b tx timeout [ 2807.844378][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2807.854303][ T8432] bridge0: port 2(bridge_slave_1) entered blocking state [ 2807.861438][ T8432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2807.891404][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2807.899231][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2807.908058][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2807.916856][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2807.926000][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2807.938920][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2807.980821][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2807.989589][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2808.011641][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2808.027268][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2808.044723][T16974] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2808.067228][T16974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2808.087114][T16996] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2808.106845][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2808.115953][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2808.139823][T16996] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2808.167954][T16996] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2808.228881][T16996] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2808.470418][T27851] Bluetooth: hci2: command 0x041b tx timeout [ 2808.483536][T16996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2808.532263][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2808.551517][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2808.578765][T16996] 8021q: adding VLAN 0 to HW filter on device team0 [ 2808.608387][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2808.617237][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2808.653240][T16974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2808.669918][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2808.679694][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2808.688789][T14476] bridge0: port 1(bridge_slave_0) entered blocking state [ 2808.695901][T14476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2808.703870][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2808.712719][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2808.721651][T14476] bridge0: port 2(bridge_slave_1) entered blocking state [ 2808.728724][T14476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2808.736569][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2808.745933][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2808.814541][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2808.832715][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2808.850399][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2808.859022][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2808.878542][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2808.888669][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2808.904537][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2808.916695][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2808.930370][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2808.942510][T16996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2808.956604][T16996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2808.981490][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2808.989613][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2808.999020][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2809.031104][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2809.039448][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2809.097997][T16974] veth0_vlan: entered promiscuous mode [ 2809.104825][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2809.127130][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2809.175283][T16974] veth1_vlan: entered promiscuous mode [ 2809.252191][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2809.263104][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2809.282976][T16974] veth0_macvtap: entered promiscuous mode [ 2809.323719][T21574] hsr_slave_0: left promiscuous mode [ 2809.341102][T21574] hsr_slave_1: left promiscuous mode [ 2809.347076][T21574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2809.356115][T21574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2809.365712][T21574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2809.373781][T21574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2809.383330][T21574] bridge_slave_1: left allmulticast mode [ 2809.389781][T21574] bridge_slave_1: left promiscuous mode [ 2809.395859][T21574] bridge0: port 2(bridge_slave_1) entered disabled state [ 2809.406707][T21574] bridge_slave_0: left allmulticast mode [ 2809.413512][T21574] bridge_slave_0: left promiscuous mode [ 2809.419217][T21574] bridge0: port 1(bridge_slave_0) entered disabled state [ 2809.433935][T21574] veth1_macvtap: left promiscuous mode [ 2809.439470][T21574] veth0_macvtap: left promiscuous mode [ 2809.451267][T21574] veth1_vlan: left promiscuous mode [ 2809.456594][T21574] veth0_vlan: left promiscuous mode [ 2809.718480][T21574] team0 (unregistering): Port device team_slave_1 removed [ 2809.734315][T21574] team0 (unregistering): Port device team_slave_0 removed [ 2809.752618][T21574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2809.773711][T21574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2809.875994][T21574] bond0 (unregistering): Released all slaves [ 2809.920247][T27851] Bluetooth: hci1: command 0x040f tx timeout [ 2809.938266][T16974] veth1_macvtap: entered promiscuous mode [ 2809.964816][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2809.978359][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2809.996712][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2810.015182][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2810.032537][T16996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2810.049015][T16974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2810.063502][T16974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2810.082753][T16974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2810.093631][T16974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2810.104975][T16974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2810.123503][T16974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2810.138250][T16974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2810.153493][T16974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2810.170289][T16974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2810.186322][T16974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2810.206488][T16974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2810.216861][T16974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2810.228300][T16974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2810.239433][T16974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2810.258165][T16974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2810.268436][T16974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2810.287162][T16974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2810.309724][T16974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2810.340792][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2810.349616][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2810.358820][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2810.367980][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2810.377983][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2810.387462][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2810.398861][T16974] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2810.411505][T16974] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2810.420848][T16974] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2810.430454][T16974] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2810.496770][T16996] veth0_vlan: entered promiscuous mode [ 2810.509383][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2810.527664][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2810.549447][T16996] veth1_vlan: entered promiscuous mode [ 2810.559430][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2810.560454][T27851] Bluetooth: hci2: command 0x040f tx timeout [ 2810.567811][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2810.586389][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2810.619622][T16996] veth0_macvtap: entered promiscuous mode [ 2810.654998][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2810.664875][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2810.688889][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2810.716012][T16996] veth1_macvtap: entered promiscuous mode [ 2810.726695][T15391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2810.742756][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2810.752301][T15391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2810.761774][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2810.777821][T16996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2810.807224][T16996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2810.828864][T16996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2810.839709][T16996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2810.876969][T16996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2810.907381][T16996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2810.920153][T16996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2810.945058][T16996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2810.970244][T16996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2810.990350][T16996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2811.011631][T16996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2811.030893][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2811.038897][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2811.070809][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2811.101120][T16996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2811.120371][T16996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2811.132213][T16996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2811.160119][T16996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2811.169954][T16996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2811.200103][T16996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2811.209952][T16996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2811.241400][T16996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2811.260353][T16996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2811.280382][T16996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2811.292082][T16996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2811.307917][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2811.331677][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2811.342188][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2811.344534][T16996] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2811.362236][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2811.371322][T16996] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2811.390074][T16996] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2811.410571][T16996] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2811.456584][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2811.571299][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2811.588092][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2811.624167][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2811.643389][ T5181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2811.664318][ T5181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2811.697361][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2811.874068][T17130] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2811.900164][T17130] CPU: 0 PID: 17130 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2811.910628][T17130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2811.920709][T17130] Call Trace: [ 2811.924006][T17130] [ 2811.926957][T17130] dump_stack_lvl+0x136/0x150 [ 2811.931678][T17130] dump_header+0x10a/0xd70 [ 2811.936096][T17130] oom_kill_process+0x25d/0x600 [ 2811.940954][T17130] out_of_memory+0x35c/0x1660 [ 2811.945666][T17130] ? io_schedule_timeout+0x150/0x150 [ 2811.950980][T17130] ? oom_killer_disable+0x2b0/0x2b0 [ 2811.956201][T17130] ? kernfs_notify+0x1ac/0x410 [ 2811.961009][T17130] mem_cgroup_out_of_memory+0x206/0x270 [ 2811.966585][T17130] ? mem_cgroup_margin+0x130/0x130 [ 2811.971745][T17130] memory_max_write+0x2f9/0x3c0 [ 2811.976632][T17130] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2811.982745][T17130] ? lock_sync+0x190/0x190 [ 2811.987197][T17130] cgroup_file_write+0x1e2/0x7b0 [ 2811.992158][T17130] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2811.998259][T17130] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2812.004438][T17130] ? __virt_addr_valid+0x61/0x2e0 [ 2812.009594][T17130] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2812.014995][T17130] kernfs_fop_write_iter+0x3f1/0x600 [ 2812.020320][T17130] vfs_write+0x945/0xd50 [ 2812.024587][T17130] ? kernel_write+0x670/0x670 [ 2812.029286][T17130] ? __fget_files+0x26a/0x480 [ 2812.034016][T17130] ksys_write+0x12b/0x250 [ 2812.038361][T17130] ? __ia32_sys_read+0xb0/0xb0 [ 2812.043145][T17130] ? syscall_enter_from_user_mode+0x26/0x80 [ 2812.049072][T17130] do_syscall_64+0x39/0xb0 [ 2812.053527][T17130] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2812.059463][T17130] RIP: 0033:0x7efc0c28c169 [ 2812.063892][T17130] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2812.083525][T17130] RSP: 002b:00007efc0cf21168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2812.091956][T17130] RAX: ffffffffffffffda RBX: 00007efc0c3ac120 RCX: 00007efc0c28c169 [ 2812.099943][T17130] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 2812.107933][T17130] RBP: 00007efc0c2e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2812.115920][T17130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2812.123915][T17130] R13: 00007ffdf7f1d7af R14: 00007efc0cf21300 R15: 0000000000022000 [ 2812.131924][T17130] [ 2812.140060][ T2242] Bluetooth: hci1: command 0x0419 tx timeout [ 2812.146366][T17130] memory: usage 8924kB, limit 0kB, failcnt 2590 [ 2812.168528][T17130] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2812.185783][T17130] Memory cgroup stats for /syz3: [ 2812.186010][T17130] anon 196608 [ 2812.186010][T17130] file 8351744 [ 2812.186010][T17130] kernel 581632 [ 2812.186010][T17130] kernel_stack 163840 [ 2812.186010][T17130] pagetables 151552 [ 2812.186010][T17130] sec_pagetables 0 [ 2812.186010][T17130] percpu 128 [ 2812.186010][T17130] sock 0 [ 2812.186010][T17130] vmalloc 0 [ 2812.186010][T17130] shmem 8351744 [ 2812.186010][T17130] zswap 0 [ 2812.186010][T17130] zswapped 0 [ 2812.186010][T17130] file_mapped 241664 [ 2812.186010][T17130] file_dirty 0 [ 2812.186010][T17130] file_writeback 0 [ 2812.186010][T17130] swapcached 0 [ 2812.186010][T17130] anon_thp 0 [ 2812.186010][T17130] file_thp 0 [ 2812.186010][T17130] shmem_thp 0 [ 2812.186010][T17130] inactive_anon 8458240 [ 2812.186010][T17130] active_anon 90112 [ 2812.186010][T17130] inactive_file 0 [ 2812.186010][T17130] active_file 0 [ 2812.186010][T17130] unevictable 0 [ 2812.186010][T17130] slab_reclaimable 42808 [ 2812.186010][T17130] slab_unreclaimable 176488 [ 2812.186010][T17130] slab 219296 [ 2812.186010][T17130] workingset_refault_anon 0 [ 2812.186010][T17130] workingset_refault_file 1 [ 2812.186010][T17130] workingset_activate_anon 0 [ 2812.186010][T17130] workingset_activate_file 0 [ 2812.186010][T17130] workingset_restore_anon 0 [ 2812.186010][T17130] workingset_restore_file 0 [ 2812.186010][T17130] workingset_nodereclaim 0 [ 2812.186010][T17130] pgscan 199 [ 2812.186010][T17130] pgsteal 86 [ 2812.186010][T17130] pgscan_kswapd 0 [ 2812.186010][T17130] pgscan_direct 199 [ 2812.186010][T17130] pgscan_khugepaged 0 [ 2812.186010][T17130] pgsteal_kswapd 0 [ 2812.186010][T17130] pgsteal_direct 86 [ 2812.186010][T17130] pgsteal_khugepaged 0 [ 2812.186010][T17130] pgfault 89638 [ 2812.186010][T17130] pgmajfault 0 [ 2812.186010][T17130] pgrefill 192043 [ 2812.186010][T17130] pgactivate 113 [ 2812.186010][T17130] pgdeactivate 0 [ 2812.186010][T17130] pglazyfree 0 [ 2812.186010][T17130] pglazyfreed 0 [ 2812.186010][T17130] zswpin 0 [ 2812.186010][T17130] zswpout 0 [ 2812.186010][T17130] thp_fault_alloc 0 08:04:01 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000280)=@raw=[@exit, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x2d, &(0x7f00000001c0)=""/45, 0x41100, 0x11, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000002c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x4, 0x80000000, 0x8}, 0x10}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) recvmsg(r2, &(0x7f0000001900)={&(0x7f0000000480)=@llc, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/21, 0x15}, {&(0x7f0000001580)=""/188, 0xbc}, {&(0x7f0000001640)=""/214, 0xd6}, {&(0x7f0000001740)=""/11, 0xb}, {&(0x7f0000001780)=""/16, 0x10}], 0x6, &(0x7f0000001840)=""/154, 0x9a}, 0x21) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYRES8=r5, @ANYRES8=r7], 0x12) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@map=r6, r8, 0x1b}, 0x10) write$cgroup_int(r1, &(0x7f0000000180), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) (async) openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000280)=@raw=[@exit, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x2d, &(0x7f00000001c0)=""/45, 0x41100, 0x11, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000002c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x4, 0x80000000, 0x8}, 0x10}, 0x80) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) close(r5) (async) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) recvmsg(r2, &(0x7f0000001900)={&(0x7f0000000480)=@llc, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/21, 0x15}, {&(0x7f0000001580)=""/188, 0xbc}, {&(0x7f0000001640)=""/214, 0xd6}, {&(0x7f0000001740)=""/11, 0xb}, {&(0x7f0000001780)=""/16, 0x10}], 0x6, &(0x7f0000001840)=""/154, 0x9a}, 0x21) (async) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYRES8=r5, @ANYRES8=r7], 0x12) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10}, 0x10) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@map=r6, r8, 0x1b}, 0x10) (async) write$cgroup_int(r1, &(0x7f0000000180), 0x12) (async) 08:04:01 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xf0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:04:01 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}, 0x0, 0x0, r0, 0x0) 08:04:01 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1324c, 0x9, 0xffc5, 0x1b208d76dec320ae, 0x0, 0x80000000, 0xcc, 0x0, 0x200, 0x0, 0x8000}, r5, 0x0, r2, 0x1) close(r4) 08:04:01 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0x20, 0xd, 0x2, 0x0, 0x1, 0x4100, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2fb, 0x0, @perf_config_ext={0x70, 0x2}, 0x1080, 0x401, 0x6, 0x6, 0x3, 0x6, 0xffff, 0x0, 0x689, 0x0, 0x1}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1) (async) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0x20, 0xd, 0x2, 0x0, 0x1, 0x4100, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2fb, 0x0, @perf_config_ext={0x70, 0x2}, 0x1080, 0x401, 0x6, 0x6, 0x3, 0x6, 0xffff, 0x0, 0x689, 0x0, 0x1}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0x6a) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r6, @ANYRES8=r8], 0x12) (async) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r6, @ANYRES8=r8], 0x12) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000240)='!:]-') (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000240)='!:]-') write$cgroup_int(r4, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, 0x0) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 08:04:01 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000}, 0x0, 0x0, r0, 0x0) 08:04:01 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x193, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2812.640364][ T2242] Bluetooth: hci2: command 0x0419 tx timeout 08:04:01 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0, r0, 0x0) [ 2813.023970][T17130] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17125,uid=0 [ 2813.088397][T17130] Memory cgroup out of memory: Killed process 17130 (syz-executor.3) total-vm:50972kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2813.148154][T16974] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2813.194116][T16974] CPU: 0 PID: 16974 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2813.204587][T16974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2813.214669][T16974] Call Trace: [ 2813.217971][T16974] [ 2813.220922][T16974] dump_stack_lvl+0x136/0x150 [ 2813.225647][T16974] dump_header+0x10a/0xd70 [ 2813.230093][T16974] oom_kill_process+0x25d/0x600 [ 2813.234978][T16974] out_of_memory+0x35c/0x1660 [ 2813.239693][T16974] ? oom_killer_disable+0x2b0/0x2b0 [ 2813.244924][T16974] ? rcu_read_unlock+0x9/0x60 [ 2813.249635][T16974] ? find_held_lock+0x2d/0x110 [ 2813.254439][T16974] mem_cgroup_out_of_memory+0x206/0x270 [ 2813.260028][T16974] ? mem_cgroup_margin+0x130/0x130 [ 2813.265171][T16974] ? lock_downgrade+0x690/0x690 [ 2813.270072][T16974] try_charge_memcg+0xf99/0x13a0 [ 2813.275059][T16974] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2813.281083][T16974] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2813.286841][T16974] ? lock_downgrade+0x690/0x690 [ 2813.291729][T16974] ? lock_downgrade+0x690/0x690 [ 2813.296628][T16974] __memcg_kmem_charge_page+0x16e/0x3c0 [ 2813.302218][T16974] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2813.308405][T16974] copy_process+0x4f9/0x7600 [ 2813.313018][T16974] ? _raw_spin_unlock+0x28/0x40 [ 2813.317880][T16974] ? wp_page_reuse+0x197/0x570 [ 2813.322685][T16974] ? pidfd_prepare+0x80/0x80 [ 2813.327303][T16974] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2813.333309][T16974] kernel_clone+0xeb/0x890 [ 2813.337740][T16974] ? create_io_thread+0xe0/0xe0 [ 2813.342600][T16974] ? do_user_addr_fault+0x2b1/0x1210 [ 2813.347897][T16974] ? reacquire_held_locks+0x216/0x4e0 [ 2813.353284][T16974] ? do_user_addr_fault+0x2b1/0x1210 [ 2813.358586][T16974] ? find_held_lock+0x2d/0x110 [ 2813.363361][T16974] __do_sys_clone+0xba/0x100 [ 2813.367963][T16974] ? kernel_clone+0x890/0x890 [ 2813.374843][T16974] ? syscall_enter_from_user_mode+0x26/0x80 [ 2813.380847][T16974] do_syscall_64+0x39/0xb0 [ 2813.385280][T16974] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2813.391191][T16974] RIP: 0033:0x7f1270689e9b [ 2813.395609][T16974] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2813.415220][T16974] RSP: 002b:00007ffed9999f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2813.423638][T16974] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1270689e9b [ 2813.431611][T16974] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 08:04:02 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='cgroup\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_int(r2, &(0x7f0000000180), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='cgroup\x00') (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000180), 0x12) (async) 08:04:02 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x258, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:04:02 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, 0x0, 0x0, r0, 0x0) 08:04:02 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x300, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2813.439582][T16974] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555907400 [ 2813.447551][T16974] R10: 00005555559076d0 R11: 0000000000000246 R12: 0000000000000001 [ 2813.455523][T16974] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffed999a020 [ 2813.463507][T16974] [ 2813.613456][T16974] memory: usage 10344kB, limit 0kB, failcnt 2475 [ 2813.619841][T16974] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2813.634070][T16974] Memory cgroup stats for /syz2: [ 2813.634308][T16974] anon 40960 [ 2813.634308][T16974] file 10444800 [ 2813.634308][T16974] kernel 106496 [ 2813.634308][T16974] kernel_stack 0 [ 2813.634308][T16974] pagetables 8192 [ 2813.634308][T16974] sec_pagetables 0 [ 2813.634308][T16974] percpu 0 [ 2813.634308][T16974] sock 0 [ 2813.634308][T16974] vmalloc 0 [ 2813.634308][T16974] shmem 10440704 [ 2813.634308][T16974] zswap 0 [ 2813.634308][T16974] zswapped 0 [ 2813.634308][T16974] file_mapped 237568 [ 2813.634308][T16974] file_dirty 0 [ 2813.634308][T16974] file_writeback 0 [ 2813.634308][T16974] swapcached 0 [ 2813.634308][T16974] anon_thp 0 [ 2813.634308][T16974] file_thp 0 [ 2813.634308][T16974] shmem_thp 0 [ 2813.634308][T16974] inactive_anon 10440704 [ 2813.634308][T16974] active_anon 40960 [ 2813.634308][T16974] inactive_file 0 [ 2813.634308][T16974] active_file 4096 [ 2813.634308][T16974] unevictable 0 [ 2813.634308][T16974] slab_reclaimable 35376 [ 2813.634308][T16974] slab_unreclaimable 39920 [ 2813.634308][T16974] slab 75296 [ 2813.634308][T16974] workingset_refault_anon 0 [ 2813.634308][T16974] workingset_refault_file 0 [ 2813.634308][T16974] workingset_activate_anon 0 [ 2813.634308][T16974] workingset_activate_file 0 [ 2813.634308][T16974] workingset_restore_anon 0 [ 2813.634308][T16974] workingset_restore_file 0 [ 2813.634308][T16974] workingset_nodereclaim 0 [ 2813.634308][T16974] pgscan 1975 [ 2813.634308][T16974] pgsteal 31 [ 2813.634308][T16974] pgscan_kswapd 0 [ 2813.634308][T16974] pgscan_direct 1975 [ 2813.634308][T16974] pgscan_khugepaged 0 [ 2813.634308][T16974] pgsteal_kswapd 0 [ 2813.634308][T16974] pgsteal_direct 31 [ 2813.634308][T16974] pgsteal_khugepaged 0 [ 2813.634308][T16974] pgfault 72872 [ 2813.634308][T16974] pgmajfault 0 [ 2813.634308][T16974] pgrefill 1265172 [ 2813.634308][T16974] pgactivate 1944 [ 2813.634308][T16974] pgdeactivate 0 [ 2813.634308][T16974] pglazyfree 0 [ 2813.634308][T16974] pglazyfreed 0 [ 2813.634308][T16974] zswpin 0 [ 2813.634308][T16974] zswpout 0 [ 2813.634308][T16974] thp_fault_alloc 0 [ 2813.836731][T16974] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=16974,uid=0 [ 2813.853138][T16974] Memory cgroup out of memory: Killed process 16974 (syz-executor.2) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2813.871338][T16996] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2813.881334][T16996] CPU: 0 PID: 16996 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2813.891770][T16996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2813.901848][T16996] Call Trace: [ 2813.905144][T16996] [ 2813.908093][T16996] dump_stack_lvl+0x136/0x150 [ 2813.912821][T16996] dump_header+0x10a/0xd70 [ 2813.917268][T16996] oom_kill_process+0x25d/0x600 [ 2813.922169][T16996] out_of_memory+0x35c/0x1660 [ 2813.926887][T16996] ? oom_killer_disable+0x2b0/0x2b0 [ 2813.932118][T16996] ? rcu_read_unlock+0x9/0x60 [ 2813.936827][T16996] ? find_held_lock+0x2d/0x110 [ 2813.941628][T16996] mem_cgroup_out_of_memory+0x206/0x270 [ 2813.947211][T16996] ? mem_cgroup_margin+0x130/0x130 [ 2813.952355][T16996] ? lock_downgrade+0x690/0x690 [ 2813.957263][T16996] try_charge_memcg+0xf99/0x13a0 [ 2813.962271][T16996] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2813.968290][T16996] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2813.974048][T16996] ? lock_downgrade+0x690/0x690 [ 2813.978951][T16996] ? lock_downgrade+0x690/0x690 [ 2813.983849][T16996] obj_cgroup_charge+0x2af/0x5e0 [ 2813.988826][T16996] ? sock_alloc_inode+0x27/0x1d0 [ 2813.993789][T16996] kmem_cache_alloc_lru+0x142/0x600 [ 2813.999031][T16996] sock_alloc_inode+0x27/0x1d0 [ 2814.003820][T16996] ? sock_free_inode+0x30/0x30 [ 2814.008607][T16996] alloc_inode+0x61/0x230 [ 2814.012972][T16996] new_inode_pseudo+0x17/0x80 [ 2814.017683][T16996] sock_alloc+0x40/0x270 [ 2814.021952][T16996] __sock_create+0xbd/0x850 [ 2814.026481][T16996] ? xfd_validate_state+0x5d/0x180 [ 2814.031627][T16996] __sys_socket+0x133/0x250 [ 2814.036160][T16996] ? __sys_socket_file+0x1d0/0x1d0 [ 2814.041314][T16996] __x64_sys_socket+0x73/0xb0 [ 2814.046019][T16996] do_syscall_64+0x39/0xb0 [ 2814.050485][T16996] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2814.056420][T16996] RIP: 0033:0x7efc0c28d7e7 [ 2814.060856][T16996] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2814.080491][T16996] RSP: 002b:00007ffdf7f1d328 EFLAGS: 00000206 ORIG_RAX: 0000000000000029 [ 2814.088934][T16996] RAX: ffffffffffffffda RBX: 00007ffdf7f1da90 RCX: 00007efc0c28d7e7 [ 2814.096930][T16996] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 2814.104929][T16996] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffdf7f1d8a0 [ 2814.113102][T16996] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000032 [ 2814.121099][T16996] R13: 00000000002aec42 R14: 0000000000000008 R15: 00007ffdf7f1dad0 [ 2814.129230][T16996] [ 2814.166432][T16996] memory: usage 8600kB, limit 0kB, failcnt 2609 [ 2814.205474][T16996] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2814.227277][T16996] Memory cgroup stats for /syz3: [ 2814.227501][T16996] anon 147456 [ 2814.227501][T16996] file 8351744 [ 2814.227501][T16996] kernel 307200 [ 2814.227501][T16996] kernel_stack 32768 [ 2814.227501][T16996] pagetables 81920 [ 2814.227501][T16996] sec_pagetables 0 [ 2814.227501][T16996] percpu 128 [ 2814.227501][T16996] sock 0 [ 2814.227501][T16996] vmalloc 0 [ 2814.227501][T16996] shmem 8351744 [ 2814.227501][T16996] zswap 0 [ 2814.227501][T16996] zswapped 0 [ 2814.227501][T16996] file_mapped 241664 [ 2814.227501][T16996] file_dirty 0 [ 2814.227501][T16996] file_writeback 0 [ 2814.227501][T16996] swapcached 0 [ 2814.227501][T16996] anon_thp 0 [ 2814.227501][T16996] file_thp 0 [ 2814.227501][T16996] shmem_thp 0 [ 2814.227501][T16996] inactive_anon 8458240 [ 2814.227501][T16996] active_anon 40960 [ 2814.227501][T16996] inactive_file 0 [ 2814.227501][T16996] active_file 0 [ 2814.227501][T16996] unevictable 0 [ 2814.227501][T16996] slab_reclaimable 35952 [ 2814.227501][T16996] slab_unreclaimable 123440 [ 2814.227501][T16996] slab 159392 [ 2814.227501][T16996] workingset_refault_anon 0 [ 2814.227501][T16996] workingset_refault_file 1 [ 2814.227501][T16996] workingset_activate_anon 0 [ 2814.227501][T16996] workingset_activate_file 0 [ 2814.227501][T16996] workingset_restore_anon 0 [ 2814.227501][T16996] workingset_restore_file 0 [ 2814.227501][T16996] workingset_nodereclaim 0 [ 2814.227501][T16996] pgscan 199 [ 2814.227501][T16996] pgsteal 86 [ 2814.227501][T16996] pgscan_kswapd 0 [ 2814.227501][T16996] pgscan_direct 199 [ 2814.227501][T16996] pgscan_khugepaged 0 [ 2814.227501][T16996] pgsteal_kswapd 0 [ 2814.227501][T16996] pgsteal_direct 86 [ 2814.227501][T16996] pgsteal_khugepaged 0 [ 2814.227501][T16996] pgfault 89641 [ 2814.227501][T16996] pgmajfault 0 [ 2814.227501][T16996] pgrefill 192043 [ 2814.227501][T16996] pgactivate 113 [ 2814.227501][T16996] pgdeactivate 0 [ 2814.227501][T16996] pglazyfree 0 [ 2814.227501][T16996] pglazyfreed 0 [ 2814.227501][T16996] zswpin 0 [ 2814.227501][T16996] zswpout 0 [ 2814.227501][T16996] thp_fault_alloc 0 [ 2814.421007][T16996] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16996,uid=0 [ 2814.436828][T16996] Memory cgroup out of memory: Killed process 16996 (syz-executor.3) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2814.466700][T16996] socket: no more sockets 08:04:03 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000280)=@raw=[@exit, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x2d, &(0x7f00000001c0)=""/45, 0x41100, 0x11, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000002c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x4, 0x80000000, 0x8}, 0x10}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) recvmsg(r2, &(0x7f0000001900)={&(0x7f0000000480)=@llc, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/21, 0x15}, {&(0x7f0000001580)=""/188, 0xbc}, {&(0x7f0000001640)=""/214, 0xd6}, {&(0x7f0000001740)=""/11, 0xb}, {&(0x7f0000001780)=""/16, 0x10}], 0x6, &(0x7f0000001840)=""/154, 0x9a}, 0x21) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYRES8=r5, @ANYRES8=r7], 0x12) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@map=r6, r8, 0x1b}, 0x10) write$cgroup_int(r1, &(0x7f0000000180), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) (async) openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000280)=@raw=[@exit, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x2d, &(0x7f00000001c0)=""/45, 0x41100, 0x11, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000002c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x4, 0x80000000, 0x8}, 0x10}, 0x80) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) close(r5) (async) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) recvmsg(r2, &(0x7f0000001900)={&(0x7f0000000480)=@llc, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/21, 0x15}, {&(0x7f0000001580)=""/188, 0xbc}, {&(0x7f0000001640)=""/214, 0xd6}, {&(0x7f0000001740)=""/11, 0xb}, {&(0x7f0000001780)=""/16, 0x10}], 0x6, &(0x7f0000001840)=""/154, 0x9a}, 0x21) (async) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYRES8=r5, @ANYRES8=r7], 0x12) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10}, 0x10) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@map=r6, r8, 0x1b}, 0x10) (async) write$cgroup_int(r1, &(0x7f0000000180), 0x12) (async) 08:04:03 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0, 0x0, r0, 0x0) 08:04:03 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x3fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:04:03 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1324c, 0x9, 0xffc5, 0x1b208d76dec320ae, 0x0, 0x80000000, 0xcc, 0x0, 0x200, 0x0, 0x8000}, r5, 0x0, r2, 0x1) close(r4) [ 2814.734967][T19644] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2814.801075][ T2242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2814.809126][ T2242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2814.819034][ T2242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2814.827200][ T2242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2814.843181][ T2242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2815.057430][T19644] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2815.171891][T19644] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2815.294352][T19644] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2815.634468][T17194] chnl_net:caif_netlink_parms(): no params data found [ 2815.828052][T17194] bridge0: port 1(bridge_slave_0) entered blocking state [ 2815.836511][T17194] bridge0: port 1(bridge_slave_0) entered disabled state [ 2815.845491][T17194] bridge_slave_0: entered allmulticast mode [ 2815.852789][T17194] bridge_slave_0: entered promiscuous mode [ 2815.874146][T17194] bridge0: port 2(bridge_slave_1) entered blocking state [ 2815.889413][T17194] bridge0: port 2(bridge_slave_1) entered disabled state [ 2815.896926][T17194] bridge_slave_1: entered allmulticast mode [ 2815.915823][T17194] bridge_slave_1: entered promiscuous mode [ 2815.962374][T17194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2815.996257][T17194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2816.039382][T17194] team0: Port device team_slave_0 added [ 2816.063107][T17194] team0: Port device team_slave_1 added [ 2816.089187][T17194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2816.096751][T17194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2816.123284][T17194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2816.143749][T17194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2816.152165][T17194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2816.179258][T17194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2816.229814][T17194] hsr_slave_0: entered promiscuous mode [ 2816.238037][T17194] hsr_slave_1: entered promiscuous mode [ 2816.245841][T17194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2816.256979][T17194] Cannot create hsr debugfs directory [ 2816.721415][T19644] hsr_slave_0: left promiscuous mode [ 2816.728594][T19644] hsr_slave_1: left promiscuous mode [ 2816.760251][T19644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2816.767705][T19644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2816.802166][T19644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2816.809604][T19644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2816.842220][T19644] bridge_slave_1: left allmulticast mode [ 2816.847896][T19644] bridge_slave_1: left promiscuous mode [ 2816.870222][T19644] bridge0: port 2(bridge_slave_1) entered disabled state [ 2816.870390][T27851] Bluetooth: hci1: command 0x0409 tx timeout [ 2816.892714][T19644] bridge_slave_0: left allmulticast mode [ 2816.898384][T19644] bridge_slave_0: left promiscuous mode [ 2816.904158][T19644] bridge0: port 1(bridge_slave_0) entered disabled state [ 2816.927654][T19644] veth1_macvtap: left promiscuous mode [ 2816.941724][T19644] veth0_macvtap: left promiscuous mode [ 2816.947320][T19644] veth1_vlan: left promiscuous mode [ 2816.958613][T19644] veth0_vlan: left promiscuous mode [ 2817.256882][T19644] team0 (unregistering): Port device team_slave_1 removed [ 2817.274957][T19644] team0 (unregistering): Port device team_slave_0 removed [ 2817.298000][T19644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2817.325052][T19644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2817.427108][T19644] bond0 (unregistering): Released all slaves [ 2817.676225][T17194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2817.701531][T17194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2817.711934][T17194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2817.723204][T17194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2817.852051][T17194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2817.890367][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2817.898265][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2817.939275][T17194] 8021q: adding VLAN 0 to HW filter on device team0 [ 2817.951803][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2817.968339][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2817.976979][ T5087] bridge0: port 1(bridge_slave_0) entered blocking state [ 2817.984198][ T5087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2818.030382][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2818.038933][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2818.054982][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2818.066908][T24745] bridge0: port 2(bridge_slave_1) entered blocking state [ 2818.074142][T24745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2818.089874][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2818.107888][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2818.116899][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2818.133509][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2818.166332][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2818.176803][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2818.191247][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2818.208596][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2818.240814][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2818.252178][T17194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2818.280907][T17194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2818.298662][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2818.316096][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2818.640667][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2818.648200][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2818.665394][T17194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2818.712091][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2818.721906][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2818.761059][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2818.769412][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2818.793019][T17194] veth0_vlan: entered promiscuous mode [ 2818.804139][T17194] veth1_vlan: entered promiscuous mode [ 2818.819655][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2818.827718][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2818.835923][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2818.865558][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2818.886731][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2818.898151][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2818.917337][T17194] veth0_macvtap: entered promiscuous mode [ 2818.937405][T17194] veth1_macvtap: entered promiscuous mode [ 2818.950264][T27851] Bluetooth: hci1: command 0x041b tx timeout [ 2818.973383][T17194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2818.984044][T17194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2818.994197][T17194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2819.009868][T17194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2819.020701][T17194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2819.032669][T17194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2819.042654][T17194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2819.053176][T17194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2819.063450][T17194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2819.073962][T17194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2819.086196][T17194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2819.096350][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2819.105242][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2819.113656][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2819.124578][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2819.137529][T17194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2819.162850][T17194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2819.179909][T17194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2819.198212][T17194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2819.208367][T17194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2819.228439][T17194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2819.238582][T17194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2819.256584][T17194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2819.267459][T17194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2819.290066][T17194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2819.308561][T17194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2819.317896][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2819.329233][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2819.341616][T17194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2819.351940][T17194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2819.361292][T17194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2819.371404][T17194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2819.474832][T15391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2819.501615][T15391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2819.538924][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2819.555283][T15391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2819.567414][T15391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2819.585280][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2819.726395][T17282] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2819.738493][T17282] CPU: 1 PID: 17282 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2819.748944][T17282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2819.759019][T17282] Call Trace: [ 2819.762315][T17282] [ 2819.765261][T17282] dump_stack_lvl+0x136/0x150 [ 2819.769992][T17282] dump_header+0x10a/0xd70 [ 2819.774444][T17282] oom_kill_process+0x25d/0x600 [ 2819.779323][T17282] out_of_memory+0x35c/0x1660 [ 2819.784030][T17282] ? io_schedule_timeout+0x150/0x150 [ 2819.789348][T17282] ? oom_killer_disable+0x2b0/0x2b0 [ 2819.794579][T17282] ? kernfs_notify+0x1ac/0x410 [ 2819.799404][T17282] mem_cgroup_out_of_memory+0x206/0x270 [ 2819.804988][T17282] ? mem_cgroup_margin+0x130/0x130 [ 2819.810142][T17282] memory_max_write+0x2f9/0x3c0 [ 2819.815102][T17282] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2819.821189][T17282] ? lock_sync+0x190/0x190 [ 2819.825620][T17282] cgroup_file_write+0x1e2/0x7b0 [ 2819.830565][T17282] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2819.836651][T17282] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2819.842033][T17282] ? __virt_addr_valid+0x61/0x2e0 [ 2819.847082][T17282] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2819.852462][T17282] kernfs_fop_write_iter+0x3f1/0x600 [ 2819.857785][T17282] vfs_write+0x945/0xd50 [ 2819.862040][T17282] ? kernel_write+0x670/0x670 [ 2819.866736][T17282] ? __fget_files+0x26a/0x480 [ 2819.871447][T17282] ksys_write+0x12b/0x250 [ 2819.875786][T17282] ? __ia32_sys_read+0xb0/0xb0 [ 2819.880553][T17282] ? syscall_enter_from_user_mode+0x26/0x80 [ 2819.886476][T17282] do_syscall_64+0x39/0xb0 [ 2819.890923][T17282] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2819.896845][T17282] RIP: 0033:0x7f3de108c169 [ 2819.901290][T17282] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2819.920907][T17282] RSP: 002b:00007f3de1df8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2819.929327][T17282] RAX: ffffffffffffffda RBX: 00007f3de11abf80 RCX: 00007f3de108c169 [ 2819.937303][T17282] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 2819.945278][T17282] RBP: 00007f3de10e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2819.953251][T17282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2819.961228][T17282] R13: 00007ffc7fbd445f R14: 00007f3de1df8300 R15: 0000000000022000 [ 2819.969220][T17282] [ 2820.014844][T17282] memory: usage 8600kB, limit 0kB, failcnt 2662 [ 2820.022676][T17282] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2820.029680][T17282] Memory cgroup stats for /syz0: [ 2820.029896][T17282] anon 94208 [ 2820.029896][T17282] file 8343552 [ 2820.029896][T17282] kernel 348160 [ 2820.029896][T17282] kernel_stack 98304 [ 2820.029896][T17282] pagetables 77824 [ 2820.029896][T17282] sec_pagetables 0 [ 2820.029896][T17282] percpu 64 [ 2820.029896][T17282] sock 0 [ 2820.029896][T17282] vmalloc 0 [ 2820.029896][T17282] shmem 8343552 [ 2820.029896][T17282] zswap 0 [ 2820.029896][T17282] zswapped 0 [ 2820.029896][T17282] file_mapped 274432 [ 2820.029896][T17282] file_dirty 0 [ 2820.029896][T17282] file_writeback 0 [ 2820.029896][T17282] swapcached 0 [ 2820.029896][T17282] anon_thp 0 [ 2820.029896][T17282] file_thp 0 [ 2820.029896][T17282] shmem_thp 0 [ 2820.029896][T17282] inactive_anon 8118272 [ 2820.029896][T17282] active_anon 319488 [ 2820.029896][T17282] inactive_file 0 [ 2820.029896][T17282] active_file 0 [ 2820.029896][T17282] unevictable 0 [ 2820.029896][T17282] slab_reclaimable 43048 [ 2820.029896][T17282] slab_unreclaimable 97856 [ 2820.029896][T17282] slab 140904 [ 2820.029896][T17282] workingset_refault_anon 0 [ 2820.029896][T17282] workingset_refault_file 0 [ 2820.029896][T17282] workingset_activate_anon 0 [ 2820.029896][T17282] workingset_activate_file 0 [ 2820.029896][T17282] workingset_restore_anon 0 [ 2820.029896][T17282] workingset_restore_file 0 [ 2820.029896][T17282] workingset_nodereclaim 0 [ 2820.029896][T17282] pgscan 875 [ 2820.029896][T17282] pgsteal 403 [ 2820.029896][T17282] pgscan_kswapd 0 [ 2820.029896][T17282] pgscan_direct 875 [ 2820.029896][T17282] pgscan_khugepaged 0 [ 2820.029896][T17282] pgsteal_kswapd 0 [ 2820.029896][T17282] pgsteal_direct 403 [ 2820.029896][T17282] pgsteal_khugepaged 0 [ 2820.029896][T17282] pgfault 130828 [ 2820.029896][T17282] pgmajfault 0 [ 2820.029896][T17282] pgrefill 1286981 [ 2820.029896][T17282] pgactivate 472 [ 2820.029896][T17282] pgdeactivate 0 [ 2820.029896][T17282] pglazyfree 0 [ 2820.029896][T17282] pglazyfreed 0 [ 2820.029896][T17282] zswpin 0 [ 2820.029896][T17282] zswpout 0 [ 2820.029896][T17282] thp_fault_alloc 0 [ 2820.230318][T17282] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=17281,uid=0 [ 2820.247878][T17282] Memory cgroup out of memory: Killed process 17281 (syz-executor.0) total-vm:50840kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 08:04:09 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='thermal_temperature\x00', r2}, 0x10) r4 = perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x80, 0x1f, 0x9d, 0x6, 0x6, 0x0, 0x4, 0x800, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x7fffffff, 0x5}, 0x28, 0x1, 0x5, 0x3, 0x100000000, 0xccb, 0x3f, 0x0, 0x7, 0x0, 0x3}, r2, 0x2, r3, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 08:04:09 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x500, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:04:09 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) 08:04:09 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000040)='cGroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x22) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r4], 0x12) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 08:04:09 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1324c, 0x9, 0xffc5, 0x1b208d76dec320ae, 0x0, 0x80000000, 0xcc, 0x0, 0x200, 0x0, 0x8000}, r5, 0x0, r2, 0x1) close(r4) 08:04:09 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) r3 = syz_clone(0x100000, &(0x7f00000001c0)="58a518872160397cc6e73c37a8b107b779b05faa7538f0d4218cdfe89ac78fac3f54032580f3739d17fa1c4bdcb1", 0x2e, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="f3ee0c8aea99965091733bd061004c941ac852dc939b2f90e2a5db7559") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r3, r0, 0x0, 0x2, &(0x7f0000000300)='*\x00'}, 0x30) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 2820.308626][T19644] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 08:04:09 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x600, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:04:09 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) [ 2820.448274][T17194] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2820.519566][T17194] CPU: 1 PID: 17194 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2820.530118][T17194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2820.540196][T17194] Call Trace: [ 2820.543493][T17194] [ 2820.546438][T17194] dump_stack_lvl+0x136/0x150 [ 2820.551161][T17194] dump_header+0x10a/0xd70 [ 2820.555605][T17194] oom_kill_process+0x25d/0x600 [ 2820.560488][T17194] out_of_memory+0x35c/0x1660 [ 2820.565196][T17194] ? find_held_lock+0x2d/0x110 08:04:09 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x700, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2820.569994][T17194] ? oom_killer_disable+0x2b0/0x2b0 [ 2820.575218][T17194] ? rcu_read_unlock+0x9/0x60 [ 2820.579931][T17194] ? find_held_lock+0x2d/0x110 [ 2820.584735][T17194] mem_cgroup_out_of_memory+0x206/0x270 [ 2820.590327][T17194] ? mem_cgroup_margin+0x130/0x130 [ 2820.595470][T17194] ? lock_downgrade+0x690/0x690 [ 2820.600900][T17194] try_charge_memcg+0xf99/0x13a0 [ 2820.605887][T17194] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2820.611908][T17194] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2820.617670][T17194] ? lock_downgrade+0x690/0x690 [ 2820.622570][T17194] ? lock_downgrade+0x690/0x690 [ 2820.627449][T17194] ? rcu_read_unlock+0x9/0x60 [ 2820.632169][T17194] obj_cgroup_charge+0x2af/0x5e0 [ 2820.637150][T17194] ? sk_prot_alloc+0x5f/0x290 [ 2820.641858][T17194] kmem_cache_alloc+0xb1/0x3b0 [ 2820.646655][T17194] ? inet_create+0x324/0xfa0 [ 2820.651274][T17194] sk_prot_alloc+0x5f/0x290 [ 2820.655821][T17194] sk_alloc+0x3a/0x7f0 [ 2820.659935][T17194] inet_create+0x399/0xfa0 [ 2820.664391][T17194] __sock_create+0x380/0x850 [ 2820.669016][T17194] __sys_socket+0x133/0x250 [ 2820.673546][T17194] ? __sys_socket_file+0x1d0/0x1d0 [ 2820.678699][T17194] __x64_sys_socket+0x73/0xb0 [ 2820.683404][T17194] do_syscall_64+0x39/0xb0 [ 2820.687859][T17194] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2820.693787][T17194] RIP: 0033:0x7f3de108d7e7 [ 2820.698230][T17194] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 08:04:09 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x8e4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2820.718482][T17194] RSP: 002b:00007ffc7fbd3fd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 2820.726932][T17194] RAX: ffffffffffffffda RBX: 00007ffc7fbd4740 RCX: 00007f3de108d7e7 [ 2820.734928][T17194] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 2820.742919][T17194] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffc7fbd4550 [ 2820.750912][T17194] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 2820.758905][T17194] R13: 00000000002b0660 R14: 0000000000000015 R15: 00007ffc7fbd4780 [ 2820.766912][T17194] 08:04:10 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) 08:04:10 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa00, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2820.938396][T19644] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2821.030730][T27851] Bluetooth: hci1: command 0x040f tx timeout [ 2821.081445][T17194] memory: usage 8280kB, limit 0kB, failcnt 2698 [ 2821.093824][T17194] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2821.108927][T17194] Memory cgroup stats for /syz0: [ 2821.109145][T17194] anon 36864 [ 2821.109145][T17194] file 8343552 [ 2821.109145][T17194] kernel 98304 [ 2821.109145][T17194] kernel_stack 0 [ 2821.109145][T17194] pagetables 8192 [ 2821.109145][T17194] sec_pagetables 0 [ 2821.109145][T17194] percpu 64 [ 2821.109145][T17194] sock 0 [ 2821.109145][T17194] vmalloc 0 [ 2821.109145][T17194] shmem 8343552 [ 2821.109145][T17194] zswap 0 [ 2821.109145][T17194] zswapped 0 [ 2821.109145][T17194] file_mapped 249856 [ 2821.109145][T17194] file_dirty 0 [ 2821.109145][T17194] file_writeback 0 [ 2821.109145][T17194] swapcached 0 [ 2821.109145][T17194] anon_thp 0 [ 2821.109145][T17194] file_thp 0 [ 2821.109145][T17194] shmem_thp 0 [ 2821.109145][T17194] inactive_anon 8118272 [ 2821.109145][T17194] active_anon 262144 [ 2821.109145][T17194] inactive_file 0 [ 2821.109145][T17194] active_file 0 [ 2821.109145][T17194] unevictable 0 [ 2821.109145][T17194] slab_reclaimable 28320 [ 2821.109145][T17194] slab_unreclaimable 44272 [ 2821.109145][T17194] slab 72592 [ 2821.109145][T17194] workingset_refault_anon 0 [ 2821.109145][T17194] workingset_refault_file 0 [ 2821.109145][T17194] workingset_activate_anon 0 [ 2821.109145][T17194] workingset_activate_file 0 [ 2821.109145][T17194] workingset_restore_anon 0 [ 2821.109145][T17194] workingset_restore_file 0 [ 2821.109145][T17194] workingset_nodereclaim 0 [ 2821.109145][T17194] pgscan 875 [ 2821.109145][T17194] pgsteal 403 [ 2821.109145][T17194] pgscan_kswapd 0 [ 2821.109145][T17194] pgscan_direct 875 [ 2821.109145][T17194] pgscan_khugepaged 0 [ 2821.109145][T17194] pgsteal_kswapd 0 [ 2821.109145][T17194] pgsteal_direct 403 [ 2821.109145][T17194] pgsteal_khugepaged 0 [ 2821.109145][T17194] pgfault 130832 [ 2821.109145][T17194] pgmajfault 0 [ 2821.109145][T17194] pgrefill 1286981 [ 2821.109145][T17194] pgactivate 472 [ 2821.109145][T17194] pgdeactivate 0 [ 2821.109145][T17194] pglazyfree 0 [ 2821.109145][T17194] pglazyfreed 0 [ 2821.109145][T17194] zswpin 0 [ 2821.109145][T17194] zswpout 0 [ 2821.109145][T17194] thp_fault_alloc 0 [ 2821.124217][T19644] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2821.402022][T17194] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=17194,uid=0 [ 2821.440318][T17194] Memory cgroup out of memory: Killed process 17194 (syz-executor.0) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2821.700808][T19644] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2822.583925][T19644] hsr_slave_0: left promiscuous mode [ 2822.598168][T19644] hsr_slave_1: left promiscuous mode [ 2822.617836][T19644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2822.656854][T19644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2822.666561][T19644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2822.697420][T19644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2822.722861][T19644] bridge_slave_1: left allmulticast mode [ 2822.728541][T19644] bridge_slave_1: left promiscuous mode [ 2822.762430][T19644] bridge0: port 2(bridge_slave_1) entered disabled state [ 2822.776415][T19644] bridge_slave_0: left allmulticast mode [ 2822.795044][T19644] bridge_slave_0: left promiscuous mode [ 2822.837035][T19644] bridge0: port 1(bridge_slave_0) entered disabled state [ 2822.858447][T19644] veth1_macvtap: left promiscuous mode [ 2822.878182][T19644] veth0_macvtap: left promiscuous mode [ 2822.897163][T19644] veth1_vlan: left promiscuous mode [ 2822.902662][T19644] veth0_vlan: left promiscuous mode [ 2823.015367][ T2242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2823.025323][ T2242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2823.033438][ T2242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2823.041882][ T2242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2823.049396][ T2242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2823.069272][ T2242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2823.217776][T27851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2823.226714][T27851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2823.235725][T27851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2823.243763][T27851] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2823.254653][T27851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2823.335799][T19644] team0 (unregistering): Port device team_slave_1 removed [ 2823.348468][T19644] team0 (unregistering): Port device team_slave_0 removed [ 2823.363612][T19644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2823.376259][T19644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2823.443685][T19644] bond0 (unregistering): Released all slaves [ 2823.828091][T17360] chnl_net:caif_netlink_parms(): no params data found [ 2823.904480][T17363] chnl_net:caif_netlink_parms(): no params data found [ 2824.034602][T17360] bridge0: port 1(bridge_slave_0) entered blocking state [ 2824.054669][T17360] bridge0: port 1(bridge_slave_0) entered disabled state 08:04:13 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='thermal_temperature\x00', r2}, 0x10) r4 = perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x80, 0x1f, 0x9d, 0x6, 0x6, 0x0, 0x4, 0x800, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x7fffffff, 0x5}, 0x28, 0x1, 0x5, 0x3, 0x100000000, 0xccb, 0x3f, 0x0, 0x7, 0x0, 0x3}, r2, 0x2, r3, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, 0x0) (async, rerun: 64) write$cgroup_int(r1, &(0x7f0000000180), 0x12) (rerun: 64) 08:04:13 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r0, 0x0) 08:04:13 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xc00, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2824.080381][T17360] bridge_slave_0: entered allmulticast mode [ 2824.093380][T17360] bridge_slave_0: entered promiscuous mode [ 2824.170817][T17360] bridge0: port 2(bridge_slave_1) entered blocking state [ 2824.177940][T17360] bridge0: port 2(bridge_slave_1) entered disabled state [ 2824.235855][T17360] bridge_slave_1: entered allmulticast mode [ 2824.277071][T17360] bridge_slave_1: entered promiscuous mode [ 2824.396638][T17363] bridge0: port 1(bridge_slave_0) entered blocking state [ 2824.404173][T17363] bridge0: port 1(bridge_slave_0) entered disabled state [ 2824.420247][T17363] bridge_slave_0: entered allmulticast mode [ 2824.427251][T17363] bridge_slave_0: entered promiscuous mode [ 2824.457619][T17363] bridge0: port 2(bridge_slave_1) entered blocking state [ 2824.466033][T17363] bridge0: port 2(bridge_slave_1) entered disabled state [ 2824.474206][T17363] bridge_slave_1: entered allmulticast mode [ 2824.481557][T17363] bridge_slave_1: entered promiscuous mode [ 2824.490926][T17360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2824.522586][T17360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2824.579045][T17363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2824.601988][T17360] team0: Port device team_slave_0 added [ 2824.611973][T17363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2824.646930][T17360] team0: Port device team_slave_1 added [ 2824.716725][T17363] team0: Port device team_slave_0 added [ 2824.729856][T17360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2824.740512][T17360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2824.769305][T17360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2824.789912][T17363] team0: Port device team_slave_1 added [ 2824.816980][T17360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2824.824328][T17360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2824.850853][T17360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2824.917396][T17363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2824.934319][T17363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2824.972514][T17363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2824.997635][T17360] hsr_slave_0: entered promiscuous mode [ 2825.013626][T17360] hsr_slave_1: entered promiscuous mode [ 2825.020633][T17363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2825.027592][T17363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2825.065642][T17363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2825.110444][ T5048] Bluetooth: hci1: command 0x0409 tx timeout [ 2825.199182][T17363] hsr_slave_0: entered promiscuous mode [ 2825.216232][T17363] hsr_slave_1: entered promiscuous mode [ 2825.226419][T17363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2825.239476][T17363] Cannot create hsr debugfs directory [ 2825.271326][ T5048] Bluetooth: hci2: command 0x0409 tx timeout [ 2825.838475][T19644] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2826.029141][T19644] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2826.128476][T19644] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2826.233447][T19644] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2826.529157][T17360] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2826.552109][T17360] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2826.562483][T17360] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2826.584278][T17360] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2826.617881][T17363] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2826.640617][T17363] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2826.655859][T17363] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2826.685610][T17363] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2826.779552][T17360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2826.821718][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2826.829575][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2826.843208][T17360] 8021q: adding VLAN 0 to HW filter on device team0 [ 2826.872098][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2826.881393][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2826.889906][ T2619] bridge0: port 1(bridge_slave_0) entered blocking state [ 2826.897053][ T2619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2826.919265][T17363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2826.950954][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2826.959030][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2826.968641][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2826.978714][T23455] bridge0: port 2(bridge_slave_1) entered blocking state [ 2826.985871][T23455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2826.994405][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2827.004423][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2827.019770][T17363] 8021q: adding VLAN 0 to HW filter on device team0 [ 2827.048606][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2827.058016][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2827.066382][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2827.077073][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2827.086659][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2827.096932][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2827.106313][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2827.116831][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2827.151099][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2827.159097][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2827.168755][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2827.178421][T14297] bridge0: port 1(bridge_slave_0) entered blocking state [ 2827.185591][T14297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2827.195869][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2827.200246][ T5048] Bluetooth: hci1: command 0x041b tx timeout [ 2827.204912][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2827.219067][T14297] bridge0: port 2(bridge_slave_1) entered blocking state [ 2827.226214][T14297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2827.234824][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2827.254250][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2827.275513][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2827.310898][T17360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2827.346325][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2827.360290][ T5048] Bluetooth: hci2: command 0x041b tx timeout [ 2827.367467][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2827.379201][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2827.396992][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2827.408461][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2827.426888][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2827.438292][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2827.455439][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2827.473681][T17363] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2827.501837][T17363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2827.530778][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2827.538901][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2827.563578][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2827.614839][T19644] hsr_slave_0: left promiscuous mode [ 2827.658418][T19644] hsr_slave_1: left promiscuous mode [ 2827.666329][T19644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2827.697873][T19644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2827.708654][T19644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2827.728189][T19644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2827.746435][T19644] bridge_slave_1: left allmulticast mode [ 2827.755249][T19644] bridge_slave_1: left promiscuous mode [ 2827.768458][T19644] bridge0: port 2(bridge_slave_1) entered disabled state [ 2827.779959][T19644] bridge_slave_0: left allmulticast mode [ 2827.794083][T19644] bridge_slave_0: left promiscuous mode [ 2827.799802][T19644] bridge0: port 1(bridge_slave_0) entered disabled state [ 2827.824058][T19644] veth1_macvtap: left promiscuous mode [ 2827.829615][T19644] veth0_macvtap: left promiscuous mode [ 2827.848194][T19644] veth1_vlan: left promiscuous mode [ 2827.854974][T19644] veth0_vlan: left promiscuous mode [ 2828.018461][T19644] team0 (unregistering): Port device team_slave_1 removed [ 2828.032075][T19644] team0 (unregistering): Port device team_slave_0 removed [ 2828.043954][T19644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2828.058913][T19644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2828.121604][T19644] bond0 (unregistering): Released all slaves [ 2828.342772][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2828.358695][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2828.378763][T17360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2828.408403][T17363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2828.417727][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2828.426171][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2828.452543][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2828.462423][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2828.480594][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2828.489529][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2828.543232][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2828.552199][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2828.561352][T17363] veth0_vlan: entered promiscuous mode [ 2828.573242][T17360] veth0_vlan: entered promiscuous mode [ 2828.589198][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2828.597390][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2828.612941][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2828.626496][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2828.654785][T17363] veth1_vlan: entered promiscuous mode [ 2828.675951][T17360] veth1_vlan: entered promiscuous mode [ 2828.685468][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2828.694938][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2828.708688][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2828.717073][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2828.772051][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2828.791378][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2828.811107][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2828.831070][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2828.876621][T17363] veth0_macvtap: entered promiscuous mode [ 2828.887841][T17360] veth0_macvtap: entered promiscuous mode [ 2828.918436][T17363] veth1_macvtap: entered promiscuous mode [ 2828.926251][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2828.935218][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2828.943607][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2828.958303][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2828.977261][T17360] veth1_macvtap: entered promiscuous mode [ 2828.997151][T17363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2829.026918][T17363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2829.046537][T17363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2829.058650][T17363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2829.069884][T17363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2829.080727][T17363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2829.091883][T17363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2829.102606][T17363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2829.114280][T17363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2829.124542][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2829.133729][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2829.143065][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2829.157480][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2829.170892][T17363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2829.188417][T17363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2829.199853][T17363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2829.218775][T17363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2829.228903][T17363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2829.247278][T17363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2829.259131][T17363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2829.270124][ T5048] Bluetooth: hci1: command 0x040f tx timeout [ 2829.286593][T17363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2829.308151][T17363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2829.326418][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2829.336823][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2829.348534][T17360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2829.363233][T17360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2829.374772][T17360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2829.385816][T17360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2829.396358][T17360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2829.407340][T17360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2829.417441][T17360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2829.428754][T17360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2829.440638][ T5048] Bluetooth: hci2: command 0x040f tx timeout [ 2829.446907][T17360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2829.458586][T17360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2829.470976][T17360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2829.480591][T17363] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2829.489334][T17363] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2829.499446][T17363] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2829.508827][T17363] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2829.541670][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2829.550627][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2829.562205][T17360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2829.574112][T17360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2829.584681][T17360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2829.605803][T17360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2829.616969][T17360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2829.633643][T17360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2829.647819][T17360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2829.663335][T17360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2829.673546][T17360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2829.684134][T17360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2829.695560][T17360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2829.720994][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2829.730750][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2829.746011][T17360] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2829.756094][T17360] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2829.773824][T17360] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2829.787120][T17360] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2829.936631][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2829.962356][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2829.985077][T15391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2830.021168][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2830.039885][T15391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2830.042413][T21574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2830.050862][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2830.072393][T21574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2830.090659][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2830.131914][T21574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2830.160142][T21574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2830.169755][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:04:19 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000040)='cGroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x22) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r4], 0x12) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r4], 0x12) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x2) (async) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) (async) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 08:04:19 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1324c, 0x9, 0xffc5, 0x1b208d76dec320ae, 0x8, 0x0, 0xcc, 0x0, 0x200, 0x0, 0x8000}, r5, 0x0, r2, 0x1) close(r4) [ 2830.373234][T17468] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2830.420670][T17468] CPU: 1 PID: 17468 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2830.431149][T17468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2830.441239][T17468] Call Trace: [ 2830.444543][T17468] [ 2830.447493][T17468] dump_stack_lvl+0x136/0x150 [ 2830.452226][T17468] dump_header+0x10a/0xd70 [ 2830.456687][T17468] oom_kill_process+0x25d/0x600 [ 2830.461577][T17468] out_of_memory+0x35c/0x1660 [ 2830.466308][T17468] ? oom_killer_disable+0x2b0/0x2b0 [ 2830.471540][T17468] ? find_held_lock+0x2d/0x110 [ 2830.476347][T17468] mem_cgroup_out_of_memory+0x206/0x270 [ 2830.481927][T17468] ? mem_cgroup_margin+0x130/0x130 [ 2830.487075][T17468] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2830.492928][T17468] memory_max_write+0x2f9/0x3c0 [ 2830.497817][T17468] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2830.503947][T17468] ? lock_sync+0x190/0x190 [ 2830.508404][T17468] cgroup_file_write+0x1e2/0x7b0 [ 2830.513370][T17468] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2830.519468][T17468] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2830.524861][T17468] ? __virt_addr_valid+0x61/0x2e0 [ 2830.529922][T17468] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2830.535312][T17468] kernfs_fop_write_iter+0x3f1/0x600 [ 2830.540627][T17468] vfs_write+0x945/0xd50 [ 2830.544884][T17468] ? kernel_write+0x670/0x670 [ 2830.549574][T17468] ? __fget_files+0x26a/0x480 [ 2830.554294][T17468] ksys_write+0x12b/0x250 [ 2830.558630][T17468] ? __ia32_sys_read+0xb0/0xb0 [ 2830.563407][T17468] ? syscall_enter_from_user_mode+0x26/0x80 [ 2830.569414][T17468] do_syscall_64+0x39/0xb0 [ 2830.574125][T17468] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2830.580308][T17468] RIP: 0033:0x7effd448c169 [ 2830.584733][T17468] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2830.605148][T17468] RSP: 002b:00007effd51c0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2830.613578][T17468] RAX: ffffffffffffffda RBX: 00007effd45abf80 RCX: 00007effd448c169 [ 2830.621588][T17468] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000004 [ 2830.629580][T17468] RBP: 00007effd44e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2830.637570][T17468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2830.645556][T17468] R13: 00007ffd10839cdf R14: 00007effd51c0300 R15: 0000000000022000 [ 2830.653553][T17468] [ 2830.711082][T17468] memory: usage 9076kB, limit 0kB, failcnt 2650 [ 2830.717504][T17468] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2830.745930][T17468] Memory cgroup stats for /syz3: [ 2830.746171][T17468] anon 290816 [ 2830.746171][T17468] file 8355840 [ 2830.746171][T17468] kernel 647168 [ 2830.746171][T17468] kernel_stack 131072 [ 2830.746171][T17468] pagetables 208896 [ 2830.746171][T17468] sec_pagetables 0 [ 2830.746171][T17468] percpu 192 [ 2830.746171][T17468] sock 0 [ 2830.746171][T17468] vmalloc 0 [ 2830.746171][T17468] shmem 8351744 [ 2830.746171][T17468] zswap 0 [ 2830.746171][T17468] zswapped 0 [ 2830.746171][T17468] file_mapped 241664 [ 2830.746171][T17468] file_dirty 4096 [ 2830.746171][T17468] file_writeback 0 [ 2830.746171][T17468] swapcached 0 [ 2830.746171][T17468] anon_thp 0 [ 2830.746171][T17468] file_thp 0 [ 2830.746171][T17468] shmem_thp 0 [ 2830.746171][T17468] inactive_anon 8642560 [ 2830.746171][T17468] active_anon 0 [ 2830.746171][T17468] inactive_file 0 [ 2830.746171][T17468] active_file 4096 [ 2830.746171][T17468] unevictable 0 [ 2830.746171][T17468] slab_reclaimable 46000 [ 2830.746171][T17468] slab_unreclaimable 195128 [ 2830.746171][T17468] slab 241128 [ 2830.746171][T17468] workingset_refault_anon 0 [ 2830.746171][T17468] workingset_refault_file 1 [ 2830.746171][T17468] workingset_activate_anon 0 [ 2830.746171][T17468] workingset_activate_file 0 [ 2830.746171][T17468] workingset_restore_anon 0 [ 2830.746171][T17468] workingset_restore_file 0 [ 2830.746171][T17468] workingset_nodereclaim 0 [ 2830.746171][T17468] pgscan 199 [ 2830.746171][T17468] pgsteal 86 [ 2830.746171][T17468] pgscan_kswapd 0 [ 2830.746171][T17468] pgscan_direct 199 [ 2830.746171][T17468] pgscan_khugepaged 0 [ 2830.746171][T17468] pgsteal_kswapd 0 [ 2830.746171][T17468] pgsteal_direct 86 [ 2830.746171][T17468] pgsteal_khugepaged 0 [ 2830.746171][T17468] pgfault 89724 [ 2830.746171][T17468] pgmajfault 0 [ 2830.746171][T17468] pgrefill 192071 [ 2830.746171][T17468] pgactivate 113 [ 2830.746171][T17468] pgdeactivate 0 [ 2830.746171][T17468] pglazyfree 0 [ 2830.746171][T17468] pglazyfreed 0 [ 2830.746171][T17468] zswpin 0 [ 2830.746171][T17468] zswpout 0 [ 2830.746171][T17468] thp_fault_alloc 0 [ 2830.981055][T17468] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17363,uid=0 [ 2831.014592][T17468] Memory cgroup out of memory: Killed process 17363 (syz-executor.3) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2831.061576][T17468] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2831.081231][T17468] CPU: 1 PID: 17468 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2831.091690][T17468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2831.101772][T17468] Call Trace: [ 2831.105065][T17468] [ 2831.108016][T17468] dump_stack_lvl+0x136/0x150 [ 2831.112749][T17468] dump_header+0x10a/0xd70 [ 2831.117199][T17468] oom_kill_process+0x25d/0x600 [ 2831.122085][T17468] out_of_memory+0x35c/0x1660 [ 2831.126792][T17468] ? io_schedule_timeout+0x150/0x150 [ 2831.132114][T17468] ? oom_killer_disable+0x2b0/0x2b0 [ 2831.137343][T17468] ? kernfs_notify+0x1ac/0x410 [ 2831.142161][T17468] mem_cgroup_out_of_memory+0x206/0x270 [ 2831.147749][T17468] ? mem_cgroup_margin+0x130/0x130 [ 2831.152916][T17468] memory_max_write+0x2f9/0x3c0 [ 2831.157811][T17468] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2831.163922][T17468] ? lock_sync+0x190/0x190 [ 2831.168382][T17468] cgroup_file_write+0x1e2/0x7b0 [ 2831.173351][T17468] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2831.179459][T17468] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2831.184858][T17468] ? __virt_addr_valid+0x61/0x2e0 [ 2831.189937][T17468] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2831.195337][T17468] kernfs_fop_write_iter+0x3f1/0x600 [ 2831.200671][T17468] vfs_write+0x945/0xd50 [ 2831.204947][T17468] ? kernel_write+0x670/0x670 [ 2831.209652][T17468] ? __fget_files+0x26a/0x480 [ 2831.214385][T17468] ksys_write+0x12b/0x250 [ 2831.218742][T17468] ? __ia32_sys_read+0xb0/0xb0 [ 2831.223536][T17468] ? syscall_enter_from_user_mode+0x26/0x80 [ 2831.229470][T17468] do_syscall_64+0x39/0xb0 [ 2831.233932][T17468] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2831.239885][T17468] RIP: 0033:0x7effd448c169 [ 2831.244329][T17468] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2831.264063][T17468] RSP: 002b:00007effd51c0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2831.272511][T17468] RAX: ffffffffffffffda RBX: 00007effd45abf80 RCX: 00007effd448c169 [ 2831.280576][T17468] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000004 [ 2831.288584][T17468] RBP: 00007effd44e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2831.296663][T17468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2831.304670][T17468] R13: 00007ffd10839cdf R14: 00007effd51c0300 R15: 0000000000022000 [ 2831.312698][T17468] [ 2831.350410][ T5048] Bluetooth: hci1: command 0x0419 tx timeout [ 2831.373369][T17468] memory: usage 9020kB, limit 0kB, failcnt 2650 [ 2831.385289][T17468] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2831.408593][T17468] Memory cgroup stats for /syz3: [ 2831.408841][T17468] anon 270336 [ 2831.408841][T17468] file 8359936 [ 2831.408841][T17468] kernel 606208 [ 2831.408841][T17468] kernel_stack 98304 [ 2831.408841][T17468] pagetables 200704 [ 2831.408841][T17468] sec_pagetables 0 [ 2831.408841][T17468] percpu 192 [ 2831.408841][T17468] sock 0 [ 2831.408841][T17468] vmalloc 0 [ 2831.408841][T17468] shmem 8351744 [ 2831.408841][T17468] zswap 0 [ 2831.408841][T17468] zswapped 0 [ 2831.408841][T17468] file_mapped 241664 [ 2831.408841][T17468] file_dirty 8192 [ 2831.408841][T17468] file_writeback 0 [ 2831.408841][T17468] swapcached 0 [ 2831.408841][T17468] anon_thp 0 [ 2831.408841][T17468] file_thp 0 [ 2831.408841][T17468] shmem_thp 0 [ 2831.408841][T17468] inactive_anon 8622080 [ 2831.408841][T17468] active_anon 0 [ 2831.408841][T17468] inactive_file 0 [ 2831.408841][T17468] active_file 4096 [ 2831.408841][T17468] unevictable 0 [ 2831.408841][T17468] slab_reclaimable 46952 [ 2831.408841][T17468] slab_unreclaimable 195128 [ 2831.408841][T17468] slab 242080 [ 2831.408841][T17468] workingset_refault_anon 0 [ 2831.408841][T17468] workingset_refault_file 1 [ 2831.408841][T17468] workingset_activate_anon 0 [ 2831.408841][T17468] workingset_activate_file 0 [ 2831.408841][T17468] workingset_restore_anon 0 [ 2831.408841][T17468] workingset_restore_file 0 [ 2831.408841][T17468] workingset_nodereclaim 0 [ 2831.408841][T17468] pgscan 199 [ 2831.408841][T17468] pgsteal 86 [ 2831.408841][T17468] pgscan_kswapd 0 [ 2831.408841][T17468] pgscan_direct 199 [ 2831.408841][T17468] pgscan_khugepaged 0 [ 2831.408841][T17468] pgsteal_kswapd 0 [ 2831.408841][T17468] pgsteal_direct 86 [ 2831.408841][T17468] pgsteal_khugepaged 0 [ 2831.408841][T17468] pgfault 89724 [ 2831.408841][T17468] pgmajfault 0 [ 2831.408841][T17468] pgrefill 192071 [ 2831.408841][T17468] pgactivate 113 [ 2831.408841][T17468] pgdeactivate 0 [ 2831.408841][T17468] pglazyfree 0 [ 2831.408841][T17468] pglazyfreed 0 [ 2831.408841][T17468] zswpin 0 [ 2831.408841][T17468] zswpout 0 [ 2831.408841][T17468] thp_fault_alloc 0 [ 2831.599657][ T5048] Bluetooth: hci2: command 0x0419 tx timeout [ 2831.615408][T17468] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17466,uid=0 [ 2831.649567][T17468] Memory cgroup out of memory: Killed process 17468 (syz-executor.3) total-vm:54548kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 08:04:22 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) r3 = syz_clone(0x100000, &(0x7f00000001c0)="58a518872160397cc6e73c37a8b107b779b05faa7538f0d4218cdfe89ac78fac3f54032580f3739d17fa1c4bdcb1", 0x2e, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="f3ee0c8aea99965091733bd061004c941ac852dc939b2f90e2a5db7559") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r3, r0, 0x0, 0x2, &(0x7f0000000300)='*\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r3, r0, 0x0, 0x2, &(0x7f0000000300)='*\x00'}, 0x30) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 08:04:22 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xe00, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:04:22 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, r0, 0x0) 08:04:22 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='thermal_temperature\x00', r2}, 0x10) r4 = perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x80, 0x1f, 0x9d, 0x6, 0x6, 0x0, 0x4, 0x800, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x7fffffff, 0x5}, 0x28, 0x1, 0x5, 0x3, 0x100000000, 0xccb, 0x3f, 0x0, 0x7, 0x0, 0x3}, r2, 0x2, r3, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 08:04:22 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000040)='cGroup\x00'}, 0x30) (async, rerun: 64) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async, rerun: 32) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x22) (async, rerun: 32) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r4], 0x12) (async) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x2) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) (rerun: 64) write$cgroup_int(r5, &(0x7f0000000200), 0x7bc03) (async) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 08:04:22 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1324c, 0x9, 0xffc5, 0x1b208d76dec320ae, 0x8, 0x0, 0xcc, 0x0, 0x200, 0x0, 0x8000}, r5, 0x0, r2, 0x1) close(r4) 08:04:22 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x1085, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:04:22 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x0, 0x0, r0, 0x0) 08:04:22 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.freeze\x00', 0x0, 0x0) openat$cgroup_devices(r1, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r3}, 0x8) openat$cgroup_int(r4, &(0x7f0000000140)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000180), 0x12) [ 2833.398244][ T8046] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 08:04:22 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x1800, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:04:22 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}, 0x0, 0x0, r0, 0x0) 08:04:22 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x1840, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2833.748829][ T8046] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 08:04:23 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) (async) r3 = syz_clone(0x100000, &(0x7f00000001c0)="58a518872160397cc6e73c37a8b107b779b05faa7538f0d4218cdfe89ac78fac3f54032580f3739d17fa1c4bdcb1", 0x2e, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="f3ee0c8aea99965091733bd061004c941ac852dc939b2f90e2a5db7559") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r3, r0, 0x0, 0x2, &(0x7f0000000300)='*\x00'}, 0x30) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 08:04:23 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.freeze\x00', 0x0, 0x0) openat$cgroup_devices(r1, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) (async) openat$cgroup_devices(r1, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r3}, 0x8) openat$cgroup_int(r4, &(0x7f0000000140)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 08:04:23 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, r0, 0x0) [ 2834.016364][ T8046] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2834.114281][ T8046] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2835.149397][ T8046] hsr_slave_0: left promiscuous mode [ 2835.158403][ T8046] hsr_slave_1: left promiscuous mode [ 2835.173724][ T8046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2835.185155][ T8046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2835.206048][ T8046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2835.217627][ T8046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2835.234204][ T8046] bridge_slave_1: left allmulticast mode [ 2835.239872][ T8046] bridge_slave_1: left promiscuous mode [ 2835.249935][ T8046] bridge0: port 2(bridge_slave_1) entered disabled state [ 2835.274811][ T8046] bridge_slave_0: left allmulticast mode [ 2835.288005][ T8046] bridge_slave_0: left promiscuous mode [ 2835.296830][ T8046] bridge0: port 1(bridge_slave_0) entered disabled state [ 2835.318392][ T8046] veth1_macvtap: left promiscuous mode [ 2835.329339][ T8046] veth0_macvtap: left promiscuous mode [ 2835.337727][ T8046] veth1_vlan: left promiscuous mode [ 2835.347638][ T8046] veth0_vlan: left promiscuous mode [ 2835.517753][ T2242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2835.529513][ T2242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2835.537723][ T2242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2835.547992][ T2242] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2835.557079][ T2242] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2835.564623][ T2242] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2835.781660][ T8046] team0 (unregistering): Port device team_slave_1 removed [ 2835.798603][ T8046] team0 (unregistering): Port device team_slave_0 removed [ 2835.807186][ T5048] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2835.816458][ T5048] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2835.826620][ T5048] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2835.835196][ T5048] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2835.842814][ T5048] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2835.847382][ T8046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2835.866277][ T8046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2835.932115][ T8046] bond0 (unregistering): Released all slaves [ 2836.152640][ T1208] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.158968][ T1208] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.291949][T17633] chnl_net:caif_netlink_parms(): no params data found [ 2836.432437][T17630] chnl_net:caif_netlink_parms(): no params data found [ 2836.460223][T17633] bridge0: port 1(bridge_slave_0) entered blocking state [ 2836.467416][T17633] bridge0: port 1(bridge_slave_0) entered disabled state [ 2836.490496][T17633] bridge_slave_0: entered allmulticast mode [ 2836.498433][T17633] bridge_slave_0: entered promiscuous mode [ 2836.534187][T17633] bridge0: port 2(bridge_slave_1) entered blocking state [ 2836.550178][T17633] bridge0: port 2(bridge_slave_1) entered disabled state [ 2836.558143][T17633] bridge_slave_1: entered allmulticast mode [ 2836.565271][T17633] bridge_slave_1: entered promiscuous mode [ 2836.668630][T17633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2836.744758][T17633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2836.832889][T17630] bridge0: port 1(bridge_slave_0) entered blocking state [ 2836.867905][T17630] bridge0: port 1(bridge_slave_0) entered disabled state [ 2836.890373][T17630] bridge_slave_0: entered allmulticast mode [ 2836.899380][T17630] bridge_slave_0: entered promiscuous mode [ 2836.917251][T17633] team0: Port device team_slave_0 added [ 2836.946698][T17630] bridge0: port 2(bridge_slave_1) entered blocking state [ 2836.958215][T17630] bridge0: port 2(bridge_slave_1) entered disabled state [ 2836.972051][T17630] bridge_slave_1: entered allmulticast mode [ 2836.979024][T17630] bridge_slave_1: entered promiscuous mode [ 2836.995098][T17633] team0: Port device team_slave_1 added [ 2837.124554][T17630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2837.149033][T17633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2837.160304][T17633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2837.204765][T17633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2837.223984][T17630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2837.244440][T17633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2837.258121][T17633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2837.284869][T17633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2837.358208][T17630] team0: Port device team_slave_0 added [ 2837.391699][T17630] team0: Port device team_slave_1 added [ 2837.419327][T17633] hsr_slave_0: entered promiscuous mode [ 2837.431334][T17633] hsr_slave_1: entered promiscuous mode [ 2837.450740][T17633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2837.458327][T17633] Cannot create hsr debugfs directory [ 2837.490651][T17630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2837.497633][T17630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2837.560782][T17630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2837.592603][ T5048] Bluetooth: hci2: command 0x0409 tx timeout [ 2837.633278][T17630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2837.666897][T17630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2837.730236][T17630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2837.836035][T17630] hsr_slave_0: entered promiscuous mode [ 2837.860188][T17630] hsr_slave_1: entered promiscuous mode [ 2837.870498][T17630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2837.878096][T17630] Cannot create hsr debugfs directory [ 2837.920211][ T5048] Bluetooth: hci4: command 0x0409 tx timeout [ 2838.971597][T17633] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2839.009789][T17633] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2839.035223][T17633] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2839.052945][T17633] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2839.092730][T17630] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2839.105189][T17630] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2839.116359][T17630] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2839.148248][T17630] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2839.275970][T17633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2839.294458][T17630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2839.313677][T17633] 8021q: adding VLAN 0 to HW filter on device team0 [ 2839.323580][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2839.333139][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2839.359401][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2839.375876][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2839.386212][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2839.405393][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2839.416286][T26745] bridge0: port 1(bridge_slave_0) entered blocking state [ 2839.423431][T26745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2839.442373][T17630] 8021q: adding VLAN 0 to HW filter on device team0 [ 2839.453002][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2839.469483][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2839.479696][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2839.497667][T14297] bridge0: port 2(bridge_slave_1) entered blocking state [ 2839.504828][T14297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2839.543097][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2839.557725][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2839.569878][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2839.587771][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2839.607540][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2839.617517][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2839.634248][ T8432] bridge0: port 1(bridge_slave_0) entered blocking state [ 2839.641420][ T8432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2839.657346][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2839.666212][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2839.680050][ T5048] Bluetooth: hci2: command 0x041b tx timeout [ 2839.690919][ T8432] bridge0: port 2(bridge_slave_1) entered blocking state [ 2839.698026][ T8432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2839.719580][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2839.729717][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2839.748210][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2839.756714][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2839.798702][T17633] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2839.822106][T17633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2839.844202][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2839.859573][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2839.876392][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2839.887572][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2839.906066][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2839.925470][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2839.938005][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2839.954720][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2839.966939][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2839.979937][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2839.990695][ T5048] Bluetooth: hci4: command 0x041b tx timeout [ 2840.007344][T17630] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2840.046046][T17630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2840.064892][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2840.078401][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2840.104097][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2840.135625][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2840.165845][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2840.176767][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2840.216416][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2840.379684][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2840.392584][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2840.409396][T17633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2840.451657][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2840.469303][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2840.518202][T17633] veth0_vlan: entered promiscuous mode [ 2840.536909][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2840.556426][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2840.569153][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2840.577146][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2840.590776][T17633] veth1_vlan: entered promiscuous mode [ 2840.602754][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2840.614362][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2840.623760][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2840.644057][T17630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2840.704572][T17633] veth0_macvtap: entered promiscuous mode [ 2840.723383][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2840.732111][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2840.741456][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2840.751023][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2840.759803][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2840.771239][T17633] veth1_macvtap: entered promiscuous mode [ 2840.798450][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2840.815741][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2840.836699][T17630] veth0_vlan: entered promiscuous mode [ 2840.854102][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2840.869007][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2840.885338][T17630] veth1_vlan: entered promiscuous mode [ 2840.894310][T17633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2840.916778][T17633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2840.929760][T17633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2840.948324][T17633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2840.959601][T17633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2840.978207][T17633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2840.988105][T17633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2841.006824][T17633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2841.029947][T17633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2841.052755][T17633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2841.064558][T17633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2841.072567][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2841.081907][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2841.089798][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2841.098867][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2841.108158][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2841.129431][T17633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2841.141861][T17633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2841.152859][T17633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2841.163834][T17633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2841.174331][T17633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2841.185208][T17633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2841.196181][T17633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2841.206981][T17633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2841.217263][T17633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2841.228023][T17633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2841.242864][T17633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2841.260152][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2841.268346][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2841.281763][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2841.307165][T17630] veth0_macvtap: entered promiscuous mode [ 2841.333245][T17633] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2841.358659][T17633] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2841.380270][T17633] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2841.389007][T17633] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2841.418270][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2841.427316][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2841.441847][T17630] veth1_macvtap: entered promiscuous mode [ 2841.479877][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2841.512222][T17630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2841.543452][T17630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2841.553789][T17630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2841.565988][T17630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2841.576876][T17630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2841.597359][T17630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2841.607553][T17630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2841.618367][T17630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2841.629291][T17630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2841.640318][T17630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2841.651302][T17630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2841.662124][T17630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2841.674549][T17630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2841.693175][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2841.704650][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2841.737831][T17630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2841.750329][ T5048] Bluetooth: hci2: command 0x040f tx timeout [ 2841.760367][T17630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2841.779353][T17630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2841.790566][T17630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2841.818054][T17630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2841.839648][T17630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2841.851193][T17630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2841.862468][T17630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2841.872602][T17630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2841.888706][T17630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2841.898946][T17630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2841.911295][T17630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2841.922936][T17630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2841.938382][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2841.958395][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2841.971355][T15391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2841.979488][T15391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2841.994169][T17630] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2842.006600][T17630] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2842.019376][T17630] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2842.028987][T17630] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2842.059438][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2842.070377][ T5048] Bluetooth: hci4: command 0x040f tx timeout [ 2842.139449][T15391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2842.173136][T15391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2842.242880][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2842.269670][ T8046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2842.305831][ T8046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2842.340793][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2842.377647][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2842.414515][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2842.429133][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2842.495584][T17781] syz-executor.3 invoked oom-killer: gfp_mask=0x101cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), order=0, oom_score_adj=1000 [ 2842.516431][T17781] CPU: 1 PID: 17781 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2842.526909][T17781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2842.536993][T17781] Call Trace: [ 2842.540294][T17781] [ 2842.543248][T17781] dump_stack_lvl+0x136/0x150 [ 2842.547994][T17781] dump_header+0x10a/0xd70 [ 2842.552450][T17781] oom_kill_process+0x25d/0x600 [ 2842.557343][T17781] out_of_memory+0x35c/0x1660 [ 2842.562045][T17781] ? find_held_lock+0x2d/0x110 [ 2842.566812][T17781] ? oom_killer_disable+0x2b0/0x2b0 [ 2842.572026][T17781] ? rcu_read_unlock+0x9/0x60 [ 2842.576736][T17781] ? find_held_lock+0x2d/0x110 [ 2842.581532][T17781] mem_cgroup_out_of_memory+0x206/0x270 [ 2842.587079][T17781] ? mem_cgroup_margin+0x130/0x130 [ 2842.592185][T17781] ? lock_downgrade+0x690/0x690 [ 2842.597043][T17781] try_charge_memcg+0xf99/0x13a0 [ 2842.601985][T17781] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2842.607968][T17781] ? rcu_read_unlock+0x9/0x60 [ 2842.612639][T17781] ? lock_downgrade+0x690/0x690 [ 2842.617492][T17781] charge_memcg+0x90/0x3b0 [ 2842.621920][T17781] __mem_cgroup_charge+0x2b/0x90 [ 2842.626867][T17781] ? folio_flags.constprop.0+0x53/0x150 [ 2842.632410][T17781] __filemap_add_folio+0x617/0xe60 [ 2842.637519][T17781] ? lock_downgrade+0x690/0x690 [ 2842.642367][T17781] ? filemap_write_and_wait_range+0x120/0x120 [ 2842.648450][T17781] ? memcg_list_lru_alloc+0xb00/0xb00 [ 2842.653840][T17781] ? alloc_pages+0x1b2/0x270 [ 2842.658457][T17781] ? folio_alloc+0x43/0x70 [ 2842.662870][T17781] filemap_add_folio+0xaf/0x1e0 [ 2842.667721][T17781] ? __filemap_add_folio+0xe60/0xe60 [ 2842.673016][T17781] ? ext4_xattr_security_set+0x50/0x50 [ 2842.678490][T17781] ? __vfs_getxattr+0x140/0x1a0 [ 2842.683342][T17781] __filemap_get_folio+0x305/0x990 [ 2842.688458][T17781] ext4_da_write_begin+0x3c5/0x8c0 [ 2842.693584][T17781] ? ext4_write_begin+0x1030/0x1030 [ 2842.698782][T17781] ? current_time+0x1fe/0x2c0 [ 2842.703457][T17781] generic_perform_write+0x256/0x570 [ 2842.708745][T17781] ? generic_file_readonly_mmap+0x180/0x180 [ 2842.714634][T17781] ? iunique+0x370/0x370 [ 2842.718876][T17781] ext4_buffered_write_iter+0x15b/0x460 [ 2842.724421][T17781] ext4_file_write_iter+0xbe0/0x1740 [ 2842.729708][T17781] ? __lock_acquire+0xbe1/0x5df0 [ 2842.734643][T17781] ? ext4_file_mmap+0x6c0/0x6c0 [ 2842.739496][T17781] ? stack_trace_save+0x90/0xc0 [ 2842.744369][T17781] __kernel_write_iter+0x262/0x7a0 [ 2842.749493][T17781] ? vfs_read+0x8a0/0x8a0 [ 2842.753849][T17781] ? find_held_lock+0x2d/0x110 [ 2842.758610][T17781] __kernel_write+0xcb/0x110 [ 2842.763190][T17781] ? __kernel_write_iter+0x7a0/0x7a0 [ 2842.768481][T17781] ? cgroup_freezing+0x13d/0x3b0 [ 2842.773414][T17781] ? freezing_slow_path+0x5c/0x180 [ 2842.778525][T17781] dump_emit+0x21d/0x340 [ 2842.782765][T17781] ? __dump_skip+0x5c0/0x5c0 [ 2842.787363][T17781] ? elf_core_dump+0x1e39/0x36e0 [ 2842.792307][T17781] elf_core_dump+0x1ffb/0x36e0 [ 2842.797083][T17781] ? load_elf_phdrs+0x210/0x210 [ 2842.801930][T17781] ? kvmalloc_node+0xa2/0x1a0 [ 2842.806604][T17781] ? kasan_save_stack+0x32/0x40 [ 2842.811449][T17781] ? kasan_set_track+0x25/0x30 [ 2842.816206][T17781] ? __kasan_kmalloc+0xa2/0xb0 [ 2842.820973][T17781] ? __kmalloc_node+0x61/0x1a0 [ 2842.825755][T17781] ? __lock_acquire+0x1916/0x5df0 [ 2842.830795][T17781] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2842.836805][T17781] do_coredump+0x2ed0/0x3fb0 [ 2842.841407][T17781] ? dump_emit+0x340/0x340 [ 2842.845823][T17781] ? find_held_lock+0x2d/0x110 [ 2842.850598][T17781] ? debug_check_no_obj_freed+0x210/0x420 [ 2842.856330][T17781] ? debug_check_no_obj_freed+0x210/0x420 [ 2842.862046][T17781] ? find_held_lock+0x2d/0x110 [ 2842.866810][T17781] ? gmbus_xfer+0x150/0x1c0 [ 2842.871335][T17781] ? _raw_spin_unlock_irq+0x23/0x50 [ 2842.876565][T17781] get_signal+0x1bff/0x25b0 [ 2842.881070][T17781] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 2842.886873][T17781] ? exit_signals+0x910/0x910 [ 2842.891550][T17781] arch_do_signal_or_restart+0x79/0x5c0 [ 2842.897092][T17781] ? get_sigframe_size+0x10/0x10 [ 2842.902026][T17781] ? exc_general_protection+0x18e/0x230 [ 2842.907567][T17781] exit_to_user_mode_prepare+0x11f/0x240 [ 2842.913201][T17781] irqentry_exit_to_user_mode+0x9/0x40 [ 2842.918666][T17781] asm_exc_general_protection+0x26/0x30 [ 2842.924212][T17781] RIP: 0033:0x7f6f8728c171 [ 2842.928619][T17781] Code: c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 2842.948216][T17781] RSP: 002b:00000000200001e0 EFLAGS: 00010217 [ 2842.954280][T17781] RAX: 0000000000000000 RBX: 00007f6f873ac050 RCX: 00007f6f8728c169 [ 2842.962250][T17781] RDX: 0000000020000240 RSI: 00000000200001e0 RDI: 0000000000100000 [ 2842.970236][T17781] RBP: 00007f6f872e7ca1 R08: 00000000200002c0 R09: 00000000200002c0 [ 2842.978214][T17781] R10: 0000000020000280 R11: 0000000000000206 R12: 0000000000000000 [ 2842.986176][T17781] R13: 00007ffdb394674f R14: 00007f6f85ddd300 R15: 0000000000022000 [ 2842.994147][T17781] [ 2843.017833][T17781] memory: usage 9072kB, limit 0kB, failcnt 2671 [ 2843.024258][T17781] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2843.038682][T17781] Memory cgroup stats for /syz3: [ 2843.038902][T17781] anon 237568 [ 2843.038902][T17781] file 8351744 [ 2843.038902][T17781] kernel 700416 [ 2843.038902][T17781] kernel_stack 163840 [ 2843.038902][T17781] pagetables 217088 [ 2843.038902][T17781] sec_pagetables 0 [ 2843.038902][T17781] percpu 192 [ 2843.038902][T17781] sock 0 [ 2843.038902][T17781] vmalloc 0 [ 2843.038902][T17781] shmem 8351744 [ 2843.038902][T17781] zswap 0 [ 2843.038902][T17781] zswapped 0 [ 2843.038902][T17781] file_mapped 241664 [ 2843.038902][T17781] file_dirty 0 [ 2843.038902][T17781] file_writeback 0 [ 2843.038902][T17781] swapcached 0 [ 2843.038902][T17781] anon_thp 0 [ 2843.038902][T17781] file_thp 0 [ 2843.038902][T17781] shmem_thp 0 [ 2843.038902][T17781] inactive_anon 8458240 [ 2843.038902][T17781] active_anon 131072 [ 2843.038902][T17781] inactive_file 0 [ 2843.038902][T17781] active_file 0 [ 2843.038902][T17781] unevictable 0 [ 2843.038902][T17781] slab_reclaimable 45760 [ 2843.038902][T17781] slab_unreclaimable 205952 [ 2843.038902][T17781] slab 251712 [ 2843.038902][T17781] workingset_refault_anon 0 [ 2843.038902][T17781] workingset_refault_file 1 [ 2843.038902][T17781] workingset_activate_anon 0 [ 2843.038902][T17781] workingset_activate_file 0 [ 2843.038902][T17781] workingset_restore_anon 0 [ 2843.038902][T17781] workingset_restore_file 0 [ 2843.038902][T17781] workingset_nodereclaim 0 [ 2843.038902][T17781] pgscan 199 [ 2843.038902][T17781] pgsteal 86 [ 2843.038902][T17781] pgscan_kswapd 0 [ 2843.038902][T17781] pgscan_direct 199 [ 2843.038902][T17781] pgscan_khugepaged 0 [ 2843.038902][T17781] pgsteal_kswapd 0 [ 2843.038902][T17781] pgsteal_direct 86 [ 2843.038902][T17781] pgsteal_khugepaged 0 [ 2843.038902][T17781] pgfault 89780 [ 2843.038902][T17781] pgmajfault 0 [ 2843.038902][T17781] pgrefill 192071 [ 2843.038902][T17781] pgactivate 113 [ 2843.038902][T17781] pgdeactivate 0 [ 2843.038902][T17781] pglazyfree 0 [ 2843.038902][T17781] pglazyfreed 0 [ 2843.038902][T17781] zswpin 0 [ 2843.038902][T17781] zswpout 0 [ 2843.038902][T17781] thp_fault_alloc 0 [ 2843.299199][T17781] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17633,uid=0 [ 2843.325075][T17781] Memory cgroup out of memory: Killed process 17633 (syz-executor.3) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2843.371669][T17788] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2843.382434][T17788] CPU: 1 PID: 17788 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2843.392882][T17788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2843.402962][T17788] Call Trace: [ 2843.406266][T17788] [ 2843.409212][T17788] dump_stack_lvl+0x136/0x150 [ 2843.413954][T17788] dump_header+0x10a/0xd70 [ 2843.418402][T17788] oom_kill_process+0x25d/0x600 [ 2843.423289][T17788] out_of_memory+0x35c/0x1660 [ 2843.427998][T17788] ? io_schedule_timeout+0x150/0x150 [ 2843.433316][T17788] ? oom_killer_disable+0x2b0/0x2b0 [ 2843.438540][T17788] ? kernfs_notify+0x1ac/0x410 [ 2843.443346][T17788] mem_cgroup_out_of_memory+0x206/0x270 [ 2843.448911][T17788] ? mem_cgroup_margin+0x130/0x130 [ 2843.454050][T17788] memory_max_write+0x2f9/0x3c0 [ 2843.458921][T17788] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2843.465010][T17788] ? lock_sync+0x190/0x190 [ 2843.469447][T17788] cgroup_file_write+0x1e2/0x7b0 [ 2843.474393][T17788] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2843.480491][T17788] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2843.485884][T17788] ? __virt_addr_valid+0x61/0x2e0 [ 2843.490946][T17788] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2843.496339][T17788] kernfs_fop_write_iter+0x3f1/0x600 [ 2843.501656][T17788] vfs_write+0x945/0xd50 [ 2843.505915][T17788] ? kernel_write+0x670/0x670 [ 2843.510601][T17788] ? __fget_files+0x26a/0x480 [ 2843.515312][T17788] ksys_write+0x12b/0x250 [ 2843.519645][T17788] ? __ia32_sys_read+0xb0/0xb0 [ 2843.524421][T17788] ? syscall_enter_from_user_mode+0x26/0x80 [ 2843.530333][T17788] do_syscall_64+0x39/0xb0 [ 2843.534861][T17788] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2843.540771][T17788] RIP: 0033:0x7ff99088c169 [ 2843.545193][T17788] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2843.564822][T17788] RSP: 002b:00007ff991690168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2843.573247][T17788] RAX: ffffffffffffffda RBX: 00007ff9909ac050 RCX: 00007ff99088c169 [ 2843.581223][T17788] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 2843.589196][T17788] RBP: 00007ff9908e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2843.597179][T17788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2843.605156][T17788] R13: 00007ffce9ead64f R14: 00007ff991690300 R15: 0000000000022000 [ 2843.613247][T17788] [ 2843.639013][T17788] memory: usage 9144kB, limit 0kB, failcnt 2715 [ 2843.645492][T17788] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2843.652896][T17788] Memory cgroup stats for /syz0: [ 2843.653086][T17788] anon 90112 [ 2843.653086][T17788] file 8851456 [ 2843.653086][T17788] kernel 405504 [ 2843.653086][T17788] kernel_stack 131072 [ 2843.653086][T17788] pagetables 81920 [ 2843.653086][T17788] sec_pagetables 0 [ 2843.653086][T17788] percpu 64 [ 2843.653086][T17788] sock 0 [ 2843.653086][T17788] vmalloc 0 [ 2843.653086][T17788] shmem 8343552 [ 2843.653086][T17788] zswap 0 [ 2843.653086][T17788] zswapped 0 [ 2843.653086][T17788] file_mapped 274432 [ 2843.653086][T17788] file_dirty 507904 [ 2843.653086][T17788] file_writeback 0 [ 2843.653086][T17788] swapcached 0 [ 2843.653086][T17788] anon_thp 0 [ 2843.653086][T17788] file_thp 0 [ 2843.653086][T17788] shmem_thp 0 [ 2843.653086][T17788] inactive_anon 8433664 [ 2843.653086][T17788] active_anon 0 [ 2843.653086][T17788] inactive_file 0 [ 2843.653086][T17788] active_file 507904 [ 2843.653086][T17788] unevictable 0 [ 2843.653086][T17788] slab_reclaimable 68096 [ 2843.653086][T17788] slab_unreclaimable 98272 [ 2843.653086][T17788] slab 166368 [ 2843.653086][T17788] workingset_refault_anon 0 [ 2843.653086][T17788] workingset_refault_file 0 [ 2843.653086][T17788] workingset_activate_anon 0 [ 2843.653086][T17788] workingset_activate_file 0 [ 2843.653086][T17788] workingset_restore_anon 0 [ 2843.653086][T17788] workingset_restore_file 0 [ 2843.653086][T17788] workingset_nodereclaim 0 [ 2843.653086][T17788] pgscan 875 [ 2843.653086][T17788] pgsteal 403 [ 2843.653086][T17788] pgscan_kswapd 0 [ 2843.653086][T17788] pgscan_direct 875 [ 2843.653086][T17788] pgscan_khugepaged 0 [ 2843.653086][T17788] pgsteal_kswapd 0 [ 2843.653086][T17788] pgsteal_direct 403 [ 2843.653086][T17788] pgsteal_khugepaged 0 [ 2843.653086][T17788] pgfault 130999 [ 2843.653086][T17788] pgmajfault 0 [ 2843.653086][T17788] pgrefill 1294917 [ 2843.653086][T17788] pgactivate 472 [ 2843.653086][T17788] pgdeactivate 0 [ 2843.653086][T17788] pglazyfree 0 [ 2843.653086][T17788] pglazyfreed 0 [ 2843.653086][T17788] zswpin 0 [ 2843.653086][T17788] zswpout 0 [ 2843.841911][ T5048] Bluetooth: hci2: command 0x0419 tx timeout [ 2843.853461][T17788] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=17630,uid=0 [ 2843.897722][T17788] Memory cgroup out of memory: Killed process 17630 (syz-executor.0) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 08:04:34 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r3 = getpid() r4 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x3, 0x1, 0x2, 0x7, 0x0, 0x200, 0x800, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x20, 0x80000001, 0x4, 0x1, 0x2, 0x485b, 0x8, 0x0, 0x80000000, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x2) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x8, 0x7f, 0x1, 0x7, 0x0, 0x5, 0x401, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x8, 0x7, 0x0, 0x2, 0x1000, 0x1, 0x3b, 0x0, 0x8, 0x0, 0x2}, r3, 0x2, r4, 0x3) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x2, 0x3f, 0x2, 0x0, 0x1c00000000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x6, 0x5}, 0x0, 0x4, 0x8ae, 0x1, 0x3, 0x1000, 0x9, 0x0, 0xfffffff7, 0x0, 0x4}, 0x0, 0x10, 0xffffffffffffffff, 0x2) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 08:04:34 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x1b00, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:04:34 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0x0, 0x0, r0, 0x0) 08:04:34 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.freeze\x00', 0x0, 0x0) openat$cgroup_devices(r1, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r3}, 0x8) openat$cgroup_int(r4, &(0x7f0000000140)='cpuset.sched_load_balance\x00', 0x2, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 08:04:34 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1324c, 0x9, 0xffc5, 0x1b208d76dec320ae, 0x8, 0x0, 0xcc, 0x0, 0x200, 0x0, 0x8000}, r5, 0x0, r2, 0x1) close(r4) 08:04:34 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="66031021a190be3cce3d5aad4e1ccad18d0cef0371f7fbd15fc652dd4c2fa478862560317139a6c953b198e5d1bdd016414967d829b1492d6df3f1b194e955e7b80971504a55cf720561632a552f6a", 0x4f}, {&(0x7f00000002c0)="38e7e47eddbc2517617af9172060f0c0068d0279ae4bac3a6fce1663dc13f0dc82de290de5d082ce361af6c0b90b5ad61c5f0d90c33b47df65c5aff988609229be0783ff4beaa4370d7ee6d3d91b38bad0feece709b96ff0354d16a838fc65bd052ad3c7b8c06974764a1a8bc960c37eff822dcb5d6f84fe17340f1d65337e8306db05c0239abb9476fd5c7ca372cb484f8ef75741fdce4a69442b3aa88d7c0a94539ea8d18698bef60e2750d9e77ebd9c4c8f6e8469885c399e9d6e1fc59fefb4637907a1493bfe10110a7c6b0f3653ce6bd013072fcf3c38d4121e9f58b4a3e51955f092a2b43cddb59f6f8e672ff70fb7fe71", 0xf4}], 0x2, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010100, @local}}}], 0x20}, 0x40002) r3 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000540)={0x9, 0x80, 0x7f, 0x9, 0x5, 0x2, 0x0, 0x9, 0x200, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x6, 0x4}, 0x6400, 0x4, 0x5, 0x9, 0x9, 0x8, 0x1, 0x0, 0xc3, 0x0, 0x9}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x3) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='memory.max\x00') write$cgroup_int(r3, &(0x7f0000000180), 0x12) 08:04:34 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x1d00, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:04:34 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001}, 0x0, 0x0, r0, 0x0) [ 2845.856973][ T5181] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 08:04:35 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x1f00, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:04:35 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0xd4) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0xffffffffffffffc0, 0x12) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES8=r6], 0x12) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x8, 0x40, 0x40, 0x81, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000100), 0xf}, 0x8, 0x80000001, 0x5, 0x8, 0x4, 0xd2de, 0x200, 0x0, 0x6, 0x0, 0x6}, 0x0, 0x8, r5, 0x11) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 08:04:35 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, r0, 0x0) 08:04:35 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x2000, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:04:35 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r3 = getpid() (async) r4 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x3, 0x1, 0x2, 0x7, 0x0, 0x200, 0x800, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x20, 0x80000001, 0x4, 0x1, 0x2, 0x485b, 0x8, 0x0, 0x80000000, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x2) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x8, 0x7f, 0x1, 0x7, 0x0, 0x5, 0x401, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x8, 0x7, 0x0, 0x2, 0x1000, 0x1, 0x3b, 0x0, 0x8, 0x0, 0x2}, r3, 0x2, r4, 0x3) (async) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x2, 0x3f, 0x2, 0x0, 0x1c00000000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x6, 0x5}, 0x0, 0x4, 0x8ae, 0x1, 0x3, 0x1000, 0x9, 0x0, 0xfffffff7, 0x0, 0x4}, 0x0, 0x10, 0xffffffffffffffff, 0x2) (async) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 08:04:35 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 32) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="66031021a190be3cce3d5aad4e1ccad18d0cef0371f7fbd15fc652dd4c2fa478862560317139a6c953b198e5d1bdd016414967d829b1492d6df3f1b194e955e7b80971504a55cf720561632a552f6a", 0x4f}, {&(0x7f00000002c0)="38e7e47eddbc2517617af9172060f0c0068d0279ae4bac3a6fce1663dc13f0dc82de290de5d082ce361af6c0b90b5ad61c5f0d90c33b47df65c5aff988609229be0783ff4beaa4370d7ee6d3d91b38bad0feece709b96ff0354d16a838fc65bd052ad3c7b8c06974764a1a8bc960c37eff822dcb5d6f84fe17340f1d65337e8306db05c0239abb9476fd5c7ca372cb484f8ef75741fdce4a69442b3aa88d7c0a94539ea8d18698bef60e2750d9e77ebd9c4c8f6e8469885c399e9d6e1fc59fefb4637907a1493bfe10110a7c6b0f3653ce6bd013072fcf3c38d4121e9f58b4a3e51955f092a2b43cddb59f6f8e672ff70fb7fe71", 0xf4}], 0x2, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010100, @local}}}], 0x20}, 0x40002) (async) r3 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000540)={0x9, 0x80, 0x7f, 0x9, 0x5, 0x2, 0x0, 0x9, 0x200, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x6, 0x4}, 0x6400, 0x4, 0x5, 0x9, 0x9, 0x8, 0x1, 0x0, 0xc3, 0x0, 0x9}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x3) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='memory.max\x00') (async, rerun: 32) write$cgroup_int(r3, &(0x7f0000000180), 0x12) (rerun: 32) 08:04:35 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000}, 0x0, 0x0, r0, 0x0) 08:04:35 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x2085, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2846.530420][T17834] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2846.588023][ T5181] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2846.610320][T17834] CPU: 1 PID: 17834 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2846.620787][T17834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2846.630954][T17834] Call Trace: [ 2846.634247][T17834] [ 2846.637195][T17834] dump_stack_lvl+0x136/0x150 [ 2846.641920][T17834] dump_header+0x10a/0xd70 [ 2846.646367][T17834] oom_kill_process+0x25d/0x600 [ 2846.651338][T17834] out_of_memory+0x35c/0x1660 [ 2846.656052][T17834] ? oom_killer_disable+0x2b0/0x2b0 [ 2846.661277][T17834] ? find_held_lock+0x2d/0x110 [ 2846.666080][T17834] mem_cgroup_out_of_memory+0x206/0x270 [ 2846.671669][T17834] ? mem_cgroup_margin+0x130/0x130 [ 2846.676833][T17834] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2846.682690][T17834] memory_max_write+0x2f9/0x3c0 [ 2846.687583][T17834] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2846.693693][T17834] ? lock_sync+0x190/0x190 [ 2846.698150][T17834] cgroup_file_write+0x1e2/0x7b0 [ 2846.703119][T17834] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2846.709225][T17834] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2846.714623][T17834] ? __virt_addr_valid+0x61/0x2e0 [ 2846.719683][T17834] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2846.725070][T17834] kernfs_fop_write_iter+0x3f1/0x600 [ 2846.730388][T17834] vfs_write+0x945/0xd50 [ 2846.734641][T17834] ? kernel_write+0x670/0x670 [ 2846.739324][T17834] ? __fget_files+0x26a/0x480 [ 2846.744039][T17834] ksys_write+0x12b/0x250 [ 2846.748372][T17834] ? __ia32_sys_read+0xb0/0xb0 [ 2846.753143][T17834] ? syscall_enter_from_user_mode+0x26/0x80 [ 2846.759055][T17834] do_syscall_64+0x39/0xb0 [ 2846.763500][T17834] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2846.769416][T17834] RIP: 0033:0x7f14cd68c169 [ 2846.773845][T17834] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2846.793461][T17834] RSP: 002b:00007f14ce39e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2846.801887][T17834] RAX: ffffffffffffffda RBX: 00007f14cd7ac050 RCX: 00007f14cd68c169 [ 2846.809865][T17834] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000004 [ 2846.817838][T17834] RBP: 00007f14cd6e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2846.825813][T17834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2846.833786][T17834] R13: 00007ffcad3b41ff R14: 00007f14ce39e300 R15: 0000000000022000 [ 2846.841776][T17834] 08:04:36 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1324c, 0x9, 0xffc5, 0x1b208d76dec320ae, 0x8, 0x80000000, 0x0, 0x0, 0x200, 0x0, 0x8000}, r5, 0x0, r2, 0x1) close(r4) 08:04:36 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, r0, 0x0) 08:04:36 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x3f00, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2846.910170][T17834] memory: usage 10964kB, limit 0kB, failcnt 2511 [ 2846.930254][T17834] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2846.980254][T17834] Memory cgroup stats for /syz2: [ 2846.980510][T17834] anon 147456 [ 2846.980510][T17834] file 10747904 [ 2846.980510][T17834] kernel 327680 [ 2846.980510][T17834] kernel_stack 65536 [ 2846.980510][T17834] pagetables 77824 [ 2846.980510][T17834] sec_pagetables 0 [ 2846.980510][T17834] percpu 64 [ 2846.980510][T17834] sock 0 [ 2846.980510][T17834] vmalloc 0 [ 2846.980510][T17834] shmem 10440704 [ 2846.980510][T17834] zswap 0 [ 2846.980510][T17834] zswapped 0 [ 2846.980510][T17834] file_mapped 262144 [ 2846.980510][T17834] file_dirty 307200 [ 2846.980510][T17834] file_writeback 0 [ 2846.980510][T17834] swapcached 0 [ 2846.980510][T17834] anon_thp 0 [ 2846.980510][T17834] file_thp 0 [ 2846.980510][T17834] shmem_thp 0 [ 2846.980510][T17834] inactive_anon 10588160 [ 2846.980510][T17834] active_anon 0 [ 2846.980510][T17834] inactive_file 0 [ 2846.980510][T17834] active_file 307200 [ 2846.980510][T17834] unevictable 0 [ 2846.980510][T17834] slab_reclaimable 63008 [ 2846.980510][T17834] slab_unreclaimable 87344 [ 2846.980510][T17834] slab 150352 [ 2846.980510][T17834] workingset_refault_anon 0 [ 2846.980510][T17834] workingset_refault_file 0 [ 2846.980510][T17834] workingset_activate_anon 0 [ 2846.980510][T17834] workingset_activate_file 0 [ 2846.980510][T17834] workingset_restore_anon 0 [ 2846.980510][T17834] workingset_restore_file 0 [ 2846.980510][T17834] workingset_nodereclaim 0 [ 2846.980510][T17834] pgscan 1983 [ 2846.980510][T17834] pgsteal 31 [ 2846.980510][T17834] pgscan_kswapd 0 [ 2846.980510][T17834] pgscan_direct 1983 [ 2846.980510][T17834] pgscan_khugepaged 0 [ 2846.980510][T17834] pgsteal_kswapd 0 [ 2846.980510][T17834] pgsteal_direct 31 [ 2846.980510][T17834] pgsteal_khugepaged 0 [ 2846.980510][T17834] pgfault 73972 [ 2846.980510][T17834] pgmajfault 0 [ 2846.980510][T17834] pgrefill 1274772 [ 2846.980510][T17834] pgactivate 1952 [ 2846.980510][T17834] pgdeactivate 0 [ 2846.980510][T17834] pglazyfree 0 [ 2846.980510][T17834] pglazyfreed 0 [ 2846.980510][T17834] zswpin 0 [ 2846.980510][T17834] zswpout 0 08:04:36 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4000, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2847.178667][ T5181] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 08:04:36 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4018, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2847.336483][ T5181] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2847.710284][T17834] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17828,uid=0 08:04:37 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0xd4) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0xffffffffffffffc0, 0x12) close(r4) (async) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES8=r6], 0x12) (async) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x8, 0x40, 0x40, 0x81, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000100), 0xf}, 0x8, 0x80000001, 0x5, 0x8, 0x4, 0xd2de, 0x200, 0x0, 0x6, 0x0, 0x6}, 0x0, 0x8, r5, 0x11) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 08:04:37 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4800, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:04:37 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, r0, 0x0) [ 2847.753388][T17834] Memory cgroup out of memory: Killed process 17834 (syz-executor.2) total-vm:54680kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2847.967222][T17360] syz-executor.2 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=0 [ 2847.979841][T17360] CPU: 1 PID: 17360 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2847.990384][T17360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2848.000460][T17360] Call Trace: [ 2848.003754][T17360] [ 2848.006697][T17360] dump_stack_lvl+0x136/0x150 [ 2848.011417][T17360] dump_header+0x10a/0xd70 [ 2848.015848][T17360] oom_kill_process+0x25d/0x600 [ 2848.020711][T17360] out_of_memory+0x35c/0x1660 [ 2848.025395][T17360] ? find_held_lock+0x2d/0x110 [ 2848.030170][T17360] ? oom_killer_disable+0x2b0/0x2b0 [ 2848.035373][T17360] ? rcu_read_unlock+0x9/0x60 [ 2848.040067][T17360] ? find_held_lock+0x2d/0x110 [ 2848.044845][T17360] mem_cgroup_out_of_memory+0x206/0x270 [ 2848.050432][T17360] ? mem_cgroup_margin+0x130/0x130 [ 2848.055553][T17360] ? lock_downgrade+0x690/0x690 [ 2848.060429][T17360] try_charge_memcg+0xf99/0x13a0 [ 2848.065389][T17360] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2848.071386][T17360] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2848.077119][T17360] ? lock_downgrade+0x690/0x690 [ 2848.082001][T17360] ? lock_downgrade+0x690/0x690 [ 2848.086885][T17360] ? rcu_read_unlock+0x9/0x60 [ 2848.091593][T17360] obj_cgroup_charge+0x2af/0x5e0 [ 2848.096563][T17360] ? __alloc_file+0x21/0x270 [ 2848.101170][T17360] kmem_cache_alloc+0xb1/0x3b0 [ 2848.105973][T17360] __alloc_file+0x21/0x270 [ 2848.110427][T17360] alloc_empty_file+0x71/0x190 [ 2848.115204][T17360] path_openat+0xe6/0x2750 [ 2848.119644][T17360] ? path_lookupat+0x840/0x840 [ 2848.124431][T17360] do_filp_open+0x1ba/0x410 [ 2848.128951][T17360] ? may_open_dev+0xf0/0xf0 [ 2848.133474][T17360] ? find_held_lock+0x2d/0x110 [ 2848.138254][T17360] ? alloc_fd+0x2e4/0x750 [ 2848.142604][T17360] ? do_raw_spin_lock+0x124/0x2b0 [ 2848.147647][T17360] ? spin_bug+0x1c0/0x1c0 [ 2848.151998][T17360] ? _raw_spin_unlock+0x28/0x40 [ 2848.156867][T17360] ? alloc_fd+0x2e4/0x750 [ 2848.161218][T17360] do_sys_openat2+0x16d/0x4c0 [ 2848.165911][T17360] ? path_umount+0x6b8/0x10b0 [ 2848.170594][T17360] ? putname+0x102/0x140 [ 2848.174850][T17360] ? build_open_flags+0x720/0x720 [ 2848.179901][T17360] ? may_mount+0xa0/0xa0 [ 2848.184157][T17360] __x64_sys_openat+0x143/0x1f0 [ 2848.189020][T17360] ? __ia32_sys_open+0x1c0/0x1c0 [ 2848.193972][T17360] ? __x64_sys_umount+0x118/0x190 [ 2848.199007][T17360] ? syscall_enter_from_user_mode+0x26/0x80 [ 2848.204916][T17360] do_syscall_64+0x39/0xb0 [ 2848.209350][T17360] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2848.215262][T17360] RIP: 0033:0x7f14cd68bcd8 [ 2848.219764][T17360] Code: 24 18 31 c0 41 83 e2 40 75 40 89 f0 25 00 00 41 00 3d 00 00 41 00 74 32 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 40 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 2848.239391][T17360] RSP: 002b:00007ffcad3b32f0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 2848.247906][T17360] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00007f14cd68bcd8 [ 2848.255879][T17360] RDX: 0000000000090800 RSI: 00007ffcad3b44e0 RDI: 00000000ffffff9c [ 2848.263852][T17360] RBP: 00007ffcad3b44bc R08: 0000000000090800 R09: 00007ffcad3b44e0 [ 2848.271823][T17360] R10: 0000000000000000 R11: 0000000000000287 R12: 00007f14cd6e6cdc [ 2848.279799][T17360] R13: 00007ffcad3b44e0 R14: 0000000000000010 R15: 00007ffcad3b4520 [ 2848.287788][T17360] [ 2848.316787][T17360] memory: usage 10668kB, limit 0kB, failcnt 2547 [ 2848.335055][T17360] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2848.350366][T17360] Memory cgroup stats for /syz2: [ 2848.350592][T17360] anon 45056 [ 2848.350592][T17360] file 10747904 [ 2848.350592][T17360] kernel 131072 [ 2848.350592][T17360] kernel_stack 0 [ 2848.350592][T17360] pagetables 8192 [ 2848.350592][T17360] sec_pagetables 0 [ 2848.350592][T17360] percpu 64 [ 2848.350592][T17360] sock 0 [ 2848.350592][T17360] vmalloc 0 [ 2848.350592][T17360] shmem 10440704 [ 2848.350592][T17360] zswap 0 [ 2848.350592][T17360] zswapped 0 [ 2848.350592][T17360] file_mapped 237568 [ 2848.350592][T17360] file_dirty 307200 [ 2848.350592][T17360] file_writeback 0 [ 2848.350592][T17360] swapcached 0 [ 2848.350592][T17360] anon_thp 0 [ 2848.350592][T17360] file_thp 0 [ 2848.350592][T17360] shmem_thp 0 [ 2848.350592][T17360] inactive_anon 10485760 [ 2848.350592][T17360] active_anon 0 [ 2848.350592][T17360] inactive_file 0 [ 2848.350592][T17360] active_file 307200 [ 2848.350592][T17360] unevictable 0 [ 2848.350592][T17360] slab_reclaimable 58720 [ 2848.350592][T17360] slab_unreclaimable 44272 [ 2848.350592][T17360] slab 102992 [ 2848.350592][T17360] workingset_refault_anon 0 [ 2848.350592][T17360] workingset_refault_file 0 [ 2848.350592][T17360] workingset_activate_anon 0 [ 2848.350592][T17360] workingset_activate_file 0 [ 2848.350592][T17360] workingset_restore_anon 0 [ 2848.350592][T17360] workingset_restore_file 0 [ 2848.350592][T17360] workingset_nodereclaim 0 [ 2848.350592][T17360] pgscan 1983 [ 2848.350592][T17360] pgsteal 31 [ 2848.350592][T17360] pgscan_kswapd 0 [ 2848.350592][T17360] pgscan_direct 1983 [ 2848.350592][T17360] pgscan_khugepaged 0 [ 2848.350592][T17360] pgsteal_kswapd 0 [ 2848.350592][T17360] pgsteal_direct 31 [ 2848.350592][T17360] pgsteal_khugepaged 0 [ 2848.350592][T17360] pgfault 73973 [ 2848.350592][T17360] pgmajfault 0 [ 2848.350592][T17360] pgrefill 1285272 [ 2848.350592][T17360] pgactivate 1952 [ 2848.350592][T17360] pgdeactivate 0 [ 2848.350592][T17360] pglazyfree 0 [ 2848.350592][T17360] pglazyfreed 0 [ 2848.350592][T17360] zswpin 0 [ 2848.350592][T17360] zswpout 0 [ 2848.350592][T17360] thp_fault_alloc 0 [ 2848.626314][T17360] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17360,uid=0 [ 2848.642913][T17360] Memory cgroup out of memory: Killed process 17360 (syz-executor.2) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2848.729228][ T2242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2848.739603][ T2242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2848.749482][ T2242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2848.757897][ T2242] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2848.765632][ T2242] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2848.773688][ T2242] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2849.268961][T17864] chnl_net:caif_netlink_parms(): no params data found [ 2849.306428][ T5181] hsr_slave_0: left promiscuous mode [ 2849.319182][ T5181] hsr_slave_1: left promiscuous mode [ 2849.332277][ T2242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2849.342257][ T2242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2849.350522][ T5181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2849.355154][ T2242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2849.357936][ T5181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2849.376064][ T2242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2849.377294][ T5181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2849.389279][ T2242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2849.393578][ T5181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2849.398034][ T2242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2849.414021][ T5181] bridge_slave_1: left allmulticast mode [ 2849.421860][ T5181] bridge_slave_1: left promiscuous mode [ 2849.428202][ T5181] bridge0: port 2(bridge_slave_1) entered disabled state [ 2849.437412][ T5181] bridge_slave_0: left allmulticast mode [ 2849.443264][ T5181] bridge_slave_0: left promiscuous mode [ 2849.449005][ T5181] bridge0: port 1(bridge_slave_0) entered disabled state [ 2849.462214][ T5181] veth1_macvtap: left promiscuous mode [ 2849.467721][ T5181] veth0_macvtap: left promiscuous mode [ 2849.473498][ T5181] veth1_vlan: left promiscuous mode [ 2849.478741][ T5181] veth0_vlan: left promiscuous mode [ 2849.647872][ T5181] team0 (unregistering): Port device team_slave_1 removed [ 2849.665388][ T5181] team0 (unregistering): Port device team_slave_0 removed [ 2849.679761][ T5181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2849.696611][ T5181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2849.762212][ T5181] bond0 (unregistering): Released all slaves [ 2849.941682][T17864] bridge0: port 1(bridge_slave_0) entered blocking state [ 2849.948876][T17864] bridge0: port 1(bridge_slave_0) entered disabled state [ 2849.956657][T17864] bridge_slave_0: entered allmulticast mode [ 2849.963936][T17864] bridge_slave_0: entered promiscuous mode [ 2849.974334][T17864] bridge0: port 2(bridge_slave_1) entered blocking state [ 2849.989075][T17864] bridge0: port 2(bridge_slave_1) entered disabled state [ 2850.011087][T17864] bridge_slave_1: entered allmulticast mode [ 2850.018071][T17864] bridge_slave_1: entered promiscuous mode [ 2850.098948][T17864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2850.135913][T17864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2850.209030][T17864] team0: Port device team_slave_0 added [ 2850.227906][T17864] team0: Port device team_slave_1 added [ 2850.303821][T17877] chnl_net:caif_netlink_parms(): no params data found [ 2850.323805][T17864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2850.350081][T17864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2850.420095][T17864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2850.445693][T17864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2850.481087][T17864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2850.507814][T17864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2850.675016][T17864] hsr_slave_0: entered promiscuous mode [ 2850.684369][T17864] hsr_slave_1: entered promiscuous mode [ 2850.696510][T17864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2850.707759][T17864] Cannot create hsr debugfs directory [ 2850.726297][T17877] bridge0: port 1(bridge_slave_0) entered blocking state [ 2850.737068][T17877] bridge0: port 1(bridge_slave_0) entered disabled state [ 2850.751949][T17877] bridge_slave_0: entered allmulticast mode [ 2850.781534][T17877] bridge_slave_0: entered promiscuous mode [ 2850.822029][T17877] bridge0: port 2(bridge_slave_1) entered blocking state [ 2850.829192][T17877] bridge0: port 2(bridge_slave_1) entered disabled state [ 2850.846559][T17877] bridge_slave_1: entered allmulticast mode [ 2850.856108][T17877] bridge_slave_1: entered promiscuous mode [ 2850.870670][ T2242] Bluetooth: hci2: command 0x0409 tx timeout [ 2851.022364][T17877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2851.072665][T17877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2851.168411][T17877] team0: Port device team_slave_0 added [ 2851.231401][T17877] team0: Port device team_slave_1 added [ 2851.351352][T17877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2851.358336][T17877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2851.431782][ T2242] Bluetooth: hci1: command 0x0409 tx timeout [ 2851.469121][T17877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2851.581169][T17877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2851.588232][T17877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2851.653447][T17877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2851.809887][T17877] hsr_slave_0: entered promiscuous mode [ 2851.831216][T17877] hsr_slave_1: entered promiscuous mode [ 2851.837355][T17877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2851.854558][T17877] Cannot create hsr debugfs directory [ 2852.075549][T17864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2852.104036][T17864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2852.126630][T17864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2852.142984][T17864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2852.179782][T17877] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2852.329208][T17877] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2852.402512][ T5181] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2852.446554][T17877] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2852.489939][T17864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2852.519036][ T5181] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2852.575594][T17877] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2852.612009][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2852.619951][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2852.631907][T17864] 8021q: adding VLAN 0 to HW filter on device team0 [ 2852.644889][ T5181] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2852.695417][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2852.706603][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2852.728905][ T8432] bridge0: port 1(bridge_slave_0) entered blocking state [ 2852.736158][ T8432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2852.748261][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2852.759689][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2852.775695][ T8432] bridge0: port 2(bridge_slave_1) entered blocking state [ 2852.782845][ T8432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2852.791466][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2852.856792][ T5181] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2852.902837][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2852.921037][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2852.929951][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2852.950240][ T2242] Bluetooth: hci2: command 0x041b tx timeout [ 2852.959325][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2852.985105][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2853.000647][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2853.023338][T17864] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2853.060327][T17864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2853.100514][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2853.108600][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2853.121111][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2853.129784][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2853.139048][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2853.204043][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2853.237640][T17877] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2853.286628][T17877] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2853.321766][T17877] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2853.353879][T17877] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2853.510357][ T2242] Bluetooth: hci1: command 0x041b tx timeout [ 2853.590962][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2853.598471][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2853.624596][T17864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2853.673740][T17877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2853.697485][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2853.709912][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2853.737420][T17877] 8021q: adding VLAN 0 to HW filter on device team0 [ 2853.782739][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2853.791056][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2853.819731][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2853.839373][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2853.851142][ T8432] bridge0: port 1(bridge_slave_0) entered blocking state [ 2853.858258][ T8432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2853.875554][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2853.887988][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2853.905827][ T8432] bridge0: port 2(bridge_slave_1) entered blocking state [ 2853.913000][ T8432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2853.928977][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2853.938580][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2853.965762][T17864] veth0_vlan: entered promiscuous mode [ 2853.979908][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2853.988414][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2853.996603][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2854.005917][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2854.015417][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2854.024147][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2854.034410][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2854.063845][T17864] veth1_vlan: entered promiscuous mode [ 2854.081295][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2854.089467][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2854.097822][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2854.109352][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2854.125574][T17877] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2854.137821][T17877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2854.174588][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2854.189728][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2854.208291][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2854.218327][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2854.297377][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2854.314368][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2854.351105][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2854.372945][T17864] veth0_macvtap: entered promiscuous mode [ 2854.414335][T17864] veth1_macvtap: entered promiscuous mode [ 2854.476462][T17864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2854.505671][T17864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2854.519660][T17864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2854.539948][T17864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2854.551212][T17864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2854.570398][T17864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2854.597279][T17864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2854.607960][T17864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2854.617933][T17864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2854.632057][T17864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2854.644231][T17864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2854.655574][T17864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2854.666626][T17864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2854.684288][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2854.693084][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2854.701550][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2854.711975][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2854.738242][T17864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2854.751073][T17864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2854.761412][T17864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2854.772104][T17864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2854.782304][T17864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2854.793536][T17864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2854.804264][T17864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2854.816086][T17864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2854.826632][T17864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2854.837585][T17864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2854.847968][T17864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2854.859553][T17864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2854.871494][T17864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2854.882281][T17864] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2854.891728][T17864] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2854.900488][T17864] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2854.909190][T17864] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2854.924002][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2854.933241][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2854.942463][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2854.952491][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2854.966152][T17877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2855.040304][ T2242] Bluetooth: hci2: command 0x040f tx timeout [ 2855.122139][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2855.141934][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2855.168965][T15391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2855.183621][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2855.199396][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2855.200840][T15391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2855.223284][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2855.231582][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2855.250850][T17877] veth0_vlan: entered promiscuous mode [ 2855.288680][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2855.331715][T17877] veth1_vlan: entered promiscuous mode [ 2855.358228][T19644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2855.373817][T19644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2855.402737][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2855.414490][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2855.424075][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2855.432228][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2855.440970][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2855.454492][T17877] veth0_macvtap: entered promiscuous mode [ 2855.524703][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2855.535655][T17877] veth1_macvtap: entered promiscuous mode [ 2855.562158][T17877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 08:04:44 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r3 = getpid() (async, rerun: 32) r4 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x3, 0x1, 0x2, 0x7, 0x0, 0x200, 0x800, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x20, 0x80000001, 0x4, 0x1, 0x2, 0x485b, 0x8, 0x0, 0x80000000, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x2) (rerun: 32) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x8, 0x7f, 0x1, 0x7, 0x0, 0x5, 0x401, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x8, 0x7, 0x0, 0x2, 0x1000, 0x1, 0x3b, 0x0, 0x8, 0x0, 0x2}, r3, 0x2, r4, 0x3) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x2, 0x3f, 0x2, 0x0, 0x1c00000000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x6, 0x5}, 0x0, 0x4, 0x8ae, 0x1, 0x3, 0x1000, 0x9, 0x0, 0xfffffff7, 0x0, 0x4}, 0x0, 0x10, 0xffffffffffffffff, 0x2) (async) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 2855.576294][T17877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2855.590287][ T2242] Bluetooth: hci1: command 0x040f tx timeout [ 2855.595267][T17864] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2855.604052][T17877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2855.620346][T17877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2855.639739][T17864] CPU: 1 PID: 17864 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2855.650193][T17864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2855.654545][T17877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2855.660252][T17864] Call Trace: [ 2855.660262][T17864] [ 2855.660272][T17864] dump_stack_lvl+0x136/0x150 [ 2855.660324][T17864] dump_header+0x10a/0xd70 [ 2855.671519][T17877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2855.673983][T17864] oom_kill_process+0x25d/0x600 [ 2855.676903][T17877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2855.681553][T17864] out_of_memory+0x35c/0x1660 [ 2855.681584][T17864] ? find_held_lock+0x2d/0x110 [ 2855.681614][T17864] ? oom_killer_disable+0x2b0/0x2b0 [ 2855.681639][T17864] ? rcu_read_unlock+0x9/0x60 [ 2855.686045][T17877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2855.695801][T17864] ? find_held_lock+0x2d/0x110 [ 2855.695835][T17864] mem_cgroup_out_of_memory+0x206/0x270 [ 2855.695868][T17864] ? mem_cgroup_margin+0x130/0x130 [ 2855.695897][T17864] ? lock_downgrade+0x690/0x690 [ 2855.695943][T17864] try_charge_memcg+0xf99/0x13a0 [ 2855.701056][T17877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2855.711171][T17864] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2855.711224][T17864] ? rcu_read_unlock+0x9/0x60 [ 2855.711251][T17864] ? lock_downgrade+0x690/0x690 [ 2855.711296][T17864] charge_memcg+0x90/0x3b0 [ 2855.711339][T17864] __mem_cgroup_charge+0x2b/0x90 [ 2855.711367][T17864] __handle_mm_fault+0x2296/0x41c0 [ 2855.711398][T17864] ? vm_iomap_memory+0x190/0x190 [ 2855.711423][T17864] ? mas_walk+0x58f/0x730 [ 2855.717849][T17877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2855.720841][T17864] ? numa_migrate_prep+0x3a0/0x3a0 [ 2855.720868][T17864] ? do_user_addr_fault+0x367/0x1210 [ 2855.720910][T17864] handle_mm_fault+0x2af/0x9f0 [ 2855.729747][T17877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2855.730754][T17864] do_user_addr_fault+0x2ca/0x1210 [ 2855.730791][T17864] ? rcu_is_watching+0x12/0xb0 [ 2855.730833][T17864] exc_page_fault+0x98/0x170 [ 2855.730865][T17864] asm_exc_page_fault+0x26/0x30 [ 2855.740744][T17877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2855.745377][T17864] RIP: 0033:0x7fc19905a875 [ 2855.754717][T17877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2855.755988][T17864] Code: e8 4b 8d 0c 2f 48 8b 6c 24 18 48 39 d3 48 89 4b 60 0f 95 c2 48 83 c8 01 0f b6 d2 48 c1 e2 02 4c 09 ea 48 83 ca 01 49 89 57 08 <48> 89 41 08 49 83 c7 10 eb b3 48 8d 3d aa 12 0a 00 e8 75 c9 ff ff [ 2855.761153][T17877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2855.765743][T17864] RSP: 002b:00007ffe47c4ded0 EFLAGS: 00010206 [ 2855.778756][T17877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2855.782082][T17864] [ 2855.782090][T17864] RAX: 00000000000187c1 RBX: 00007fc1991895e0 RCX: 0000555556671840 [ 2855.782107][T17864] RDX: 0000000000008041 RSI: 0000000000000000 RDI: 0000000000000004 [ 2855.782122][T17864] RBP: 0000000000008030 R08: 0000000000000003 R09: 00007fc199189640 [ 2855.782138][T17864] R10: 0000000000000231 R11: 0000000000000000 R12: 0000000000000802 [ 2855.782151][T17864] R13: 0000000000008040 R14: 0000000000000804 R15: 0000555556669800 [ 2855.782183][T17864] [ 2855.827316][T17864] memory: usage 8340kB, limit 0kB, failcnt 2739 [ 2855.861556][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2855.894164][T17864] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2855.899444][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2855.928397][T17864] Memory cgroup stats for [ 2855.939630][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2855.946084][T17864] /syz0: [ 2856.030714][T17864] anon 36864 [ 2856.030714][T17864] file 8355840 [ 2856.030714][T17864] kernel 90112 [ 2856.030714][T17864] kernel_stack 0 [ 2856.030714][T17864] pagetables 8192 [ 2856.030714][T17864] sec_pagetables 0 [ 2856.030714][T17864] percpu 0 [ 2856.030714][T17864] sock 0 [ 2856.030714][T17864] vmalloc 0 [ 2856.030714][T17864] shmem 8343552 [ 2856.030714][T17864] zswap 0 [ 2856.030714][T17864] zswapped 0 [ 2856.030714][T17864] file_mapped 249856 [ 2856.030714][T17864] file_dirty 12288 [ 2856.030714][T17864] file_writeback 0 [ 2856.030714][T17864] swapcached 0 [ 2856.030714][T17864] anon_thp 0 [ 2856.030714][T17864] file_thp 0 [ 2856.030714][T17864] shmem_thp 0 [ 2856.030714][T17864] inactive_anon 262144 [ 2856.030714][T17864] active_anon 8118272 [ 2856.030714][T17864] inactive_file 12288 [ 2856.030714][T17864] active_file 0 [ 2856.030714][T17864] unevictable 0 [ 2856.030714][T17864] slab_reclaimable 40200 [ 2856.030714][T17864] slab_unreclaimable 33248 [ 2856.030714][T17864] slab 73448 [ 2856.030714][T17864] workingset_refault_anon 0 [ 2856.030714][T17864] workingset_refault_file 0 [ 2856.030714][T17864] workingset_activate_anon 0 [ 2856.030714][T17864] workingset_activate_file 0 [ 2856.030714][T17864] workingset_restore_anon 0 [ 2856.030714][T17864] workingset_restore_file 0 [ 2856.030714][T17864] workingset_nodereclaim 0 [ 2856.030714][T17864] pgscan 875 [ 2856.030714][T17864] pgsteal 403 [ 2856.030714][T17864] pgscan_kswapd 0 [ 2856.030714][T17864] pgscan_direct 875 [ 2856.030714][T17864] pgscan_khugepaged 0 [ 2856.030714][T17864] pgsteal_kswapd 0 [ 2856.030714][T17864] pgsteal_direct 403 [ 2856.030714][T17864] pgsteal_khugepaged 0 [ 2856.030714][T17864] pgfault 131052 [ 2856.030714][T17864] pgmajfault 0 [ 2856.030714][T17864] pgrefill 1294979 [ 2856.030714][T17864] pgactivate 472 [ 2856.030714][T17864] pgdeactivate 0 [ 2856.030714][T17864] pglazyfree 0 [ 2856.030714][T17864] pglazyfreed 0 [ 2856.030714][T17864] zswpin 0 [ 2856.030714][T17864] zswpout 0 [ 2856.030714][T17864] thp_fault_alloc 0 [ 2856.229463][T17877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2856.250111][T17877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2856.253284][T17864] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 2856.259923][T17877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2856.267276][T17864] ,cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=17864,uid=0 [ 2856.291242][T17877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2856.293065][T17864] Memory cgroup out of memory: Killed process 17864 (syz-executor.0) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2856.301543][T17877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2856.331452][T17877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2856.341981][T17877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2856.352738][T17877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2856.362914][T17877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2856.373481][T17877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2856.383456][T17877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2856.395391][T17877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2856.405519][T17877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2856.416155][T17877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2856.428534][T17877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2856.483740][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2856.492965][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2856.506082][ T5181] hsr_slave_0: left promiscuous mode [ 2856.511949][ T5181] hsr_slave_1: left promiscuous mode [ 2856.517620][ T5181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2856.525223][ T5181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2856.534747][ T5181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2856.542509][ T5181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2856.555062][ T5181] bridge_slave_1: left allmulticast mode [ 2856.560959][ T5181] bridge_slave_1: left promiscuous mode [ 2856.566605][ T5181] bridge0: port 2(bridge_slave_1) entered disabled state [ 2856.574898][ T5181] bridge_slave_0: left allmulticast mode [ 2856.585240][ T5181] bridge_slave_0: left promiscuous mode [ 2856.590977][ T5181] bridge0: port 1(bridge_slave_0) entered disabled state [ 2856.604363][ T5181] hsr_slave_0: left promiscuous mode [ 2856.610255][ T5181] hsr_slave_1: left promiscuous mode [ 2856.616145][ T5181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2856.623681][ T5181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2856.637003][ T5181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2856.644719][ T5181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2856.654165][ T5181] bridge_slave_1: left allmulticast mode [ 2856.659817][ T5181] bridge_slave_1: left promiscuous mode [ 2856.665695][ T5181] bridge0: port 2(bridge_slave_1) entered disabled state [ 2856.676818][ T5181] bridge_slave_0: left allmulticast mode [ 2856.682821][ T5181] bridge_slave_0: left promiscuous mode [ 2856.688445][ T5181] bridge0: port 1(bridge_slave_0) entered disabled state [ 2856.704517][ T5181] veth1_macvtap: left promiscuous mode [ 2856.710436][ T5181] veth0_macvtap: left promiscuous mode [ 2856.716242][ T5181] veth1_vlan: left promiscuous mode [ 2856.721631][ T5181] veth0_vlan: left promiscuous mode [ 2856.727881][ T5181] veth1_macvtap: left promiscuous mode [ 2856.733579][ T5181] veth0_macvtap: left promiscuous mode [ 2856.739117][ T5181] veth1_vlan: left promiscuous mode [ 2856.744524][ T5181] veth0_vlan: left promiscuous mode [ 2857.008185][ T5181] team0 (unregistering): Port device team_slave_1 removed [ 2857.019868][ T5181] team0 (unregistering): Port device team_slave_0 removed [ 2857.038095][ T5181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2857.053270][ T5181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2857.116995][ T5181] bond0 (unregistering): Released all slaves [ 2857.270997][ T5181] team0 (unregistering): Port device team_slave_1 removed [ 2857.286649][ T5181] team0 (unregistering): Port device team_slave_0 removed [ 2857.297774][ T5181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2857.313842][ T5181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2857.388487][ T5181] bond0 (unregistering): Released all slaves [ 2857.445650][T17877] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2857.454926][T17877] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2857.464051][T17877] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2857.473019][T17877] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2857.591118][T15391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2857.608028][T15391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2857.620671][ T8046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2857.644528][ T8046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2857.654144][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2857.670599][ T2242] Bluetooth: hci1: command 0x0419 tx timeout [ 2857.676262][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:04:47 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="66031021a190be3cce3d5aad4e1ccad18d0cef0371f7fbd15fc652dd4c2fa478862560317139a6c953b198e5d1bdd016414967d829b1492d6df3f1b194e955e7b80971504a55cf720561632a552f6a", 0x4f}, {&(0x7f00000002c0)="38e7e47eddbc2517617af9172060f0c0068d0279ae4bac3a6fce1663dc13f0dc82de290de5d082ce361af6c0b90b5ad61c5f0d90c33b47df65c5aff988609229be0783ff4beaa4370d7ee6d3d91b38bad0feece709b96ff0354d16a838fc65bd052ad3c7b8c06974764a1a8bc960c37eff822dcb5d6f84fe17340f1d65337e8306db05c0239abb9476fd5c7ca372cb484f8ef75741fdce4a69442b3aa88d7c0a94539ea8d18698bef60e2750d9e77ebd9c4c8f6e8469885c399e9d6e1fc59fefb4637907a1493bfe10110a7c6b0f3653ce6bd013072fcf3c38d4121e9f58b4a3e51955f092a2b43cddb59f6f8e672ff70fb7fe71", 0xf4}], 0x2, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010100, @local}}}], 0x20}, 0x40002) (async) r3 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000540)={0x9, 0x80, 0x7f, 0x9, 0x5, 0x2, 0x0, 0x9, 0x200, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x6, 0x4}, 0x6400, 0x4, 0x5, 0x9, 0x9, 0x8, 0x1, 0x0, 0xc3, 0x0, 0x9}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x3) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='memory.max\x00') (async) write$cgroup_int(r3, &(0x7f0000000180), 0x12) 08:04:47 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4c00, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:04:47 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, r0, 0x0) 08:04:47 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1324c, 0x9, 0xffc5, 0x1b208d76dec320ae, 0x8, 0x80000000, 0x0, 0x0, 0x200, 0x0, 0x8000}, r5, 0x0, r2, 0x1) close(r4) 08:04:47 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0xd4) (async) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0xffffffffffffffc0, 0x12) (async) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES8=r6], 0x12) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x8, 0x40, 0x40, 0x81, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000100), 0xf}, 0x8, 0x80000001, 0x5, 0x8, 0x4, 0xd2de, 0x200, 0x0, 0x6, 0x0, 0x6}, 0x0, 0x8, r5, 0x11) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 08:04:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140), 0x0, 0xfffffde4, &(0x7f0000000240), &(0x7f0000000040), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYRES8=r5, @ANYRES8=r7], 0x12) recvmsg$unix(r6, &(0x7f0000000600)={&(0x7f00000004c0), 0x6e, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/35, 0x23}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x40000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r10, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40082404, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r14 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r13, &(0x7f0000000200)=ANY=[@ANYRES8=r12, @ANYRES8=r14], 0x12) openat$cgroup_ro(r13, &(0x7f0000000440)='cpuacct.stat\x00', 0x0, 0x0) write$cgroup_int(r9, &(0x7f0000000180), 0x12) 08:04:47 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x5802, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:04:47 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000}, 0x0, 0x0, r0, 0x0) 08:04:47 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r6], 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000040)=0x1e156c92) write$cgroup_int(r2, &(0x7f0000000180), 0x12) r7 = getpid() perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x80, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x600, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext={0xb61a, 0x13e}, 0x400, 0x244, 0x3, 0x0, 0x0, 0x9, 0x4, 0x0, 0x4, 0x0, 0x8}, r7, 0xa, 0xffffffffffffffff, 0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r7, r0, 0x0, 0x7, &(0x7f0000000240)='cgroup\x00'}, 0x30) 08:04:47 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0x0, r0, 0x0) 08:04:47 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x6100, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:04:47 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x6800, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:04:47 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, 0x0, 0x0, r0, 0x0) 08:04:47 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x6c00, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2858.724696][T18022] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2858.793655][T18022] CPU: 1 PID: 18022 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2858.804117][T18022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2858.814195][T18022] Call Trace: [ 2858.817489][T18022] [ 2858.820434][T18022] dump_stack_lvl+0x136/0x150 [ 2858.825164][T18022] dump_header+0x10a/0xd70 [ 2858.829620][T18022] oom_kill_process+0x25d/0x600 [ 2858.834507][T18022] out_of_memory+0x35c/0x1660 [ 2858.839229][T18022] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 2858.845092][T18022] ? oom_killer_disable+0x2b0/0x2b0 [ 2858.850337][T18022] ? find_held_lock+0x2d/0x110 [ 2858.855143][T18022] mem_cgroup_out_of_memory+0x206/0x270 [ 2858.860726][T18022] ? mem_cgroup_margin+0x130/0x130 [ 2858.866063][T18022] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2858.871924][T18022] memory_max_write+0x2f9/0x3c0 [ 2858.876829][T18022] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2858.882947][T18022] ? lock_sync+0x190/0x190 [ 2858.887438][T18022] cgroup_file_write+0x1e2/0x7b0 [ 2858.892413][T18022] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2858.898617][T18022] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2858.904026][T18022] ? __virt_addr_valid+0x61/0x2e0 [ 2858.909112][T18022] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2858.914530][T18022] kernfs_fop_write_iter+0x3f1/0x600 [ 2858.919865][T18022] vfs_write+0x945/0xd50 [ 2858.924144][T18022] ? kernel_write+0x670/0x670 [ 2858.928856][T18022] ? __fget_files+0x26a/0x480 [ 2858.933587][T18022] ksys_write+0x12b/0x250 [ 2858.937942][T18022] ? __ia32_sys_read+0xb0/0xb0 [ 2858.942736][T18022] ? syscall_enter_from_user_mode+0x26/0x80 [ 2858.948674][T18022] do_syscall_64+0x39/0xb0 [ 2858.953166][T18022] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2858.959103][T18022] RIP: 0033:0x7fdd2f88c169 [ 2858.963549][T18022] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2858.983189][T18022] RSP: 002b:00007fdd30571168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2858.991632][T18022] RAX: ffffffffffffffda RBX: 00007fdd2f9ac050 RCX: 00007fdd2f88c169 [ 2858.999634][T18022] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 2859.007633][T18022] RBP: 00007fdd2f8e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2859.015628][T18022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2859.023621][T18022] R13: 00007ffefd862fff R14: 00007fdd30571300 R15: 0000000000022000 [ 2859.031636][T18022] 08:04:48 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) [ 2859.110522][T18022] memory: usage 8980kB, limit 0kB, failcnt 2690 [ 2859.118087][T18022] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 08:04:48 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1324c, 0x9, 0xffc5, 0x1b208d76dec320ae, 0x8, 0x80000000, 0x0, 0x0, 0x200, 0x0, 0x8000}, r5, 0x0, r2, 0x1) close(r4) [ 2859.160171][T18022] Memory cgroup stats for /syz3: [ 2859.160412][T18022] anon 258048 [ 2859.160412][T18022] file 8351744 [ 2859.160412][T18022] kernel 585728 [ 2859.160412][T18022] kernel_stack 131072 [ 2859.160412][T18022] pagetables 151552 [ 2859.160412][T18022] sec_pagetables 0 [ 2859.160412][T18022] percpu 128 [ 2859.160412][T18022] sock 0 [ 2859.160412][T18022] vmalloc 0 [ 2859.160412][T18022] shmem 8351744 [ 2859.160412][T18022] zswap 0 [ 2859.160412][T18022] zswapped 0 [ 2859.160412][T18022] file_mapped 241664 [ 2859.160412][T18022] file_dirty 0 [ 2859.160412][T18022] file_writeback 0 [ 2859.160412][T18022] swapcached 0 [ 2859.160412][T18022] anon_thp 0 [ 2859.160412][T18022] file_thp 0 [ 2859.160412][T18022] shmem_thp 0 [ 2859.160412][T18022] inactive_anon 8458240 [ 2859.160412][T18022] active_anon 151552 [ 2859.160412][T18022] inactive_file 0 [ 2859.160412][T18022] active_file 0 [ 2859.160412][T18022] unevictable 0 [ 2859.160412][T18022] slab_reclaimable 50904 [ 2859.160412][T18022] slab_unreclaimable 207928 [ 2859.160412][T18022] slab 258832 [ 2859.160412][T18022] workingset_refault_anon 0 [ 2859.160412][T18022] workingset_refault_file 1 [ 2859.160412][T18022] workingset_activate_anon 0 [ 2859.160412][T18022] workingset_activate_file 0 [ 2859.160412][T18022] workingset_restore_anon 0 [ 2859.160412][T18022] workingset_restore_file 0 [ 2859.160412][T18022] workingset_nodereclaim 0 [ 2859.160412][T18022] pgscan 199 [ 2859.160412][T18022] pgsteal 86 [ 2859.160412][T18022] pgscan_kswapd 0 [ 2859.160412][T18022] pgscan_direct 199 [ 2859.160412][T18022] pgscan_khugepaged 0 [ 2859.160412][T18022] pgsteal_kswapd 0 [ 2859.160412][T18022] pgsteal_direct 86 [ 2859.160412][T18022] pgsteal_khugepaged 0 [ 2859.160412][T18022] pgfault 89946 [ 2859.160412][T18022] pgmajfault 0 [ 2859.160412][T18022] pgrefill 192071 [ 2859.160412][T18022] pgactivate 113 [ 2859.160412][T18022] pgdeactivate 0 [ 2859.160412][T18022] pglazyfree 0 [ 2859.160412][T18022] pglazyfreed 0 [ 2859.160412][T18022] zswpin 0 [ 2859.160412][T18022] zswpout 0 [ 2859.160412][T18022] thp_fault_alloc 0 [ 2859.762636][T18022] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=18013,uid=0 [ 2860.135961][T18022] Memory cgroup out of memory: Killed process 18013 (syz-executor.3) total-vm:54812kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2860.312466][T17877] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2860.350056][T17877] CPU: 0 PID: 17877 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2860.360531][T17877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2860.370610][T17877] Call Trace: [ 2860.373909][T17877] [ 2860.376857][T17877] dump_stack_lvl+0x136/0x150 [ 2860.381582][T17877] dump_header+0x10a/0xd70 [ 2860.386035][T17877] oom_kill_process+0x25d/0x600 [ 2860.390922][T17877] out_of_memory+0x35c/0x1660 [ 2860.395718][T17877] ? find_held_lock+0x2d/0x110 [ 2860.400513][T17877] ? oom_killer_disable+0x2b0/0x2b0 [ 2860.405829][T17877] ? rcu_read_unlock+0x9/0x60 [ 2860.410716][T17877] ? find_held_lock+0x2d/0x110 [ 2860.415524][T17877] mem_cgroup_out_of_memory+0x206/0x270 [ 2860.421105][T17877] ? mem_cgroup_margin+0x130/0x130 [ 2860.426341][T17877] ? lock_downgrade+0x690/0x690 [ 2860.431243][T17877] try_charge_memcg+0xf99/0x13a0 [ 2860.436227][T17877] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2860.442251][T17877] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2860.448044][T17877] ? lock_downgrade+0x690/0x690 [ 2860.453366][T17877] ? lock_downgrade+0x690/0x690 [ 2860.458269][T17877] obj_cgroup_charge+0x2af/0x5e0 [ 2860.463248][T17877] ? __d_alloc+0x32/0x980 [ 2860.467584][T17877] kmem_cache_alloc_lru+0x142/0x600 [ 2860.472803][T17877] __d_alloc+0x32/0x980 [ 2860.476969][T17877] ? __lock_acquire+0x1916/0x5df0 [ 2860.482013][T17877] d_alloc+0x4e/0x240 [ 2860.486006][T17877] d_alloc_parallel+0xe8/0x1530 [ 2860.490876][T17877] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2860.496872][T17877] ? is_bpf_text_address+0x9d/0x1b0 [ 2860.502083][T17877] ? __d_lookup_rcu+0x4e0/0x4e0 [ 2860.507029][T17877] ? lockdep_init_map_type+0x21e/0x810 [ 2860.512504][T17877] ? lockdep_init_map_type+0x21e/0x810 [ 2860.517984][T17877] __lookup_slow+0x193/0x460 [ 2860.522583][T17877] ? lookup_one_qstr_excl+0x180/0x180 [ 2860.528610][T17877] ? lookup_fast+0x14e/0x520 [ 2860.533224][T17877] walk_component+0x33f/0x5a0 [ 2860.537921][T17877] path_lookupat+0x1ba/0x840 [ 2860.542536][T17877] filename_lookup+0x1d2/0x590 [ 2860.547335][T17877] ? may_linkat+0x3b0/0x3b0 [ 2860.551859][T17877] ? __might_fault+0xe2/0x190 [ 2860.556570][T17877] ? __phys_addr_symbol+0x30/0x70 [ 2860.561616][T17877] ? __check_object_size+0x323/0x730 [ 2860.566922][T17877] ? strncpy_from_user+0x1f8/0x350 [ 2860.572065][T17877] ? getname_flags.part.0+0x1dd/0x4f0 [ 2860.577459][T17877] user_path_at_empty+0x46/0x60 [ 2860.582332][T17877] __x64_sys_umount+0xfc/0x190 [ 2860.587106][T17877] ? path_umount+0x10b0/0x10b0 [ 2860.591877][T17877] ? syscall_enter_from_user_mode+0x26/0x80 [ 2860.597788][T17877] do_syscall_64+0x39/0xb0 [ 2860.602235][T17877] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2860.608147][T17877] RIP: 0033:0x7fdd2f88d5d7 [ 2860.612566][T17877] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2860.632274][T17877] RSP: 002b:00007ffefd862158 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2860.640707][T17877] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00007fdd2f88d5d7 [ 2860.648682][T17877] RDX: 00007ffefd86222e RSI: 000000000000000a RDI: 00007ffefd862220 [ 2860.656658][T17877] RBP: 00007ffefd862220 R08: 00000000ffffffff R09: 00007ffefd861ff0 [ 2860.664636][T17877] R10: 00005555563be853 R11: 0000000000000246 R12: 00007fdd2f8e6cdc [ 2860.672621][T17877] R13: 00007ffefd8632e0 R14: 00005555563be810 R15: 00007ffefd863320 [ 2860.680621][T17877] [ 2861.007382][T17877] memory: usage 8636kB, limit 0kB, failcnt 2726 [ 2861.007938][ T5048] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2861.025078][ T5048] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2861.033122][T17877] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2861.040135][ T5048] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2861.040419][T17877] Memory cgroup stats for /syz3: [ 2861.047259][T17877] anon 151552 [ 2861.047259][T17877] file 8351744 [ 2861.047259][T17877] kernel 339968 [ 2861.047259][T17877] kernel_stack 32768 [ 2861.047259][T17877] pagetables 81920 [ 2861.047259][T17877] sec_pagetables 0 [ 2861.047259][T17877] percpu 128 [ 2861.047259][T17877] sock 0 [ 2861.047259][T17877] vmalloc 0 [ 2861.047259][T17877] shmem 8351744 [ 2861.047259][T17877] zswap 0 [ 2861.047259][T17877] zswapped 0 [ 2861.047259][T17877] file_mapped 241664 [ 2861.047259][T17877] file_dirty 0 [ 2861.047259][T17877] file_writeback 0 [ 2861.047259][T17877] swapcached 0 [ 2861.047259][T17877] anon_thp 0 [ 2861.047259][T17877] file_thp 0 [ 2861.047259][T17877] shmem_thp 0 [ 2861.047259][T17877] inactive_anon 8458240 [ 2861.047259][T17877] active_anon 45056 [ 2861.047259][T17877] inactive_file 0 [ 2861.047259][T17877] active_file 0 [ 2861.047259][T17877] unevictable 0 [ 2861.047259][T17877] slab_reclaimable 39288 [ 2861.047259][T17877] slab_unreclaimable 150800 [ 2861.047259][T17877] slab 190088 [ 2861.047259][T17877] workingset_refault_anon 0 [ 2861.047259][T17877] workingset_refault_file 1 [ 2861.047259][T17877] workingset_activate_anon 0 [ 2861.047259][T17877] workingset_activate_file 0 [ 2861.047259][T17877] workingset_restore_anon 0 [ 2861.047259][T17877] workingset_restore_file 0 [ 2861.047259][T17877] workingset_nodereclaim 0 [ 2861.047259][T17877] pgscan 199 [ 2861.047259][T17877] pgsteal 86 [ 2861.047259][T17877] pgscan_kswapd 0 [ 2861.047259][T17877] pgscan_direct 199 [ 2861.047259][T17877] pgscan_khugepaged 0 [ 2861.047259][T17877] pgsteal_kswapd 0 [ 2861.047259][T17877] pgsteal_direct 86 [ 2861.047259][T17877] pgsteal_khugepaged 0 [ 2861.047259][T17877] pgfault 89950 [ 2861.047259][T17877] pgmajfault 0 [ 2861.047259][T17877] pgrefill 192071 [ 2861.047259][T17877] pgactivate 113 [ 2861.047259][T17877] pgdeactivate 0 [ 2861.047259][T17877] pglazyfree 0 [ 2861.047259][T17877] pglazyfreed 0 [ 2861.047259][T17877] zswpin 0 [ 2861.047259][T17877] zswpout 0 [ 2861.047259][T17877] thp_fault_alloc 0 [ 2861.123889][T14855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2861.249825][T14855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2861.258133][T14855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2861.265738][T14855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2861.274649][T27851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2861.282618][T27851] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2861.289888][T27851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2861.298053][T27851] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2861.311708][ T5048] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2861.331665][T17877] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17877,uid=0 [ 2861.347638][T17877] Memory cgroup out of memory: Killed process 17877 (syz-executor.3) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2861.782794][T18057] chnl_net:caif_netlink_parms(): no params data found [ 2861.899741][T18054] chnl_net:caif_netlink_parms(): no params data found [ 2862.072873][T18057] bridge0: port 1(bridge_slave_0) entered blocking state [ 2862.080807][T18057] bridge0: port 1(bridge_slave_0) entered disabled state [ 2862.087979][T18057] bridge_slave_0: entered allmulticast mode [ 2862.095641][T18057] bridge_slave_0: entered promiscuous mode [ 2862.113043][T18057] bridge0: port 2(bridge_slave_1) entered blocking state [ 2862.128674][T18057] bridge0: port 2(bridge_slave_1) entered disabled state [ 2862.145661][T18057] bridge_slave_1: entered allmulticast mode [ 2862.153193][T18057] bridge_slave_1: entered promiscuous mode [ 2862.212630][T18054] bridge0: port 1(bridge_slave_0) entered blocking state [ 2862.221101][T18054] bridge0: port 1(bridge_slave_0) entered disabled state [ 2862.230583][T18054] bridge_slave_0: entered allmulticast mode [ 2862.237119][T18054] bridge_slave_0: entered promiscuous mode [ 2862.269246][T18054] bridge0: port 2(bridge_slave_1) entered blocking state [ 2862.280506][T18054] bridge0: port 2(bridge_slave_1) entered disabled state [ 2862.287649][T18054] bridge_slave_1: entered allmulticast mode [ 2862.295120][T18054] bridge_slave_1: entered promiscuous mode [ 2862.313027][T18057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2862.325194][T18057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2862.393609][T18054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2862.426512][T18057] team0: Port device team_slave_0 added [ 2862.472243][ T5181] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2862.499302][T18054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2862.521115][T18057] team0: Port device team_slave_1 added [ 2862.636239][ T5181] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2862.709470][T18054] team0: Port device team_slave_0 added [ 2862.725857][T18057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2862.734082][T18057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2862.769649][T18057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2862.798689][ T5181] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2862.826351][T18054] team0: Port device team_slave_1 added [ 2862.844937][T18057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2862.854259][T18057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2862.881337][T18057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2862.915448][ T5181] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2862.981609][T18054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2862.988583][T18054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2863.050049][T18054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2863.086291][T18054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2863.099489][T18054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2863.127132][T18054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2863.143192][T18057] hsr_slave_0: entered promiscuous mode [ 2863.151737][T18057] hsr_slave_1: entered promiscuous mode [ 2863.291210][ T5181] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2863.328915][T18054] hsr_slave_0: entered promiscuous mode [ 2863.346014][T18054] hsr_slave_1: entered promiscuous mode [ 2863.350324][T14855] Bluetooth: hci4: command 0x0409 tx timeout [ 2863.352724][ T2242] Bluetooth: hci2: command 0x0409 tx timeout [ 2863.366665][T18054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2863.374339][T18054] Cannot create hsr debugfs directory [ 2863.409903][ T5181] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2863.480512][ T5181] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2863.548237][ T5181] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2865.362959][ T5181] hsr_slave_0: left promiscuous mode [ 2865.377055][ T5181] hsr_slave_1: left promiscuous mode [ 2865.400554][ T5181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2865.407984][ T5181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2865.426569][ T5181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2865.434198][ T2242] Bluetooth: hci4: command 0x041b tx timeout [ 2865.440087][ T2242] Bluetooth: hci2: command 0x041b tx timeout [ 2865.458451][ T5181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2865.477134][ T5181] bridge_slave_1: left allmulticast mode [ 2865.483016][ T5181] bridge_slave_1: left promiscuous mode [ 2865.488749][ T5181] bridge0: port 2(bridge_slave_1) entered disabled state [ 2865.498197][ T5181] bridge_slave_0: left allmulticast mode [ 2865.510074][ T5181] bridge_slave_0: left promiscuous mode [ 2865.515852][ T5181] bridge0: port 1(bridge_slave_0) entered disabled state [ 2865.528912][ T5181] hsr_slave_0: left promiscuous mode [ 2865.535486][ T5181] hsr_slave_1: left promiscuous mode [ 2865.541879][ T5181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2865.549297][ T5181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2865.558928][ T5181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2865.568124][ T5181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2865.578144][ T5181] bridge_slave_1: left allmulticast mode [ 2865.589661][ T5181] bridge_slave_1: left promiscuous mode [ 2865.597310][ T5181] bridge0: port 2(bridge_slave_1) entered disabled state [ 2865.610868][ T5181] bridge_slave_0: left allmulticast mode [ 2865.616532][ T5181] bridge_slave_0: left promiscuous mode [ 2865.640261][ T5181] bridge0: port 1(bridge_slave_0) entered disabled state [ 2865.667912][ T5181] veth1_macvtap: left promiscuous mode [ 2865.678995][ T5181] veth0_macvtap: left promiscuous mode [ 2865.685719][ T5181] veth1_vlan: left promiscuous mode [ 2865.691224][ T5181] veth0_vlan: left promiscuous mode [ 2865.698158][ T5181] veth1_macvtap: left promiscuous mode [ 2865.704563][ T5181] veth0_macvtap: left promiscuous mode [ 2865.711061][ T5181] veth1_vlan: left promiscuous mode [ 2865.728551][ T5181] veth0_vlan: left promiscuous mode [ 2866.334824][ T5181] team0 (unregistering): Port device team_slave_1 removed [ 2866.353356][ T5181] team0 (unregistering): Port device team_slave_0 removed [ 2866.367796][ T5181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2866.395142][ T5181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2866.496588][ T5181] bond0 (unregistering): Released all slaves [ 2866.732036][ T5181] team0 (unregistering): Port device team_slave_1 removed [ 2866.747282][ T5181] team0 (unregistering): Port device team_slave_0 removed [ 2866.762501][ T5181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2866.785421][ T5181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2866.886759][ T5181] bond0 (unregistering): Released all slaves [ 2867.085009][T18057] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2867.109142][T18057] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2867.127343][T18057] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2867.173948][T18057] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2867.185133][T18054] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2867.204160][T18054] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2867.216716][T18054] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2867.238387][T18054] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2867.365298][T18057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2867.411701][T18057] 8021q: adding VLAN 0 to HW filter on device team0 [ 2867.433556][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2867.441914][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2867.478767][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2867.488157][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2867.497150][ T2619] bridge0: port 1(bridge_slave_0) entered blocking state [ 2867.504300][ T2619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2867.512487][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2867.520908][T14855] Bluetooth: hci2: command 0x040f tx timeout [ 2867.520917][ T2242] Bluetooth: hci4: command 0x040f tx timeout [ 2867.535831][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2867.544702][ T2619] bridge0: port 2(bridge_slave_1) entered blocking state [ 2867.551857][ T2619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2867.560472][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2867.575833][T18054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2867.595703][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2867.605085][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2867.614486][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2867.624274][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2867.633003][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2867.643235][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2867.652708][T23455] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2867.674963][T18054] 8021q: adding VLAN 0 to HW filter on device team0 [ 2867.702134][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2867.712590][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2867.721086][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2867.729443][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2867.738179][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2867.746740][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2867.757506][T18057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2867.804190][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2867.825343][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2867.847556][T24745] bridge0: port 1(bridge_slave_0) entered blocking state [ 2867.854730][T24745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2867.892013][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2867.908616][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2867.918309][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2867.927206][ T8432] bridge0: port 2(bridge_slave_1) entered blocking state [ 2867.934303][ T8432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2867.942253][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2867.951454][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2867.976427][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2868.004049][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2868.030920][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2868.039726][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2868.069515][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2868.090925][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2868.123960][T18054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2868.158970][T18054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2868.181067][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2868.197842][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2868.224779][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2868.260461][T18057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2868.276218][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2868.284570][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2868.372995][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2868.401283][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2868.420927][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2868.429230][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2868.451415][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2868.459236][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2868.485426][T18057] veth0_vlan: entered promiscuous mode [ 2868.506058][T18057] veth1_vlan: entered promiscuous mode [ 2868.579304][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2868.597859][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2868.630992][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2868.639703][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2868.680379][T18057] veth0_macvtap: entered promiscuous mode [ 2868.689441][T18057] veth1_macvtap: entered promiscuous mode [ 2868.710922][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2868.719077][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2868.728394][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2868.736361][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2868.752991][T18054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2868.776809][T18057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2868.801525][T18057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2868.820515][T18057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2868.840099][T18057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2868.849936][T18057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2868.864494][T18057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2868.890077][T18057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2868.901397][T18057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2868.931573][T18057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2868.953186][T18057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2868.980144][T18057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2869.000102][T18057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2869.029215][T18057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2869.039975][T18057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2869.050733][T18057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2869.061166][T18057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2869.071938][T18057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2869.083361][T18057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2869.094795][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2869.103886][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2869.114695][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2869.123783][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2869.163514][T18057] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2869.172731][T18057] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2869.182354][T18057] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2869.201693][T18057] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2869.230129][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2869.238859][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2869.280629][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2869.289028][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2869.323823][T18054] veth0_vlan: entered promiscuous mode [ 2869.332107][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2869.339934][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2869.387500][T18054] veth1_vlan: entered promiscuous mode [ 2869.452369][T15391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2869.474783][T15391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2869.486133][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2869.496322][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2869.504627][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2869.523578][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2869.557318][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2869.579661][T18054] veth0_macvtap: entered promiscuous mode [ 2869.590284][T14855] Bluetooth: hci2: command 0x0419 tx timeout [ 2869.596318][T14855] Bluetooth: hci4: command 0x0419 tx timeout [ 2869.609521][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2869.639088][T18054] veth1_macvtap: entered promiscuous mode [ 2869.661163][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2869.669354][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2869.693552][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2869.720066][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2869.729909][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2869.770737][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2869.793244][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2869.809158][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2869.820193][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2869.840051][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2869.849886][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2869.890061][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2869.907984][T18054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2869.933866][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2869.954390][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2869.971059][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2869.979865][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2870.016904][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2870.050098][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2870.060849][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2870.071502][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2870.081769][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2870.092454][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2870.102360][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2870.113376][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2870.123437][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2870.138031][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2870.148971][T18054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2870.178969][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2870.196644][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2870.222858][T18054] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2870.240810][T18054] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2870.249613][T18054] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2870.259597][T18054] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2870.365654][T18192] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2870.420567][T18192] CPU: 1 PID: 18192 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2870.431035][T18192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2870.441193][T18192] Call Trace: [ 2870.444493][T18192] [ 2870.447439][T18192] dump_stack_lvl+0x136/0x150 [ 2870.452154][T18192] dump_header+0x10a/0xd70 [ 2870.456594][T18192] oom_kill_process+0x25d/0x600 [ 2870.461458][T18192] out_of_memory+0x35c/0x1660 [ 2870.466156][T18192] ? oom_killer_disable+0x2b0/0x2b0 [ 2870.471374][T18192] ? kernfs_notify+0x1ac/0x410 [ 2870.476163][T18192] ? find_held_lock+0x2d/0x110 [ 2870.480958][T18192] mem_cgroup_out_of_memory+0x206/0x270 [ 2870.486549][T18192] ? mem_cgroup_margin+0x130/0x130 [ 2870.491708][T18192] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2870.497575][T18192] memory_max_write+0x2f9/0x3c0 [ 2870.502457][T18192] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2870.508550][T18192] ? lock_sync+0x190/0x190 [ 2870.512990][T18192] cgroup_file_write+0x1e2/0x7b0 [ 2870.517942][T18192] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2870.524041][T18192] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2870.529430][T18192] ? __virt_addr_valid+0x61/0x2e0 [ 2870.534486][T18192] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2870.539873][T18192] kernfs_fop_write_iter+0x3f1/0x600 [ 2870.545198][T18192] vfs_write+0x945/0xd50 [ 2870.549459][T18192] ? kernel_write+0x670/0x670 [ 2870.554149][T18192] ? __fget_files+0x26a/0x480 [ 2870.558860][T18192] ksys_write+0x12b/0x250 [ 2870.563196][T18192] ? __ia32_sys_read+0xb0/0xb0 [ 2870.567971][T18192] ? syscall_enter_from_user_mode+0x26/0x80 [ 2870.573887][T18192] do_syscall_64+0x39/0xb0 [ 2870.578354][T18192] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2870.584280][T18192] RIP: 0033:0x7fcbc6a8c169 [ 2870.588702][T18192] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2870.608755][T18192] RSP: 002b:00007fcbc7783168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2870.617196][T18192] RAX: ffffffffffffffda RBX: 00007fcbc6babf80 RCX: 00007fcbc6a8c169 [ 2870.625190][T18192] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000008 [ 2870.633186][T18192] RBP: 00007fcbc6ae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2870.641278][T18192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2870.649257][T18192] R13: 00007ffe1f49a17f R14: 00007fcbc7783300 R15: 0000000000022000 [ 2870.657298][T18192] [ 2870.677975][T15391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2870.693347][T15391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2870.730781][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2870.738180][T18192] memory: usage 9132kB, limit 0kB, failcnt 2739 [ 2870.746206][T18192] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2870.746388][T15391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2870.754170][T18192] Memory cgroup stats for /syz0: [ 2870.761984][T18192] anon 118784 [ 2870.761984][T18192] file 8851456 [ 2870.761984][T18192] kernel 356352 [ 2870.761984][T18192] kernel_stack 65536 [ 2870.761984][T18192] pagetables 77824 [ 2870.761984][T18192] sec_pagetables 0 [ 2870.761984][T18192] percpu 64 [ 2870.761984][T18192] sock 0 [ 2870.761984][T18192] vmalloc 0 [ 2870.761984][T18192] shmem 8343552 [ 2870.761984][T18192] zswap 0 [ 2870.761984][T18192] zswapped 0 [ 2870.761984][T18192] file_mapped 274432 [ 2870.761984][T18192] file_dirty 507904 [ 2870.761984][T18192] file_writeback 0 [ 2870.761984][T18192] swapcached 0 [ 2870.761984][T18192] anon_thp 0 [ 2870.761984][T18192] file_thp 0 [ 2870.761984][T18192] shmem_thp 0 [ 2870.761984][T18192] inactive_anon 114688 [ 2870.761984][T18192] active_anon 8347648 [ 2870.761984][T18192] inactive_file 0 [ 2870.761984][T18192] active_file 507904 [ 2870.761984][T18192] unevictable 0 [ 2870.761984][T18192] slab_reclaimable 83040 [ 2870.761984][T18192] slab_unreclaimable 105128 [ 2870.761984][T18192] slab 188168 [ 2870.761984][T18192] workingset_refault_anon 0 [ 2870.761984][T18192] workingset_refault_file 0 [ 2870.761984][T18192] workingset_activate_anon 0 [ 2870.761984][T18192] workingset_activate_file 0 [ 2870.761984][T18192] workingset_restore_anon 0 [ 2870.761984][T18192] workingset_restore_file 0 [ 2870.761984][T18192] workingset_nodereclaim 0 [ 2870.761984][T18192] pgscan 875 [ 2870.761984][T18192] pgsteal 403 [ 2870.761984][T18192] pgscan_kswapd 0 [ 2870.761984][T18192] pgscan_direct 875 [ 2870.761984][T18192] pgscan_khugepaged 0 [ 2870.761984][T18192] pgsteal_kswapd 0 [ 2870.761984][T18192] pgsteal_direct 403 [ 2870.761984][T18192] pgsteal_khugepaged 0 [ 2870.761984][T18192] pgfault 131246 [ 2870.761984][T18192] pgmajfault 0 [ 2870.761984][T18192] pgrefill 1302915 [ 2870.761984][T18192] pgactivate 472 [ 2870.761984][T18192] pgdeactivate 0 [ 2870.761984][T18192] pglazyfree 0 [ 2870.761984][T18192] pglazyfreed 0 [ 2870.761984][T18192] zswpin 0 [ 2870.761984][T18192] zswpout 0 [ 2870.783265][T15391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2870.951756][T18192] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=18191,uid=0 [ 2870.983523][T18192] Memory cgroup out of memory: Killed process 18191 (syz-executor.0) total-vm:54548kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2871.028450][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2871.223416][T18197] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2871.240156][T18197] CPU: 1 PID: 18197 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2871.250671][T18197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2871.260762][T18197] Call Trace: [ 2871.264068][T18197] [ 2871.267015][T18197] dump_stack_lvl+0x136/0x150 [ 2871.271740][T18197] dump_header+0x10a/0xd70 [ 2871.276195][T18197] oom_kill_process+0x25d/0x600 [ 2871.281078][T18197] out_of_memory+0x35c/0x1660 [ 2871.285791][T18197] ? io_schedule_timeout+0x150/0x150 [ 2871.291109][T18197] ? oom_killer_disable+0x2b0/0x2b0 [ 2871.296334][T18197] ? kernfs_notify+0x1ac/0x410 [ 2871.301149][T18197] mem_cgroup_out_of_memory+0x206/0x270 [ 2871.306736][T18197] ? mem_cgroup_margin+0x130/0x130 [ 2871.311909][T18197] memory_max_write+0x2f9/0x3c0 [ 2871.316808][T18197] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2871.322920][T18197] ? lock_sync+0x190/0x190 [ 2871.327641][T18197] cgroup_file_write+0x1e2/0x7b0 [ 2871.332612][T18197] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2871.338721][T18197] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2871.344300][T18197] ? __virt_addr_valid+0x61/0x2e0 [ 2871.349358][T18197] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2871.354743][T18197] kernfs_fop_write_iter+0x3f1/0x600 [ 2871.360064][T18197] vfs_write+0x945/0xd50 [ 2871.364318][T18197] ? kernel_write+0x670/0x670 [ 2871.369008][T18197] ? __fget_files+0x26a/0x480 [ 2871.373722][T18197] ksys_write+0x12b/0x250 [ 2871.378065][T18197] ? __ia32_sys_read+0xb0/0xb0 [ 2871.382923][T18197] ? syscall_enter_from_user_mode+0x26/0x80 [ 2871.388923][T18197] do_syscall_64+0x39/0xb0 [ 2871.393362][T18197] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2871.399275][T18197] RIP: 0033:0x7fc25108c169 [ 2871.403695][T18197] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2871.423317][T18197] RSP: 002b:00007fc251dff168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2871.431939][T18197] RAX: ffffffffffffffda RBX: 00007fc2511abf80 RCX: 00007fc25108c169 [ 2871.439922][T18197] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000004 [ 2871.447914][T18197] RBP: 00007fc2510e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2871.456440][T18197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2871.464424][T18197] R13: 00007ffe11848fff R14: 00007fc251dff300 R15: 0000000000022000 [ 2871.472423][T18197] [ 2871.493165][T18197] memory: usage 11216kB, limit 0kB, failcnt 2564 [ 2871.499663][T18197] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2871.511571][T18197] Memory cgroup stats for /syz2: [ 2871.511791][T18197] anon 94208 [ 2871.511791][T18197] file 10952704 [ 2871.511791][T18197] kernel 425984 [ 2871.511791][T18197] kernel_stack 131072 [ 2871.511791][T18197] pagetables 77824 [ 2871.511791][T18197] sec_pagetables 0 [ 2871.511791][T18197] percpu 64 [ 2871.511791][T18197] sock 0 [ 2871.511791][T18197] vmalloc 0 [ 2871.511791][T18197] shmem 10440704 [ 2871.511791][T18197] zswap 0 [ 2871.511791][T18197] zswapped 0 [ 2871.511791][T18197] file_mapped 262144 [ 2871.511791][T18197] file_dirty 512000 [ 2871.511791][T18197] file_writeback 0 [ 2871.511791][T18197] swapcached 0 [ 2871.511791][T18197] anon_thp 0 [ 2871.511791][T18197] file_thp 0 [ 2871.511791][T18197] shmem_thp 0 [ 2871.511791][T18197] inactive_anon 10440704 [ 2871.511791][T18197] active_anon 94208 [ 2871.511791][T18197] inactive_file 0 [ 2871.511791][T18197] active_file 512000 [ 2871.511791][T18197] unevictable 0 [ 2871.511791][T18197] slab_reclaimable 76296 [ 2871.511791][T18197] slab_unreclaimable 105888 [ 2871.511791][T18197] slab 182184 [ 2871.511791][T18197] workingset_refault_anon 0 [ 2871.511791][T18197] workingset_refault_file 0 [ 2871.511791][T18197] workingset_activate_anon 0 [ 2871.511791][T18197] workingset_activate_file 0 [ 2871.511791][T18197] workingset_restore_anon 0 [ 2871.511791][T18197] workingset_restore_file 0 [ 2871.511791][T18197] workingset_nodereclaim 0 [ 2871.511791][T18197] pgscan 1983 [ 2871.511791][T18197] pgsteal 31 [ 2871.511791][T18197] pgscan_kswapd 0 [ 2871.511791][T18197] pgscan_direct 1983 [ 2871.511791][T18197] pgscan_khugepaged 0 [ 2871.511791][T18197] pgsteal_kswapd 0 [ 2871.511791][T18197] pgsteal_direct 31 [ 2871.511791][T18197] pgsteal_khugepaged 0 [ 2871.511791][T18197] pgfault 74142 [ 2871.511791][T18197] pgmajfault 0 [ 2871.511791][T18197] pgrefill 1298306 [ 2871.511791][T18197] pgactivate 1952 [ 2871.511791][T18197] pgdeactivate 0 [ 2871.511791][T18197] pglazyfree 0 [ 2871.511791][T18197] pglazyfreed 0 [ 2871.511791][T18197] zswpin 0 [ 2871.511791][T18197] zswpout 0 [ 2871.709773][T18197] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=18054,uid=0 [ 2871.725974][T18197] Memory cgroup out of memory: Killed process 18054 (syz-executor.2) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2871.779349][T18197] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2871.792317][T18197] CPU: 1 PID: 18197 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2871.803207][T18197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2871.813311][T18197] Call Trace: [ 2871.816705][T18197] [ 2871.819665][T18197] dump_stack_lvl+0x136/0x150 [ 2871.824395][T18197] dump_header+0x10a/0xd70 [ 2871.828843][T18197] oom_kill_process+0x25d/0x600 [ 2871.833732][T18197] out_of_memory+0x35c/0x1660 [ 2871.838448][T18197] ? oom_killer_disable+0x2b0/0x2b0 [ 2871.843686][T18197] ? find_held_lock+0x2d/0x110 [ 2871.848511][T18197] mem_cgroup_out_of_memory+0x206/0x270 [ 2871.854097][T18197] ? mem_cgroup_margin+0x130/0x130 [ 2871.859253][T18197] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2871.865102][T18197] memory_max_write+0x2f9/0x3c0 [ 2871.869994][T18197] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2871.876101][T18197] ? lock_sync+0x190/0x190 [ 2871.880563][T18197] cgroup_file_write+0x1e2/0x7b0 [ 2871.885962][T18197] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2871.892070][T18197] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2871.897479][T18197] ? __virt_addr_valid+0x61/0x2e0 [ 2871.902554][T18197] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2871.907957][T18197] kernfs_fop_write_iter+0x3f1/0x600 [ 2871.913290][T18197] vfs_write+0x945/0xd50 [ 2871.917564][T18197] ? kernel_write+0x670/0x670 [ 2871.922297][T18197] ? __fget_files+0x26a/0x480 [ 2871.927204][T18197] ksys_write+0x12b/0x250 [ 2871.931556][T18197] ? __ia32_sys_read+0xb0/0xb0 [ 2871.936350][T18197] ? syscall_enter_from_user_mode+0x26/0x80 [ 2871.942287][T18197] do_syscall_64+0x39/0xb0 [ 2871.946743][T18197] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2871.952679][T18197] RIP: 0033:0x7fc25108c169 [ 2871.957118][T18197] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2871.976757][T18197] RSP: 002b:00007fc251dff168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2871.985204][T18197] RAX: ffffffffffffffda RBX: 00007fc2511abf80 RCX: 00007fc25108c169 [ 2871.993200][T18197] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000004 [ 2872.001220][T18197] RBP: 00007fc2510e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2872.009211][T18197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2872.017209][T18197] R13: 00007ffe11848fff R14: 00007fc251dff300 R15: 0000000000022000 [ 2872.025220][T18197] [ 2872.045783][T18197] memory: usage 11184kB, limit 0kB, failcnt 2564 [ 2872.052230][T18197] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2872.062497][T18197] Memory cgroup stats for /syz2: [ 2872.062712][T18197] anon 73728 [ 2872.062712][T18197] file 10952704 [ 2872.062712][T18197] kernel 299008 [ 2872.062712][T18197] kernel_stack 32768 [ 2872.062712][T18197] pagetables 69632 [ 2872.062712][T18197] sec_pagetables 0 [ 2872.062712][T18197] percpu 64 [ 2872.062712][T18197] sock 0 [ 2872.062712][T18197] vmalloc 0 [ 2872.062712][T18197] shmem 10440704 [ 2872.062712][T18197] zswap 0 [ 2872.062712][T18197] zswapped 0 [ 2872.062712][T18197] file_mapped 262144 [ 2872.062712][T18197] file_dirty 512000 [ 2872.062712][T18197] file_writeback 0 [ 2872.062712][T18197] swapcached 0 [ 2872.062712][T18197] anon_thp 0 [ 2872.062712][T18197] file_thp 0 [ 2872.062712][T18197] shmem_thp 0 [ 2872.062712][T18197] inactive_anon 10440704 [ 2872.062712][T18197] active_anon 73728 [ 2872.062712][T18197] inactive_file 0 [ 2872.062712][T18197] active_file 512000 [ 2872.062712][T18197] unevictable 0 [ 2872.062712][T18197] slab_reclaimable 76296 [ 2872.062712][T18197] slab_unreclaimable 89336 [ 2872.062712][T18197] slab 165632 [ 2872.062712][T18197] workingset_refault_anon 0 [ 2872.062712][T18197] workingset_refault_file 0 [ 2872.062712][T18197] workingset_activate_anon 0 [ 2872.062712][T18197] workingset_activate_file 0 [ 2872.062712][T18197] workingset_restore_anon 0 [ 2872.062712][T18197] workingset_restore_file 0 [ 2872.062712][T18197] workingset_nodereclaim 0 [ 2872.062712][T18197] pgscan 1983 [ 2872.062712][T18197] pgsteal 31 [ 2872.062712][T18197] pgscan_kswapd 0 [ 2872.062712][T18197] pgscan_direct 1983 [ 2872.062712][T18197] pgscan_khugepaged 0 [ 2872.062712][T18197] pgsteal_kswapd 0 [ 2872.062712][T18197] pgsteal_direct 31 [ 2872.062712][T18197] pgsteal_khugepaged 0 [ 2872.062712][T18197] pgfault 74142 [ 2872.062712][T18197] pgmajfault 0 [ 2872.062712][T18197] pgrefill 1298306 [ 2872.062712][T18197] pgactivate 1952 [ 2872.062712][T18197] pgdeactivate 0 [ 2872.062712][T18197] pglazyfree 0 [ 2872.062712][T18197] pglazyfreed 0 [ 2872.062712][T18197] zswpin 0 [ 2872.062712][T18197] zswpout 0 [ 2872.261254][T18197] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=18196,uid=0 [ 2872.288310][T18197] Memory cgroup out of memory: Killed process 18197 (syz-executor.2) total-vm:50972kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 08:05:03 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) r3 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000100)=0x7, 0x12) 08:05:03 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x7400, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:05:03 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 08:05:03 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1324c, 0x9, 0xffc5, 0x1b208d76dec320ae, 0x8, 0x80000000, 0xcc, 0x0, 0x0, 0x0, 0x8000}, r5, 0x0, r2, 0x1) close(r4) 08:05:03 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r6], 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000040)=0x1e156c92) (async) write$cgroup_int(r2, &(0x7f0000000180), 0x12) r7 = getpid() perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x80, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x600, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext={0xb61a, 0x13e}, 0x400, 0x244, 0x3, 0x0, 0x0, 0x9, 0x4, 0x0, 0x4, 0x0, 0x8}, r7, 0xa, 0xffffffffffffffff, 0x3) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r7, r0, 0x0, 0x7, &(0x7f0000000240)='cgroup\x00'}, 0x30) 08:05:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140), 0x0, 0xfffffde4, &(0x7f0000000240), &(0x7f0000000040), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYRES8=r5, @ANYRES8=r7], 0x12) recvmsg$unix(r6, &(0x7f0000000600)={&(0x7f00000004c0), 0x6e, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/35, 0x23}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x40000000) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r10, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40082404, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) (async) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) r14 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r13, &(0x7f0000000200)=ANY=[@ANYRES8=r12, @ANYRES8=r14], 0x12) openat$cgroup_ro(r13, &(0x7f0000000440)='cpuacct.stat\x00', 0x0, 0x0) (async) write$cgroup_int(r9, &(0x7f0000000180), 0x12) 08:05:03 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) [ 2873.863409][T18057] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 2873.962190][ T5181] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2873.974707][T18057] CPU: 1 PID: 18057 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2873.985159][T18057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2873.995233][T18057] Call Trace: [ 2873.998537][T18057] [ 2874.001488][T18057] dump_stack_lvl+0x136/0x150 [ 2874.006217][T18057] dump_header+0x10a/0xd70 [ 2874.010658][T18057] oom_kill_process+0x25d/0x600 [ 2874.015534][T18057] out_of_memory+0x35c/0x1660 [ 2874.020238][T18057] ? find_held_lock+0x2d/0x110 [ 2874.025211][T18057] ? oom_killer_disable+0x2b0/0x2b0 [ 2874.030436][T18057] ? rcu_read_unlock+0x9/0x60 [ 2874.035143][T18057] ? find_held_lock+0x2d/0x110 [ 2874.039944][T18057] mem_cgroup_out_of_memory+0x206/0x270 [ 2874.045612][T18057] ? mem_cgroup_margin+0x130/0x130 [ 2874.050752][T18057] ? lock_downgrade+0x690/0x690 [ 2874.055734][T18057] try_charge_memcg+0xf99/0x13a0 [ 2874.060714][T18057] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2874.066734][T18057] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2874.072505][T18057] ? lock_downgrade+0x690/0x690 [ 2874.077405][T18057] ? lock_downgrade+0x690/0x690 [ 2874.082286][T18057] ? rcu_read_unlock+0x9/0x60 [ 2874.087002][T18057] obj_cgroup_charge+0x2af/0x5e0 [ 2874.091980][T18057] ? copy_process+0x3c0/0x7600 [ 2874.096776][T18057] kmem_cache_alloc_node+0xa8/0x3e0 [ 2874.102023][T18057] copy_process+0x3c0/0x7600 [ 2874.106653][T18057] ? _raw_spin_unlock+0x28/0x40 [ 2874.111545][T18057] ? wp_page_reuse+0x197/0x570 [ 2874.116377][T18057] ? pidfd_prepare+0x80/0x80 [ 2874.121013][T18057] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2874.127126][T18057] kernel_clone+0xeb/0x890 [ 2874.131589][T18057] ? create_io_thread+0xe0/0xe0 [ 2874.136478][T18057] ? do_user_addr_fault+0x2b1/0x1210 [ 2874.141798][T18057] ? reacquire_held_locks+0x216/0x4e0 [ 2874.147201][T18057] ? do_user_addr_fault+0x2b1/0x1210 [ 2874.152529][T18057] ? find_held_lock+0x2d/0x110 [ 2874.157339][T18057] __do_sys_clone+0xba/0x100 [ 2874.161963][T18057] ? kernel_clone+0x890/0x890 [ 2874.166687][T18057] ? syscall_enter_from_user_mode+0x26/0x80 [ 2874.172621][T18057] do_syscall_64+0x39/0xb0 [ 2874.177077][T18057] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2874.183189][T18057] RIP: 0033:0x7fcbc6a89e9b [ 2874.187628][T18057] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 08:05:03 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x7a00, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2874.207275][T18057] RSP: 002b:00007ffe1f49a3c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2874.215721][T18057] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcbc6a89e9b [ 2874.223715][T18057] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2874.231704][T18057] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556002400 [ 2874.239694][T18057] R10: 00005555560026d0 R11: 0000000000000246 R12: 0000000000000001 [ 2874.247685][T18057] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe1f49a4a0 [ 2874.255696][T18057] 08:05:03 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r0, 0x0) 08:05:03 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x8510, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:05:03 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x8520, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:05:03 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, r0, 0x0) [ 2874.623576][ T5181] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 08:05:03 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000180), 0x12) (async) r3 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000100)=0x7, 0x12) 08:05:03 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x0, 0x0, r0, 0x0) 08:05:04 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x9301, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2874.773609][T18057] memory: usage 8272kB, limit 0kB, failcnt 2758 [ 2874.785507][T18057] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2874.826030][T18057] Memory cgroup stats for /syz0: [ 2874.826260][T18057] anon 45056 [ 2874.826260][T18057] file 8343552 [ 2874.826260][T18057] kernel 81920 [ 2874.826260][T18057] kernel_stack 0 [ 2874.826260][T18057] pagetables 8192 [ 2874.826260][T18057] sec_pagetables 0 [ 2874.826260][T18057] percpu 0 [ 2874.826260][T18057] sock 0 [ 2874.826260][T18057] vmalloc 0 [ 2874.826260][T18057] shmem 8343552 [ 2874.826260][T18057] zswap 0 [ 2874.826260][T18057] zswapped 0 [ 2874.826260][T18057] file_mapped 249856 [ 2874.826260][T18057] file_dirty 0 [ 2874.826260][T18057] file_writeback 0 [ 2874.826260][T18057] swapcached 0 [ 2874.826260][T18057] anon_thp 0 [ 2874.826260][T18057] file_thp 0 [ 2874.826260][T18057] shmem_thp 0 [ 2874.826260][T18057] inactive_anon 225280 [ 2874.826260][T18057] active_anon 8163328 [ 2874.826260][T18057] inactive_file 0 [ 2874.826260][T18057] active_file 0 [ 2874.826260][T18057] unevictable 0 [ 2874.826260][T18057] slab_reclaimable 26776 [ 2874.826260][T18057] slab_unreclaimable 32296 [ 2874.826260][T18057] slab 59072 [ 2874.826260][T18057] workingset_refault_anon 0 [ 2874.826260][T18057] workingset_refault_file 0 [ 2874.826260][T18057] workingset_activate_anon 0 [ 2874.826260][T18057] workingset_activate_file 0 [ 2874.826260][T18057] workingset_restore_anon 0 [ 2874.826260][T18057] workingset_restore_file 0 [ 2874.826260][T18057] workingset_nodereclaim 0 [ 2874.826260][T18057] pgscan 875 [ 2874.826260][T18057] pgsteal 403 [ 2874.826260][T18057] pgscan_kswapd 0 [ 2874.826260][T18057] pgscan_direct 875 [ 2874.826260][T18057] pgscan_khugepaged 0 [ 2874.826260][T18057] pgsteal_kswapd 0 [ 2874.826260][T18057] pgsteal_direct 403 [ 2874.826260][T18057] pgsteal_khugepaged 0 [ 2874.826260][T18057] pgfault 131258 [ 2874.826260][T18057] pgmajfault 0 [ 2874.826260][T18057] pgrefill 1302915 [ 2874.826260][T18057] pgactivate 472 [ 2874.826260][T18057] pgdeactivate 0 [ 2874.826260][T18057] pglazyfree 0 [ 2874.826260][T18057] pglazyfreed 0 [ 2874.826260][T18057] zswpin 0 [ 2874.826260][T18057] zswpout 0 [ 2874.826260][T18057] thp_fault_alloc 0 08:05:04 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1324c, 0x9, 0xffc5, 0x1b208d76dec320ae, 0x8, 0x80000000, 0xcc, 0x0, 0x0, 0x0, 0x8000}, r5, 0x0, r2, 0x1) close(r4) [ 2875.105676][ T5181] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2875.251976][ T5181] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2875.475925][T18057] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=18057,uid=0 [ 2875.538616][T18057] Memory cgroup out of memory: Killed process 18057 (syz-executor.0) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2876.427055][T14855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2876.436171][T14855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2876.444554][T14855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2876.454896][T14855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2876.465154][ T2242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2876.473572][ T2242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2876.658578][ T5181] hsr_slave_0: left promiscuous mode [ 2876.665107][ T5181] hsr_slave_1: left promiscuous mode [ 2876.675794][ T5181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2876.720207][ T5181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2876.739493][ T5181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2876.747821][ T5181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2876.763780][ T5181] bridge_slave_1: left allmulticast mode [ 2876.776464][ T5181] bridge_slave_1: left promiscuous mode [ 2876.784535][ T5181] bridge0: port 2(bridge_slave_1) entered disabled state [ 2876.823234][ T5181] bridge_slave_0: left allmulticast mode [ 2876.828920][ T5181] bridge_slave_0: left promiscuous mode [ 2876.854274][ T5181] bridge0: port 1(bridge_slave_0) entered disabled state [ 2876.881200][ T5181] veth1_macvtap: left promiscuous mode [ 2876.886747][ T5181] veth0_macvtap: left promiscuous mode [ 2876.900433][ T5181] veth1_vlan: left promiscuous mode [ 2876.905747][ T5181] veth0_vlan: left promiscuous mode [ 2876.967140][T27851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2876.976916][T27851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2876.988252][T27851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2876.997038][T27851] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2877.004661][T27851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2877.139381][ T5181] team0 (unregistering): Port device team_slave_1 removed [ 2877.160169][ T5181] team0 (unregistering): Port device team_slave_0 removed [ 2877.173360][ T5181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2877.187085][ T5181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2877.251399][ T5181] bond0 (unregistering): Released all slaves [ 2877.503815][T18347] chnl_net:caif_netlink_parms(): no params data found [ 2877.610485][T18363] chnl_net:caif_netlink_parms(): no params data found [ 2877.714369][T18363] bridge0: port 1(bridge_slave_0) entered blocking state [ 2877.722352][T18363] bridge0: port 1(bridge_slave_0) entered disabled state [ 2877.729543][T18363] bridge_slave_0: entered allmulticast mode [ 2877.736986][T18363] bridge_slave_0: entered promiscuous mode [ 2877.744897][T18347] bridge0: port 1(bridge_slave_0) entered blocking state [ 2877.780179][T18347] bridge0: port 1(bridge_slave_0) entered disabled state [ 2877.787414][T18347] bridge_slave_0: entered allmulticast mode [ 2877.798283][T18347] bridge_slave_0: entered promiscuous mode [ 2877.808192][T18363] bridge0: port 2(bridge_slave_1) entered blocking state [ 2877.815638][T18363] bridge0: port 2(bridge_slave_1) entered disabled state [ 2877.822891][T18363] bridge_slave_1: entered allmulticast mode [ 2877.829832][T18363] bridge_slave_1: entered promiscuous mode [ 2877.836932][T18347] bridge0: port 2(bridge_slave_1) entered blocking state [ 2877.853262][T18347] bridge0: port 2(bridge_slave_1) entered disabled state [ 2877.860868][T18347] bridge_slave_1: entered allmulticast mode [ 2877.868576][T18347] bridge_slave_1: entered promiscuous mode [ 2877.934748][T18347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2877.962472][T18363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2877.974352][T18347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2877.992492][T18363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2878.062746][T18347] team0: Port device team_slave_0 added [ 2878.071295][T18347] team0: Port device team_slave_1 added [ 2878.087938][T18363] team0: Port device team_slave_0 added [ 2878.118829][T18363] team0: Port device team_slave_1 added [ 2878.179209][T18347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2878.194965][T18347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2878.239645][T18347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2878.281047][T18347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2878.288017][T18347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2878.324563][T18347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2878.340077][T18363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2878.347042][T18363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2878.400389][T18363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2878.468494][T18363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2878.475998][T18363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2878.504336][T18363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2878.560079][T27851] Bluetooth: hci1: command 0x0409 tx timeout [ 2878.572255][T18347] hsr_slave_0: entered promiscuous mode [ 2878.590342][T18347] hsr_slave_1: entered promiscuous mode [ 2878.596478][T18347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2878.623641][T18347] Cannot create hsr debugfs directory [ 2878.645685][T18363] hsr_slave_0: entered promiscuous mode [ 2878.666807][T18363] hsr_slave_1: entered promiscuous mode [ 2878.686616][T18363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2878.703652][T18363] Cannot create hsr debugfs directory [ 2879.030512][T27851] Bluetooth: hci2: command 0x0409 tx timeout [ 2879.777945][T18363] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2879.798358][T18363] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2879.853193][ T5181] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2879.872667][T18363] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2879.900503][T18363] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2879.919399][T18347] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2879.936845][ T5181] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2879.980069][T18347] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2879.996696][T18347] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2880.016715][T18347] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2880.047386][ T5181] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2880.132657][ T5181] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2880.172926][T18363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2880.224630][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2880.234069][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2880.248212][T18363] 8021q: adding VLAN 0 to HW filter on device team0 [ 2880.271139][T18347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2880.292458][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2880.304721][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2880.314361][ T5087] bridge0: port 1(bridge_slave_0) entered blocking state [ 2880.321537][ T5087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2880.349318][T18347] 8021q: adding VLAN 0 to HW filter on device team0 [ 2880.372831][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2880.383122][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2880.392445][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2880.410852][T18608] bridge0: port 2(bridge_slave_1) entered blocking state [ 2880.417968][T18608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2880.426221][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2880.435270][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2880.445437][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2880.456601][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2880.525022][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2880.541468][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2880.560111][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2880.568926][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2880.585857][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2880.596732][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2880.613479][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2880.626718][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2880.634909][T27851] Bluetooth: hci1: command 0x041b tx timeout [ 2880.642085][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2880.650889][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2880.660227][T18608] bridge0: port 1(bridge_slave_0) entered blocking state [ 2880.667335][T18608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2880.675414][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2880.684255][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2880.692845][T18608] bridge0: port 2(bridge_slave_1) entered blocking state [ 2880.700055][T18608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2880.708020][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2880.717039][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2880.728074][T18363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2880.820726][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2880.828984][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2880.838088][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2880.847648][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2880.856324][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2880.867279][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2880.876134][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2880.884850][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2880.893666][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2880.902424][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2880.928554][T18347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2880.948944][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2881.110495][T27851] Bluetooth: hci2: command 0x041b tx timeout [ 2881.250855][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2881.258328][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2881.305987][T18363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2881.363274][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2881.375335][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2881.418029][T18347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2881.443474][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2881.451472][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2881.464633][T18363] veth0_vlan: entered promiscuous mode [ 2881.498564][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2881.507567][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2881.523046][T18363] veth1_vlan: entered promiscuous mode [ 2881.532509][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2881.540589][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2881.548392][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2881.557596][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2881.566410][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2881.612493][T18347] veth0_vlan: entered promiscuous mode [ 2881.626356][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2881.635399][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2881.652692][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2881.661875][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2881.669735][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2881.705575][T18347] veth1_vlan: entered promiscuous mode [ 2881.737878][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2881.746357][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2881.764887][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2881.779716][T18363] veth0_macvtap: entered promiscuous mode [ 2881.814737][T18363] veth1_macvtap: entered promiscuous mode [ 2881.823337][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2881.839183][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2881.847988][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2881.897093][T18363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2881.918480][T18363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2881.928567][T18363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2881.947122][T18363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2881.957708][T18363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2881.976724][T18363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2881.999198][T18363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2882.011286][T18363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2882.028431][T18363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2882.040638][T18363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2882.059061][T18363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2882.068557][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2882.087108][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2882.099681][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2882.114257][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2882.128250][T18347] veth0_macvtap: entered promiscuous mode [ 2882.151255][T18363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2882.174643][T18363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2882.189374][T18363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2882.204770][T18363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2882.219543][T18363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2882.242528][T18363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2882.262604][T18363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2882.273471][T18363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2882.283841][T18363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2882.294675][T18363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2882.307234][T18363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2882.318720][T18347] veth1_macvtap: entered promiscuous mode [ 2882.326792][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2882.335603][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2882.344176][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2882.353433][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2882.389363][T18363] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2882.400657][T18363] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2882.409379][T18363] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2882.420451][T18363] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2882.468504][ T5181] hsr_slave_0: left promiscuous mode [ 2882.476203][ T5181] hsr_slave_1: left promiscuous mode [ 2882.484615][ T5181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2882.492967][ T5181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2882.503107][ T5181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2882.511551][ T5181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2882.521046][ T5181] bridge_slave_1: left allmulticast mode [ 2882.526713][ T5181] bridge_slave_1: left promiscuous mode [ 2882.532832][ T5181] bridge0: port 2(bridge_slave_1) entered disabled state [ 2882.547105][ T5181] bridge_slave_0: left allmulticast mode [ 2882.556686][ T5181] bridge_slave_0: left promiscuous mode [ 2882.569911][ T5181] bridge0: port 1(bridge_slave_0) entered disabled state [ 2882.593764][ T5181] veth1_macvtap: left promiscuous mode [ 2882.599312][ T5181] veth0_macvtap: left promiscuous mode [ 2882.615036][ T5181] veth1_vlan: left promiscuous mode [ 2882.623946][ T5181] veth0_vlan: left promiscuous mode [ 2882.710580][T27851] Bluetooth: hci1: command 0x040f tx timeout [ 2882.958684][ T5181] team0 (unregistering): Port device team_slave_1 removed [ 2882.987290][ T5181] team0 (unregistering): Port device team_slave_0 removed [ 2883.013425][ T5181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2883.055013][ T5181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2883.194737][T27851] Bluetooth: hci2: command 0x040f tx timeout [ 2883.195430][ T5181] bond0 (unregistering): Released all slaves [ 2883.299253][T18347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2883.310683][T18347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2883.330089][T18347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2883.347348][T18347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2883.366848][T18347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2883.377567][T18347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2883.389121][T18347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2883.399741][T18347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2883.409789][T18347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2883.420544][T18347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2883.432605][T18347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2883.448443][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2883.468529][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2883.489120][T18347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2883.500361][T18347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2883.511373][T18347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2883.522354][T18347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2883.532576][T18347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2883.543070][T18347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2883.553117][T18347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2883.563585][T18347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2883.573424][T18347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2883.584179][T18347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2883.595749][T18347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2883.616326][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2883.627543][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2883.651946][T18347] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2883.685556][T18347] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2883.696676][T18347] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2883.705851][T18347] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2883.757387][T15391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2883.794967][T15391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2883.842378][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2883.867083][T15391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2883.881254][T15391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2883.891726][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2883.903064][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2883.923035][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2883.965543][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2883.992167][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2884.010187][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2884.021473][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2884.182063][T18363] syz-executor.2 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 2884.202681][T18363] CPU: 1 PID: 18363 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2884.213137][T18363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2884.223216][T18363] Call Trace: [ 2884.226506][T18363] [ 2884.229445][T18363] dump_stack_lvl+0x136/0x150 [ 2884.234164][T18363] dump_header+0x10a/0xd70 [ 2884.238603][T18363] oom_kill_process+0x25d/0x600 [ 2884.243477][T18363] out_of_memory+0x35c/0x1660 [ 2884.248180][T18363] ? find_held_lock+0x2d/0x110 [ 2884.252968][T18363] ? oom_killer_disable+0x2b0/0x2b0 [ 2884.258174][T18363] ? rcu_read_unlock+0x9/0x60 [ 2884.262863][T18363] ? find_held_lock+0x2d/0x110 [ 2884.267641][T18363] mem_cgroup_out_of_memory+0x206/0x270 [ 2884.273208][T18363] ? mem_cgroup_margin+0x130/0x130 [ 2884.278328][T18363] ? lock_downgrade+0x690/0x690 [ 2884.283207][T18363] try_charge_memcg+0xf99/0x13a0 [ 2884.288172][T18363] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2884.294173][T18363] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2884.299909][T18363] ? lock_downgrade+0x690/0x690 [ 2884.304783][T18363] ? lock_downgrade+0x690/0x690 [ 2884.309665][T18363] obj_cgroup_charge+0x2af/0x5e0 [ 2884.314631][T18363] ? ext4_alloc_inode+0x28/0x650 [ 2884.319579][T18363] kmem_cache_alloc_lru+0x142/0x600 [ 2884.324799][T18363] ? ext4_free_in_core_inode+0xb0/0xb0 [ 2884.330269][T18363] ext4_alloc_inode+0x28/0x650 [ 2884.335040][T18363] ? ext4_free_in_core_inode+0xb0/0xb0 [ 2884.340502][T18363] alloc_inode+0x61/0x230 [ 2884.344844][T18363] new_inode+0x2b/0x280 [ 2884.349016][T18363] __ext4_new_inode+0x34f/0x54c0 [ 2884.353971][T18363] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2884.359799][T18363] ? d_splice_alias+0x4e1/0xe10 [ 2884.364659][T18363] ? ext4_mark_inode_used+0x1490/0x1490 [ 2884.370226][T18363] ? map_id_up+0x178/0x2f0 [ 2884.374660][T18363] ext4_mkdir+0x33e/0xb20 [ 2884.379008][T18363] ? ext4_init_new_dir+0x4c0/0x4c0 [ 2884.384127][T18363] ? inode_permission.part.0+0xb5/0x520 [ 2884.389681][T18363] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 2884.394723][T18363] vfs_mkdir+0x242/0x460 [ 2884.398977][T18363] do_mkdirat+0x28d/0x310 [ 2884.403320][T18363] ? __ia32_sys_mknod+0xb0/0xb0 [ 2884.408184][T18363] ? getname_flags.part.0+0x1dd/0x4f0 [ 2884.413569][T18363] __x64_sys_mkdirat+0x119/0x170 [ 2884.418521][T18363] do_syscall_64+0x39/0xb0 [ 2884.422967][T18363] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2884.428876][T18363] RIP: 0033:0x7f9e4128b187 [ 2884.433293][T18363] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2884.452902][T18363] RSP: 002b:00007fff9e22b2b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000102 [ 2884.461326][T18363] RAX: ffffffffffffffda RBX: 00007fff9e22b340 RCX: 00007f9e4128b187 [ 2884.469300][T18363] RDX: 00000000000001ff RSI: 00007fff9e22b340 RDI: 00000000ffffff9c [ 2884.477273][T18363] RBP: 00007fff9e22b31c R08: 0000000000000000 R09: 0000000000000003 [ 2884.485246][T18363] R10: 00007fff9e22b057 R11: 0000000000000206 R12: 0000000000000032 [ 2884.493217][T18363] R13: 00000000002c01dc R14: 0000000000000005 R15: 00007fff9e22b380 [ 2884.501207][T18363] [ 2884.544609][T18363] memory: usage 10324kB, limit 0kB, failcnt 2585 [ 2884.556364][T18363] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2884.570602][T18363] Memory cgroup stats for /syz2: [ 2884.570830][T18363] anon 45056 [ 2884.570830][T18363] file 10444800 [ 2884.570830][T18363] kernel 81920 [ 2884.570830][T18363] kernel_stack 0 [ 2884.570830][T18363] pagetables 8192 [ 2884.570830][T18363] sec_pagetables 0 [ 2884.570830][T18363] percpu 0 [ 2884.570830][T18363] sock 0 [ 2884.570830][T18363] vmalloc 0 [ 2884.570830][T18363] shmem 10440704 [ 2884.570830][T18363] zswap 0 [ 2884.570830][T18363] zswapped 0 [ 2884.570830][T18363] file_mapped 237568 [ 2884.570830][T18363] file_dirty 0 [ 2884.570830][T18363] file_writeback 0 [ 2884.570830][T18363] swapcached 0 [ 2884.570830][T18363] anon_thp 0 [ 2884.570830][T18363] file_thp 0 [ 2884.570830][T18363] shmem_thp 0 [ 2884.570830][T18363] inactive_anon 8192 [ 2884.570830][T18363] active_anon 10477568 [ 2884.570830][T18363] inactive_file 0 [ 2884.570830][T18363] active_file 4096 [ 2884.570830][T18363] unevictable 0 [ 2884.570830][T18363] slab_reclaimable 31888 [ 2884.570830][T18363] slab_unreclaimable 32296 [ 2884.570830][T18363] slab 64184 [ 2884.570830][T18363] workingset_refault_anon 0 [ 2884.570830][T18363] workingset_refault_file 0 [ 2884.570830][T18363] workingset_activate_anon 0 [ 2884.570830][T18363] workingset_activate_file 0 [ 2884.570830][T18363] workingset_restore_anon 0 [ 2884.570830][T18363] workingset_restore_file 0 [ 2884.570830][T18363] workingset_nodereclaim 0 [ 2884.570830][T18363] pgscan 1983 [ 2884.570830][T18363] pgsteal 31 [ 2884.570830][T18363] pgscan_kswapd 0 [ 2884.570830][T18363] pgscan_direct 1983 [ 2884.570830][T18363] pgscan_khugepaged 0 [ 2884.570830][T18363] pgsteal_kswapd 0 [ 2884.570830][T18363] pgsteal_direct 31 [ 2884.570830][T18363] pgsteal_khugepaged 0 [ 2884.570830][T18363] pgfault 74212 [ 2884.570830][T18363] pgmajfault 0 [ 2884.570830][T18363] pgrefill 1298383 [ 2884.570830][T18363] pgactivate 1952 [ 2884.570830][T18363] pgdeactivate 0 [ 2884.570830][T18363] pglazyfree 0 [ 2884.570830][T18363] pglazyfreed 0 [ 2884.570830][T18363] zswpin 0 [ 2884.570830][T18363] zswpout 0 [ 2884.570830][T18363] thp_fault_alloc 0 [ 2884.776085][T18363] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=18363,uid=0 [ 2884.791203][T27851] Bluetooth: hci1: command 0x0419 tx timeout [ 2884.794214][T18363] Memory cgroup out of memory: Killed process 18363 (syz-executor.2) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2884.815553][T18518] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2884.837823][T18518] CPU: 0 PID: 18518 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2884.848273][T18518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2884.858346][T18518] Call Trace: [ 2884.861640][T18518] [ 2884.864585][T18518] dump_stack_lvl+0x136/0x150 [ 2884.869301][T18518] dump_header+0x10a/0xd70 [ 2884.873750][T18518] oom_kill_process+0x25d/0x600 [ 2884.878628][T18518] out_of_memory+0x35c/0x1660 [ 2884.883334][T18518] ? oom_killer_disable+0x2b0/0x2b0 [ 2884.888555][T18518] ? kernfs_notify+0x1ac/0x410 [ 2884.893354][T18518] ? find_held_lock+0x2d/0x110 [ 2884.898159][T18518] mem_cgroup_out_of_memory+0x206/0x270 [ 2884.903736][T18518] ? mem_cgroup_margin+0x130/0x130 [ 2884.908886][T18518] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2884.914729][T18518] memory_max_write+0x2f9/0x3c0 [ 2884.919615][T18518] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2884.925720][T18518] ? lock_sync+0x190/0x190 [ 2884.930166][T18518] cgroup_file_write+0x1e2/0x7b0 [ 2884.935131][T18518] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2884.941240][T18518] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2884.946635][T18518] ? __virt_addr_valid+0x61/0x2e0 [ 2884.951702][T18518] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2884.957093][T18518] kernfs_fop_write_iter+0x3f1/0x600 [ 2884.962421][T18518] vfs_write+0x945/0xd50 [ 2884.966689][T18518] ? kernel_write+0x670/0x670 [ 2884.971394][T18518] ? __fget_files+0x26a/0x480 [ 2884.976129][T18518] ksys_write+0x12b/0x250 [ 2884.980735][T18518] ? __ia32_sys_read+0xb0/0xb0 [ 2884.985518][T18518] ? syscall_enter_from_user_mode+0x26/0x80 [ 2884.991458][T18518] do_syscall_64+0x39/0xb0 [ 2884.995914][T18518] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2885.001836][T18518] RIP: 0033:0x7f620448c169 [ 2885.006267][T18518] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2885.025896][T18518] RSP: 002b:00007f6205293168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2885.034339][T18518] RAX: ffffffffffffffda RBX: 00007f62045ac120 RCX: 00007f620448c169 [ 2885.042330][T18518] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 2885.050316][T18518] RBP: 00007f62044e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2885.058304][T18518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2885.066293][T18518] R13: 00007fff98443a9f R14: 00007f6205293300 R15: 0000000000022000 [ 2885.074303][T18518] [ 2885.253377][T18518] memory: usage 8952kB, limit 0kB, failcnt 2762 [ 2885.268495][T18518] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2885.278412][T18518] Memory cgroup stats for /syz3: [ 2885.280403][T18518] anon 200704 [ 2885.280403][T18518] file 8351744 [ 2885.280403][T18518] kernel 614400 [ 2885.280403][T18518] kernel_stack 163840 [ 2885.280403][T18518] pagetables 155648 [ 2885.280403][T18518] sec_pagetables 0 [ 2885.280403][T18518] percpu 128 [ 2885.280403][T18518] sock 0 [ 2885.280403][T18518] vmalloc 0 [ 2885.280403][T18518] shmem 8351744 [ 2885.280403][T18518] zswap 0 [ 2885.280403][T18518] zswapped 0 [ 2885.280403][T18518] file_mapped 241664 [ 2885.280403][T18518] file_dirty 0 [ 2885.280403][T18518] file_writeback 0 [ 2885.280403][T18518] swapcached 0 [ 2885.280403][T18518] anon_thp 0 [ 2885.280403][T18518] file_thp 0 [ 2885.280403][T18518] shmem_thp 0 [ 2885.280403][T18518] inactive_anon 8458240 [ 2885.280403][T18518] active_anon 94208 [ 2885.280403][T18518] inactive_file 0 [ 2885.280403][T18518] active_file 0 [ 2885.280403][T18518] unevictable 0 [ 2885.280403][T18518] slab_reclaimable 50904 [ 2885.280403][T18518] slab_unreclaimable 198168 [ 2885.280403][T18518] slab 249072 [ 2885.280403][T18518] workingset_refault_anon 0 [ 2885.280403][T18518] workingset_refault_file 1 [ 2885.280403][T18518] workingset_activate_anon 0 [ 2885.280403][T18518] workingset_activate_file 0 [ 2885.280403][T18518] workingset_restore_anon 0 [ 2885.280403][T18518] workingset_restore_file 0 [ 2885.280403][T18518] workingset_nodereclaim 0 [ 2885.280403][T18518] pgscan 199 [ 2885.280403][T18518] pgsteal 86 [ 2885.280403][T18518] pgscan_kswapd 0 [ 2885.280403][T18518] pgscan_direct 199 [ 2885.280403][T18518] pgscan_khugepaged 0 [ 2885.280403][T18518] pgsteal_kswapd 0 [ 2885.280403][T18518] pgsteal_direct 86 [ 2885.280403][T18518] pgsteal_khugepaged 0 [ 2885.280403][T18518] pgfault 89996 [ 2885.280403][T18518] pgmajfault 0 [ 2885.280403][T18518] pgrefill 192071 [ 2885.280403][T18518] pgactivate 113 [ 2885.280403][T18518] pgdeactivate 0 [ 2885.280403][T18518] pglazyfree 0 [ 2885.280403][T18518] pglazyfreed 0 [ 2885.280403][T18518] zswpin 0 [ 2885.280403][T18518] zswpout 0 [ 2885.280403][T18518] thp_fault_alloc 0 [ 2885.476594][T18518] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=18515,uid=0 08:05:14 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r6], 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000040)=0x1e156c92) (async) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000040)=0x1e156c92) write$cgroup_int(r2, &(0x7f0000000180), 0x12) r7 = getpid() perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x80, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x600, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext={0xb61a, 0x13e}, 0x400, 0x244, 0x3, 0x0, 0x0, 0x9, 0x4, 0x0, 0x4, 0x0, 0x8}, r7, 0xa, 0xffffffffffffffff, 0x3) (async) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x80, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x600, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext={0xb61a, 0x13e}, 0x400, 0x244, 0x3, 0x0, 0x0, 0x9, 0x4, 0x0, 0x4, 0x0, 0x8}, r7, 0xa, 0xffffffffffffffff, 0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r7, r0, 0x0, 0x7, &(0x7f0000000240)='cgroup\x00'}, 0x30) 08:05:14 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xba00, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:05:14 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}, 0x0, 0x0, r0, 0x0) 08:05:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) (async) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140), 0x0, 0xfffffde4, &(0x7f0000000240), &(0x7f0000000040), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) (async) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYRES8=r5, @ANYRES8=r7], 0x12) (async) recvmsg$unix(r6, &(0x7f0000000600)={&(0x7f00000004c0), 0x6e, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/35, 0x23}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x40000000) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r10, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40082404, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) r14 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r13, &(0x7f0000000200)=ANY=[@ANYRES8=r12, @ANYRES8=r14], 0x12) openat$cgroup_ro(r13, &(0x7f0000000440)='cpuacct.stat\x00', 0x0, 0x0) write$cgroup_int(r9, &(0x7f0000000180), 0x12) 08:05:14 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1324c, 0x9, 0xffc5, 0x1b208d76dec320ae, 0x8, 0x80000000, 0xcc, 0x0, 0x0, 0x0, 0x8000}, r5, 0x0, r2, 0x1) close(r4) 08:05:14 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) r3 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000100)=0x7, 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000180), 0x12) (async) openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000100)=0x7, 0x12) (async) [ 2885.500992][T18518] Memory cgroup out of memory: Killed process 18515 (syz-executor.3) total-vm:51104kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 08:05:14 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xca00, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:05:14 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, r0, 0x0) [ 2885.787020][T18347] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2885.831861][T18347] CPU: 0 PID: 18347 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2885.842333][T18347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2885.852413][T18347] Call Trace: [ 2885.855708][T18347] [ 2885.858656][T18347] dump_stack_lvl+0x136/0x150 [ 2885.863380][T18347] dump_header+0x10a/0xd70 [ 2885.867825][T18347] oom_kill_process+0x25d/0x600 [ 2885.872707][T18347] out_of_memory+0x35c/0x1660 [ 2885.877419][T18347] ? find_held_lock+0x2d/0x110 08:05:15 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xda00, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:05:15 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0x0, 0x0, r0, 0x0) [ 2885.882214][T18347] ? oom_killer_disable+0x2b0/0x2b0 [ 2885.887454][T18347] ? rcu_read_unlock+0x9/0x60 [ 2885.892178][T18347] ? find_held_lock+0x2d/0x110 [ 2885.897064][T18347] mem_cgroup_out_of_memory+0x206/0x270 [ 2885.902646][T18347] ? mem_cgroup_margin+0x130/0x130 [ 2885.907786][T18347] ? lock_downgrade+0x690/0x690 [ 2885.912683][T18347] try_charge_memcg+0xf99/0x13a0 [ 2885.917665][T18347] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2885.923686][T18347] ? get_mem_cgroup_from_objcg+0xa1/0x280 08:05:15 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xe408, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2885.929443][T18347] ? lock_downgrade+0x690/0x690 [ 2885.934328][T18347] ? lock_downgrade+0x690/0x690 [ 2885.939224][T18347] __memcg_kmem_charge_page+0x16e/0x3c0 [ 2885.944816][T18347] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2885.951016][T18347] copy_process+0x4f9/0x7600 [ 2885.955639][T18347] ? _raw_spin_unlock+0x28/0x40 [ 2885.960522][T18347] ? wp_page_reuse+0x197/0x570 [ 2885.965335][T18347] ? pidfd_prepare+0x80/0x80 [ 2885.969967][T18347] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2885.975983][T18347] kernel_clone+0xeb/0x890 [ 2885.980432][T18347] ? create_io_thread+0xe0/0xe0 [ 2885.985310][T18347] ? do_user_addr_fault+0x2b1/0x1210 [ 2885.990627][T18347] ? reacquire_held_locks+0x216/0x4e0 [ 2885.996392][T18347] ? do_user_addr_fault+0x2b1/0x1210 [ 2886.001718][T18347] ? find_held_lock+0x2d/0x110 [ 2886.006519][T18347] __do_sys_clone+0xba/0x100 [ 2886.011143][T18347] ? kernel_clone+0x890/0x890 [ 2886.015873][T18347] ? syscall_enter_from_user_mode+0x26/0x80 [ 2886.021806][T18347] do_syscall_64+0x39/0xb0 [ 2886.026269][T18347] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2886.032198][T18347] RIP: 0033:0x7f6204489e9b [ 2886.036630][T18347] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2886.056258][T18347] RSP: 002b:00007fff98443ce0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2886.064696][T18347] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6204489e9b [ 2886.072694][T18347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 08:05:15 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xf000, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2886.080686][T18347] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556dba400 [ 2886.088676][T18347] R10: 0000555556dba6d0 R11: 0000000000000246 R12: 0000000000000001 [ 2886.096664][T18347] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff98443dc0 [ 2886.104667][T18347] [ 2886.314519][T18347] memory: usage 8620kB, limit 0kB, failcnt 2828 [ 2886.322254][T18347] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2886.330795][T18347] Memory cgroup stats for /syz3: [ 2886.331020][T18347] anon 147456 [ 2886.331020][T18347] file 8351744 [ 2886.331020][T18347] kernel 327680 [ 2886.331020][T18347] kernel_stack 32768 [ 2886.331020][T18347] pagetables 81920 [ 2886.331020][T18347] sec_pagetables 0 [ 2886.331020][T18347] percpu 128 [ 2886.331020][T18347] sock 0 [ 2886.331020][T18347] vmalloc 0 [ 2886.331020][T18347] shmem 8351744 [ 2886.331020][T18347] zswap 0 [ 2886.331020][T18347] zswapped 0 [ 2886.331020][T18347] file_mapped 241664 [ 2886.331020][T18347] file_dirty 0 [ 2886.331020][T18347] file_writeback 0 [ 2886.331020][T18347] swapcached 0 [ 2886.331020][T18347] anon_thp 0 [ 2886.331020][T18347] file_thp 0 [ 2886.331020][T18347] shmem_thp 0 [ 2886.331020][T18347] inactive_anon 8458240 [ 2886.331020][T18347] active_anon 40960 [ 2886.331020][T18347] inactive_file 0 [ 2886.331020][T18347] active_file 0 [ 2886.331020][T18347] unevictable 0 [ 2886.331020][T18347] slab_reclaimable 36336 [ 2886.331020][T18347] slab_unreclaimable 131064 [ 2886.331020][T18347] slab 167400 [ 2886.331020][T18347] workingset_refault_anon 0 [ 2886.331020][T18347] workingset_refault_file 1 [ 2886.331020][T18347] workingset_activate_anon 0 [ 2886.331020][T18347] workingset_activate_file 0 [ 2886.331020][T18347] workingset_restore_anon 0 [ 2886.331020][T18347] workingset_restore_file 0 [ 2886.331020][T18347] workingset_nodereclaim 0 [ 2886.331020][T18347] pgscan 199 [ 2886.331020][T18347] pgsteal 86 [ 2886.331020][T18347] pgscan_kswapd 0 [ 2886.331020][T18347] pgscan_direct 199 [ 2886.331020][T18347] pgscan_khugepaged 0 [ 2886.331020][T18347] pgsteal_kswapd 0 [ 2886.331020][T18347] pgsteal_direct 86 [ 2886.331020][T18347] pgsteal_khugepaged 0 [ 2886.331020][T18347] pgfault 90007 [ 2886.331020][T18347] pgmajfault 0 [ 2886.331020][T18347] pgrefill 192071 [ 2886.331020][T18347] pgactivate 113 [ 2886.331020][T18347] pgdeactivate 0 [ 2886.331020][T18347] pglazyfree 0 [ 2886.331020][T18347] pglazyfreed 0 [ 2886.331020][T18347] zswpin 0 [ 2886.331020][T18347] zswpout 0 [ 2886.331020][T18347] thp_fault_alloc 0 [ 2886.544747][T18347] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=18347,uid=0 [ 2886.600988][T18347] Memory cgroup out of memory: Killed process 18347 (syz-executor.3) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 08:05:16 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.events\x00', 0x0, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r5], 0x12) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x9, 0xa8, 0x4, 0x0, 0x5e, 0x10048, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x9180, 0xe, 0x4c, 0x7, 0x8, 0xaf, 0x1, 0x0, 0x8}, 0x0, 0x9, r4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x428702, 0x0) 08:05:16 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xfe03, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:05:16 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) [ 2887.089053][ T5181] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2887.217393][ T5181] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2887.312466][ T5181] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2887.388104][ T5181] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2887.637875][ T5181] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2887.754943][ T2242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2887.767987][ T2242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2887.776750][ T2242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2887.785772][T14855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2887.800426][T14855] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2887.808153][T14855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2887.821100][ T5181] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2887.887243][ T5181] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2887.944369][ T5181] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2888.172609][T18579] chnl_net:caif_netlink_parms(): no params data found [ 2888.291473][T18579] bridge0: port 1(bridge_slave_0) entered blocking state [ 2888.298677][T18579] bridge0: port 1(bridge_slave_0) entered disabled state [ 2888.306729][T18579] bridge_slave_0: entered allmulticast mode [ 2888.314292][T18579] bridge_slave_0: entered promiscuous mode [ 2888.359753][T18579] bridge0: port 2(bridge_slave_1) entered blocking state [ 2888.367111][T18579] bridge0: port 2(bridge_slave_1) entered disabled state [ 2888.374552][T18579] bridge_slave_1: entered allmulticast mode [ 2888.383180][T18579] bridge_slave_1: entered promiscuous mode [ 2888.425138][T18579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2888.437148][T18579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2888.512399][T18579] team0: Port device team_slave_0 added [ 2888.529447][T18579] team0: Port device team_slave_1 added [ 2888.588852][T18579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2888.595878][T18579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2888.625257][T18579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2888.666945][T18579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2888.674117][T18579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2888.700282][T18579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2888.741846][T18579] hsr_slave_0: entered promiscuous mode [ 2888.749157][T18579] hsr_slave_1: entered promiscuous mode [ 2889.381820][T18579] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2889.398759][T18579] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2889.408247][T18579] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2889.425006][T18579] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2889.544805][T18579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2889.559670][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2889.569237][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2889.583205][T18579] 8021q: adding VLAN 0 to HW filter on device team0 [ 2889.629563][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2889.639492][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2889.656996][T30615] bridge0: port 1(bridge_slave_0) entered blocking state [ 2889.664171][T30615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2889.686999][ T5181] hsr_slave_0: left promiscuous mode [ 2889.698796][ T5181] hsr_slave_1: left promiscuous mode [ 2889.707642][ T5181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2889.724039][ T5181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2889.738097][ T5181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2889.746118][ T5181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2889.755798][ T5181] bridge_slave_1: left allmulticast mode [ 2889.761711][ T5181] bridge_slave_1: left promiscuous mode [ 2889.767391][ T5181] bridge0: port 2(bridge_slave_1) entered disabled state [ 2889.777935][ T5181] bridge_slave_0: left allmulticast mode [ 2889.784016][ T5181] bridge_slave_0: left promiscuous mode [ 2889.789697][ T5181] bridge0: port 1(bridge_slave_0) entered disabled state [ 2889.804054][ T5181] hsr_slave_0: left promiscuous mode [ 2889.809942][ T5181] hsr_slave_1: left promiscuous mode [ 2889.816780][ T5181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2889.824626][ T5181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2889.831976][T14855] Bluetooth: hci1: command 0x0409 tx timeout [ 2889.851947][ T5181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2889.859361][ T5181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2889.869395][ T5181] bridge_slave_1: left allmulticast mode [ 2889.875502][ T5181] bridge_slave_1: left promiscuous mode [ 2889.881324][ T5181] bridge0: port 2(bridge_slave_1) entered disabled state [ 2889.890546][ T5181] bridge_slave_0: left allmulticast mode [ 2889.896252][ T5181] bridge_slave_0: left promiscuous mode [ 2889.902021][ T5181] bridge0: port 1(bridge_slave_0) entered disabled state [ 2889.927836][ T5181] veth1_macvtap: left promiscuous mode [ 2889.933584][ T5181] veth0_macvtap: left promiscuous mode [ 2889.939225][ T5181] veth1_vlan: left promiscuous mode [ 2889.944677][ T5181] veth0_vlan: left promiscuous mode [ 2889.951885][ T5181] veth1_macvtap: left promiscuous mode [ 2889.957416][ T5181] veth0_macvtap: left promiscuous mode [ 2889.965057][ T5181] veth1_vlan: left promiscuous mode [ 2889.970506][ T5181] veth0_vlan: left promiscuous mode [ 2890.412348][ T5181] team0 (unregistering): Port device team_slave_1 removed [ 2890.427492][ T5181] team0 (unregistering): Port device team_slave_0 removed [ 2890.442343][ T5181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2890.458968][ T5181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2890.556704][ T5181] bond0 (unregistering): Released all slaves [ 2890.772393][ T5181] team0 (unregistering): Port device team_slave_1 removed [ 2890.787722][ T5181] team0 (unregistering): Port device team_slave_0 removed [ 2890.803628][ T5181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2890.827478][ T5181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2890.947265][ T5181] bond0 (unregistering): Released all slaves [ 2891.041851][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2891.050822][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2891.059496][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2891.068575][T11060] bridge0: port 2(bridge_slave_1) entered blocking state [ 2891.075741][T11060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2891.092363][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2891.107605][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2891.138875][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2891.167171][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2891.177086][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2891.194344][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2891.208374][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2891.225150][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2891.236872][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2891.253702][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2891.268855][T18579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2891.301155][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2891.565278][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2891.580435][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2891.601049][T18579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2891.638461][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2891.648601][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2891.695181][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2891.708507][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2891.720695][T18579] veth0_vlan: entered promiscuous mode [ 2891.730388][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2891.738181][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2891.760443][T18579] veth1_vlan: entered promiscuous mode [ 2891.803169][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2891.821838][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2891.829954][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2891.850981][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2891.867121][T18579] veth0_macvtap: entered promiscuous mode [ 2891.894123][T18579] veth1_macvtap: entered promiscuous mode [ 2891.911711][T14855] Bluetooth: hci1: command 0x041b tx timeout [ 2891.919253][T18579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2891.955890][T18579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2891.969655][T18579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2891.986126][T18579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2892.005879][T18579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2892.018565][T18579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2892.032032][T18579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2892.042768][T18579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2892.054301][T18579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2892.064915][T18579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2892.075702][T18579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2892.085912][T18579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2892.096671][T18579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2892.106759][T18579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2892.117535][T18579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2892.127953][T18579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2892.148262][T18579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2892.161707][T18579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2892.169879][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2892.178862][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2892.193289][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2892.205940][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2892.217290][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2892.233242][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2892.260270][T18579] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2892.269013][T18579] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2892.279408][T18579] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2892.288457][T18579] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2892.386386][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2892.410806][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2892.424497][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2892.434089][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2892.443957][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2892.456509][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2892.765839][T18677] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2892.801258][T18677] CPU: 0 PID: 18677 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2892.811766][T18677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2892.821851][T18677] Call Trace: [ 2892.825143][T18677] [ 2892.828092][T18677] dump_stack_lvl+0x136/0x150 [ 2892.832818][T18677] dump_header+0x10a/0xd70 [ 2892.837270][T18677] oom_kill_process+0x25d/0x600 [ 2892.842162][T18677] out_of_memory+0x35c/0x1660 [ 2892.846870][T18677] ? io_schedule_timeout+0x150/0x150 [ 2892.852195][T18677] ? oom_killer_disable+0x2b0/0x2b0 [ 2892.857421][T18677] ? kernfs_notify+0x1ac/0x410 [ 2892.862247][T18677] mem_cgroup_out_of_memory+0x206/0x270 [ 2892.867834][T18677] ? mem_cgroup_margin+0x130/0x130 [ 2892.872996][T18677] memory_max_write+0x2f9/0x3c0 [ 2892.877890][T18677] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2892.884003][T18677] ? lock_sync+0x190/0x190 [ 2892.888463][T18677] cgroup_file_write+0x1e2/0x7b0 [ 2892.893435][T18677] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2892.899553][T18677] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2892.904952][T18677] ? __virt_addr_valid+0x61/0x2e0 [ 2892.910022][T18677] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2892.915415][T18677] kernfs_fop_write_iter+0x3f1/0x600 [ 2892.920742][T18677] vfs_write+0x945/0xd50 [ 2892.925010][T18677] ? kernel_write+0x670/0x670 [ 2892.929713][T18677] ? __fget_files+0x26a/0x480 [ 2892.934447][T18677] ksys_write+0x12b/0x250 [ 2892.938803][T18677] ? __ia32_sys_read+0xb0/0xb0 [ 2892.943593][T18677] ? syscall_enter_from_user_mode+0x26/0x80 [ 2892.949536][T18677] do_syscall_64+0x39/0xb0 [ 2892.954001][T18677] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2892.959932][T18677] RIP: 0033:0x7f41dbc8c169 [ 2892.964364][T18677] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2892.983999][T18677] RSP: 002b:00007f41dc91b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2892.992439][T18677] RAX: ffffffffffffffda RBX: 00007f41dbdabf80 RCX: 00007f41dbc8c169 [ 2893.000431][T18677] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000008 [ 2893.008418][T18677] RBP: 00007f41dbce7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2893.016409][T18677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2893.024394][T18677] R13: 00007fffbc3cfc6f R14: 00007f41dc91b300 R15: 0000000000022000 [ 2893.032410][T18677] [ 2893.153513][T18677] memory: usage 9188kB, limit 0kB, failcnt 2775 [ 2893.159808][T18677] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2893.183049][T18677] Memory cgroup stats for /syz0: [ 2893.183268][T18677] anon 90112 [ 2893.183268][T18677] file 8851456 [ 2893.183268][T18677] kernel 446464 [ 2893.183268][T18677] kernel_stack 131072 [ 2893.183268][T18677] pagetables 81920 [ 2893.183268][T18677] sec_pagetables 0 [ 2893.183268][T18677] percpu 64 [ 2893.183268][T18677] sock 0 [ 2893.183268][T18677] vmalloc 0 [ 2893.183268][T18677] shmem 8343552 [ 2893.183268][T18677] zswap 0 [ 2893.183268][T18677] zswapped 0 [ 2893.183268][T18677] file_mapped 274432 [ 2893.183268][T18677] file_dirty 507904 [ 2893.183268][T18677] file_writeback 0 [ 2893.183268][T18677] swapcached 0 [ 2893.183268][T18677] anon_thp 0 [ 2893.183268][T18677] file_thp 0 [ 2893.183268][T18677] shmem_thp 0 [ 2893.183268][T18677] inactive_anon 90112 [ 2893.183268][T18677] active_anon 8343552 [ 2893.183268][T18677] inactive_file 0 [ 2893.183268][T18677] active_file 507904 [ 2893.183268][T18677] unevictable 0 [ 2893.183268][T18677] slab_reclaimable 81208 [ 2893.183268][T18677] slab_unreclaimable 120432 [ 2893.183268][T18677] slab 201640 [ 2893.183268][T18677] workingset_refault_anon 0 [ 2893.183268][T18677] workingset_refault_file 0 [ 2893.183268][T18677] workingset_activate_anon 0 [ 2893.183268][T18677] workingset_activate_file 0 [ 2893.183268][T18677] workingset_restore_anon 0 [ 2893.183268][T18677] workingset_restore_file 0 [ 2893.183268][T18677] workingset_nodereclaim 0 [ 2893.183268][T18677] pgscan 875 [ 2893.183268][T18677] pgsteal 403 [ 2893.183268][T18677] pgscan_kswapd 0 [ 2893.183268][T18677] pgscan_direct 875 [ 2893.183268][T18677] pgscan_khugepaged 0 [ 2893.183268][T18677] pgsteal_kswapd 0 [ 2893.183268][T18677] pgsteal_direct 403 [ 2893.183268][T18677] pgsteal_khugepaged 0 [ 2893.183268][T18677] pgfault 131425 [ 2893.183268][T18677] pgmajfault 0 [ 2893.183268][T18677] pgrefill 1310851 [ 2893.183268][T18677] pgactivate 472 [ 2893.183268][T18677] pgdeactivate 0 [ 2893.183268][T18677] pglazyfree 0 [ 2893.183268][T18677] pglazyfreed 0 [ 2893.183268][T18677] zswpin 0 [ 2893.183268][T18677] zswpout 0 [ 2893.410199][T18677] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=18579,uid=0 [ 2893.434788][T18677] Memory cgroup out of memory: Killed process 18579 (syz-executor.0) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 08:05:24 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r3 = getpid() r4 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0)={0x0, r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r6, @ANYRES8=r8], 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x81, 0x81, 0x8, 0x0, 0x8, 0x29200, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000040), 0xd}, 0x5, 0xfff, 0x63f5, 0x1, 0x7, 0xffffffff, 0x8000, 0x0, 0x0, 0x0, 0x5}, r3, 0x2, r7, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r2}, 0x8) mkdirat$cgroup(r9, &(0x7f0000000300)='syz1\x00', 0x1ff) r10 = getpid() perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x9, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x9009, 0xc9, 0xfff, 0x3, 0x7, 0x4, 0x0, 0x0, 0x8001, 0x0, 0x800000000006d}, r10, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r10, r4, 0x0, 0x2, &(0x7f0000000240)='[\x00'}, 0x30) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 08:05:24 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.events\x00', 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.events\x00', 0x0, 0x0) close(r3) (async) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r5], 0x12) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x9, 0xa8, 0x4, 0x0, 0x5e, 0x10048, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x9180, 0xe, 0x4c, 0x7, 0x8, 0xaf, 0x1, 0x0, 0x8}, 0x0, 0x9, r4, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x9, 0xa8, 0x4, 0x0, 0x5e, 0x10048, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x9180, 0xe, 0x4c, 0x7, 0x8, 0xaf, 0x1, 0x0, 0x8}, 0x0, 0x9, r4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x428702, 0x0) 08:05:24 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xff00, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:05:24 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 08:05:24 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) r3 = getpid() perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x9, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x9009, 0xc9, 0xfff, 0x3, 0x7, 0x4, 0x0, 0x0, 0x8001, 0x0, 0x800000000006d}, r3, 0x11, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x81, 0x6, 0x7, 0x0, 0x6, 0xc601, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfff, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x4000, 0x5, 0x10, 0x5, 0x1ff, 0x2b26, 0x3f, 0x0, 0x0, 0x0, 0x1f}, r3, 0x20000000000f, r2, 0x9) 08:05:24 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1324c, 0x9, 0xffc5, 0x1b208d76dec320ae, 0x8, 0x80000000, 0xcc, 0x0, 0x200}, r5, 0x0, r2, 0x1) close(r4) [ 2895.038750][ T5181] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 08:05:24 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) 08:05:24 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x40000, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:05:24 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x1a03b9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:05:24 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r0, 0x0) [ 2895.409058][ T5181] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 08:05:24 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, r0, 0x0) 08:05:24 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x200000, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:05:24 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r3 = getpid() r4 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0)={0x0, r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r6, @ANYRES8=r8], 0x12) (async) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r6, @ANYRES8=r8], 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x81, 0x81, 0x8, 0x0, 0x8, 0x29200, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000040), 0xd}, 0x5, 0xfff, 0x63f5, 0x1, 0x7, 0xffffffff, 0x8000, 0x0, 0x0, 0x0, 0x5}, r3, 0x2, r7, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r2}, 0x8) mkdirat$cgroup(r9, &(0x7f0000000300)='syz1\x00', 0x1ff) getpid() (async) r10 = getpid() perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x9, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x9009, 0xc9, 0xfff, 0x3, 0x7, 0x4, 0x0, 0x0, 0x8001, 0x0, 0x800000000006d}, r10, 0x11, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x9, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x9009, 0xc9, 0xfff, 0x3, 0x7, 0x4, 0x0, 0x0, 0x8001, 0x0, 0x800000000006d}, r10, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r10, r4, 0x0, 0x2, &(0x7f0000000240)='[\x00'}, 0x30) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 2895.565142][ T5181] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2895.691630][ T5181] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 08:05:25 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1324c, 0x9, 0xffc5, 0x1b208d76dec320ae, 0x8, 0x80000000, 0xcc, 0x0, 0x200}, r5, 0x0, r2, 0x1) close(r4) [ 2896.672905][ T5181] hsr_slave_0: left promiscuous mode [ 2896.685114][ T5181] hsr_slave_1: left promiscuous mode [ 2896.697047][ T5181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2896.712231][ T5181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2896.730780][ T5181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2896.738571][ T5181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2896.768023][ T5181] bridge_slave_1: left allmulticast mode [ 2896.780706][ T5181] bridge_slave_1: left promiscuous mode [ 2896.786450][ T5181] bridge0: port 2(bridge_slave_1) entered disabled state [ 2896.809674][ T5181] bridge_slave_0: left allmulticast mode [ 2896.815558][ T5181] bridge_slave_0: left promiscuous mode [ 2896.822151][ T5181] bridge0: port 1(bridge_slave_0) entered disabled state [ 2896.838966][ T5181] veth1_macvtap: left promiscuous mode [ 2896.851600][ T5181] veth0_macvtap: left promiscuous mode [ 2896.862946][ T5181] veth1_vlan: left promiscuous mode [ 2896.876530][ T5181] veth0_vlan: left promiscuous mode [ 2897.237854][T27851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2897.249021][T27851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2897.262800][T27851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2897.273396][T27851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2897.283411][T27851] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2897.292954][T27851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2897.360870][ T5181] team0 (unregistering): Port device team_slave_1 removed [ 2897.409883][ T5181] team0 (unregistering): Port device team_slave_0 removed [ 2897.447530][ T5181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2897.476355][T14855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2897.490180][T14855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2897.497990][T14855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2897.505711][ T5181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2897.515223][T14855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2897.524368][T14855] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2897.532436][T14855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2897.592683][ T1208] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.609743][ T1208] ieee802154 phy1 wpan1: encryption failed: -22 [ 2897.643608][ T5181] bond0 (unregistering): Released all slaves [ 2897.708225][T14855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2897.717747][T14855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2897.727826][T14855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2897.737572][T14855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2897.760184][T14855] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2897.767421][T14855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2898.183626][T18820] chnl_net:caif_netlink_parms(): no params data found [ 2898.206315][T18814] chnl_net:caif_netlink_parms(): no params data found [ 2898.231417][T18818] chnl_net:caif_netlink_parms(): no params data found [ 2898.426260][T18820] bridge0: port 1(bridge_slave_0) entered blocking state [ 2898.444550][T18820] bridge0: port 1(bridge_slave_0) entered disabled state [ 2898.467868][T18820] bridge_slave_0: entered allmulticast mode [ 2898.490138][T18820] bridge_slave_0: entered promiscuous mode [ 2898.513380][T18820] bridge0: port 2(bridge_slave_1) entered blocking state [ 2898.520822][T18820] bridge0: port 2(bridge_slave_1) entered disabled state [ 2898.528005][T18820] bridge_slave_1: entered allmulticast mode [ 2898.551276][T18820] bridge_slave_1: entered promiscuous mode [ 2898.677255][T18814] bridge0: port 1(bridge_slave_0) entered blocking state [ 2898.687000][T18814] bridge0: port 1(bridge_slave_0) entered disabled state [ 2898.694480][T18814] bridge_slave_0: entered allmulticast mode [ 2898.703965][T18814] bridge_slave_0: entered promiscuous mode [ 2898.711691][T18818] bridge0: port 1(bridge_slave_0) entered blocking state [ 2898.718816][T18818] bridge0: port 1(bridge_slave_0) entered disabled state [ 2898.727483][T18818] bridge_slave_0: entered allmulticast mode [ 2898.734477][T18818] bridge_slave_0: entered promiscuous mode [ 2898.745934][T18820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2898.757681][T18814] bridge0: port 2(bridge_slave_1) entered blocking state [ 2898.765826][T18814] bridge0: port 2(bridge_slave_1) entered disabled state [ 2898.773429][T18814] bridge_slave_1: entered allmulticast mode [ 2898.781306][T18814] bridge_slave_1: entered promiscuous mode [ 2898.793560][T18818] bridge0: port 2(bridge_slave_1) entered blocking state [ 2898.804041][T18818] bridge0: port 2(bridge_slave_1) entered disabled state [ 2898.814840][T18818] bridge_slave_1: entered allmulticast mode [ 2898.822013][T18818] bridge_slave_1: entered promiscuous mode [ 2898.831059][T18820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2898.898469][T18814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2898.933287][T18818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2898.960558][T18814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2898.971629][T18818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2899.011813][T18820] team0: Port device team_slave_0 added [ 2899.040519][T18820] team0: Port device team_slave_1 added [ 2899.067313][T18818] team0: Port device team_slave_0 added [ 2899.084934][T18818] team0: Port device team_slave_1 added [ 2899.112013][T18814] team0: Port device team_slave_0 added [ 2899.173374][T18814] team0: Port device team_slave_1 added [ 2899.179647][T18818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2899.188165][T18818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2899.217182][T18818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2899.229872][T18820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2899.238120][T18820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2899.266634][T18820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2899.294831][T18818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2899.302249][T18818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2899.328668][T18818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2899.349223][T18820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2899.356660][T18820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2899.383127][T27851] Bluetooth: hci1: command 0x0409 tx timeout [ 2899.393324][T18820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2899.528957][T18814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2899.540423][T18814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2899.567640][T18814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2899.594940][T14855] Bluetooth: hci2: command 0x0409 tx timeout [ 2899.605035][T18814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2899.613620][T18814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2899.639878][T18814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2899.654716][T18818] hsr_slave_0: entered promiscuous mode [ 2899.661249][T18818] hsr_slave_1: entered promiscuous mode [ 2899.672017][T18820] hsr_slave_0: entered promiscuous mode [ 2899.678680][T18820] hsr_slave_1: entered promiscuous mode [ 2899.685253][T18820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2899.693525][T18820] Cannot create hsr debugfs directory [ 2899.757920][T18814] hsr_slave_0: entered promiscuous mode [ 2899.764416][T18814] hsr_slave_1: entered promiscuous mode [ 2899.771417][T18814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2899.779378][T18814] Cannot create hsr debugfs directory [ 2899.830419][T14855] Bluetooth: hci4: command 0x0409 tx timeout [ 2901.264370][T18820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2901.283135][T18820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2901.315663][T18820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2901.329119][T18820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2901.379833][T18818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2901.424234][T18818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2901.430162][T14855] Bluetooth: hci1: command 0x041b tx timeout [ 2901.481400][T18818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2901.531704][T18818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2901.554126][T18814] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2901.574424][T18814] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2901.610618][T18814] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2901.632431][T18820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2901.646564][T18814] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2901.670379][T14855] Bluetooth: hci2: command 0x041b tx timeout [ 2901.673129][T18820] 8021q: adding VLAN 0 to HW filter on device team0 [ 2901.684665][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2901.692880][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2901.741935][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2901.762769][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2901.778088][T14297] bridge0: port 1(bridge_slave_0) entered blocking state [ 2901.785254][T14297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2901.801358][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2901.811858][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2901.828329][T14297] bridge0: port 2(bridge_slave_1) entered blocking state [ 2901.835470][T14297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2901.845591][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2901.854956][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2901.867384][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2901.897344][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2901.906859][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2901.915125][T14855] Bluetooth: hci4: command 0x041b tx timeout [ 2901.923297][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2901.932542][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2901.955745][T18820] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2901.967013][T18820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2901.995649][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2902.005432][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2902.014290][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2902.023232][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2902.032234][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2902.068216][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2902.084160][T18818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2902.128140][T18814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2902.140335][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2902.148168][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2902.159194][T18818] 8021q: adding VLAN 0 to HW filter on device team0 [ 2902.177146][T18814] 8021q: adding VLAN 0 to HW filter on device team0 [ 2902.186074][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2902.195073][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2902.242025][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2902.251762][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2902.260549][T30615] bridge0: port 1(bridge_slave_0) entered blocking state [ 2902.267746][T30615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2902.306532][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2902.315726][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2902.324520][T30615] bridge0: port 2(bridge_slave_1) entered blocking state [ 2902.331669][T30615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2902.340287][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2902.349238][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2902.358323][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2902.375659][T30615] bridge0: port 1(bridge_slave_0) entered blocking state [ 2902.382809][T30615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2902.400452][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2902.416618][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2902.426486][T30615] bridge0: port 2(bridge_slave_1) entered blocking state [ 2902.433642][T30615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2902.449456][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2902.459192][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2902.547745][T18814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2902.579154][T18814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2902.602776][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2902.615056][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2902.623318][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2902.632639][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2902.641481][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2902.649784][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2902.658518][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2902.667248][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2902.675479][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2902.684117][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2902.692725][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2902.701209][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2902.709669][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2902.718318][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2902.726883][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2902.735276][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2902.743849][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2902.752892][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2902.761639][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2902.773264][T18820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2902.808297][T18818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2902.821135][T18818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2902.837614][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2902.847013][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2902.855398][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2902.864184][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2902.872968][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2902.911970][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2902.922069][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2902.965151][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2902.974957][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2902.990728][T18820] veth0_vlan: entered promiscuous mode [ 2903.012127][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2903.020602][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2903.029869][T18820] veth1_vlan: entered promiscuous mode [ 2903.134924][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2903.149183][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2903.175234][T18820] veth0_macvtap: entered promiscuous mode [ 2903.201537][T18820] veth1_macvtap: entered promiscuous mode [ 2903.245470][T18820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2903.265372][T18820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2903.286232][T18820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2903.299829][T18820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2903.320441][T18820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2903.340057][T18820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2903.349888][T18820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2903.379119][T18820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2903.391867][T18820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2903.412439][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2903.434154][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2903.460932][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2903.469712][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2903.500934][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2903.508436][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2903.516225][T14855] Bluetooth: hci1: command 0x040f tx timeout [ 2903.544111][T18818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2903.560870][T18820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2903.578886][T18820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2903.589002][T18820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2903.601373][T18820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2903.611267][T18820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2903.621744][T18820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2903.631643][T18820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2903.642506][T18820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2903.653623][T18820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2903.679120][T18820] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2903.688018][T18820] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2903.697119][T18820] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2903.706226][T18820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2903.716298][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2903.727837][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2903.738334][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2903.748240][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2903.755779][T14855] Bluetooth: hci2: command 0x040f tx timeout [ 2903.766787][T18814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2903.836380][T18818] veth0_vlan: entered promiscuous mode [ 2903.844463][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2903.855523][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2903.864969][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2903.873852][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2903.882780][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2903.891820][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2903.911666][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2903.919267][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2903.954732][T18818] veth1_vlan: entered promiscuous mode [ 2903.973392][T18814] veth0_vlan: entered promiscuous mode [ 2903.987590][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2903.995279][T14855] Bluetooth: hci4: command 0x040f tx timeout [ 2904.003447][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2904.012844][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2904.039255][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2904.047542][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2904.055769][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2904.067199][T18814] veth1_vlan: entered promiscuous mode [ 2904.101110][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2904.111163][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2904.115110][T18818] veth0_macvtap: entered promiscuous mode [ 2904.129399][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2904.137152][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2904.146080][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2904.169777][T18814] veth0_macvtap: entered promiscuous mode [ 2904.172547][T15391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2904.185287][T15391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2904.188673][T18818] veth1_macvtap: entered promiscuous mode [ 2904.199720][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2904.208311][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2904.219173][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2904.227946][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2904.236563][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2904.245210][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2904.257416][T18814] veth1_macvtap: entered promiscuous mode [ 2904.294078][T18818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2904.325732][T18818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2904.335936][T18818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2904.354145][T18818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2904.367797][T18818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2904.388620][T18818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2904.408426][T18818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2904.411358][T18927] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2904.419688][T18818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2904.431970][T18927] CPU: 1 PID: 18927 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2904.448314][T18818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2904.449900][T18927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2904.449918][T18927] Call Trace: [ 2904.460340][T18818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2904.470332][T18927] [ 2904.470347][T18927] dump_stack_lvl+0x136/0x150 [ 2904.475240][T18818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2904.483417][T18927] dump_header+0x10a/0xd70 [ 2904.483454][T18927] oom_kill_process+0x25d/0x600 [ 2904.507680][T18927] out_of_memory+0x35c/0x1660 [ 2904.508573][T18814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2904.512373][T18927] ? io_schedule_timeout+0x150/0x150 [ 2904.512409][T18927] ? oom_killer_disable+0x2b0/0x2b0 [ 2904.523630][T18814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2904.528052][T18927] ? kernfs_notify+0x1ac/0x410 [ 2904.533496][T18814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2904.543008][T18927] mem_cgroup_out_of_memory+0x206/0x270 [ 2904.543046][T18927] ? mem_cgroup_margin+0x130/0x130 [ 2904.543095][T18927] memory_max_write+0x2f9/0x3c0 [ 2904.543134][T18927] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2904.543180][T18927] ? lock_sync+0x190/0x190 [ 2904.543222][T18927] cgroup_file_write+0x1e2/0x7b0 [ 2904.543252][T18927] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2904.543291][T18927] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2904.543321][T18927] ? __virt_addr_valid+0x61/0x2e0 [ 2904.543375][T18927] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2904.543404][T18927] kernfs_fop_write_iter+0x3f1/0x600 [ 2904.543444][T18927] vfs_write+0x945/0xd50 [ 2904.556678][T18814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2904.558565][T18927] ? kernel_write+0x670/0x670 [ 2904.564122][T18814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2904.569173][T18927] ? __fget_files+0x26a/0x480 [ 2904.574014][T18814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2904.580048][T18927] ksys_write+0x12b/0x250 [ 2904.584450][T18814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2904.589354][T18927] ? __ia32_sys_read+0xb0/0xb0 [ 2904.607215][T18814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2904.611127][T18927] ? syscall_enter_from_user_mode+0x26/0x80 [ 2904.616426][T18814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2904.620641][T18927] do_syscall_64+0x39/0xb0 [ 2904.620680][T18927] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2904.620716][T18927] RIP: 0033:0x7f82d208c169 [ 2904.620739][T18927] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2904.620761][T18927] RSP: 002b:00007f82d2d3c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2904.620786][T18927] RAX: ffffffffffffffda RBX: 00007f82d21ac050 RCX: 00007f82d208c169 [ 2904.620804][T18927] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 2904.620820][T18927] RBP: 00007f82d20e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2904.620835][T18927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2904.620851][T18927] R13: 00007ffcbd63f00f R14: 00007f82d2d3c300 R15: 0000000000022000 [ 2904.620888][T18927] [ 2904.627197][T18927] memory: usage 9184kB, limit 0kB, failcnt 2775 [ 2904.680333][T18814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2904.680349][T18814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2904.680368][T18814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2904.690537][T18814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2904.698581][T18927] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2904.843289][T18927] Memory cgroup stats for /syz0: [ 2904.843487][T18927] anon 94208 [ 2904.843487][T18927] file 8851456 [ 2904.843487][T18927] kernel 430080 [ 2904.843487][T18927] kernel_stack 131072 [ 2904.843487][T18927] pagetables 77824 [ 2904.843487][T18927] sec_pagetables 0 [ 2904.843487][T18927] percpu 64 [ 2904.843487][T18927] sock 0 [ 2904.843487][T18927] vmalloc 0 [ 2904.843487][T18927] shmem 8343552 [ 2904.843487][T18927] zswap 0 [ 2904.843487][T18927] zswapped 0 [ 2904.843487][T18927] file_mapped 274432 [ 2904.843487][T18927] file_dirty 507904 [ 2904.843487][T18927] file_writeback 0 [ 2904.843487][T18927] swapcached 0 [ 2904.843487][T18927] anon_thp 0 [ 2904.843487][T18927] file_thp 0 [ 2904.843487][T18927] shmem_thp 0 [ 2904.843487][T18927] inactive_anon 0 [ 2904.843487][T18927] active_anon 8437760 [ 2904.843487][T18927] inactive_file 0 [ 2904.843487][T18927] active_file 507904 [ 2904.843487][T18927] unevictable 0 [ 2904.843487][T18927] slab_reclaimable 84568 [ 2904.843487][T18927] slab_unreclaimable 107488 [ 2904.843487][T18927] slab 192056 [ 2904.843487][T18927] workingset_refault_anon 0 [ 2904.843487][T18927] workingset_refault_file 0 [ 2904.843487][T18927] workingset_activate_anon 0 [ 2904.843487][T18927] workingset_activate_file 0 [ 2904.843487][T18927] workingset_restore_anon 0 [ 2904.843487][T18927] workingset_restore_file 0 [ 2904.843487][T18927] workingset_nodereclaim 0 [ 2904.843487][T18927] pgscan 875 [ 2904.843487][T18927] pgsteal 403 [ 2904.843487][T18927] pgscan_kswapd 0 [ 2904.843487][T18927] pgscan_direct 875 [ 2904.843487][T18927] pgscan_khugepaged 0 [ 2904.843487][T18927] pgsteal_kswapd 0 [ 2904.843487][T18927] pgsteal_direct 403 [ 2904.843487][T18927] pgsteal_khugepaged 0 [ 2904.843487][T18927] pgfault 131594 [ 2904.843487][T18927] pgmajfault 0 [ 2904.843487][T18927] pgrefill 1318787 [ 2904.843487][T18927] pgactivate 472 [ 2904.843487][T18927] pgdeactivate 0 [ 2904.843487][T18927] pglazyfree 0 [ 2904.843487][T18927] pglazyfreed 0 [ 2904.843487][T18927] zswpin 0 [ 2904.843487][T18927] zswpout 0 [ 2905.044845][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2905.053368][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2905.058040][T18927] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 2905.062295][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2905.066065][T18927] ,cpuset= [ 2905.069874][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2905.086058][T18927] syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=18925,uid=0 [ 2905.090364][T14297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2905.100173][T18927] Memory cgroup out of memory: Killed process 18925 (syz-executor.0) total-vm:50972kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2905.117261][T18818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2905.142787][T18818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2905.152653][T18818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2905.163590][T18818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2905.173480][T18818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2905.189440][T18818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2905.199834][T18818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2905.210761][T18818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2905.223015][T18818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2905.234434][T18818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2905.246020][T18818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2905.256546][T18818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2905.269379][T18818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2905.278711][T18818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2905.287472][T18818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2905.298262][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2905.307257][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2905.317753][T18814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2905.329116][T18814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2905.339851][T18814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2905.351709][T18814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2905.361797][T18814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2905.375139][T18814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2905.385234][T18814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2905.395832][T18814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2905.405951][T18814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2905.416890][T18814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2905.426855][T18814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2905.438022][T18814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2905.449194][T18814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2905.462736][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2905.471809][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2905.494595][T18814] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2905.503510][T18814] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2905.514669][T18814] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2905.523822][T18814] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2905.590622][T14855] Bluetooth: hci1: command 0x0419 tx timeout [ 2905.647939][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2905.656249][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2905.673509][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2905.709822][T15391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2905.729903][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2905.738855][T15391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2905.739798][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2905.765631][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2905.773983][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2905.783856][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2905.804355][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2905.830766][T27851] Bluetooth: hci2: command 0x0419 tx timeout [ 2905.863432][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2906.021420][T18933] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2906.069307][T18933] CPU: 0 PID: 18933 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2906.079785][T18933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2906.089868][T18933] Call Trace: [ 2906.093158][T18933] [ 2906.096100][T18933] dump_stack_lvl+0x136/0x150 [ 2906.100824][T18933] dump_header+0x10a/0xd70 [ 2906.105266][T18933] oom_kill_process+0x25d/0x600 [ 2906.110139][T18933] out_of_memory+0x35c/0x1660 [ 2906.114847][T18933] ? find_held_lock+0x2d/0x110 [ 2906.119646][T18933] ? oom_killer_disable+0x2b0/0x2b0 [ 2906.124869][T18933] ? rcu_read_unlock+0x9/0x60 [ 2906.129572][T18933] ? find_held_lock+0x2d/0x110 [ 2906.134366][T18933] mem_cgroup_out_of_memory+0x206/0x270 [ 2906.139946][T18933] ? mem_cgroup_margin+0x130/0x130 [ 2906.145081][T18933] ? lock_downgrade+0x690/0x690 [ 2906.149976][T18933] try_charge_memcg+0xf99/0x13a0 [ 2906.154953][T18933] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2906.160976][T18933] ? rcu_read_unlock+0x9/0x60 [ 2906.165678][T18933] ? lock_downgrade+0x690/0x690 [ 2906.170570][T18933] charge_memcg+0x90/0x3b0 [ 2906.175028][T18933] __mem_cgroup_charge+0x2b/0x90 [ 2906.179995][T18933] __handle_mm_fault+0x2296/0x41c0 [ 2906.185134][T18933] ? mt_find+0x3b9/0xa60 [ 2906.189404][T18933] ? vm_iomap_memory+0x190/0x190 [ 2906.194366][T18933] ? mas_find+0x200/0x200 [ 2906.198748][T18933] handle_mm_fault+0x2af/0x9f0 [ 2906.203550][T18933] do_user_addr_fault+0x51a/0x1210 [ 2906.208708][T18933] exc_page_fault+0x98/0x170 [ 2906.213333][T18933] asm_exc_page_fault+0x26/0x30 [ 2906.218217][T18933] RIP: 0010:__put_user_4+0x11/0x20 [ 2906.223379][T18933] Code: fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa f3 0f 1e [ 2906.243007][T18933] RSP: 0018:ffffc900039dfe40 EFLAGS: 00050206 [ 2906.249095][T18933] RAX: 0000000000000007 RBX: 0000000000000000 RCX: 00000000200029c0 [ 2906.257085][T18933] RDX: ffff88802c65d940 RSI: ffffffff8804eddf RDI: 0000000000000000 [ 2906.265075][T18933] RBP: 0000000000000005 R08: 0000000000000001 R09: ffffffff8e7a7a97 [ 2906.273059][T18933] R10: fffffbfff1cf4f52 R11: 0000000000000000 R12: 0000000000000007 [ 2906.281049][T18933] R13: 0000000000000008 R14: 0000000000000000 R15: dffffc0000000000 [ 2906.289051][T18933] ? __sys_socketpair+0xff/0x570 [ 2906.294027][T18933] __sys_socketpair+0x10b/0x570 [ 2906.298901][T18933] ? __ia32_sys_socket+0xb0/0xb0 [ 2906.303867][T18933] ? do_futex+0x360/0x360 [ 2906.308228][T18933] __x64_sys_socketpair+0x97/0x100 [ 2906.313364][T18933] ? syscall_enter_from_user_mode+0x26/0x80 [ 2906.319289][T18933] do_syscall_64+0x39/0xb0 [ 2906.323743][T18933] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2906.329673][T18933] RIP: 0033:0x7f50bfa8c169 [ 2906.334108][T18933] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2906.353743][T18933] RSP: 002b:00007f50c07d0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2906.362188][T18933] RAX: ffffffffffffffda RBX: 00007f50bfbac050 RCX: 00007f50bfa8c169 [ 2906.370185][T18933] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 2906.378176][T18933] RBP: 00007f50bfae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2906.386170][T18933] R10: 00000000200029c0 R11: 0000000000000246 R12: 0000000000000000 [ 2906.394165][T18933] R13: 00007fffa145feff R14: 00007f50c07d0300 R15: 0000000000022000 [ 2906.402191][T18933] [ 2906.405928][T27851] Bluetooth: hci4: command 0x0419 tx timeout [ 2906.429884][T18933] memory: usage 8876kB, limit 0kB, failcnt 2864 [ 2906.436336][T18933] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2906.443711][T18933] Memory cgroup stats for /syz3: [ 2906.443910][T18933] anon 192512 [ 2906.443910][T18933] file 8351744 [ 2906.443910][T18933] kernel 544768 [ 2906.443910][T18933] kernel_stack 131072 [ 2906.443910][T18933] pagetables 155648 [ 2906.443910][T18933] sec_pagetables 0 [ 2906.443910][T18933] percpu 128 [ 2906.443910][T18933] sock 0 [ 2906.443910][T18933] vmalloc 0 [ 2906.443910][T18933] shmem 8351744 [ 2906.443910][T18933] zswap 0 [ 2906.443910][T18933] zswapped 0 [ 2906.443910][T18933] file_mapped 241664 [ 2906.443910][T18933] file_dirty 0 [ 2906.443910][T18933] file_writeback 0 [ 2906.443910][T18933] swapcached 0 [ 2906.443910][T18933] anon_thp 0 [ 2906.443910][T18933] file_thp 0 [ 2906.443910][T18933] shmem_thp 0 [ 2906.443910][T18933] inactive_anon 8458240 [ 2906.443910][T18933] active_anon 86016 [ 2906.443910][T18933] inactive_file 0 [ 2906.443910][T18933] active_file 0 [ 2906.443910][T18933] unevictable 0 [ 2906.443910][T18933] slab_reclaimable 43192 [ 2906.443910][T18933] slab_unreclaimable 167808 [ 2906.443910][T18933] slab 211000 [ 2906.443910][T18933] workingset_refault_anon 0 [ 2906.443910][T18933] workingset_refault_file 1 [ 2906.443910][T18933] workingset_activate_anon 0 [ 2906.443910][T18933] workingset_activate_file 0 [ 2906.443910][T18933] workingset_restore_anon 0 [ 2906.443910][T18933] workingset_restore_file 0 [ 2906.443910][T18933] workingset_nodereclaim 0 [ 2906.443910][T18933] pgscan 199 [ 2906.443910][T18933] pgsteal 86 [ 2906.443910][T18933] pgscan_kswapd 0 [ 2906.443910][T18933] pgscan_direct 199 [ 2906.443910][T18933] pgscan_khugepaged 0 [ 2906.443910][T18933] pgsteal_kswapd 0 [ 2906.443910][T18933] pgsteal_direct 86 [ 2906.443910][T18933] pgsteal_khugepaged 0 [ 2906.443910][T18933] pgfault 90050 [ 2906.443910][T18933] pgmajfault 0 [ 2906.443910][T18933] pgrefill 192071 [ 2906.443910][T18933] pgactivate 113 [ 2906.443910][T18933] pgdeactivate 0 [ 2906.443910][T18933] pglazyfree 0 [ 2906.443910][T18933] pglazyfreed 0 [ 2906.443910][T18933] zswpin 0 [ 2906.443910][T18933] zswpout 0 [ 2906.443910][T18933] thp_fault_alloc 0 [ 2906.637610][T18933] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=18818,uid=0 [ 2906.658193][T18933] Memory cgroup out of memory: Killed process 18818 (syz-executor.3) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:0 [ 2906.677917][T18936] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2906.701098][T18936] CPU: 0 PID: 18936 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2906.711562][T18936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2906.721641][T18936] Call Trace: [ 2906.724954][T18936] [ 2906.727912][T18936] dump_stack_lvl+0x136/0x150 [ 2906.732646][T18936] dump_header+0x10a/0xd70 [ 2906.737197][T18936] oom_kill_process+0x25d/0x600 [ 2906.742084][T18936] out_of_memory+0x35c/0x1660 [ 2906.746798][T18936] ? io_schedule_timeout+0x150/0x150 [ 2906.752121][T18936] ? oom_killer_disable+0x2b0/0x2b0 [ 2906.757446][T18936] ? kernfs_notify+0x1ac/0x410 [ 2906.762261][T18936] mem_cgroup_out_of_memory+0x206/0x270 [ 2906.767940][T18936] ? mem_cgroup_margin+0x130/0x130 [ 2906.773109][T18936] memory_max_write+0x2f9/0x3c0 [ 2906.778012][T18936] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2906.784125][T18936] ? lock_sync+0x190/0x190 [ 2906.788595][T18936] cgroup_file_write+0x1e2/0x7b0 [ 2906.793569][T18936] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2906.799766][T18936] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2906.805168][T18936] ? __virt_addr_valid+0x61/0x2e0 [ 2906.810251][T18936] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2906.815652][T18936] kernfs_fop_write_iter+0x3f1/0x600 [ 2906.820993][T18936] vfs_write+0x945/0xd50 [ 2906.825272][T18936] ? kernel_write+0x670/0x670 [ 2906.829980][T18936] ? __fget_files+0x26a/0x480 [ 2906.834714][T18936] ksys_write+0x12b/0x250 [ 2906.839072][T18936] ? __ia32_sys_read+0xb0/0xb0 [ 2906.843867][T18936] ? syscall_enter_from_user_mode+0x26/0x80 [ 2906.849813][T18936] do_syscall_64+0x39/0xb0 [ 2906.854283][T18936] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2906.860223][T18936] RIP: 0033:0x7f343148c169 [ 2906.864660][T18936] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2906.884294][T18936] RSP: 002b:00007f343224d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2906.892743][T18936] RAX: ffffffffffffffda RBX: 00007f34315abf80 RCX: 00007f343148c169 [ 2906.900752][T18936] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000004 [ 2906.909009][T18936] RBP: 00007f34314e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2906.917011][T18936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2906.925182][T18936] R13: 00007ffff128660f R14: 00007f343224d300 R15: 0000000000022000 [ 2906.933209][T18936] [ 2906.986096][T18936] memory: usage 11180kB, limit 0kB, failcnt 2626 [ 2907.003649][T18936] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2907.024357][T18936] Memory cgroup stats for /syz2: [ 2907.024583][T18936] anon 118784 [ 2907.024583][T18936] file 10952704 [ 2907.024583][T18936] kernel 376832 [ 2907.024583][T18936] kernel_stack 98304 [ 2907.024583][T18936] pagetables 81920 [ 2907.024583][T18936] sec_pagetables 0 [ 2907.024583][T18936] percpu 64 [ 2907.024583][T18936] sock 0 [ 2907.024583][T18936] vmalloc 0 [ 2907.024583][T18936] shmem 10440704 [ 2907.024583][T18936] zswap 0 [ 2907.024583][T18936] zswapped 0 [ 2907.024583][T18936] file_mapped 262144 [ 2907.024583][T18936] file_dirty 512000 [ 2907.024583][T18936] file_writeback 0 [ 2907.024583][T18936] swapcached 0 [ 2907.024583][T18936] anon_thp 0 [ 2907.024583][T18936] file_thp 0 [ 2907.024583][T18936] shmem_thp 0 [ 2907.024583][T18936] inactive_anon 0 [ 2907.024583][T18936] active_anon 10559488 [ 2907.024583][T18936] inactive_file 0 [ 2907.024583][T18936] active_file 512000 [ 2907.024583][T18936] unevictable 0 [ 2907.024583][T18936] slab_reclaimable 75008 [ 2907.024583][T18936] slab_unreclaimable 89368 [ 2907.024583][T18936] slab 164376 [ 2907.024583][T18936] workingset_refault_anon 0 [ 2907.024583][T18936] workingset_refault_file 0 [ 2907.024583][T18936] workingset_activate_anon 0 [ 2907.024583][T18936] workingset_activate_file 0 [ 2907.024583][T18936] workingset_restore_anon 0 [ 2907.024583][T18936] workingset_restore_file 0 [ 2907.024583][T18936] workingset_nodereclaim 0 [ 2907.024583][T18936] pgscan 1992 [ 2907.024583][T18936] pgsteal 31 [ 2907.024583][T18936] pgscan_kswapd 0 [ 2907.024583][T18936] pgscan_direct 1992 [ 2907.024583][T18936] pgscan_khugepaged 0 [ 2907.024583][T18936] pgsteal_kswapd 0 [ 2907.024583][T18936] pgsteal_direct 31 [ 2907.024583][T18936] pgsteal_khugepaged 0 [ 2907.024583][T18936] pgfault 74402 [ 2907.024583][T18936] pgmajfault 0 [ 2907.024583][T18936] pgrefill 1317050 [ 2907.024583][T18936] pgactivate 1961 [ 2907.024583][T18936] pgdeactivate 0 [ 2907.024583][T18936] pglazyfree 0 [ 2907.024583][T18936] pglazyfreed 0 [ 2907.024583][T18936] zswpin 0 [ 2907.024583][T18936] zswpout 0 [ 2907.325995][T18936] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=18934,uid=0 [ 2907.379158][T18936] Memory cgroup out of memory: Killed process 18934 (syz-executor.2) total-vm:54812kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 08:05:38 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 64) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) (async, rerun: 32) write$cgroup_int(r1, &(0x7f0000000180), 0x12) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.events\x00', 0x0, 0x0) (async) close(r3) (async, rerun: 32) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async, rerun: 32) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r5], 0x12) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x9, 0xa8, 0x4, 0x0, 0x5e, 0x10048, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x9180, 0xe, 0x4c, 0x7, 0x8, 0xaf, 0x1, 0x0, 0x8}, 0x0, 0x9, r4, 0x0) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x428702, 0x0) (rerun: 32) 08:05:38 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x0, 0x0, r0, 0x0) 08:05:38 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xf0ffff, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:05:38 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1324c, 0x9, 0xffc5, 0x1b208d76dec320ae, 0x8, 0x80000000, 0xcc, 0x0, 0x200}, r5, 0x0, r2, 0x1) close(r4) 08:05:38 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r3 = getpid() (async) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0)={0x0, r2}, 0x10) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) close(r6) (async) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r6, @ANYRES8=r8], 0x12) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x81, 0x81, 0x8, 0x0, 0x8, 0x29200, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000040), 0xd}, 0x5, 0xfff, 0x63f5, 0x1, 0x7, 0xffffffff, 0x8000, 0x0, 0x0, 0x0, 0x5}, r3, 0x2, r7, 0x0) (async, rerun: 64) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) (rerun: 64) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) (async) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r2}, 0x8) mkdirat$cgroup(r9, &(0x7f0000000300)='syz1\x00', 0x1ff) (async) r10 = getpid() perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x9, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x9009, 0xc9, 0xfff, 0x3, 0x7, 0x4, 0x0, 0x0, 0x8001, 0x0, 0x800000000006d}, r10, 0x11, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r10, r4, 0x0, 0x2, &(0x7f0000000240)='[\x00'}, 0x30) (async) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 08:05:38 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) r3 = getpid() perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x9, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x9009, 0xc9, 0xfff, 0x3, 0x7, 0x4, 0x0, 0x0, 0x8001, 0x0, 0x800000000006d}, r3, 0x11, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x81, 0x6, 0x7, 0x0, 0x6, 0xc601, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfff, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x4000, 0x5, 0x10, 0x5, 0x1ff, 0x2b26, 0x3f, 0x0, 0x0, 0x0, 0x1f}, r3, 0x20000000000f, r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000180), 0x12) (async) getpid() (async) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x9, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x9009, 0xc9, 0xfff, 0x3, 0x7, 0x4, 0x0, 0x0, 0x8001, 0x0, 0x800000000006d}, r3, 0x11, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x81, 0x6, 0x7, 0x0, 0x6, 0xc601, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfff, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x4000, 0x5, 0x10, 0x5, 0x1ff, 0x2b26, 0x3f, 0x0, 0x0, 0x0, 0x1f}, r3, 0x20000000000f, r2, 0x9) (async) [ 2909.148575][T18820] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 2909.170086][T18820] CPU: 0 PID: 18820 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2909.180544][T18820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2909.190618][T18820] Call Trace: [ 2909.193915][T18820] [ 2909.196873][T18820] dump_stack_lvl+0x136/0x150 [ 2909.201595][T18820] dump_header+0x10a/0xd70 [ 2909.206047][T18820] oom_kill_process+0x25d/0x600 [ 2909.210929][T18820] out_of_memory+0x35c/0x1660 [ 2909.215642][T18820] ? find_held_lock+0x2d/0x110 [ 2909.220437][T18820] ? oom_killer_disable+0x2b0/0x2b0 [ 2909.225661][T18820] ? rcu_read_unlock+0x9/0x60 [ 2909.230373][T18820] ? find_held_lock+0x2d/0x110 [ 2909.235174][T18820] mem_cgroup_out_of_memory+0x206/0x270 [ 2909.240757][T18820] ? mem_cgroup_margin+0x130/0x130 08:05:38 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x1000000, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:05:38 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}, 0x0, 0x0, r0, 0x0) [ 2909.245906][T18820] ? lock_downgrade+0x690/0x690 [ 2909.250807][T18820] try_charge_memcg+0xf99/0x13a0 [ 2909.255799][T18820] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2909.261819][T18820] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2909.267575][T18820] ? lock_downgrade+0x690/0x690 [ 2909.272464][T18820] ? lock_downgrade+0x690/0x690 [ 2909.277347][T18820] ? rcu_read_unlock+0x9/0x60 [ 2909.282077][T18820] obj_cgroup_charge+0x2af/0x5e0 [ 2909.287055][T18820] ? copy_process+0x3c0/0x7600 [ 2909.291853][T18820] kmem_cache_alloc_node+0xa8/0x3e0 08:05:38 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x2000000, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2909.297100][T18820] copy_process+0x3c0/0x7600 [ 2909.301732][T18820] ? _raw_spin_unlock+0x28/0x40 [ 2909.306615][T18820] ? wp_page_reuse+0x197/0x570 [ 2909.311431][T18820] ? pidfd_prepare+0x80/0x80 [ 2909.316074][T18820] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2909.322098][T18820] kernel_clone+0xeb/0x890 [ 2909.326553][T18820] ? create_io_thread+0xe0/0xe0 [ 2909.331440][T18820] ? do_user_addr_fault+0x2b1/0x1210 [ 2909.336764][T18820] ? reacquire_held_locks+0x216/0x4e0 [ 2909.342172][T18820] ? do_user_addr_fault+0x2b1/0x1210 [ 2909.347511][T18820] ? find_held_lock+0x2d/0x110 [ 2909.352310][T18820] __do_sys_clone+0xba/0x100 [ 2909.356938][T18820] ? kernel_clone+0x890/0x890 [ 2909.361664][T18820] ? syscall_enter_from_user_mode+0x26/0x80 [ 2909.367597][T18820] do_syscall_64+0x39/0xb0 [ 2909.372057][T18820] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2909.377990][T18820] RIP: 0033:0x7f82d2089e9b 08:05:38 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x3000000, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2909.382424][T18820] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2909.402061][T18820] RSP: 002b:00007ffcbd63f250 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2909.410522][T18820] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f82d2089e9b [ 2909.418520][T18820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2909.426533][T18820] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555cef400 [ 2909.434524][T18820] R10: 0000555555cef6d0 R11: 0000000000000246 R12: 0000000000000001 08:05:38 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, r0, 0x0) [ 2909.442532][T18820] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffcbd63f330 [ 2909.450541][T18820] [ 2909.516183][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 08:05:38 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4000000, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2909.684478][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 08:05:39 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x5000000, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:05:39 executing program 3: bpf$PROG_LOAD(0x5, 0xfffffffffffffffd, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x9, 0x5, 0x1, 0x1f, 0x0, 0x486, 0xa04, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x1, @perf_config_ext={0x8, 0xffffffff}, 0x408, 0x3, 0x9, 0x5, 0x3f00000000000000, 0x100, 0xfffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000240)='cgroup\x00') write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 08:05:39 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0x0, 0x0, r0, 0x0) [ 2909.965419][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 08:05:39 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) [ 2910.035261][T18820] memory: usage 8272kB, limit 0kB, failcnt 2794 [ 2910.044525][T18820] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2910.089432][T18820] Memory cgroup stats for /syz0: [ 2910.089671][T18820] anon 45056 [ 2910.089671][T18820] file 8343552 [ 2910.089671][T18820] kernel 81920 [ 2910.089671][T18820] kernel_stack 0 [ 2910.089671][T18820] pagetables 8192 [ 2910.089671][T18820] sec_pagetables 0 [ 2910.089671][T18820] percpu 0 [ 2910.089671][T18820] sock 0 [ 2910.089671][T18820] vmalloc 0 [ 2910.089671][T18820] shmem 8343552 [ 2910.089671][T18820] zswap 0 [ 2910.089671][T18820] zswapped 0 [ 2910.089671][T18820] file_mapped 249856 [ 2910.089671][T18820] file_dirty 0 [ 2910.089671][T18820] file_writeback 0 [ 2910.089671][T18820] swapcached 0 [ 2910.089671][T18820] anon_thp 0 [ 2910.089671][T18820] file_thp 0 [ 2910.089671][T18820] shmem_thp 0 [ 2910.089671][T18820] inactive_anon 225280 [ 2910.089671][T18820] active_anon 8163328 [ 2910.089671][T18820] inactive_file 0 [ 2910.089671][T18820] active_file 0 [ 2910.089671][T18820] unevictable 0 [ 2910.089671][T18820] slab_reclaimable 26776 [ 2910.089671][T18820] slab_unreclaimable 32296 [ 2910.089671][T18820] slab 59072 [ 2910.089671][T18820] workingset_refault_anon 0 [ 2910.089671][T18820] workingset_refault_file 0 [ 2910.089671][T18820] workingset_activate_anon 0 [ 2910.089671][T18820] workingset_activate_file 0 [ 2910.089671][T18820] workingset_restore_anon 0 [ 2910.089671][T18820] workingset_restore_file 0 [ 2910.089671][T18820] workingset_nodereclaim 0 [ 2910.089671][T18820] pgscan 875 [ 2910.089671][T18820] pgsteal 403 [ 2910.089671][T18820] pgscan_kswapd 0 [ 2910.089671][T18820] pgscan_direct 875 [ 2910.089671][T18820] pgscan_khugepaged 0 [ 2910.089671][T18820] pgsteal_kswapd 0 [ 2910.089671][T18820] pgsteal_direct 403 [ 2910.089671][T18820] pgsteal_khugepaged 0 [ 2910.089671][T18820] pgfault 131606 [ 2910.089671][T18820] pgmajfault 0 [ 2910.089671][T18820] pgrefill 1318787 [ 2910.089671][T18820] pgactivate 472 [ 2910.089671][T18820] pgdeactivate 0 [ 2910.089671][T18820] pglazyfree 0 [ 2910.089671][T18820] pglazyfreed 0 [ 2910.089671][T18820] zswpin 0 [ 2910.089671][T18820] zswpout 0 [ 2910.089671][T18820] thp_fault_alloc 0 [ 2910.520925][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2910.580243][T18820] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=18820,uid=0 [ 2910.610864][T18820] Memory cgroup out of memory: Killed process 18820 (syz-executor.0) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2910.636669][T18814] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 2910.652735][T18814] CPU: 1 PID: 18814 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2910.663183][T18814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2910.673252][T18814] Call Trace: [ 2910.676548][T18814] [ 2910.679495][T18814] dump_stack_lvl+0x136/0x150 [ 2910.684222][T18814] dump_header+0x10a/0xd70 [ 2910.688670][T18814] oom_kill_process+0x25d/0x600 [ 2910.693549][T18814] out_of_memory+0x35c/0x1660 [ 2910.698261][T18814] ? oom_killer_disable+0x2b0/0x2b0 [ 2910.703492][T18814] ? rcu_read_unlock+0x9/0x60 [ 2910.708200][T18814] ? find_held_lock+0x2d/0x110 [ 2910.712998][T18814] mem_cgroup_out_of_memory+0x206/0x270 [ 2910.718574][T18814] ? mem_cgroup_margin+0x130/0x130 [ 2910.723698][T18814] ? lock_downgrade+0x690/0x690 [ 2910.728577][T18814] try_charge_memcg+0xf99/0x13a0 [ 2910.733553][T18814] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2910.739564][T18814] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2910.745301][T18814] ? lock_downgrade+0x690/0x690 [ 2910.750167][T18814] ? lock_downgrade+0x690/0x690 [ 2910.755038][T18814] ? rcu_read_unlock+0x9/0x60 [ 2910.759734][T18814] obj_cgroup_charge+0x2af/0x5e0 [ 2910.764706][T18814] ? copy_process+0x3c0/0x7600 [ 2910.769487][T18814] kmem_cache_alloc_node+0xa8/0x3e0 [ 2910.774709][T18814] copy_process+0x3c0/0x7600 [ 2910.779312][T18814] ? _raw_spin_unlock+0x28/0x40 [ 2910.784178][T18814] ? wp_page_reuse+0x197/0x570 [ 2910.788969][T18814] ? pidfd_prepare+0x80/0x80 [ 2910.793580][T18814] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2910.799580][T18814] kernel_clone+0xeb/0x890 [ 2910.804013][T18814] ? create_io_thread+0xe0/0xe0 [ 2910.808885][T18814] ? do_user_addr_fault+0x2b1/0x1210 [ 2910.814183][T18814] ? reacquire_held_locks+0x216/0x4e0 [ 2910.819567][T18814] ? do_user_addr_fault+0x2b1/0x1210 [ 2910.824869][T18814] ? find_held_lock+0x2d/0x110 [ 2910.829657][T18814] __do_sys_clone+0xba/0x100 [ 2910.834259][T18814] ? kernel_clone+0x890/0x890 [ 2910.839058][T18814] ? syscall_enter_from_user_mode+0x26/0x80 [ 2910.844988][T18814] do_syscall_64+0x39/0xb0 [ 2910.849437][T18814] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2910.855348][T18814] RIP: 0033:0x7f3431489e9b [ 2910.859767][T18814] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2910.879389][T18814] RSP: 002b:00007ffff1286850 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2910.887815][T18814] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3431489e9b [ 2910.895797][T18814] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2910.903769][T18814] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556ca1400 [ 2910.911742][T18814] R10: 0000555556ca16d0 R11: 0000000000000246 R12: 0000000000000001 [ 2910.919715][T18814] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffff1286930 [ 2910.927702][T18814] [ 2910.951853][T18814] memory: usage 10328kB, limit 0kB, failcnt 2646 [ 2910.958217][T18814] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2910.979027][T18814] Memory cgroup stats for /syz2: [ 2910.979225][T18814] anon 45056 [ 2910.979225][T18814] file 10444800 [ 2910.979225][T18814] kernel 86016 [ 2910.979225][T18814] kernel_stack 0 [ 2910.979225][T18814] pagetables 8192 [ 2910.979225][T18814] sec_pagetables 0 [ 2910.979225][T18814] percpu 0 [ 2910.979225][T18814] sock 0 [ 2910.979225][T18814] vmalloc 0 [ 2910.979225][T18814] shmem 10440704 [ 2910.979225][T18814] zswap 0 [ 2910.979225][T18814] zswapped 0 [ 2910.979225][T18814] file_mapped 237568 [ 2910.979225][T18814] file_dirty 4096 [ 2910.979225][T18814] file_writeback 0 [ 2910.979225][T18814] swapcached 0 [ 2910.979225][T18814] anon_thp 0 [ 2910.979225][T18814] file_thp 0 [ 2910.979225][T18814] shmem_thp 0 [ 2910.979225][T18814] inactive_anon 10485760 [ 2910.979225][T18814] active_anon 0 [ 2910.979225][T18814] inactive_file 0 [ 2910.979225][T18814] active_file 4096 [ 2910.979225][T18814] unevictable 0 [ 2910.979225][T18814] slab_reclaimable 33688 [ 2910.979225][T18814] slab_unreclaimable 32296 [ 2910.979225][T18814] slab 65984 [ 2910.979225][T18814] workingset_refault_anon 0 [ 2910.979225][T18814] workingset_refault_file 0 [ 2910.979225][T18814] workingset_activate_anon 0 [ 2910.979225][T18814] workingset_activate_file 0 [ 2910.979225][T18814] workingset_restore_anon 0 [ 2910.979225][T18814] workingset_restore_file 0 [ 2910.979225][T18814] workingset_nodereclaim 0 [ 2910.979225][T18814] pgscan 1992 [ 2910.979225][T18814] pgsteal 31 [ 2910.979225][T18814] pgscan_kswapd 0 [ 2910.979225][T18814] pgscan_direct 1992 [ 2910.979225][T18814] pgscan_khugepaged 0 [ 2910.979225][T18814] pgsteal_kswapd 0 [ 2910.979225][T18814] pgsteal_direct 31 [ 2910.979225][T18814] pgsteal_khugepaged 0 [ 2910.979225][T18814] pgfault 74415 [ 2910.979225][T18814] pgmajfault 0 [ 2910.979225][T18814] pgrefill 1317068 [ 2910.979225][T18814] pgactivate 1961 [ 2910.979225][T18814] pgdeactivate 0 [ 2910.979225][T18814] pglazyfree 0 [ 2910.979225][T18814] pglazyfreed 0 [ 2910.979225][T18814] zswpin 0 [ 2910.979225][T18814] zswpout 0 [ 2910.979225][T18814] thp_fault_alloc 0 [ 2911.177956][T18814] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=18814,uid=0 [ 2911.195357][T18814] Memory cgroup out of memory: Killed process 18814 (syz-executor.2) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 08:05:40 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000240)='cpuacct.usage_all\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xf5, 0x1, 0x1, 0xa, 0x0, 0x0, 0x104, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x3, 0x40}, 0x88000, 0x40, 0x0, 0x8, 0x0, 0x1ff, 0x3, 0x0, 0x9, 0x0, 0x1cb7}, 0xffffffffffffffff, 0xe, r4, 0x8) 08:05:40 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) (async) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) (async) write$cgroup_int(r1, &(0x7f0000000180), 0x12) r3 = getpid() perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x9, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x9009, 0xc9, 0xfff, 0x3, 0x7, 0x4, 0x0, 0x0, 0x8001, 0x0, 0x800000000006d}, r3, 0x11, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x81, 0x6, 0x7, 0x0, 0x6, 0xc601, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfff, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x4000, 0x5, 0x10, 0x5, 0x1ff, 0x2b26, 0x3f, 0x0, 0x0, 0x0, 0x1f}, r3, 0x20000000000f, r2, 0x9) 08:05:40 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x6000000, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:05:40 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1324c, 0x9, 0xffc5, 0x1b208d76dec320ae, 0x8, 0x80000000, 0xcc, 0x0, 0x200, 0x0, 0x8000}, 0x0, 0x0, r2, 0x1) close(r4) 08:05:40 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 08:05:40 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000240)='cpuacct.usage_all\x00', 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000180), 0x12) (async) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xf5, 0x1, 0x1, 0xa, 0x0, 0x0, 0x104, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x3, 0x40}, 0x88000, 0x40, 0x0, 0x8, 0x0, 0x1ff, 0x3, 0x0, 0x9, 0x0, 0x1cb7}, 0xffffffffffffffff, 0xe, r4, 0x8) 08:05:40 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x7000000, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:05:40 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) 08:05:41 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x8000000, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2912.259508][T27851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2912.269335][T27851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2912.278375][T27851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2912.286533][T27851] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2912.297115][T27851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2912.457954][ T62] hsr_slave_0: left promiscuous mode [ 2912.488811][ T62] hsr_slave_1: left promiscuous mode [ 2912.495360][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2912.520134][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2912.534128][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2912.547620][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2912.562940][ T62] bridge_slave_1: left allmulticast mode [ 2912.568622][ T62] bridge_slave_1: left promiscuous mode [ 2912.581706][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 2912.596782][ T62] bridge_slave_0: left allmulticast mode [ 2912.604788][ T62] bridge_slave_0: left promiscuous mode [ 2912.617347][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 2912.648411][ T62] veth1_macvtap: left promiscuous mode [ 2912.657435][ T62] veth0_macvtap: left promiscuous mode [ 2912.670458][ T62] veth1_vlan: left promiscuous mode [ 2912.675786][ T62] veth0_vlan: left promiscuous mode [ 2912.874235][ T62] team0 (unregistering): Port device team_slave_1 removed [ 2912.886850][ T62] team0 (unregistering): Port device team_slave_0 removed [ 2912.898219][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2912.916913][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2912.979232][ T62] bond0 (unregistering): Released all slaves [ 2913.174751][T19075] chnl_net:caif_netlink_parms(): no params data found [ 2913.344531][T19075] bridge0: port 1(bridge_slave_0) entered blocking state [ 2913.351827][T19075] bridge0: port 1(bridge_slave_0) entered disabled state [ 2913.359012][T19075] bridge_slave_0: entered allmulticast mode [ 2913.366041][T19075] bridge_slave_0: entered promiscuous mode [ 2913.379134][T19075] bridge0: port 2(bridge_slave_1) entered blocking state [ 2913.386420][T19075] bridge0: port 2(bridge_slave_1) entered disabled state [ 2913.400201][T19075] bridge_slave_1: entered allmulticast mode [ 2913.407142][T19075] bridge_slave_1: entered promiscuous mode [ 2913.477868][T19075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2913.520880][T19075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2913.643920][T19075] team0: Port device team_slave_0 added [ 2913.662596][T27851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2913.663138][T19075] team0: Port device team_slave_1 added [ 2913.680150][T27851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2913.689171][T27851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2913.697965][T27851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2913.705664][T27851] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2913.713270][T27851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2913.775920][T19075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2913.811398][T19075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2913.909233][T19075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2913.948606][T19075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2913.963021][T19075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2913.997743][T19075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2914.132790][T19075] hsr_slave_0: entered promiscuous mode [ 2914.151128][T19075] hsr_slave_1: entered promiscuous mode [ 2914.390183][T27851] Bluetooth: hci1: command 0x0409 tx timeout [ 2914.585227][T19108] chnl_net:caif_netlink_parms(): no params data found [ 2914.881223][T19108] bridge0: port 1(bridge_slave_0) entered blocking state [ 2914.888349][T19108] bridge0: port 1(bridge_slave_0) entered disabled state [ 2914.923032][T19108] bridge_slave_0: entered allmulticast mode [ 2914.941140][T19108] bridge_slave_0: entered promiscuous mode [ 2915.001739][T19108] bridge0: port 2(bridge_slave_1) entered blocking state [ 2915.008867][T19108] bridge0: port 2(bridge_slave_1) entered disabled state [ 2915.038919][T19108] bridge_slave_1: entered allmulticast mode [ 2915.064823][T19108] bridge_slave_1: entered promiscuous mode [ 2915.127734][T19108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2915.199645][T19108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2915.306897][T19108] team0: Port device team_slave_0 added [ 2915.345403][T19108] team0: Port device team_slave_1 added [ 2915.407913][T19108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2915.417694][T19108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2915.458135][T19108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2915.470214][T19075] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2915.482127][T19108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2915.489100][T19108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2915.525133][T19108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2915.541655][T19075] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2915.563624][T19075] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2915.584143][T19075] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2915.603845][T19108] hsr_slave_0: entered promiscuous mode [ 2915.618665][T19108] hsr_slave_1: entered promiscuous mode [ 2915.626176][T19108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2915.667943][T19108] Cannot create hsr debugfs directory [ 2915.744929][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2915.755878][T27851] Bluetooth: hci2: command 0x0409 tx timeout [ 2915.906031][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2916.061197][T19108] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2916.106728][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2916.158076][T19108] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2916.251270][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2916.286944][T19108] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2916.343449][T19075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2916.385574][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2916.411092][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2916.450643][T19108] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2916.470367][T27851] Bluetooth: hci1: command 0x041b tx timeout [ 2916.489256][T19075] 8021q: adding VLAN 0 to HW filter on device team0 [ 2916.531162][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2916.550648][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2916.580553][T24745] bridge0: port 1(bridge_slave_0) entered blocking state [ 2916.587658][T24745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2916.634803][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2916.643548][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2916.652814][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2916.662295][T30615] bridge0: port 2(bridge_slave_1) entered blocking state [ 2916.669469][T30615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2916.690506][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2916.699467][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2916.710640][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2916.719763][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2916.769243][T19075] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2916.848031][T19075] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2916.883081][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2916.891491][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2916.900774][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2916.911966][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2916.921061][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2916.929713][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2916.938314][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2916.987726][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2917.070797][T19108] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2917.101056][T19108] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2917.135251][T19108] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2917.152614][T19108] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2917.345637][T19075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2917.376298][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2917.394857][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2917.446555][T19108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2917.523406][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2917.533136][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2917.550833][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2917.558763][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2917.609397][T19108] 8021q: adding VLAN 0 to HW filter on device team0 [ 2917.621126][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2917.635467][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2917.646468][T19075] veth0_vlan: entered promiscuous mode [ 2917.692238][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2917.701467][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2917.709312][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2917.728621][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2917.738469][ T8432] bridge0: port 1(bridge_slave_0) entered blocking state [ 2917.745629][ T8432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2917.764686][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2917.779215][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2917.797064][ T8432] bridge0: port 2(bridge_slave_1) entered blocking state [ 2917.804235][ T8432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2917.831265][T27851] Bluetooth: hci2: command 0x041b tx timeout [ 2917.849246][T19075] veth1_vlan: entered promiscuous mode [ 2917.867199][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2917.876262][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2917.889575][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2917.907120][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2917.927782][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2917.948304][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2917.958988][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2917.987102][T19108] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2918.015681][T19108] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2918.058081][T19075] veth0_macvtap: entered promiscuous mode [ 2918.066822][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2918.086882][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2918.099807][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2918.116518][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2918.125513][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2918.137795][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2918.156620][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2918.168714][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2918.186499][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2918.205704][T19075] veth1_macvtap: entered promiscuous mode [ 2918.261426][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2918.269282][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2918.287531][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2918.339088][T19075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2918.366351][T19075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2918.376565][T19075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2918.387797][T19075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2918.406350][T19075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2918.430133][T19075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2918.450039][T19075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2918.469302][T19075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2918.480398][T19075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2918.491603][T19075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2918.501702][T19075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2918.512520][T19075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2918.524401][T19075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2918.539109][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2918.551422][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2918.559573][T27851] Bluetooth: hci1: command 0x040f tx timeout [ 2918.608137][T19075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2918.643674][T19075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2918.665014][T19075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2918.679369][T19075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2918.690185][T19075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2918.700703][T19075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2918.711233][T19075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2918.721905][T19075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2918.735524][T19075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2918.751965][T19075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2918.763289][T19075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2918.773789][T19075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2918.786114][T19075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2918.805349][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2918.820947][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2918.859942][T19108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2918.880720][T19075] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2918.889452][T19075] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2918.899624][T19075] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2918.910845][T19075] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2918.928043][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2918.935890][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2919.020679][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2919.029282][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2919.110152][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2919.118570][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2919.128746][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2919.138752][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2919.154175][T19108] veth0_vlan: entered promiscuous mode [ 2919.176544][ T5181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2919.189240][ T62] hsr_slave_0: left promiscuous mode [ 2919.194738][ T5181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2919.212749][ T62] hsr_slave_1: left promiscuous mode [ 2919.218702][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2919.227030][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2919.236318][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2919.243838][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2919.253156][ T62] bridge_slave_1: left allmulticast mode [ 2919.258820][ T62] bridge_slave_1: left promiscuous mode [ 2919.265995][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 2919.275578][ T62] bridge_slave_0: left allmulticast mode [ 2919.281696][ T62] bridge_slave_0: left promiscuous mode [ 2919.287419][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 2919.307428][ T62] hsr_slave_0: left promiscuous mode [ 2919.315226][ T62] hsr_slave_1: left promiscuous mode [ 2919.321649][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2919.329068][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2919.338585][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2919.346212][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2919.357295][ T62] bridge_slave_1: left allmulticast mode [ 2919.363308][ T62] bridge_slave_1: left promiscuous mode [ 2919.371300][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 2919.380557][ T62] bridge_slave_0: left allmulticast mode [ 2919.386217][ T62] bridge_slave_0: left promiscuous mode [ 2919.392330][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 2919.419072][ T62] veth1_macvtap: left promiscuous mode [ 2919.432388][ T62] veth0_macvtap: left promiscuous mode [ 2919.447712][ T62] veth1_vlan: left promiscuous mode [ 2919.455401][ T62] veth0_vlan: left promiscuous mode [ 2919.470393][ T62] veth1_macvtap: left promiscuous mode [ 2919.475932][ T62] veth0_macvtap: left promiscuous mode [ 2919.481807][ T62] veth1_vlan: left promiscuous mode [ 2919.487110][ T62] veth0_vlan: left promiscuous mode [ 2919.878560][ T62] team0 (unregistering): Port device team_slave_1 removed [ 2919.896021][ T62] team0 (unregistering): Port device team_slave_0 removed [ 2919.910379][T27851] Bluetooth: hci2: command 0x040f tx timeout [ 2919.918168][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2919.935061][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2920.002925][ T62] bond0 (unregistering): Released all slaves [ 2920.154960][ T62] team0 (unregistering): Port device team_slave_1 removed [ 2920.167367][ T62] team0 (unregistering): Port device team_slave_0 removed [ 2920.178627][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2920.196831][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2920.264078][ T62] bond0 (unregistering): Released all slaves [ 2920.323175][T19108] veth1_vlan: entered promiscuous mode [ 2920.333158][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2920.341945][T18608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2920.416967][T19108] veth0_macvtap: entered promiscuous mode [ 2920.435497][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2920.445556][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2920.458542][T19108] veth1_macvtap: entered promiscuous mode [ 2920.459170][T19644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2920.474029][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2920.474574][T19644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2920.491869][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2920.499746][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2920.516654][T19108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2920.533126][T19108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2920.543244][T19108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2920.558680][T19108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2920.569076][T19108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2920.580385][T19108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2920.590886][T19108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2920.601951][T19108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2920.612191][T19108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2920.622784][T19108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2920.633268][T27851] Bluetooth: hci1: command 0x0419 tx timeout [ 2920.635175][T19108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2920.650789][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2920.659591][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2920.692400][T19108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2920.717446][T19108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2920.730077][T19108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2920.741014][T19108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2920.751173][T19108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2920.762121][T19108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2920.773677][T19108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2920.784653][T19108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2920.794746][T19108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2920.806316][T19108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2920.823543][T19108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2920.841547][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2920.851067][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2920.863614][T19108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2920.884805][T19108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2920.896099][T19108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2920.915514][T19108] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2921.077349][T19644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2921.093634][T19644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2921.153060][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2921.230123][T21574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2921.238256][T21574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2921.298521][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2921.708616][T19236] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2921.727614][T19236] CPU: 1 PID: 19236 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2921.738082][T19236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2921.748170][T19236] Call Trace: [ 2921.751472][T19236] [ 2921.754426][T19236] dump_stack_lvl+0x136/0x150 [ 2921.759155][T19236] dump_header+0x10a/0xd70 [ 2921.763610][T19236] oom_kill_process+0x25d/0x600 [ 2921.768493][T19236] out_of_memory+0x35c/0x1660 [ 2921.773215][T19236] ? io_schedule_timeout+0x150/0x150 [ 2921.778630][T19236] ? oom_killer_disable+0x2b0/0x2b0 [ 2921.783873][T19236] mem_cgroup_out_of_memory+0x206/0x270 [ 2921.789459][T19236] ? mem_cgroup_margin+0x130/0x130 [ 2921.794640][T19236] memory_max_write+0x2f9/0x3c0 [ 2921.799537][T19236] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2921.805656][T19236] ? lock_sync+0x190/0x190 [ 2921.810116][T19236] cgroup_file_write+0x1e2/0x7b0 [ 2921.815089][T19236] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2921.821203][T19236] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2921.826617][T19236] ? __virt_addr_valid+0x61/0x2e0 [ 2921.831705][T19236] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2921.837106][T19236] kernfs_fop_write_iter+0x3f1/0x600 [ 2921.842421][T19236] vfs_write+0x945/0xd50 [ 2921.846680][T19236] ? kernel_write+0x670/0x670 [ 2921.851380][T19236] ? __fget_files+0x26a/0x480 [ 2921.856103][T19236] ksys_write+0x12b/0x250 [ 2921.860456][T19236] ? __ia32_sys_read+0xb0/0xb0 [ 2921.865237][T19236] ? syscall_enter_from_user_mode+0x26/0x80 [ 2921.871165][T19236] do_syscall_64+0x39/0xb0 [ 2921.875611][T19236] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2921.881530][T19236] RIP: 0033:0x7f2743c8c169 [ 2921.885952][T19236] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2921.905570][T19236] RSP: 002b:00007f2744949168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2921.913997][T19236] RAX: ffffffffffffffda RBX: 00007f2743dabf80 RCX: 00007f2743c8c169 [ 2921.921973][T19236] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 2921.929952][T19236] RBP: 00007f2743ce7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2921.937936][T19236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2921.945911][T19236] R13: 00007ffd32f6bcef R14: 00007f2744949300 R15: 0000000000022000 [ 2921.953908][T19236] [ 2921.969700][T19236] memory: usage 8860kB, limit 0kB, failcnt 2876 [ 2921.989606][T19236] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2921.990170][T27851] Bluetooth: hci2: command 0x0419 tx timeout [ 2922.008193][T19236] Memory cgroup stats for /syz3: [ 2922.008412][T19236] anon 221184 [ 2922.008412][T19236] file 8351744 [ 2922.008412][T19236] kernel 462848 [ 2922.008412][T19236] kernel_stack 65536 [ 2922.008412][T19236] pagetables 151552 [ 2922.008412][T19236] sec_pagetables 0 [ 2922.008412][T19236] percpu 128 [ 2922.008412][T19236] sock 0 [ 2922.008412][T19236] vmalloc 0 [ 2922.008412][T19236] shmem 8351744 [ 2922.008412][T19236] zswap 0 [ 2922.008412][T19236] zswapped 0 [ 2922.008412][T19236] file_mapped 241664 [ 2922.008412][T19236] file_dirty 0 [ 2922.008412][T19236] file_writeback 0 [ 2922.008412][T19236] swapcached 0 [ 2922.008412][T19236] anon_thp 0 [ 2922.008412][T19236] file_thp 0 [ 2922.008412][T19236] shmem_thp 0 [ 2922.008412][T19236] inactive_anon 8458240 [ 2922.008412][T19236] active_anon 114688 [ 2922.008412][T19236] inactive_file 0 [ 2922.008412][T19236] active_file 0 [ 2922.008412][T19236] unevictable 0 [ 2922.008412][T19236] slab_reclaimable 43192 [ 2922.008412][T19236] slab_unreclaimable 157832 [ 2922.008412][T19236] slab 201024 [ 2922.008412][T19236] workingset_refault_anon 0 [ 2922.008412][T19236] workingset_refault_file 1 [ 2922.008412][T19236] workingset_activate_anon 0 [ 2922.008412][T19236] workingset_activate_file 0 [ 2922.008412][T19236] workingset_restore_anon 0 [ 2922.008412][T19236] workingset_restore_file 0 [ 2922.008412][T19236] workingset_nodereclaim 0 [ 2922.008412][T19236] pgscan 199 [ 2922.008412][T19236] pgsteal 86 [ 2922.008412][T19236] pgscan_kswapd 0 [ 2922.008412][T19236] pgscan_direct 199 [ 2922.008412][T19236] pgscan_khugepaged 0 [ 2922.008412][T19236] pgsteal_kswapd 0 [ 2922.008412][T19236] pgsteal_direct 86 [ 2922.008412][T19236] pgsteal_khugepaged 0 [ 2922.008412][T19236] pgfault 90115 [ 2922.008412][T19236] pgmajfault 0 [ 2922.008412][T19236] pgrefill 192071 [ 2922.008412][T19236] pgactivate 113 [ 2922.008412][T19236] pgdeactivate 0 [ 2922.008412][T19236] pglazyfree 0 [ 2922.008412][T19236] pglazyfreed 0 [ 2922.008412][T19236] zswpin 0 [ 2922.008412][T19236] zswpout 0 [ 2922.008412][T19236] thp_fault_alloc 0 [ 2922.222460][T19236] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19235,uid=0 [ 2922.279610][T19236] Memory cgroup out of memory: Killed process 19236 (syz-executor.3) total-vm:54548kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 08:05:51 executing program 3: bpf$PROG_LOAD(0x5, 0xfffffffffffffffd, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) r2 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x9, 0x5, 0x1, 0x1f, 0x0, 0x486, 0xa04, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x1, @perf_config_ext={0x8, 0xffffffff}, 0x408, 0x3, 0x9, 0x5, 0x3f00000000000000, 0x100, 0xfffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000240)='cgroup\x00') (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 08:05:51 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r0, 0x0) 08:05:51 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa000000, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:05:51 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='ext4_free_inode\x00'}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0xffff) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x7bc03) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.io_service_time\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r4}, 0x8) r10 = getpid() perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x80, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x600, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext={0xb61a, 0x13e}, 0x400, 0x244, 0x3, 0x0, 0x0, 0x9, 0x4, 0x0, 0x4, 0x0, 0x8}, r10, 0xa, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x0, 0x16, 0x7f, 0x0, 0xfffffffffffffffb, 0xa0004, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000240)}, 0x1000a, 0x40, 0x1, 0x4, 0x4, 0xfffffff8, 0xf001, 0x0, 0x1, 0x0, 0x8}, r10, 0xb, r4, 0x3) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40082404, &(0x7f0000000080)=0x1) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r6, @ANYRES8=r8], 0x12) openat$cgroup(r4, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 08:05:51 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1324c, 0x9, 0xffc5, 0x1b208d76dec320ae, 0x8, 0x80000000, 0xcc, 0x0, 0x200, 0x0, 0x8000}, 0x0, 0x0, r2, 0x1) close(r4) 08:05:51 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 64) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000240)='cpuacct.usage_all\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x7bc03) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0) (async, rerun: 64) write$cgroup_int(r1, &(0x7f0000000180), 0x12) (async, rerun: 64) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xf5, 0x1, 0x1, 0xa, 0x0, 0x0, 0x104, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x3, 0x40}, 0x88000, 0x40, 0x0, 0x8, 0x0, 0x1ff, 0x3, 0x0, 0x9, 0x0, 0x1cb7}, 0xffffffffffffffff, 0xe, r4, 0x8) 08:05:51 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, r0, 0x0) [ 2922.423189][T19108] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 2922.460449][T19108] CPU: 0 PID: 19108 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2922.470917][T19108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2922.481002][T19108] Call Trace: [ 2922.484305][T19108] [ 2922.487254][T19108] dump_stack_lvl+0x136/0x150 [ 2922.491982][T19108] dump_header+0x10a/0xd70 [ 2922.496431][T19108] oom_kill_process+0x25d/0x600 [ 2922.501311][T19108] out_of_memory+0x35c/0x1660 [ 2922.506018][T19108] ? find_held_lock+0x2d/0x110 [ 2922.510824][T19108] ? oom_killer_disable+0x2b0/0x2b0 [ 2922.516055][T19108] ? rcu_read_unlock+0x9/0x60 [ 2922.520771][T19108] ? find_held_lock+0x2d/0x110 [ 2922.525567][T19108] mem_cgroup_out_of_memory+0x206/0x270 [ 2922.531154][T19108] ? mem_cgroup_margin+0x130/0x130 [ 2922.536294][T19108] ? lock_downgrade+0x690/0x690 [ 2922.541188][T19108] try_charge_memcg+0xf99/0x13a0 [ 2922.546184][T19108] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2922.552217][T19108] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2922.558243][T19108] ? lock_downgrade+0x690/0x690 [ 2922.563135][T19108] ? lock_downgrade+0x690/0x690 [ 2922.568027][T19108] ? rcu_read_unlock+0x9/0x60 [ 2922.572749][T19108] obj_cgroup_charge+0x2af/0x5e0 [ 2922.577735][T19108] ? copy_process+0x3c0/0x7600 [ 2922.582529][T19108] kmem_cache_alloc_node+0xa8/0x3e0 [ 2922.587782][T19108] copy_process+0x3c0/0x7600 [ 2922.592412][T19108] ? _raw_spin_unlock+0x28/0x40 [ 2922.597292][T19108] ? wp_page_reuse+0x197/0x570 [ 2922.602109][T19108] ? pidfd_prepare+0x80/0x80 [ 2922.606745][T19108] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2922.612769][T19108] kernel_clone+0xeb/0x890 [ 2922.617225][T19108] ? create_io_thread+0xe0/0xe0 08:05:51 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xc000000, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2922.622114][T19108] ? do_user_addr_fault+0x2b1/0x1210 [ 2922.627440][T19108] ? reacquire_held_locks+0x216/0x4e0 [ 2922.632849][T19108] ? do_user_addr_fault+0x2b1/0x1210 [ 2922.638185][T19108] ? find_held_lock+0x2d/0x110 [ 2922.642990][T19108] __do_sys_clone+0xba/0x100 [ 2922.647622][T19108] ? kernel_clone+0x890/0x890 [ 2922.652346][T19108] ? syscall_enter_from_user_mode+0x26/0x80 [ 2922.658279][T19108] do_syscall_64+0x39/0xb0 [ 2922.662828][T19108] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2922.668765][T19108] RIP: 0033:0x7f2404c89e9b 08:05:51 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x0, 0x0, r0, 0x0) [ 2922.673383][T19108] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2922.693030][T19108] RSP: 002b:00007fff81618bb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2922.701560][T19108] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2404c89e9b [ 2922.709570][T19108] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2922.717674][T19108] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555572bb400 [ 2922.725739][T19108] R10: 00005555572bb6d0 R11: 0000000000000246 R12: 0000000000000001 [ 2922.733735][T19108] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff81618c90 [ 2922.741755][T19108] 08:05:52 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xe000000, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:05:52 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}, 0x0, 0x0, r0, 0x0) 08:05:52 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x10000000, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2923.418576][T19108] memory: usage 8288kB, limit 0kB, failcnt 2854 [ 2923.426019][T19108] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2923.444410][T19108] Memory cgroup stats for /syz0: [ 2923.444636][T19108] anon 40960 [ 2923.444636][T19108] file 8343552 [ 2923.444636][T19108] kernel 102400 [ 2923.444636][T19108] kernel_stack 0 [ 2923.444636][T19108] pagetables 8192 [ 2923.444636][T19108] sec_pagetables 0 [ 2923.444636][T19108] percpu 0 [ 2923.444636][T19108] sock 0 [ 2923.444636][T19108] vmalloc 0 [ 2923.444636][T19108] shmem 8343552 [ 2923.444636][T19108] zswap 0 [ 2923.444636][T19108] zswapped 0 [ 2923.444636][T19108] file_mapped 249856 [ 2923.444636][T19108] file_dirty 0 [ 2923.444636][T19108] file_writeback 0 [ 2923.444636][T19108] swapcached 0 [ 2923.444636][T19108] anon_thp 0 [ 2923.444636][T19108] file_thp 0 [ 2923.444636][T19108] shmem_thp 0 [ 2923.444636][T19108] inactive_anon 8155136 [ 2923.444636][T19108] active_anon 229376 [ 2923.444636][T19108] inactive_file 0 [ 2923.444636][T19108] active_file 0 [ 2923.444636][T19108] unevictable 0 [ 2923.444636][T19108] slab_reclaimable 26776 [ 2923.444636][T19108] slab_unreclaimable 59008 [ 2923.444636][T19108] slab 85784 [ 2923.444636][T19108] workingset_refault_anon 0 [ 2923.444636][T19108] workingset_refault_file 0 [ 2923.444636][T19108] workingset_activate_anon 0 [ 2923.444636][T19108] workingset_activate_file 0 [ 2923.444636][T19108] workingset_restore_anon 0 [ 2923.444636][T19108] workingset_restore_file 0 [ 2923.444636][T19108] workingset_nodereclaim 0 [ 2923.444636][T19108] pgscan 875 [ 2923.444636][T19108] pgsteal 403 [ 2923.444636][T19108] pgscan_kswapd 0 [ 2923.444636][T19108] pgscan_direct 875 [ 2923.444636][T19108] pgscan_khugepaged 0 [ 2923.444636][T19108] pgsteal_kswapd 0 [ 2923.444636][T19108] pgsteal_direct 403 [ 2923.444636][T19108] pgsteal_khugepaged 0 [ 2923.444636][T19108] pgfault 131768 [ 2923.444636][T19108] pgmajfault 0 [ 2923.444636][T19108] pgrefill 1333997 [ 2923.444636][T19108] pgactivate 472 [ 2923.444636][T19108] pgdeactivate 0 [ 2923.444636][T19108] pglazyfree 0 [ 2923.444636][T19108] pglazyfreed 0 [ 2923.444636][T19108] zswpin 0 [ 2923.444636][T19108] zswpout 0 [ 2923.444636][T19108] thp_fault_alloc 0 [ 2923.637933][T19108] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=19108,uid=0 [ 2923.660945][T19108] Memory cgroup out of memory: Killed process 19108 (syz-executor.0) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2923.680433][T19075] syz-executor.3 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 2923.695024][T19075] CPU: 1 PID: 19075 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2923.705475][T19075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2923.715569][T19075] Call Trace: [ 2923.718873][T19075] [ 2923.721824][T19075] dump_stack_lvl+0x136/0x150 [ 2923.726545][T19075] dump_header+0x10a/0xd70 [ 2923.730998][T19075] oom_kill_process+0x25d/0x600 [ 2923.735879][T19075] out_of_memory+0x35c/0x1660 [ 2923.740595][T19075] ? oom_killer_disable+0x2b0/0x2b0 [ 2923.745820][T19075] ? rcu_read_unlock+0x9/0x60 [ 2923.750525][T19075] ? find_held_lock+0x2d/0x110 [ 2923.755329][T19075] mem_cgroup_out_of_memory+0x206/0x270 [ 2923.760909][T19075] ? mem_cgroup_margin+0x130/0x130 [ 2923.766049][T19075] ? lock_downgrade+0x690/0x690 [ 2923.770953][T19075] try_charge_memcg+0xf99/0x13a0 [ 2923.775939][T19075] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2923.781960][T19075] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2923.787710][T19075] ? lock_downgrade+0x690/0x690 [ 2923.792606][T19075] ? lock_downgrade+0x690/0x690 [ 2923.797514][T19075] obj_cgroup_charge+0x2af/0x5e0 [ 2923.802501][T19075] ? ext4_alloc_inode+0x28/0x650 [ 2923.807467][T19075] kmem_cache_alloc_lru+0x142/0x600 [ 2923.812707][T19075] ? ext4_free_in_core_inode+0xb0/0xb0 [ 2923.818203][T19075] ext4_alloc_inode+0x28/0x650 [ 2923.822994][T19075] ? ext4_free_in_core_inode+0xb0/0xb0 [ 2923.828489][T19075] alloc_inode+0x61/0x230 [ 2923.832854][T19075] iget_locked+0x1bb/0x700 [ 2923.837315][T19075] __ext4_iget+0x3b2/0x4430 [ 2923.841869][T19075] ? ext4_get_projid+0x190/0x190 [ 2923.846841][T19075] ? ext4_fname_prepare_lookup+0x163/0x200 [ 2923.852679][T19075] ? ext4_fname_setup_filename+0x110/0x110 [ 2923.858527][T19075] ? rcu_is_watching+0x12/0xb0 [ 2923.863346][T19075] ext4_lookup+0x387/0x700 [ 2923.867794][T19075] ? ext4_resetent+0x2e0/0x2e0 [ 2923.872625][T19075] __lookup_slow+0x24c/0x460 [ 2923.877251][T19075] ? lookup_one_qstr_excl+0x180/0x180 [ 2923.882674][T19075] ? lookup_fast+0x14e/0x520 [ 2923.887296][T19075] walk_component+0x33f/0x5a0 [ 2923.892007][T19075] path_lookupat+0x1ba/0x840 [ 2923.896641][T19075] filename_lookup+0x1d2/0x590 [ 2923.901442][T19075] ? may_linkat+0x3b0/0x3b0 [ 2923.905970][T19075] ? __might_fault+0xe2/0x190 [ 2923.910784][T19075] ? __phys_addr_symbol+0x30/0x70 [ 2923.915840][T19075] ? __check_object_size+0x323/0x730 [ 2923.921154][T19075] ? strncpy_from_user+0x1f8/0x350 [ 2923.926301][T19075] ? getname_flags.part.0+0x1dd/0x4f0 [ 2923.931716][T19075] user_path_at_empty+0x46/0x60 [ 2923.936613][T19075] __x64_sys_umount+0xfc/0x190 [ 2923.941411][T19075] ? path_umount+0x10b0/0x10b0 [ 2923.946212][T19075] ? syscall_enter_from_user_mode+0x26/0x80 [ 2923.952149][T19075] do_syscall_64+0x39/0xb0 [ 2923.956605][T19075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2923.962533][T19075] RIP: 0033:0x7f2743c8d5d7 [ 2923.967062][T19075] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2923.986695][T19075] RSP: 002b:00007ffd32f6ae48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2923.995133][T19075] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2743c8d5d7 [ 2924.003118][T19075] RDX: 00007ffd32f6af1e RSI: 000000000000000a RDI: 00007ffd32f6af10 [ 2924.011106][T19075] RBP: 00007ffd32f6af10 R08: 00000000ffffffff R09: 00007ffd32f6ace0 [ 2924.019095][T19075] R10: 000055555682a8e3 R11: 0000000000000246 R12: 00007f2743ce6cdc [ 2924.027092][T19075] R13: 00007ffd32f6bfd0 R14: 000055555682a810 R15: 00007ffd32f6c010 [ 2924.035104][T19075] [ 2924.454320][T19075] memory: usage 8600kB, limit 0kB, failcnt 2903 [ 2924.467649][T19075] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2924.485036][T19075] Memory cgroup stats for /syz3: [ 2924.485252][T19075] anon 147456 [ 2924.485252][T19075] file 8351744 [ 2924.485252][T19075] kernel 290816 [ 2924.485252][T19075] kernel_stack 32768 [ 2924.485252][T19075] pagetables 81920 [ 2924.485252][T19075] sec_pagetables 0 [ 2924.485252][T19075] percpu 64 [ 2924.485252][T19075] sock 0 [ 2924.485252][T19075] vmalloc 0 [ 2924.485252][T19075] shmem 8351744 [ 2924.485252][T19075] zswap 0 [ 2924.485252][T19075] zswapped 0 [ 2924.485252][T19075] file_mapped 241664 [ 2924.485252][T19075] file_dirty 0 [ 2924.485252][T19075] file_writeback 0 [ 2924.485252][T19075] swapcached 0 [ 2924.485252][T19075] anon_thp 0 [ 2924.485252][T19075] file_thp 0 [ 2924.485252][T19075] shmem_thp 0 [ 2924.485252][T19075] inactive_anon 8458240 [ 2924.485252][T19075] active_anon 40960 [ 2924.485252][T19075] inactive_file 0 [ 2924.485252][T19075] active_file 0 [ 2924.485252][T19075] unevictable 0 [ 2924.485252][T19075] slab_reclaimable 38256 [ 2924.485252][T19075] slab_unreclaimable 114728 [ 2924.485252][T19075] slab 152984 [ 2924.485252][T19075] workingset_refault_anon 0 [ 2924.485252][T19075] workingset_refault_file 1 [ 2924.485252][T19075] workingset_activate_anon 0 [ 2924.485252][T19075] workingset_activate_file 0 [ 2924.485252][T19075] workingset_restore_anon 0 [ 2924.485252][T19075] workingset_restore_file 0 [ 2924.485252][T19075] workingset_nodereclaim 0 [ 2924.485252][T19075] pgscan 199 [ 2924.485252][T19075] pgsteal 86 [ 2924.485252][T19075] pgscan_kswapd 0 [ 2924.485252][T19075] pgscan_direct 199 [ 2924.485252][T19075] pgscan_khugepaged 0 [ 2924.485252][T19075] pgsteal_kswapd 0 [ 2924.485252][T19075] pgsteal_direct 86 [ 2924.485252][T19075] pgsteal_khugepaged 0 [ 2924.485252][T19075] pgfault 90118 [ 2924.485252][T19075] pgmajfault 0 [ 2924.485252][T19075] pgrefill 192071 [ 2924.485252][T19075] pgactivate 113 [ 2924.485252][T19075] pgdeactivate 0 [ 2924.485252][T19075] pglazyfree 0 [ 2924.485252][T19075] pglazyfreed 0 [ 2924.485252][T19075] zswpin 0 [ 2924.485252][T19075] zswpout 0 [ 2924.485252][T19075] thp_fault_alloc 0 [ 2924.680305][T19075] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19075,uid=0 [ 2924.712954][T14855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2924.723702][T14855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2924.732531][T14855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2924.740410][T14855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2924.747880][T14855] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2924.759574][T14855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2924.759594][T19075] Memory cgroup out of memory: Killed process 19075 (syz-executor.3) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2924.869418][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2925.027140][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2925.141338][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 08:05:54 executing program 3: bpf$PROG_LOAD(0x5, 0xfffffffffffffffd, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x9, 0x5, 0x1, 0x1f, 0x0, 0x486, 0xa04, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x1, @perf_config_ext={0x8, 0xffffffff}, 0x408, 0x3, 0x9, 0x5, 0x3f00000000000000, 0x100, 0xfffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000240)='cgroup\x00') (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) (async, rerun: 64) write$cgroup_int(r1, &(0x7f0000000180), 0x12) (rerun: 64) 08:05:54 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, r0, 0x0) 08:05:54 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x18000000, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2925.327536][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2925.458595][T19299] chnl_net:caif_netlink_parms(): no params data found [ 2925.683737][T19299] bridge0: port 1(bridge_slave_0) entered blocking state [ 2925.691804][T19299] bridge0: port 1(bridge_slave_0) entered disabled state [ 2925.699007][T19299] bridge_slave_0: entered allmulticast mode [ 2925.707522][T19299] bridge_slave_0: entered promiscuous mode [ 2925.743475][T19299] bridge0: port 2(bridge_slave_1) entered blocking state [ 2925.757625][T19299] bridge0: port 2(bridge_slave_1) entered disabled state [ 2925.767352][T19299] bridge_slave_1: entered allmulticast mode [ 2925.780151][T19299] bridge_slave_1: entered promiscuous mode [ 2925.834670][T19299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2925.847064][T19299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2925.904837][T19299] team0: Port device team_slave_0 added [ 2925.938100][T19299] team0: Port device team_slave_1 added [ 2925.994755][T19299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2926.007452][T19299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2926.045857][T19299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2926.074856][T19299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2926.087539][T19299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2926.123520][T19299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2926.180578][T19299] hsr_slave_0: entered promiscuous mode [ 2926.186955][T19299] hsr_slave_1: entered promiscuous mode [ 2926.193335][T19299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2926.200978][T19299] Cannot create hsr debugfs directory [ 2926.763075][ T62] hsr_slave_0: left promiscuous mode [ 2926.780209][ T62] hsr_slave_1: left promiscuous mode [ 2926.790530][T27851] Bluetooth: hci2: command 0x0409 tx timeout [ 2926.798278][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2926.820066][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2926.832417][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2926.850079][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2926.869452][ T62] bridge_slave_1: left allmulticast mode [ 2926.889659][ T62] bridge_slave_1: left promiscuous mode [ 2926.899697][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 2926.930988][ T62] bridge_slave_0: left allmulticast mode [ 2926.936686][ T62] bridge_slave_0: left promiscuous mode [ 2926.950160][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 2926.986532][ T62] veth1_macvtap: left promiscuous mode [ 2927.000112][ T62] veth0_macvtap: left promiscuous mode [ 2927.005717][ T62] veth1_vlan: left promiscuous mode [ 2927.018537][ T62] veth0_vlan: left promiscuous mode [ 2927.476255][ T62] team0 (unregistering): Port device team_slave_1 removed [ 2927.499876][ T62] team0 (unregistering): Port device team_slave_0 removed [ 2927.531481][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2927.559070][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2927.730874][ T62] bond0 (unregistering): Released all slaves [ 2927.994317][T19299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2928.019938][T19299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2928.029832][T19299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2928.039874][T19299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2928.152593][T19299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2928.190177][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2928.198165][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2928.223849][T19299] 8021q: adding VLAN 0 to HW filter on device team0 [ 2928.244224][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2928.253375][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2928.271312][ T2619] bridge0: port 1(bridge_slave_0) entered blocking state [ 2928.278439][ T2619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2928.303672][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2928.312200][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2928.321427][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2928.329868][T14476] bridge0: port 2(bridge_slave_1) entered blocking state [ 2928.337011][T14476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2928.345339][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2928.354955][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2928.377430][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2928.387343][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2928.396508][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2928.416121][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2928.444131][T19299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2928.456840][T19299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2928.473929][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2928.490974][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2928.499454][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2928.531511][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2928.540163][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2928.565189][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2928.870305][T14855] Bluetooth: hci2: command 0x041b tx timeout [ 2928.912349][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2928.919864][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2928.932030][T19299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2928.978740][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2928.988361][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2929.027320][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2929.044938][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2929.064424][T19299] veth0_vlan: entered promiscuous mode [ 2929.097742][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2929.111783][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2929.125546][T19299] veth1_vlan: entered promiscuous mode [ 2929.159411][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2929.178397][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2929.186841][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2929.204870][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2929.220004][T19299] veth0_macvtap: entered promiscuous mode [ 2929.229633][T19299] veth1_macvtap: entered promiscuous mode [ 2929.257547][T19299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2929.278413][T19299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2929.295737][T19299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2929.307917][T19299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2929.327583][T19299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2929.339932][T19299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2929.360799][T19299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2929.377290][T19299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2929.388619][T19299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2929.407552][T19299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2929.419178][T19299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2929.437150][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2929.448699][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2929.464135][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2929.476540][T26745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2929.503013][T19299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2929.530041][T19299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2929.550359][T19299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2929.569999][T19299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2929.580700][T19299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2929.598695][T19299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2929.617483][T19299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2929.636979][T19299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2929.667902][T19299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2929.683162][T19299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2929.701719][T19299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2929.718529][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2929.729566][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2929.749627][T19299] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2929.761120][T19299] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2929.769851][T19299] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2929.785923][T19299] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2929.889904][T21574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2929.898644][T21574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2929.929003][T24745] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2929.970457][T21574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2929.979153][T21574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2929.993100][T14476] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2930.066855][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 08:05:59 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='ext4_free_inode\x00'}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0xffff) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x7bc03) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.io_service_time\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r4}, 0x8) r10 = getpid() perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x80, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x600, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext={0xb61a, 0x13e}, 0x400, 0x244, 0x3, 0x0, 0x0, 0x9, 0x4, 0x0, 0x4, 0x0, 0x8}, r10, 0xa, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x0, 0x16, 0x7f, 0x0, 0xfffffffffffffffb, 0xa0004, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000240)}, 0x1000a, 0x40, 0x1, 0x4, 0x4, 0xfffffff8, 0xf001, 0x0, 0x1, 0x0, 0x8}, r10, 0xb, r4, 0x3) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40082404, &(0x7f0000000080)=0x1) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r6, @ANYRES8=r8], 0x12) openat$cgroup(r4, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) write$cgroup_int(r2, &(0x7f0000000180), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='ext4_free_inode\x00'}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0xffff) (async) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000200), 0x7bc03) (async) openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.io_service_time\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) close(r6) (async) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r4}, 0x8) (async) getpid() (async) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x80, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x600, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext={0xb61a, 0x13e}, 0x400, 0x244, 0x3, 0x0, 0x0, 0x9, 0x4, 0x0, 0x4, 0x0, 0x8}, r10, 0xa, 0xffffffffffffffff, 0x3) (async) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x0, 0x16, 0x7f, 0x0, 0xfffffffffffffffb, 0xa0004, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000240)}, 0x1000a, 0x40, 0x1, 0x4, 0x4, 0xfffffff8, 0xf001, 0x0, 0x1, 0x0, 0x8}, r10, 0xb, r4, 0x3) (async) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40082404, &(0x7f0000000080)=0x1) (async) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r6, @ANYRES8=r8], 0x12) (async) openat$cgroup(r4, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000180), 0x12) (async) 08:05:59 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1324c, 0x9, 0xffc5, 0x1b208d76dec320ae, 0x8, 0x80000000, 0xcc, 0x0, 0x200, 0x0, 0x8000}, 0x0, 0x0, r2, 0x1) close(r4) [ 2930.159180][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 08:05:59 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x18400000, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:05:59 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='cpuacct.usage\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 08:05:59 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0x0, 0x0, r0, 0x0) 08:05:59 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x7bc03) r3 = syz_clone(0x20004000, &(0x7f00000002c0)="9a33e3c63b7f80ebb27164b87b7765a503c0ba191e8d7b6038939107b0858e55c47b3eddd9f00d05598c26527b7599b983f85f5898c8fb9d912ea951015ea3c52f0521dd0612847e1c8626a6d0c877125d504aa83f0f25e2388006016db04d164b21455355bbb5c6dc8c7f130bdab4b635387534ad0be29f41d470c693d7807a325273b67ccfa2c7e20aa89dc33a717a32a1c2e558e0b6e4f19052e50ce3fefbc3efb1cc2f5e2b35b0a712ea6e593b4f65b79b7794626fe12a9e29ff0ee38e8ad05f", 0xc2, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="616101404fc3404c2498e4f77303fd11f6a317dee5efac99ee3d1970c6772a054564aa7356b291d658c3aa63d865dbb2d9119c8f1f29b959a648c83c1b69214ba208ae7dcc91b6fe3a134123e5b52dbf3f85ce581c507c56068f1d09d511b7f57a9379dd6b314464bd16ed23f25dd86a01a5790776c5eb91ea5e1b47bce3d72719bb5848b4d938f2a2f36a842b5e69de4990580a698f1f905288aa48bb211d99e1e2caa986a84c4b94a879cf34027469ccdf9726b3cfcb597cccbf11bef75b70a9f7b3134393dc3fc3f711a9e5507fbf0577e9") perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x78, 0x1, 0x0, 0x1f, 0x0, 0x1, 0x80000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0x7f}, 0x80, 0x3, 0x6, 0x2, 0x9, 0x5, 0x3, 0x0, 0x0, 0x0, 0x5}, r3, 0xd, 0xffffffffffffffff, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='kvm_vcpu_wakeup\x00'}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_int(r2, &(0x7f0000000180), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x491) 08:05:59 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001}, 0x0, 0x0, r0, 0x0) [ 2930.323919][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 08:05:59 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x1b000000, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:05:59 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, r0, 0x0) 08:05:59 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x1d000000, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2930.514553][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 08:05:59 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='ext4_free_inode\x00'}, 0x10) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='ext4_free_inode\x00'}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0xffff) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x7bc03) openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.io_service_time\x00', 0x0, 0x0) (async) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.io_service_time\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r4}, 0x8) r10 = getpid() perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x80, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x600, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext={0xb61a, 0x13e}, 0x400, 0x244, 0x3, 0x0, 0x0, 0x9, 0x4, 0x0, 0x4, 0x0, 0x8}, r10, 0xa, 0xffffffffffffffff, 0x3) (async) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x80, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x600, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext={0xb61a, 0x13e}, 0x400, 0x244, 0x3, 0x0, 0x0, 0x9, 0x4, 0x0, 0x4, 0x0, 0x8}, r10, 0xa, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x0, 0x16, 0x7f, 0x0, 0xfffffffffffffffb, 0xa0004, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000240)}, 0x1000a, 0x40, 0x1, 0x4, 0x4, 0xfffffff8, 0xf001, 0x0, 0x1, 0x0, 0x8}, r10, 0xb, r4, 0x3) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40082404, &(0x7f0000000080)=0x1) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r6, @ANYRES8=r8], 0x12) (async) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r6, @ANYRES8=r8], 0x12) openat$cgroup(r4, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup(r4, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) write$cgroup_int(r2, &(0x7f0000000180), 0x12) 08:05:59 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x5f, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x1f000000, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:05:59 executing program 5: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000}, 0x0, 0x0, r0, 0x0) [ 2930.950139][T27851] Bluetooth: hci2: command 0x040f tx timeout 08:06:00 executing program 1: r0 = perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\\}}--}\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x800, 0x0, 0x0, 0x0, 0xfffffffffbfffffd, 0x0, 0xfff9, 0x0, 0x4}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7f, 0x5, 0x7, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100c4, 0xed1, 0x20, 0x4, 0x100, 0x193c, 0x4, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r2, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r4 = getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x8, 0x6, 0x3f, 0x0, 0x7f, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1324c, 0x9, 0xffc5, 0x1b208d76dec320ae, 0x8, 0x80000000, 0xcc, 0x0, 0x200, 0x0, 0x8000}, r4, 0x0, 0xffffffffffffffff, 0x1) close(r3) 08:06:00 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x800000, 0x12) [ 2931.414116][T19452] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2931.444558][T19452] CPU: 1 PID: 19452 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2931.455030][T19452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2931.465111][T19452] Call Trace: [ 2931.468407][T19452] [ 2931.471374][T19452] dump_stack_lvl+0x136/0x150 [ 2931.476117][T19452] dump_header+0x10a/0xd70 [ 2931.480588][T19452] oom_kill_process+0x25d/0x600 [ 2931.485562][T19452] out_of_memory+0x35c/0x1660 [ 2931.490277][T19452] ? io_schedule_timeout+0x150/0x150 [ 2931.495606][T19452] ? oom_killer_disable+0x2b0/0x2b0 [ 2931.500832][T19452] ? kernfs_notify+0x1ac/0x410 [ 2931.505650][T19452] mem_cgroup_out_of_memory+0x206/0x270 [ 2931.511248][T19452] ? mem_cgroup_margin+0x130/0x130 [ 2931.516421][T19452] memory_max_write+0x2f9/0x3c0 [ 2931.521325][T19452] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2931.527530][T19452] ? lock_sync+0x190/0x190 [ 2931.531993][T19452] cgroup_file_write+0x1e2/0x7b0 [ 2931.536970][T19452] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2931.543084][T19452] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2931.548492][T19452] ? __virt_addr_valid+0x61/0x2e0 [ 2931.553573][T19452] ? cgroup_get_from_path+0x6e0/0x6e0 [ 2931.558982][T19452] kernfs_fop_write_iter+0x3f1/0x600 [ 2931.564317][T19452] vfs_write+0x945/0xd50 [ 2931.568599][T19452] ? kernel_write+0x670/0x670 [ 2931.573308][T19452] ? __fget_files+0x26a/0x480 [ 2931.578053][T19452] ksys_write+0x12b/0x250 [ 2931.582439][T19452] ? __ia32_sys_read+0xb0/0xb0 [ 2931.587236][T19452] ? syscall_enter_from_user_mode+0x26/0x80 [ 2931.593181][T19452] do_syscall_64+0x39/0xb0 [ 2931.597648][T19452] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2931.603589][T19452] RIP: 0033:0x7fe82508c169 [ 2931.608034][T19452] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2931.627676][T19452] RSP: 002b:00007fe825e8e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2931.636222][T19452] RAX: ffffffffffffffda RBX: 00007fe8251abf80 RCX: 00007fe82508c169 [ 2931.644214][T19452] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000004 [ 2931.652205][T19452] RBP: 00007fe8250e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2931.660203][T19452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2931.668206][T19452] R13: 00007ffdf970a79f R14: 00007fe825e8e300 R15: 0000000000022000 [ 2931.676233][T19452] [ 2931.685791][T19452] memory: usage 11196kB, limit 8192kB, failcnt 2663 [ 2931.698518][T19452] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2931.709386][T19452] Memory cgroup stats for /syz2: [ 2931.709608][T19452] anon 139264 [ 2931.709608][T19452] file 10952704 [ 2931.709608][T19452] kernel 372736 [ 2931.709608][T19452] kernel_stack 98304 [ 2931.709608][T19452] pagetables 81920 [ 2931.709608][T19452] sec_pagetables 0 [ 2931.709608][T19452] percpu 64 [ 2931.709608][T19452] sock 0 [ 2931.709608][T19452] vmalloc 0 [ 2931.709608][T19452] shmem 10440704 [ 2931.709608][T19452] zswap 0 [ 2931.709608][T19452] zswapped 0 [ 2931.709608][T19452] file_mapped 262144 [ 2931.709608][T19452] file_dirty 512000 [ 2931.709608][T19452] file_writeback 0 [ 2931.709608][T19452] swapcached 0 [ 2931.709608][T19452] anon_thp 0 [ 2931.709608][T19452] file_thp 0 [ 2931.709608][T19452] shmem_thp 0 [ 2931.709608][T19452] inactive_anon 0 [ 2931.709608][T19452] active_anon 10579968 [ 2931.709608][T19452] inactive_file 0 [ 2931.709608][T19452] active_file 512000 [ 2931.709608][T19452] unevictable 0 [ 2931.709608][T19452] slab_reclaimable 75008 [ 2931.709608][T19452] slab_unreclaimable 87992 [ 2931.709608][T19452] slab 163000 [ 2931.709608][T19452] workingset_refault_anon 0 [ 2931.709608][T19452] workingset_refault_file 0 [ 2931.709608][T19452] workingset_activate_anon 0 [ 2931.709608][T19452] workingset_activate_file 0 [ 2931.709608][T19452] workingset_restore_anon 0 [ 2931.709608][T19452] workingset_restore_file 0 [ 2931.709608][T19452] workingset_nodereclaim 0 [ 2931.709608][T19452] pgscan 1992 [ 2931.709608][T19452] pgsteal 31 [ 2931.709608][T19452] pgscan_kswapd 0 [ 2931.709608][T19452] pgscan_direct 1992 [ 2931.709608][T19452] pgscan_khugepaged 0 [ 2931.709608][T19452] pgsteal_kswapd 0 [ 2931.709608][T19452] pgsteal_direct 31 [ 2931.709608][T19452] pgsteal_khugepaged 0 [ 2931.709608][T19452] pgfault 75142 [ 2931.709608][T19452] pgmajfault 0 [ 2931.709608][T19452] pgrefill 1324701 [ 2931.709608][T19452] pgactivate 1961 [ 2931.709608][T19452] pgdeactivate 0 [ 2931.709608][T19452] pglazyfree 0 [ 2931.709608][T19452] pglazyfreed 0 [ 2931.709608][T19452] zswpin 0 [ 2931.709608][T19452] zswpout 0 [ 2931.902239][T19452] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=19451,uid=0 [ 2931.926385][T19452] Memory cgroup out of memory: Killed process 19451 (syz-executor.2) total-vm:54680kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2932.377136][ T62] hsr_slave_0: left promiscuous mode [ 2932.400917][ T62] hsr_slave_1: left promiscuous mode [ 2932.406997][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2932.427440][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2932.448383][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2932.457218][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2932.466782][ T62] bridge_slave_1: left allmulticast mode [ 2932.475177][ T62] bridge_slave_1: left promiscuous mode [ 2932.481177][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 2932.490591][ T62] bridge_slave_0: left allmulticast mode [ 2932.496264][ T62] bridge_slave_0: left promiscuous mode [ 2932.503021][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 2932.517095][ T62] veth1_macvtap: left promiscuous mode [ 2932.522726][ T62] veth0_macvtap: left promiscuous mode [ 2932.528314][ T62] veth1_vlan: left promiscuous mode [ 2932.534783][ T62] veth0_vlan: left promiscuous mode [ 2932.535548][T27851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2932.551443][T27851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2932.561675][T27851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2932.570948][T27851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2932.579119][T27851] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2932.586739][T27851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2932.805430][ T62] team0 (unregistering): Port device team_slave_1 removed [ 2932.821681][ T62] team0 (unregistering): Port device team_slave_0 removed [ 2932.837568][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2932.856105][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2932.967569][T14855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2932.976640][ T62] bond0 (unregistering): Released all slaves [ 2932.982146][T14855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2932.992033][T14855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2933.002913][T14855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2933.013563][T14855] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2933.020822][T14855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2933.030513][T14855] Bluetooth: hci2: command 0x0419 tx timeout [ 2933.343006][T19474] chnl_net:caif_netlink_parms(): no params data found [ 2933.387218][T19477] chnl_net:caif_netlink_parms(): no params data found [ 2933.472786][ T62] ------------[ cut here ]------------ [ 2933.478694][ T62] ODEBUG: free active (active state 0) object: ffff88801f9694f8 object type: timer_list hint: batadv_dat_purge+0x0/0x70 [ 2933.509879][ T62] WARNING: CPU: 1 PID: 62 at lib/debugobjects.c:505 debug_print_object+0x194/0x2c0 [ 2933.519639][ T62] Modules linked in: [ 2933.523813][ T62] CPU: 1 PID: 62 Comm: kworker/u4:4 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2933.533906][ T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2933.544020][ T62] Workqueue: netns cleanup_net [ 2933.548866][ T62] RIP: 0010:debug_print_object+0x194/0x2c0 [ 2933.554751][ T62] Code: df 48 89 fe 48 c1 ee 03 80 3c 16 00 0f 85 c7 00 00 00 48 8b 14 dd 40 25 a7 8a 50 4c 89 ee 48 c7 c7 00 19 a7 8a e8 cc b1 34 fd <0f> 0b 58 83 05 26 5f 63 0a 01 48 83 c4 20 5b 5d 41 5c 41 5d 41 5e [ 2933.574600][ T62] RSP: 0018:ffffc90001577860 EFLAGS: 00010286 [ 2933.580741][ T62] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 2933.588835][ T62] RDX: ffff888019aa0000 RSI: ffffffff814c03f7 RDI: 0000000000000001 [ 2933.597020][ T62] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 2933.605045][ T62] R10: 0000000000000001 R11: 00000000003fe590 R12: ffffffff8a4ed280 [ 2933.613096][ T62] R13: ffffffff8aa71f60 R14: ffff8880193276e0 R15: ffffffff8172bba0 [ 2933.621125][ T62] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 2933.630221][ T62] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2933.636835][ T62] CR2: 00007fcc1401e5a0 CR3: 000000000c571000 CR4: 00000000003506e0 [ 2933.644885][ T62] DR0: 0000000020000100 DR1: 0000000000000000 DR2: 0000000000000000 [ 2933.653004][ T62] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 2933.661131][ T62] Call Trace: [ 2933.664447][ T62] [ 2933.667411][ T62] ? __batadv_dat_purge.part.0+0x3b0/0x3b0 [ 2933.673356][ T62] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2933.679209][ T62] debug_check_no_obj_freed+0x305/0x420 [ 2933.684863][ T62] slab_free_freelist_hook+0xeb/0x1c0 [ 2933.690317][ T62] ? kvfree+0x46/0x50 [ 2933.694338][ T62] __kmem_cache_free+0xaf/0x2d0 [ 2933.699245][ T62] kvfree+0x46/0x50 [ 2933.703152][ T62] ? net_get_ownership+0x50/0x50 [ 2933.708205][ T62] device_release+0xa3/0x240 [ 2933.712897][ T62] kobject_put+0x1c2/0x4d0 [ 2933.717348][ T62] netdev_run_todo+0x762/0x1100 [ 2933.722329][ T62] ? generic_xdp_install+0x4c0/0x4c0 [ 2933.727642][ T62] ? mutex_is_locked+0x12/0x50 [ 2933.732487][ T62] ? netdev_freemem+0x60/0x60 [ 2933.737204][ T62] ? unregister_netdevice_many+0x20/0x20 [ 2933.742919][ T62] ? sysfs_remove_group+0xc6/0x170 [ 2933.748092][ T62] ? br_dev_delete+0x116/0x1a0 [ 2933.753048][ T62] default_device_exit_batch+0x456/0x5b0 [ 2933.758726][ T62] ? unregister_netdev+0x30/0x30 [ 2933.763752][ T62] ? unregister_netdev+0x30/0x30 [ 2933.768721][ T62] ops_exit_list+0x125/0x170 [ 2933.773419][ T62] cleanup_net+0x4ee/0xb10 [ 2933.777897][ T62] ? unregister_pernet_device+0x80/0x80 [ 2933.783538][ T62] ? _raw_spin_unlock_irq+0x23/0x50 [ 2933.788795][ T62] process_one_work+0x99a/0x15e0 [ 2933.793835][ T62] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 2933.799259][ T62] ? spin_bug+0x1c0/0x1c0 [ 2933.803683][ T62] ? _raw_spin_lock_irq+0x45/0x50 [ 2933.808775][ T62] worker_thread+0x67d/0x10c0 [ 2933.813550][ T62] ? process_one_work+0x15e0/0x15e0 [ 2933.818794][ T62] kthread+0x344/0x440 [ 2933.822972][ T62] ? kthread_complete_and_exit+0x40/0x40 [ 2933.828641][ T62] ret_from_fork+0x1f/0x30 [ 2933.833159][ T62] [ 2933.836198][ T62] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2933.843486][ T62] CPU: 1 PID: 62 Comm: kworker/u4:4 Not tainted 6.4.0-rc3-syzkaller-00230-g132328e8e851 #0 [ 2933.853559][ T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 2933.863796][ T62] Workqueue: netns cleanup_net [ 2933.868675][ T62] Call Trace: [ 2933.871957][ T62] [ 2933.874946][ T62] dump_stack_lvl+0xd9/0x150 [ 2933.879572][ T62] panic+0x686/0x730 [ 2933.883499][ T62] ? panic_smp_self_stop+0xa0/0xa0 [ 2933.888665][ T62] ? show_trace_log_lvl+0x285/0x390 [ 2933.893918][ T62] ? debug_print_object+0x194/0x2c0 [ 2933.899129][ T62] check_panic_on_warn+0xb1/0xc0 [ 2933.904117][ T62] __warn+0xf2/0x390 [ 2933.908030][ T62] ? debug_print_object+0x194/0x2c0 [ 2933.913336][ T62] report_bug+0x2da/0x500 [ 2933.917692][ T62] handle_bug+0x3c/0x70 [ 2933.921854][ T62] exc_invalid_op+0x18/0x50 [ 2933.926360][ T62] asm_exc_invalid_op+0x1a/0x20 [ 2933.931226][ T62] RIP: 0010:debug_print_object+0x194/0x2c0 [ 2933.937050][ T62] Code: df 48 89 fe 48 c1 ee 03 80 3c 16 00 0f 85 c7 00 00 00 48 8b 14 dd 40 25 a7 8a 50 4c 89 ee 48 c7 c7 00 19 a7 8a e8 cc b1 34 fd <0f> 0b 58 83 05 26 5f 63 0a 01 48 83 c4 20 5b 5d 41 5c 41 5d 41 5e [ 2933.956661][ T62] RSP: 0018:ffffc90001577860 EFLAGS: 00010286 [ 2933.962732][ T62] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 2933.970792][ T62] RDX: ffff888019aa0000 RSI: ffffffff814c03f7 RDI: 0000000000000001 [ 2933.978765][ T62] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 2933.986738][ T62] R10: 0000000000000001 R11: 00000000003fe590 R12: ffffffff8a4ed280 [ 2933.994713][ T62] R13: ffffffff8aa71f60 R14: ffff8880193276e0 R15: ffffffff8172bba0 [ 2934.002689][ T62] ? calc_wheel_index+0x3d0/0x3d0 [ 2934.007745][ T62] ? __warn_printk+0x187/0x310 [ 2934.012530][ T62] ? __batadv_dat_purge.part.0+0x3b0/0x3b0 [ 2934.018356][ T62] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2934.024184][ T62] debug_check_no_obj_freed+0x305/0x420 [ 2934.029753][ T62] slab_free_freelist_hook+0xeb/0x1c0 [ 2934.035144][ T62] ? kvfree+0x46/0x50 [ 2934.039143][ T62] __kmem_cache_free+0xaf/0x2d0 [ 2934.044016][ T62] kvfree+0x46/0x50 [ 2934.047843][ T62] ? net_get_ownership+0x50/0x50 [ 2934.052786][ T62] device_release+0xa3/0x240 [ 2934.057386][ T62] kobject_put+0x1c2/0x4d0 [ 2934.061823][ T62] netdev_run_todo+0x762/0x1100 [ 2934.066688][ T62] ? generic_xdp_install+0x4c0/0x4c0 [ 2934.071994][ T62] ? mutex_is_locked+0x12/0x50 [ 2934.076785][ T62] ? netdev_freemem+0x60/0x60 [ 2934.081516][ T62] ? unregister_netdevice_many+0x20/0x20 [ 2934.087179][ T62] ? sysfs_remove_group+0xc6/0x170 [ 2934.092339][ T62] ? br_dev_delete+0x116/0x1a0 [ 2934.097123][ T62] default_device_exit_batch+0x456/0x5b0 [ 2934.102790][ T62] ? unregister_netdev+0x30/0x30 [ 2934.107772][ T62] ? unregister_netdev+0x30/0x30 [ 2934.112738][ T62] ops_exit_list+0x125/0x170 [ 2934.117362][ T62] cleanup_net+0x4ee/0xb10 [ 2934.121831][ T62] ? unregister_pernet_device+0x80/0x80 [ 2934.127422][ T62] ? _raw_spin_unlock_irq+0x23/0x50 [ 2934.132650][ T62] process_one_work+0x99a/0x15e0 [ 2934.139267][ T62] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 2934.144847][ T62] ? spin_bug+0x1c0/0x1c0 [ 2934.149203][ T62] ? _raw_spin_lock_irq+0x45/0x50 [ 2934.154517][ T62] worker_thread+0x67d/0x10c0 [ 2934.159234][ T62] ? process_one_work+0x15e0/0x15e0 [ 2934.164453][ T62] kthread+0x344/0x440 [ 2934.168533][ T62] ? kthread_complete_and_exit+0x40/0x40 [ 2934.174181][ T62] ret_from_fork+0x1f/0x30 [ 2934.178727][ T62] [ 2934.181956][ T62] Kernel Offset: disabled [ 2934.186485][ T62] Rebooting in 86400 seconds..