2608.579216][ T317] unevictable 0 [ 2608.579216][ T317] slab_reclaimable 19984 [ 2608.579216][ T317] slab_unreclaimable 83736 [ 2608.579216][ T317] slab 103720 [ 2608.693297][ T317] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=314,uid=0 [ 2608.715703][ T317] Memory cgroup out of memory: Killed process 317 (syz-executor.4) total-vm:54672kB, anon-rss:372kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2609.234543][T21046] device hsr_slave_0 left promiscuous mode [ 2609.241134][T21046] device hsr_slave_1 left promiscuous mode [ 2609.247841][T21046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2609.255654][T21046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2609.266793][T21046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2609.277003][T21046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2609.292255][T21046] device bridge_slave_1 left promiscuous mode [ 2609.301174][T21046] bridge0: port 2(bridge_slave_1) entered disabled state [ 2609.317091][T21046] device bridge_slave_0 left promiscuous mode [ 2609.323554][T21046] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:59 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x7, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x100, 0x0, 0x100, 0x0, 0x9, 0x0, 0x1f}, r0, 0xb, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_int(r3, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='cgroup\x00') r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, r2, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000600), 0x12) 10:12:59 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) 10:12:59 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:12:59 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:12:59 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:12:59 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2609.338274][T21046] device veth1_macvtap left promiscuous mode [ 2609.344489][T21046] device veth0_macvtap left promiscuous mode [ 2609.350632][T21046] device veth1_vlan left promiscuous mode [ 2609.357311][T21046] device veth0_vlan left promiscuous mode 10:12:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40286608, &(0x7f0000000000)=0x3f) 10:12:59 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:12:59 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:12:59 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:12:59 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2609.717102][ T355] EXT4-fs warning (device sda1): verify_group_input:150: Cannot add at group 63 (only 8 groups) 10:12:59 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:00 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x7, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x100, 0x0, 0x100, 0x0, 0x9, 0x0, 0x1f}, r0, 0xb, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_int(r3, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='cgroup\x00') r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, r2, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000600), 0x12) 10:13:00 executing program 3: syz_clone(0x40000000, 0x0, 0x0, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="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") 10:13:00 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:00 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2610.647934][T21046] team0 (unregistering): Port device team_slave_1 removed [ 2610.687928][T21046] team0 (unregistering): Port device team_slave_0 removed [ 2610.734391][T21046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2610.788046][T21046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2611.023342][T21046] bond0 (unregistering): Released all slaves [ 2612.188811][T29331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2612.197553][T29331] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2612.206551][T29331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2612.216312][T29331] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2612.224215][T29331] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2612.711997][ T403] chnl_net:caif_netlink_parms(): no params data found [ 2612.801238][ T5113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2612.810321][ T5113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2612.819588][ T5113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2612.827915][ T5113] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2612.839775][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2613.006187][ T403] bridge0: port 1(bridge_slave_0) entered blocking state [ 2613.022724][ T403] bridge0: port 1(bridge_slave_0) entered disabled state [ 2613.059430][ T403] device bridge_slave_0 entered promiscuous mode [ 2613.099693][ T403] bridge0: port 2(bridge_slave_1) entered blocking state [ 2613.117118][ T403] bridge0: port 2(bridge_slave_1) entered disabled state [ 2613.139981][ T403] device bridge_slave_1 entered promiscuous mode [ 2613.249391][ T403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2613.305498][ T403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2613.491047][ T403] team0: Port device team_slave_0 added [ 2613.523567][ T403] team0: Port device team_slave_1 added [ 2613.629330][ T403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2613.662368][ T403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2613.722408][ T403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2613.744644][ T403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2613.751632][ T403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2613.812448][ T403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2613.905947][ T415] chnl_net:caif_netlink_parms(): no params data found [ 2613.956024][ T403] device hsr_slave_0 entered promiscuous mode [ 2613.992844][ T403] device hsr_slave_1 entered promiscuous mode [ 2614.262629][ T5113] Bluetooth: hci1: command 0x0409 tx timeout [ 2614.324134][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 2614.331357][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 2614.344618][ T415] device bridge_slave_0 entered promiscuous mode [ 2614.418150][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 2614.427661][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 2614.436073][ T415] device bridge_slave_1 entered promiscuous mode [ 2614.518969][T21046] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2614.541565][ T415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2614.712945][ T415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2614.734431][T21046] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2614.902531][ T5113] Bluetooth: hci4: command 0x0409 tx timeout [ 2614.994104][T21046] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2615.030452][ T415] team0: Port device team_slave_0 added [ 2615.095399][ T415] team0: Port device team_slave_1 added [ 2615.117715][T21046] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2615.306272][ T415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2615.322290][ T415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2615.350670][ T415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2615.387304][ T415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2615.395753][ T415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2615.422766][ T415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2615.553801][ T415] device hsr_slave_0 entered promiscuous mode [ 2615.560857][ T415] device hsr_slave_1 entered promiscuous mode [ 2615.568567][ T415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2615.576584][ T415] Cannot create hsr debugfs directory [ 2615.737433][ T403] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2615.766944][ T403] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2615.798043][ T403] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2615.819695][ T403] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2616.138068][ T403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2616.233044][ T403] 8021q: adding VLAN 0 to HW filter on device team0 [ 2616.282717][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2616.290692][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2616.299251][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2616.309211][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2616.318587][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 2616.326485][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2616.342651][ T5113] Bluetooth: hci1: command 0x041b tx timeout [ 2616.385092][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2616.393617][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2616.403079][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2616.411667][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 2616.418853][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2616.431352][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2616.607639][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2616.616803][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2616.627068][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2616.637003][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2616.647074][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2616.660578][ T403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2616.693439][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2616.712903][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2616.720964][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2616.731180][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2616.939568][T21046] device hsr_slave_0 left promiscuous mode [ 2616.948507][T21046] device hsr_slave_1 left promiscuous mode [ 2616.956167][T21046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2616.964093][T21046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2616.981961][T21046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2616.989732][ T5113] Bluetooth: hci4: command 0x041b tx timeout [ 2617.008787][T21046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2617.021269][T21046] device bridge_slave_1 left promiscuous mode [ 2617.033384][T21046] bridge0: port 2(bridge_slave_1) entered disabled state [ 2617.042773][T21046] device bridge_slave_0 left promiscuous mode [ 2617.049709][T21046] bridge0: port 1(bridge_slave_0) entered disabled state [ 2617.067785][T21046] device veth1_macvtap left promiscuous mode [ 2617.075540][T21046] device veth0_macvtap left promiscuous mode [ 2617.081690][T21046] device veth1_vlan left promiscuous mode [ 2617.088537][T21046] device veth0_vlan left promiscuous mode [ 2617.398358][T21046] team0 (unregistering): Port device team_slave_1 removed [ 2617.430082][T21046] team0 (unregistering): Port device team_slave_0 removed [ 2617.445537][T21046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2617.463640][T21046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2617.561780][T21046] bond0 (unregistering): Released all slaves [ 2617.715666][ T415] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2617.744921][ T415] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2617.765569][ T415] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2617.784871][ T415] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2617.891577][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2617.899807][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2617.921319][ T403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2617.977606][ T415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2618.010722][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2618.020609][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2618.046395][ T415] 8021q: adding VLAN 0 to HW filter on device team0 [ 2618.071404][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2618.088995][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2618.099634][T14114] bridge0: port 1(bridge_slave_0) entered blocking state [ 2618.106887][T14114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2618.145058][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2618.164627][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2618.186346][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2618.212955][T12303] bridge0: port 2(bridge_slave_1) entered blocking state [ 2618.220111][T12303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2618.242901][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2618.251838][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2618.298309][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2618.314015][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2618.329889][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2618.353131][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2618.388825][ T415] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2618.413368][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2618.431959][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2618.432532][ T5113] Bluetooth: hci1: command 0x040f tx timeout [ 2618.453603][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2618.462205][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2618.753413][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2618.772730][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2618.812251][ T403] device veth0_vlan entered promiscuous mode [ 2618.836615][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2618.848129][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2618.867983][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2618.883123][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2618.897561][ T403] device veth1_vlan entered promiscuous mode [ 2618.923180][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2618.931426][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2618.970661][ T403] device veth0_macvtap entered promiscuous mode [ 2618.986129][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2619.003298][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2619.025882][ T403] device veth1_macvtap entered promiscuous mode [ 2619.035345][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2619.046217][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2619.072534][ T5113] Bluetooth: hci4: command 0x040f tx timeout [ 2619.084758][ T403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2619.099050][ T403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2619.110034][ T403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2619.120588][ T403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2619.131396][ T403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2619.141954][ T403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2619.152000][ T403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2619.162813][ T403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2619.174613][ T403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2619.193888][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2619.204170][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2619.213476][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2619.221018][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2619.232679][ T403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2619.252170][ T403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2619.264344][ T403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2619.282466][ T403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2619.300364][ T403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2619.316693][ T403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2619.335209][ T403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2619.350454][ T403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2619.367849][ T403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2619.404179][ T415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2619.412861][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2619.421681][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2619.435664][ T403] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2619.446828][ T403] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2619.463521][ T403] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2619.472268][ T403] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2619.688644][ T9588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2619.712352][ T9588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2619.731414][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2619.766885][ T9588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2619.780761][ T9588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2619.806106][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2620.025930][ T516] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2620.104902][ T516] CPU: 0 PID: 516 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2620.115220][ T516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2620.125304][ T516] Call Trace: [ 2620.128611][ T516] [ 2620.131561][ T516] dump_stack_lvl+0xd1/0x138 [ 2620.136203][ T516] dump_header+0x10b/0x85f [ 2620.140664][ T516] oom_kill_process.cold+0x10/0x15 [ 2620.145827][ T516] out_of_memory+0x35c/0x14a0 [ 2620.150561][ T516] ? oom_killer_disable+0x280/0x280 [ 2620.155814][ T516] mem_cgroup_out_of_memory+0x206/0x270 [ 2620.161402][ T516] ? mem_cgroup_margin+0x130/0x130 [ 2620.166595][ T516] memory_max_write+0x2f9/0x3c0 [ 2620.171498][ T516] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2620.177614][ T516] ? lock_release+0x810/0x810 [ 2620.182324][ T516] cgroup_file_write+0x1e2/0x770 [ 2620.187298][ T516] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2620.193397][ T516] ? kill_css+0x370/0x370 [ 2620.197759][ T516] ? __virt_addr_valid+0x61/0x2e0 [ 2620.202833][ T516] ? kill_css+0x370/0x370 [ 2620.207200][ T516] kernfs_fop_write_iter+0x3f1/0x600 [ 2620.212531][ T516] vfs_write+0x9ed/0xdd0 [ 2620.216804][ T516] ? kernel_write+0x630/0x630 [ 2620.221522][ T516] ? __fget_files+0x26a/0x440 [ 2620.226257][ T516] ksys_write+0x12b/0x250 [ 2620.230617][ T516] ? __ia32_sys_read+0xb0/0xb0 [ 2620.235411][ T516] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2620.241343][ T516] do_syscall_64+0x39/0xb0 [ 2620.245805][ T516] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2620.251728][ T516] RIP: 0033:0x7f3f9d28c0c9 [ 2620.256346][ T516] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2620.276072][ T516] RSP: 002b:00007f3f9dfeb168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2620.284525][ T516] RAX: ffffffffffffffda RBX: 00007f3f9d3abf80 RCX: 00007f3f9d28c0c9 [ 2620.292515][ T516] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 2620.300515][ T516] RBP: 00007f3f9d2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2620.308513][ T516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2620.316588][ T516] R13: 00007fff4c2c425f R14: 00007f3f9dfeb300 R15: 0000000000022000 [ 2620.324705][ T516] [ 2620.405558][ T516] memory: usage 8564kB, limit 0kB, failcnt 2305 [ 2620.418184][ T516] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2620.444145][ T516] Memory cgroup stats for /syz5: [ 2620.447030][ T516] anon 114688 [ 2620.447030][ T516] file 8347648 [ 2620.447030][ T516] kernel 294912 [ 2620.447030][ T516] kernel_stack 65536 [ 2620.447030][ T516] pagetables 77824 [ 2620.447030][ T516] sec_pagetables 0 [ 2620.447030][ T516] percpu 208 [ 2620.447030][ T516] sock 0 [ 2620.447030][ T516] vmalloc 4096 [ 2620.447030][ T516] shmem 8347648 [ 2620.447030][ T516] zswap 0 [ 2620.447030][ T516] zswapped 0 [ 2620.447030][ T516] file_mapped 221184 [ 2620.447030][ T516] file_dirty 0 [ 2620.447030][ T516] file_writeback 0 [ 2620.447030][ T516] swapcached 0 [ 2620.447030][ T516] anon_thp 0 [ 2620.447030][ T516] file_thp 0 [ 2620.447030][ T516] shmem_thp 0 [ 2620.447030][ T516] inactive_anon 4046848 [ 2620.447030][ T516] active_anon 4415488 [ 2620.447030][ T516] inactive_file 0 [ 2620.447030][ T516] active_file 0 [ 2620.447030][ T516] unevictable 0 [ 2620.447030][ T516] slab_reclaimable 38888 [ 2620.447030][ T516] slab_unreclaimable 77856 [ 2620.447030][ T516] slab 116744 [ 2620.484427][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2620.546686][ T5113] Bluetooth: hci1: command 0x0419 tx timeout [ 2620.580430][ T516] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=514,uid=0 10:13:10 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:10 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:10 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:10 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:10 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x5, 0x4, 0x40ff, 0x4}, 0x48) [ 2620.602704][ T516] Memory cgroup out of memory: Killed process 514 (syz-executor.5) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2620.682091][ T403] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2620.704413][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2620.737472][ T403] CPU: 1 PID: 403 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2620.747777][ T403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2620.757864][ T403] Call Trace: [ 2620.761172][ T403] [ 2620.764126][ T403] dump_stack_lvl+0xd1/0x138 [ 2620.765480][ T415] device veth0_vlan entered promiscuous mode [ 2620.768823][ T403] dump_header+0x10b/0x85f [ 2620.768871][ T403] oom_kill_process.cold+0x10/0x15 [ 2620.783834][ T415] device veth1_vlan entered promiscuous mode [ 2620.784347][ T403] out_of_memory+0x35c/0x14a0 [ 2620.784396][ T403] ? find_held_lock+0x2d/0x110 [ 2620.799842][ T403] ? oom_killer_disable+0x280/0x280 [ 2620.805131][ T403] ? find_held_lock+0x2d/0x110 [ 2620.809944][ T403] mem_cgroup_out_of_memory+0x206/0x270 [ 2620.815539][ T403] ? mem_cgroup_margin+0x130/0x130 [ 2620.820693][ T403] ? lock_downgrade+0x6e0/0x6e0 [ 2620.825603][ T403] try_charge_memcg+0xefb/0x12f0 [ 2620.828394][ T415] device veth0_macvtap entered promiscuous mode [ 2620.830573][ T403] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2620.830616][ T403] ? lock_downgrade+0x6e0/0x6e0 [ 2620.847688][ T403] charge_memcg+0x90/0x3b0 [ 2620.852216][ T403] __mem_cgroup_charge+0x2b/0x90 [ 2620.857163][ T403] ? _compound_head+0x5d/0x150 [ 2620.861937][ T403] __handle_mm_fault+0x187d/0x3c90 [ 2620.867098][ T403] ? vm_iomap_memory+0x190/0x190 [ 2620.872118][ T403] handle_mm_fault+0x1b6/0x850 [ 2620.877022][ T403] do_user_addr_fault+0x475/0x1210 [ 2620.882165][ T403] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2620.887754][ T403] exc_page_fault+0x98/0x170 [ 2620.892364][ T403] asm_exc_page_fault+0x26/0x30 [ 2620.897232][ T403] RIP: 0033:0x7f3f9d24a28d [ 2620.901652][ T403] Code: 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 41 57 41 56 49 89 d6 41 55 49 89 f5 41 54 49 89 fc 53 48 81 ec 28 05 00 00 <89> 8d 38 fb ff ff 64 48 8b 04 25 28 00 00 00 48 89 45 c8 48 c7 c0 [ 2620.921265][ T403] RSP: 002b:00007fff4c2c2bf0 EFLAGS: 00010206 [ 2620.927342][ T403] RAX: 00000000fbad8001 RBX: 0000000000000000 RCX: 0000000000000000 [ 2620.935329][ T403] RDX: 00007fff4c2c32e0 RSI: 00007f3f9d2e6b43 RDI: 00007fff4c2c3160 [ 2620.943316][ T403] RBP: 00007fff4c2c3140 R08: 0000000000000000 R09: 00007fff4c2c3250 [ 2620.951297][ T403] R10: 0000000000000231 R11: 0000000000000293 R12: 00007fff4c2c3160 [ 2620.959273][ T403] R13: 00007f3f9d2e6b43 R14: 00007fff4c2c32e0 R15: 00007fff4c2c32e0 [ 2620.967267][ T403] [ 2620.981397][ T403] memory: usage 8292kB, limit 0kB, failcnt 2324 [ 2620.986393][ T415] device veth1_macvtap entered promiscuous mode [ 2621.005251][ T403] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2621.020005][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2621.074382][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2621.112233][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2621.156324][ T5113] Bluetooth: hci4: command 0x0419 tx timeout [ 2621.170005][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2621.178929][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2621.188203][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2621.197308][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2621.209443][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2621.217858][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2621.226321][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2621.237184][ T403] Memory cgroup stats for /syz5: [ 2621.237405][ T403] anon 40960 [ 2621.237405][ T403] file 8347648 [ 2621.237405][ T403] kernel 102400 [ 2621.237405][ T403] kernel_stack 0 [ 2621.237405][ T403] pagetables 8192 [ 2621.237405][ T403] sec_pagetables 0 [ 2621.237405][ T403] percpu 64 [ 2621.237405][ T403] sock 0 [ 2621.237405][ T403] vmalloc 0 [ 2621.237405][ T403] shmem 8347648 [ 2621.237405][ T403] zswap 0 [ 2621.237405][ T403] zswapped 0 [ 2621.237405][ T403] file_mapped 221184 [ 2621.237405][ T403] file_dirty 0 [ 2621.237405][ T403] file_writeback 0 [ 2621.237405][ T403] swapcached 0 [ 2621.237405][ T403] anon_thp 0 [ 2621.237405][ T403] file_thp 0 [ 2621.237405][ T403] shmem_thp 0 [ 2621.237405][ T403] inactive_anon 3973120 [ 2621.237405][ T403] active_anon 4415488 [ 2621.237405][ T403] inactive_file 0 [ 2621.237405][ T403] active_file 0 [ 2621.237405][ T403] unevictable 0 [ 2621.237405][ T403] slab_reclaimable 34216 [ 2621.237405][ T403] slab_unreclaimable 44728 [ 2621.237405][ T403] slab 78944 [ 2621.341260][ T415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2621.369746][ T415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2621.388267][ T415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2621.399512][ T415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2621.409759][ T415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2621.420630][ T415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2621.431137][ T415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2621.442039][ T415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2621.461597][ T415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2621.486777][ T415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 10:13:11 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x5, 0x4, 0x40ff, 0x4}, 0x48) 10:13:11 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2621.520413][ T415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2621.552715][ T403] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=403,uid=0 10:13:11 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2621.573545][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2621.629870][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2621.649654][ T403] Memory cgroup out of memory: Killed process 403 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2621.672149][ T415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2621.712495][ T415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2621.816789][ T415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2621.835387][ T415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2621.845804][ T415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2621.858137][ T415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2621.868676][ T415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2621.882615][ T415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2621.893053][ T415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2621.904013][ T415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2621.920767][ T415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2621.934097][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2621.967023][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2622.021061][ T415] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2622.042420][ T415] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2622.051174][ T415] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2622.068371][ T415] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2622.261454][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2622.300934][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2622.323072][ T9588] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2622.400308][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2622.426313][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2622.444899][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2622.460473][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2622.574957][ T9588] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2622.685992][ T9588] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2622.850689][ T561] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2622.861632][ T561] CPU: 1 PID: 561 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2622.871908][ T561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2622.881971][ T561] Call Trace: [ 2622.885253][ T561] [ 2622.888188][ T561] dump_stack_lvl+0xd1/0x138 [ 2622.892802][ T561] dump_header+0x10b/0x85f [ 2622.897243][ T561] oom_kill_process.cold+0x10/0x15 [ 2622.902386][ T561] out_of_memory+0x35c/0x14a0 [ 2622.907095][ T561] ? oom_killer_disable+0x280/0x280 [ 2622.912315][ T561] ? mark_held_locks+0x9f/0xe0 [ 2622.917099][ T561] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2622.923275][ T561] mem_cgroup_out_of_memory+0x206/0x270 [ 2622.928841][ T561] ? mem_cgroup_margin+0x130/0x130 [ 2622.933989][ T561] memory_max_write+0x2f9/0x3c0 [ 2622.938854][ T561] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2622.944946][ T561] ? lock_release+0x810/0x810 [ 2622.949640][ T561] cgroup_file_write+0x1e2/0x770 [ 2622.954595][ T561] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2622.960673][ T561] ? kill_css+0x370/0x370 [ 2622.965032][ T561] ? kill_css+0x370/0x370 [ 2622.969375][ T561] kernfs_fop_write_iter+0x3f1/0x600 [ 2622.974693][ T561] vfs_write+0x9ed/0xdd0 [ 2622.978950][ T561] ? kernel_write+0x630/0x630 [ 2622.983728][ T561] ? lockdep_hardirqs_on+0x7d/0x100 [ 2622.988955][ T561] ? vfs_write+0x25/0xdd0 [ 2622.993301][ T561] ksys_write+0x12b/0x250 [ 2622.997647][ T561] ? __ia32_sys_read+0xb0/0xb0 [ 2623.002427][ T561] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2623.008346][ T561] do_syscall_64+0x39/0xb0 [ 2623.012964][ T561] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2623.018878][ T561] RIP: 0033:0x7f0e7828c0c9 [ 2623.023300][ T561] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2623.042935][ T561] RSP: 002b:00007f0e79083168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2623.051394][ T561] RAX: ffffffffffffffda RBX: 00007f0e783abf80 RCX: 00007f0e7828c0c9 [ 2623.059389][ T561] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000008 [ 2623.067376][ T561] RBP: 00007f0e782e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2623.075530][ T561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2623.083506][ T561] R13: 00007fffa5599bcf R14: 00007f0e79083300 R15: 0000000000022000 [ 2623.091517][ T561] [ 2623.110814][ T561] memory: usage 508kB, limit 0kB, failcnt 2271 [ 2623.118290][ T9588] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2623.132476][ T561] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2623.151781][ T561] Memory cgroup stats for /syz4: [ 2623.153693][ T561] anon 110592 [ 2623.153693][ T561] file 122880 [ 2623.153693][ T561] kernel 274432 [ 2623.153693][ T561] kernel_stack 65536 [ 2623.153693][ T561] pagetables 81920 [ 2623.153693][ T561] sec_pagetables 0 [ 2623.153693][ T561] percpu 64 [ 2623.153693][ T561] sock 0 [ 2623.153693][ T561] vmalloc 0 [ 2623.153693][ T561] shmem 122880 [ 2623.153693][ T561] zswap 0 [ 2623.153693][ T561] zswapped 0 [ 2623.153693][ T561] file_mapped 110592 [ 2623.153693][ T561] file_dirty 0 [ 2623.153693][ T561] file_writeback 0 [ 2623.153693][ T561] swapcached 0 [ 2623.153693][ T561] anon_thp 0 [ 2623.153693][ T561] file_thp 0 [ 2623.153693][ T561] shmem_thp 0 [ 2623.153693][ T561] inactive_anon 122880 [ 2623.153693][ T561] active_anon 110592 [ 2623.153693][ T561] inactive_file 0 [ 2623.153693][ T561] active_file 0 [ 2623.153693][ T561] unevictable 0 [ 2623.153693][ T561] slab_reclaimable 19984 [ 2623.153693][ T561] slab_unreclaimable 75048 [ 2623.153693][ T561] slab 95032 [ 2623.269685][ T561] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=560,uid=0 [ 2623.323314][ T561] Memory cgroup out of memory: Killed process 560 (syz-executor.4) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 10:13:13 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x7, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x100, 0x0, 0x100, 0x10000000, 0x0, 0x0, 0x1f}, r0, 0xb, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_int(r3, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='cgroup\x00') r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, r2, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000600), 0x12) 10:13:13 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:13 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:13 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:13 executing program 3: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xca, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x8) 10:13:13 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2623.671649][T32480] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 2623.696439][ T5113] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 2623.698969][T32480] CPU: 1 PID: 32480 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2623.716921][T32480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2623.727006][T32480] Call Trace: [ 2623.730300][T32480] [ 2623.733245][T32480] dump_stack_lvl+0xd1/0x138 [ 2623.737858][T32480] dump_header+0x10b/0x85f [ 2623.742302][T32480] oom_kill_process.cold+0x10/0x15 [ 2623.747438][T32480] out_of_memory+0x35c/0x14a0 [ 2623.752143][T32480] ? find_held_lock+0x2d/0x110 [ 2623.756935][T32480] ? oom_killer_disable+0x280/0x280 [ 2623.763373][T32480] ? find_held_lock+0x2d/0x110 [ 2623.768165][T32480] mem_cgroup_out_of_memory+0x206/0x270 [ 2623.773731][T32480] ? mem_cgroup_margin+0x130/0x130 [ 2623.778859][T32480] ? lock_downgrade+0x6e0/0x6e0 [ 2623.783726][T32480] try_charge_memcg+0xefb/0x12f0 [ 2623.788681][T32480] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2623.794670][T32480] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2623.800407][T32480] ? lock_downgrade+0x6e0/0x6e0 [ 2623.805269][T32480] ? lock_downgrade+0x6e0/0x6e0 [ 2623.810182][T32480] ? rcu_read_unlock+0x9/0x60 [ 2623.814888][T32480] obj_cgroup_charge+0x2af/0x5e0 [ 2623.819849][T32480] ? copy_process+0x3aa/0x7520 [ 2623.824619][T32480] kmem_cache_alloc_node+0xb7/0x460 [ 2623.829861][T32480] copy_process+0x3aa/0x7520 [ 2623.834487][T32480] ? _raw_spin_unlock+0x28/0x40 [ 2623.839362][T32480] ? wp_page_reuse+0x197/0x570 [ 2623.844233][T32480] ? do_wp_page+0x844/0x3370 [ 2623.848845][T32480] ? __cleanup_sighand+0xb0/0xb0 [ 2623.853817][T32480] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2623.859211][T32480] ? rwlock_bug.part.0+0x90/0x90 [ 2623.864157][T32480] ? lock_chain_count+0x20/0x20 [ 2623.869018][T32480] kernel_clone+0xeb/0x990 [ 2623.873444][T32480] ? create_io_thread+0xf0/0xf0 [ 2623.878338][T32480] ? find_held_lock+0x2d/0x110 [ 2623.883140][T32480] __do_sys_clone+0xba/0x100 [ 2623.887754][T32480] ? kernel_clone+0x990/0x990 [ 2623.892457][T32480] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2623.898366][T32480] do_syscall_64+0x39/0xb0 [ 2623.902799][T32480] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2623.908700][T32480] RIP: 0033:0x7ff78ca89dfb [ 2623.913123][T32480] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2623.932741][T32480] RSP: 002b:00007fff1131af50 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2623.941159][T32480] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff78ca89dfb [ 2623.949131][T32480] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2623.957111][T32480] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555702b400 [ 2623.965086][T32480] R10: 000055555702b6d0 R11: 0000000000000246 R12: 0000000000000001 10:13:14 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x7, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x100, 0x0, 0x100, 0x0, 0x9, 0x0, 0x1f}, r0, 0xb, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_int(r3, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='cgroup\x00') r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, r2, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 2623.973056][T32480] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff1131b030 [ 2623.981132][T32480] 10:13:14 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:14 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:14 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r1}, 0x10) write$cgroup_int(r0, &(0x7f0000000600), 0x12) 10:13:14 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2624.622839][T32480] memory: usage 284kB, limit 0kB, failcnt 2272 [ 2624.629111][T32480] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2624.645175][T32480] Memory cgroup stats for /syz0: [ 2624.645392][T32480] anon 45056 [ 2624.645392][T32480] file 184320 [ 2624.645392][T32480] kernel 61440 [ 2624.645392][T32480] kernel_stack 0 [ 2624.645392][T32480] pagetables 8192 [ 2624.645392][T32480] sec_pagetables 0 [ 2624.645392][T32480] percpu 0 [ 2624.645392][T32480] sock 0 [ 2624.645392][T32480] vmalloc 0 [ 2624.645392][T32480] shmem 184320 [ 2624.645392][T32480] zswap 0 [ 2624.645392][T32480] zswapped 0 [ 2624.645392][T32480] file_mapped 184320 [ 2624.645392][T32480] file_dirty 0 [ 2624.645392][T32480] file_writeback 0 [ 2624.645392][T32480] swapcached 0 [ 2624.645392][T32480] anon_thp 0 [ 2624.645392][T32480] file_thp 0 [ 2624.645392][T32480] shmem_thp 0 [ 2624.645392][T32480] inactive_anon 106496 [ 2624.645392][T32480] active_anon 122880 [ 2624.645392][T32480] inactive_file 0 10:13:14 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r1}, 0x10) write$cgroup_int(r0, &(0x7f0000000600), 0x12) [ 2624.645392][T32480] active_file 0 [ 2624.645392][T32480] unevictable 0 [ 2624.645392][T32480] slab_reclaimable 10160 [ 2624.645392][T32480] slab_unreclaimable 32296 [ 2624.645392][T32480] slab 42456 [ 2624.847393][T32480] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=32480,uid=0 [ 2624.872167][T32480] Memory cgroup out of memory: Killed process 32480 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2624.957395][ T415] syz-executor.4 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=0 [ 2624.999050][ T415] CPU: 1 PID: 415 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2625.009398][ T415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2625.019491][ T415] Call Trace: [ 2625.022805][ T415] [ 2625.025761][ T415] dump_stack_lvl+0xd1/0x138 [ 2625.030484][ T415] dump_header+0x10b/0x85f [ 2625.034962][ T415] oom_kill_process.cold+0x10/0x15 [ 2625.040230][ T415] out_of_memory+0x35c/0x14a0 [ 2625.044980][ T415] ? oom_killer_disable+0x280/0x280 [ 2625.050225][ T415] ? find_held_lock+0x2d/0x110 [ 2625.055056][ T415] mem_cgroup_out_of_memory+0x206/0x270 [ 2625.060656][ T415] ? mem_cgroup_margin+0x130/0x130 [ 2625.065815][ T415] ? lock_downgrade+0x6e0/0x6e0 [ 2625.070985][ T415] try_charge_memcg+0xefb/0x12f0 [ 2625.075973][ T415] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2625.081993][ T415] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2625.087761][ T415] ? lock_downgrade+0x6e0/0x6e0 [ 2625.092653][ T415] ? lock_downgrade+0x6e0/0x6e0 [ 2625.097547][ T415] ? rcu_read_unlock+0x9/0x60 [ 2625.102287][ T415] obj_cgroup_charge+0x2af/0x5e0 [ 2625.107263][ T415] __kmem_cache_alloc_node+0xb2/0x430 [ 2625.112754][ T415] ? kvmalloc_node+0xa2/0x1a0 [ 2625.117465][ T415] ? kvmalloc_node+0xa2/0x1a0 [ 2625.122183][ T415] __kmalloc_node+0x4d/0xd0 [ 2625.126744][ T415] kvmalloc_node+0xa2/0x1a0 [ 2625.131297][ T415] xt_alloc_table_info+0x40/0xa0 [ 2625.136279][ T415] do_ip6t_set_ctl+0x514/0xb30 [ 2625.141082][ T415] ? trace_contention_end+0x153/0x1e0 [ 2625.146502][ T415] ? __mutex_lock+0x231/0x1360 [ 2625.151320][ T415] ? compat_do_replace.constprop.0+0x410/0x410 [ 2625.157527][ T415] ? wait_for_completion_io_timeout+0x20/0x20 [ 2625.163632][ T415] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2625.169068][ T415] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2625.175102][ T415] nf_setsockopt+0x87/0xe0 [ 2625.179574][ T415] ipv6_setsockopt+0x12b/0x190 [ 2625.184384][ T415] tcp_setsockopt+0x9f/0x100 [ 2625.189039][ T415] ? sock_common_recvmsg+0x190/0x190 [ 2625.194372][ T415] __sys_setsockopt+0x2c6/0x5b0 [ 2625.199278][ T415] ? __ia32_sys_recv+0x100/0x100 [ 2625.206265][ T415] ? up_write+0x520/0x520 [ 2625.210645][ T415] ? handle_mm_fault+0x25b/0x850 [ 2625.215629][ T415] __x64_sys_setsockopt+0xbe/0x160 [ 2625.220791][ T415] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2625.226805][ T415] do_syscall_64+0x39/0xb0 [ 2625.231356][ T415] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2625.237296][ T415] RIP: 0033:0x7f0e7828d71a [ 2625.241825][ T415] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2625.261556][ T415] RSP: 002b:00007fffa5599738 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 2625.270014][ T415] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 00007f0e7828d71a [ 2625.278020][ T415] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2625.286027][ T415] RBP: 00007fffa5599760 R08: 0000000000000558 R09: fefefefefeff646b [ 2625.294032][ T415] R10: 00007f0e78384940 R11: 0000000000000202 R12: 00007fffa55997c0 [ 2625.302123][ T415] R13: 0000000000000003 R14: 00007fffa559975c R15: 00007f0e783848e0 [ 2625.310159][ T415] [ 2625.417110][ T415] memory: usage 240kB, limit 0kB, failcnt 2290 [ 2625.423865][ T415] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2625.430891][ T415] Memory cgroup stats for /syz4: [ 2625.431179][ T415] anon 40960 [ 2625.431179][ T415] file 122880 [ 2625.431179][ T415] kernel 65536 [ 2625.431179][ T415] kernel_stack 0 [ 2625.431179][ T415] pagetables 8192 [ 2625.431179][ T415] sec_pagetables 0 [ 2625.431179][ T415] percpu 0 [ 2625.431179][ T415] sock 0 [ 2625.431179][ T415] vmalloc 0 [ 2625.431179][ T415] shmem 122880 [ 2625.431179][ T415] zswap 0 [ 2625.431179][ T415] zswapped 0 [ 2625.431179][ T415] file_mapped 110592 [ 2625.431179][ T415] file_dirty 0 [ 2625.431179][ T415] file_writeback 0 [ 2625.431179][ T415] swapcached 0 [ 2625.431179][ T415] anon_thp 0 [ 2625.431179][ T415] file_thp 0 [ 2625.431179][ T415] shmem_thp 0 [ 2625.431179][ T415] inactive_anon 53248 [ 2625.431179][ T415] active_anon 110592 [ 2625.431179][ T415] inactive_file 0 [ 2625.431179][ T415] active_file 0 [ 2625.431179][ T415] unevictable 0 [ 2625.431179][ T415] slab_reclaimable 12088 [ 2625.431179][ T415] slab_unreclaimable 38768 [ 2625.431179][ T415] slab 50856 [ 2625.531727][ T415] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=415,uid=0 [ 2625.559846][ T415] Memory cgroup out of memory: Killed process 415 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2625.581243][ T9588] device hsr_slave_0 left promiscuous mode [ 2625.587448][T30701] syz-executor.3 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=0 [ 2625.600466][ T9588] device hsr_slave_1 left promiscuous mode [ 2625.607573][T30701] CPU: 0 PID: 30701 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2625.618038][T30701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2625.628121][T30701] Call Trace: [ 2625.631429][T30701] [ 2625.634471][T30701] dump_stack_lvl+0xd1/0x138 [ 2625.639098][T30701] dump_header+0x10b/0x85f [ 2625.643561][T30701] oom_kill_process.cold+0x10/0x15 [ 2625.648828][T30701] out_of_memory+0x35c/0x14a0 [ 2625.653567][T30701] ? oom_killer_disable+0x280/0x280 [ 2625.658820][T30701] ? find_held_lock+0x2d/0x110 [ 2625.663639][T30701] mem_cgroup_out_of_memory+0x206/0x270 [ 2625.669226][T30701] ? mem_cgroup_margin+0x130/0x130 [ 2625.674378][T30701] ? lock_downgrade+0x6e0/0x6e0 [ 2625.679272][T30701] try_charge_memcg+0xefb/0x12f0 [ 2625.684252][T30701] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2625.690359][T30701] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2625.696123][T30701] ? lock_downgrade+0x6e0/0x6e0 [ 2625.701019][T30701] ? lock_downgrade+0x6e0/0x6e0 [ 2625.705898][T30701] ? rcu_read_unlock+0x9/0x60 [ 2625.710631][T30701] obj_cgroup_charge+0x2af/0x5e0 [ 2625.715615][T30701] __kmem_cache_alloc_node+0xb2/0x430 [ 2625.721012][T30701] ? kvmalloc_node+0xa2/0x1a0 [ 2625.725728][T30701] ? kvmalloc_node+0xa2/0x1a0 [ 2625.730435][T30701] __kmalloc_node+0x4d/0xd0 [ 2625.734979][T30701] kvmalloc_node+0xa2/0x1a0 [ 2625.739521][T30701] xt_alloc_table_info+0x40/0xa0 [ 2625.744504][T30701] do_ip6t_set_ctl+0x514/0xb30 [ 2625.749296][T30701] ? trace_contention_end+0x153/0x1e0 [ 2625.754709][T30701] ? __mutex_lock+0x231/0x1360 [ 2625.759504][T30701] ? compat_do_replace.constprop.0+0x410/0x410 [ 2625.765707][T30701] ? find_held_lock+0x2d/0x110 [ 2625.770513][T30701] ? wait_for_completion_io_timeout+0x20/0x20 [ 2625.776637][T30701] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2625.782659][T30701] nf_setsockopt+0x87/0xe0 [ 2625.787110][T30701] ipv6_setsockopt+0x12b/0x190 [ 2625.791914][T30701] tcp_setsockopt+0x9f/0x100 [ 2625.796566][T30701] ? sock_common_recvmsg+0x190/0x190 [ 2625.801894][T30701] __sys_setsockopt+0x2c6/0x5b0 [ 2625.806801][T30701] ? __ia32_sys_recv+0x100/0x100 [ 2625.811802][T30701] __x64_sys_setsockopt+0xbe/0x160 [ 2625.816955][T30701] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2625.822884][T30701] do_syscall_64+0x39/0xb0 [ 2625.827344][T30701] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2625.833280][T30701] RIP: 0033:0x7f50ed48d71a [ 2625.837714][T30701] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2625.857352][T30701] RSP: 002b:00007ffc3cef8668 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2625.865810][T30701] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 00007f50ed48d71a [ 2625.873824][T30701] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2625.881845][T30701] RBP: 00007ffc3cef8690 R08: 00000000000003b8 R09: ffff000000000000 [ 2625.889851][T30701] R10: 00007f50ed5856c0 R11: 0000000000000206 R12: 00007ffc3cef86f0 [ 2625.897854][T30701] R13: 0000000000000003 R14: 00007ffc3cef868c R15: 00007f50ed585660 [ 2625.905877][T30701] [ 2625.926909][ T9588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2625.927987][T30701] memory: usage 8328kB, limit 0kB, failcnt 2051 [ 2625.950318][T30701] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2625.962519][ T9588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2625.966797][T30701] Memory cgroup stats for /syz3: [ 2625.969841][T30701] anon 57344 [ 2625.969841][T30701] file 8347648 [ 2625.969841][T30701] kernel 122880 [ 2625.969841][T30701] kernel_stack 0 [ 2625.969841][T30701] pagetables 8192 [ 2625.969841][T30701] sec_pagetables 0 [ 2625.969841][T30701] percpu 0 [ 2625.969841][T30701] sock 0 [ 2625.969841][T30701] vmalloc 0 [ 2625.969841][T30701] shmem 8347648 [ 2625.969841][T30701] zswap 0 [ 2625.969841][T30701] zswapped 0 [ 2625.969841][T30701] file_mapped 122880 [ 2625.969841][T30701] file_dirty 0 [ 2625.969841][T30701] file_writeback 0 [ 2625.969841][T30701] swapcached 0 [ 2625.969841][T30701] anon_thp 0 [ 2625.969841][T30701] file_thp 0 [ 2625.969841][T30701] shmem_thp 0 [ 2625.969841][T30701] inactive_anon 57344 [ 2625.969841][T30701] active_anon 8347648 [ 2625.969841][T30701] inactive_file 0 [ 2625.969841][T30701] active_file 0 [ 2625.969841][T30701] unevictable 0 [ 2625.969841][T30701] slab_reclaimable 31376 [ 2625.969841][T30701] slab_unreclaimable 73408 [ 2625.969841][T30701] slab 104784 [ 2626.068195][ T9588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2626.083252][ T9588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2626.101798][ T9588] device bridge_slave_1 left promiscuous mode [ 2626.130445][ T9588] bridge0: port 2(bridge_slave_1) entered disabled state [ 2626.139627][ T9588] device bridge_slave_0 left promiscuous mode [ 2626.152475][T30701] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 2626.152497][ T9588] bridge0: port 1(bridge_slave_0) entered disabled state [ 2626.178874][T30701] ,cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=30701,uid=0 [ 2626.190630][ T9588] device veth1_macvtap left promiscuous mode [ 2626.202454][T30701] Memory cgroup out of memory: Killed process 30701 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2626.212452][ T9588] device veth0_macvtap left promiscuous mode [ 2626.228289][ T9588] device veth1_vlan left promiscuous mode [ 2626.235934][ T9588] device veth0_vlan left promiscuous mode [ 2626.676263][T29331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2626.686232][T29331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2626.694478][T29331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2626.703685][ T5108] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2626.711955][ T5108] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2626.719879][ T5108] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2626.720738][ T9588] team0 (unregistering): Port device team_slave_1 removed [ 2626.755124][ T9588] team0 (unregistering): Port device team_slave_0 removed [ 2626.767110][ T9588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2626.783816][ T9588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2626.845483][ T9588] bond0 (unregistering): Released all slaves 10:13:17 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x7, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x100, 0x0, 0x100, 0x10000000, 0x0, 0x0, 0x1f}, r0, 0xb, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_int(r3, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='cgroup\x00') r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, r2, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000600), 0x12) 10:13:17 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r1}, 0x10) write$cgroup_int(r0, &(0x7f0000000600), 0x12) 10:13:17 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:17 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r1}, 0x10) write$cgroup_int(r0, &(0x7f0000000600), 0x12) 10:13:17 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2627.588845][ T618] chnl_net:caif_netlink_parms(): no params data found [ 2627.812091][ T618] bridge0: port 1(bridge_slave_0) entered blocking state [ 2627.828128][ T618] bridge0: port 1(bridge_slave_0) entered disabled state [ 2627.853493][ T618] device bridge_slave_0 entered promiscuous mode [ 2627.873748][ T618] bridge0: port 2(bridge_slave_1) entered blocking state [ 2627.880977][ T618] bridge0: port 2(bridge_slave_1) entered disabled state [ 2627.889188][ T618] device bridge_slave_1 entered promiscuous mode [ 2627.940701][ T618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2627.975691][ T618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2628.021644][ T618] team0: Port device team_slave_0 added [ 2628.044807][ T618] team0: Port device team_slave_1 added [ 2628.136254][ T618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2628.162405][ T618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2628.251241][ T618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2628.294283][ T618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2628.301294][ T618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2628.402404][ T618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2628.500204][ T618] device hsr_slave_0 entered promiscuous mode [ 2628.543091][ T618] device hsr_slave_1 entered promiscuous mode [ 2628.832519][ T5113] Bluetooth: hci0: command 0x0409 tx timeout [ 2629.482868][ T618] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2629.503651][ T618] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2629.535484][ T618] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2629.554230][ T618] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2629.588677][ T5108] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2629.597824][ T5108] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2629.607084][ T5108] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2629.615281][ T5108] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2629.623455][ T5108] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2629.727139][ T618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2629.806997][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2629.815610][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2629.836393][ T618] 8021q: adding VLAN 0 to HW filter on device team0 [ 2629.866608][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2629.878459][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2629.889606][T27660] bridge0: port 1(bridge_slave_0) entered blocking state [ 2629.896803][T27660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2629.921865][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2629.931343][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2629.940597][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2629.963000][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 2629.970209][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2629.992764][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2630.023682][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2630.032951][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2630.044446][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2630.076139][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2630.093832][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2630.122622][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2630.131109][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2630.174954][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2630.219607][ T618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2630.423172][ T653] chnl_net:caif_netlink_parms(): no params data found [ 2630.532709][ T5108] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2630.555616][ T5108] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2630.566133][T29331] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2630.575147][ T5108] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2630.583886][ T5108] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2630.593195][ T5108] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2630.714744][ T653] bridge0: port 1(bridge_slave_0) entered blocking state [ 2630.721984][ T653] bridge0: port 1(bridge_slave_0) entered disabled state [ 2630.744587][ T653] device bridge_slave_0 entered promiscuous mode [ 2630.820427][ T9588] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2630.869478][ T653] bridge0: port 2(bridge_slave_1) entered blocking state [ 2630.878501][ T653] bridge0: port 2(bridge_slave_1) entered disabled state [ 2630.912633][ T5108] Bluetooth: hci0: command 0x041b tx timeout [ 2630.921298][ T653] device bridge_slave_1 entered promiscuous mode [ 2630.940727][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2630.952973][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2630.970070][ T9588] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2631.114829][ T618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2631.173086][ T9588] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2631.203160][ T653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2631.234467][ T653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2631.309200][ T9588] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2631.468016][ T653] team0: Port device team_slave_0 added [ 2631.563970][ T653] team0: Port device team_slave_1 added [ 2631.696528][ T672] chnl_net:caif_netlink_parms(): no params data found [ 2631.703840][ T5108] Bluetooth: hci1: command 0x0409 tx timeout [ 2631.753763][ T653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2631.760763][ T653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2631.807474][ T653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2631.868786][ T653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2631.882416][ T653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2631.942531][ T653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2632.083413][ T9588] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2632.225442][ T9588] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2632.363620][ T653] device hsr_slave_0 entered promiscuous mode [ 2632.382068][ T653] device hsr_slave_1 entered promiscuous mode [ 2632.399964][ T653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2632.412778][ T653] Cannot create hsr debugfs directory [ 2632.445823][ T9588] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2632.467310][ T672] bridge0: port 1(bridge_slave_0) entered blocking state [ 2632.478080][ T672] bridge0: port 1(bridge_slave_0) entered disabled state [ 2632.495382][ T672] device bridge_slave_0 entered promiscuous mode [ 2632.533299][ T9588] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2632.563949][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2632.583505][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2632.632729][ T672] bridge0: port 2(bridge_slave_1) entered blocking state [ 2632.639890][ T672] bridge0: port 2(bridge_slave_1) entered disabled state [ 2632.659598][ T672] device bridge_slave_1 entered promiscuous mode [ 2632.667615][ T5108] Bluetooth: hci4: command 0x0409 tx timeout [ 2632.790567][ T618] device veth0_vlan entered promiscuous mode [ 2632.829273][ T672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2632.883192][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2632.901661][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2632.921093][ T672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2632.957818][ T618] device veth1_vlan entered promiscuous mode [ 2632.976777][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2632.992730][ T5108] Bluetooth: hci0: command 0x040f tx timeout [ 2632.996387][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2633.017650][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2633.073841][ T9588] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2633.214727][ T9588] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2633.277046][ T672] team0: Port device team_slave_0 added [ 2633.311889][ T672] team0: Port device team_slave_1 added [ 2633.354341][ T9588] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2633.502905][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2633.511631][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2633.522840][ T618] device veth0_macvtap entered promiscuous mode [ 2633.563732][ T9588] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2633.633704][ T672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2633.640795][ T672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2633.713848][ T672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2633.744297][ T672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2633.751310][ T672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2633.792530][ T5108] Bluetooth: hci1: command 0x041b tx timeout [ 2633.822397][ T672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2633.845815][ T618] device veth1_macvtap entered promiscuous mode [ 2633.886937][ T618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2633.908876][ T618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2633.923648][ T618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2633.948780][ T618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2633.970416][ T618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2633.992055][ T618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2634.012532][ T618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2634.033404][ T618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2634.055764][ T618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2634.077721][ T618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2634.102954][ T618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2634.138546][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2634.151195][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2634.167511][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2634.177555][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2634.201733][ T618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2634.213152][ T618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2634.223391][ T618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2634.242408][ T618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2634.253794][ T618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2634.279494][ T618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2634.293839][ T618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2634.312463][ T618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2634.334575][ T618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2634.351265][ T618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2634.363156][ T618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2634.393802][ T672] device hsr_slave_0 entered promiscuous mode [ 2634.401522][ T672] device hsr_slave_1 entered promiscuous mode [ 2634.408726][ T672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2634.434271][ T672] Cannot create hsr debugfs directory [ 2634.439976][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2634.449106][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2634.475159][ T618] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2634.501848][ T618] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2634.520052][ T618] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2634.529252][ T618] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2634.742811][ T5108] Bluetooth: hci4: command 0x041b tx timeout [ 2635.072653][ T5108] Bluetooth: hci0: command 0x0419 tx timeout [ 2635.294424][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2635.310205][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2635.425999][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2635.489913][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2635.498899][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2635.523065][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:13:25 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:25 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r1}, 0x10) write$cgroup_int(r0, &(0x7f0000000600), 0x12) 10:13:25 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r1}, 0x10) write$cgroup_int(r0, &(0x7f0000000600), 0x12) 10:13:25 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x7, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x100, 0x0, 0x100, 0x10000000, 0x0, 0x0, 0x1f}, r0, 0xb, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_int(r3, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='cgroup\x00') r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, r2, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 2635.862758][ T5108] Bluetooth: hci1: command 0x040f tx timeout 10:13:26 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:26 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:26 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:26 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:26 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2636.542139][ T653] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2636.724591][ T653] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2636.820526][ T653] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2636.827785][ T5108] Bluetooth: hci4: command 0x040f tx timeout [ 2636.897130][ T653] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2637.230542][ T653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2637.290056][ T653] 8021q: adding VLAN 0 to HW filter on device team0 [ 2637.325395][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2637.336311][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2637.347821][ T672] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2637.377350][ T672] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2637.434252][ T672] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2637.451808][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2637.460981][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2637.470135][T28162] bridge0: port 1(bridge_slave_0) entered blocking state [ 2637.477316][T28162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2637.487731][ T672] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2637.513100][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2637.521236][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2637.549119][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2637.571891][ T6685] bridge0: port 2(bridge_slave_1) entered blocking state [ 2637.579111][ T6685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2637.597851][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2637.652592][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2637.669846][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2637.688959][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2637.697763][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2637.709510][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2637.718622][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2637.754250][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2637.763876][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2637.781613][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2637.907603][ T9588] device hsr_slave_0 left promiscuous mode [ 2637.923341][ T9588] device hsr_slave_1 left promiscuous mode [ 2637.934360][ T9588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2637.941838][ T9588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2637.955399][ T5108] Bluetooth: hci1: command 0x0419 tx timeout [ 2637.955867][ T9588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2637.973053][ T9588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2637.982919][ T9588] device bridge_slave_1 left promiscuous mode [ 2637.989195][ T9588] bridge0: port 2(bridge_slave_1) entered disabled state [ 2638.003273][ T9588] device bridge_slave_0 left promiscuous mode [ 2638.009558][ T9588] bridge0: port 1(bridge_slave_0) entered disabled state [ 2638.057315][ T9588] device hsr_slave_0 left promiscuous mode [ 2638.085442][ T9588] device hsr_slave_1 left promiscuous mode [ 2638.102888][ T9588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2638.110361][ T9588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2638.147938][ T9588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2638.160685][ T9588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2638.180935][ T9588] device bridge_slave_1 left promiscuous mode [ 2638.188268][ T9588] bridge0: port 2(bridge_slave_1) entered disabled state [ 2638.197540][ T9588] device bridge_slave_0 left promiscuous mode [ 2638.204560][ T9588] bridge0: port 1(bridge_slave_0) entered disabled state [ 2638.223109][ T5113] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2638.233345][ T9588] device hsr_slave_0 left promiscuous mode [ 2638.233359][ T5113] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2638.247562][ T9588] device hsr_slave_1 left promiscuous mode [ 2638.248818][ T5113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2638.260651][ T9588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2638.262080][ T5113] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2638.275754][ T9588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2638.281335][ T5113] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2638.292188][ T9588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2638.300718][ T9588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2638.318393][ T9588] device bridge_slave_1 left promiscuous mode [ 2638.324792][ T9588] bridge0: port 2(bridge_slave_1) entered disabled state [ 2638.333908][ T9588] device bridge_slave_0 left promiscuous mode [ 2638.340174][ T9588] bridge0: port 1(bridge_slave_0) entered disabled state [ 2638.363317][ T9588] device veth1_macvtap left promiscuous mode [ 2638.369419][ T9588] device veth0_macvtap left promiscuous mode [ 2638.376383][ T9588] device veth1_vlan left promiscuous mode [ 2638.382228][ T9588] device veth0_vlan left promiscuous mode [ 2638.389518][ T9588] device veth1_macvtap left promiscuous mode [ 2638.395702][ T9588] device veth0_macvtap left promiscuous mode [ 2638.401770][ T9588] device veth1_vlan left promiscuous mode [ 2638.409326][ T9588] device veth0_vlan left promiscuous mode [ 2638.417525][ T9588] device veth1_macvtap left promiscuous mode [ 2638.424122][ T9588] device veth0_macvtap left promiscuous mode [ 2638.430421][ T9588] device veth1_vlan left promiscuous mode [ 2638.441193][ T9588] device veth0_vlan left promiscuous mode [ 2638.812483][ T9588] team0 (unregistering): Port device team_slave_1 removed [ 2638.827146][ T9588] team0 (unregistering): Port device team_slave_0 removed [ 2638.840316][ T9588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2638.857040][ T9588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2638.903191][ T5108] Bluetooth: hci4: command 0x0419 tx timeout [ 2638.934652][ T9588] bond0 (unregistering): Released all slaves [ 2639.068417][ T9588] team0 (unregistering): Port device team_slave_1 removed [ 2639.087553][ T9588] team0 (unregistering): Port device team_slave_0 removed [ 2639.103422][ T9588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2639.119887][ T9588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2639.195194][ T9588] bond0 (unregistering): Released all slaves [ 2639.327207][ T9588] team0 (unregistering): Port device team_slave_1 removed [ 2639.340091][ T9588] team0 (unregistering): Port device team_slave_0 removed [ 2639.358781][ T9588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2639.372967][ T9588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2639.442030][ T9588] bond0 (unregistering): Released all slaves [ 2639.506645][ T672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2639.541540][ T672] 8021q: adding VLAN 0 to HW filter on device team0 [ 2639.577102][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2639.593155][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2639.633914][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2639.653263][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2639.661820][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 2639.669110][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2639.703867][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2639.711985][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2639.725790][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2639.742212][T14114] bridge0: port 2(bridge_slave_1) entered blocking state [ 2639.749423][T14114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2639.767944][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2639.777312][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2639.787068][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2639.831318][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2639.840071][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2639.858850][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2639.870248][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2639.883400][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2639.890943][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2639.900822][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2639.910269][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2639.924087][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2639.952084][ T653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2640.097837][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2640.123891][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2640.180713][ T653] device veth0_vlan entered promiscuous mode [ 2640.233177][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2640.242845][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2640.261946][ T653] device veth1_vlan entered promiscuous mode [ 2640.283779][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2640.292054][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2640.323352][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2640.342752][ T5108] Bluetooth: hci5: command 0x0409 tx timeout [ 2640.393417][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2640.401659][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2640.435336][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2640.454538][ T653] device veth0_macvtap entered promiscuous mode [ 2640.471172][ T653] device veth1_macvtap entered promiscuous mode [ 2640.506796][ T805] chnl_net:caif_netlink_parms(): no params data found [ 2640.539784][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2640.553840][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2640.594380][ T653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2640.616284][ T653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2640.627569][ T653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2640.638571][ T653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2640.648892][ T653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2640.659672][ T653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2640.672088][ T653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2640.700650][ T672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2640.729682][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2640.749051][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2640.758811][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2640.766861][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2640.776693][ T653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2640.789278][ T653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2640.810698][ T653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2640.821583][ T653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2640.839676][ T653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2640.851983][ T653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2640.863851][ T653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2640.893629][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2640.912940][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2640.925473][ T653] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2640.952737][ T653] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2640.961501][ T653] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2640.981191][ T653] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2641.086070][ T805] bridge0: port 1(bridge_slave_0) entered blocking state [ 2641.093623][ T805] bridge0: port 1(bridge_slave_0) entered disabled state [ 2641.101907][ T805] device bridge_slave_0 entered promiscuous mode [ 2641.111412][ T805] bridge0: port 2(bridge_slave_1) entered blocking state [ 2641.119324][ T805] bridge0: port 2(bridge_slave_1) entered disabled state [ 2641.128076][ T805] device bridge_slave_1 entered promiscuous mode [ 2641.144620][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2641.154098][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2641.192772][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2641.201201][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2641.211785][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2641.220639][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2641.274650][ T805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2641.299967][ T672] device veth0_vlan entered promiscuous mode [ 2641.333497][ T805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2641.363396][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2641.371498][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2641.428873][ T805] team0: Port device team_slave_0 added [ 2641.444042][ T672] device veth1_vlan entered promiscuous mode [ 2641.460416][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2641.485021][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2641.508272][ T805] team0: Port device team_slave_1 added [ 2641.580933][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2641.628109][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2641.638515][ T805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2641.646911][ T805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2641.673603][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2641.685658][ T805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2641.707827][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2641.723267][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2641.731945][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2641.749140][ T672] device veth0_macvtap entered promiscuous mode [ 2641.758010][ T805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2641.772400][ T805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2641.806958][ T805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2641.829021][ T672] device veth1_macvtap entered promiscuous mode [ 2641.899677][ T672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2641.914994][ T672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2641.925441][ T672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2641.950221][ T672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2641.971862][ T672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2641.990955][ T852] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2641.997839][ T672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2642.035560][ T672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2642.038167][ T852] CPU: 1 PID: 852 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2642.056282][ T852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2642.058937][ T672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2642.066341][ T852] Call Trace: [ 2642.066354][ T852] [ 2642.066365][ T852] dump_stack_lvl+0xd1/0x138 [ 2642.066404][ T852] dump_header+0x10b/0x85f [ 2642.091751][ T852] oom_kill_process.cold+0x10/0x15 [ 2642.096924][ T852] out_of_memory+0x35c/0x14a0 [ 2642.100555][ T672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2642.101645][ T852] ? oom_killer_disable+0x280/0x280 [ 2642.114090][ T852] mem_cgroup_out_of_memory+0x206/0x270 [ 2642.119686][ T852] ? mem_cgroup_margin+0x130/0x130 [ 2642.124857][ T852] memory_max_write+0x2f9/0x3c0 [ 2642.129756][ T852] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2642.135881][ T852] ? lock_release+0x810/0x810 [ 2642.140610][ T852] cgroup_file_write+0x1e2/0x770 [ 2642.145595][ T852] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2642.151698][ T852] ? kill_css+0x370/0x370 [ 2642.156066][ T852] ? __virt_addr_valid+0x61/0x2e0 [ 2642.161148][ T852] ? kill_css+0x370/0x370 [ 2642.165520][ T852] kernfs_fop_write_iter+0x3f1/0x600 [ 2642.170863][ T852] vfs_write+0x9ed/0xdd0 [ 2642.175151][ T852] ? kernel_write+0x630/0x630 [ 2642.179877][ T852] ? __fget_files+0x26a/0x440 [ 2642.184639][ T852] ksys_write+0x12b/0x250 [ 2642.189003][ T852] ? __ia32_sys_read+0xb0/0xb0 [ 2642.193814][ T852] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2642.199752][ T852] do_syscall_64+0x39/0xb0 [ 2642.204232][ T852] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2642.210171][ T852] RIP: 0033:0x7f026ee8c0c9 [ 2642.214616][ T852] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2642.234347][ T852] RSP: 002b:00007f026fb37168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2642.242802][ T852] RAX: ffffffffffffffda RBX: 00007f026efabf80 RCX: 00007f026ee8c0c9 [ 2642.250823][ T852] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000004 [ 2642.258826][ T852] RBP: 00007f026eee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2642.266831][ T852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2642.274824][ T852] R13: 00007ffc3d9b4f7f R14: 00007f026fb37300 R15: 0000000000022000 [ 2642.282841][ T852] [ 2642.298028][ T852] memory: usage 608kB, limit 0kB, failcnt 2289 [ 2642.300387][ T805] device hsr_slave_0 entered promiscuous mode [ 2642.304280][ T852] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2642.304300][ T852] Memory cgroup stats for /syz0: [ 2642.304487][ T852] anon 114688 [ 2642.304487][ T852] file 184320 [ 2642.304487][ T852] kernel 311296 [ 2642.304487][ T852] kernel_stack 65536 [ 2642.304487][ T852] pagetables 77824 [ 2642.304487][ T852] sec_pagetables 0 [ 2642.304487][ T852] percpu 208 [ 2642.304487][ T852] sock 0 [ 2642.304487][ T852] vmalloc 4096 [ 2642.304487][ T852] shmem 184320 [ 2642.304487][ T852] zswap 0 [ 2642.304487][ T852] zswapped 0 [ 2642.304487][ T852] file_mapped 184320 [ 2642.304487][ T852] file_dirty 0 [ 2642.304487][ T852] file_writeback 0 [ 2642.304487][ T852] swapcached 0 [ 2642.304487][ T852] anon_thp 0 [ 2642.304487][ T852] file_thp 0 [ 2642.304487][ T852] shmem_thp 0 [ 2642.304487][ T852] inactive_anon 176128 [ 2642.304487][ T852] active_anon 122880 [ 2642.304487][ T852] inactive_file 0 [ 2642.304487][ T852] active_file 0 [ 2642.304487][ T852] unevictable 0 [ 2642.304487][ T852] slab_reclaimable 28216 [ 2642.304487][ T852] slab_unreclaimable 107808 [ 2642.304487][ T852] slab 136024 [ 2642.414916][ T805] device hsr_slave_1 entered promiscuous mode [ 2642.422736][ T852] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=851,uid=0 [ 2642.422912][ T5108] Bluetooth: hci5: command 0x041b tx timeout [ 2642.454395][ T805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2642.461999][ T805] Cannot create hsr debugfs directory [ 2642.495511][ T852] Memory cgroup out of memory: Killed process 851 (syz-executor.0) total-vm:54540kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2642.513654][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2642.537990][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2642.554281][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2642.573704][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2642.611218][ T672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2642.643648][ T672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2642.657669][ T672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2642.680907][ T672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2642.698992][ T672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2642.722396][ T672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2642.732252][ T672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2642.772360][ T672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2642.791627][ T672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2642.830154][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2642.851742][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2642.884929][ T672] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2642.902559][ T672] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2642.911308][ T672] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2642.963372][ T672] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2643.364807][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2643.410459][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2643.506488][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2643.559161][ T5190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2643.582477][ T5190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2643.601335][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:13:33 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r1}, 0x10) write$cgroup_int(r0, &(0x7f0000000600), 0x12) 10:13:33 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:33 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:33 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:33 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2643.883914][ T653] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 10:13:34 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2643.958508][ T653] CPU: 1 PID: 653 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2643.968823][ T653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2643.978912][ T653] Call Trace: [ 2643.982232][ T653] [ 2643.985192][ T653] dump_stack_lvl+0xd1/0x138 [ 2643.989916][ T653] dump_header+0x10b/0x85f [ 2643.994386][ T653] oom_kill_process.cold+0x10/0x15 [ 2643.999549][ T653] out_of_memory+0x35c/0x14a0 [ 2644.004450][ T653] ? find_held_lock+0x2d/0x110 [ 2644.009267][ T653] ? oom_killer_disable+0x280/0x280 [ 2644.014513][ T653] ? find_held_lock+0x2d/0x110 [ 2644.019580][ T653] mem_cgroup_out_of_memory+0x206/0x270 [ 2644.025346][ T653] ? mem_cgroup_margin+0x130/0x130 [ 2644.030495][ T653] ? lock_downgrade+0x6e0/0x6e0 [ 2644.035388][ T653] try_charge_memcg+0xefb/0x12f0 [ 2644.040454][ T653] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2644.046641][ T653] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2644.052410][ T653] ? lock_downgrade+0x6e0/0x6e0 [ 2644.057391][ T653] ? lock_downgrade+0x6e0/0x6e0 [ 2644.062277][ T653] ? rcu_read_unlock+0x9/0x60 [ 2644.066996][ T653] obj_cgroup_charge+0x2af/0x5e0 [ 2644.071950][ T653] ? copy_process+0x3aa/0x7520 [ 2644.076728][ T653] kmem_cache_alloc_node+0xb7/0x460 [ 2644.081941][ T653] copy_process+0x3aa/0x7520 [ 2644.086542][ T653] ? _raw_spin_unlock+0x28/0x40 [ 2644.091404][ T653] ? wp_page_reuse+0x197/0x570 [ 2644.096196][ T653] ? do_wp_page+0x844/0x3370 [ 2644.100807][ T653] ? __cleanup_sighand+0xb0/0xb0 [ 2644.105753][ T653] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2644.111140][ T653] ? rwlock_bug.part.0+0x90/0x90 [ 2644.116089][ T653] ? lock_chain_count+0x20/0x20 [ 2644.120949][ T653] kernel_clone+0xeb/0x990 [ 2644.125378][ T653] ? create_io_thread+0xf0/0xf0 [ 2644.130242][ T653] ? find_held_lock+0x2d/0x110 [ 2644.135031][ T653] __do_sys_clone+0xba/0x100 [ 2644.139640][ T653] ? kernel_clone+0x990/0x990 [ 2644.144342][ T653] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2644.150249][ T653] do_syscall_64+0x39/0xb0 [ 2644.154679][ T653] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2644.160676][ T653] RIP: 0033:0x7f026ee89dfb [ 2644.165103][ T653] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2644.184888][ T653] RSP: 002b:00007ffc3d9b51c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2644.193312][ T653] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f026ee89dfb [ 2644.201286][ T653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2644.209258][ T653] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556502400 [ 2644.217232][ T653] R10: 00005555565026d0 R11: 0000000000000246 R12: 0000000000000001 [ 2644.225203][ T653] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc3d9b52a0 [ 2644.233192][ T653] [ 2644.321699][ T653] memory: usage 296kB, limit 0kB, failcnt 2308 [ 2644.342908][ T653] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2644.349963][ T653] Memory cgroup stats for /syz0: [ 2644.350189][ T653] anon 40960 [ 2644.350189][ T653] file 184320 [ 2644.350189][ T653] kernel 77824 [ 2644.350189][ T653] kernel_stack 0 [ 2644.350189][ T653] pagetables 8192 [ 2644.350189][ T653] sec_pagetables 0 [ 2644.350189][ T653] percpu 64 [ 2644.350189][ T653] sock 0 [ 2644.350189][ T653] vmalloc 0 [ 2644.350189][ T653] shmem 184320 [ 2644.350189][ T653] zswap 0 [ 2644.350189][ T653] zswapped 0 [ 2644.350189][ T653] file_mapped 184320 [ 2644.350189][ T653] file_dirty 0 [ 2644.350189][ T653] file_writeback 0 [ 2644.350189][ T653] swapcached 0 [ 2644.350189][ T653] anon_thp 0 [ 2644.350189][ T653] file_thp 0 [ 2644.350189][ T653] shmem_thp 0 [ 2644.350189][ T653] inactive_anon 102400 [ 2644.350189][ T653] active_anon 122880 [ 2644.350189][ T653] inactive_file 0 [ 2644.350189][ T653] active_file 0 [ 2644.350189][ T653] unevictable 0 [ 2644.350189][ T653] slab_reclaimable 10160 [ 2644.350189][ T653] slab_unreclaimable 44080 [ 2644.350189][ T653] slab 54240 [ 2644.381482][ T805] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2644.463256][ T805] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2644.474139][ T805] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2644.487525][ T805] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2644.494888][ T653] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0 [ 2644.502990][ T5108] Bluetooth: hci5: command 0x040f tx timeout [ 2644.518697][ T653] ,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=653,uid=0 [ 2644.569321][ T653] Memory cgroup out of memory: Killed process 653 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2644.877401][ T805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2644.892125][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2644.914656][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2644.984296][ T5190] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2645.029089][ T805] 8021q: adding VLAN 0 to HW filter on device team0 [ 2645.109141][ T5190] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2645.160946][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2645.170015][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2645.187317][T28162] bridge0: port 1(bridge_slave_0) entered blocking state [ 2645.194520][T28162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2645.212784][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2645.221707][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2645.239338][T28162] bridge0: port 2(bridge_slave_1) entered blocking state [ 2645.246532][T28162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2645.262528][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2645.278047][ T5190] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2645.325297][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2645.333670][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2645.365485][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2645.375872][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2645.405554][ T5190] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2645.449830][ T805] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2645.461860][ T805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2645.475392][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2645.484564][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2645.493553][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2645.502280][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2645.522286][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2645.547633][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2645.895641][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2645.905261][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2645.926524][ T805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2646.407850][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2646.425083][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2646.476307][ T5190] device hsr_slave_0 left promiscuous mode [ 2646.484695][ T5190] device hsr_slave_1 left promiscuous mode [ 2646.491325][ T5190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2646.499181][ T5190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2646.509983][ T5190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2646.518154][ T5190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2646.528711][ T5190] device bridge_slave_1 left promiscuous mode [ 2646.535684][ T5190] bridge0: port 2(bridge_slave_1) entered disabled state [ 2646.545008][ T5190] device bridge_slave_0 left promiscuous mode [ 2646.551271][ T5190] bridge0: port 1(bridge_slave_0) entered disabled state [ 2646.566322][ T5190] device veth1_macvtap left promiscuous mode [ 2646.572570][ T5190] device veth0_macvtap left promiscuous mode [ 2646.578718][ T5190] device veth1_vlan left promiscuous mode [ 2646.585986][ T5108] Bluetooth: hci5: command 0x0419 tx timeout [ 2646.597002][ T5190] device veth0_vlan left promiscuous mode [ 2646.883093][ T5190] team0 (unregistering): Port device team_slave_1 removed [ 2646.900168][ T5190] team0 (unregistering): Port device team_slave_0 removed [ 2646.917095][ T5190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2646.938004][ T5190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2647.053095][ T5190] bond0 (unregistering): Released all slaves [ 2647.169921][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2647.179695][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2647.198688][ T805] device veth0_vlan entered promiscuous mode [ 2647.206453][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2647.223205][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2647.236804][ T805] device veth1_vlan entered promiscuous mode [ 2647.293105][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2647.301938][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2647.318890][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2647.330133][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2647.349185][ T805] device veth0_macvtap entered promiscuous mode [ 2647.373618][ T805] device veth1_macvtap entered promiscuous mode [ 2647.409815][ T805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2647.420558][ T805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2647.431079][ T805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2647.441855][ T805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2647.452190][ T805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2647.466035][ T805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2647.476309][ T805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2647.487482][ T805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2647.501734][ T805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2647.511434][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2647.521156][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2647.529802][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2647.539046][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2647.550227][ T805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2647.581087][ T805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2647.591340][ T805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2647.602197][ T805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2647.616002][ T805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2647.627270][ T805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2647.638010][ T805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2647.648961][ T805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2647.663356][ T805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2647.671051][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2647.680644][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2647.692807][ T805] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2647.701547][ T805] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2647.722996][ T805] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2647.731752][ T805] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2647.858166][ T8036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2647.879706][ T8036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2647.899735][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2647.916644][ T8036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2647.925506][ T8036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2647.939177][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2648.344503][ T983] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2648.361724][ T983] CPU: 0 PID: 983 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2648.372032][ T983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2648.382127][ T983] Call Trace: [ 2648.385428][ T983] [ 2648.388397][ T983] dump_stack_lvl+0xd1/0x138 [ 2648.393043][ T983] dump_header+0x10b/0x85f [ 2648.397515][ T983] oom_kill_process.cold+0x10/0x15 [ 2648.402684][ T983] out_of_memory+0x35c/0x14a0 [ 2648.407426][ T983] ? oom_killer_disable+0x280/0x280 [ 2648.412676][ T983] ? mark_held_locks+0x9f/0xe0 [ 2648.417483][ T983] mem_cgroup_out_of_memory+0x206/0x270 [ 2648.423076][ T983] ? mem_cgroup_margin+0x130/0x130 [ 2648.428255][ T983] memory_max_write+0x2f9/0x3c0 [ 2648.433148][ T983] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2648.439263][ T983] ? lock_release+0x810/0x810 [ 2648.443976][ T983] cgroup_file_write+0x1e2/0x770 [ 2648.448954][ T983] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2648.455051][ T983] ? kill_css+0x370/0x370 [ 2648.459414][ T983] ? __virt_addr_valid+0x61/0x2e0 [ 2648.464487][ T983] ? kill_css+0x370/0x370 [ 2648.468853][ T983] kernfs_fop_write_iter+0x3f1/0x600 [ 2648.474196][ T983] vfs_write+0x9ed/0xdd0 [ 2648.478482][ T983] ? kernel_write+0x630/0x630 [ 2648.483205][ T983] ? __fget_files+0x26a/0x440 [ 2648.487933][ T983] ksys_write+0x12b/0x250 [ 2648.492298][ T983] ? __ia32_sys_read+0xb0/0xb0 [ 2648.497108][ T983] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2648.503042][ T983] do_syscall_64+0x39/0xb0 [ 2648.507504][ T983] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2648.513437][ T983] RIP: 0033:0x7f33e7a8c0c9 [ 2648.517884][ T983] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2648.537531][ T983] RSP: 002b:00007f33e8733168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2648.546076][ T983] RAX: ffffffffffffffda RBX: 00007f33e7babf80 RCX: 00007f33e7a8c0c9 [ 2648.554078][ T983] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000008 [ 2648.562072][ T983] RBP: 00007f33e7ae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2648.570077][ T983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2648.578172][ T983] R13: 00007ffce3923f0f R14: 00007f33e8733300 R15: 0000000000022000 [ 2648.586210][ T983] [ 2648.613366][ T983] memory: usage 504kB, limit 0kB, failcnt 2290 [ 2648.620131][ T983] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2648.627832][ T983] Memory cgroup stats for /syz4: [ 2648.631844][ T983] anon 114688 [ 2648.631844][ T983] file 122880 [ 2648.631844][ T983] kernel 270336 [ 2648.631844][ T983] kernel_stack 65536 [ 2648.631844][ T983] pagetables 77824 [ 2648.631844][ T983] sec_pagetables 0 [ 2648.631844][ T983] percpu 64 [ 2648.631844][ T983] sock 0 [ 2648.631844][ T983] vmalloc 0 [ 2648.631844][ T983] shmem 122880 [ 2648.631844][ T983] zswap 0 [ 2648.631844][ T983] zswapped 0 [ 2648.631844][ T983] file_mapped 110592 [ 2648.631844][ T983] file_dirty 0 [ 2648.631844][ T983] file_writeback 0 [ 2648.631844][ T983] swapcached 0 [ 2648.631844][ T983] anon_thp 0 [ 2648.631844][ T983] file_thp 0 [ 2648.631844][ T983] shmem_thp 0 [ 2648.631844][ T983] inactive_anon 126976 [ 2648.631844][ T983] active_anon 110592 [ 2648.631844][ T983] inactive_file 0 [ 2648.631844][ T983] active_file 0 [ 2648.631844][ T983] unevictable 0 [ 2648.631844][ T983] slab_reclaimable 23712 [ 2648.631844][ T983] slab_unreclaimable 75048 [ 2648.631844][ T983] slab 98760 [ 2648.744662][ T983] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=982,uid=0 [ 2648.769042][ T983] Memory cgroup out of memory: Killed process 982 (syz-executor.4) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 10:13:39 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x7, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x100, 0x0, 0x100, 0x10000000, 0x9}, r0, 0xb, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_int(r3, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='cgroup\x00') r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, r2, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000600), 0x12) 10:13:39 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:39 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:39 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:39 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:39 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2649.060002][T32464] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 2649.074946][T32464] CPU: 0 PID: 32464 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2649.085426][T32464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2649.095521][T32464] Call Trace: [ 2649.098842][T32464] [ 2649.101804][T32464] dump_stack_lvl+0xd1/0x138 [ 2649.106449][T32464] dump_header+0x10b/0x85f [ 2649.110919][T32464] oom_kill_process.cold+0x10/0x15 [ 2649.116083][T32464] out_of_memory+0x35c/0x14a0 [ 2649.120823][T32464] ? find_held_lock+0x2d/0x110 [ 2649.125634][T32464] ? oom_killer_disable+0x280/0x280 [ 2649.130878][T32464] ? find_held_lock+0x2d/0x110 [ 2649.135692][T32464] mem_cgroup_out_of_memory+0x206/0x270 [ 2649.141279][T32464] ? mem_cgroup_margin+0x130/0x130 [ 2649.146424][T32464] ? lock_downgrade+0x6e0/0x6e0 [ 2649.151319][T32464] try_charge_memcg+0xefb/0x12f0 [ 2649.156291][T32464] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2649.162297][T32464] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2649.168049][T32464] ? lock_downgrade+0x6e0/0x6e0 [ 2649.172925][T32464] ? lock_downgrade+0x6e0/0x6e0 [ 2649.177794][T32464] ? rcu_read_unlock+0x9/0x60 [ 2649.182522][T32464] obj_cgroup_charge+0x2af/0x5e0 [ 2649.187489][T32464] ? copy_process+0x3aa/0x7520 [ 2649.192285][T32464] kmem_cache_alloc_node+0xb7/0x460 [ 2649.197511][T32464] copy_process+0x3aa/0x7520 [ 2649.202129][T32464] ? _raw_spin_unlock+0x28/0x40 [ 2649.207050][T32464] ? wp_page_reuse+0x197/0x570 [ 2649.211846][T32464] ? do_wp_page+0x844/0x3370 [ 2649.216483][T32464] ? __cleanup_sighand+0xb0/0xb0 [ 2649.221635][T32464] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2649.227045][T32464] ? rwlock_bug.part.0+0x90/0x90 [ 2649.232011][T32464] ? lock_chain_count+0x20/0x20 [ 2649.236889][T32464] kernel_clone+0xeb/0x990 [ 2649.241336][T32464] ? create_io_thread+0xf0/0xf0 [ 2649.246220][T32464] ? find_held_lock+0x2d/0x110 [ 2649.251029][T32464] __do_sys_clone+0xba/0x100 [ 2649.255643][T32464] ? kernel_clone+0x990/0x990 [ 2649.260363][T32464] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2649.266286][T32464] do_syscall_64+0x39/0xb0 [ 2649.270749][T32464] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2649.276671][T32464] RIP: 0033:0x7fce7ea89dfb [ 2649.281107][T32464] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2649.301085][T32464] RSP: 002b:00007ffcca78be60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2649.309525][T32464] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fce7ea89dfb [ 2649.317529][T32464] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2649.325523][T32464] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555c33400 [ 2649.333516][T32464] R10: 0000555555c336d0 R11: 0000000000000246 R12: 0000000000000001 [ 2649.341508][T32464] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffcca78bf40 [ 2649.349527][T32464] [ 2649.359664][T32464] memory: usage 228kB, limit 0kB, failcnt 2513 [ 2649.366116][T32464] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2649.373296][T32464] Memory cgroup stats for /syz2: [ 2649.373471][T32464] anon 40960 [ 2649.373471][T32464] file 135168 [ 2649.373471][T32464] kernel 57344 [ 2649.373471][T32464] kernel_stack 0 [ 2649.373471][T32464] pagetables 8192 [ 2649.373471][T32464] sec_pagetables 0 [ 2649.373471][T32464] percpu 0 [ 2649.373471][T32464] sock 0 [ 2649.373471][T32464] vmalloc 0 [ 2649.373471][T32464] shmem 126976 [ 2649.373471][T32464] zswap 0 [ 2649.373471][T32464] zswapped 0 [ 2649.373471][T32464] file_mapped 126976 [ 2649.373471][T32464] file_dirty 0 [ 2649.373471][T32464] file_writeback 0 [ 2649.373471][T32464] swapcached 0 [ 2649.373471][T32464] anon_thp 0 [ 2649.373471][T32464] file_thp 0 [ 2649.373471][T32464] shmem_thp 0 [ 2649.373471][T32464] inactive_anon 53248 [ 2649.373471][T32464] active_anon 114688 [ 2649.373471][T32464] inactive_file 4096 [ 2649.373471][T32464] active_file 4096 [ 2649.373471][T32464] unevictable 0 [ 2649.373471][T32464] slab_reclaimable 8296 [ 2649.373471][T32464] slab_unreclaimable 32296 [ 2649.373471][T32464] slab 40592 10:13:39 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2649.591232][T32464] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=32464,uid=0 [ 2649.610876][T32464] Memory cgroup out of memory: Killed process 32464 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 10:13:39 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2649.713249][ T805] syz-executor.4 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 2649.766227][ T805] CPU: 0 PID: 805 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2649.776529][ T805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2649.786616][ T805] Call Trace: [ 2649.789918][ T805] [ 2649.792878][ T805] dump_stack_lvl+0xd1/0x138 [ 2649.797519][ T805] dump_header+0x10b/0x85f [ 2649.801992][ T805] oom_kill_process.cold+0x10/0x15 [ 2649.807156][ T805] out_of_memory+0x35c/0x14a0 [ 2649.811904][ T805] ? oom_killer_disable+0x280/0x280 [ 2649.817173][ T805] ? find_held_lock+0x2d/0x110 [ 2649.821991][ T805] mem_cgroup_out_of_memory+0x206/0x270 [ 2649.827582][ T805] ? mem_cgroup_margin+0x130/0x130 [ 2649.832824][ T805] ? lock_downgrade+0x6e0/0x6e0 [ 2649.837821][ T805] try_charge_memcg+0xefb/0x12f0 [ 2649.842806][ T805] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2649.848818][ T805] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2649.854573][ T805] ? lock_downgrade+0x6e0/0x6e0 [ 2649.859473][ T805] obj_cgroup_charge+0x2af/0x5e0 [ 2649.864438][ T805] kmem_cache_alloc_lru+0x145/0x760 [ 2649.869665][ T805] ? ext4_alloc_inode+0x28/0x680 [ 2649.874635][ T805] ? ext4_free_in_core_inode+0x70/0x70 [ 2649.880120][ T805] ext4_alloc_inode+0x28/0x680 [ 2649.884911][ T805] ? ext4_free_in_core_inode+0x70/0x70 [ 2649.890398][ T805] alloc_inode+0x61/0x230 [ 2649.894762][ T805] iget_locked+0x1bb/0x700 [ 2649.899218][ T805] __ext4_iget+0x3af/0x4230 [ 2649.903771][ T805] ? ext4_get_projid+0x190/0x190 [ 2649.908736][ T805] ? ext4_fname_prepare_lookup+0x163/0x200 [ 2649.914568][ T805] ? ext4_fname_setup_filename+0x110/0x110 [ 2649.920419][ T805] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2649.926021][ T805] ext4_lookup+0x387/0x700 [ 2649.930481][ T805] ? ext4_resetent+0x2d0/0x2d0 [ 2649.935305][ T805] __lookup_slow+0x24c/0x460 [ 2649.939925][ T805] ? __lookup_hash+0x180/0x180 [ 2649.944720][ T805] ? scarlett2_usb_get_mix+0x2f6/0x318 [ 2649.950309][ T805] ? scarlett2_usb_get_mix+0x2f6/0x318 [ 2649.955810][ T805] ? lookup_fast+0x14e/0x520 [ 2649.960431][ T805] walk_component+0x33f/0x5a0 [ 2649.965151][ T805] path_lookupat+0x1ba/0x840 [ 2649.969775][ T805] filename_lookup+0x1d2/0x590 [ 2649.974577][ T805] ? may_linkat+0x500/0x500 [ 2649.979105][ T805] ? __might_fault+0xd9/0x180 [ 2649.983823][ T805] ? __phys_addr_symbol+0x30/0x70 [ 2649.988878][ T805] ? __check_object_size+0x2e2/0x5a0 [ 2649.994197][ T805] ? strncpy_from_user+0x28b/0x3c0 [ 2649.999345][ T805] ? getname_flags.part.0+0x1dd/0x4f0 [ 2650.004759][ T805] user_path_at_empty+0x46/0x60 [ 2650.009639][ T805] __x64_sys_umount+0xfc/0x190 [ 2650.014435][ T805] ? path_umount+0x10b0/0x10b0 [ 2650.019226][ T805] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2650.025151][ T805] do_syscall_64+0x39/0xb0 [ 2650.029600][ T805] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2650.035516][ T805] RIP: 0033:0x7f33e7a8d537 [ 2650.039948][ T805] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2650.059592][ T805] RSP: 002b:00007ffce3923068 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2650.068038][ T805] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f33e7a8d537 [ 2650.076051][ T805] RDX: 00007ffce392313e RSI: 000000000000000a RDI: 00007ffce3923130 [ 2650.084049][ T805] RBP: 00007ffce3923130 R08: 00000000ffffffff R09: 00007ffce3922f00 [ 2650.092045][ T805] R10: 0000555556efa8bb R11: 0000000000000246 R12: 00007f33e7ae6b24 [ 2650.100032][ T805] R13: 00007ffce39241f0 R14: 0000555556efa810 R15: 00007ffce3924230 [ 2650.108045][ T805] [ 2650.165456][ T805] memory: usage 236kB, limit 0kB, failcnt 2309 [ 2650.171704][ T805] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 10:13:40 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2650.247685][ T805] Memory cgroup stats for /syz4: [ 2650.247874][ T805] anon 40960 [ 2650.247874][ T805] file 122880 [ 2650.247874][ T805] kernel 77824 [ 2650.247874][ T805] kernel_stack 0 [ 2650.247874][ T805] pagetables 8192 [ 2650.247874][ T805] sec_pagetables 0 [ 2650.247874][ T805] percpu 64 [ 2650.247874][ T805] sock 0 [ 2650.247874][ T805] vmalloc 0 [ 2650.247874][ T805] shmem 122880 [ 2650.247874][ T805] zswap 0 [ 2650.247874][ T805] zswapped 0 [ 2650.247874][ T805] file_mapped 110592 [ 2650.247874][ T805] file_dirty 0 10:13:40 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2650.247874][ T805] file_writeback 0 [ 2650.247874][ T805] swapcached 0 [ 2650.247874][ T805] anon_thp 0 [ 2650.247874][ T805] file_thp 0 [ 2650.247874][ T805] shmem_thp 0 [ 2650.247874][ T805] inactive_anon 53248 [ 2650.247874][ T805] active_anon 110592 [ 2650.247874][ T805] inactive_file 0 [ 2650.247874][ T805] active_file 0 [ 2650.247874][ T805] unevictable 0 [ 2650.247874][ T805] slab_reclaimable 12080 [ 2650.247874][ T805] slab_unreclaimable 44728 [ 2650.247874][ T805] slab 56808 10:13:40 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:40 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2650.890954][ T805] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=805,uid=0 [ 2650.947629][ T805] Memory cgroup out of memory: Killed process 805 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2650.975059][T32462] syz-executor.1 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 2651.002452][T32462] CPU: 1 PID: 32462 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2651.012931][T32462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2651.023008][T32462] Call Trace: [ 2651.026307][T32462] [ 2651.029257][T32462] dump_stack_lvl+0xd1/0x138 [ 2651.033883][T32462] dump_header+0x10b/0x85f [ 2651.038351][T32462] oom_kill_process.cold+0x10/0x15 [ 2651.043513][T32462] out_of_memory+0x35c/0x14a0 [ 2651.048239][T32462] ? oom_killer_disable+0x280/0x280 [ 2651.053475][T32462] ? find_held_lock+0x2d/0x110 [ 2651.058281][T32462] mem_cgroup_out_of_memory+0x206/0x270 [ 2651.063875][T32462] ? mem_cgroup_margin+0x130/0x130 [ 2651.069105][T32462] ? lock_downgrade+0x6e0/0x6e0 [ 2651.074080][T32462] try_charge_memcg+0xefb/0x12f0 [ 2651.079063][T32462] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2651.085067][T32462] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2651.090813][T32462] ? lock_downgrade+0x6e0/0x6e0 [ 2651.095694][T32462] obj_cgroup_charge+0x2af/0x5e0 [ 2651.100649][T32462] kmem_cache_alloc_lru+0x145/0x760 [ 2651.105853][T32462] ? ext4_alloc_inode+0x28/0x680 [ 2651.110803][T32462] ? ext4_free_in_core_inode+0x70/0x70 [ 2651.116274][T32462] ext4_alloc_inode+0x28/0x680 [ 2651.121050][T32462] ? ext4_free_in_core_inode+0x70/0x70 [ 2651.126515][T32462] alloc_inode+0x61/0x230 [ 2651.130862][T32462] iget_locked+0x1bb/0x700 [ 2651.135299][T32462] __ext4_iget+0x3af/0x4230 [ 2651.139835][T32462] ? ext4_get_projid+0x190/0x190 [ 2651.144786][T32462] ? ext4_fname_prepare_lookup+0x163/0x200 [ 2651.150604][T32462] ? ext4_fname_setup_filename+0x110/0x110 [ 2651.156432][T32462] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2651.162003][T32462] ext4_lookup+0x387/0x700 [ 2651.166431][T32462] ? ext4_resetent+0x2d0/0x2d0 [ 2651.171225][T32462] __lookup_slow+0x24c/0x460 [ 2651.175831][T32462] ? __lookup_hash+0x180/0x180 [ 2651.180611][T32462] ? scarlett2_usb_get_mix+0x2f6/0x318 [ 2651.186096][T32462] ? scarlett2_usb_get_mix+0x2f6/0x318 [ 2651.191584][T32462] ? lookup_fast+0x14e/0x520 [ 2651.196189][T32462] walk_component+0x33f/0x5a0 [ 2651.200903][T32462] path_lookupat+0x1ba/0x840 [ 2651.205536][T32462] filename_lookup+0x1d2/0x590 [ 2651.210337][T32462] ? may_linkat+0x500/0x500 [ 2651.214866][T32462] ? __might_fault+0xd9/0x180 [ 2651.219587][T32462] ? __phys_addr_symbol+0x30/0x70 [ 2651.224643][T32462] ? __check_object_size+0x2e2/0x5a0 [ 2651.229970][T32462] ? strncpy_from_user+0x28b/0x3c0 [ 2651.235125][T32462] ? getname_flags.part.0+0x1dd/0x4f0 [ 2651.240532][T32462] user_path_at_empty+0x46/0x60 [ 2651.245405][T32462] __x64_sys_umount+0xfc/0x190 [ 2651.250183][T32462] ? path_umount+0x10b0/0x10b0 [ 2651.254964][T32462] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2651.260872][T32462] do_syscall_64+0x39/0xb0 [ 2651.265305][T32462] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2651.271209][T32462] RIP: 0033:0x7f51fea8d537 [ 2651.275636][T32462] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2651.295251][T32462] RSP: 002b:00007fff075d12a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2651.303672][T32462] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f51fea8d537 [ 2651.311646][T32462] RDX: 00007fff075d137f RSI: 000000000000000a RDI: 00007fff075d1370 [ 2651.319627][T32462] RBP: 00007fff075d1370 R08: 00000000ffffffff R09: 00007fff075d1140 [ 2651.327600][T32462] R10: 000055555708a893 R11: 0000000000000246 R12: 00007f51feae6b24 [ 2651.335574][T32462] R13: 00007fff075d2430 R14: 000055555708a810 R15: 00007fff075d2470 [ 2651.343568][T32462] [ 2651.505557][T32462] memory: usage 280kB, limit 0kB, failcnt 2000 [ 2651.511907][T32462] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2651.522220][T32462] Memory cgroup stats for /syz1: [ 2651.526426][T32462] anon 45056 [ 2651.526426][T32462] file 180224 [ 2651.526426][T32462] kernel 61440 [ 2651.526426][T32462] kernel_stack 0 [ 2651.526426][T32462] pagetables 8192 [ 2651.526426][T32462] sec_pagetables 0 [ 2651.526426][T32462] percpu 0 [ 2651.526426][T32462] sock 0 [ 2651.526426][T32462] vmalloc 0 [ 2651.526426][T32462] shmem 180224 [ 2651.526426][T32462] zswap 0 [ 2651.526426][T32462] zswapped 0 [ 2651.526426][T32462] file_mapped 180224 [ 2651.526426][T32462] file_dirty 0 [ 2651.526426][T32462] file_writeback 0 [ 2651.526426][T32462] swapcached 0 [ 2651.526426][T32462] anon_thp 0 [ 2651.526426][T32462] file_thp 0 [ 2651.526426][T32462] shmem_thp 0 [ 2651.526426][T32462] inactive_anon 114688 [ 2651.526426][T32462] active_anon 110592 [ 2651.526426][T32462] inactive_file 0 [ 2651.526426][T32462] active_file 0 [ 2651.526426][T32462] unevictable 0 [ 2651.526426][T32462] slab_reclaimable 11960 [ 2651.526426][T32462] slab_unreclaimable 32944 [ 2651.526426][T32462] slab 44904 [ 2651.624591][ T1201] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.630931][ T1201] ieee802154 phy1 wpan1: encryption failed: -22 [ 2651.712432][T32462] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=32462,uid=0 [ 2651.742790][T32462] Memory cgroup out of memory: Killed process 32462 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2652.039833][ T5190] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 10:13:42 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:42 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:42 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r1}, 0x10) write$cgroup_int(r0, &(0x7f0000000600), 0x12) 10:13:42 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:42 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x7, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x100, 0x0, 0x100, 0x10000000, 0x9}, r0, 0xb, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_int(r3, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='cgroup\x00') r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, r2, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 2652.168386][ T5190] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2652.383023][ T5190] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2652.634602][ T5190] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2653.107344][ T5113] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2653.136914][ T5113] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2653.146137][ T5113] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2653.153962][ T5113] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2653.161267][ T5113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2653.704175][ T1039] chnl_net:caif_netlink_parms(): no params data found [ 2653.851861][ T5190] device hsr_slave_0 left promiscuous mode [ 2653.859033][ T5190] device hsr_slave_1 left promiscuous mode [ 2653.866824][ T5190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2653.874546][ T5190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2653.884147][ T5190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2653.891608][ T5190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2653.900612][ T5190] device bridge_slave_1 left promiscuous mode [ 2653.906913][ T5190] bridge0: port 2(bridge_slave_1) entered disabled state [ 2653.919024][ T5190] device bridge_slave_0 left promiscuous mode [ 2653.925484][ T5190] bridge0: port 1(bridge_slave_0) entered disabled state [ 2653.939886][ T5190] device veth1_macvtap left promiscuous mode [ 2653.946288][ T5190] device veth0_macvtap left promiscuous mode [ 2653.959945][ T5190] device veth1_vlan left promiscuous mode [ 2653.965815][ T5190] device veth0_vlan left promiscuous mode [ 2654.130605][ T5190] team0 (unregistering): Port device team_slave_1 removed [ 2654.150815][ T5190] team0 (unregistering): Port device team_slave_0 removed [ 2654.169971][ T5190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2654.196870][ T5190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2654.338208][ T5190] bond0 (unregistering): Released all slaves [ 2654.358259][ T5113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2654.367282][ T5113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2654.376015][ T5113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2654.384083][ T5113] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2654.391358][ T5113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2654.455944][ T1039] bridge0: port 1(bridge_slave_0) entered blocking state [ 2654.463920][ T1039] bridge0: port 1(bridge_slave_0) entered disabled state [ 2654.473102][ T1039] device bridge_slave_0 entered promiscuous mode [ 2654.498357][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 2654.523504][ T1039] bridge0: port 2(bridge_slave_1) entered disabled state [ 2654.531736][ T1039] device bridge_slave_1 entered promiscuous mode [ 2654.568166][ T1039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2654.594715][ T1039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2654.675741][ T1039] team0: Port device team_slave_0 added [ 2654.711294][ T1039] team0: Port device team_slave_1 added [ 2654.850219][ T1039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2654.862664][ T1039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2654.952445][ T1039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2654.992596][ T1039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2654.999591][ T1039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2655.062397][ T1039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2655.084837][ T1057] chnl_net:caif_netlink_parms(): no params data found [ 2655.169832][ T5113] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2655.181794][ T5113] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2655.190149][ T5113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2655.200322][ T5113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2655.210413][ T5113] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2655.217852][ T5113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2655.232471][ T5113] Bluetooth: hci1: command 0x0409 tx timeout [ 2655.285773][ T1039] device hsr_slave_0 entered promiscuous mode [ 2655.308562][ T1039] device hsr_slave_1 entered promiscuous mode [ 2655.325565][ T1039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2655.338924][ T1039] Cannot create hsr debugfs directory [ 2655.457059][ T1057] bridge0: port 1(bridge_slave_0) entered blocking state [ 2655.475157][ T1057] bridge0: port 1(bridge_slave_0) entered disabled state [ 2655.483841][ T1057] device bridge_slave_0 entered promiscuous mode [ 2655.531037][ T1057] bridge0: port 2(bridge_slave_1) entered blocking state [ 2655.562454][ T1057] bridge0: port 2(bridge_slave_1) entered disabled state [ 2655.582437][ T1057] device bridge_slave_1 entered promiscuous mode [ 2655.712012][ T1057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2655.823958][ T1057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2656.158111][ T1057] team0: Port device team_slave_0 added [ 2656.176098][ T1069] chnl_net:caif_netlink_parms(): no params data found [ 2656.198481][ T1057] team0: Port device team_slave_1 added [ 2656.345893][ T1057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2656.362347][ T1057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2656.412988][ T1057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2656.422644][ T5113] Bluetooth: hci2: command 0x0409 tx timeout [ 2656.625682][ T1057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2656.632936][ T1057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2656.762569][ T1057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2657.302514][ T5113] Bluetooth: hci1: command 0x041b tx timeout [ 2657.308639][ T5113] Bluetooth: hci3: command 0x0409 tx timeout [ 2657.433604][ T1069] bridge0: port 1(bridge_slave_0) entered blocking state [ 2657.440739][ T1069] bridge0: port 1(bridge_slave_0) entered disabled state [ 2657.493587][ T1069] device bridge_slave_0 entered promiscuous mode [ 2657.535894][ T1057] device hsr_slave_0 entered promiscuous mode [ 2657.582895][ T1057] device hsr_slave_1 entered promiscuous mode [ 2657.613381][ T1057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2657.642525][ T1057] Cannot create hsr debugfs directory [ 2657.648333][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state [ 2657.658367][ T1069] bridge0: port 2(bridge_slave_1) entered disabled state [ 2657.684384][ T1069] device bridge_slave_1 entered promiscuous mode [ 2657.849077][ T1069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2657.875426][ T1069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2657.989904][ T1039] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2658.030738][ T1039] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2658.047714][ T1069] team0: Port device team_slave_0 added [ 2658.059871][ T1039] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2658.108221][ T1069] team0: Port device team_slave_1 added [ 2658.114875][ T1039] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2658.139456][ T5190] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2658.231404][ T5190] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2658.268274][ T1069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2658.275407][ T1069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2658.336241][ T1069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2658.423192][ T5190] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2658.473518][ T1069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2658.480519][ T1069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2658.507309][ T5113] Bluetooth: hci2: command 0x041b tx timeout [ 2658.578066][ T1069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2658.696590][ T5190] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2658.967039][ T1069] device hsr_slave_0 entered promiscuous mode [ 2659.012885][ T1069] device hsr_slave_1 entered promiscuous mode [ 2659.019675][ T1069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2659.052369][ T1069] Cannot create hsr debugfs directory [ 2659.204820][ T1039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2659.331044][ T5190] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2659.382669][ T5113] Bluetooth: hci3: command 0x041b tx timeout [ 2659.382680][ T5108] Bluetooth: hci1: command 0x040f tx timeout [ 2659.513814][ T5190] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2659.544595][ T1039] 8021q: adding VLAN 0 to HW filter on device team0 [ 2659.552460][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2659.560402][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2659.632721][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2659.642089][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2659.652011][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 2659.659197][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2659.677046][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2659.689954][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2659.700620][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 2659.707721][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2659.733197][ T5190] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2659.768116][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2659.777279][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2659.822161][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2659.831623][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2659.841279][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2659.851262][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2659.860476][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2659.869231][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2659.878245][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2659.887066][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2659.895647][ T1057] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2659.915819][ T1039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2659.940197][ T5190] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2659.960113][ T1057] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2659.985510][ T1057] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2660.007421][ T1057] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2660.476391][ T1057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2660.518598][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2660.542651][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2660.558927][ T1039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2660.583324][ T5108] Bluetooth: hci2: command 0x040f tx timeout [ 2660.595975][ T1057] 8021q: adding VLAN 0 to HW filter on device team0 [ 2660.612275][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2660.620323][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2660.872907][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2660.881709][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2660.906238][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 2660.913452][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2660.939325][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2660.975782][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2660.993115][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2661.001892][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2661.023368][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 2661.030506][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2661.052913][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2661.185507][ T1039] device veth0_vlan entered promiscuous mode [ 2661.233056][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2661.253022][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2661.262018][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2661.284728][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2661.300962][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2661.314424][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2661.333775][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2661.350668][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2661.373287][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2661.411394][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2661.424612][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2661.433430][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2661.441305][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2661.462612][ T5108] Bluetooth: hci3: command 0x040f tx timeout [ 2661.462618][ T5113] Bluetooth: hci1: command 0x0419 tx timeout [ 2661.484768][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2661.499090][ T1039] device veth1_vlan entered promiscuous mode [ 2661.680624][ T1039] device veth0_macvtap entered promiscuous mode [ 2661.709766][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2661.719840][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2661.778144][ T1039] device veth1_macvtap entered promiscuous mode [ 2661.813653][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2661.821884][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2661.861548][ T1039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2661.876403][ T1039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2661.888460][ T1039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2661.900205][ T1039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2661.910567][ T1039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2661.921495][ T1039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2661.931727][ T1039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2661.943768][ T1039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2661.955961][ T1039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2661.995043][ T1069] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2662.016788][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2662.027124][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2662.063806][ T1039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2662.083012][ T1039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2662.111077][ T1039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2662.142359][ T1039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2662.152252][ T1039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2662.182703][ T1039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2662.202654][ T1039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2662.222773][ T1039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2662.243182][ T1039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2662.271977][ T1069] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2662.293562][ T1069] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2662.313426][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2662.322283][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2662.344139][ T1039] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2662.362481][ T1039] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2662.371242][ T1039] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2662.390080][ T1039] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2662.454812][ T1069] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2662.482721][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2662.490274][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2662.531493][ T1057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2662.652003][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2662.661346][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2662.669693][ T5108] Bluetooth: hci2: command 0x0419 tx timeout [ 2662.705883][T21046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2662.746353][T21046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2662.792079][T21046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2662.801002][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2662.808380][T21046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2662.830143][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2662.850577][ T1057] device veth0_vlan entered promiscuous mode [ 2662.883548][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2662.892030][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2662.914196][ T1057] device veth1_vlan entered promiscuous mode [ 2662.937724][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2662.947522][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2662.956120][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2663.005423][ T1069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2663.082163][ T1196] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2663.103631][ T1196] CPU: 1 PID: 1196 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2663.114035][ T1196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2663.124125][ T1196] Call Trace: [ 2663.127429][ T1196] [ 2663.130390][ T1196] dump_stack_lvl+0xd1/0x138 [ 2663.135032][ T1196] dump_header+0x10b/0x85f [ 2663.139504][ T1196] oom_kill_process.cold+0x10/0x15 [ 2663.144668][ T1196] out_of_memory+0x35c/0x14a0 [ 2663.149402][ T1196] ? oom_killer_disable+0x280/0x280 [ 2663.154651][ T1196] ? find_held_lock+0x2d/0x110 [ 2663.159466][ T1196] mem_cgroup_out_of_memory+0x206/0x270 [ 2663.165061][ T1196] ? mem_cgroup_margin+0x130/0x130 [ 2663.170230][ T1196] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2663.176115][ T1196] memory_max_write+0x2f9/0x3c0 [ 2663.181013][ T1196] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2663.187126][ T1196] ? lock_release+0x810/0x810 [ 2663.191846][ T1196] cgroup_file_write+0x1e2/0x770 [ 2663.196826][ T1196] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2663.202934][ T1196] ? kill_css+0x370/0x370 [ 2663.207304][ T1196] ? __virt_addr_valid+0x61/0x2e0 [ 2663.212386][ T1196] ? kill_css+0x370/0x370 [ 2663.216747][ T1196] kernfs_fop_write_iter+0x3f1/0x600 [ 2663.222103][ T1196] vfs_write+0x9ed/0xdd0 [ 2663.226390][ T1196] ? kernel_write+0x630/0x630 [ 2663.231110][ T1196] ? __fget_files+0x26a/0x440 [ 2663.235938][ T1196] ksys_write+0x12b/0x250 [ 2663.240311][ T1196] ? __ia32_sys_read+0xb0/0xb0 [ 2663.245121][ T1196] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2663.251065][ T1196] do_syscall_64+0x39/0xb0 [ 2663.255531][ T1196] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2663.261466][ T1196] RIP: 0033:0x7fcccd48c0c9 [ 2663.265912][ T1196] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2663.285559][ T1196] RSP: 002b:00007fccce218168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2663.294012][ T1196] RAX: ffffffffffffffda RBX: 00007fcccd5abf80 RCX: 00007fcccd48c0c9 [ 2663.302017][ T1196] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000004 [ 2663.310031][ T1196] RBP: 00007fcccd4e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2663.318038][ T1196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2663.326045][ T1196] R13: 00007ffeac8c92ef R14: 00007fccce218300 R15: 0000000000022000 [ 2663.334079][ T1196] [ 2663.352529][ T1196] memory: usage 568kB, limit 0kB, failcnt 2325 [ 2663.358854][ T1196] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2663.375919][ T1069] 8021q: adding VLAN 0 to HW filter on device team0 [ 2663.396930][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2663.413001][ T1196] Memory cgroup stats for /syz0: [ 2663.413216][ T1196] anon 114688 [ 2663.413216][ T1196] file 184320 [ 2663.413216][ T1196] kernel 274432 [ 2663.413216][ T1196] kernel_stack 65536 [ 2663.413216][ T1196] pagetables 81920 [ 2663.413216][ T1196] sec_pagetables 0 [ 2663.413216][ T1196] percpu 208 [ 2663.413216][ T1196] sock 0 [ 2663.413216][ T1196] vmalloc 4096 [ 2663.413216][ T1196] shmem 184320 [ 2663.413216][ T1196] zswap 0 [ 2663.413216][ T1196] zswapped 0 [ 2663.413216][ T1196] file_mapped 184320 [ 2663.413216][ T1196] file_dirty 0 [ 2663.413216][ T1196] file_writeback 0 [ 2663.413216][ T1196] swapcached 0 [ 2663.413216][ T1196] anon_thp 0 [ 2663.413216][ T1196] file_thp 0 [ 2663.413216][ T1196] shmem_thp 0 [ 2663.413216][ T1196] inactive_anon 176128 [ 2663.413216][ T1196] active_anon 122880 [ 2663.413216][ T1196] inactive_file 0 [ 2663.413216][ T1196] active_file 0 [ 2663.413216][ T1196] unevictable 0 [ 2663.413216][ T1196] slab_reclaimable 17408 [ 2663.413216][ T1196] slab_unreclaimable 77856 [ 2663.413216][ T1196] slab 95264 [ 2663.515452][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2663.534452][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2663.542832][ T5108] Bluetooth: hci3: command 0x0419 tx timeout [ 2663.553041][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2663.561762][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2663.573889][ T1196] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1195,uid=0 10:13:53 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:53 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r1}, 0x10) write$cgroup_int(r0, &(0x7f0000000600), 0x12) 10:13:53 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:53 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x7, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x100, 0x0, 0x100, 0x10000000, 0x9}, r0, 0xb, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_int(r3, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='cgroup\x00') r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, r2, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 2663.593520][ T1196] Memory cgroup out of memory: Killed process 1195 (syz-executor.0) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2663.651389][ T5190] device hsr_slave_0 left promiscuous mode [ 2663.689261][ T1217] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 10:13:53 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r1}, 0x10) write$cgroup_int(r0, &(0x7f0000000600), 0x12) [ 2663.717538][ T5190] device hsr_slave_1 left promiscuous mode [ 2663.729443][ T5190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2663.772637][ T5190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2663.780748][ T1217] CPU: 1 PID: 1217 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2663.791126][ T1217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2663.801194][ T1217] Call Trace: [ 2663.804478][ T1217] [ 2663.807452][ T1217] dump_stack_lvl+0xd1/0x138 [ 2663.812075][ T1217] dump_header+0x10b/0x85f [ 2663.816526][ T1217] oom_kill_process.cold+0x10/0x15 [ 2663.821779][ T1217] out_of_memory+0x35c/0x14a0 [ 2663.826486][ T1217] ? oom_killer_disable+0x280/0x280 [ 2663.831716][ T1217] ? find_held_lock+0x2d/0x110 [ 2663.836507][ T1217] mem_cgroup_out_of_memory+0x206/0x270 [ 2663.842161][ T1217] ? mem_cgroup_margin+0x130/0x130 [ 2663.847316][ T1217] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2663.853144][ T1217] memory_max_write+0x2f9/0x3c0 [ 2663.858016][ T1217] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2663.864100][ T1217] ? lock_release+0x810/0x810 [ 2663.868792][ T1217] cgroup_file_write+0x1e2/0x770 [ 2663.873765][ T1217] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2663.879882][ T1217] ? kill_css+0x370/0x370 [ 2663.884240][ T1217] ? __virt_addr_valid+0x61/0x2e0 [ 2663.889382][ T1217] ? kill_css+0x370/0x370 [ 2663.893726][ T1217] kernfs_fop_write_iter+0x3f1/0x600 [ 2663.899038][ T1217] vfs_write+0x9ed/0xdd0 [ 2663.903299][ T1217] ? kernel_write+0x630/0x630 [ 2663.908022][ T1217] ? __fget_files+0x26a/0x440 [ 2663.912729][ T1217] ksys_write+0x12b/0x250 [ 2663.917071][ T1217] ? __ia32_sys_read+0xb0/0xb0 [ 2663.921872][ T1217] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2663.927783][ T1217] do_syscall_64+0x39/0xb0 [ 2663.932218][ T1217] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2663.938126][ T1217] RIP: 0033:0x7fbc7ae8c0c9 [ 2663.942552][ T1217] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2663.962177][ T1217] RSP: 002b:00007fbc7bcc7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2663.970601][ T1217] RAX: ffffffffffffffda RBX: 00007fbc7afabf80 RCX: 00007fbc7ae8c0c9 [ 2663.978595][ T1217] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 2663.986574][ T1217] RBP: 00007fbc7aee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2663.994555][ T1217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2664.002539][ T1217] R13: 00007ffde571309f R14: 00007fbc7bcc7300 R15: 0000000000022000 [ 2664.010540][ T1217] [ 2664.055019][ T5190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2664.092396][ T5190] batman_adv: batadv0: Removing interface: batadv_slave_1 10:13:54 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2664.105290][ T5190] device bridge_slave_1 left promiscuous mode [ 2664.111586][ T5190] bridge0: port 2(bridge_slave_1) entered disabled state [ 2664.196910][ T5190] device bridge_slave_0 left promiscuous mode [ 2664.212560][ T5190] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:54 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2664.293108][ T5190] device hsr_slave_0 left promiscuous mode [ 2664.303042][ T5190] device hsr_slave_1 left promiscuous mode [ 2664.323725][ T5190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2664.357435][ T5190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2664.372731][ T1217] memory: usage 8564kB, limit 0kB, failcnt 2068 [ 2664.409389][ T1217] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2664.429614][ T5190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2664.469087][ T1217] Memory cgroup stats for /syz3: [ 2664.472690][ T5190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2664.474600][ T1217] anon 139264 [ 2664.474600][ T1217] file 8347648 [ 2664.474600][ T1217] kernel 282624 [ 2664.474600][ T1217] kernel_stack 65536 [ 2664.474600][ T1217] pagetables 81920 [ 2664.474600][ T1217] sec_pagetables 0 [ 2664.474600][ T1217] percpu 64 [ 2664.474600][ T1217] sock 0 [ 2664.474600][ T1217] vmalloc 0 [ 2664.474600][ T1217] shmem 8347648 [ 2664.474600][ T1217] zswap 0 [ 2664.474600][ T1217] zswapped 0 [ 2664.474600][ T1217] file_mapped 151552 [ 2664.474600][ T1217] file_dirty 0 [ 2664.474600][ T1217] file_writeback 0 [ 2664.474600][ T1217] swapcached 0 [ 2664.474600][ T1217] anon_thp 0 [ 2664.474600][ T1217] file_thp 0 [ 2664.474600][ T1217] shmem_thp 0 [ 2664.474600][ T1217] inactive_anon 139264 [ 2664.474600][ T1217] active_anon 8347648 [ 2664.474600][ T1217] inactive_file 0 [ 2664.474600][ T1217] active_file 0 [ 2664.474600][ T1217] unevictable 0 [ 2664.474600][ T1217] slab_reclaimable 36312 [ 2664.474600][ T1217] slab_unreclaimable 72456 [ 2664.474600][ T1217] slab 108768 [ 2664.602743][ T5190] device bridge_slave_1 left promiscuous mode [ 2664.609033][ T5190] bridge0: port 2(bridge_slave_1) entered disabled state [ 2664.654073][ T5190] device bridge_slave_0 left promiscuous mode [ 2664.660646][ T5190] bridge0: port 1(bridge_slave_0) entered disabled state [ 2664.711775][ T5190] device veth1_macvtap left promiscuous mode [ 2664.730208][ T5190] device veth0_macvtap left promiscuous mode [ 2664.751090][ T5190] device veth1_vlan left promiscuous mode [ 2664.772478][ T5190] device veth0_vlan left promiscuous mode [ 2664.780976][ T5190] device veth1_macvtap left promiscuous mode [ 2664.792723][ T5190] device veth0_macvtap left promiscuous mode [ 2664.798987][ T5190] device veth1_vlan left promiscuous mode [ 2664.822688][ T5190] device veth0_vlan left promiscuous mode [ 2664.836749][ T1217] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=1214,uid=0 [ 2664.875978][ T1217] Memory cgroup out of memory: Killed process 1214 (syz-executor.3) total-vm:56588kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2664.896869][ T1039] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2664.942957][ T1039] CPU: 0 PID: 1039 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2664.953359][ T1039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2664.963447][ T1039] Call Trace: [ 2664.966755][ T1039] [ 2664.969717][ T1039] dump_stack_lvl+0xd1/0x138 [ 2664.974355][ T1039] dump_header+0x10b/0x85f [ 2664.978825][ T1039] oom_kill_process.cold+0x10/0x15 [ 2664.983992][ T1039] out_of_memory+0x35c/0x14a0 [ 2664.988725][ T1039] ? oom_killer_disable+0x280/0x280 [ 2664.993983][ T1039] ? find_held_lock+0x2d/0x110 [ 2664.998793][ T1039] mem_cgroup_out_of_memory+0x206/0x270 [ 2665.004389][ T1039] ? mem_cgroup_margin+0x130/0x130 [ 2665.009543][ T1039] ? lock_downgrade+0x6e0/0x6e0 [ 2665.014445][ T1039] try_charge_memcg+0xefb/0x12f0 [ 2665.019430][ T1039] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2665.025447][ T1039] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2665.031214][ T1039] ? lock_downgrade+0x6e0/0x6e0 [ 2665.036126][ T1039] obj_cgroup_charge+0x2af/0x5e0 [ 2665.041107][ T1039] kmem_cache_alloc_lru+0x145/0x760 [ 2665.046330][ T1039] ? __d_alloc+0x32/0x980 [ 2665.050684][ T1039] __d_alloc+0x32/0x980 [ 2665.054866][ T1039] d_alloc+0x4e/0x240 [ 2665.058892][ T1039] d_alloc_parallel+0xe8/0x1410 [ 2665.063837][ T1039] ? __d_lookup_rcu+0x4c0/0x4c0 [ 2665.068714][ T1039] ? lockdep_init_map_type+0x21e/0x800 [ 2665.074210][ T1039] ? lockdep_init_map_type+0x21e/0x800 [ 2665.079689][ T1039] __lookup_slow+0x193/0x460 [ 2665.084470][ T1039] ? __lookup_hash+0x180/0x180 [ 2665.089396][ T1039] ? scarlett2_usb_get_mix+0x2f6/0x318 [ 2665.094903][ T1039] ? scarlett2_usb_get_mix+0x2f6/0x318 [ 2665.100395][ T1039] ? lookup_fast+0x14e/0x520 [ 2665.105012][ T1039] walk_component+0x33f/0x5a0 [ 2665.109713][ T1039] path_lookupat+0x1ba/0x840 [ 2665.114326][ T1039] filename_lookup+0x1d2/0x590 [ 2665.119107][ T1039] ? may_linkat+0x500/0x500 [ 2665.123620][ T1039] ? __might_fault+0xd9/0x180 [ 2665.128319][ T1039] ? __phys_addr_symbol+0x30/0x70 [ 2665.133355][ T1039] ? __check_object_size+0x2e2/0x5a0 [ 2665.138658][ T1039] ? strncpy_from_user+0x28b/0x3c0 [ 2665.143792][ T1039] ? getname_flags.part.0+0x1dd/0x4f0 [ 2665.149186][ T1039] user_path_at_empty+0x46/0x60 [ 2665.154160][ T1039] __x64_sys_umount+0xfc/0x190 [ 2665.158953][ T1039] ? path_umount+0x10b0/0x10b0 [ 2665.163740][ T1039] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2665.169666][ T1039] do_syscall_64+0x39/0xb0 [ 2665.174109][ T1039] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2665.180011][ T1039] RIP: 0033:0x7fcccd48d537 [ 2665.184429][ T1039] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2665.204041][ T1039] RSP: 002b:00007ffeac8c8448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2665.212464][ T1039] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcccd48d537 [ 2665.220437][ T1039] RDX: 00007ffeac8c851a RSI: 000000000000000a RDI: 00007ffeac8c8510 [ 2665.228582][ T1039] RBP: 00007ffeac8c8510 R08: 00000000ffffffff R09: 00007ffeac8c82e0 [ 2665.236555][ T1039] R10: 00005555562b4873 R11: 0000000000000246 R12: 00007fcccd4e6b24 [ 2665.244527][ T1039] R13: 00007ffeac8c95d0 R14: 00005555562b4810 R15: 00007ffeac8c9610 [ 2665.252517][ T1039] [ 2665.280969][ T1039] memory: usage 304kB, limit 0kB, failcnt 2347 [ 2665.309210][ T1039] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2665.319443][ T1039] Memory cgroup stats for /syz0: [ 2665.319645][ T1039] anon 45056 [ 2665.319645][ T1039] file 184320 [ 2665.319645][ T1039] kernel 81920 [ 2665.319645][ T1039] kernel_stack 0 [ 2665.319645][ T1039] pagetables 8192 [ 2665.319645][ T1039] sec_pagetables 0 [ 2665.319645][ T1039] percpu 64 [ 2665.319645][ T1039] sock 0 [ 2665.319645][ T1039] vmalloc 0 [ 2665.319645][ T1039] shmem 184320 [ 2665.319645][ T1039] zswap 0 [ 2665.319645][ T1039] zswapped 0 [ 2665.319645][ T1039] file_mapped 184320 [ 2665.319645][ T1039] file_dirty 0 [ 2665.319645][ T1039] file_writeback 0 [ 2665.319645][ T1039] swapcached 0 [ 2665.319645][ T1039] anon_thp 0 [ 2665.319645][ T1039] file_thp 0 [ 2665.319645][ T1039] shmem_thp 0 [ 2665.319645][ T1039] inactive_anon 106496 [ 2665.319645][ T1039] active_anon 122880 [ 2665.319645][ T1039] inactive_file 0 [ 2665.319645][ T1039] active_file 0 [ 2665.319645][ T1039] unevictable 0 [ 2665.319645][ T1039] slab_reclaimable 13120 [ 2665.319645][ T1039] slab_unreclaimable 44728 [ 2665.319645][ T1039] slab 57848 [ 2665.419070][ T1039] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1039,uid=0 [ 2665.434839][ T1039] Memory cgroup out of memory: Killed process 1039 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2665.929297][ T5190] team0 (unregistering): Port device team_slave_1 removed [ 2665.981286][ T5190] team0 (unregistering): Port device team_slave_0 removed [ 2666.029727][ T5190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2666.065842][ T5190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2666.139946][ T5113] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2666.153866][ T5113] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2666.162205][ T5113] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2666.170650][ T5113] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2666.186559][ T5113] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2666.194337][ T5113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2666.194868][ T5190] bond0 (unregistering): Released all slaves [ 2666.345660][ T5190] team0 (unregistering): Port device team_slave_1 removed [ 2666.361843][ T5190] team0 (unregistering): Port device team_slave_0 removed [ 2666.379405][ T5190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2666.393275][ T5190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2666.459079][ T5190] bond0 (unregistering): Released all slaves [ 2666.537209][ T1057] device veth0_macvtap entered promiscuous mode [ 2666.562808][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2666.571287][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2666.580418][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2666.597487][T27665] bridge0: port 1(bridge_slave_0) entered blocking state [ 2666.604628][T27665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2666.654690][ T1057] device veth1_macvtap entered promiscuous mode [ 2666.692672][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2666.701453][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2666.711157][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2666.720517][T27660] bridge0: port 2(bridge_slave_1) entered blocking state [ 2666.727703][T27660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2666.736272][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2666.745787][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2666.772150][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2666.798261][ T1057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2666.814028][ T1057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2666.836340][ T1057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2666.856411][ T1057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2666.878344][ T1057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2666.898368][ T1057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2666.925599][ T1057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2666.962576][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2666.970729][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2666.990184][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2667.002154][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2667.023192][ T1057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2667.034209][ T1057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2667.044390][ T1057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2667.055515][ T1057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2667.066110][ T1057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2667.077265][ T1057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2667.099542][ T1057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2667.111400][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2667.133401][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2667.141881][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2667.161102][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2667.174314][ T1069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2667.195931][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2667.223935][ T1057] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2667.244760][ T1057] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2667.260384][ T1057] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2667.271954][ T1057] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2667.291687][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2667.303014][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2667.651939][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2667.682352][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2667.727398][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2667.776880][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2667.802846][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2667.813155][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2667.905764][ T1248] chnl_net:caif_netlink_parms(): no params data found [ 2667.996258][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2668.014843][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2668.081290][ T1069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2668.234314][ T1248] bridge0: port 1(bridge_slave_0) entered blocking state [ 2668.241518][ T1248] bridge0: port 1(bridge_slave_0) entered disabled state [ 2668.264200][ T5108] Bluetooth: hci1: command 0x0409 tx timeout [ 2668.376216][ T1248] device bridge_slave_0 entered promiscuous mode [ 2668.406771][ T1278] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2668.420067][ T1248] bridge0: port 2(bridge_slave_1) entered blocking state [ 2668.427701][ T1278] CPU: 1 PID: 1278 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2668.438076][ T1278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2668.448161][ T1278] Call Trace: [ 2668.451475][ T1278] [ 2668.454432][ T1278] dump_stack_lvl+0xd1/0x138 [ 2668.454865][ T1248] bridge0: port 2(bridge_slave_1) entered disabled state [ 2668.459041][ T1278] dump_header+0x10b/0x85f [ 2668.459091][ T1278] oom_kill_process.cold+0x10/0x15 [ 2668.475651][ T1278] out_of_memory+0x35c/0x14a0 [ 2668.480386][ T1278] ? oom_killer_disable+0x280/0x280 [ 2668.485639][ T1278] ? mark_held_locks+0x9f/0xe0 [ 2668.490459][ T1278] mem_cgroup_out_of_memory+0x206/0x270 [ 2668.495783][ T1248] device bridge_slave_1 entered promiscuous mode [ 2668.496033][ T1278] ? mem_cgroup_margin+0x130/0x130 [ 2668.507522][ T1278] memory_max_write+0x2f9/0x3c0 [ 2668.512421][ T1278] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2668.518530][ T1278] ? lock_release+0x810/0x810 [ 2668.523249][ T1278] cgroup_file_write+0x1e2/0x770 [ 2668.528233][ T1278] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2668.534342][ T1278] ? kill_css+0x370/0x370 [ 2668.538713][ T1278] ? __virt_addr_valid+0x61/0x2e0 [ 2668.543882][ T1278] ? kill_css+0x370/0x370 [ 2668.548251][ T1278] kernfs_fop_write_iter+0x3f1/0x600 [ 2668.553591][ T1278] vfs_write+0x9ed/0xdd0 [ 2668.557869][ T1278] ? kernel_write+0x630/0x630 [ 2668.562583][ T1278] ? __fget_files+0x26a/0x440 [ 2668.567300][ T1278] ksys_write+0x12b/0x250 [ 2668.571648][ T1278] ? __ia32_sys_read+0xb0/0xb0 [ 2668.576427][ T1278] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2668.582358][ T1278] do_syscall_64+0x39/0xb0 [ 2668.586804][ T1278] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2668.592710][ T1278] RIP: 0033:0x7ff9d108c0c9 [ 2668.597145][ T1278] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2668.616764][ T1278] RSP: 002b:00007ff9d1dea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2668.625189][ T1278] RAX: ffffffffffffffda RBX: 00007ff9d11abf80 RCX: 00007ff9d108c0c9 [ 2668.633165][ T1278] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 2668.641159][ T1278] RBP: 00007ff9d10e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2668.649156][ T1278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2668.657135][ T1278] R13: 00007ffda6c76adf R14: 00007ff9d1dea300 R15: 0000000000022000 [ 2668.665139][ T1278] [ 2668.735173][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2668.753154][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2668.793235][ T1248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2668.821350][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2668.836642][ T1278] memory: usage 508kB, limit 0kB, failcnt 2530 [ 2668.839729][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2668.865863][ T1248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2668.885631][ T1278] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2668.901803][ T1069] device veth0_vlan entered promiscuous mode [ 2668.924514][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2668.932248][ T1278] Memory cgroup stats for /syz2: [ 2668.942567][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2668.962078][ T1278] anon 110592 [ 2668.962078][ T1278] file 131072 [ 2668.962078][ T1278] kernel 270336 [ 2668.962078][ T1278] kernel_stack 65536 [ 2668.962078][ T1278] pagetables 77824 [ 2668.962078][ T1278] sec_pagetables 0 [ 2668.962078][ T1278] percpu 208 [ 2668.962078][ T1278] sock 0 [ 2668.962078][ T1278] vmalloc 4096 [ 2668.962078][ T1278] shmem 126976 [ 2668.962078][ T1278] zswap 0 [ 2668.962078][ T1278] zswapped 0 [ 2668.962078][ T1278] file_mapped 126976 [ 2668.962078][ T1278] file_dirty 4096 [ 2668.962078][ T1278] file_writeback 0 [ 2668.962078][ T1278] swapcached 0 [ 2668.962078][ T1278] anon_thp 0 [ 2668.962078][ T1278] file_thp 0 [ 2668.962078][ T1278] shmem_thp 0 [ 2668.962078][ T1278] inactive_anon 122880 [ 2668.962078][ T1278] active_anon 114688 [ 2668.962078][ T1278] inactive_file 0 [ 2668.962078][ T1278] active_file 4096 [ 2668.962078][ T1278] unevictable 0 [ 2668.962078][ T1278] slab_reclaimable 14920 [ 2668.962078][ T1278] slab_unreclaimable 77856 [ 2668.962078][ T1278] slab 92776 [ 2669.127036][ T1248] team0: Port device team_slave_0 added [ 2669.147012][ T1248] team0: Port device team_slave_1 added [ 2669.168241][ T1069] device veth1_vlan entered promiscuous mode [ 2669.236760][ T1248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2669.252382][ T1278] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=1277,uid=0 [ 2669.262555][ T1248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2669.282458][ T1278] Memory cgroup out of memory: Killed process 1278 (syz-executor.2) total-vm:54540kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:13:59 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:13:59 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2669.345164][ T1248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2669.396090][ T1057] syz-executor.2 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=0 [ 2669.424363][ T1248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2669.431350][ T1248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2669.431354][ T1057] CPU: 1 PID: 1057 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2669.431382][ T1057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2669.477591][ T1057] Call Trace: [ 2669.480873][ T1057] [ 2669.483820][ T1057] dump_stack_lvl+0xd1/0x138 [ 2669.488428][ T1057] dump_header+0x10b/0x85f [ 2669.492867][ T1057] oom_kill_process.cold+0x10/0x15 [ 2669.498087][ T1057] out_of_memory+0x35c/0x14a0 [ 2669.502786][ T1057] ? find_held_lock+0x2d/0x110 [ 2669.507567][ T1057] ? oom_killer_disable+0x280/0x280 [ 2669.512785][ T1057] ? find_held_lock+0x2d/0x110 [ 2669.517567][ T1057] mem_cgroup_out_of_memory+0x206/0x270 [ 2669.523128][ T1057] ? mem_cgroup_margin+0x130/0x130 [ 2669.528255][ T1057] ? lock_downgrade+0x6e0/0x6e0 [ 2669.533127][ T1057] try_charge_memcg+0xefb/0x12f0 [ 2669.538080][ T1057] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2669.544067][ T1057] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2669.549811][ T1057] ? lock_downgrade+0x6e0/0x6e0 [ 2669.554671][ T1057] ? lock_downgrade+0x6e0/0x6e0 [ 2669.559529][ T1057] ? rcu_read_unlock+0x9/0x60 [ 2669.564229][ T1057] obj_cgroup_charge+0x2af/0x5e0 [ 2669.569179][ T1057] ? __alloc_file+0x21/0x270 [ 2669.573781][ T1057] kmem_cache_alloc+0xb5/0x430 [ 2669.578555][ T1057] __alloc_file+0x21/0x270 [ 2669.582983][ T1057] alloc_empty_file+0x71/0x170 [ 2669.587770][ T1057] path_openat+0xe1/0x2a50 [ 2669.592210][ T1057] ? path_lookupat+0x840/0x840 [ 2669.596996][ T1057] do_filp_open+0x1ba/0x410 [ 2669.601518][ T1057] ? may_open_dev+0xf0/0xf0 [ 2669.606032][ T1057] ? find_held_lock+0x2d/0x110 [ 2669.610822][ T1057] ? do_raw_spin_lock+0x124/0x2b0 [ 2669.615853][ T1057] ? rwlock_bug.part.0+0x90/0x90 [ 2669.620807][ T1057] ? _raw_spin_unlock+0x28/0x40 [ 2669.625666][ T1057] ? alloc_fd+0x2d8/0x6d0 [ 2669.630011][ T1057] do_sys_openat2+0x16d/0x4c0 [ 2669.634691][ T1057] ? path_umount+0x6b8/0x10b0 [ 2669.639376][ T1057] ? putname+0x102/0x140 [ 2669.643631][ T1057] ? build_open_flags+0x6f0/0x6f0 [ 2669.648751][ T1057] ? may_mount+0xa0/0xa0 [ 2669.653009][ T1057] __x64_sys_openat+0x143/0x1f0 [ 2669.657869][ T1057] ? __ia32_sys_open+0x1c0/0x1c0 [ 2669.662817][ T1057] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2669.668732][ T1057] do_syscall_64+0x39/0xb0 [ 2669.673165][ T1057] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2669.679066][ T1057] RIP: 0033:0x7ff9d108bc38 [ 2669.683488][ T1057] Code: 24 18 31 c0 41 83 e2 40 75 40 89 f0 25 00 00 41 00 3d 00 00 41 00 74 32 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 40 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 2669.703109][ T1057] RSP: 002b:00007ffda6c75bd0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 2669.711532][ T1057] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff9d108bc38 [ 2669.719508][ T1057] RDX: 0000000000090800 RSI: 00007ffda6c76dc0 RDI: 00000000ffffff9c [ 2669.727484][ T1057] RBP: 00007ffda6c76d9c R08: 0000000000090800 R09: 00007ffda6c76dc0 [ 2669.735459][ T1057] R10: 0000000000000000 R11: 0000000000000287 R12: 00007ff9d10e6b24 [ 2669.743524][ T1057] R13: 00007ffda6c76dc0 R14: 0000000000000009 R15: 00007ffda6c76e00 [ 2669.751601][ T1057] [ 2669.799943][ T1248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2669.829466][ T1069] device veth0_macvtap entered promiscuous mode [ 2669.844821][ T1057] memory: usage 240kB, limit 0kB, failcnt 2549 [ 2669.851320][ T1057] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2669.852424][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2669.867808][ T1057] Memory cgroup stats for /syz2: [ 2669.868021][ T1057] anon 36864 [ 2669.868021][ T1057] file 131072 [ 2669.868021][ T1057] kernel 77824 [ 2669.868021][ T1057] kernel_stack 0 [ 2669.868021][ T1057] pagetables 8192 [ 2669.868021][ T1057] sec_pagetables 0 [ 2669.868021][ T1057] percpu 64 [ 2669.868021][ T1057] sock 0 [ 2669.868021][ T1057] vmalloc 0 [ 2669.868021][ T1057] shmem 126976 [ 2669.868021][ T1057] zswap 0 [ 2669.868021][ T1057] zswapped 0 [ 2669.868021][ T1057] file_mapped 126976 [ 2669.868021][ T1057] file_dirty 4096 [ 2669.868021][ T1057] file_writeback 0 [ 2669.868021][ T1057] swapcached 0 [ 2669.868021][ T1057] anon_thp 0 [ 2669.868021][ T1057] file_thp 0 [ 2669.868021][ T1057] shmem_thp 0 [ 2669.868021][ T1057] inactive_anon 49152 [ 2669.868021][ T1057] active_anon 114688 [ 2669.868021][ T1057] inactive_file 0 [ 2669.868021][ T1057] active_file 4096 [ 2669.868021][ T1057] unevictable 0 [ 2669.868021][ T1057] slab_reclaimable 9864 [ 2669.868021][ T1057] slab_unreclaimable 44080 [ 2669.868021][ T1057] slab 53944 [ 2669.877737][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2669.982203][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2670.008078][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2670.022758][ T1057] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=1057,uid=0 [ 2670.046484][ T1057] Memory cgroup out of memory: Killed process 1057 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2670.074881][ T1069] device veth1_macvtap entered promiscuous mode [ 2670.086180][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2670.136499][ T1248] device hsr_slave_0 entered promiscuous mode [ 2670.172745][ T1248] device hsr_slave_1 entered promiscuous mode [ 2670.186614][ T1248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2670.216295][ T1248] Cannot create hsr debugfs directory [ 2670.230955][ T1069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2670.267651][ T1069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2670.277996][ T1069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2670.289103][ T1069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2670.312191][ T1069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2670.332100][ T1069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2670.342361][ T1069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2670.354012][ T5108] Bluetooth: hci1: command 0x041b tx timeout [ 2670.371134][ T1069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2670.383653][ T1069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2670.439573][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2670.448601][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2670.518007][ T1069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2670.540027][ T1069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2670.558354][ T1069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2670.570603][ T1069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2670.588881][ T1069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2670.613735][ T1069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2670.652527][ T1069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2670.671851][ T1069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2670.692906][ T1069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2670.724491][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2670.741437][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2670.766606][ T1069] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2670.787028][ T1069] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2670.801249][ T1069] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2670.820065][ T1069] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2671.076867][ T8036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2671.102484][ T8036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2671.159733][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2671.173581][ T8036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2671.181658][ T8036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2671.212850][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2671.365780][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2671.389389][ T1308] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2671.460006][ T1308] CPU: 1 PID: 1308 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2671.470418][ T1308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2671.480507][ T1308] Call Trace: [ 2671.483843][ T1308] [ 2671.486810][ T1308] dump_stack_lvl+0xd1/0x138 [ 2671.491451][ T1308] dump_header+0x10b/0x85f [ 2671.495917][ T1308] oom_kill_process.cold+0x10/0x15 [ 2671.501073][ T1308] out_of_memory+0x35c/0x14a0 [ 2671.505802][ T1308] ? oom_killer_disable+0x280/0x280 [ 2671.511048][ T1308] ? find_held_lock+0x2d/0x110 [ 2671.515856][ T1308] mem_cgroup_out_of_memory+0x206/0x270 [ 2671.521449][ T1308] ? mem_cgroup_margin+0x130/0x130 [ 2671.526695][ T1308] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2671.532528][ T1308] memory_max_write+0x2f9/0x3c0 [ 2671.537394][ T1308] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2671.543480][ T1308] ? lock_release+0x810/0x810 [ 2671.548171][ T1308] cgroup_file_write+0x1e2/0x770 [ 2671.553127][ T1308] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2671.559206][ T1308] ? kill_css+0x370/0x370 [ 2671.563547][ T1308] ? __virt_addr_valid+0x61/0x2e0 [ 2671.568596][ T1308] ? kill_css+0x370/0x370 [ 2671.572941][ T1308] kernfs_fop_write_iter+0x3f1/0x600 [ 2671.578255][ T1308] vfs_write+0x9ed/0xdd0 [ 2671.582519][ T1308] ? kernel_write+0x630/0x630 [ 2671.587211][ T1308] ? __fget_files+0x26a/0x440 [ 2671.591917][ T1308] ksys_write+0x12b/0x250 [ 2671.596256][ T1308] ? __ia32_sys_read+0xb0/0xb0 [ 2671.601037][ T1308] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2671.606945][ T1308] do_syscall_64+0x39/0xb0 [ 2671.611381][ T1308] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2671.617295][ T1308] RIP: 0033:0x7f32f228c0c9 [ 2671.621736][ T1308] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2671.641351][ T1308] RSP: 002b:00007f32f2f0d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2671.649774][ T1308] RAX: ffffffffffffffda RBX: 00007f32f23abf80 RCX: 00007f32f228c0c9 [ 2671.657754][ T1308] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 2671.665732][ T1308] RBP: 00007f32f22e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2671.673705][ T1308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2671.681688][ T1308] R13: 00007ffe45804bdf R14: 00007f32f2f0d300 R15: 0000000000022000 [ 2671.689685][ T1308] [ 2671.905427][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2672.157945][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2672.261517][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2672.314081][ T1308] memory: usage 540kB, limit 0kB, failcnt 2017 [ 2672.320305][ T1308] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2672.342839][ T1308] Memory cgroup stats for /syz1: [ 2672.343062][ T1308] anon 110592 [ 2672.343062][ T1308] file 180224 [ 2672.343062][ T1308] kernel 229376 [ 2672.343062][ T1308] kernel_stack 32768 [ 2672.343062][ T1308] pagetables 77824 [ 2672.343062][ T1308] sec_pagetables 0 [ 2672.343062][ T1308] percpu 64 [ 2672.343062][ T1308] sock 0 [ 2672.343062][ T1308] vmalloc 0 [ 2672.343062][ T1308] shmem 180224 [ 2672.343062][ T1308] zswap 0 [ 2672.343062][ T1308] zswapped 0 [ 2672.343062][ T1308] file_mapped 180224 [ 2672.343062][ T1308] file_dirty 0 [ 2672.343062][ T1308] file_writeback 0 [ 2672.343062][ T1308] swapcached 0 [ 2672.343062][ T1308] anon_thp 0 [ 2672.343062][ T1308] file_thp 0 [ 2672.343062][ T1308] shmem_thp 0 [ 2672.343062][ T1308] inactive_anon 180224 [ 2672.343062][ T1308] active_anon 110592 [ 2672.343062][ T1308] inactive_file 0 [ 2672.343062][ T1308] active_file 0 [ 2672.343062][ T1308] unevictable 0 [ 2672.343062][ T1308] slab_reclaimable 17288 [ 2672.343062][ T1308] slab_unreclaimable 72456 [ 2672.343062][ T1308] slab 89744 [ 2672.439298][ T5108] Bluetooth: hci1: command 0x040f tx timeout [ 2672.472509][ T1308] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=1307,uid=0 [ 2672.510571][ T1248] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2672.524032][ T1308] Memory cgroup out of memory: Killed process 1308 (syz-executor.1) total-vm:54540kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2672.548026][ T1248] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2672.580190][ T1248] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2672.610843][ T1248] netdevsim netdevsim4 netdevsim3: renamed from eth3 10:14:02 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:14:02 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:14:02 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:14:02 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:14:02 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2672.708260][ T672] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 2672.748699][ T672] CPU: 0 PID: 672 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2672.759003][ T672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2672.769093][ T672] Call Trace: [ 2672.772394][ T672] [ 2672.775353][ T672] dump_stack_lvl+0xd1/0x138 [ 2672.779983][ T672] dump_header+0x10b/0x85f [ 2672.784447][ T672] oom_kill_process.cold+0x10/0x15 [ 2672.789605][ T672] out_of_memory+0x35c/0x14a0 [ 2672.794339][ T672] ? find_held_lock+0x2d/0x110 [ 2672.799142][ T672] ? oom_killer_disable+0x280/0x280 [ 2672.804389][ T672] ? find_held_lock+0x2d/0x110 [ 2672.809197][ T672] mem_cgroup_out_of_memory+0x206/0x270 [ 2672.814798][ T672] ? mem_cgroup_margin+0x130/0x130 [ 2672.819947][ T672] ? lock_downgrade+0x6e0/0x6e0 [ 2672.824856][ T672] try_charge_memcg+0xefb/0x12f0 [ 2672.829831][ T672] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2672.835850][ T672] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2672.841614][ T672] ? lock_downgrade+0x6e0/0x6e0 [ 2672.846493][ T672] ? lock_downgrade+0x6e0/0x6e0 [ 2672.851371][ T672] ? rcu_read_unlock+0x9/0x60 [ 2672.856102][ T672] obj_cgroup_charge+0x2af/0x5e0 [ 2672.861082][ T672] ? copy_process+0x3aa/0x7520 [ 2672.865870][ T672] kmem_cache_alloc_node+0xb7/0x460 [ 2672.871111][ T672] copy_process+0x3aa/0x7520 [ 2672.875742][ T672] ? _raw_spin_unlock+0x28/0x40 [ 2672.880625][ T672] ? wp_page_reuse+0x197/0x570 [ 2672.885423][ T672] ? do_wp_page+0x844/0x3370 [ 2672.890070][ T672] ? __cleanup_sighand+0xb0/0xb0 [ 2672.895037][ T672] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2672.900456][ T672] ? rwlock_bug.part.0+0x90/0x90 [ 2672.905419][ T672] ? lock_chain_count+0x20/0x20 [ 2672.910305][ T672] kernel_clone+0xeb/0x990 [ 2672.914756][ T672] ? create_io_thread+0xf0/0xf0 [ 2672.919643][ T672] ? find_held_lock+0x2d/0x110 [ 2672.924457][ T672] __do_sys_clone+0xba/0x100 [ 2672.929090][ T672] ? kernel_clone+0x990/0x990 [ 2672.933820][ T672] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2672.939760][ T672] do_syscall_64+0x39/0xb0 [ 2672.944211][ T672] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2672.950131][ T672] RIP: 0033:0x7fbc7ae89dfb [ 2672.954576][ T672] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2672.974302][ T672] RSP: 002b:00007ffde57132e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2672.982751][ T672] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbc7ae89dfb [ 2672.990749][ T672] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2672.999004][ T672] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555557398400 [ 2673.007000][ T672] R10: 00005555573986d0 R11: 0000000000000246 R12: 0000000000000001 [ 2673.014999][ T672] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffde57133c0 [ 2673.023023][ T672] [ 2673.033569][ T672] memory: usage 8276kB, limit 0kB, failcnt 2087 [ 2673.039860][ T672] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2673.047839][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2673.136023][ T672] Memory cgroup stats for /syz3: [ 2673.136211][ T672] anon 45056 [ 2673.136211][ T672] file 8347648 [ 2673.136211][ T672] kernel 81920 [ 2673.136211][ T672] kernel_stack 0 [ 2673.136211][ T672] pagetables 8192 [ 2673.136211][ T672] sec_pagetables 0 [ 2673.136211][ T672] percpu 0 [ 2673.136211][ T672] sock 0 [ 2673.136211][ T672] vmalloc 0 [ 2673.136211][ T672] shmem 8347648 [ 2673.136211][ T672] zswap 0 [ 2673.136211][ T672] zswapped 0 [ 2673.136211][ T672] file_mapped 122880 [ 2673.136211][ T672] file_dirty 0 [ 2673.136211][ T672] file_writeback 0 [ 2673.136211][ T672] swapcached 0 [ 2673.136211][ T672] anon_thp 0 [ 2673.136211][ T672] file_thp 0 [ 2673.136211][ T672] shmem_thp 0 [ 2673.136211][ T672] inactive_anon 45056 [ 2673.136211][ T672] active_anon 8347648 [ 2673.136211][ T672] inactive_file 0 [ 2673.136211][ T672] active_file 0 [ 2673.136211][ T672] unevictable 0 [ 2673.136211][ T672] slab_reclaimable 29448 [ 2673.136211][ T672] slab_unreclaimable 32296 [ 2673.136211][ T672] slab 61744 [ 2673.433224][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2673.489411][ T1248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2673.551314][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 10:14:03 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2673.608563][ T1248] 8021q: adding VLAN 0 to HW filter on device team0 [ 2673.675985][ T672] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=672,uid=0 [ 2673.695287][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2673.707307][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2673.747746][ T672] Memory cgroup out of memory: Killed process 672 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2673.789721][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2673.814896][ T1069] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2673.843432][ T1069] CPU: 0 PID: 1069 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2673.853821][ T1069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2673.863903][ T1069] Call Trace: [ 2673.867207][ T1069] [ 2673.870166][ T1069] dump_stack_lvl+0xd1/0x138 [ 2673.874796][ T1069] dump_header+0x10b/0x85f [ 2673.879262][ T1069] oom_kill_process.cold+0x10/0x15 [ 2673.884432][ T1069] out_of_memory+0x35c/0x14a0 [ 2673.889167][ T1069] ? oom_killer_disable+0x280/0x280 [ 2673.894440][ T1069] ? find_held_lock+0x2d/0x110 [ 2673.899280][ T1069] mem_cgroup_out_of_memory+0x206/0x270 [ 2673.904872][ T1069] ? mem_cgroup_margin+0x130/0x130 [ 2673.910030][ T1069] ? lock_downgrade+0x6e0/0x6e0 [ 2673.914923][ T1069] try_charge_memcg+0xefb/0x12f0 [ 2673.919904][ T1069] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2673.925927][ T1069] ? lock_downgrade+0x6e0/0x6e0 [ 2673.931260][ T1069] charge_memcg+0x90/0x3b0 [ 2673.935713][ T1069] __mem_cgroup_charge+0x2b/0x90 [ 2673.940221][ T1248] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2673.940658][ T1069] ? _compound_head+0x5d/0x150 [ 2673.955761][ T1069] __handle_mm_fault+0x187d/0x3c90 [ 2673.960913][ T1069] ? vm_iomap_memory+0x190/0x190 [ 2673.965905][ T1069] handle_mm_fault+0x1b6/0x850 [ 2673.970712][ T1069] do_user_addr_fault+0x475/0x1210 [ 2673.975884][ T1069] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2673.981481][ T1069] exc_page_fault+0x98/0x170 [ 2673.981686][ T1248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2673.986166][ T1069] asm_exc_page_fault+0x26/0x30 [ 2673.986193][ T1069] RIP: 0033:0x7f32f225a7d5 [ 2673.986213][ T1069] Code: e8 4b 8d 0c 2f 48 8b 6c 24 18 48 39 d3 48 89 4b 60 0f 95 c2 48 83 c8 01 0f b6 d2 48 c1 e2 02 4c 09 ea 48 83 ca 01 49 89 57 08 <48> 89 41 08 49 83 c7 10 eb b3 48 8d 3d 6a 0d 0a 00 e8 75 c9 ff ff [ 2674.025398][ T1069] RSP: 002b:00007ffe45803b80 EFLAGS: 00010206 [ 2674.031496][ T1069] RAX: 00000000000187c1 RBX: 00007f32f23885e0 RCX: 0000555557372840 [ 2674.039491][ T1069] RDX: 0000000000008041 RSI: 0000000000000000 RDI: 0000000000000004 [ 2674.047498][ T1069] RBP: 0000000000008030 R08: 0000000000000003 R09: 00007f32f2388640 [ 2674.055503][ T1069] R10: 0000000000000231 R11: 0000000000000000 R12: 0000000000000802 [ 2674.063535][ T1069] R13: 0000000000008040 R14: 0000000000000804 R15: 000055555736a800 [ 2674.071556][ T1069] [ 2674.078348][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2674.113566][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2674.149801][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 2674.156980][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2674.222723][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2674.260696][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2674.303291][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 2674.310476][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2674.369557][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2674.410764][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2674.436354][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2674.476360][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2674.502654][ T5108] Bluetooth: hci1: command 0x0419 tx timeout [ 2674.514569][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2674.528684][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2674.540458][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2674.553188][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2674.562965][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2674.572467][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2674.580544][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2674.772961][ T1069] memory: usage 292kB, limit 0kB, failcnt 2036 [ 2674.779186][ T1069] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2674.837137][ T1069] Memory cgroup stats for /syz1: [ 2674.837315][ T1069] anon 36864 [ 2674.837315][ T1069] file 180224 [ 2674.837315][ T1069] kernel 65536 [ 2674.837315][ T1069] kernel_stack 0 [ 2674.837315][ T1069] pagetables 8192 [ 2674.837315][ T1069] sec_pagetables 0 [ 2674.837315][ T1069] percpu 0 [ 2674.837315][ T1069] sock 0 [ 2674.837315][ T1069] vmalloc 0 [ 2674.837315][ T1069] shmem 180224 [ 2674.837315][ T1069] zswap 0 [ 2674.837315][ T1069] zswapped 0 [ 2674.837315][ T1069] file_mapped 180224 [ 2674.837315][ T1069] file_dirty 0 [ 2674.837315][ T1069] file_writeback 0 [ 2674.837315][ T1069] swapcached 0 [ 2674.837315][ T1069] anon_thp 0 [ 2674.837315][ T1069] file_thp 0 [ 2674.837315][ T1069] shmem_thp 0 [ 2674.837315][ T1069] inactive_anon 106496 [ 2674.837315][ T1069] active_anon 110592 [ 2674.837315][ T1069] inactive_file 0 [ 2674.837315][ T1069] active_file 0 [ 2674.837315][ T1069] unevictable 0 [ 2674.837315][ T1069] slab_reclaimable 13384 [ 2674.837315][ T1069] slab_unreclaimable 35496 [ 2674.837315][ T1069] slab 48880 [ 2674.945783][ T1069] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=1069,uid=0 [ 2675.040410][ T1069] Memory cgroup out of memory: Killed process 1069 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2675.082536][ T618] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 2675.105614][ T618] CPU: 0 PID: 618 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2675.115913][ T618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2675.125973][ T618] Call Trace: [ 2675.129255][ T618] [ 2675.132196][ T618] dump_stack_lvl+0xd1/0x138 [ 2675.136805][ T618] dump_header+0x10b/0x85f [ 2675.141248][ T618] oom_kill_process.cold+0x10/0x15 [ 2675.146384][ T618] out_of_memory+0x35c/0x14a0 [ 2675.151093][ T618] ? oom_killer_disable+0x280/0x280 [ 2675.156314][ T618] ? find_held_lock+0x2d/0x110 [ 2675.161102][ T618] mem_cgroup_out_of_memory+0x206/0x270 [ 2675.166776][ T618] ? mem_cgroup_margin+0x130/0x130 [ 2675.171910][ T618] ? lock_downgrade+0x6e0/0x6e0 [ 2675.176785][ T618] try_charge_memcg+0xefb/0x12f0 [ 2675.181744][ T618] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2675.187735][ T618] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2675.193476][ T618] ? lock_downgrade+0x6e0/0x6e0 [ 2675.198352][ T618] ? lock_downgrade+0x6e0/0x6e0 [ 2675.203241][ T618] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2675.208824][ T618] __alloc_pages+0x1f3/0x5b0 [ 2675.213442][ T618] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2675.220236][ T618] ? find_held_lock+0x2d/0x110 [ 2675.225046][ T618] ? lock_downgrade+0x6e0/0x6e0 [ 2675.229928][ T618] ? do_raw_spin_lock+0x124/0x2b0 [ 2675.234969][ T618] alloc_pages+0x1aa/0x270 [ 2675.239401][ T618] __pmd_alloc+0x3f/0x5d0 [ 2675.243741][ T618] ? __pud_alloc+0xe4/0x180 [ 2675.248264][ T618] copy_page_range+0x2829/0x3b40 [ 2675.253359][ T618] ? mas_store+0x206/0x2e0 [ 2675.257798][ T618] ? handle_mm_fault+0x850/0x850 [ 2675.262789][ T618] ? anon_vma_fork+0xba/0x630 [ 2675.267504][ T618] dup_mmap+0xc10/0x10b0 [ 2675.271784][ T618] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2675.277116][ T618] ? lock_downgrade+0x6e0/0x6e0 [ 2675.282049][ T618] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2675.287925][ T618] ? mm_init+0x8e0/0xc10 [ 2675.292192][ T618] copy_process+0x440f/0x7520 [ 2675.296880][ T618] ? _raw_spin_unlock+0x28/0x40 [ 2675.301747][ T618] ? wp_page_reuse+0x197/0x570 [ 2675.306540][ T618] ? __cleanup_sighand+0xb0/0xb0 [ 2675.311495][ T618] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2675.316885][ T618] ? rwlock_bug.part.0+0x90/0x90 [ 2675.321839][ T618] ? lock_chain_count+0x20/0x20 [ 2675.326705][ T618] kernel_clone+0xeb/0x990 [ 2675.331135][ T618] ? create_io_thread+0xf0/0xf0 [ 2675.336002][ T618] ? find_held_lock+0x2d/0x110 [ 2675.340789][ T618] __do_sys_clone+0xba/0x100 [ 2675.345408][ T618] ? kernel_clone+0x990/0x990 [ 2675.350108][ T618] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2675.356017][ T618] do_syscall_64+0x39/0xb0 [ 2675.360447][ T618] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2675.366351][ T618] RIP: 0033:0x7fa07aa89dfb [ 2675.370776][ T618] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2675.390409][ T618] RSP: 002b:00007fff11fb03f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2675.398835][ T618] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa07aa89dfb [ 2675.406810][ T618] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2675.414870][ T618] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556902400 [ 2675.422845][ T618] R10: 00005555569026d0 R11: 0000000000000246 R12: 0000000000000001 [ 2675.430822][ T618] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff11fb04d0 [ 2675.438815][ T618] [ 2675.593619][ T618] memory: usage 8340kB, limit 0kB, failcnt 2370 [ 2675.600005][ T618] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2675.640207][ T618] Memory cgroup stats for /syz5: [ 2675.640429][ T618] anon 45056 [ 2675.640429][ T618] file 8347648 [ 2675.640429][ T618] kernel 147456 [ 2675.640429][ T618] kernel_stack 32768 [ 2675.640429][ T618] pagetables 8192 [ 2675.640429][ T618] sec_pagetables 0 [ 2675.640429][ T618] percpu 64 [ 2675.640429][ T618] sock 0 [ 2675.640429][ T618] vmalloc 0 [ 2675.640429][ T618] shmem 8347648 [ 2675.640429][ T618] zswap 0 [ 2675.640429][ T618] zswapped 0 [ 2675.640429][ T618] file_mapped 221184 [ 2675.640429][ T618] file_dirty 0 [ 2675.640429][ T618] file_writeback 0 [ 2675.640429][ T618] swapcached 0 [ 2675.640429][ T618] anon_thp 0 [ 2675.640429][ T618] file_thp 0 [ 2675.640429][ T618] shmem_thp 0 [ 2675.640429][ T618] inactive_anon 3977216 [ 2675.640429][ T618] active_anon 4415488 [ 2675.640429][ T618] inactive_file 0 [ 2675.640429][ T618] active_file 0 [ 2675.640429][ T618] unevictable 0 [ 2675.640429][ T618] slab_reclaimable 32024 [ 2675.640429][ T618] slab_unreclaimable 53864 [ 2675.640429][ T618] slab 85888 [ 2675.793176][ T618] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=618,uid=0 [ 2675.812962][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2675.821076][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2675.839475][ T618] Memory cgroup out of memory: Killed process 618 (syz-executor.5) total-vm:50568kB, anon-rss:356kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2675.851195][ T5113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2675.876703][ T1248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2675.885944][ T5113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2675.896011][ T5113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2675.904406][ T5113] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2675.912851][ T5113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2676.655494][ T5113] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2676.666396][ T5113] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2676.674399][ T5113] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2676.684492][ T5113] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2676.692125][ T5113] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2676.699840][ T5113] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2676.766152][ T1348] chnl_net:caif_netlink_parms(): no params data found [ 2676.936274][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2676.950002][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2677.036455][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2677.045586][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2677.057625][ T1248] device veth0_vlan entered promiscuous mode [ 2677.069736][ T1348] bridge0: port 1(bridge_slave_0) entered blocking state [ 2677.105973][ T1348] bridge0: port 1(bridge_slave_0) entered disabled state [ 2677.119213][ T1348] device bridge_slave_0 entered promiscuous mode [ 2677.131322][ T1348] bridge0: port 2(bridge_slave_1) entered blocking state [ 2677.138816][ T1348] bridge0: port 2(bridge_slave_1) entered disabled state [ 2677.149076][ T1348] device bridge_slave_1 entered promiscuous mode [ 2677.157648][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2677.170673][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2677.261531][ T1248] device veth1_vlan entered promiscuous mode [ 2677.283569][ T1348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2677.345126][ T1348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2677.400918][ T1348] team0: Port device team_slave_0 added [ 2677.446590][ T1248] device veth0_macvtap entered promiscuous mode [ 2677.467805][ T1348] team0: Port device team_slave_1 added [ 2677.481199][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2677.500266][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2677.525587][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2677.543399][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2677.564447][ T1248] device veth1_macvtap entered promiscuous mode [ 2677.649035][ T1366] chnl_net:caif_netlink_parms(): no params data found [ 2677.692595][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2677.700896][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2677.720747][ T1348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2677.731511][ T1348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2677.758083][ T1348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2677.803933][ T1348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2677.810926][ T1348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2677.840182][ T1348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2677.879935][ T1248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2677.891811][ T1248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2677.902432][ T1248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2677.913511][ T1248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2677.923832][ T1248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2677.934470][ T1248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2677.944668][ T5113] Bluetooth: hci2: command 0x0409 tx timeout [ 2677.952122][ T1248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2677.963702][ T1248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2677.974070][ T1248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2677.985010][ T1248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2677.996634][ T1248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2678.005763][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2678.014836][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2678.062228][ T1248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2678.075367][ T1248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2678.085653][ T1248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2678.096534][ T1248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2678.106695][ T1248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2678.120978][ T1248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2678.131165][ T1248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2678.142152][ T1248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2678.155939][ T1248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2678.166611][ T1248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2678.178211][ T1248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2678.186273][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2678.195393][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2678.207852][ T48] device hsr_slave_0 left promiscuous mode [ 2678.214883][ T48] device hsr_slave_1 left promiscuous mode [ 2678.221234][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2678.229069][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2678.237965][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2678.245663][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2678.255524][ T48] device bridge_slave_1 left promiscuous mode [ 2678.261730][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2678.273228][ T48] device bridge_slave_0 left promiscuous mode [ 2678.279907][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2678.290731][ T48] device hsr_slave_0 left promiscuous mode [ 2678.303226][ T48] device hsr_slave_1 left promiscuous mode [ 2678.309461][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2678.317451][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2678.327223][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2678.334883][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2678.344628][ T48] device bridge_slave_1 left promiscuous mode [ 2678.350859][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2678.359357][ T48] device bridge_slave_0 left promiscuous mode [ 2678.371035][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2678.386151][ T48] device veth1_macvtap left promiscuous mode [ 2678.392189][ T48] device veth0_macvtap left promiscuous mode [ 2678.399362][ T48] device veth1_vlan left promiscuous mode [ 2678.405301][ T48] device veth0_vlan left promiscuous mode [ 2678.412103][ T48] device veth1_macvtap left promiscuous mode [ 2678.418713][ T48] device veth0_macvtap left promiscuous mode [ 2678.428520][ T48] device veth1_vlan left promiscuous mode [ 2678.434790][ T48] device veth0_vlan left promiscuous mode [ 2678.719748][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2678.737648][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2678.746452][ T5113] Bluetooth: hci0: command 0x0409 tx timeout [ 2678.760304][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2678.777453][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2678.850137][ T48] bond0 (unregistering): Released all slaves [ 2679.009309][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2679.021600][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2679.036566][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2679.056516][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2679.132090][ T48] bond0 (unregistering): Released all slaves [ 2679.189322][ T1348] device hsr_slave_0 entered promiscuous mode [ 2679.202644][ T1348] device hsr_slave_1 entered promiscuous mode [ 2679.209144][ T1348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2679.217484][ T1348] Cannot create hsr debugfs directory [ 2679.239826][ T1248] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2679.259723][ T1248] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2679.277326][ T1248] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2679.293272][ T1248] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2679.481773][ T1366] bridge0: port 1(bridge_slave_0) entered blocking state [ 2679.494815][ T1366] bridge0: port 1(bridge_slave_0) entered disabled state [ 2679.503576][ T1366] device bridge_slave_0 entered promiscuous mode [ 2679.541929][ T1366] bridge0: port 2(bridge_slave_1) entered blocking state [ 2679.550761][ T1366] bridge0: port 2(bridge_slave_1) entered disabled state [ 2679.559758][ T1366] device bridge_slave_1 entered promiscuous mode [ 2679.625577][T21046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2679.654595][T21046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2679.664857][ T1366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2679.737678][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2679.761651][ T1366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2679.892946][ T5190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2679.901085][ T5190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2679.924872][ T1366] team0: Port device team_slave_0 added [ 2679.963042][ T1366] team0: Port device team_slave_1 added [ 2680.006981][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2680.023066][ T5113] Bluetooth: hci2: command 0x041b tx timeout [ 2680.161088][ T1366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2680.184391][ T1366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2680.210947][ T1366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2680.289416][ T1366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2680.309665][ T1366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2680.410714][ T1366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2680.633777][ T1414] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2680.658493][ T1366] device hsr_slave_0 entered promiscuous mode [ 2680.662457][ T1414] CPU: 1 PID: 1414 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2680.674945][ T1414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2680.685032][ T1414] Call Trace: [ 2680.688333][ T1414] [ 2680.691290][ T1414] dump_stack_lvl+0xd1/0x138 [ 2680.695926][ T1414] dump_header+0x10b/0x85f [ 2680.700394][ T1414] oom_kill_process.cold+0x10/0x15 [ 2680.705547][ T1414] out_of_memory+0x35c/0x14a0 [ 2680.710257][ T1414] ? oom_killer_disable+0x280/0x280 [ 2680.715479][ T1414] ? find_held_lock+0x2d/0x110 [ 2680.720266][ T1414] mem_cgroup_out_of_memory+0x206/0x270 [ 2680.725836][ T1414] ? mem_cgroup_margin+0x130/0x130 [ 2680.730978][ T1414] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2680.736805][ T1414] memory_max_write+0x2f9/0x3c0 [ 2680.741673][ T1414] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2680.747755][ T1414] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2680.753928][ T1414] cgroup_file_write+0x1e2/0x770 [ 2680.758889][ T1414] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2680.764964][ T1414] ? kill_css+0x370/0x370 [ 2680.769320][ T1414] ? kill_css+0x370/0x370 [ 2680.773665][ T1414] kernfs_fop_write_iter+0x3f1/0x600 [ 2680.778980][ T1414] vfs_write+0x9ed/0xdd0 [ 2680.783236][ T1414] ? kernel_write+0x630/0x630 [ 2680.787930][ T1414] ? __fget_files+0x26a/0x440 [ 2680.792636][ T1414] ksys_write+0x12b/0x250 [ 2680.796974][ T1414] ? __ia32_sys_read+0xb0/0xb0 [ 2680.801747][ T1414] ? __x64_sys_write+0x11/0xb0 [ 2680.806544][ T1414] ? __x64_sys_write+0x4f/0xb0 [ 2680.811319][ T1414] do_syscall_64+0x39/0xb0 [ 2680.815753][ T1414] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2680.821657][ T1414] RIP: 0033:0x7fb44f08c0c9 [ 2680.826084][ T1414] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2680.845720][ T1414] RSP: 002b:00007fb44fd48168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2680.854143][ T1414] RAX: ffffffffffffffda RBX: 00007fb44f1abf80 RCX: 00007fb44f08c0c9 [ 2680.862141][ T1414] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000008 [ 2680.870118][ T1414] RBP: 00007fb44f0e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2680.878094][ T1414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2680.886068][ T1414] R13: 00007ffdee2dd37f R14: 00007fb44fd48300 R15: 0000000000022000 [ 2680.894093][ T1414] [ 2680.901115][ T5113] Bluetooth: hci0: command 0x041b tx timeout [ 2680.906950][ T1366] device hsr_slave_1 entered promiscuous mode [ 2680.921592][ T1414] memory: usage 504kB, limit 0kB, failcnt 2326 [ 2680.936046][ T1366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2680.954557][ T1366] Cannot create hsr debugfs directory [ 2680.970039][ T1348] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2680.977534][ T1414] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2681.017200][ T1348] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2681.020741][ T1414] Memory cgroup stats for /syz4: [ 2681.024241][ T1414] anon 114688 [ 2681.024241][ T1414] file 122880 [ 2681.024241][ T1414] kernel 233472 [ 2681.024241][ T1414] kernel_stack 32768 [ 2681.024241][ T1414] pagetables 77824 [ 2681.024241][ T1414] sec_pagetables 0 [ 2681.024241][ T1414] percpu 64 [ 2681.024241][ T1414] sock 0 [ 2681.024241][ T1414] vmalloc 0 [ 2681.024241][ T1414] shmem 122880 [ 2681.024241][ T1414] zswap 0 [ 2681.024241][ T1414] zswapped 0 [ 2681.024241][ T1414] file_mapped 110592 [ 2681.024241][ T1414] file_dirty 0 [ 2681.024241][ T1414] file_writeback 0 [ 2681.024241][ T1414] swapcached 0 [ 2681.024241][ T1414] anon_thp 0 [ 2681.024241][ T1414] file_thp 0 [ 2681.024241][ T1414] shmem_thp 0 [ 2681.024241][ T1414] inactive_anon 126976 [ 2681.024241][ T1414] active_anon 110592 [ 2681.024241][ T1414] inactive_file 0 [ 2681.024241][ T1414] active_file 0 [ 2681.024241][ T1414] unevictable 0 [ 2681.024241][ T1414] slab_reclaimable 19984 [ 2681.024241][ T1414] slab_unreclaimable 75048 [ 2681.024241][ T1414] slab 95032 [ 2681.127583][ T1348] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2681.179088][ T1348] netdevsim netdevsim0 netdevsim3: renamed from eth3 10:14:11 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x7, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x100, 0x0, 0x100, 0x10000000, 0x9, 0x0, 0x1f}, 0xffffffffffffffff, 0xb, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_int(r3, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='cgroup\x00') r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, r2, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000600), 0x12) 10:14:11 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2681.263987][ T1414] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=1413,uid=0 [ 2681.287490][ T1414] Memory cgroup out of memory: Killed process 1414 (syz-executor.4) total-vm:54540kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:14:11 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:14:11 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2681.500254][ T1248] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 2681.542392][ T1248] CPU: 1 PID: 1248 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2681.552784][ T1248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2681.562851][ T1248] Call Trace: [ 2681.566136][ T1248] [ 2681.569069][ T1248] dump_stack_lvl+0xd1/0x138 [ 2681.573675][ T1248] dump_header+0x10b/0x85f [ 2681.578113][ T1248] oom_kill_process.cold+0x10/0x15 [ 2681.583240][ T1248] out_of_memory+0x35c/0x14a0 [ 2681.587936][ T1248] ? find_held_lock+0x2d/0x110 [ 2681.592712][ T1248] ? oom_killer_disable+0x280/0x280 [ 2681.597932][ T1248] ? find_held_lock+0x2d/0x110 [ 2681.602728][ T1248] mem_cgroup_out_of_memory+0x206/0x270 [ 2681.608292][ T1248] ? mem_cgroup_margin+0x130/0x130 [ 2681.613418][ T1248] ? lock_downgrade+0x6e0/0x6e0 [ 2681.618295][ T1248] try_charge_memcg+0xefb/0x12f0 [ 2681.623245][ T1248] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2681.629230][ T1248] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2681.634964][ T1248] ? lock_downgrade+0x6e0/0x6e0 [ 2681.639818][ T1248] ? lock_downgrade+0x6e0/0x6e0 [ 2681.644688][ T1248] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2681.650247][ T1248] __alloc_pages+0x1f3/0x5b0 [ 2681.654847][ T1248] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2681.661627][ T1248] ? find_held_lock+0x2d/0x110 [ 2681.666501][ T1248] alloc_pages+0x1aa/0x270 [ 2681.670926][ T1248] pte_alloc_one+0x1a/0x230 [ 2681.675437][ T1248] __pte_alloc+0x6d/0x260 [ 2681.679784][ T1248] ? pmd_install+0x160/0x160 [ 2681.684383][ T1248] ? _raw_spin_unlock+0x28/0x40 [ 2681.689240][ T1248] ? __pmd_alloc+0x30c/0x5d0 [ 2681.693840][ T1248] copy_page_range+0x17a8/0x3b40 [ 2681.698867][ T1248] ? mas_store+0x206/0x2e0 [ 2681.703377][ T1248] ? handle_mm_fault+0x850/0x850 [ 2681.708334][ T1248] ? anon_vma_fork+0xba/0x630 [ 2681.713025][ T1248] dup_mmap+0xc10/0x10b0 [ 2681.717287][ T1248] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2681.722578][ T1248] ? lock_downgrade+0x6e0/0x6e0 [ 2681.727441][ T1248] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2681.733266][ T1248] ? mm_init+0x8e0/0xc10 [ 2681.737515][ T1248] copy_process+0x440f/0x7520 [ 2681.742197][ T1248] ? _raw_spin_unlock+0x28/0x40 [ 2681.747051][ T1248] ? wp_page_reuse+0x197/0x570 [ 2681.751834][ T1248] ? __cleanup_sighand+0xb0/0xb0 [ 2681.756773][ T1248] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2681.762160][ T1248] ? rwlock_bug.part.0+0x90/0x90 [ 2681.767103][ T1248] ? lock_chain_count+0x20/0x20 [ 2681.771964][ T1248] kernel_clone+0xeb/0x990 [ 2681.776393][ T1248] ? create_io_thread+0xf0/0xf0 [ 2681.781257][ T1248] ? find_held_lock+0x2d/0x110 [ 2681.786063][ T1248] __do_sys_clone+0xba/0x100 [ 2681.790683][ T1248] ? kernel_clone+0x990/0x990 [ 2681.795382][ T1248] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2681.801288][ T1248] do_syscall_64+0x39/0xb0 [ 2681.805715][ T1248] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2681.811620][ T1248] RIP: 0033:0x7fb44f089dfb [ 2681.816038][ T1248] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2681.835645][ T1248] RSP: 002b:00007ffdee2dd5c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2681.844061][ T1248] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb44f089dfb [ 2681.852031][ T1248] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2681.860023][ T1248] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555b09400 [ 2681.868014][ T1248] R10: 0000555555b096d0 R11: 0000000000000246 R12: 0000000000000001 [ 2681.875999][ T1248] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffdee2dd6a0 [ 2681.883991][ T1248] [ 2681.922873][ T1348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2681.971628][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2681.979527][ T1248] memory: usage 304kB, limit 0kB, failcnt 2360 [ 2681.986938][ T1248] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2682.003305][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2682.021309][ T1248] Memory cgroup stats for /syz4: [ 2682.021501][ T1248] anon 45056 [ 2682.021501][ T1248] file 122880 [ 2682.021501][ T1248] kernel 143360 [ 2682.021501][ T1248] kernel_stack 32768 [ 2682.021501][ T1248] pagetables 12288 [ 2682.021501][ T1248] sec_pagetables 0 [ 2682.021501][ T1248] percpu 128 [ 2682.021501][ T1248] sock 0 [ 2682.021501][ T1248] vmalloc 0 [ 2682.021501][ T1248] shmem 122880 [ 2682.021501][ T1248] zswap 0 [ 2682.021501][ T1248] zswapped 0 [ 2682.021501][ T1248] file_mapped 110592 [ 2682.021501][ T1248] file_dirty 0 [ 2682.021501][ T1248] file_writeback 0 [ 2682.021501][ T1248] swapcached 0 [ 2682.021501][ T1248] anon_thp 0 [ 2682.021501][ T1248] file_thp 0 [ 2682.021501][ T1248] shmem_thp 0 [ 2682.021501][ T1248] inactive_anon 57344 [ 2682.021501][ T1248] active_anon 110592 [ 2682.021501][ T1248] inactive_file 0 [ 2682.021501][ T1248] active_file 0 [ 2682.021501][ T1248] unevictable 0 [ 2682.021501][ T1248] slab_reclaimable 10928 [ 2682.021501][ T1248] slab_unreclaimable 65648 [ 2682.021501][ T1248] slab 76576 [ 2682.122419][ T5113] Bluetooth: hci2: command 0x040f tx timeout [ 2682.135814][ T1348] 8021q: adding VLAN 0 to HW filter on device team0 [ 2682.165666][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2682.183445][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2682.209633][T27665] bridge0: port 1(bridge_slave_0) entered blocking state [ 2682.216842][T27665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2682.278936][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2682.293271][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2682.302018][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2682.362203][T12800] bridge0: port 2(bridge_slave_1) entered blocking state [ 2682.369402][T12800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2682.403044][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2682.451376][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2682.497007][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2682.525034][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2682.563809][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2682.611642][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2682.651525][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2682.670073][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2682.707159][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2682.753348][ T1348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2682.952723][ T1248] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=1248,uid=0 [ 2682.992609][ T5113] Bluetooth: hci0: command 0x040f tx timeout [ 2683.029799][ T1248] Memory cgroup out of memory: Killed process 1248 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 10:14:13 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x7, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x100, 0x0, 0x100, 0x10000000, 0x9, 0x0, 0x1f}, 0xffffffffffffffff, 0xb, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_int(r3, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='cgroup\x00') r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, r2, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 2683.858525][ T1348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2683.904361][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2683.932571][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 10:14:14 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x7, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x100, 0x0, 0x100, 0x10000000, 0x9, 0x0, 0x1f}, 0xffffffffffffffff, 0xb, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_int(r3, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='cgroup\x00') r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, r2, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 2683.970348][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2684.003530][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2684.063400][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2684.071861][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2684.116084][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2684.142476][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2684.164269][ T1348] device veth0_vlan entered promiscuous mode [ 2684.182522][ T5113] Bluetooth: hci2: command 0x0419 tx timeout [ 2684.243596][ T1348] device veth1_vlan entered promiscuous mode [ 2684.424910][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2684.443182][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2684.472994][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2684.481689][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2684.584647][ T1348] device veth0_macvtap entered promiscuous mode [ 2684.612860][ T1366] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2684.624604][ T5108] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2684.631124][ T1366] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2684.639716][T29331] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2684.648238][T29331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2684.656674][T29331] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2684.664237][T29331] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2684.738648][ T1348] device veth1_macvtap entered promiscuous mode [ 2684.756385][ T1366] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2684.803968][ T1366] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2684.847715][ T1348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2684.888970][ T1348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2684.932372][ T1348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2684.952357][ T1348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2684.980123][ T1348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2685.022359][ T1348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2685.032215][ T1348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2685.052427][ T1348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2685.072040][T29331] Bluetooth: hci0: command 0x0419 tx timeout [ 2685.102672][ T1348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2685.124084][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2685.163349][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2685.231011][ T1348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2685.272368][ T1348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2685.282234][ T1348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2685.342536][ T1348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2685.353411][ T5113] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2685.363332][ T5113] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2685.371685][ T5113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2685.384077][ T5113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2685.392157][ T5113] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2685.400425][ T5113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2685.448363][ T1348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2685.482552][ T1348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2685.512396][ T1348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2685.528839][ T5113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2685.537898][ T1348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2685.549060][ T5113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2685.561151][ T5113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2685.563770][ T1348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2685.577015][ T5113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2685.587204][ T5113] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2685.612632][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2685.621716][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2685.630578][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2685.676303][ T1348] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2685.697405][ T1348] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2685.709686][ T1348] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2685.726565][ T1348] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2685.981507][ T1366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2686.040168][ T48] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2686.134270][T21046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2686.176852][T21046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2686.197709][ T48] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2686.246091][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2686.255324][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2686.271900][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2686.307430][ T1366] 8021q: adding VLAN 0 to HW filter on device team0 [ 2686.376820][ T48] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2686.558782][ T48] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2686.577619][T29331] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2686.594449][T29331] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2686.603046][T29331] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2686.611027][T29331] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2686.632794][T29331] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2686.640180][T29331] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2686.709544][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2686.727671][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2686.739869][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 2686.747046][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2686.758180][ T5113] Bluetooth: hci1: command 0x0409 tx timeout [ 2686.774520][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2686.784452][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2686.793478][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 2686.800577][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2686.808906][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2686.863511][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2686.871662][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2686.908995][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2686.917671][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2686.928306][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2686.937685][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2686.966646][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2687.013557][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2687.032073][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2687.053278][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2687.061793][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2687.098761][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2687.137477][ T1366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2687.191788][ T1489] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2687.211379][ T1489] CPU: 0 PID: 1489 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2687.221780][ T1489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2687.231869][ T1489] Call Trace: [ 2687.235208][ T1489] [ 2687.238163][ T1489] dump_stack_lvl+0xd1/0x138 [ 2687.242798][ T1489] dump_header+0x10b/0x85f [ 2687.247273][ T1489] oom_kill_process.cold+0x10/0x15 [ 2687.252436][ T1489] out_of_memory+0x35c/0x14a0 [ 2687.257174][ T1489] ? oom_killer_disable+0x280/0x280 [ 2687.262441][ T1489] mem_cgroup_out_of_memory+0x206/0x270 [ 2687.268032][ T1489] ? mem_cgroup_margin+0x130/0x130 [ 2687.273214][ T1489] memory_max_write+0x2f9/0x3c0 [ 2687.278105][ T1489] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2687.284213][ T1489] ? lock_release+0x810/0x810 [ 2687.288929][ T1489] cgroup_file_write+0x1e2/0x770 [ 2687.293914][ T1489] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2687.300029][ T1489] ? kill_css+0x370/0x370 [ 2687.304405][ T1489] ? __virt_addr_valid+0x61/0x2e0 [ 2687.309489][ T1489] ? kill_css+0x370/0x370 [ 2687.313856][ T1489] kernfs_fop_write_iter+0x3f1/0x600 [ 2687.319175][ T1489] vfs_write+0x9ed/0xdd0 [ 2687.323441][ T1489] ? kernel_write+0x630/0x630 [ 2687.328135][ T1489] ? __fget_files+0x26a/0x440 [ 2687.332840][ T1489] ksys_write+0x12b/0x250 [ 2687.337179][ T1489] ? __ia32_sys_read+0xb0/0xb0 [ 2687.341954][ T1489] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2687.347867][ T1489] do_syscall_64+0x39/0xb0 [ 2687.352306][ T1489] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2687.358215][ T1489] RIP: 0033:0x7f5555e8c0c9 [ 2687.362635][ T1489] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2687.382248][ T1489] RSP: 002b:00007f5556b54168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2687.390671][ T1489] RAX: ffffffffffffffda RBX: 00007f5555fabf80 RCX: 00007f5555e8c0c9 [ 2687.398660][ T1489] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000004 [ 2687.406636][ T1489] RBP: 00007f5555ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2687.414615][ T1489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2687.422605][ T1489] R13: 00007ffdc3f566ff R14: 00007f5556b54300 R15: 0000000000022000 [ 2687.430645][ T1489] [ 2687.442533][ T1489] memory: usage 568kB, limit 0kB, failcnt 2364 [ 2687.452477][ T1489] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2687.462947][ T5113] Bluetooth: hci3: command 0x0409 tx timeout [ 2687.481015][ T1489] Memory cgroup stats for /syz0: [ 2687.481222][ T1489] anon 114688 [ 2687.481222][ T1489] file 184320 [ 2687.481222][ T1489] kernel 274432 [ 2687.481222][ T1489] kernel_stack 65536 [ 2687.481222][ T1489] pagetables 77824 [ 2687.481222][ T1489] sec_pagetables 0 [ 2687.481222][ T1489] percpu 208 [ 2687.481222][ T1489] sock 0 [ 2687.481222][ T1489] vmalloc 4096 [ 2687.481222][ T1489] shmem 184320 [ 2687.481222][ T1489] zswap 0 [ 2687.481222][ T1489] zswapped 0 [ 2687.481222][ T1489] file_mapped 184320 [ 2687.481222][ T1489] file_dirty 0 [ 2687.481222][ T1489] file_writeback 0 [ 2687.481222][ T1489] swapcached 0 [ 2687.481222][ T1489] anon_thp 0 [ 2687.481222][ T1489] file_thp 0 [ 2687.481222][ T1489] shmem_thp 0 [ 2687.481222][ T1489] inactive_anon 176128 [ 2687.481222][ T1489] active_anon 122880 [ 2687.481222][ T1489] inactive_file 0 [ 2687.481222][ T1489] active_file 0 [ 2687.481222][ T1489] unevictable 0 [ 2687.481222][ T1489] slab_reclaimable 17408 [ 2687.481222][ T1489] slab_unreclaimable 77208 [ 2687.481222][ T1489] slab 94616 [ 2687.530550][ T1454] chnl_net:caif_netlink_parms(): no params data found 10:14:17 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2687.582819][ T1489] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1488,uid=0 [ 2687.603900][ T1489] Memory cgroup out of memory: Killed process 1488 (syz-executor.0) total-vm:54540kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2687.702738][ T5113] Bluetooth: hci4: command 0x0409 tx timeout [ 2687.723572][ T1348] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2687.734105][ T1348] CPU: 1 PID: 1348 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2687.744469][ T1348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2687.754549][ T1348] Call Trace: [ 2687.757846][ T1348] [ 2687.760781][ T1348] dump_stack_lvl+0xd1/0x138 [ 2687.765389][ T1348] dump_header+0x10b/0x85f [ 2687.769828][ T1348] oom_kill_process.cold+0x10/0x15 [ 2687.774962][ T1348] out_of_memory+0x35c/0x14a0 [ 2687.779661][ T1348] ? find_held_lock+0x2d/0x110 [ 2687.784443][ T1348] ? oom_killer_disable+0x280/0x280 [ 2687.789662][ T1348] ? find_held_lock+0x2d/0x110 [ 2687.794444][ T1348] mem_cgroup_out_of_memory+0x206/0x270 [ 2687.800009][ T1348] ? mem_cgroup_margin+0x130/0x130 [ 2687.805138][ T1348] ? lock_downgrade+0x6e0/0x6e0 [ 2687.810022][ T1348] try_charge_memcg+0xefb/0x12f0 [ 2687.814978][ T1348] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2687.820971][ T1348] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2687.826708][ T1348] ? lock_downgrade+0x6e0/0x6e0 [ 2687.831586][ T1348] obj_cgroup_charge+0x2af/0x5e0 [ 2687.836542][ T1348] ? anon_vma_fork+0xe2/0x630 [ 2687.841236][ T1348] kmem_cache_alloc+0xb5/0x430 [ 2687.846012][ T1348] anon_vma_fork+0xe2/0x630 [ 2687.850533][ T1348] ? __vm_enough_memory+0x188/0x390 [ 2687.855837][ T1348] dup_mmap+0xbb8/0x10b0 [ 2687.860098][ T1348] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2687.865399][ T1348] ? lock_downgrade+0x6e0/0x6e0 [ 2687.870263][ T1348] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2687.876093][ T1348] ? mm_init+0x8e0/0xc10 [ 2687.880345][ T1348] copy_process+0x440f/0x7520 [ 2687.885033][ T1348] ? _raw_spin_unlock+0x28/0x40 [ 2687.889901][ T1348] ? wp_page_reuse+0x197/0x570 [ 2687.894701][ T1348] ? __cleanup_sighand+0xb0/0xb0 [ 2687.899647][ T1348] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2687.905038][ T1348] ? rwlock_bug.part.0+0x90/0x90 [ 2687.909983][ T1348] ? lock_chain_count+0x20/0x20 [ 2687.914847][ T1348] kernel_clone+0xeb/0x990 [ 2687.919276][ T1348] ? create_io_thread+0xf0/0xf0 [ 2687.924143][ T1348] ? find_held_lock+0x2d/0x110 [ 2687.928939][ T1348] __do_sys_clone+0xba/0x100 [ 2687.933553][ T1348] ? kernel_clone+0x990/0x990 [ 2687.938291][ T1348] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2687.944230][ T1348] do_syscall_64+0x39/0xb0 [ 2687.948690][ T1348] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2687.954603][ T1348] RIP: 0033:0x7f5555e89dfb [ 2687.959028][ T1348] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2687.978642][ T1348] RSP: 002b:00007ffdc3f56940 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2687.987062][ T1348] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5555e89dfb [ 2687.995042][ T1348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2688.003023][ T1348] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555ec8400 [ 2688.010997][ T1348] R10: 0000555555ec86d0 R11: 0000000000000246 R12: 0000000000000001 [ 2688.018976][ T1348] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffdc3f56a20 [ 2688.026971][ T1348] [ 2688.049238][ T1444] chnl_net:caif_netlink_parms(): no params data found [ 2688.171525][ T1348] memory: usage 396kB, limit 0kB, failcnt 2396 [ 2688.209516][ T1348] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2688.254718][ T1348] Memory cgroup stats for /syz0: [ 2688.254921][ T1348] anon 36864 [ 2688.254921][ T1348] file 184320 [ 2688.254921][ T1348] kernel 184320 [ 2688.254921][ T1348] kernel_stack 32768 [ 2688.254921][ T1348] pagetables 45056 [ 2688.254921][ T1348] sec_pagetables 0 [ 2688.254921][ T1348] percpu 128 [ 2688.254921][ T1348] sock 0 [ 2688.254921][ T1348] vmalloc 0 [ 2688.254921][ T1348] shmem 184320 [ 2688.254921][ T1348] zswap 0 [ 2688.254921][ T1348] zswapped 0 [ 2688.254921][ T1348] file_mapped 184320 [ 2688.254921][ T1348] file_dirty 0 [ 2688.254921][ T1348] file_writeback 0 [ 2688.254921][ T1348] swapcached 0 [ 2688.254921][ T1348] anon_thp 0 [ 2688.254921][ T1348] file_thp 0 [ 2688.254921][ T1348] shmem_thp 0 [ 2688.254921][ T1348] inactive_anon 98304 [ 2688.254921][ T1348] active_anon 122880 [ 2688.254921][ T1348] inactive_file 0 [ 2688.254921][ T1348] active_file 0 [ 2688.254921][ T1348] unevictable 0 [ 2688.254921][ T1348] slab_reclaimable 10928 [ 2688.254921][ T1348] slab_unreclaimable 70704 [ 2688.254921][ T1348] slab 81632 [ 2688.494183][ T1348] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1348,uid=0 [ 2688.536843][ T1348] Memory cgroup out of memory: Killed process 1348 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2688.651591][ T48] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2688.672801][ T5113] Bluetooth: hci5: command 0x0409 tx timeout [ 2688.796761][ T1454] bridge0: port 1(bridge_slave_0) entered blocking state [ 2688.812490][ T1454] bridge0: port 1(bridge_slave_0) entered disabled state [ 2688.820736][ T1454] device bridge_slave_0 entered promiscuous mode [ 2688.832762][ T5113] Bluetooth: hci1: command 0x041b tx timeout [ 2688.897819][ T1457] chnl_net:caif_netlink_parms(): no params data found [ 2688.934062][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2688.941607][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2688.962975][ T48] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2689.007494][ T1366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2689.053261][ T1454] bridge0: port 2(bridge_slave_1) entered blocking state [ 2689.060398][ T1454] bridge0: port 2(bridge_slave_1) entered disabled state [ 2689.093689][ T1454] device bridge_slave_1 entered promiscuous mode 10:14:19 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2689.253183][ T48] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 10:14:19 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2689.443860][ T1444] bridge0: port 1(bridge_slave_0) entered blocking state [ 2689.450991][ T1444] bridge0: port 1(bridge_slave_0) entered disabled state [ 2689.481011][ T1444] device bridge_slave_0 entered promiscuous mode [ 2689.542882][ T5113] Bluetooth: hci3: command 0x041b tx timeout [ 2689.593232][ T48] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2689.616427][ T1454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2689.648660][ T1454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2689.712564][ T1444] bridge0: port 2(bridge_slave_1) entered blocking state [ 2689.719710][ T1444] bridge0: port 2(bridge_slave_1) entered disabled state [ 2689.743611][ T1444] device bridge_slave_1 entered promiscuous mode [ 2689.783072][ T5113] Bluetooth: hci4: command 0x041b tx timeout [ 2690.013836][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2690.033203][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2690.045925][ T1478] chnl_net:caif_netlink_parms(): no params data found [ 2690.123459][ T1457] bridge0: port 1(bridge_slave_0) entered blocking state [ 2690.140949][ T1457] bridge0: port 1(bridge_slave_0) entered disabled state [ 2690.182955][ T1457] device bridge_slave_0 entered promiscuous mode [ 2690.199077][ T1454] team0: Port device team_slave_0 added [ 2690.239595][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2690.253473][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2690.274459][ T1454] team0: Port device team_slave_1 added [ 2690.280523][ T1457] bridge0: port 2(bridge_slave_1) entered blocking state [ 2690.292886][ T1457] bridge0: port 2(bridge_slave_1) entered disabled state [ 2690.311411][ T1457] device bridge_slave_1 entered promiscuous mode [ 2690.329889][ T1366] device veth0_vlan entered promiscuous mode [ 2690.361394][ T1444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2690.403088][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2690.413790][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2690.615549][ T1444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2690.667542][ T1454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2690.690955][ T1454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2690.745158][ T1454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2690.762385][ T5113] Bluetooth: hci5: command 0x041b tx timeout [ 2690.788261][ T1454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2690.809713][ T1454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2690.849774][ T1454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2690.864334][ T1457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2690.877730][ T1457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2690.915047][ T5113] Bluetooth: hci1: command 0x040f tx timeout [ 2691.005605][ T1444] team0: Port device team_slave_0 added [ 2691.051860][ T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2691.098024][ T1454] device hsr_slave_0 entered promiscuous mode [ 2691.123781][ T1454] device hsr_slave_1 entered promiscuous mode [ 2691.142533][ T1454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2691.150139][ T1454] Cannot create hsr debugfs directory [ 2691.161182][ T1457] team0: Port device team_slave_0 added [ 2691.214357][ T1444] team0: Port device team_slave_1 added [ 2691.223759][ T1366] device veth1_vlan entered promiscuous mode [ 2691.245773][ T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2691.292647][ T1457] team0: Port device team_slave_1 added [ 2691.299544][ T1478] bridge0: port 1(bridge_slave_0) entered blocking state [ 2691.326849][ T1478] bridge0: port 1(bridge_slave_0) entered disabled state [ 2691.344522][ T1478] device bridge_slave_0 entered promiscuous mode [ 2691.444324][ T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2691.473153][ T1478] bridge0: port 2(bridge_slave_1) entered blocking state [ 2691.480366][ T1478] bridge0: port 2(bridge_slave_1) entered disabled state [ 2691.503437][ T1478] device bridge_slave_1 entered promiscuous mode [ 2691.566485][ T1444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2691.582334][ T1444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2691.609952][ T1444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2691.622719][ T5113] Bluetooth: hci3: command 0x040f tx timeout [ 2691.677436][ T1457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2691.692654][ T1457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2691.741429][ T1457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2691.784159][ T48] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2691.815570][ T1478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2691.833074][ T1444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2691.840068][ T1444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2691.872890][ T5113] Bluetooth: hci4: command 0x040f tx timeout [ 2691.875043][ T1444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2691.896787][ T1457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2691.906706][ T1457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2691.992536][ T1457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2692.048051][ T1478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2692.169303][ T1366] device veth0_macvtap entered promiscuous mode [ 2692.233449][ T5108] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2692.243678][ T5108] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2692.251542][ T5108] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2692.259825][ T5108] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2692.267770][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2692.275824][ T5108] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2692.283829][ T5108] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2692.292960][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2692.337342][ T1444] device hsr_slave_0 entered promiscuous mode [ 2692.353838][ T1444] device hsr_slave_1 entered promiscuous mode [ 2692.368973][ T1444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2692.382533][ T1444] Cannot create hsr debugfs directory [ 2692.393635][ T1366] device veth1_macvtap entered promiscuous mode [ 2692.424125][ T1478] team0: Port device team_slave_0 added [ 2692.506089][ T1457] device hsr_slave_0 entered promiscuous mode [ 2692.515116][ T1457] device hsr_slave_1 entered promiscuous mode [ 2692.542650][ T1457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2692.550261][ T1457] Cannot create hsr debugfs directory [ 2692.580500][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2692.613506][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2692.652259][ T1366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2692.682716][ T1366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2692.702539][ T1366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2692.722533][ T1366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2692.735600][ T1366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2692.773876][ T1366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2692.797694][ T1366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2692.821282][ T1366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2692.831952][ T5113] Bluetooth: hci5: command 0x040f tx timeout [ 2692.852548][ T1366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2692.872474][ T1366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2692.904275][ T1366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2692.948005][ T1478] team0: Port device team_slave_1 added [ 2692.992384][ T5113] Bluetooth: hci1: command 0x0419 tx timeout [ 2693.011256][ T1366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2693.042567][ T1366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2693.057845][ T1366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2693.068879][ T1366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2693.078807][ T1366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2693.089286][ T1366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2693.099251][ T1366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2693.109791][ T1366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2693.121088][ T1366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2693.132762][ T1366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2693.144751][ T1366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2693.152152][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2693.161653][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2693.183141][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2693.203168][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2693.307032][ T1366] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2693.316525][ T1366] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2693.326181][ T1366] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2693.337720][ T1366] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2693.390075][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2693.416645][ T1478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2693.425299][ T1478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2693.462621][ T1478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2693.520670][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2693.568740][ T1478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2693.582486][ T1478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2693.626554][ T1478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2693.703417][ T5113] Bluetooth: hci3: command 0x0419 tx timeout [ 2693.786220][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2693.949336][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2693.952665][ T5113] Bluetooth: hci4: command 0x0419 tx timeout [ 2694.126391][ T1478] device hsr_slave_0 entered promiscuous mode [ 2694.182975][ T1478] device hsr_slave_1 entered promiscuous mode [ 2694.202518][ T1478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2694.210139][ T1478] Cannot create hsr debugfs directory [ 2694.362403][ T5113] Bluetooth: hci2: command 0x0409 tx timeout [ 2694.464327][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2694.486015][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2694.621556][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2694.719167][ T2422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2694.729140][ T2422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2694.845286][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2694.912758][ T5113] Bluetooth: hci5: command 0x0419 tx timeout [ 2695.135026][ T1541] chnl_net:caif_netlink_parms(): no params data found [ 2695.329537][ T1454] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2695.414477][ T1454] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2695.433705][ T1583] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2695.463110][ T1583] CPU: 0 PID: 1583 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2695.473682][ T1583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2695.483766][ T1583] Call Trace: [ 2695.487133][ T1583] [ 2695.490097][ T1583] dump_stack_lvl+0xd1/0x138 [ 2695.494745][ T1583] dump_header+0x10b/0x85f [ 2695.499217][ T1583] oom_kill_process.cold+0x10/0x15 [ 2695.504390][ T1583] out_of_memory+0x35c/0x14a0 [ 2695.509134][ T1583] ? oom_killer_disable+0x280/0x280 [ 2695.514389][ T1583] ? mark_held_locks+0x9f/0xe0 [ 2695.519196][ T1583] mem_cgroup_out_of_memory+0x206/0x270 [ 2695.524805][ T1583] ? mem_cgroup_margin+0x130/0x130 [ 2695.529982][ T1583] memory_max_write+0x2f9/0x3c0 [ 2695.534873][ T1583] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2695.540979][ T1583] ? lock_release+0x810/0x810 [ 2695.545697][ T1583] cgroup_file_write+0x1e2/0x770 [ 2695.550679][ T1583] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2695.556788][ T1583] ? kill_css+0x370/0x370 [ 2695.561160][ T1583] ? __virt_addr_valid+0x61/0x2e0 [ 2695.566248][ T1583] ? kill_css+0x370/0x370 [ 2695.570613][ T1583] kernfs_fop_write_iter+0x3f1/0x600 [ 2695.575960][ T1583] vfs_write+0x9ed/0xdd0 [ 2695.580246][ T1583] ? kernel_write+0x630/0x630 [ 2695.584963][ T1583] ? __fget_files+0x26a/0x440 [ 2695.589699][ T1583] ksys_write+0x12b/0x250 [ 2695.594065][ T1583] ? __ia32_sys_read+0xb0/0xb0 [ 2695.598876][ T1583] ? syscall_enter_from_user_mode+0x30/0xb0 [ 2695.604815][ T1583] do_syscall_64+0x39/0xb0 [ 2695.609282][ T1583] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2695.615218][ T1583] RIP: 0033:0x7f8945e8c0c9 [ 2695.619672][ T1583] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2695.639315][ T1583] RSP: 002b:00007f8946b6f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2695.647776][ T1583] RAX: ffffffffffffffda RBX: 00007f8945fabf80 RCX: 00007f8945e8c0c9 [ 2695.655868][ T1583] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 2695.663875][ T1583] RBP: 00007f8945ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2695.671880][ T1583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2695.679895][ T1583] R13: 00007ffdf7a4cd3f R14: 00007f8946b6f300 R15: 0000000000022000 [ 2695.688027][ T1583] [ 2695.703051][ T1583] memory: usage 512kB, limit 0kB, failcnt 2566 [ 2695.709400][ T1583] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2695.751342][ T1583] Memory cgroup stats for /syz2: [ 2695.752104][ T1583] anon 114688 [ 2695.752104][ T1583] file 131072 [ 2695.752104][ T1583] kernel 266240 [ 2695.752104][ T1583] kernel_stack 65536 [ 2695.752104][ T1583] pagetables 77824 [ 2695.752104][ T1583] sec_pagetables 0 [ 2695.752104][ T1583] percpu 208 [ 2695.752104][ T1583] sock 0 [ 2695.752104][ T1583] vmalloc 4096 [ 2695.752104][ T1583] shmem 126976 [ 2695.752104][ T1583] zswap 0 [ 2695.752104][ T1583] zswapped 0 [ 2695.752104][ T1583] file_mapped 126976 [ 2695.752104][ T1583] file_dirty 4096 [ 2695.752104][ T1583] file_writeback 0 [ 2695.752104][ T1583] swapcached 0 [ 2695.752104][ T1583] anon_thp 0 [ 2695.752104][ T1583] file_thp 0 [ 2695.752104][ T1583] shmem_thp 0 [ 2695.752104][ T1583] inactive_anon 126976 [ 2695.752104][ T1583] active_anon 114688 [ 2695.752104][ T1583] inactive_file 0 [ 2695.752104][ T1583] active_file 4096 [ 2695.752104][ T1583] unevictable 0 [ 2695.752104][ T1583] slab_reclaimable 14920 [ 2695.752104][ T1583] slab_unreclaimable 77856 [ 2695.752104][ T1583] slab 92776 [ 2696.012830][ T1454] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2696.114063][ T1583] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=1582,uid=0 [ 2696.172533][ T1583] Memory cgroup out of memory: Killed process 1583 (syz-executor.2) total-vm:54540kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2696.212539][ T1454] netdevsim netdevsim5 netdevsim3: renamed from eth3 10:14:26 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2696.387233][ T1366] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 2696.399655][ T1541] bridge0: port 1(bridge_slave_0) entered blocking state [ 2696.413700][ T1366] CPU: 1 PID: 1366 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2696.424189][ T1366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2696.434259][ T1366] Call Trace: [ 2696.437541][ T1366] [ 2696.440478][ T1366] dump_stack_lvl+0xd1/0x138 [ 2696.445089][ T1366] dump_header+0x10b/0x85f [ 2696.449613][ T1366] oom_kill_process.cold+0x10/0x15 [ 2696.454757][ T1366] out_of_memory+0x35c/0x14a0 [ 2696.459547][ T1366] ? find_held_lock+0x2d/0x110 [ 2696.464331][ T1366] ? oom_killer_disable+0x280/0x280 [ 2696.469551][ T1366] ? find_held_lock+0x2d/0x110 [ 2696.474335][ T1366] mem_cgroup_out_of_memory+0x206/0x270 [ 2696.479905][ T1366] ? mem_cgroup_margin+0x130/0x130 [ 2696.485044][ T1366] ? lock_downgrade+0x6e0/0x6e0 [ 2696.489915][ T1366] try_charge_memcg+0xefb/0x12f0 [ 2696.494869][ T1366] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2696.500858][ T1366] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2696.506595][ T1366] ? lock_downgrade+0x6e0/0x6e0 [ 2696.511460][ T1366] ? lock_downgrade+0x6e0/0x6e0 [ 2696.516330][ T1366] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2696.521893][ T1366] __alloc_pages+0x1f3/0x5b0 [ 2696.526496][ T1366] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2696.533293][ T1366] alloc_pages+0x1aa/0x270 [ 2696.537727][ T1366] pte_alloc_one+0x1a/0x230 [ 2696.542248][ T1366] __pte_alloc+0x6d/0x260 [ 2696.546590][ T1366] ? pmd_install+0x160/0x160 [ 2696.551204][ T1366] copy_page_range+0x17a8/0x3b40 [ 2696.556191][ T1366] ? mas_store+0x206/0x2e0 [ 2696.560615][ T1366] ? handle_mm_fault+0x850/0x850 [ 2696.565581][ T1366] ? up_write+0x1b0/0x520 [ 2696.569954][ T1366] dup_mmap+0xc10/0x10b0 [ 2696.574243][ T1366] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2696.579540][ T1366] ? lock_downgrade+0x6e0/0x6e0 [ 2696.584405][ T1366] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2696.590324][ T1366] ? mm_init+0x8e0/0xc10 [ 2696.594579][ T1366] copy_process+0x440f/0x7520 [ 2696.599267][ T1366] ? _raw_spin_unlock+0x28/0x40 [ 2696.604127][ T1366] ? wp_page_reuse+0x197/0x570 [ 2696.608921][ T1366] ? __cleanup_sighand+0xb0/0xb0 [ 2696.613866][ T1366] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2696.619256][ T1366] ? rwlock_bug.part.0+0x90/0x90 [ 2696.624203][ T1366] ? lock_chain_count+0x20/0x20 [ 2696.629067][ T1366] kernel_clone+0xeb/0x990 [ 2696.633498][ T1366] ? create_io_thread+0xf0/0xf0 [ 2696.638367][ T1366] ? find_held_lock+0x2d/0x110 [ 2696.643161][ T1366] __do_sys_clone+0xba/0x100 [ 2696.647763][ T1366] ? kernel_clone+0x990/0x990 [ 2696.652464][ T1366] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2696.658379][ T1366] do_syscall_64+0x39/0xb0 [ 2696.662814][ T1366] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2696.668719][ T1366] RIP: 0033:0x7f8945e89dfb [ 2696.673143][ T1366] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2696.692752][ T1366] RSP: 002b:00007ffdf7a4cf80 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2696.701172][ T1366] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8945e89dfb [ 2696.709147][ T1366] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2696.717122][ T1366] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555567ba400 [ 2696.725096][ T1366] R10: 00005555567ba6d0 R11: 0000000000000246 R12: 0000000000000001 [ 2696.733073][ T1366] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffdf7a4d060 [ 2696.741065][ T1366] [ 2696.746891][ T5113] Bluetooth: hci2: command 0x041b tx timeout [ 2696.767500][ T1541] bridge0: port 1(bridge_slave_0) entered disabled state [ 2696.789137][ T1541] device bridge_slave_0 entered promiscuous mode [ 2696.802666][ T1366] memory: usage 332kB, limit 0kB, failcnt 2599 [ 2696.808884][ T1366] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2696.834497][ T1366] Memory cgroup stats for /syz2: [ 2696.834712][ T1366] anon 40960 [ 2696.834712][ T1366] file 131072 [ 2696.834712][ T1366] kernel 167936 [ 2696.834712][ T1366] kernel_stack 32768 [ 2696.834712][ T1366] pagetables 32768 [ 2696.834712][ T1366] sec_pagetables 0 [ 2696.834712][ T1366] percpu 128 [ 2696.834712][ T1366] sock 0 [ 2696.834712][ T1366] vmalloc 0 [ 2696.834712][ T1366] shmem 126976 [ 2696.834712][ T1366] zswap 0 [ 2696.834712][ T1366] zswapped 0 [ 2696.834712][ T1366] file_mapped 126976 [ 2696.834712][ T1366] file_dirty 4096 [ 2696.834712][ T1366] file_writeback 0 [ 2696.834712][ T1366] swapcached 0 [ 2696.834712][ T1366] anon_thp 0 [ 2696.834712][ T1366] file_thp 0 [ 2696.834712][ T1366] shmem_thp 0 [ 2696.834712][ T1366] inactive_anon 53248 [ 2696.834712][ T1366] active_anon 114688 [ 2696.834712][ T1366] inactive_file 4096 [ 2696.834712][ T1366] active_file 0 [ 2696.834712][ T1366] unevictable 0 [ 2696.834712][ T1366] slab_reclaimable 7288 [ 2696.834712][ T1366] slab_unreclaimable 67328 [ 2696.834712][ T1366] slab 74616 [ 2696.957481][ T1366] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=1366,uid=0 [ 2696.992412][ T1366] Memory cgroup out of memory: Killed process 1366 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2697.068278][ T1541] bridge0: port 2(bridge_slave_1) entered blocking state [ 2697.083051][ T1541] bridge0: port 2(bridge_slave_1) entered disabled state [ 2697.121965][ T1541] device bridge_slave_1 entered promiscuous mode [ 2697.438866][ T1541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2697.462868][ T1541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 10:14:27 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:14:27 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2697.738085][ T1541] team0: Port device team_slave_0 added [ 2697.905430][ T1541] team0: Port device team_slave_1 added [ 2698.184383][ T1541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2698.201708][ T1541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2698.282428][ T1541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2698.431761][ T1541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2698.472043][ T1541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2698.532882][ T1541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2698.634921][ T1444] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2698.767097][ T1444] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2698.832688][ T5108] Bluetooth: hci2: command 0x040f tx timeout [ 2698.924278][ T1444] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2698.963367][ T1454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2698.991977][ T1541] device hsr_slave_0 entered promiscuous mode [ 2699.009405][ T1541] device hsr_slave_1 entered promiscuous mode [ 2699.029247][ T1541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2699.049364][ T1541] Cannot create hsr debugfs directory [ 2699.121937][ T1444] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2699.213663][ T1454] 8021q: adding VLAN 0 to HW filter on device team0 [ 2699.339265][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2699.356508][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2699.441624][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2699.463301][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2699.471810][T14114] bridge0: port 1(bridge_slave_0) entered blocking state [ 2699.478977][T14114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2699.509417][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2699.518494][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2699.527183][T14114] bridge0: port 2(bridge_slave_1) entered blocking state [ 2699.534413][T14114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2699.641494][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2699.666499][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2699.757615][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2699.767833][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2699.780592][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2699.892721][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2699.900999][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2699.923794][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2699.943064][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2699.953681][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2699.996685][ T1454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2700.143848][ T1444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2700.266624][ T1444] 8021q: adding VLAN 0 to HW filter on device team0 [ 2700.298926][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2700.318620][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2700.488721][ T1457] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2700.526344][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2700.543141][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2700.563050][T27661] bridge0: port 1(bridge_slave_0) entered blocking state [ 2700.570194][T27661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2700.662691][ T1457] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2700.742927][ T5113] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2700.751954][ T5113] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2700.762925][ T5113] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2700.770553][ T5113] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2700.778050][ T5113] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2700.833584][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2700.841754][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2700.876705][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2700.904017][ T5108] Bluetooth: hci2: command 0x0419 tx timeout [ 2700.904657][ T6685] bridge0: port 2(bridge_slave_1) entered blocking state [ 2700.917247][ T6685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2700.941244][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2700.963510][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2701.003658][ T1457] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2701.025634][ T1457] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2701.133016][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2701.143346][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2701.152977][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2701.161581][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2701.171598][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2701.230097][ T1454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2701.281318][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2701.289108][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2701.297185][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2701.306469][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2701.331969][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2701.429845][ T48] device hsr_slave_0 left promiscuous mode [ 2701.436929][ T48] device hsr_slave_1 left promiscuous mode [ 2701.443673][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2701.451115][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2701.460781][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2701.469287][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2701.479128][ T48] device bridge_slave_1 left promiscuous mode [ 2701.485745][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2701.499013][ T48] device bridge_slave_0 left promiscuous mode [ 2701.505680][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2701.519297][ T48] device hsr_slave_0 left promiscuous mode [ 2701.526751][ T48] device hsr_slave_1 left promiscuous mode [ 2701.533414][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2701.540873][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2701.553356][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2701.560833][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2701.569944][ T48] device bridge_slave_1 left promiscuous mode [ 2701.576221][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2701.585109][ T48] device bridge_slave_0 left promiscuous mode [ 2701.591369][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2701.608456][ T48] device hsr_slave_0 left promiscuous mode [ 2701.615014][ T48] device hsr_slave_1 left promiscuous mode [ 2701.621394][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2701.630154][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2701.639936][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2701.647638][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2701.657325][ T48] device bridge_slave_1 left promiscuous mode [ 2701.663741][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2701.672063][ T48] device bridge_slave_0 left promiscuous mode [ 2701.678714][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2701.691520][ T48] device hsr_slave_0 left promiscuous mode [ 2701.703235][ T48] device hsr_slave_1 left promiscuous mode [ 2701.709615][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2701.717410][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2701.731724][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2701.739407][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2701.749121][ T48] device bridge_slave_1 left promiscuous mode [ 2701.755524][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2701.764619][ T48] device bridge_slave_0 left promiscuous mode [ 2701.770802][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2701.796086][ T48] device veth1_macvtap left promiscuous mode [ 2701.802143][ T48] device veth0_macvtap left promiscuous mode [ 2701.808387][ T48] device veth1_vlan left promiscuous mode [ 2701.814566][ T48] device veth0_vlan left promiscuous mode [ 2701.821457][ T48] device veth1_macvtap left promiscuous mode [ 2701.827682][ T48] device veth0_macvtap left promiscuous mode [ 2701.837124][ T48] device veth1_vlan left promiscuous mode [ 2701.843435][ T48] device veth0_vlan left promiscuous mode [ 2701.850678][ T48] device veth1_macvtap left promiscuous mode [ 2701.856979][ T48] device veth0_macvtap left promiscuous mode [ 2701.863266][ T48] device veth1_vlan left promiscuous mode [ 2701.869108][ T48] device veth0_vlan left promiscuous mode [ 2701.885276][ T48] device veth1_macvtap left promiscuous mode [ 2701.891376][ T48] device veth0_macvtap left promiscuous mode [ 2701.897875][ T48] device veth1_vlan left promiscuous mode [ 2701.904199][ T48] device veth0_vlan left promiscuous mode [ 2702.411294][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2702.431454][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2702.447924][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2702.466345][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2702.543429][ T48] bond0 (unregistering): Released all slaves [ 2702.706823][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2702.740043][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2702.755021][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2702.772071][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2702.833478][ T5108] Bluetooth: hci0: command 0x0409 tx timeout [ 2702.862001][ T48] bond0 (unregistering): Released all slaves [ 2703.008186][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2703.021739][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2703.035204][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2703.049884][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2703.144182][ T48] bond0 (unregistering): Released all slaves [ 2703.288721][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2703.303273][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2703.319203][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2703.334435][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2703.416322][ T48] bond0 (unregistering): Released all slaves [ 2703.633617][ T1541] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2703.869976][ T1541] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2703.997406][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2704.005813][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2704.027266][ T1444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2704.153386][ T1541] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2704.207531][ T1457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2704.347320][ T1541] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2704.453269][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2704.462151][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2704.536538][ T1457] 8021q: adding VLAN 0 to HW filter on device team0 [ 2704.578575][ T1444] device veth0_vlan entered promiscuous mode [ 2704.603315][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2704.611381][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2704.633280][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2704.653156][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2704.663419][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2704.683345][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2704.717776][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2704.726177][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2704.734586][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2704.744065][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2704.753125][T12303] bridge0: port 1(bridge_slave_0) entered blocking state [ 2704.760246][T12303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2704.768442][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2704.777452][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2704.790606][T12303] bridge0: port 2(bridge_slave_1) entered blocking state [ 2704.797797][T12303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2704.839778][ T1444] device veth1_vlan entered promiscuous mode [ 2704.881304][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2704.903194][ T5108] Bluetooth: hci0: command 0x041b tx timeout [ 2704.911400][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2704.920509][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2704.930086][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2704.939433][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2704.949945][ T1646] chnl_net:caif_netlink_parms(): no params data found [ 2704.970068][ T1454] device veth0_vlan entered promiscuous mode [ 2704.994342][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2705.022744][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2705.030909][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2705.053112][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2705.061770][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2705.104104][ T1444] device veth0_macvtap entered promiscuous mode [ 2705.112719][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2705.120690][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2705.130007][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2705.138857][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2705.148059][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2705.157210][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2705.166827][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2705.180451][ T1457] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2705.194477][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2705.266843][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2705.275863][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2705.325733][ T1444] device veth1_macvtap entered promiscuous mode [ 2705.350142][ T1454] device veth1_vlan entered promiscuous mode [ 2705.529853][ T1444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2705.541603][ T1444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2705.554698][ T1444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2705.565439][ T1444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2705.577309][ T1444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2705.589445][ T1646] bridge0: port 1(bridge_slave_0) entered blocking state [ 2705.597660][ T1646] bridge0: port 1(bridge_slave_0) entered disabled state [ 2705.606480][ T1646] device bridge_slave_0 entered promiscuous mode [ 2705.616019][ T1646] bridge0: port 2(bridge_slave_1) entered blocking state [ 2705.624290][ T1646] bridge0: port 2(bridge_slave_1) entered disabled state [ 2705.632886][ T1646] device bridge_slave_1 entered promiscuous mode [ 2705.640182][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2705.650057][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2705.658493][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2705.667629][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2705.676593][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2705.685934][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2705.694938][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2705.704446][ T1541] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2705.719931][ T1454] device veth0_macvtap entered promiscuous mode [ 2705.756773][ T1444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2705.781190][ T1444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2705.791617][ T1444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2705.813078][ T1444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2705.840743][ T1444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2705.887289][ T1541] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2705.910399][ T1541] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2705.925977][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2705.936447][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2705.945403][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2705.957211][ T1444] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2705.972384][ T1444] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2705.981121][ T1444] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2705.991589][ T1444] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2706.007134][ T1646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2706.025474][ T1646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2706.052696][ T1541] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2706.133425][ T1454] device veth1_macvtap entered promiscuous mode [ 2706.188403][ T1646] team0: Port device team_slave_0 added [ 2706.276485][ T1646] team0: Port device team_slave_1 added [ 2706.369010][ T1454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2706.392603][ T1454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2706.412474][ T1454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2706.432395][ T1454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2706.450973][ T1454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2706.465955][ T1454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2706.486349][ T1454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2706.530017][ T1457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2706.556101][ T1646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2706.566277][ T1646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2706.592771][ T1646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2706.628780][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2706.649964][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2706.665559][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2706.682919][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2706.692866][ T1454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2706.706827][ T1454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2706.716888][ T1454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2706.727568][ T1454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2706.737548][ T1454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2706.762724][ T1454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2706.797143][ T1454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2706.825440][ T1478] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2706.835669][ T1646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2706.843596][ T1646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2706.870371][ T1646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2706.892793][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2706.901341][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2706.914265][ T1454] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2706.924282][ T1454] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2706.933383][ T1454] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2706.942116][ T1454] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2706.964524][ T5190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2706.969612][ T1478] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2706.984540][ T5190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2706.986102][ T1478] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2706.992959][ T5108] Bluetooth: hci0: command 0x040f tx timeout [ 2707.009136][ T1478] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2707.047287][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2707.101320][ T1646] device hsr_slave_0 entered promiscuous mode [ 2707.108802][ T1646] device hsr_slave_1 entered promiscuous mode [ 2707.132838][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2707.141676][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2707.171129][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2707.180218][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2707.191789][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2707.246498][ T1541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2707.292818][ T1457] device veth0_vlan entered promiscuous mode [ 2707.319508][ T1697] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2707.324166][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2707.329907][ T1697] CPU: 1 PID: 1697 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2707.347688][ T1697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2707.349002][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2707.357741][ T1697] Call Trace: [ 2707.357751][ T1697] [ 2707.357762][ T1697] dump_stack_lvl+0xd1/0x138 [ 2707.357799][ T1697] dump_header+0x10b/0x85f [ 2707.357839][ T1697] oom_kill_process.cold+0x10/0x15 [ 2707.357882][ T1697] out_of_memory+0x35c/0x14a0 [ 2707.390522][ T1697] ? oom_killer_disable+0x280/0x280 [ 2707.395759][ T1697] mem_cgroup_out_of_memory+0x206/0x270 [ 2707.401328][ T1697] ? mem_cgroup_margin+0x130/0x130 [ 2707.406473][ T1697] memory_max_write+0x2f9/0x3c0 [ 2707.411338][ T1697] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2707.417424][ T1697] ? lock_release+0x810/0x810 [ 2707.422113][ T1697] cgroup_file_write+0x1e2/0x770 [ 2707.427096][ T1697] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2707.433191][ T1697] ? kill_css+0x370/0x370 [ 2707.437532][ T1697] ? __virt_addr_valid+0x61/0x2e0 [ 2707.442585][ T1697] ? kill_css+0x370/0x370 [ 2707.447017][ T1697] kernfs_fop_write_iter+0x3f1/0x600 [ 2707.452332][ T1697] vfs_write+0x9ed/0xdd0 [ 2707.456597][ T1697] ? kernel_write+0x630/0x630 [ 2707.461290][ T1697] ? __fget_files+0x26a/0x440 [ 2707.466002][ T1697] ksys_write+0x12b/0x250 [ 2707.470344][ T1697] ? __ia32_sys_read+0xb0/0xb0 [ 2707.475135][ T1697] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2707.481085][ T1697] do_syscall_64+0x39/0xb0 [ 2707.485522][ T1697] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2707.491426][ T1697] RIP: 0033:0x7fb29708c0c9 [ 2707.495846][ T1697] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2707.515460][ T1697] RSP: 002b:00007fb297d81168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2707.523884][ T1697] RAX: ffffffffffffffda RBX: 00007fb2971abf80 RCX: 00007fb29708c0c9 [ 2707.531862][ T1697] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 2707.539835][ T1697] RBP: 00007fb2970e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2707.547809][ T1697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2707.555782][ T1697] R13: 00007fff3da0c53f R14: 00007fb297d81300 R15: 0000000000022000 [ 2707.563801][ T1697] [ 2707.624666][ T1697] memory: usage 8592kB, limit 0kB, failcnt 2104 [ 2707.631182][ T1697] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2707.639401][ T1697] Memory cgroup stats for /syz3: [ 2707.639605][ T1697] anon 114688 [ 2707.639605][ T1697] file 8347648 [ 2707.639605][ T1697] kernel 307200 [ 2707.639605][ T1697] kernel_stack 65536 [ 2707.639605][ T1697] pagetables 77824 [ 2707.639605][ T1697] sec_pagetables 0 [ 2707.639605][ T1697] percpu 64 [ 2707.639605][ T1697] sock 0 [ 2707.639605][ T1697] vmalloc 0 [ 2707.639605][ T1697] shmem 8347648 [ 2707.639605][ T1697] zswap 0 [ 2707.639605][ T1697] zswapped 0 [ 2707.639605][ T1697] file_mapped 151552 [ 2707.639605][ T1697] file_dirty 0 [ 2707.639605][ T1697] file_writeback 0 [ 2707.639605][ T1697] swapcached 0 [ 2707.639605][ T1697] anon_thp 0 [ 2707.639605][ T1697] file_thp 0 [ 2707.639605][ T1697] shmem_thp 0 [ 2707.639605][ T1697] inactive_anon 61440 [ 2707.639605][ T1697] active_anon 8347648 [ 2707.639605][ T1697] inactive_file 0 [ 2707.639605][ T1697] active_file 0 [ 2707.639605][ T1697] unevictable 0 [ 2707.639605][ T1697] slab_reclaimable 38888 [ 2707.639605][ T1697] slab_unreclaimable 99816 [ 2707.639605][ T1697] slab 138704 [ 2707.742450][ T1697] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=1696,uid=0 [ 2707.749417][ T1457] device veth1_vlan entered promiscuous mode 10:14:37 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x7, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x100, 0x0, 0x100, 0x10000000, 0x9}, r0, 0xb, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_int(r3, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='cgroup\x00') r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, r2, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 2707.758528][ T1697] Memory cgroup out of memory: Killed process 1696 (syz-executor.3) total-vm:56588kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2707.827412][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2707.843932][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2707.851878][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2707.858296][ T1444] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 2707.875629][ T1444] CPU: 1 PID: 1444 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2707.886010][ T1444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2707.896094][ T1444] Call Trace: [ 2707.899841][ T1444] [ 2707.902794][ T1444] dump_stack_lvl+0xd1/0x138 [ 2707.907425][ T1444] dump_header+0x10b/0x85f [ 2707.911904][ T1444] oom_kill_process.cold+0x10/0x15 [ 2707.917065][ T1444] out_of_memory+0x35c/0x14a0 [ 2707.921792][ T1444] ? find_held_lock+0x2d/0x110 [ 2707.926593][ T1444] ? oom_killer_disable+0x280/0x280 [ 2707.931838][ T1444] ? find_held_lock+0x2d/0x110 [ 2707.936643][ T1444] mem_cgroup_out_of_memory+0x206/0x270 [ 2707.942231][ T1444] ? mem_cgroup_margin+0x130/0x130 [ 2707.947397][ T1444] ? lock_downgrade+0x6e0/0x6e0 [ 2707.952299][ T1444] try_charge_memcg+0xefb/0x12f0 [ 2707.957288][ T1444] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2707.961371][ T1541] 8021q: adding VLAN 0 to HW filter on device team0 [ 2707.963284][ T1444] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2707.963325][ T1444] ? lock_downgrade+0x6e0/0x6e0 [ 2707.963352][ T1444] ? lock_downgrade+0x6e0/0x6e0 [ 2707.963394][ T1444] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2707.963427][ T1444] __alloc_pages+0x1f3/0x5b0 [ 2707.995578][ T1444] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2708.002410][ T1444] alloc_pages+0x1aa/0x270 [ 2708.006865][ T1444] pte_alloc_one+0x1a/0x230 [ 2708.011417][ T1444] __pte_alloc+0x6d/0x260 [ 2708.015793][ T1444] ? pmd_install+0x160/0x160 [ 2708.020434][ T1444] copy_page_range+0x17a8/0x3b40 [ 2708.025456][ T1444] ? mas_store+0x206/0x2e0 [ 2708.030350][ T1444] ? handle_mm_fault+0x850/0x850 [ 2708.035356][ T1444] ? up_write+0x1b0/0x520 [ 2708.039751][ T1444] dup_mmap+0xc10/0x10b0 [ 2708.044046][ T1444] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2708.049368][ T1444] ? lock_downgrade+0x6e0/0x6e0 [ 2708.054261][ T1444] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2708.060135][ T1444] ? mm_init+0x8e0/0xc10 [ 2708.064431][ T1444] copy_process+0x440f/0x7520 [ 2708.069141][ T1444] ? _raw_spin_unlock+0x28/0x40 [ 2708.074034][ T1444] ? wp_page_reuse+0x197/0x570 [ 2708.078854][ T1444] ? __cleanup_sighand+0xb0/0xb0 [ 2708.083825][ T1444] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2708.089421][ T1444] ? rwlock_bug.part.0+0x90/0x90 [ 2708.094395][ T1444] ? lock_chain_count+0x20/0x20 [ 2708.094703][ T1541] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2708.099261][ T1444] kernel_clone+0xeb/0x990 [ 2708.114014][ T1444] ? create_io_thread+0xf0/0xf0 [ 2708.118906][ T1444] ? find_held_lock+0x2d/0x110 [ 2708.123724][ T1444] __do_sys_clone+0xba/0x100 [ 2708.128344][ T1444] ? kernel_clone+0x990/0x990 [ 2708.133242][ T1444] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2708.139171][ T1444] do_syscall_64+0x39/0xb0 [ 2708.143626][ T1444] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2708.149560][ T1444] RIP: 0033:0x7fb297089dfb [ 2708.151937][ T1541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2708.154085][ T1444] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2708.154112][ T1444] RSP: 002b:00007fff3da0c780 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2708.154136][ T1444] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb297089dfb [ 2708.154151][ T1444] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2708.154165][ T1444] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555709e400 [ 2708.154179][ T1444] R10: 000055555709e6d0 R11: 0000000000000246 R12: 0000000000000001 [ 2708.154194][ T1444] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff3da0c860 [ 2708.154231][ T1444] [ 2708.209663][ T1444] memory: usage 8436kB, limit 0kB, failcnt 2138 [ 2708.293135][ T1444] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2708.300079][ T1444] Memory cgroup stats for /syz3: [ 2708.300257][ T1444] anon 45056 [ 2708.300257][ T1444] file 8347648 [ 2708.300257][ T1444] kernel 217088 [ 2708.300257][ T1444] kernel_stack 32768 [ 2708.300257][ T1444] pagetables 32768 [ 2708.300257][ T1444] sec_pagetables 0 [ 2708.300257][ T1444] percpu 128 [ 2708.300257][ T1444] sock 0 [ 2708.300257][ T1444] vmalloc 0 [ 2708.300257][ T1444] shmem 8347648 [ 2708.300257][ T1444] zswap 0 [ 2708.300257][ T1444] zswapped 0 [ 2708.300257][ T1444] file_mapped 122880 [ 2708.300257][ T1444] file_dirty 0 [ 2708.300257][ T1444] file_writeback 0 [ 2708.300257][ T1444] swapcached 0 [ 2708.300257][ T1444] anon_thp 0 [ 2708.300257][ T1444] file_thp 0 [ 2708.300257][ T1444] shmem_thp 0 [ 2708.300257][ T1444] inactive_anon 36864 [ 2708.300257][ T1444] active_anon 8347648 [ 2708.300257][ T1444] inactive_file 0 [ 2708.300257][ T1444] active_file 0 [ 2708.300257][ T1444] unevictable 0 [ 2708.300257][ T1444] slab_reclaimable 30216 [ 2708.300257][ T1444] slab_unreclaimable 94040 [ 2708.300257][ T1444] slab 124256 [ 2708.412624][ T1444] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=1444,uid=0 [ 2708.436593][ T1646] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2708.462500][ T1444] Memory cgroup out of memory: Killed process 1444 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2708.494985][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2708.513232][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2708.521225][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2708.550046][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2708.558983][T28164] bridge0: port 1(bridge_slave_0) entered blocking state [ 2708.566143][T28164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2708.574782][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2708.602270][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2708.611900][T28164] bridge0: port 2(bridge_slave_1) entered blocking state [ 2708.619067][T28164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2708.628291][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2708.637594][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2708.647074][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2708.656829][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2708.667754][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2708.693611][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2708.713307][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2708.723457][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2708.860264][ T1646] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2708.942859][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2708.951054][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2708.973296][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2709.039346][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2709.052930][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2709.062503][ T5108] Bluetooth: hci0: command 0x0419 tx timeout [ 2709.190014][ T1646] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 10:14:39 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x7, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x100, 0x0, 0x100, 0x10000000, 0x9}, r0, 0xb, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_int(r3, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='cgroup\x00') r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, r2, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 2709.246619][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2709.273652][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2709.281722][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2709.317972][ T1478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2709.427747][ T1478] 8021q: adding VLAN 0 to HW filter on device team0 [ 2709.515302][ T1646] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2709.565098][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2709.594053][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2709.615190][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2709.643082][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2709.651789][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2709.735453][ T1457] device veth0_macvtap entered promiscuous mode [ 2709.762498][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2709.770753][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2709.793154][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2709.801667][T28162] bridge0: port 1(bridge_slave_0) entered blocking state [ 2709.808915][T28162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2709.843263][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2709.872874][ T1457] device veth1_macvtap entered promiscuous mode [ 2709.948568][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2709.964091][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2709.971634][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2710.062627][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2710.071469][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2710.095010][ T1703] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2710.108035][T27660] bridge0: port 2(bridge_slave_1) entered blocking state [ 2710.115220][T27660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2710.123153][ T1703] CPU: 1 PID: 1703 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2710.123323][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2710.133503][ T1703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2710.133520][ T1703] Call Trace: [ 2710.133528][ T1703] [ 2710.133538][ T1703] dump_stack_lvl+0xd1/0x138 [ 2710.133576][ T1703] dump_header+0x10b/0x85f [ 2710.133619][ T1703] oom_kill_process.cold+0x10/0x15 [ 2710.133659][ T1703] out_of_memory+0x35c/0x14a0 [ 2710.133705][ T1703] ? oom_killer_disable+0x280/0x280 [ 2710.133747][ T1703] ? find_held_lock+0x2d/0x110 [ 2710.133792][ T1703] mem_cgroup_out_of_memory+0x206/0x270 [ 2710.133833][ T1703] ? mem_cgroup_margin+0x130/0x130 [ 2710.133884][ T1703] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2710.133925][ T1703] memory_max_write+0x2f9/0x3c0 [ 2710.133958][ T1703] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2710.133991][ T1703] ? lock_release+0x810/0x810 [ 2710.134022][ T1703] cgroup_file_write+0x1e2/0x770 [ 2710.143687][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2710.151959][ T1703] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2710.157124][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2710.158153][ T1703] ? kill_css+0x370/0x370 [ 2710.158190][ T1703] ? __virt_addr_valid+0x61/0x2e0 [ 2710.170564][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2710.172276][ T1703] ? kill_css+0x370/0x370 [ 2710.172314][ T1703] kernfs_fop_write_iter+0x3f1/0x600 [ 2710.172357][ T1703] vfs_write+0x9ed/0xdd0 [ 2710.188178][ T1541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2710.192518][ T1703] ? kernel_write+0x630/0x630 [ 2710.192557][ T1703] ? __fget_files+0x26a/0x440 [ 2710.192601][ T1703] ksys_write+0x12b/0x250 [ 2710.296774][ T1703] ? __ia32_sys_read+0xb0/0xb0 [ 2710.301567][ T1703] do_syscall_64+0x39/0xb0 [ 2710.306015][ T1703] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2710.311934][ T1703] RIP: 0033:0x7f1ba008c0c9 [ 2710.316382][ T1703] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2710.336088][ T1703] RSP: 002b:00007f1ba0d61168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2710.344599][ T1703] RAX: ffffffffffffffda RBX: 00007f1ba01abf80 RCX: 00007f1ba008c0c9 [ 2710.352576][ T1703] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 2710.360552][ T1703] RBP: 00007f1ba00e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2710.368528][ T1703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2710.376509][ T1703] R13: 00007ffc7b52658f R14: 00007f1ba0d61300 R15: 0000000000022000 [ 2710.384506][ T1703] [ 2710.414611][ T1457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2710.435110][ T1457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2710.445537][ T1703] memory: usage 8580kB, limit 0kB, failcnt 2387 [ 2710.452005][ T1703] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2710.456287][ T1457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2710.469718][ T1703] Memory cgroup stats for /syz5: [ 2710.472335][ T1703] anon 114688 [ 2710.472335][ T1703] file 8347648 [ 2710.472335][ T1703] kernel 311296 [ 2710.472335][ T1703] kernel_stack 65536 [ 2710.472335][ T1703] pagetables 77824 [ 2710.472335][ T1703] sec_pagetables 0 [ 2710.472335][ T1703] percpu 64 [ 2710.472335][ T1703] sock 0 [ 2710.472335][ T1703] vmalloc 0 [ 2710.472335][ T1703] shmem 8347648 [ 2710.472335][ T1703] zswap 0 [ 2710.472335][ T1703] zswapped 0 [ 2710.472335][ T1703] file_mapped 221184 [ 2710.472335][ T1703] file_dirty 0 [ 2710.472335][ T1703] file_writeback 0 [ 2710.472335][ T1703] swapcached 0 [ 2710.472335][ T1703] anon_thp 0 [ 2710.472335][ T1703] file_thp 0 [ 2710.472335][ T1703] shmem_thp 0 [ 2710.472335][ T1703] inactive_anon 4026368 [ 2710.472335][ T1703] active_anon 4415488 [ 2710.472335][ T1703] inactive_file 0 [ 2710.472335][ T1703] active_file 0 [ 2710.472335][ T1703] unevictable 0 [ 2710.472335][ T1703] slab_reclaimable 38120 [ 2710.472335][ T1703] slab_unreclaimable 99168 [ 2710.472335][ T1703] slab 137288 [ 2710.482988][ T1457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2710.682501][ T1703] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=1702,uid=0 [ 2710.732391][ T1457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2710.762404][ T1457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2710.792407][ T1457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2710.832552][ T1457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2710.854212][ T1457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2710.863386][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2710.872175][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2710.903501][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2710.906412][ T1703] Memory cgroup out of memory: Killed process 1703 (syz-executor.5) total-vm:54540kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2710.912107][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 10:14:41 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2710.973085][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2710.983244][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2711.015921][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2711.033422][ T1454] syz-executor.5 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 2711.044283][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2711.064160][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2711.084923][ T1541] device veth0_vlan entered promiscuous mode [ 2711.084992][ T1454] CPU: 0 PID: 1454 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2711.101284][ T1454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2711.111365][ T1454] Call Trace: [ 2711.114675][ T1454] [ 2711.117633][ T1454] dump_stack_lvl+0xd1/0x138 [ 2711.122273][ T1454] dump_header+0x10b/0x85f [ 2711.126731][ T1454] oom_kill_process.cold+0x10/0x15 [ 2711.131886][ T1454] out_of_memory+0x35c/0x14a0 [ 2711.136882][ T1454] ? find_held_lock+0x2d/0x110 [ 2711.141697][ T1454] ? oom_killer_disable+0x280/0x280 [ 2711.146954][ T1454] ? find_held_lock+0x2d/0x110 [ 2711.151747][ T1454] mem_cgroup_out_of_memory+0x206/0x270 [ 2711.157327][ T1454] ? mem_cgroup_margin+0x130/0x130 [ 2711.162466][ T1454] ? lock_downgrade+0x6e0/0x6e0 [ 2711.167372][ T1454] try_charge_memcg+0xefb/0x12f0 [ 2711.172355][ T1454] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2711.178370][ T1454] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2711.184126][ T1454] ? lock_downgrade+0x6e0/0x6e0 [ 2711.189004][ T1454] obj_cgroup_charge+0x2af/0x5e0 [ 2711.193958][ T1454] kmem_cache_alloc_lru+0x145/0x760 [ 2711.199161][ T1454] ? ext4_alloc_inode+0x28/0x680 [ 2711.204133][ T1454] ? ext4_free_in_core_inode+0x70/0x70 [ 2711.209603][ T1454] ext4_alloc_inode+0x28/0x680 [ 2711.214375][ T1454] ? ext4_free_in_core_inode+0x70/0x70 [ 2711.219841][ T1454] alloc_inode+0x61/0x230 [ 2711.224200][ T1454] iget_locked+0x1bb/0x700 [ 2711.228648][ T1454] __ext4_iget+0x3af/0x4230 [ 2711.233192][ T1454] ? ext4_get_projid+0x190/0x190 [ 2711.238150][ T1454] ? ext4_fname_prepare_lookup+0x163/0x200 [ 2711.243975][ T1454] ? ext4_fname_setup_filename+0x110/0x110 [ 2711.249808][ T1454] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2711.255381][ T1454] ext4_lookup+0x387/0x700 [ 2711.259808][ T1454] ? ext4_resetent+0x2d0/0x2d0 [ 2711.264607][ T1454] __lookup_slow+0x24c/0x460 [ 2711.269214][ T1454] ? __lookup_hash+0x180/0x180 [ 2711.273994][ T1454] ? scarlett2_usb_get_mix+0x2f6/0x318 [ 2711.279478][ T1454] ? scarlett2_usb_get_mix+0x2f6/0x318 [ 2711.284953][ T1454] ? lookup_fast+0x14e/0x520 [ 2711.289558][ T1454] walk_component+0x33f/0x5a0 [ 2711.294247][ T1454] path_lookupat+0x1ba/0x840 [ 2711.298854][ T1454] filename_lookup+0x1d2/0x590 [ 2711.303631][ T1454] ? may_linkat+0x500/0x500 [ 2711.308147][ T1454] ? __might_fault+0xd9/0x180 [ 2711.312848][ T1454] ? __phys_addr_symbol+0x30/0x70 [ 2711.317892][ T1454] ? __check_object_size+0x2e2/0x5a0 [ 2711.323195][ T1454] ? strncpy_from_user+0x28b/0x3c0 [ 2711.328323][ T1454] ? getname_flags.part.0+0x1dd/0x4f0 [ 2711.333716][ T1454] user_path_at_empty+0x46/0x60 [ 2711.338583][ T1454] __x64_sys_umount+0xfc/0x190 [ 2711.343357][ T1454] ? path_umount+0x10b0/0x10b0 [ 2711.348132][ T1454] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2711.354040][ T1454] do_syscall_64+0x39/0xb0 [ 2711.358473][ T1454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2711.364374][ T1454] RIP: 0033:0x7f1ba008d537 [ 2711.368793][ T1454] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2711.388406][ T1454] RSP: 002b:00007ffc7b5256e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2711.396827][ T1454] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1ba008d537 [ 2711.404809][ T1454] RDX: 00007ffc7b5257be RSI: 000000000000000a RDI: 00007ffc7b5257b0 [ 2711.412784][ T1454] RBP: 00007ffc7b5257b0 R08: 00000000ffffffff R09: 00007ffc7b525580 [ 2711.420760][ T1454] R10: 0000555556c8a8e3 R11: 0000000000000246 R12: 00007f1ba00e6b24 [ 2711.428737][ T1454] R13: 00007ffc7b526870 R14: 0000555556c8a810 R15: 00007ffc7b5268b0 [ 2711.436746][ T1454] [ 2711.492594][ T1454] memory: usage 8336kB, limit 0kB, failcnt 2406 [ 2711.495291][ T1457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2711.498878][ T1454] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2711.511022][ T1457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2711.526306][ T1457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2711.537123][ T1457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2711.547243][ T1457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2711.547402][ T1454] Memory cgroup stats for [ 2711.558047][ T1457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2711.575737][ T1457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2711.586538][ T1454] /syz5: [ 2711.586708][ T1454] anon 40960 [ 2711.586708][ T1454] file 8347648 [ 2711.586708][ T1454] kernel 131072 [ 2711.586708][ T1454] kernel_stack 0 [ 2711.586708][ T1454] pagetables 8192 [ 2711.586708][ T1454] sec_pagetables 0 [ 2711.586708][ T1454] percpu 64 [ 2711.586708][ T1454] sock 0 [ 2711.586708][ T1454] vmalloc 0 [ 2711.586708][ T1454] shmem 8347648 [ 2711.586708][ T1454] zswap 0 [ 2711.586708][ T1454] zswapped 0 [ 2711.586708][ T1454] file_mapped 221184 [ 2711.586708][ T1454] file_dirty 0 [ 2711.586708][ T1454] file_writeback 0 [ 2711.586708][ T1454] swapcached 0 [ 2711.586708][ T1454] anon_thp 0 [ 2711.586708][ T1454] file_thp 0 [ 2711.586708][ T1454] shmem_thp 0 [ 2711.586708][ T1454] inactive_anon 3973120 [ 2711.586708][ T1454] active_anon 4415488 [ 2711.586708][ T1454] inactive_file 0 [ 2711.586708][ T1454] active_file 0 [ 2711.586708][ T1454] unevictable 0 [ 2711.586708][ T1454] slab_reclaimable 33176 [ 2711.586708][ T1454] slab_unreclaimable 72416 [ 2711.586708][ T1454] slab 105592 [ 2711.589928][ T1457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2711.694946][ T1457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2711.711276][ T1478] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2711.734225][ T1454] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=1454,uid=0 [ 2711.752848][ T1478] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2711.760436][ T1454] Memory cgroup out of memory: Killed process 1454 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2711.778480][ T1541] device veth1_vlan entered promiscuous mode [ 2711.847911][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2711.864003][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2711.885306][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2711.903242][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2711.923222][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2711.943330][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2711.957392][ T1457] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2711.977806][ T1457] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2711.987488][ T1457] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2711.996657][ T1457] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2712.044265][ T1646] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2712.092661][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2712.152668][ T1646] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2712.213642][ T1646] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2712.250012][ T1541] device veth0_macvtap entered promiscuous mode [ 2712.275770][ T1646] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2712.286878][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2712.309169][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2712.334995][ T1541] device veth1_macvtap entered promiscuous mode [ 2712.347293][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2712.363341][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2712.458412][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2712.500587][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2712.523365][ T1541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2712.545384][ T1541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2712.560130][ T1541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2712.581062][ T1541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2712.591993][ T1541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2712.602832][ T1541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2712.613245][ T1541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2712.631609][ T1541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2712.642723][ T1541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2712.653501][ T1541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2712.666673][ T1541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2712.691615][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2712.701383][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2712.712207][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2712.777445][ T48] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2712.817221][ T1541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2712.843886][ T1541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2712.863520][ T1541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2712.885196][ T1541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2712.898140][ T1541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2712.910259][ T1541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2712.920470][ T1541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2712.931286][ T1541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2712.941449][ T1541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2712.954057][ T1541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2712.966126][ T1541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2713.004817][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2713.012491][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2713.021810][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2713.030028][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2713.051494][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2713.064601][ T1201] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.070935][ T1201] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.103541][ T48] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2713.136083][ T1541] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2713.152421][ T1541] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2713.161235][ T1541] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2713.182431][ T1541] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2713.219265][ T48] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2713.274639][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2713.282167][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2713.344711][ T48] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2713.397861][ T1478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2713.429092][ T1646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2713.528216][ T1646] 8021q: adding VLAN 0 to HW filter on device team0 [ 2713.545045][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2713.556907][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2713.621685][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2713.637870][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2713.669082][T30146] bridge0: port 1(bridge_slave_0) entered blocking state [ 2713.676311][T30146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2713.697989][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2713.708985][ T1709] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2713.732644][ T1709] CPU: 0 PID: 1709 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2713.733295][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2713.743010][ T1709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2713.743026][ T1709] Call Trace: [ 2713.743035][ T1709] [ 2713.743046][ T1709] dump_stack_lvl+0xd1/0x138 [ 2713.743082][ T1709] dump_header+0x10b/0x85f [ 2713.743123][ T1709] oom_kill_process.cold+0x10/0x15 [ 2713.754220][T30146] bridge0: port 2(bridge_slave_1) entered blocking state [ 2713.761149][ T1709] out_of_memory+0x35c/0x14a0 [ 2713.764524][T30146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2713.767344][ T1709] ? oom_killer_disable+0x280/0x280 [ 2713.772718][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2713.776707][ T1709] ? find_held_lock+0x2d/0x110 [ 2713.784159][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2713.788819][ T1709] mem_cgroup_out_of_memory+0x206/0x270 [ 2713.831607][ T1709] ? mem_cgroup_margin+0x130/0x130 [ 2713.836777][ T1709] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2713.842632][ T1709] memory_max_write+0x2f9/0x3c0 [ 2713.847505][ T1709] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2713.853594][ T1709] ? cgroup_file_write+0x8e/0x770 [ 2713.858642][ T1709] cgroup_file_write+0x1e2/0x770 [ 2713.863595][ T1709] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2713.869672][ T1709] ? kill_css+0x370/0x370 [ 2713.874027][ T1709] ? kill_css+0x370/0x370 [ 2713.878372][ T1709] kernfs_fop_write_iter+0x3f1/0x600 [ 2713.883682][ T1709] vfs_write+0x9ed/0xdd0 [ 2713.887947][ T1709] ? kernel_write+0x630/0x630 [ 2713.892660][ T1709] ksys_write+0x12b/0x250 [ 2713.897004][ T1709] ? __ia32_sys_read+0xb0/0xb0 [ 2713.901779][ T1709] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2713.907702][ T1709] do_syscall_64+0x39/0xb0 [ 2713.912225][ T1709] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2713.918222][ T1709] RIP: 0033:0x7f3b8468c0c9 [ 2713.922653][ T1709] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2713.942635][ T1709] RSP: 002b:00007f3b831fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2713.951061][ T1709] RAX: ffffffffffffffda RBX: 00007f3b847abf80 RCX: 00007f3b8468c0c9 [ 2713.959212][ T1709] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 2713.967466][ T1709] RBP: 00007f3b846e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2713.975456][ T1709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2713.983530][ T1709] R13: 00007ffd8d72477f R14: 00007f3b831fe300 R15: 0000000000022000 [ 2713.991886][ T1709] [ 2714.063783][ T1709] memory: usage 560kB, limit 0kB, failcnt 2036 [ 2714.064534][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2714.071693][ T1709] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2714.128717][ T8036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2714.137155][ T1709] Memory cgroup stats for /syz1: [ 2714.137361][ T1709] anon 114688 [ 2714.137361][ T1709] file 180224 [ 2714.137361][ T1709] kernel 266240 [ 2714.137361][ T1709] kernel_stack 65536 [ 2714.137361][ T1709] pagetables 81920 [ 2714.137361][ T1709] sec_pagetables 0 [ 2714.137361][ T1709] percpu 64 [ 2714.137361][ T1709] sock 0 [ 2714.137361][ T1709] vmalloc 0 [ 2714.137361][ T1709] shmem 180224 [ 2714.137361][ T1709] zswap 0 [ 2714.137361][ T1709] zswapped 0 [ 2714.137361][ T1709] file_mapped 180224 [ 2714.137361][ T1709] file_dirty 0 [ 2714.137361][ T1709] file_writeback 0 [ 2714.137361][ T1709] swapcached 0 [ 2714.137361][ T1709] anon_thp 0 [ 2714.137361][ T1709] file_thp 0 [ 2714.137361][ T1709] shmem_thp 0 [ 2714.137361][ T1709] inactive_anon 184320 [ 2714.137361][ T1709] active_anon 110592 [ 2714.137361][ T1709] inactive_file 0 [ 2714.137361][ T1709] active_file 0 [ 2714.137361][ T1709] unevictable 0 [ 2714.137361][ T1709] slab_reclaimable 17288 [ 2714.137361][ T1709] slab_unreclaimable 72456 [ 2714.137361][ T1709] slab 89744 [ 2714.172446][ T1709] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 2714.264074][ T8036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2714.298633][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2714.319211][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2714.340995][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2714.363210][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2714.400348][ T1646] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2714.408335][ T1709] ,cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=1708,uid=0 10:14:44 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:14:44 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x7, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x100, 0x0, 0x100, 0x10000000, 0x9}, r0, 0xb, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_int(r3, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='cgroup\x00') r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, r2, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 2714.435994][ T1709] Memory cgroup out of memory: Killed process 1709 (syz-executor.1) total-vm:54540kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2714.439218][ T1646] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2714.522493][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2714.531913][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2714.577232][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2714.597292][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2714.612880][ T1457] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 2714.622196][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2714.652433][ T1457] CPU: 0 PID: 1457 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2714.662826][ T1457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2714.672908][ T1457] Call Trace: [ 2714.676209][ T1457] [ 2714.679166][ T1457] dump_stack_lvl+0xd1/0x138 [ 2714.683799][ T1457] dump_header+0x10b/0x85f [ 2714.688265][ T1457] oom_kill_process.cold+0x10/0x15 [ 2714.693432][ T1457] out_of_memory+0x35c/0x14a0 [ 2714.698158][ T1457] ? find_held_lock+0x2d/0x110 [ 2714.702959][ T1457] ? oom_killer_disable+0x280/0x280 [ 2714.708204][ T1457] ? find_held_lock+0x2d/0x110 [ 2714.713010][ T1457] mem_cgroup_out_of_memory+0x206/0x270 [ 2714.718604][ T1457] ? mem_cgroup_margin+0x130/0x130 [ 2714.723769][ T1457] ? lock_downgrade+0x6e0/0x6e0 [ 2714.728675][ T1457] try_charge_memcg+0xefb/0x12f0 [ 2714.733659][ T1457] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2714.739680][ T1457] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2714.745453][ T1457] ? lock_downgrade+0x6e0/0x6e0 [ 2714.750346][ T1457] ? lock_downgrade+0x6e0/0x6e0 [ 2714.755251][ T1457] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2714.760843][ T1457] __alloc_pages+0x1f3/0x5b0 [ 2714.765482][ T1457] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2714.772303][ T1457] ? find_held_lock+0x2d/0x110 [ 2714.777122][ T1457] ? lock_downgrade+0x6e0/0x6e0 [ 2714.782002][ T1457] ? do_raw_spin_lock+0x124/0x2b0 [ 2714.787072][ T1457] alloc_pages+0x1aa/0x270 [ 2714.791536][ T1457] __pmd_alloc+0x3f/0x5d0 [ 2714.795909][ T1457] ? __pud_alloc+0xe4/0x180 [ 2714.800457][ T1457] copy_page_range+0x2829/0x3b40 [ 2714.805475][ T1457] ? mas_store+0x206/0x2e0 [ 2714.809921][ T1457] ? handle_mm_fault+0x850/0x850 [ 2714.814911][ T1457] ? anon_vma_fork+0xba/0x630 [ 2714.819636][ T1457] dup_mmap+0xc10/0x10b0 [ 2714.823929][ T1457] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2714.829254][ T1457] ? lock_downgrade+0x6e0/0x6e0 [ 2714.834150][ T1457] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2714.840005][ T1457] ? mm_init+0x8e0/0xc10 [ 2714.844303][ T1457] copy_process+0x440f/0x7520 [ 2714.849016][ T1457] ? _raw_spin_unlock+0x28/0x40 [ 2714.853900][ T1457] ? wp_page_reuse+0x197/0x570 [ 2714.858717][ T1457] ? __cleanup_sighand+0xb0/0xb0 [ 2714.863682][ T1457] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2714.869096][ T1457] ? rwlock_bug.part.0+0x90/0x90 [ 2714.874076][ T1457] ? lock_chain_count+0x20/0x20 [ 2714.878977][ T1457] kernel_clone+0xeb/0x990 [ 2714.883441][ T1457] ? create_io_thread+0xf0/0xf0 [ 2714.888346][ T1457] ? find_held_lock+0x2d/0x110 [ 2714.893179][ T1457] __do_sys_clone+0xba/0x100 [ 2714.897814][ T1457] ? kernel_clone+0x990/0x990 [ 2714.902551][ T1457] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2714.908479][ T1457] do_syscall_64+0x39/0xb0 [ 2714.912937][ T1457] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2714.918864][ T1457] RIP: 0033:0x7f3b84689dfb [ 2714.923312][ T1457] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2714.942966][ T1457] RSP: 002b:00007ffd8d7249c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2714.951948][ T1457] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3b84689dfb [ 2714.960299][ T1457] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2714.968298][ T1457] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555718f400 [ 2714.976302][ T1457] R10: 000055555718f6d0 R11: 0000000000000246 R12: 0000000000000001 [ 2714.984474][ T1457] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd8d724aa0 [ 2714.992608][ T1457] [ 2715.055547][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2715.087410][ T1457] memory: usage 360kB, limit 0kB, failcnt 2065 [ 2715.092417][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2715.102412][ T1457] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2715.109310][ T1457] Memory cgroup stats for /syz1: [ 2715.109507][ T1457] anon 36864 [ 2715.109507][ T1457] file 180224 [ 2715.109507][ T1457] kernel 151552 [ 2715.109507][ T1457] kernel_stack 32768 [ 2715.109507][ T1457] pagetables 16384 [ 2715.109507][ T1457] sec_pagetables 0 [ 2715.109507][ T1457] percpu 128 [ 2715.109507][ T1457] sock 0 [ 2715.109507][ T1457] vmalloc 0 [ 2715.109507][ T1457] shmem 180224 [ 2715.109507][ T1457] zswap 0 [ 2715.109507][ T1457] zswapped 0 [ 2715.109507][ T1457] file_mapped 180224 [ 2715.109507][ T1457] file_dirty 0 [ 2715.109507][ T1457] file_writeback 0 [ 2715.109507][ T1457] swapcached 0 [ 2715.109507][ T1457] anon_thp 0 [ 2715.109507][ T1457] file_thp 0 [ 2715.109507][ T1457] shmem_thp 0 [ 2715.109507][ T1457] inactive_anon 106496 [ 2715.109507][ T1457] active_anon 110592 [ 2715.109507][ T1457] inactive_file 0 [ 2715.109507][ T1457] active_file 0 [ 2715.109507][ T1457] unevictable 0 [ 2715.109507][ T1457] slab_reclaimable 10424 [ 2715.109507][ T1457] slab_unreclaimable 66632 [ 2715.109507][ T1457] slab 77056 [ 2715.218497][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2715.301097][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2715.493185][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2715.534182][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2715.553840][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2715.562478][ T1457] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=1457,uid=0 [ 2715.615538][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2715.633809][ T1457] Memory cgroup out of memory: Killed process 1457 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2715.690347][ T1719] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2715.702471][ T1719] CPU: 1 PID: 1719 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2715.712980][ T1719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2715.723047][ T1719] Call Trace: [ 2715.726338][ T1719] [ 2715.729365][ T1719] dump_stack_lvl+0xd1/0x138 [ 2715.733977][ T1719] dump_header+0x10b/0x85f [ 2715.738419][ T1719] oom_kill_process.cold+0x10/0x15 [ 2715.743565][ T1719] out_of_memory+0x35c/0x14a0 [ 2715.748274][ T1719] ? oom_killer_disable+0x280/0x280 [ 2715.753503][ T1719] mem_cgroup_out_of_memory+0x206/0x270 [ 2715.759162][ T1719] ? mem_cgroup_margin+0x130/0x130 [ 2715.764336][ T1719] memory_max_write+0x2f9/0x3c0 [ 2715.769218][ T1719] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2715.775300][ T1719] ? lock_release+0x810/0x810 [ 2715.779993][ T1719] cgroup_file_write+0x1e2/0x770 [ 2715.784948][ T1719] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2715.791026][ T1719] ? kill_css+0x370/0x370 [ 2715.795368][ T1719] ? __virt_addr_valid+0x61/0x2e0 [ 2715.800421][ T1719] ? kill_css+0x370/0x370 [ 2715.804772][ T1719] kernfs_fop_write_iter+0x3f1/0x600 [ 2715.810100][ T1719] vfs_write+0x9ed/0xdd0 [ 2715.814366][ T1719] ? kernel_write+0x630/0x630 [ 2715.819064][ T1719] ? __fget_files+0x26a/0x440 [ 2715.823764][ T1719] ksys_write+0x12b/0x250 [ 2715.828104][ T1719] ? __ia32_sys_read+0xb0/0xb0 [ 2715.832880][ T1719] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2715.838794][ T1719] do_syscall_64+0x39/0xb0 [ 2715.843327][ T1719] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2715.849232][ T1719] RIP: 0033:0x7fabb8e8c0c9 [ 2715.853657][ T1719] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2715.873449][ T1719] RSP: 002b:00007fabb9b58168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2715.881970][ T1719] RAX: ffffffffffffffda RBX: 00007fabb8fabf80 RCX: 00007fabb8e8c0c9 [ 2715.889950][ T1719] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 2715.897944][ T1719] RBP: 00007fabb8ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2715.905952][ T1719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2715.913938][ T1719] R13: 00007fff4cad12cf R14: 00007fabb9b58300 R15: 0000000000022000 [ 2715.921939][ T1719] [ 2715.946620][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2715.973246][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2715.993745][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2716.021136][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2716.045757][ T1478] device veth0_vlan entered promiscuous mode [ 2716.082849][ T1478] device veth1_vlan entered promiscuous mode [ 2716.143288][ T1719] memory: usage 592kB, limit 0kB, failcnt 2413 [ 2716.159620][ T1719] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2716.183719][ T1719] Memory cgroup stats for /syz0: [ 2716.183945][ T1719] anon 114688 [ 2716.183945][ T1719] file 184320 [ 2716.183945][ T1719] kernel 294912 [ 2716.183945][ T1719] kernel_stack 65536 [ 2716.183945][ T1719] pagetables 77824 [ 2716.183945][ T1719] sec_pagetables 0 [ 2716.183945][ T1719] percpu 208 [ 2716.183945][ T1719] sock 0 [ 2716.183945][ T1719] vmalloc 4096 [ 2716.183945][ T1719] shmem 184320 [ 2716.183945][ T1719] zswap 0 [ 2716.183945][ T1719] zswapped 0 [ 2716.183945][ T1719] file_mapped 184320 [ 2716.183945][ T1719] file_dirty 0 [ 2716.183945][ T1719] file_writeback 0 [ 2716.183945][ T1719] swapcached 0 [ 2716.183945][ T1719] anon_thp 0 [ 2716.183945][ T1719] file_thp 0 [ 2716.183945][ T1719] shmem_thp 0 [ 2716.183945][ T1719] inactive_anon 176128 [ 2716.183945][ T1719] active_anon 122880 [ 2716.183945][ T1719] inactive_file 0 [ 2716.183945][ T1719] active_file 0 [ 2716.183945][ T1719] unevictable 0 [ 2716.183945][ T1719] slab_reclaimable 17792 [ 2716.183945][ T1719] slab_unreclaimable 105216 [ 2716.183945][ T1719] slab 123008 [ 2716.302532][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2716.357541][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2716.414277][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2716.421852][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2716.460690][ T1646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2716.480289][ T1478] device veth0_macvtap entered promiscuous mode [ 2716.503154][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2716.511850][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2716.555215][ T1478] device veth1_macvtap entered promiscuous mode [ 2716.567729][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2716.584574][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2716.643199][ T1719] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1718,uid=0 [ 2716.681070][ T1478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2716.692947][ T1719] Memory cgroup out of memory: Killed process 1719 (syz-executor.0) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2716.732622][ T1478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2716.752375][ T1478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2716.779439][ T1478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2716.804152][ T1478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2716.819509][ T1541] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2716.829646][ T1478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2716.829689][ T1478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2716.829729][ T1478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2716.829740][ T1478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2716.912392][ T1541] CPU: 1 PID: 1541 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2716.922558][ T1478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2716.923547][ T1541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2716.942408][ T1478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2716.943965][ T1541] Call Trace: [ 2716.943976][ T1541] [ 2716.960957][ T1541] dump_stack_lvl+0xd1/0x138 [ 2716.965591][ T1541] dump_header+0x10b/0x85f [ 2716.970062][ T1541] oom_kill_process.cold+0x10/0x15 [ 2716.972410][ T1478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2716.975216][ T1541] out_of_memory+0x35c/0x14a0 [ 2716.989821][ T1541] ? find_held_lock+0x2d/0x110 [ 2716.994631][ T1541] ? oom_killer_disable+0x280/0x280 [ 2716.999883][ T1541] ? find_held_lock+0x2d/0x110 [ 2717.002089][ T1478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2717.004680][ T1541] mem_cgroup_out_of_memory+0x206/0x270 [ 2717.004721][ T1541] ? mem_cgroup_margin+0x130/0x130 [ 2717.004782][ T1541] ? lock_downgrade+0x6e0/0x6e0 [ 2717.004825][ T1541] try_charge_memcg+0xefb/0x12f0 [ 2717.004862][ T1541] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2717.004898][ T1541] ? lock_downgrade+0x6e0/0x6e0 [ 2717.004934][ T1541] charge_memcg+0x90/0x3b0 [ 2717.004962][ T1541] __mem_cgroup_charge+0x2b/0x90 [ 2717.053215][ T1541] ? _compound_head+0x5d/0x150 [ 2717.058037][ T1541] __handle_mm_fault+0x187d/0x3c90 [ 2717.063484][ T1541] ? vm_iomap_memory+0x190/0x190 [ 2717.063753][ T1478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2717.068467][ T1541] handle_mm_fault+0x1b6/0x850 [ 2717.083650][ T1541] do_user_addr_fault+0x475/0x1210 [ 2717.088808][ T1541] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2717.094403][ T1541] exc_page_fault+0x98/0x170 [ 2717.099027][ T1541] asm_exc_page_fault+0x26/0x30 [ 2717.102614][ T1478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2717.103907][ T1541] RIP: 0033:0x7fabb8e5a7d5 [ 2717.118497][ T1541] Code: e8 4b 8d 0c 2f 48 8b 6c 24 18 48 39 d3 48 89 4b 60 0f 95 c2 48 83 c8 01 0f b6 d2 48 c1 e2 02 4c 09 ea 48 83 ca 01 49 89 57 08 <48> 89 41 08 49 83 c7 10 eb b3 48 8d 3d 6a 0d 0a 00 e8 75 c9 ff ff [ 2717.138142][ T1541] RSP: 002b:00007fff4cad0270 EFLAGS: 00010206 [ 2717.142939][ T1478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2717.144215][ T1541] RAX: 00000000000187c1 RBX: 00007fabb8f885e0 RCX: 000055555695a840 [ 2717.162615][ T1541] RDX: 0000000000008041 RSI: 0000000000000000 RDI: 0000000000000004 [ 2717.170620][ T1541] RBP: 0000000000008030 R08: 0000000000000003 R09: 00007fabb8f88640 [ 2717.172450][ T1478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2717.178595][ T1541] R10: 0000000000000231 R11: 0000000000000000 R12: 0000000000000802 [ 2717.196439][ T1541] R13: 0000000000008040 R14: 0000000000000804 R15: 0000555556952800 [ 2717.204460][ T1541] [ 2717.232565][ T1478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2717.272472][ T1478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2717.302985][ T1478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2717.332458][ T1478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2717.362402][ T1478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2717.403444][ T1478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2717.428366][ T1478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2717.463864][ T1478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2717.504190][ T1478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2717.518753][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2717.528923][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2717.546734][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2717.563643][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2717.582820][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2717.600100][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2717.643416][ T5113] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2717.659810][ T1478] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2717.668854][ T5113] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2717.668857][ T1541] memory: usage 336kB, limit 0kB, failcnt 2432 [ 2717.682468][ T1541] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2717.689811][T29331] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2717.694353][ T1478] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2717.697628][ T1541] Memory cgroup stats for [ 2717.709569][T29331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2717.717202][ T1478] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2717.730778][T29331] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2717.736691][ T1478] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2717.746564][ T1541] /syz0: [ 2717.746787][ T1541] anon 36864 [ 2717.746787][ T1541] file 184320 [ 2717.746787][ T1541] kernel 110592 [ 2717.746787][ T1541] kernel_stack 0 [ 2717.746787][ T1541] pagetables 8192 [ 2717.746787][ T1541] sec_pagetables 0 [ 2717.746787][ T1541] percpu 64 [ 2717.746787][ T1541] sock 0 [ 2717.746787][ T1541] vmalloc 0 [ 2717.746787][ T1541] shmem 184320 [ 2717.746787][ T1541] zswap 0 [ 2717.746787][ T1541] zswapped 0 [ 2717.746787][ T1541] file_mapped 184320 [ 2717.746787][ T1541] file_dirty 0 [ 2717.746787][ T1541] file_writeback 0 [ 2717.746787][ T1541] swapcached 0 [ 2717.746787][ T1541] anon_thp 0 [ 2717.746787][ T1541] file_thp 0 [ 2717.746787][ T1541] shmem_thp 0 [ 2717.746787][ T1541] inactive_anon 98304 [ 2717.746787][ T1541] active_anon 122880 [ 2717.746787][ T1541] inactive_file 0 [ 2717.746787][ T1541] active_file 0 [ 2717.746787][ T1541] unevictable 0 [ 2717.746787][ T1541] slab_reclaimable 16640 [ 2717.746787][ T1541] slab_unreclaimable 72416 [ 2717.746787][ T1541] slab 89056 [ 2717.780715][ T1646] device veth0_vlan entered promiscuous mode [ 2717.847866][T29331] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2717.865838][ T1541] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1541,uid=0 [ 2717.884859][ T1541] Memory cgroup out of memory: Killed process 1541 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2717.922044][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2717.930656][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2717.939972][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2717.948507][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2717.969978][ T1646] device veth1_vlan entered promiscuous mode [ 2718.266719][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2718.276060][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2718.285690][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2718.294969][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2718.323148][ T1646] device veth0_macvtap entered promiscuous mode [ 2718.374276][ T2422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2718.377285][ T1646] device veth1_macvtap entered promiscuous mode [ 2718.389003][ T2422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2718.502809][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2718.511121][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2718.553412][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2718.742772][ T1646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2718.755583][ T1646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2718.771145][ T1646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2718.782152][ T1646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2718.804738][ T1646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2718.822339][ T1646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2718.851909][ T1646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2718.872344][ T1646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2718.882284][ T1646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2718.912338][ T1646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2718.933934][ T1646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2718.946101][ T1646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2718.956575][ T1646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2718.967464][ T1646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2718.979283][ T1646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2718.990896][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2719.001003][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2719.017174][ T5190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2719.036276][ T5190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2719.068359][ T1646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2719.080289][ T1646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2719.097826][ T1646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2719.109190][ T1646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2719.119887][ T1646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2719.131051][ T1646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2719.142212][ T1646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2719.155117][ T1646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2719.165418][ T1646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2719.177278][ T1646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2719.187483][ T1646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2719.198715][ T1646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2719.209165][ T1646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2719.220337][ T1646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2719.231750][ T1646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2719.262678][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2719.270899][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2719.279835][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2719.315459][ T1646] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2719.328073][ T1646] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2719.337190][ T1646] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2719.347329][ T1646] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2719.818128][ T1753] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2719.830148][ T1753] CPU: 0 PID: 1753 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2719.840976][ T1753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2719.851073][ T1753] Call Trace: [ 2719.854387][ T1753] [ 2719.857574][ T1753] dump_stack_lvl+0xd1/0x138 [ 2719.862474][ T1753] dump_header+0x10b/0x85f [ 2719.866959][ T1753] oom_kill_process.cold+0x10/0x15 [ 2719.872507][ T1753] out_of_memory+0x35c/0x14a0 [ 2719.877262][ T1753] ? oom_killer_disable+0x280/0x280 [ 2719.882570][ T1753] ? mark_held_locks+0x9f/0xe0 [ 2719.887378][ T1753] mem_cgroup_out_of_memory+0x206/0x270 [ 2719.892968][ T1753] ? mem_cgroup_margin+0x130/0x130 [ 2719.898130][ T1753] memory_max_write+0x2f9/0x3c0 [ 2719.903007][ T1753] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2719.909291][ T1753] ? lock_release+0x810/0x810 [ 2719.914162][ T1753] cgroup_file_write+0x1e2/0x770 [ 2719.919121][ T1753] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2719.925226][ T1753] ? kill_css+0x370/0x370 [ 2719.929596][ T1753] ? __virt_addr_valid+0x61/0x2e0 [ 2719.934755][ T1753] ? kill_css+0x370/0x370 [ 2719.939283][ T1753] kernfs_fop_write_iter+0x3f1/0x600 [ 2719.944614][ T1753] vfs_write+0x9ed/0xdd0 [ 2719.948876][ T1753] ? kernel_write+0x630/0x630 [ 2719.953575][ T1753] ? __fget_files+0x26a/0x440 [ 2719.958288][ T1753] ksys_write+0x12b/0x250 [ 2719.962769][ T1753] ? __ia32_sys_read+0xb0/0xb0 [ 2719.967583][ T1753] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2719.973509][ T1753] do_syscall_64+0x39/0xb0 [ 2719.977953][ T1753] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2719.983865][ T1753] RIP: 0033:0x7feabce8c0c9 [ 2719.988294][ T1753] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2720.007924][ T1753] RSP: 002b:00007feabdc71168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2720.016351][ T1753] RAX: ffffffffffffffda RBX: 00007feabcfabf80 RCX: 00007feabce8c0c9 [ 2720.024335][ T1753] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000008 [ 2720.032320][ T1753] RBP: 00007feabcee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2720.040310][ T1753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2720.048293][ T1753] R13: 00007fff435082ef R14: 00007feabdc71300 R15: 0000000000022000 [ 2720.056407][ T1753] [ 2720.073357][T29331] Bluetooth: hci1: command 0x0409 tx timeout [ 2720.087046][ T1753] memory: usage 504kB, limit 0kB, failcnt 2377 [ 2720.094535][ T1753] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2720.101676][ T1753] Memory cgroup stats for /syz4: [ 2720.106593][ T1753] anon 114688 [ 2720.106593][ T1753] file 122880 [ 2720.106593][ T1753] kernel 270336 [ 2720.106593][ T1753] kernel_stack 65536 [ 2720.106593][ T1753] pagetables 81920 [ 2720.106593][ T1753] sec_pagetables 0 [ 2720.106593][ T1753] percpu 64 [ 2720.106593][ T1753] sock 0 [ 2720.106593][ T1753] vmalloc 0 [ 2720.106593][ T1753] shmem 122880 [ 2720.106593][ T1753] zswap 0 [ 2720.106593][ T1753] zswapped 0 [ 2720.106593][ T1753] file_mapped 110592 [ 2720.106593][ T1753] file_dirty 0 [ 2720.106593][ T1753] file_writeback 0 [ 2720.106593][ T1753] swapcached 0 [ 2720.106593][ T1753] anon_thp 0 [ 2720.106593][ T1753] file_thp 0 [ 2720.106593][ T1753] shmem_thp 0 [ 2720.106593][ T1753] inactive_anon 126976 [ 2720.106593][ T1753] active_anon 110592 [ 2720.106593][ T1753] inactive_file 0 [ 2720.106593][ T1753] active_file 0 [ 2720.106593][ T1753] unevictable 0 [ 2720.106593][ T1753] slab_reclaimable 19984 [ 2720.106593][ T1753] slab_unreclaimable 75048 [ 2720.106593][ T1753] slab 95032 [ 2720.230114][ T1740] chnl_net:caif_netlink_parms(): no params data found [ 2720.249826][ T5190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2720.287374][ T5190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2720.307225][ T1753] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=1478,uid=0 [ 2720.356693][ T1753] Memory cgroup out of memory: Killed process 1478 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2720.398262][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2720.576253][ T5190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2720.585761][ T5190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2720.658079][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2720.865282][ T1740] bridge0: port 1(bridge_slave_0) entered blocking state [ 2720.882548][ T1740] bridge0: port 1(bridge_slave_0) entered disabled state [ 2720.890970][ T1740] device bridge_slave_0 entered promiscuous mode [ 2720.917373][ T1740] bridge0: port 2(bridge_slave_1) entered blocking state [ 2720.932548][ T1740] bridge0: port 2(bridge_slave_1) entered disabled state [ 2720.940920][ T1740] device bridge_slave_1 entered promiscuous mode 10:14:51 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x7, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x100, 0x0, 0x100, 0x10000000, 0x9, 0x0, 0x1f}, r0, 0x0, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_int(r3, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='cgroup\x00') r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, r2, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000600), 0x12) 10:14:51 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:14:51 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:14:51 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2721.156299][ T1740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2721.211727][ T1740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2721.294281][ T1772] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2721.322841][ T1772] CPU: 0 PID: 1772 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2721.333245][ T1772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2721.343422][ T1772] Call Trace: [ 2721.346732][ T1772] [ 2721.349685][ T1772] dump_stack_lvl+0xd1/0x138 [ 2721.354316][ T1772] dump_header+0x10b/0x85f [ 2721.358779][ T1772] oom_kill_process.cold+0x10/0x15 [ 2721.363943][ T1772] out_of_memory+0x35c/0x14a0 [ 2721.368673][ T1772] ? lockdep_hardirqs_on+0x7d/0x100 [ 2721.373911][ T1772] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2721.380114][ T1772] ? oom_killer_disable+0x280/0x280 [ 2721.385377][ T1772] mem_cgroup_out_of_memory+0x206/0x270 [ 2721.390953][ T1772] ? mem_cgroup_margin+0x130/0x130 [ 2721.396101][ T1772] memory_max_write+0x2f9/0x3c0 [ 2721.400969][ T1772] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2721.407076][ T1772] ? lock_release+0x810/0x810 [ 2721.411780][ T1772] cgroup_file_write+0x1e2/0x770 [ 2721.416825][ T1772] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2721.422906][ T1772] ? kill_css+0x370/0x370 [ 2721.427250][ T1772] ? __virt_addr_valid+0x61/0x2e0 [ 2721.432308][ T1772] ? kill_css+0x370/0x370 [ 2721.436654][ T1772] kernfs_fop_write_iter+0x3f1/0x600 [ 2721.441965][ T1772] vfs_write+0x9ed/0xdd0 [ 2721.446236][ T1772] ? kernel_write+0x630/0x630 [ 2721.450954][ T1772] ? __fget_files+0x26a/0x440 [ 2721.455664][ T1772] ksys_write+0x12b/0x250 [ 2721.460005][ T1772] ? __ia32_sys_read+0xb0/0xb0 [ 2721.464786][ T1772] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2721.470707][ T1772] do_syscall_64+0x39/0xb0 [ 2721.475150][ T1772] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2721.481064][ T1772] RIP: 0033:0x7f296a28c0c9 [ 2721.485491][ T1772] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2721.505108][ T1772] RSP: 002b:00007f296b01c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2721.513535][ T1772] RAX: ffffffffffffffda RBX: 00007f296a3abf80 RCX: 00007f296a28c0c9 [ 2721.521513][ T1772] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 2721.529581][ T1772] RBP: 00007f296a2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2721.537561][ T1772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2721.545557][ T1772] R13: 00007fff98121fbf R14: 00007f296b01c300 R15: 0000000000022000 [ 2721.553554][ T1772] 10:14:51 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x7, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x100, 0x0, 0x100, 0x10000000, 0x9, 0x0, 0x1f}, r0, 0x0, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_int(r3, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='cgroup\x00') r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, r2, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 2721.616539][ T1740] team0: Port device team_slave_0 added [ 2721.623991][ T1772] memory: usage 528kB, limit 0kB, failcnt 2616 [ 2721.642736][ T1772] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2721.649747][ T1772] Memory cgroup stats for /syz2: [ 2721.649953][ T1772] anon 114688 [ 2721.649953][ T1772] file 135168 [ 2721.649953][ T1772] kernel 258048 [ 2721.649953][ T1772] kernel_stack 32768 [ 2721.649953][ T1772] pagetables 81920 [ 2721.649953][ T1772] sec_pagetables 0 [ 2721.649953][ T1772] percpu 64 [ 2721.649953][ T1772] sock 0 [ 2721.649953][ T1772] vmalloc 0 [ 2721.649953][ T1772] shmem 126976 [ 2721.649953][ T1772] zswap 0 [ 2721.649953][ T1772] zswapped 0 [ 2721.649953][ T1772] file_mapped 126976 [ 2721.649953][ T1772] file_dirty 4096 [ 2721.649953][ T1772] file_writeback 0 [ 2721.649953][ T1772] swapcached 0 [ 2721.649953][ T1772] anon_thp 0 [ 2721.649953][ T1772] file_thp 0 [ 2721.649953][ T1772] shmem_thp 0 [ 2721.649953][ T1772] inactive_anon 126976 [ 2721.649953][ T1772] active_anon 114688 [ 2721.649953][ T1772] inactive_file 4096 [ 2721.649953][ T1772] active_file 4096 [ 2721.649953][ T1772] unevictable 0 [ 2721.649953][ T1772] slab_reclaimable 14392 [ 2721.649953][ T1772] slab_unreclaimable 99168 [ 2721.649953][ T1772] slab 113560 [ 2721.774050][ T1772] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=1646,uid=0 [ 2721.791750][ T1740] team0: Port device team_slave_1 added [ 2721.814790][ T1772] Memory cgroup out of memory: Killed process 1646 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2721.868975][ T1740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2721.882580][ T1740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2721.911168][ T1740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2721.942554][ T1740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2721.949574][ T1740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2722.032395][ T1740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2722.112643][T29331] Bluetooth: hci1: command 0x041b tx timeout [ 2722.285675][ T1740] device hsr_slave_0 entered promiscuous mode [ 2722.305313][ T1740] device hsr_slave_1 entered promiscuous mode 10:14:52 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2722.329245][ T1740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2722.362384][ T1740] Cannot create hsr debugfs directory [ 2722.830608][ T48] device hsr_slave_0 left promiscuous mode [ 2722.864026][ T48] device hsr_slave_1 left promiscuous mode [ 2722.883852][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2722.891324][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2722.942536][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2722.950012][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2722.984392][ T48] device bridge_slave_1 left promiscuous mode [ 2722.990682][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2723.028387][ T48] device bridge_slave_0 left promiscuous mode [ 2723.045980][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2723.087953][ T48] device hsr_slave_0 left promiscuous mode [ 2723.113751][ T48] device hsr_slave_1 left promiscuous mode [ 2723.142784][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2723.150268][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2723.195036][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2723.223558][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2723.248319][ T48] device bridge_slave_1 left promiscuous mode [ 2723.278951][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2723.304900][ T48] device bridge_slave_0 left promiscuous mode [ 2723.321440][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2723.370817][ T48] device hsr_slave_0 left promiscuous mode [ 2723.422647][ T48] device hsr_slave_1 left promiscuous mode [ 2723.431625][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2723.472106][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2723.515601][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2723.542879][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2723.580779][ T48] device bridge_slave_1 left promiscuous mode [ 2723.601065][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2723.631776][ T48] device bridge_slave_0 left promiscuous mode [ 2723.672185][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2723.705723][ T48] device hsr_slave_0 left promiscuous mode [ 2723.725779][ T48] device hsr_slave_1 left promiscuous mode [ 2723.753954][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2723.786086][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2723.816539][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2723.844935][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2723.894863][ T48] device bridge_slave_1 left promiscuous mode [ 2723.922792][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2723.952872][ T5108] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2723.962602][ T5108] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2723.972108][ T5113] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2723.980401][ T5113] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2723.988186][ T5113] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2723.995597][ T5113] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2724.053839][ T48] device bridge_slave_0 left promiscuous mode [ 2724.060417][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2724.192580][ T5113] Bluetooth: hci1: command 0x040f tx timeout [ 2724.342769][ T48] device veth1_macvtap left promiscuous mode [ 2724.348899][ T48] device veth0_macvtap left promiscuous mode [ 2724.370156][ T48] device veth1_vlan left promiscuous mode [ 2724.392544][ T48] device veth0_vlan left promiscuous mode [ 2724.473447][T29331] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2724.483013][T29331] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2724.491045][T29331] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2724.503048][T29331] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2724.511045][T29331] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2724.603056][ T5113] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2724.613497][ T5113] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2724.621645][ T5113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2724.630016][ T5113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2724.638793][ T5113] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2724.647487][ T5113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2724.682577][ T48] device veth1_macvtap left promiscuous mode [ 2724.688776][ T48] device veth0_macvtap left promiscuous mode [ 2724.695162][ T48] device veth1_vlan left promiscuous mode [ 2724.701029][ T48] device veth0_vlan left promiscuous mode [ 2724.734480][ T48] device veth1_macvtap left promiscuous mode [ 2724.740580][ T48] device veth0_macvtap left promiscuous mode [ 2724.783007][ T48] device veth1_vlan left promiscuous mode [ 2724.788892][ T48] device veth0_vlan left promiscuous mode [ 2724.825502][ T48] device veth1_macvtap left promiscuous mode [ 2724.831608][ T48] device veth0_macvtap left promiscuous mode [ 2724.872566][ T48] device veth1_vlan left promiscuous mode [ 2724.878450][ T48] device veth0_vlan left promiscuous mode [ 2724.935416][ T5113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2724.948068][ T5113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2724.956456][ T5113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2724.965327][ T5113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2724.974325][ T5113] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2724.981651][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2725.501352][ T5108] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2725.520603][ T5108] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2725.534204][ T5108] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2725.542516][ T5108] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2725.552122][ T5108] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2726.022796][ T5108] Bluetooth: hci0: command 0x0409 tx timeout [ 2726.181389][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2726.213053][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2726.238980][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2726.269482][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2726.278576][ T5108] Bluetooth: hci1: command 0x0419 tx timeout [ 2726.379985][ T48] bond0 (unregistering): Released all slaves [ 2726.582568][T29331] Bluetooth: hci2: command 0x0409 tx timeout [ 2726.598490][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2726.616042][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2726.632059][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2726.668804][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2726.677487][T29331] Bluetooth: hci3: command 0x0409 tx timeout [ 2726.844561][ T48] bond0 (unregistering): Released all slaves [ 2727.062553][ T5108] Bluetooth: hci4: command 0x0409 tx timeout [ 2727.175207][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2727.213212][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2727.243983][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2727.272568][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2727.450617][ T48] bond0 (unregistering): Released all slaves [ 2727.622523][ T5108] Bluetooth: hci5: command 0x0409 tx timeout [ 2727.759447][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2727.788534][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2727.825147][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2727.855404][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2727.978686][ T48] bond0 (unregistering): Released all slaves [ 2728.112499][ T5108] Bluetooth: hci0: command 0x041b tx timeout [ 2728.662490][ T5108] Bluetooth: hci2: command 0x041b tx timeout [ 2728.742457][ T5108] Bluetooth: hci3: command 0x041b tx timeout [ 2728.915058][ T1798] chnl_net:caif_netlink_parms(): no params data found [ 2729.037229][ T1806] chnl_net:caif_netlink_parms(): no params data found [ 2729.076838][ T1740] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2729.142724][ T5108] Bluetooth: hci4: command 0x041b tx timeout [ 2729.194855][ T1740] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2729.229645][ T1819] chnl_net:caif_netlink_parms(): no params data found [ 2729.316916][ T1740] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2729.399635][ T1810] chnl_net:caif_netlink_parms(): no params data found [ 2729.421382][ T1740] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2729.437364][ T1814] chnl_net:caif_netlink_parms(): no params data found [ 2729.560019][ T1806] bridge0: port 1(bridge_slave_0) entered blocking state [ 2729.572552][ T1806] bridge0: port 1(bridge_slave_0) entered disabled state [ 2729.590972][ T1806] device bridge_slave_0 entered promiscuous mode [ 2729.621797][ T1798] bridge0: port 1(bridge_slave_0) entered blocking state [ 2729.630998][ T1798] bridge0: port 1(bridge_slave_0) entered disabled state [ 2729.640308][ T1798] device bridge_slave_0 entered promiscuous mode [ 2729.705562][ T5108] Bluetooth: hci5: command 0x041b tx timeout [ 2729.726900][ T1806] bridge0: port 2(bridge_slave_1) entered blocking state [ 2729.735393][ T1806] bridge0: port 2(bridge_slave_1) entered disabled state [ 2729.749959][ T1806] device bridge_slave_1 entered promiscuous mode [ 2729.765222][ T1798] bridge0: port 2(bridge_slave_1) entered blocking state [ 2729.792433][ T1798] bridge0: port 2(bridge_slave_1) entered disabled state [ 2729.822662][ T1798] device bridge_slave_1 entered promiscuous mode [ 2730.047327][ T1819] bridge0: port 1(bridge_slave_0) entered blocking state [ 2730.055500][ T1819] bridge0: port 1(bridge_slave_0) entered disabled state [ 2730.064918][ T1819] device bridge_slave_0 entered promiscuous mode [ 2730.085918][ T1806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2730.097982][ T1798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2730.138715][ T1819] bridge0: port 2(bridge_slave_1) entered blocking state [ 2730.155557][ T1819] bridge0: port 2(bridge_slave_1) entered disabled state [ 2730.164753][ T1819] device bridge_slave_1 entered promiscuous mode [ 2730.175222][ T1806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2730.182953][ T5108] Bluetooth: hci0: command 0x040f tx timeout [ 2730.186915][ T1798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2730.313151][ T1810] bridge0: port 1(bridge_slave_0) entered blocking state [ 2730.320700][ T1810] bridge0: port 1(bridge_slave_0) entered disabled state [ 2730.329084][ T1810] device bridge_slave_0 entered promiscuous mode [ 2730.353254][ T1814] bridge0: port 1(bridge_slave_0) entered blocking state [ 2730.360402][ T1814] bridge0: port 1(bridge_slave_0) entered disabled state [ 2730.370405][ T1814] device bridge_slave_0 entered promiscuous mode [ 2730.385879][ T1740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2730.406912][ T1806] team0: Port device team_slave_0 added [ 2730.448995][ T1810] bridge0: port 2(bridge_slave_1) entered blocking state [ 2730.457633][ T1810] bridge0: port 2(bridge_slave_1) entered disabled state [ 2730.466776][ T1810] device bridge_slave_1 entered promiscuous mode [ 2730.479231][ T1819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2730.488793][ T1814] bridge0: port 2(bridge_slave_1) entered blocking state [ 2730.506496][ T1814] bridge0: port 2(bridge_slave_1) entered disabled state [ 2730.515837][ T1814] device bridge_slave_1 entered promiscuous mode [ 2730.527649][ T1806] team0: Port device team_slave_1 added [ 2730.561548][ T1798] team0: Port device team_slave_0 added [ 2730.571382][ T1798] team0: Port device team_slave_1 added [ 2730.609266][ T1819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2730.736564][ T1810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2730.746199][ T5108] Bluetooth: hci2: command 0x040f tx timeout [ 2730.796818][ T1806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2730.820041][ T1806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2730.846693][ T5108] Bluetooth: hci3: command 0x040f tx timeout [ 2730.872429][ T1806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2730.916754][ T1740] 8021q: adding VLAN 0 to HW filter on device team0 [ 2730.946497][ T1810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2730.974292][ T1819] team0: Port device team_slave_0 added [ 2730.986865][ T1819] team0: Port device team_slave_1 added [ 2731.005300][ T1814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2731.027987][ T1798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2731.050586][ T1798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2731.092444][ T1798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2731.113948][ T1806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2731.121912][ T1806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2731.150853][ T1806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2731.173902][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2731.192991][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2731.222971][ T5108] Bluetooth: hci4: command 0x040f tx timeout [ 2731.274868][ T1814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2731.288737][ T1798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2731.302404][ T1798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2731.347355][ T1798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2731.369388][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2731.380334][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2731.389467][T12303] bridge0: port 1(bridge_slave_0) entered blocking state [ 2731.396693][T12303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2731.405197][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2731.414294][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2731.423443][T12303] bridge0: port 2(bridge_slave_1) entered blocking state [ 2731.430699][T12303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2731.439661][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2731.488605][ T1810] team0: Port device team_slave_0 added [ 2731.503313][ T1819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2731.510556][ T1819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2731.539300][ T1819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2731.590767][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2731.603408][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2731.613977][ T1810] team0: Port device team_slave_1 added [ 2731.630227][ T1819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2731.638743][ T1819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2731.667453][ T1819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2731.720954][ T1806] device hsr_slave_0 entered promiscuous mode [ 2731.743770][ T1806] device hsr_slave_1 entered promiscuous mode [ 2731.763697][ T1806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2731.771484][ T1806] Cannot create hsr debugfs directory [ 2731.782512][ T5108] Bluetooth: hci5: command 0x040f tx timeout [ 2731.866677][ T1814] team0: Port device team_slave_0 added [ 2731.889174][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2731.898864][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2731.931091][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2731.961306][ T1740] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2731.986467][ T1740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2732.033542][ T1814] team0: Port device team_slave_1 added [ 2732.055316][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2732.064397][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2732.073805][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2732.083921][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2732.092841][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2732.108770][ T1798] device hsr_slave_0 entered promiscuous mode [ 2732.123533][ T1798] device hsr_slave_1 entered promiscuous mode [ 2732.132532][ T1798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2732.140699][ T1798] Cannot create hsr debugfs directory [ 2732.164582][ T1810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2732.171601][ T1810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2732.219250][ T1810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2732.264504][ T5108] Bluetooth: hci0: command 0x0419 tx timeout [ 2732.275963][ T1814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2732.292372][ T1814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2732.337983][ T1814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2732.353822][ T1814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2732.360821][ T1814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2732.389519][ T1814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2732.408037][ T1810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2732.422024][ T1810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2732.454074][ T1810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2732.467717][ T1819] device hsr_slave_0 entered promiscuous mode [ 2732.475186][ T1819] device hsr_slave_1 entered promiscuous mode [ 2732.481940][ T1819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2732.489850][ T1819] Cannot create hsr debugfs directory [ 2732.727905][ T1814] device hsr_slave_0 entered promiscuous mode [ 2732.748842][ T1814] device hsr_slave_1 entered promiscuous mode [ 2732.775117][ T1814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2732.786144][ T1814] Cannot create hsr debugfs directory [ 2732.821888][ T1810] device hsr_slave_0 entered promiscuous mode [ 2732.828630][ T5108] Bluetooth: hci2: command 0x0419 tx timeout [ 2732.851285][ T1810] device hsr_slave_1 entered promiscuous mode [ 2732.873926][ T1810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2732.881644][ T1810] Cannot create hsr debugfs directory [ 2732.903788][ T5108] Bluetooth: hci3: command 0x0419 tx timeout [ 2733.077283][ T1740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2733.089092][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2733.098526][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2733.207525][ T1806] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2733.254176][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2733.302984][ T5108] Bluetooth: hci4: command 0x0419 tx timeout [ 2733.413670][ T1806] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2733.713506][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2733.862647][ T5108] Bluetooth: hci5: command 0x0419 tx timeout [ 2733.874309][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2733.893373][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2733.948119][ T1806] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2734.096956][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2734.157829][ T1740] device veth0_vlan entered promiscuous mode [ 2734.323613][ T1806] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2734.362721][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2734.371258][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2734.423657][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2734.466856][ T1740] device veth1_vlan entered promiscuous mode [ 2734.483656][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2734.495905][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2734.521802][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2734.689279][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2734.713416][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2734.733784][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2734.744722][ T1740] device veth0_macvtap entered promiscuous mode [ 2734.765371][ T1740] device veth1_macvtap entered promiscuous mode [ 2734.793461][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2734.801505][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2734.945336][ T48] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2734.978072][ T1740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2735.002953][ T1740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2735.014376][ T1740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2735.032512][ T1740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2735.057200][ T1740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2735.076573][ T1740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2735.095210][ T1740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2735.117718][ T1740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2735.129768][ T1740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2735.148662][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2735.158451][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2735.175735][ T48] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2735.203599][ T1740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2735.217093][ T1740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2735.227225][ T1740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2735.237939][ T1740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2735.248338][ T1740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2735.259266][ T1740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2735.269415][ T1740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2735.281403][ T1740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2735.293456][ T1740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2735.308879][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2735.330498][T30146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2735.348010][ T48] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2735.587830][ T1740] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2735.612357][ T1740] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2735.621116][ T1740] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2735.662359][ T1740] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2735.703161][ T1806] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2735.776997][ T48] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2735.854939][ T1806] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2735.895763][ T1806] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2735.917624][ T1806] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2736.121332][ T5190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2736.146207][ T5190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2736.378336][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2736.408875][ T2422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2736.434051][ T2422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2736.480743][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2736.564718][ T1806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2736.572232][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2736.683858][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2736.856240][ T1806] 8021q: adding VLAN 0 to HW filter on device team0 [ 2736.920718][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2736.957433][ T1924] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2736.980912][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2736.989339][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2736.996939][ T1924] CPU: 1 PID: 1924 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2737.007403][ T1924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2737.017585][ T1924] Call Trace: [ 2737.020890][ T1924] [ 2737.023848][ T1924] dump_stack_lvl+0xd1/0x138 [ 2737.028488][ T1924] dump_header+0x10b/0x85f [ 2737.032961][ T1924] oom_kill_process.cold+0x10/0x15 [ 2737.038140][ T1924] out_of_memory+0x35c/0x14a0 [ 2737.042870][ T1924] ? lockdep_hardirqs_on+0x7d/0x100 [ 2737.048111][ T1924] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2737.054310][ T1924] ? oom_killer_disable+0x280/0x280 [ 2737.059574][ T1924] mem_cgroup_out_of_memory+0x206/0x270 [ 2737.065166][ T1924] ? mem_cgroup_margin+0x130/0x130 [ 2737.070337][ T1924] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2737.076193][ T1924] memory_max_write+0x2f9/0x3c0 [ 2737.081087][ T1924] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2737.087201][ T1924] ? cgroup_file_write+0x8e/0x770 [ 2737.092279][ T1924] cgroup_file_write+0x1e2/0x770 [ 2737.097248][ T1924] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2737.103328][ T1924] ? kill_css+0x370/0x370 [ 2737.107669][ T1924] ? __virt_addr_valid+0x61/0x2e0 [ 2737.112723][ T1924] ? kill_css+0x370/0x370 [ 2737.117067][ T1924] kernfs_fop_write_iter+0x3f1/0x600 [ 2737.122387][ T1924] vfs_write+0x9ed/0xdd0 [ 2737.126744][ T1924] ? kernel_write+0x630/0x630 [ 2737.131446][ T1924] ? __fget_files+0x26a/0x440 [ 2737.136169][ T1924] ksys_write+0x12b/0x250 [ 2737.140598][ T1924] ? __ia32_sys_read+0xb0/0xb0 [ 2737.145378][ T1924] ? syscall_enter_from_user_mode+0x30/0xb0 [ 2737.151292][ T1924] do_syscall_64+0x39/0xb0 [ 2737.155759][ T1924] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2737.161663][ T1924] RIP: 0033:0x7fe476c8c0c9 [ 2737.166091][ T1924] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2737.185708][ T1924] RSP: 002b:00007fe477a44168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2737.194131][ T1924] RAX: ffffffffffffffda RBX: 00007fe476dabf80 RCX: 00007fe476c8c0c9 [ 2737.202109][ T1924] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000008 [ 2737.210090][ T1924] RBP: 00007fe476ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2737.218065][ T1924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2737.226045][ T1924] R13: 00007ffc476c387f R14: 00007fe477a44300 R15: 0000000000022000 [ 2737.234040][ T1924] [ 2737.292537][ T1924] memory: usage 8560kB, limit 0kB, failcnt 2155 [ 2737.323892][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2737.342632][ T1924] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2737.372512][ T1924] Memory cgroup stats for /syz3: [ 2737.377671][ T1924] anon 114688 [ 2737.377671][ T1924] file 8347648 [ 2737.377671][ T1924] kernel 286720 [ 2737.377671][ T1924] kernel_stack 65536 [ 2737.377671][ T1924] pagetables 81920 [ 2737.377671][ T1924] sec_pagetables 0 [ 2737.377671][ T1924] percpu 64 [ 2737.377671][ T1924] sock 0 [ 2737.377671][ T1924] vmalloc 0 [ 2737.377671][ T1924] shmem 8347648 [ 2737.377671][ T1924] zswap 0 [ 2737.377671][ T1924] zswapped 0 [ 2737.377671][ T1924] file_mapped 151552 [ 2737.377671][ T1924] file_dirty 0 [ 2737.377671][ T1924] file_writeback 0 [ 2737.377671][ T1924] swapcached 0 [ 2737.377671][ T1924] anon_thp 0 [ 2737.377671][ T1924] file_thp 0 [ 2737.377671][ T1924] shmem_thp 0 [ 2737.377671][ T1924] inactive_anon 61440 [ 2737.377671][ T1924] active_anon 8347648 [ 2737.377671][ T1924] inactive_file 0 [ 2737.377671][ T1924] active_file 0 [ 2737.377671][ T1924] unevictable 0 [ 2737.377671][ T1924] slab_reclaimable 41848 [ 2737.377671][ T1924] slab_unreclaimable 74400 [ 2737.377671][ T1924] slab 116248 [ 2737.492699][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2737.501556][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2737.523128][T12303] bridge0: port 1(bridge_slave_0) entered blocking state [ 2737.530269][T12303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2737.550726][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2737.571977][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2737.591445][T12303] bridge0: port 2(bridge_slave_1) entered blocking state [ 2737.598664][T12303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2737.620495][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2737.637181][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2737.694368][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2737.710375][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2737.734132][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2737.761459][ T1806] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2737.802940][ T1806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2737.834417][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2737.853394][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2737.863123][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2737.883171][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2737.891768][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2737.910532][ T1924] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=1923,uid=0 [ 2737.933969][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2737.952943][ T1924] Memory cgroup out of memory: Killed process 1924 (syz-executor.3) total-vm:56588kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 10:15:08 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2738.130666][ T1740] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 2738.202481][ T1740] CPU: 1 PID: 1740 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2738.212878][ T1740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2738.222961][ T1740] Call Trace: [ 2738.226338][ T1740] [ 2738.229275][ T1740] dump_stack_lvl+0xd1/0x138 [ 2738.233888][ T1740] dump_header+0x10b/0x85f [ 2738.238328][ T1740] oom_kill_process.cold+0x10/0x15 [ 2738.243466][ T1740] out_of_memory+0x35c/0x14a0 [ 2738.248168][ T1740] ? find_held_lock+0x2d/0x110 [ 2738.252949][ T1740] ? oom_killer_disable+0x280/0x280 [ 2738.258193][ T1740] ? find_held_lock+0x2d/0x110 [ 2738.262986][ T1740] mem_cgroup_out_of_memory+0x206/0x270 [ 2738.268550][ T1740] ? mem_cgroup_margin+0x130/0x130 [ 2738.273679][ T1740] ? lock_downgrade+0x6e0/0x6e0 [ 2738.278562][ T1740] try_charge_memcg+0xefb/0x12f0 [ 2738.283522][ T1740] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2738.289531][ T1740] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2738.295285][ T1740] ? lock_downgrade+0x6e0/0x6e0 [ 2738.300165][ T1740] ? lock_downgrade+0x6e0/0x6e0 [ 2738.305041][ T1740] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2738.310608][ T1740] __alloc_pages+0x1f3/0x5b0 [ 2738.315217][ T1740] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2738.322004][ T1740] ? find_held_lock+0x2d/0x110 [ 2738.326799][ T1740] alloc_pages+0x1aa/0x270 [ 2738.331228][ T1740] pte_alloc_one+0x1a/0x230 [ 2738.335745][ T1740] __pte_alloc+0x6d/0x260 [ 2738.340089][ T1740] ? pmd_install+0x160/0x160 [ 2738.344693][ T1740] ? _raw_spin_unlock+0x28/0x40 [ 2738.349555][ T1740] ? __pmd_alloc+0x30c/0x5d0 [ 2738.354168][ T1740] copy_page_range+0x17a8/0x3b40 [ 2738.359158][ T1740] ? mas_store+0x206/0x2e0 [ 2738.363585][ T1740] ? handle_mm_fault+0x850/0x850 [ 2738.368555][ T1740] ? anon_vma_fork+0xba/0x630 [ 2738.373253][ T1740] dup_mmap+0xc10/0x10b0 [ 2738.377520][ T1740] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2738.382817][ T1740] ? lock_downgrade+0x6e0/0x6e0 [ 2738.387773][ T1740] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2738.393608][ T1740] ? mm_init+0x8e0/0xc10 [ 2738.397863][ T1740] copy_process+0x440f/0x7520 [ 2738.402561][ T1740] ? _raw_spin_unlock+0x28/0x40 [ 2738.407441][ T1740] ? wp_page_reuse+0x197/0x570 [ 2738.412241][ T1740] ? __cleanup_sighand+0xb0/0xb0 [ 2738.417364][ T1740] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2738.422755][ T1740] ? rwlock_bug.part.0+0x90/0x90 [ 2738.427723][ T1740] ? lock_chain_count+0x20/0x20 [ 2738.432587][ T1740] kernel_clone+0xeb/0x990 [ 2738.437018][ T1740] ? create_io_thread+0xf0/0xf0 [ 2738.441887][ T1740] ? find_held_lock+0x2d/0x110 [ 2738.446681][ T1740] __do_sys_clone+0xba/0x100 [ 2738.451291][ T1740] ? kernel_clone+0x990/0x990 [ 2738.455994][ T1740] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2738.461928][ T1740] do_syscall_64+0x39/0xb0 [ 2738.466361][ T1740] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2738.472265][ T1740] RIP: 0033:0x7fe476c89dfb [ 2738.476699][ T1740] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2738.496313][ T1740] RSP: 002b:00007ffc476c3ac0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2738.504743][ T1740] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe476c89dfb [ 2738.512728][ T1740] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2738.520704][ T1740] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556a15400 [ 2738.528680][ T1740] R10: 0000555556a156d0 R11: 0000000000000246 R12: 0000000000000001 [ 2738.536683][ T1740] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc476c3ba0 [ 2738.544678][ T1740] [ 2738.962618][ T1740] memory: usage 8364kB, limit 0kB, failcnt 2188 [ 2738.968936][ T1740] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2738.995840][ T1740] Memory cgroup stats for /syz3: [ 2738.996043][ T1740] anon 40960 [ 2738.996043][ T1740] file 8347648 [ 2738.996043][ T1740] kernel 176128 [ 2738.996043][ T1740] kernel_stack 32768 [ 2738.996043][ T1740] pagetables 20480 [ 2738.996043][ T1740] sec_pagetables 0 [ 2738.996043][ T1740] percpu 128 [ 2738.996043][ T1740] sock 0 [ 2738.996043][ T1740] vmalloc 0 [ 2738.996043][ T1740] shmem 8347648 [ 2738.996043][ T1740] zswap 0 [ 2738.996043][ T1740] zswapped 0 [ 2738.996043][ T1740] file_mapped 122880 [ 2738.996043][ T1740] file_dirty 0 [ 2738.996043][ T1740] file_writeback 0 [ 2738.996043][ T1740] swapcached 0 [ 2738.996043][ T1740] anon_thp 0 [ 2738.996043][ T1740] file_thp 0 [ 2738.996043][ T1740] shmem_thp 0 [ 2738.996043][ T1740] inactive_anon 40960 [ 2738.996043][ T1740] active_anon 8347648 [ 2738.996043][ T1740] inactive_file 0 [ 2738.996043][ T1740] active_file 0 [ 2738.996043][ T1740] unevictable 0 [ 2738.996043][ T1740] slab_reclaimable 29448 [ 2738.996043][ T1740] slab_unreclaimable 66632 [ 2738.996043][ T1740] slab 96080 [ 2739.201537][ T1740] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=1740,uid=0 [ 2739.223455][ T1740] Memory cgroup out of memory: Killed process 1740 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2739.282798][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2739.290270][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2739.334371][ T1806] 8021q: adding VLAN 0 to HW filter on device batadv0 10:15:09 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2739.692911][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2739.701786][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 10:15:10 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2739.890617][ T1806] device veth0_vlan entered promiscuous mode [ 2739.905288][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2739.928444][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2739.973649][ T1806] device veth1_vlan entered promiscuous mode [ 2740.036077][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2740.063465][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2740.073283][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2740.198918][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2740.213395][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2740.234756][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2740.265618][ T1806] device veth0_macvtap entered promiscuous mode [ 2740.488438][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2740.505452][ T1806] device veth1_macvtap entered promiscuous mode [ 2740.665849][ T1798] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2740.940777][ T1798] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2740.963538][ T1798] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2740.983647][ T1798] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2741.134353][ T1806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2741.163741][ T1806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2741.192433][ T1806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2741.212484][ T1806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2741.242407][ T1806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2741.272450][ T1806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2741.292555][ T1806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2741.322426][ T1806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2741.342436][ T1806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2741.359628][ T1806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2741.404206][ T1806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2741.533166][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2741.542014][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2741.633362][ T1806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2741.656055][ T1806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2741.680315][ T1806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2741.696265][ T1806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2741.708905][ T1806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2741.723216][ T1806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2741.748802][ T1806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2741.768071][ T1806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2741.792890][ T1806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2741.812411][ T1806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2741.834273][ T1806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2741.863383][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2741.880168][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2741.972421][ T1806] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2741.981179][ T1806] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2742.023258][ T1806] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2742.032023][ T1806] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2742.248797][T29331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2742.260968][T29331] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2742.270140][T29331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2742.282871][T29331] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2742.290191][T29331] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2742.444410][ T1798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2742.618602][ T1798] 8021q: adding VLAN 0 to HW filter on device team0 [ 2742.638371][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2742.647601][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2742.696570][T21046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2742.730541][T21046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2742.855341][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2742.873218][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2742.892955][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2742.913551][T22744] bridge0: port 1(bridge_slave_0) entered blocking state [ 2742.921164][T22744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2742.980860][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2743.019563][ T9586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2743.031279][T22355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2743.040502][T22355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2743.062988][ T9586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2743.083321][T22355] bridge0: port 2(bridge_slave_1) entered blocking state [ 2743.090457][T22355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2743.137742][T22355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2743.157146][T22355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2743.173406][T22355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2743.349897][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2743.501265][ T1798] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2743.525985][ T2011] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2743.535093][ T1798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2743.552456][ T2011] CPU: 1 PID: 2011 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2743.562853][ T2011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2743.572936][ T2011] Call Trace: [ 2743.576248][ T2011] [ 2743.579206][ T2011] dump_stack_lvl+0xd1/0x138 [ 2743.583864][ T2011] dump_header+0x10b/0x85f [ 2743.588348][ T2011] oom_kill_process.cold+0x10/0x15 [ 2743.593521][ T2011] out_of_memory+0x35c/0x14a0 [ 2743.598260][ T2011] ? oom_killer_disable+0x280/0x280 [ 2743.603512][ T2011] ? mark_held_locks+0x9f/0xe0 [ 2743.608337][ T2011] mem_cgroup_out_of_memory+0x206/0x270 [ 2743.613959][ T2011] ? mem_cgroup_margin+0x130/0x130 [ 2743.619126][ T2011] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 2743.625505][ T2011] memory_max_write+0x2f9/0x3c0 [ 2743.630420][ T2011] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2743.636543][ T2011] ? lock_release+0x810/0x810 [ 2743.641280][ T2011] cgroup_file_write+0x1e2/0x770 [ 2743.646262][ T2011] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2743.652359][ T2011] ? kill_css+0x370/0x370 [ 2743.656736][ T2011] ? __virt_addr_valid+0x61/0x2e0 [ 2743.661836][ T2011] ? kill_css+0x370/0x370 [ 2743.666204][ T2011] kernfs_fop_write_iter+0x3f1/0x600 [ 2743.671548][ T2011] vfs_write+0x9ed/0xdd0 [ 2743.675834][ T2011] ? kernel_write+0x630/0x630 [ 2743.680567][ T2011] ? __fget_files+0x26a/0x440 [ 2743.685307][ T2011] ksys_write+0x12b/0x250 [ 2743.689676][ T2011] ? __ia32_sys_read+0xb0/0xb0 [ 2743.694480][ T2011] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2743.700425][ T2011] do_syscall_64+0x39/0xb0 [ 2743.704887][ T2011] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2743.710812][ T2011] RIP: 0033:0x7f9a0588c0c9 [ 2743.715264][ T2011] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2743.734901][ T2011] RSP: 002b:00007f9a06572168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2743.743345][ T2011] RAX: ffffffffffffffda RBX: 00007f9a059abf80 RCX: 00007f9a0588c0c9 [ 2743.751341][ T2011] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 2743.759333][ T2011] RBP: 00007f9a058e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2743.767421][ T2011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2743.775424][ T2011] R13: 00007ffc09c66cef R14: 00007f9a06572300 R15: 0000000000022000 [ 2743.783452][ T2011] [ 2743.794455][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2743.803294][ T2011] memory: usage 588kB, limit 0kB, failcnt 2082 [ 2743.809926][ T2011] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2743.812712][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2743.839410][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2743.852704][ T2011] Memory cgroup stats for /syz1: [ 2743.855580][ T2011] anon 114688 [ 2743.855580][ T2011] file 180224 [ 2743.855580][ T2011] kernel 286720 [ 2743.855580][ T2011] kernel_stack 65536 [ 2743.855580][ T2011] pagetables 77824 [ 2743.855580][ T2011] sec_pagetables 0 [ 2743.855580][ T2011] percpu 64 [ 2743.855580][ T2011] sock 0 [ 2743.855580][ T2011] vmalloc 0 [ 2743.855580][ T2011] shmem 180224 [ 2743.855580][ T2011] zswap 0 [ 2743.855580][ T2011] zswapped 0 [ 2743.855580][ T2011] file_mapped 180224 [ 2743.855580][ T2011] file_dirty 0 [ 2743.855580][ T2011] file_writeback 0 [ 2743.855580][ T2011] swapcached 0 [ 2743.855580][ T2011] anon_thp 0 [ 2743.855580][ T2011] file_thp 0 [ 2743.855580][ T2011] shmem_thp 0 [ 2743.855580][ T2011] inactive_anon 184320 [ 2743.855580][ T2011] active_anon 110592 [ 2743.855580][ T2011] inactive_file 0 [ 2743.855580][ T2011] active_file 0 [ 2743.855580][ T2011] unevictable 0 [ 2743.855580][ T2011] slab_reclaimable 17288 [ 2743.855580][ T2011] slab_unreclaimable 103272 [ 2743.855580][ T2011] slab 120560 [ 2743.863443][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2744.005888][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2744.014682][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2744.042876][ T2011] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=1806,uid=0 [ 2744.059201][ T2011] Memory cgroup out of memory: Killed process 1806 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2744.297744][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2744.342771][ T5108] Bluetooth: hci1: command 0x0409 tx timeout [ 2744.474675][ T1990] chnl_net:caif_netlink_parms(): no params data found 10:15:14 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2744.562578][ T48] device hsr_slave_0 left promiscuous mode [ 2744.602593][ T48] device hsr_slave_1 left promiscuous mode [ 2744.682878][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2744.690365][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2744.737344][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2744.752567][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2744.783745][ T48] device bridge_slave_1 left promiscuous mode [ 2744.790010][ T48] bridge0: port 2(bridge_slave_1) entered disabled state 10:15:14 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2744.872957][ T48] device bridge_slave_0 left promiscuous mode [ 2744.879235][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2744.965679][ T48] device hsr_slave_0 left promiscuous mode [ 2745.002081][ T48] device hsr_slave_1 left promiscuous mode [ 2745.013389][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2745.020881][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2745.065792][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2745.092522][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2745.124417][ T48] device bridge_slave_1 left promiscuous mode [ 2745.130684][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2745.242985][ T48] device bridge_slave_0 left promiscuous mode [ 2745.253242][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2745.362811][ T48] device hsr_slave_0 left promiscuous mode [ 2745.399565][ T48] device hsr_slave_1 left promiscuous mode [ 2745.430097][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2745.452434][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2745.504469][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2745.511961][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2745.574905][ T48] device bridge_slave_1 left promiscuous mode [ 2745.581200][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2745.642958][ T48] device bridge_slave_0 left promiscuous mode [ 2745.649247][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2745.694037][ T48] device hsr_slave_0 left promiscuous mode [ 2745.726195][ T48] device hsr_slave_1 left promiscuous mode [ 2745.743027][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2745.750505][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2745.785365][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2745.802624][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2745.824981][ T48] device bridge_slave_1 left promiscuous mode [ 2745.831239][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2745.853871][ T48] device bridge_slave_0 left promiscuous mode [ 2745.860146][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2745.972710][ T48] device veth1_macvtap left promiscuous mode [ 2745.978814][ T48] device veth0_macvtap left promiscuous mode [ 2745.992520][ T48] device veth1_vlan left promiscuous mode [ 2745.998400][ T48] device veth0_vlan left promiscuous mode [ 2746.055027][ T48] device veth1_macvtap left promiscuous mode [ 2746.061587][ T48] device veth0_macvtap left promiscuous mode [ 2746.069388][ T48] device veth1_vlan left promiscuous mode [ 2746.082498][ T48] device veth0_vlan left promiscuous mode [ 2746.103827][ T48] device veth1_macvtap left promiscuous mode [ 2746.109908][ T48] device veth0_macvtap left promiscuous mode [ 2746.132539][ T48] device veth1_vlan left promiscuous mode [ 2746.138415][ T48] device veth0_vlan left promiscuous mode [ 2746.154679][ T48] device veth1_macvtap left promiscuous mode [ 2746.160768][ T48] device veth0_macvtap left promiscuous mode [ 2746.181626][ T48] device veth1_vlan left promiscuous mode [ 2746.192540][ T48] device veth0_vlan left promiscuous mode [ 2746.432612][ T5108] Bluetooth: hci1: command 0x041b tx timeout [ 2747.070194][T29331] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2747.090827][T29331] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2747.099986][T29331] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2747.109956][T29331] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2747.119023][T29331] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2747.237348][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2747.273684][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2747.305805][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2747.334286][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2747.483193][ T48] bond0 (unregistering): Released all slaves [ 2747.733744][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2747.760940][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2747.777450][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2747.800398][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2747.889618][ T48] bond0 (unregistering): Released all slaves [ 2748.139024][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2748.183074][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2748.209051][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2748.254131][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2748.398582][ T48] bond0 (unregistering): Released all slaves [ 2748.502942][ T5108] Bluetooth: hci1: command 0x040f tx timeout [ 2748.606921][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2748.624914][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2748.640612][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2748.658095][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2748.796181][ T48] bond0 (unregistering): Released all slaves [ 2748.934333][ T1810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2748.949718][ T1810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2748.960201][ T1810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2749.102812][ T1810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2749.119128][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2749.142737][ T5108] Bluetooth: hci2: command 0x0409 tx timeout [ 2749.143510][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2749.175681][ T1798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2749.411955][ T1990] bridge0: port 1(bridge_slave_0) entered blocking state [ 2749.434137][ T1990] bridge0: port 1(bridge_slave_0) entered disabled state [ 2749.462626][ T1990] device bridge_slave_0 entered promiscuous mode [ 2749.512857][ T1990] bridge0: port 2(bridge_slave_1) entered blocking state [ 2749.520050][ T1990] bridge0: port 2(bridge_slave_1) entered disabled state [ 2749.572585][ T1990] device bridge_slave_1 entered promiscuous mode [ 2749.789835][ T1990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2749.819071][ T1990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2749.993641][ T1810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2750.048354][ T1990] team0: Port device team_slave_0 added [ 2750.186810][ T1990] team0: Port device team_slave_1 added [ 2750.292728][T22355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2750.313118][T22355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2750.324028][ T1810] 8021q: adding VLAN 0 to HW filter on device team0 [ 2750.334503][ T2048] chnl_net:caif_netlink_parms(): no params data found [ 2750.372607][ T1814] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2750.396365][ T1814] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2750.411259][ T1990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2750.428265][ T1990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2750.457728][ T1990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2750.508054][ T1814] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2750.539343][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2750.555360][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2750.573051][T22493] bridge0: port 1(bridge_slave_0) entered blocking state [ 2750.580217][T22493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2750.588588][T29331] Bluetooth: hci1: command 0x0419 tx timeout [ 2750.638897][ T1990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2750.646189][ T1990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2750.682373][ T1990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2750.725530][ T1814] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2750.748107][T22355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2750.763217][T22355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2750.771992][T22355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2750.803326][T22355] bridge0: port 2(bridge_slave_1) entered blocking state [ 2750.810462][T22355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2750.834132][T22355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2750.853246][T22355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2750.873401][T22355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2751.005637][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2751.014731][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2751.044444][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2751.073434][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2751.094609][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2751.113317][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2751.222432][ T5108] Bluetooth: hci2: command 0x041b tx timeout [ 2751.262200][ T1819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2751.278046][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2751.299669][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2751.335914][ T1810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2751.364225][ T1819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2751.400960][ T1990] device hsr_slave_0 entered promiscuous mode [ 2751.409074][ T1990] device hsr_slave_1 entered promiscuous mode [ 2751.441255][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2751.449975][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2751.474828][ T1798] device veth0_vlan entered promiscuous mode [ 2751.512954][ T1819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2751.526556][ T1819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2751.539733][ T2048] bridge0: port 1(bridge_slave_0) entered blocking state [ 2751.562456][ T2048] bridge0: port 1(bridge_slave_0) entered disabled state [ 2751.573211][ T2048] device bridge_slave_0 entered promiscuous mode [ 2751.623885][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2751.653091][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2751.665784][ T1798] device veth1_vlan entered promiscuous mode [ 2751.738841][ T2048] bridge0: port 2(bridge_slave_1) entered blocking state [ 2751.751413][ T2048] bridge0: port 2(bridge_slave_1) entered disabled state [ 2751.774154][ T2048] device bridge_slave_1 entered promiscuous mode [ 2751.837859][ T2048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2751.939642][ T2048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2752.035390][T22355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2752.053890][T22355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2752.084629][T22355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2752.103493][T22355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2752.135764][ T2048] team0: Port device team_slave_0 added [ 2752.181397][ T1814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2752.216972][ T1798] device veth0_macvtap entered promiscuous mode [ 2752.240489][ T2048] team0: Port device team_slave_1 added [ 2752.271758][ T1814] 8021q: adding VLAN 0 to HW filter on device team0 [ 2752.313910][ T1798] device veth1_macvtap entered promiscuous mode [ 2752.323014][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2752.330716][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2752.401020][ T2048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2752.413269][ T2048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2752.440457][ T2048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2752.454117][ T2048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2752.461119][ T2048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2752.487614][ T2048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2752.516269][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2752.526534][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2752.535584][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 2752.542750][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2752.551100][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2752.559992][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2752.569590][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 2752.576763][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2752.586932][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2752.602583][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2752.610131][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2752.630250][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2752.643141][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2752.662994][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2752.676406][ T1810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2752.759791][ T1990] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2752.791093][ T1814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2752.813001][ T1814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2752.847752][ T1798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2752.882432][ T1798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2752.902556][ T1798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2752.922391][ T1798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2752.943913][ T1798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2752.953362][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2752.971851][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2752.983885][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2753.015240][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2753.024353][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2753.050952][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2753.073685][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2753.102987][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2753.123285][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2753.139917][ T1990] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2753.291426][ T1819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2753.302775][ T5108] Bluetooth: hci2: command 0x040f tx timeout [ 2753.364133][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2753.375578][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2753.423098][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2753.445538][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2753.480464][ T1990] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2753.507760][ T1798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2753.526935][ T1798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2753.547163][ T1798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2753.573940][ T1798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2753.596711][ T1798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2753.746185][ T2048] device hsr_slave_0 entered promiscuous mode [ 2753.763343][ T2048] device hsr_slave_1 entered promiscuous mode [ 2753.780897][ T2048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2753.822377][ T2048] Cannot create hsr debugfs directory [ 2753.831307][ T1819] 8021q: adding VLAN 0 to HW filter on device team0 [ 2753.872878][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2753.903077][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2753.958367][ T1990] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2754.025417][ T1798] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2754.053496][ T1798] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2754.082838][ T1798] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2754.091586][ T1798] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2754.160520][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2754.193153][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2754.204146][ T1810] device veth0_vlan entered promiscuous mode [ 2754.228735][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2754.261922][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2754.299459][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2754.316601][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2754.339860][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2754.373094][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2754.383135][T22744] bridge0: port 1(bridge_slave_0) entered blocking state [ 2754.390259][T22744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2754.447758][ T1814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2754.565241][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2754.583101][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2754.591872][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2754.632885][T22493] bridge0: port 2(bridge_slave_1) entered blocking state [ 2754.640031][T22493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2754.692719][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2754.737734][ T1810] device veth1_vlan entered promiscuous mode [ 2754.769023][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2754.781265][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2754.794272][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2754.837241][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2754.855752][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2754.893338][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2754.901799][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2754.923103][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2754.959847][ T1819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2755.148927][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2755.163345][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2755.195645][ T1810] device veth0_macvtap entered promiscuous mode [ 2755.218479][T21046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2755.268319][ T1810] device veth1_macvtap entered promiscuous mode [ 2755.274794][T21046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2755.327556][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2755.347676][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2755.374311][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2755.382687][ T5108] Bluetooth: hci2: command 0x0419 tx timeout [ 2755.412097][ T1810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2755.452518][ T1810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2755.472442][ T1810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2755.502421][ T1810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2755.512278][ T1810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2755.572437][ T1810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2755.607276][ T1810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2755.683886][ T2048] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2755.724560][ T1990] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2755.756267][ T2422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2755.782852][ T2422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2755.817284][ T2048] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2755.886275][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2755.905408][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2755.923405][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2755.948987][ T1810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2755.992475][ T1810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2756.032820][ T1810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2756.082514][ T1810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2756.102574][ T1810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2756.132382][ T1810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2756.153996][ T1810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2756.166387][ T1990] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2756.295054][ T2048] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2756.382794][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2756.392207][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2756.401567][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2756.412211][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2756.501004][ T2186] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2756.512148][ T1990] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2756.523439][ T2186] CPU: 0 PID: 2186 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2756.533821][ T2186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2756.543883][ T2186] Call Trace: [ 2756.547166][ T2186] [ 2756.550100][ T2186] dump_stack_lvl+0xd1/0x138 [ 2756.554715][ T2186] dump_header+0x10b/0x85f [ 2756.559160][ T2186] oom_kill_process.cold+0x10/0x15 [ 2756.564297][ T2186] out_of_memory+0x35c/0x14a0 [ 2756.569002][ T2186] ? oom_killer_disable+0x280/0x280 [ 2756.574226][ T2186] ? find_held_lock+0x2d/0x110 [ 2756.579016][ T2186] mem_cgroup_out_of_memory+0x206/0x270 [ 2756.584589][ T2186] ? mem_cgroup_margin+0x130/0x130 [ 2756.589735][ T2186] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2756.595564][ T2186] memory_max_write+0x2f9/0x3c0 [ 2756.600436][ T2186] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2756.606518][ T2186] ? lock_release+0x810/0x810 [ 2756.611216][ T2186] cgroup_file_write+0x1e2/0x770 [ 2756.616170][ T2186] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2756.622253][ T2186] ? kill_css+0x370/0x370 [ 2756.626598][ T2186] ? __virt_addr_valid+0x61/0x2e0 [ 2756.631650][ T2186] ? kill_css+0x370/0x370 [ 2756.636004][ T2186] kernfs_fop_write_iter+0x3f1/0x600 [ 2756.641316][ T2186] vfs_write+0x9ed/0xdd0 [ 2756.645582][ T2186] ? kernel_write+0x630/0x630 [ 2756.650278][ T2186] ? __fget_files+0x26a/0x440 [ 2756.655007][ T2186] ksys_write+0x12b/0x250 [ 2756.659350][ T2186] ? __ia32_sys_read+0xb0/0xb0 [ 2756.664130][ T2186] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2756.670040][ T2186] do_syscall_64+0x39/0xb0 [ 2756.674472][ T2186] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2756.680382][ T2186] RIP: 0033:0x7f893708c0c9 [ 2756.684807][ T2186] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2756.704427][ T2186] RSP: 002b:00007f8937d42168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2756.712848][ T2186] RAX: ffffffffffffffda RBX: 00007f89371abf80 RCX: 00007f893708c0c9 [ 2756.720826][ T2186] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 2756.728805][ T2186] RBP: 00007f89370e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2756.736781][ T2186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2756.744757][ T2186] R13: 00007ffdb7bab3df R14: 00007f8937d42300 R15: 0000000000022000 [ 2756.752925][ T2186] [ 2756.764323][ T1990] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2756.795292][ T1810] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2756.812494][ T2186] memory: usage 8548kB, limit 0kB, failcnt 2406 [ 2756.832372][ T1810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2756.841113][ T1810] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2756.850904][ T2186] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2756.862420][ T2186] Memory cgroup stats for /syz5: [ 2756.867907][ T2186] anon 114688 [ 2756.867907][ T2186] file 8347648 [ 2756.867907][ T2186] kernel 282624 [ 2756.867907][ T2186] kernel_stack 65536 [ 2756.867907][ T2186] pagetables 77824 [ 2756.867907][ T2186] sec_pagetables 0 [ 2756.867907][ T2186] percpu 64 [ 2756.867907][ T2186] sock 0 [ 2756.867907][ T2186] vmalloc 0 [ 2756.867907][ T2186] shmem 8347648 [ 2756.867907][ T2186] zswap 0 [ 2756.867907][ T2186] zswapped 0 [ 2756.867907][ T2186] file_mapped 221184 [ 2756.867907][ T2186] file_dirty 0 [ 2756.867907][ T2186] file_writeback 0 [ 2756.867907][ T2186] swapcached 0 [ 2756.867907][ T2186] anon_thp 0 [ 2756.867907][ T2186] file_thp 0 [ 2756.867907][ T2186] shmem_thp 0 [ 2756.867907][ T2186] inactive_anon 4046848 [ 2756.867907][ T2186] active_anon 4415488 [ 2756.867907][ T2186] inactive_file 0 [ 2756.867907][ T2186] active_file 0 [ 2756.867907][ T2186] unevictable 0 [ 2756.867907][ T2186] slab_reclaimable 38120 [ 2756.867907][ T2186] slab_unreclaimable 72456 [ 2756.867907][ T2186] slab 110576 [ 2756.968441][ T1810] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2757.023417][ T2048] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2757.109609][ T1814] device veth0_vlan entered promiscuous mode [ 2757.197993][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2757.205671][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2757.222958][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2757.233129][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2757.245267][ T1819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2757.268362][ T1814] device veth1_vlan entered promiscuous mode [ 2757.291867][ T2186] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2185,uid=0 10:15:27 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2757.318231][ T2186] Memory cgroup out of memory: Killed process 2186 (syz-executor.5) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2757.336833][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2757.375261][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2757.384135][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2757.388346][ T1798] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 2757.404251][ T1798] CPU: 1 PID: 1798 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2757.414722][ T1798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2757.424806][ T1798] Call Trace: [ 2757.428104][ T1798] [ 2757.431064][ T1798] dump_stack_lvl+0xd1/0x138 [ 2757.435700][ T1798] dump_header+0x10b/0x85f [ 2757.440169][ T1798] oom_kill_process.cold+0x10/0x15 [ 2757.445343][ T1798] out_of_memory+0x35c/0x14a0 [ 2757.447388][ T1814] device veth0_macvtap entered promiscuous mode [ 2757.450048][ T1798] ? find_held_lock+0x2d/0x110 [ 2757.461151][ T1798] ? oom_killer_disable+0x280/0x280 [ 2757.467359][ T1798] ? find_held_lock+0x2d/0x110 [ 2757.471435][ T1814] device veth1_macvtap entered promiscuous mode [ 2757.472146][ T1798] mem_cgroup_out_of_memory+0x206/0x270 [ 2757.483963][ T1798] ? mem_cgroup_margin+0x130/0x130 [ 2757.489112][ T1798] ? lock_downgrade+0x6e0/0x6e0 [ 2757.494017][ T1798] try_charge_memcg+0xefb/0x12f0 [ 2757.498999][ T1798] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2757.505013][ T1798] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2757.510773][ T1798] ? lock_downgrade+0x6e0/0x6e0 [ 2757.515656][ T1798] ? lock_downgrade+0x6e0/0x6e0 [ 2757.520571][ T1798] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2757.526173][ T1798] __alloc_pages+0x1f3/0x5b0 [ 2757.530780][ T1798] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2757.537564][ T1798] ? find_held_lock+0x2d/0x110 [ 2757.542362][ T1798] alloc_pages+0x1aa/0x270 [ 2757.546796][ T1798] pte_alloc_one+0x1a/0x230 [ 2757.551316][ T1798] __pte_alloc+0x6d/0x260 [ 2757.555658][ T1798] ? pmd_install+0x160/0x160 [ 2757.560255][ T1798] ? _raw_spin_unlock+0x28/0x40 [ 2757.565117][ T1798] ? __pmd_alloc+0x30c/0x5d0 [ 2757.569721][ T1798] copy_page_range+0x17a8/0x3b40 [ 2757.574699][ T1798] ? mas_store+0x206/0x2e0 [ 2757.579119][ T1798] ? handle_mm_fault+0x850/0x850 [ 2757.584099][ T1798] ? anon_vma_fork+0xba/0x630 [ 2757.588794][ T1798] dup_mmap+0xc10/0x10b0 [ 2757.593054][ T1798] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2757.598340][ T1798] ? lock_downgrade+0x6e0/0x6e0 [ 2757.603203][ T1798] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2757.609031][ T1798] ? mm_init+0x8e0/0xc10 [ 2757.613282][ T1798] copy_process+0x440f/0x7520 [ 2757.617971][ T1798] ? _raw_spin_unlock+0x28/0x40 [ 2757.622831][ T1798] ? wp_page_reuse+0x197/0x570 [ 2757.627616][ T1798] ? __cleanup_sighand+0xb0/0xb0 [ 2757.632558][ T1798] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2757.637944][ T1798] ? rwlock_bug.part.0+0x90/0x90 [ 2757.642888][ T1798] ? lock_chain_count+0x20/0x20 [ 2757.647749][ T1798] kernel_clone+0xeb/0x990 [ 2757.652182][ T1798] ? create_io_thread+0xf0/0xf0 [ 2757.657046][ T1798] ? find_held_lock+0x2d/0x110 [ 2757.661843][ T1798] __do_sys_clone+0xba/0x100 [ 2757.666447][ T1798] ? kernel_clone+0x990/0x990 [ 2757.671147][ T1798] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2757.677053][ T1798] do_syscall_64+0x39/0xb0 [ 2757.681484][ T1798] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2757.687401][ T1798] RIP: 0033:0x7f8937089dfb [ 2757.691818][ T1798] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2757.711426][ T1798] RSP: 002b:00007ffdb7bab620 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2757.720023][ T1798] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8937089dfb [ 2757.727998][ T1798] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2757.735975][ T1798] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555557244400 [ 2757.743952][ T1798] R10: 00005555572446d0 R11: 0000000000000246 R12: 0000000000000001 [ 2757.751924][ T1798] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffdb7bab700 [ 2757.759912][ T1798] [ 2757.814255][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2757.814683][ T1798] memory: usage 8392kB, limit 0kB, failcnt 2425 [ 2757.827137][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2757.838244][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2757.844345][ T1798] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2757.848965][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2757.861354][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2757.870669][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2757.881021][ T1814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2757.893767][ T1798] Memory cgroup stats for /syz5: [ 2757.894045][ T1798] anon 45056 [ 2757.894045][ T1798] file 8347648 [ 2757.894045][ T1798] kernel 163840 [ 2757.894045][ T1798] kernel_stack 32768 [ 2757.894045][ T1798] pagetables 12288 [ 2757.894045][ T1798] sec_pagetables 0 [ 2757.894045][ T1798] percpu 128 [ 2757.894045][ T1798] sock 0 [ 2757.894045][ T1798] vmalloc 0 [ 2757.894045][ T1798] shmem 8347648 [ 2757.894045][ T1798] zswap 0 [ 2757.894045][ T1798] zswapped 0 [ 2757.894045][ T1798] file_mapped 221184 [ 2757.894045][ T1798] file_dirty 0 [ 2757.894045][ T1798] file_writeback 0 [ 2757.894045][ T1798] swapcached 0 [ 2757.894045][ T1798] anon_thp 0 [ 2757.894045][ T1798] file_thp 0 [ 2757.894045][ T1798] shmem_thp 0 [ 2757.894045][ T1798] inactive_anon 3977216 [ 2757.894045][ T1798] active_anon 4415488 [ 2757.894045][ T1798] inactive_file 0 [ 2757.894045][ T1798] active_file 0 [ 2757.894045][ T1798] unevictable 0 [ 2757.894045][ T1798] slab_reclaimable 32024 [ 2757.894045][ T1798] slab_unreclaimable 69536 [ 2757.894045][ T1798] slab 101560 [ 2758.005257][ T1814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2758.018425][ T1798] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=1798,uid=0 [ 2758.022434][ T1814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2758.042649][ T1798] Memory cgroup out of memory: Killed process 1798 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2758.101647][ T1814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2758.122434][ T1814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2758.142379][ T1814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2758.162890][ T1814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2758.189302][ T1814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2758.234938][ T1814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2758.279367][ T1819] device veth0_vlan entered promiscuous mode [ 2758.303931][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2758.312167][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2758.333063][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2758.341822][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2758.364224][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2758.440448][ T1814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2758.464546][ T1814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2758.491461][ T1814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2758.516042][ T1814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2758.536839][ T1814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2758.557848][ T1814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2758.579358][ T1814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2758.600678][ T1814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2758.626495][ T1814] batman_adv: batadv0: Interface activated: batadv_slave_1 10:15:28 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2758.647948][ T1819] device veth1_vlan entered promiscuous mode [ 2758.674453][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2758.696449][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2758.723160][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2758.732010][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2758.811533][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2758.843251][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2758.865999][ T1814] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2758.884570][ T1814] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2758.922407][ T1814] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2758.931167][ T1814] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 10:15:29 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2758.990956][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2759.029163][ T1990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2759.060411][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2759.090097][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2759.118387][ T1819] device veth0_macvtap entered promiscuous mode [ 2759.138901][ T2048] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2759.174441][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2759.193063][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2759.233691][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2759.248891][ T1990] 8021q: adding VLAN 0 to HW filter on device team0 [ 2759.274194][ T1819] device veth1_macvtap entered promiscuous mode [ 2759.342086][ T2048] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2759.467714][ T2216] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2759.473572][ T48] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2759.502732][ T2216] CPU: 1 PID: 2216 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2759.513128][ T2216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2759.523222][ T2216] Call Trace: [ 2759.526525][ T2216] [ 2759.529477][ T2216] dump_stack_lvl+0xd1/0x138 [ 2759.534108][ T2216] dump_header+0x10b/0x85f [ 2759.538571][ T2216] oom_kill_process.cold+0x10/0x15 [ 2759.543726][ T2216] out_of_memory+0x35c/0x14a0 [ 2759.548452][ T2216] ? oom_killer_disable+0x280/0x280 [ 2759.553711][ T2216] mem_cgroup_out_of_memory+0x206/0x270 [ 2759.559301][ T2216] ? mem_cgroup_margin+0x130/0x130 [ 2759.564476][ T2216] memory_max_write+0x2f9/0x3c0 [ 2759.569361][ T2216] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2759.575459][ T2216] ? lock_release+0x810/0x810 [ 2759.580172][ T2216] cgroup_file_write+0x1e2/0x770 [ 2759.585156][ T2216] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2759.591261][ T2216] ? kill_css+0x370/0x370 [ 2759.595622][ T2216] ? __virt_addr_valid+0x61/0x2e0 [ 2759.600697][ T2216] ? kill_css+0x370/0x370 [ 2759.605062][ T2216] kernfs_fop_write_iter+0x3f1/0x600 [ 2759.610395][ T2216] vfs_write+0x9ed/0xdd0 [ 2759.614682][ T2216] ? kernel_write+0x630/0x630 [ 2759.619417][ T2216] ? __fget_files+0x26a/0x440 [ 2759.624165][ T2216] ksys_write+0x12b/0x250 [ 2759.628545][ T2216] ? __ia32_sys_read+0xb0/0xb0 [ 2759.633337][ T2216] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2759.639278][ T2216] do_syscall_64+0x39/0xb0 [ 2759.643748][ T2216] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2759.649679][ T2216] RIP: 0033:0x7fd4e208c0c9 [ 2759.654128][ T2216] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2759.673776][ T2216] RSP: 002b:00007fd4e2e34168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2759.682224][ T2216] RAX: ffffffffffffffda RBX: 00007fd4e21abf80 RCX: 00007fd4e208c0c9 [ 2759.690480][ T2216] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 2759.698485][ T2216] RBP: 00007fd4e20e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2759.706490][ T2216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2759.714490][ T2216] R13: 00007fffc96df08f R14: 00007fd4e2e34300 R15: 0000000000022000 [ 2759.722506][ T2216] [ 2759.736055][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2759.763215][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2759.804176][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2759.826587][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2759.880967][ T2048] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2759.932901][ T48] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2759.966166][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2759.983137][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2760.006096][T12800] bridge0: port 1(bridge_slave_0) entered blocking state [ 2760.013302][T12800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2760.046531][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2760.057156][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2760.076345][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2760.095688][T28162] bridge0: port 2(bridge_slave_1) entered blocking state [ 2760.102906][T28162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2760.130150][ T2048] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2760.152622][ T48] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2760.187000][ T2216] memory: usage 572kB, limit 0kB, failcnt 2432 [ 2760.193780][ T2216] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2760.195756][ T1819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2760.201219][ T2216] Memory cgroup stats for /syz0: [ 2760.201409][ T2216] anon 114688 [ 2760.201409][ T2216] file 184320 [ 2760.201409][ T2216] kernel 274432 [ 2760.201409][ T2216] kernel_stack 65536 [ 2760.201409][ T2216] pagetables 81920 [ 2760.201409][ T2216] sec_pagetables 0 [ 2760.201409][ T2216] percpu 208 [ 2760.201409][ T2216] sock 0 [ 2760.201409][ T2216] vmalloc 4096 [ 2760.201409][ T2216] shmem 184320 [ 2760.201409][ T2216] zswap 0 [ 2760.201409][ T2216] zswapped 0 [ 2760.201409][ T2216] file_mapped 184320 [ 2760.201409][ T2216] file_dirty 0 [ 2760.201409][ T2216] file_writeback 0 [ 2760.201409][ T2216] swapcached 0 [ 2760.201409][ T2216] anon_thp 0 [ 2760.201409][ T2216] file_thp 0 [ 2760.201409][ T2216] shmem_thp 0 [ 2760.201409][ T2216] inactive_anon 176128 [ 2760.201409][ T2216] active_anon 122880 [ 2760.201409][ T2216] inactive_file 0 [ 2760.201409][ T2216] active_file 0 [ 2760.201409][ T2216] unevictable 0 [ 2760.201409][ T2216] slab_reclaimable 17792 [ 2760.201409][ T2216] slab_unreclaimable 78504 [ 2760.201409][ T2216] slab 96296 [ 2760.243290][ T1819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2760.435767][ T2216] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1810,uid=0 [ 2760.468811][ T2216] Memory cgroup out of memory: Killed process 1810 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2760.521381][ T1819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2760.552383][ T1819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2760.562246][ T1819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2760.612398][ T1819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2760.641709][ T1819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2760.672376][ T1819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2760.682234][ T1819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2760.742485][ T1819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2760.814571][ T1819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2760.848809][ T48] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2760.911784][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2760.921190][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2760.945594][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2760.955650][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2760.964905][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2760.975873][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2760.986812][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2761.004016][ T1819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2761.021098][ T1819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2761.033386][ T1819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2761.045596][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2761.063836][ T1819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2761.085624][ T1819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2761.113333][ T1819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2761.132457][ T1819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2761.152433][ T1819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2761.172477][ T1819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2761.197764][ T1819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2761.228585][ T1819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2761.274718][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2761.293129][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2761.312579][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 10:15:31 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2761.321344][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2761.356023][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2761.384127][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2761.425703][ T1819] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2761.462721][ T1819] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2761.471477][ T1819] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2761.492557][ T1819] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2761.567619][ T5108] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2761.577468][ T5108] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2761.585494][ T5108] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2761.594241][ T5108] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2761.601780][ T5108] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2761.609794][ T5108] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2761.638448][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2761.674175][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2761.703899][ T1990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2761.788048][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 10:15:31 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2761.894034][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2762.010615][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2762.094816][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2762.143525][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2762.190222][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2762.382181][ T2422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2762.386820][ T2048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2762.417067][ T2422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2762.462957][ T2048] 8021q: adding VLAN 0 to HW filter on device team0 [ 2762.474357][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2762.495133][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2762.498920][ T2260] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2762.514297][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2762.522889][ T2260] CPU: 1 PID: 2260 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2762.533267][ T2260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2762.543444][ T2260] Call Trace: [ 2762.546752][ T2260] [ 2762.549708][ T2260] dump_stack_lvl+0xd1/0x138 [ 2762.554338][ T2260] dump_header+0x10b/0x85f [ 2762.558787][ T2260] oom_kill_process.cold+0x10/0x15 [ 2762.563926][ T2260] out_of_memory+0x35c/0x14a0 [ 2762.568637][ T2260] ? oom_killer_disable+0x280/0x280 [ 2762.573870][ T2260] mem_cgroup_out_of_memory+0x206/0x270 [ 2762.579442][ T2260] ? mem_cgroup_margin+0x130/0x130 [ 2762.584592][ T2260] memory_max_write+0x2f9/0x3c0 [ 2762.589459][ T2260] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2762.595541][ T2260] ? lock_release+0x810/0x810 [ 2762.600237][ T2260] cgroup_file_write+0x1e2/0x770 [ 2762.605214][ T2260] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2762.611296][ T2260] ? kill_css+0x370/0x370 [ 2762.615639][ T2260] ? __virt_addr_valid+0x61/0x2e0 [ 2762.620689][ T2260] ? kill_css+0x370/0x370 [ 2762.625031][ T2260] kernfs_fop_write_iter+0x3f1/0x600 [ 2762.630343][ T2260] vfs_write+0x9ed/0xdd0 [ 2762.634603][ T2260] ? kernel_write+0x630/0x630 [ 2762.639299][ T2260] ? __fget_files+0x26a/0x440 [ 2762.644005][ T2260] ksys_write+0x12b/0x250 [ 2762.648349][ T2260] ? __ia32_sys_read+0xb0/0xb0 [ 2762.653132][ T2260] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2762.659043][ T2260] do_syscall_64+0x39/0xb0 [ 2762.663480][ T2260] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2762.669387][ T2260] RIP: 0033:0x7f42e828c0c9 [ 2762.673810][ T2260] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2762.693424][ T2260] RSP: 002b:00007f42e8ff3168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2762.701847][ T2260] RAX: ffffffffffffffda RBX: 00007f42e83ac120 RCX: 00007f42e828c0c9 [ 2762.709832][ T2260] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000008 [ 2762.717817][ T2260] RBP: 00007f42e82e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2762.725793][ T2260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2762.733769][ T2260] R13: 00007fffc2c9da7f R14: 00007f42e8ff3300 R15: 0000000000022000 [ 2762.741851][ T2260] [ 2762.749788][ T2260] memory: usage 596kB, limit 0kB, failcnt 2377 [ 2762.756920][ T2260] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2762.765408][ T2260] Memory cgroup stats for /syz4: [ 2762.765582][ T2260] anon 118784 [ 2762.765582][ T2260] file 122880 [ 2762.765582][ T2260] kernel 356352 [ 2762.765582][ T2260] kernel_stack 131072 [ 2762.765582][ T2260] pagetables 81920 [ 2762.765582][ T2260] sec_pagetables 0 [ 2762.765582][ T2260] percpu 64 [ 2762.765582][ T2260] sock 0 [ 2762.765582][ T2260] vmalloc 0 [ 2762.765582][ T2260] shmem 122880 [ 2762.765582][ T2260] zswap 0 [ 2762.765582][ T2260] zswapped 0 [ 2762.765582][ T2260] file_mapped 110592 [ 2762.765582][ T2260] file_dirty 0 [ 2762.765582][ T2260] file_writeback 0 [ 2762.765582][ T2260] swapcached 0 [ 2762.765582][ T2260] anon_thp 0 [ 2762.765582][ T2260] file_thp 0 [ 2762.765582][ T2260] shmem_thp 0 [ 2762.765582][ T2260] inactive_anon 131072 [ 2762.765582][ T2260] active_anon 110592 [ 2762.765582][ T2260] inactive_file 0 [ 2762.765582][ T2260] active_file 0 [ 2762.765582][ T2260] unevictable 0 [ 2762.765582][ T2260] slab_reclaimable 22560 [ 2762.765582][ T2260] slab_unreclaimable 92424 [ 2762.765582][ T2260] slab 114984 [ 2762.877224][ T2260] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2253,uid=0 [ 2763.201887][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2763.225302][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2763.243031][T22493] bridge0: port 1(bridge_slave_0) entered blocking state [ 2763.250174][T22493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2763.287364][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2763.318910][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2763.361824][T22493] bridge0: port 2(bridge_slave_1) entered blocking state [ 2763.369065][T22493] bridge0: port 2(bridge_slave_1) entered forwarding state 10:15:33 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x7, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x100, 0x0, 0x100, 0x10000000, 0x9, 0x0, 0x1f}, r0, 0x0, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_int(r3, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='cgroup\x00') r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, r2, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 2763.500987][ T2260] Memory cgroup out of memory: Killed process 2260 (syz-executor.4) total-vm:54804kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2763.519972][ T2273] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2763.552545][ T2273] CPU: 0 PID: 2273 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2763.562938][ T2273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2763.573030][ T2273] Call Trace: [ 2763.576336][ T2273] [ 2763.579299][ T2273] dump_stack_lvl+0xd1/0x138 [ 2763.583931][ T2273] dump_header+0x10b/0x85f [ 2763.588403][ T2273] oom_kill_process.cold+0x10/0x15 [ 2763.593573][ T2273] out_of_memory+0x35c/0x14a0 [ 2763.598308][ T2273] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2763.604510][ T2273] ? oom_killer_disable+0x280/0x280 [ 2763.609753][ T2273] ? mark_held_locks+0x9f/0xe0 [ 2763.614568][ T2273] mem_cgroup_out_of_memory+0x206/0x270 [ 2763.620165][ T2273] ? mem_cgroup_margin+0x130/0x130 [ 2763.625355][ T2273] memory_max_write+0x2f9/0x3c0 [ 2763.630273][ T2273] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2763.636388][ T2273] ? lock_release+0x810/0x810 [ 2763.641125][ T2273] cgroup_file_write+0x1e2/0x770 [ 2763.646132][ T2273] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2763.652258][ T2273] ? kill_css+0x370/0x370 [ 2763.656639][ T2273] ? kill_css+0x370/0x370 [ 2763.661166][ T2273] kernfs_fop_write_iter+0x3f1/0x600 [ 2763.666487][ T2273] vfs_write+0x9ed/0xdd0 [ 2763.670752][ T2273] ? kernel_write+0x630/0x630 [ 2763.675444][ T2273] ? lockdep_hardirqs_on+0x7d/0x100 [ 2763.680652][ T2273] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2763.686827][ T2273] ? __fdget_pos+0x84/0x100 [ 2763.691607][ T2273] ksys_write+0x12b/0x250 [ 2763.696035][ T2273] ? __ia32_sys_read+0xb0/0xb0 [ 2763.700812][ T2273] ? syscall_enter_from_user_mode+0x30/0xb0 [ 2763.706718][ T2273] do_syscall_64+0x39/0xb0 [ 2763.711156][ T2273] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2763.717060][ T2273] RIP: 0033:0x7fd67428c0c9 [ 2763.721483][ T2273] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2763.741098][ T2273] RSP: 002b:00007fd674f9c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2763.749523][ T2273] RAX: ffffffffffffffda RBX: 00007fd6743abf80 RCX: 00007fd67428c0c9 [ 2763.757500][ T2273] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 2763.765476][ T2273] RBP: 00007fd6742e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2763.773471][ T2273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2763.781493][ T2273] R13: 00007ffc92eb00ff R14: 00007fd674f9c300 R15: 0000000000022000 [ 2763.789501][ T2273] [ 2763.799717][T29331] Bluetooth: hci0: command 0x0409 tx timeout [ 2763.802041][ T2273] memory: usage 492kB, limit 0kB, failcnt 2616 [ 2763.812373][ T2273] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2763.819256][ T2273] Memory cgroup stats for /syz2: [ 2763.819447][ T2273] anon 114688 [ 2763.819447][ T2273] file 131072 [ 2763.819447][ T2273] kernel 258048 [ 2763.819447][ T2273] kernel_stack 65536 [ 2763.819447][ T2273] pagetables 77824 [ 2763.819447][ T2273] sec_pagetables 0 [ 2763.819447][ T2273] percpu 64 [ 2763.819447][ T2273] sock 0 [ 2763.819447][ T2273] vmalloc 0 [ 2763.819447][ T2273] shmem 126976 [ 2763.819447][ T2273] zswap 0 [ 2763.819447][ T2273] zswapped 0 [ 2763.819447][ T2273] file_mapped 126976 [ 2763.819447][ T2273] file_dirty 0 [ 2763.819447][ T2273] file_writeback 0 [ 2763.819447][ T2273] swapcached 0 [ 2763.819447][ T2273] anon_thp 0 [ 2763.819447][ T2273] file_thp 0 [ 2763.819447][ T2273] shmem_thp 0 [ 2763.819447][ T2273] inactive_anon 126976 [ 2763.819447][ T2273] active_anon 114688 [ 2763.819447][ T2273] inactive_file 0 [ 2763.819447][ T2273] active_file 4096 [ 2763.819447][ T2273] unevictable 0 [ 2763.819447][ T2273] slab_reclaimable 14152 [ 2763.819447][ T2273] slab_unreclaimable 72456 [ 2763.819447][ T2273] slab 86608 [ 2763.915858][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2763.916573][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2763.917411][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2763.941471][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2763.949330][ T2273] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=1819,uid=0 [ 2763.966431][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2763.986496][ T1990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2763.996160][ T2273] Memory cgroup out of memory: Killed process 1819 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2764.020147][ T1814] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2764.042447][ T1814] CPU: 1 PID: 1814 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2764.052835][ T1814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2764.062915][ T1814] Call Trace: [ 2764.066216][ T1814] [ 2764.069168][ T1814] dump_stack_lvl+0xd1/0x138 [ 2764.073801][ T1814] dump_header+0x10b/0x85f [ 2764.078265][ T1814] oom_kill_process.cold+0x10/0x15 [ 2764.083532][ T1814] out_of_memory+0x35c/0x14a0 [ 2764.088257][ T1814] ? oom_killer_disable+0x280/0x280 [ 2764.093503][ T1814] ? find_held_lock+0x2d/0x110 [ 2764.098322][ T1814] mem_cgroup_out_of_memory+0x206/0x270 [ 2764.103910][ T1814] ? mem_cgroup_margin+0x130/0x130 [ 2764.109052][ T1814] ? lock_downgrade+0x6e0/0x6e0 [ 2764.113945][ T1814] try_charge_memcg+0xefb/0x12f0 [ 2764.118919][ T1814] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2764.124936][ T1814] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2764.130701][ T1814] ? lock_downgrade+0x6e0/0x6e0 [ 2764.135592][ T1814] ? lock_downgrade+0x6e0/0x6e0 [ 2764.140489][ T1814] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2764.146076][ T1814] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2764.152277][ T1814] copy_process+0x4e3/0x7520 [ 2764.156910][ T1814] ? _raw_spin_unlock+0x28/0x40 [ 2764.161796][ T1814] ? wp_page_reuse+0x197/0x570 [ 2764.166602][ T1814] ? do_wp_page+0x844/0x3370 [ 2764.171247][ T1814] ? __cleanup_sighand+0xb0/0xb0 [ 2764.176305][ T1814] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2764.181723][ T1814] ? rwlock_bug.part.0+0x90/0x90 [ 2764.186699][ T1814] ? lock_chain_count+0x20/0x20 [ 2764.191581][ T1814] kernel_clone+0xeb/0x990 [ 2764.196033][ T1814] ? create_io_thread+0xf0/0xf0 [ 2764.200952][ T1814] ? find_held_lock+0x2d/0x110 [ 2764.205770][ T1814] __do_sys_clone+0xba/0x100 [ 2764.210391][ T1814] ? kernel_clone+0x990/0x990 [ 2764.215121][ T1814] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2764.221053][ T1814] do_syscall_64+0x39/0xb0 [ 2764.225507][ T1814] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2764.231438][ T1814] RIP: 0033:0x7f42e8289dfb [ 2764.235876][ T1814] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2764.255515][ T1814] RSP: 002b:00007fffc2c9dcc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2764.263965][ T1814] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f42e8289dfb [ 2764.271968][ T1814] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2764.279966][ T1814] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555574e5400 [ 2764.287963][ T1814] R10: 00005555574e56d0 R11: 0000000000000246 R12: 0000000000000001 [ 2764.295967][ T1814] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffc2c9dda0 [ 2764.303679][ T2246] chnl_net:caif_netlink_parms(): no params data found [ 2764.303962][ T1814] [ 2764.351193][ T1814] memory: usage 260kB, limit 0kB, failcnt 2396 [ 2764.357958][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2764.368667][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2764.377857][ T1814] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2764.388842][ T1814] Memory cgroup stats for /syz4: [ 2764.389563][ T1814] anon 40960 [ 2764.389563][ T1814] file 122880 [ 2764.389563][ T1814] kernel 102400 [ 2764.389563][ T1814] kernel_stack 0 [ 2764.389563][ T1814] pagetables 8192 [ 2764.389563][ T1814] sec_pagetables 0 [ 2764.389563][ T1814] percpu 64 [ 2764.389563][ T1814] sock 0 [ 2764.389563][ T1814] vmalloc 0 [ 2764.389563][ T1814] shmem 122880 [ 2764.389563][ T1814] zswap 0 [ 2764.389563][ T1814] zswapped 0 [ 2764.389563][ T1814] file_mapped 110592 [ 2764.389563][ T1814] file_dirty 0 [ 2764.389563][ T1814] file_writeback 0 [ 2764.389563][ T1814] swapcached 0 [ 2764.389563][ T1814] anon_thp 0 [ 2764.389563][ T1814] file_thp 0 [ 2764.389563][ T1814] shmem_thp 0 [ 2764.389563][ T1814] inactive_anon 53248 [ 2764.389563][ T1814] active_anon 110592 [ 2764.389563][ T1814] inactive_file 0 [ 2764.389563][ T1814] active_file 0 [ 2764.389563][ T1814] unevictable 0 [ 2764.389563][ T1814] slab_reclaimable 10160 [ 2764.389563][ T1814] slab_unreclaimable 51576 [ 2764.389563][ T1814] slab 61736 [ 2764.489227][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2764.497965][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2764.507404][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2764.517984][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2764.527305][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2764.539878][ T2048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2764.546863][ T1814] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=1814,uid=0 [ 2764.563122][ T1814] Memory cgroup out of memory: Killed process 1814 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 10:15:34 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2764.890691][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2764.905583][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 10:15:35 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x7, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x100, 0x0, 0x100, 0x10000000, 0x9, 0x0, 0x1f}, r0, 0xb, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_int(r2, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='cgroup\x00') r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, r1, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00'}, 0x10) write$cgroup_int(r3, &(0x7f0000000600), 0x12) [ 2765.014260][T29331] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2765.034850][T29331] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2765.044331][T29331] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2765.068215][T29331] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2765.077044][T29331] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 10:15:35 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x7, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x100, 0x0, 0x100, 0x10000000, 0x9, 0x0, 0x1f}, r0, 0xb, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_int(r2, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='cgroup\x00') r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, r1, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00'}, 0x10) write$cgroup_int(r3, &(0x7f0000000600), 0x12) [ 2765.290741][ T1990] device veth0_vlan entered promiscuous mode [ 2765.370660][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2765.393437][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2765.515707][ T2246] bridge0: port 1(bridge_slave_0) entered blocking state [ 2765.530726][ T2246] bridge0: port 1(bridge_slave_0) entered disabled state [ 2765.547636][ T2246] device bridge_slave_0 entered promiscuous mode [ 2765.569129][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2765.593273][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2765.633455][ T1990] device veth1_vlan entered promiscuous mode [ 2765.731607][ T2246] bridge0: port 2(bridge_slave_1) entered blocking state [ 2765.739003][ T2246] bridge0: port 2(bridge_slave_1) entered disabled state [ 2765.766302][ T2246] device bridge_slave_1 entered promiscuous mode [ 2765.784481][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2765.792053][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2765.833072][ T2048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2765.862836][ T5108] Bluetooth: hci0: command 0x041b tx timeout [ 2765.982764][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2765.991458][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2766.083706][ T2246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2766.097631][ T2246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2766.145868][ T1990] device veth0_macvtap entered promiscuous mode [ 2766.193086][ T2246] team0: Port device team_slave_0 added [ 2766.210012][ T1990] device veth1_macvtap entered promiscuous mode [ 2766.235721][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2766.244567][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2766.254747][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2766.264044][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2766.307360][ T2246] team0: Port device team_slave_1 added [ 2766.396796][ T2246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2766.410688][ T2246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2766.447133][ T2246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2766.462069][ T1990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2766.486788][ T1990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.510761][ T1990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2766.532420][ T1990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.542277][ T1990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2766.568562][ T1990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.578633][ T1990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2766.590309][ T1990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.600487][ T1990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2766.612594][ T1990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.622509][ T1990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2766.633232][ T1990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.645869][ T1990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2766.675084][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2766.684130][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2766.722841][ T2246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2766.729835][ T2246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2766.763157][ T2246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2766.781945][ T1990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2766.793037][ T1990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.803860][ T1990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2766.814653][ T1990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.827426][ T1990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2766.851482][ T1990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.871841][ T1990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2766.885897][ T1990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.896107][ T1990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2766.908638][ T1990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.919570][ T1990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2766.930586][ T1990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.954444][ T1990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2766.968108][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2766.977611][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2767.004077][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2767.024735][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2767.046412][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2767.068027][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2767.100424][ T1990] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2767.132372][ T1990] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2767.141124][ T1990] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2767.150562][ T5108] Bluetooth: hci3: command 0x0409 tx timeout [ 2767.172391][ T1990] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2767.203279][ T2048] device veth0_vlan entered promiscuous mode [ 2767.326433][ T2048] device veth1_vlan entered promiscuous mode [ 2767.362817][T29331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2767.371762][T29331] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2767.406263][T29331] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2767.415424][T29331] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2767.423130][T29331] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2767.426311][ T2246] device hsr_slave_0 entered promiscuous mode [ 2767.447057][ T2246] device hsr_slave_1 entered promiscuous mode [ 2767.459612][ T2246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2767.472610][ T2246] Cannot create hsr debugfs directory [ 2767.612178][ T2048] device veth0_macvtap entered promiscuous mode [ 2767.645028][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2767.663749][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2767.686060][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2767.703184][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2767.748360][ T2298] chnl_net:caif_netlink_parms(): no params data found [ 2767.759258][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2767.793063][ T2048] device veth1_macvtap entered promiscuous mode [ 2767.805911][ T8036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2767.824867][ T8036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2767.870495][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2767.942766][ T5113] Bluetooth: hci0: command 0x040f tx timeout [ 2768.011189][ T48] device hsr_slave_0 left promiscuous mode [ 2768.023394][ T48] device hsr_slave_1 left promiscuous mode [ 2768.045479][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2768.062675][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2768.074851][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2768.092520][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2768.114728][ T48] device bridge_slave_1 left promiscuous mode [ 2768.121216][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2768.144468][ T48] device bridge_slave_0 left promiscuous mode [ 2768.150749][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2768.165191][ T48] device hsr_slave_0 left promiscuous mode [ 2768.171674][ T48] device hsr_slave_1 left promiscuous mode [ 2768.178401][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2768.187045][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2768.198045][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2768.206270][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2768.215060][ T48] device bridge_slave_1 left promiscuous mode [ 2768.221211][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2768.230207][ T48] device bridge_slave_0 left promiscuous mode [ 2768.236651][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2768.250258][ T48] device hsr_slave_0 left promiscuous mode [ 2768.258483][ T48] device hsr_slave_1 left promiscuous mode [ 2768.265447][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2768.275381][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2768.285430][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2768.293160][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2768.302540][ T48] device bridge_slave_1 left promiscuous mode [ 2768.308821][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2768.318028][ T48] device bridge_slave_0 left promiscuous mode [ 2768.324658][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2768.343559][ T48] device veth1_macvtap left promiscuous mode [ 2768.349625][ T48] device veth0_macvtap left promiscuous mode [ 2768.355893][ T48] device veth1_vlan left promiscuous mode [ 2768.361700][ T48] device veth0_vlan left promiscuous mode [ 2768.369617][ T48] device veth1_macvtap left promiscuous mode [ 2768.375804][ T48] device veth0_macvtap left promiscuous mode [ 2768.381874][ T48] device veth1_vlan left promiscuous mode [ 2768.389322][ T48] device veth0_vlan left promiscuous mode [ 2768.398788][ T48] device veth1_macvtap left promiscuous mode [ 2768.405453][ T48] device veth0_macvtap left promiscuous mode [ 2768.411523][ T48] device veth1_vlan left promiscuous mode [ 2768.417540][ T48] device veth0_vlan left promiscuous mode [ 2768.828004][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2768.855437][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2768.869250][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2768.886700][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2768.962545][ T48] bond0 (unregistering): Released all slaves [ 2769.095413][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2769.109749][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2769.127173][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2769.143196][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2769.220450][ T48] bond0 (unregistering): Released all slaves [ 2769.227496][ T5113] Bluetooth: hci3: command 0x041b tx timeout [ 2769.402705][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2769.421621][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2769.434271][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2769.448757][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2769.462837][ T5113] Bluetooth: hci4: command 0x0409 tx timeout [ 2769.524136][ T48] bond0 (unregistering): Released all slaves [ 2769.606139][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2769.615029][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2769.634691][ T2048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2769.645692][ T2048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2769.655907][ T2048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2769.666452][ T2048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2769.676340][ T2048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2769.688616][ T2048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2769.698524][ T2048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2769.709179][ T2048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2769.720784][ T2048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2769.742116][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2769.750431][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2769.759359][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2769.842971][ T2048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2769.858246][ T2048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2769.869276][ T2048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2769.880259][ T2048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2769.890599][ T2048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2769.916022][ T2369] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2769.926649][ T2048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2769.937395][ T2048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2769.964436][ T2369] CPU: 1 PID: 2369 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2769.965737][ T2048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2769.974801][ T2369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2769.974818][ T2369] Call Trace: [ 2769.974826][ T2369] [ 2769.974836][ T2369] dump_stack_lvl+0xd1/0x138 [ 2769.974876][ T2369] dump_header+0x10b/0x85f [ 2769.974919][ T2369] oom_kill_process.cold+0x10/0x15 [ 2769.974961][ T2369] out_of_memory+0x35c/0x14a0 [ 2769.986423][ T2048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2769.994800][ T2369] ? oom_killer_disable+0x280/0x280 [ 2769.994857][ T2369] mem_cgroup_out_of_memory+0x206/0x270 [ 2769.994896][ T2369] ? mem_cgroup_margin+0x130/0x130 [ 2769.994952][ T2369] memory_max_write+0x2f9/0x3c0 [ 2770.047886][ T2369] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2770.054001][ T2369] ? lock_release+0x810/0x810 [ 2770.058724][ T2369] cgroup_file_write+0x1e2/0x770 [ 2770.063710][ T2369] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2770.069811][ T2369] ? kill_css+0x370/0x370 [ 2770.074188][ T2369] ? __virt_addr_valid+0x61/0x2e0 [ 2770.079290][ T2369] ? kill_css+0x370/0x370 [ 2770.083661][ T2369] kernfs_fop_write_iter+0x3f1/0x600 [ 2770.088997][ T2369] vfs_write+0x9ed/0xdd0 [ 2770.093281][ T2369] ? kernel_write+0x630/0x630 [ 2770.098000][ T2369] ? __fget_files+0x26a/0x440 [ 2770.102731][ T2369] ksys_write+0x12b/0x250 [ 2770.107090][ T2369] ? __ia32_sys_read+0xb0/0xb0 [ 2770.111896][ T2369] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2770.117838][ T2369] do_syscall_64+0x39/0xb0 [ 2770.122299][ T2369] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2770.128222][ T2369] RIP: 0033:0x7f2c33a8c0c9 [ 2770.132665][ T2369] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2770.152305][ T2369] RSP: 002b:00007f2c34704168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2770.160752][ T2369] RAX: ffffffffffffffda RBX: 00007f2c33bac050 RCX: 00007f2c33a8c0c9 [ 2770.168761][ T2369] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 2770.176764][ T2369] RBP: 00007f2c33ae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2770.184769][ T2369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2770.192773][ T2369] R13: 00007ffe519c9d3f R14: 00007f2c34704300 R15: 0000000000022000 [ 2770.200805][ T2369] [ 2770.210264][ T5113] Bluetooth: hci0: command 0x0419 tx timeout [ 2770.212890][ T2369] memory: usage 8624kB, limit 0kB, failcnt 2205 [ 2770.244406][ T2369] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2770.251317][ T2369] Memory cgroup stats for /syz3: [ 2770.251529][ T2369] anon 118784 [ 2770.251529][ T2369] file 8347648 [ 2770.251529][ T2369] kernel 352256 [ 2770.251529][ T2369] kernel_stack 98304 [ 2770.251529][ T2369] pagetables 77824 [ 2770.251529][ T2369] sec_pagetables 0 [ 2770.251529][ T2369] percpu 64 [ 2770.251529][ T2369] sock 0 [ 2770.251529][ T2369] vmalloc 0 [ 2770.251529][ T2369] shmem 8347648 [ 2770.251529][ T2369] zswap 0 [ 2770.251529][ T2369] zswapped 0 [ 2770.251529][ T2369] file_mapped 151552 [ 2770.251529][ T2369] file_dirty 0 [ 2770.251529][ T2369] file_writeback 0 [ 2770.251529][ T2369] swapcached 0 [ 2770.251529][ T2369] anon_thp 0 [ 2770.251529][ T2369] file_thp 0 [ 2770.251529][ T2369] shmem_thp 0 [ 2770.251529][ T2369] inactive_anon 118784 [ 2770.251529][ T2369] active_anon 8347648 [ 2770.251529][ T2369] inactive_file 0 [ 2770.251529][ T2369] active_file 0 [ 2770.251529][ T2369] unevictable 0 [ 2770.251529][ T2369] slab_reclaimable 38504 [ 2770.251529][ T2369] slab_unreclaimable 107856 [ 2770.251529][ T2369] slab 146360 [ 2770.363167][ T2298] bridge0: port 1(bridge_slave_0) entered blocking state [ 2770.372649][ T2298] bridge0: port 1(bridge_slave_0) entered disabled state [ 2770.396622][ T2298] device bridge_slave_0 entered promiscuous mode [ 2770.416041][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2770.441206][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2770.453178][ T2048] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2770.461931][ T2048] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2770.472543][ T2369] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=1990,uid=0 [ 2770.503657][ T2369] Memory cgroup out of memory: Killed process 1990 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2770.522422][ T2048] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2770.531263][ T2048] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2770.613581][ T2298] bridge0: port 2(bridge_slave_1) entered blocking state [ 2770.620706][ T2298] bridge0: port 2(bridge_slave_1) entered disabled state [ 2770.647601][ T2298] device bridge_slave_1 entered promiscuous mode [ 2771.011626][ T2298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2771.154992][ T2298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 10:15:41 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:15:41 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2771.295466][ T2298] team0: Port device team_slave_0 added [ 2771.304167][ T5108] Bluetooth: hci3: command 0x040f tx timeout [ 2771.316364][ T8036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2771.380033][ T8036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2771.434604][ T2298] team0: Port device team_slave_1 added [ 2771.499836][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2771.523380][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2771.531428][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2771.548298][ T2298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2771.555480][ T5108] Bluetooth: hci4: command 0x041b tx timeout [ 2771.645480][ T2298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2771.752411][ T2298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2771.825536][ T2347] chnl_net:caif_netlink_parms(): no params data found [ 2771.846359][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2771.864464][ T2298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2771.882431][ T2298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2771.996113][ T2298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2772.093071][ T2393] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2772.122585][ T2393] CPU: 1 PID: 2393 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2772.132980][ T2393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2772.143057][ T2393] Call Trace: [ 2772.146362][ T2393] [ 2772.149333][ T2393] dump_stack_lvl+0xd1/0x138 [ 2772.153978][ T2393] dump_header+0x10b/0x85f [ 2772.158447][ T2393] oom_kill_process.cold+0x10/0x15 [ 2772.163614][ T2393] out_of_memory+0x35c/0x14a0 [ 2772.168366][ T2393] ? oom_killer_disable+0x280/0x280 [ 2772.173640][ T2393] mem_cgroup_out_of_memory+0x206/0x270 [ 2772.179235][ T2393] ? mem_cgroup_margin+0x130/0x130 [ 2772.184428][ T2393] memory_max_write+0x2f9/0x3c0 [ 2772.189322][ T2393] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2772.195426][ T2393] ? lock_release+0x810/0x810 [ 2772.200139][ T2393] cgroup_file_write+0x1e2/0x770 [ 2772.205203][ T2393] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2772.211305][ T2393] ? kill_css+0x370/0x370 [ 2772.215672][ T2393] ? __virt_addr_valid+0x61/0x2e0 [ 2772.220744][ T2393] ? kill_css+0x370/0x370 [ 2772.225194][ T2393] kernfs_fop_write_iter+0x3f1/0x600 [ 2772.230530][ T2393] vfs_write+0x9ed/0xdd0 [ 2772.234811][ T2393] ? kernel_write+0x630/0x630 [ 2772.239523][ T2393] ? __fget_files+0x26a/0x440 [ 2772.244253][ T2393] ksys_write+0x12b/0x250 [ 2772.248624][ T2393] ? __ia32_sys_read+0xb0/0xb0 [ 2772.253418][ T2393] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2772.259351][ T2393] do_syscall_64+0x39/0xb0 [ 2772.263807][ T2393] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2772.269733][ T2393] RIP: 0033:0x7fa863e8c0c9 [ 2772.274172][ T2393] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2772.293807][ T2393] RSP: 002b:00007fa864b06168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2772.302267][ T2393] RAX: ffffffffffffffda RBX: 00007fa863fac050 RCX: 00007fa863e8c0c9 [ 2772.310281][ T2393] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 2772.318389][ T2393] RBP: 00007fa863ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2772.326397][ T2393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2772.334401][ T2393] R13: 00007fff0b3959df R14: 00007fa864b06300 R15: 0000000000022000 [ 2772.342426][ T2393] [ 2772.370372][ T2393] memory: usage 620kB, limit 0kB, failcnt 2095 [ 2772.381560][ T2393] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2772.410384][ T2393] Memory cgroup stats for /syz1: [ 2772.410604][ T2393] anon 114688 [ 2772.410604][ T2393] file 180224 [ 2772.410604][ T2393] kernel 327680 [ 2772.410604][ T2393] kernel_stack 98304 [ 2772.410604][ T2393] pagetables 77824 [ 2772.410604][ T2393] sec_pagetables 0 [ 2772.410604][ T2393] percpu 64 [ 2772.410604][ T2393] sock 0 [ 2772.410604][ T2393] vmalloc 0 [ 2772.410604][ T2393] shmem 180224 [ 2772.410604][ T2393] zswap 0 [ 2772.410604][ T2393] zswapped 0 [ 2772.410604][ T2393] file_mapped 180224 [ 2772.410604][ T2393] file_dirty 0 [ 2772.410604][ T2393] file_writeback 0 [ 2772.410604][ T2393] swapcached 0 [ 2772.410604][ T2393] anon_thp 0 [ 2772.410604][ T2393] file_thp 0 [ 2772.410604][ T2393] shmem_thp 0 [ 2772.410604][ T2393] inactive_anon 180224 [ 2772.410604][ T2393] active_anon 110592 [ 2772.410604][ T2393] inactive_file 0 [ 2772.410604][ T2393] active_file 0 [ 2772.410604][ T2393] unevictable 0 [ 2772.410604][ T2393] slab_reclaimable 17288 [ 2772.410604][ T2393] slab_unreclaimable 107208 [ 2772.410604][ T2393] slab 124496 [ 2772.529720][ T2393] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=2048,uid=0 [ 2772.547669][ T2393] Memory cgroup out of memory: Killed process 2048 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2772.594219][ T2393] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2772.604671][ T2393] CPU: 1 PID: 2393 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2772.615042][ T2393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2772.625164][ T2393] Call Trace: [ 2772.628471][ T2393] [ 2772.631423][ T2393] dump_stack_lvl+0xd1/0x138 [ 2772.636072][ T2393] dump_header+0x10b/0x85f [ 2772.640538][ T2393] oom_kill_process.cold+0x10/0x15 [ 2772.645697][ T2393] out_of_memory+0x35c/0x14a0 [ 2772.650427][ T2393] ? oom_killer_disable+0x280/0x280 [ 2772.655678][ T2393] ? find_held_lock+0x2d/0x110 [ 2772.660498][ T2393] mem_cgroup_out_of_memory+0x206/0x270 [ 2772.666094][ T2393] ? mem_cgroup_margin+0x130/0x130 [ 2772.671257][ T2393] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2772.677110][ T2393] memory_max_write+0x2f9/0x3c0 [ 2772.681994][ T2393] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2772.688096][ T2393] ? lock_release+0x810/0x810 [ 2772.692812][ T2393] cgroup_file_write+0x1e2/0x770 [ 2772.697796][ T2393] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2772.703896][ T2393] ? kill_css+0x370/0x370 [ 2772.708260][ T2393] ? __virt_addr_valid+0x61/0x2e0 [ 2772.713338][ T2393] ? kill_css+0x370/0x370 [ 2772.717703][ T2393] kernfs_fop_write_iter+0x3f1/0x600 [ 2772.723059][ T2393] vfs_write+0x9ed/0xdd0 [ 2772.727338][ T2393] ? kernel_write+0x630/0x630 [ 2772.732049][ T2393] ? __fget_files+0x26a/0x440 [ 2772.736779][ T2393] ksys_write+0x12b/0x250 [ 2772.741139][ T2393] ? __ia32_sys_read+0xb0/0xb0 [ 2772.745937][ T2393] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2772.751871][ T2393] do_syscall_64+0x39/0xb0 [ 2772.756334][ T2393] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2772.762257][ T2393] RIP: 0033:0x7fa863e8c0c9 [ 2772.766696][ T2393] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2772.786549][ T2393] RSP: 002b:00007fa864b06168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2772.794994][ T2393] RAX: ffffffffffffffda RBX: 00007fa863fac050 RCX: 00007fa863e8c0c9 [ 2772.802994][ T2393] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 2772.811249][ T2393] RBP: 00007fa863ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2772.819241][ T2393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2772.827239][ T2393] R13: 00007fff0b3959df R14: 00007fa864b06300 R15: 0000000000022000 [ 2772.835267][ T2393] [ 2772.844246][ T2298] device hsr_slave_0 entered promiscuous mode [ 2772.846732][ T2393] memory: usage 580kB, limit 0kB, failcnt 2095 [ 2772.856833][ T2393] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2772.864086][ T2393] Memory cgroup stats for /syz1: [ 2772.864303][ T2393] anon 98304 [ 2772.864303][ T2393] file 180224 [ 2772.864303][ T2393] kernel 249856 [ 2772.864303][ T2393] kernel_stack 32768 [ 2772.864303][ T2393] pagetables 69632 [ 2772.864303][ T2393] sec_pagetables 0 [ 2772.864303][ T2393] percpu 64 [ 2772.864303][ T2393] sock 0 [ 2772.864303][ T2393] vmalloc 0 [ 2772.864303][ T2393] shmem 180224 [ 2772.864303][ T2393] zswap 0 [ 2772.864303][ T2393] zswapped 0 [ 2772.864303][ T2393] file_mapped 180224 [ 2772.864303][ T2393] file_dirty 0 [ 2772.864303][ T2393] file_writeback 0 [ 2772.864303][ T2393] swapcached 0 [ 2772.864303][ T2393] anon_thp 0 [ 2772.864303][ T2393] file_thp 0 [ 2772.864303][ T2393] shmem_thp 0 [ 2772.864303][ T2393] inactive_anon 163840 [ 2772.864303][ T2393] active_anon 110592 [ 2772.864303][ T2393] inactive_file 0 [ 2772.864303][ T2393] active_file 0 [ 2772.864303][ T2393] unevictable 0 [ 2772.864303][ T2393] slab_reclaimable 17288 [ 2772.864303][ T2393] slab_unreclaimable 107856 [ 2772.864303][ T2393] slab 125144 [ 2772.966903][ T2298] device hsr_slave_1 entered promiscuous mode [ 2772.973982][ T2298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2772.981568][ T2298] Cannot create hsr debugfs directory [ 2772.993034][ T2393] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=2391,uid=0 [ 2773.015192][ T2393] Memory cgroup out of memory: Killed process 2393 (syz-executor.1) total-vm:54672kB, anon-rss:372kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2773.215986][ T2246] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2773.230789][ T2347] bridge0: port 1(bridge_slave_0) entered blocking state [ 2773.238632][ T2347] bridge0: port 1(bridge_slave_0) entered disabled state [ 2773.256432][ T2347] device bridge_slave_0 entered promiscuous mode [ 2773.275034][ T2246] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2773.286324][ T2347] bridge0: port 2(bridge_slave_1) entered blocking state [ 2773.293750][ T2347] bridge0: port 2(bridge_slave_1) entered disabled state [ 2773.301526][ T2347] device bridge_slave_1 entered promiscuous mode [ 2773.321540][ T2246] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2773.344924][ T2246] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2773.382552][ T5113] Bluetooth: hci3: command 0x0419 tx timeout [ 2773.498301][ T2347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 10:15:43 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:15:43 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2773.596889][ T2347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2773.622850][ T5108] Bluetooth: hci4: command 0x040f tx timeout [ 2773.796013][ T2347] team0: Port device team_slave_0 added [ 2773.848107][ T2298] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2773.953642][ T2347] team0: Port device team_slave_1 added 10:15:44 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2774.088418][ T5113] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2774.105867][ T5113] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2774.116615][ T5113] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2774.125957][ T5113] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2774.133686][ T5113] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2774.153052][ T5113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2774.176364][ T2298] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2774.313628][ T2347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2774.341177][ T2347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2774.418436][ T2347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2774.473260][ T2347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2774.480249][ T2347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2774.504396][ T1201] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.512472][ T1201] ieee802154 phy1 wpan1: encryption failed: -22 [ 2774.619793][ T2347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2774.793367][ T2298] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2774.860188][ T2246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2774.967733][ T2246] 8021q: adding VLAN 0 to HW filter on device team0 [ 2775.023798][ T2298] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2775.079849][ T2347] device hsr_slave_0 entered promiscuous mode [ 2775.103071][ T2347] device hsr_slave_1 entered promiscuous mode [ 2775.144793][ T2347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2775.183295][ T2347] Cannot create hsr debugfs directory [ 2775.199187][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2775.209743][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2775.433189][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2775.441986][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2775.492923][ T6685] bridge0: port 1(bridge_slave_0) entered blocking state [ 2775.500073][ T6685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2775.532801][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2775.541592][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2775.592909][ T6685] bridge0: port 2(bridge_slave_1) entered blocking state [ 2775.600059][ T6685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2775.632756][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2775.687308][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2775.697790][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2775.706414][ T5113] Bluetooth: hci4: command 0x0419 tx timeout [ 2775.770575][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2775.845635][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2775.862241][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2775.876145][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2775.884911][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2775.910769][ T2246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2775.925978][ T2246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2775.978452][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2775.998134][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2776.182525][ T5113] Bluetooth: hci1: command 0x0409 tx timeout [ 2776.330530][ T2298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2776.348084][ T2298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2776.462825][ T2347] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2776.542972][ T2298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2776.553409][ T5108] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2776.562916][ T5108] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2776.571572][ T5108] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2776.580319][ T5108] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2776.592012][ T5108] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2776.594827][ T2298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2776.606014][T29331] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2776.705002][ T2406] chnl_net:caif_netlink_parms(): no params data found [ 2776.807117][ T2347] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2777.043671][ T2347] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2777.313219][ T2347] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2777.333306][ T5113] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2777.343795][ T5113] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2777.352922][ T5113] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2777.360741][ T5113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2777.373214][ T5113] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2777.383978][ T5113] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2777.413109][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2777.420667][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2777.495527][ T2246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2777.661333][ T2406] bridge0: port 1(bridge_slave_0) entered blocking state [ 2777.683146][ T2406] bridge0: port 1(bridge_slave_0) entered disabled state [ 2777.691467][ T2406] device bridge_slave_0 entered promiscuous mode [ 2777.805411][ T2406] bridge0: port 2(bridge_slave_1) entered blocking state [ 2777.819010][ T2406] bridge0: port 2(bridge_slave_1) entered disabled state [ 2777.829689][ T2406] device bridge_slave_1 entered promiscuous mode [ 2777.986550][ T2406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2778.023595][ T2406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2778.176173][ T2298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2778.262778][ T5113] Bluetooth: hci1: command 0x041b tx timeout [ 2778.284367][ T2406] team0: Port device team_slave_0 added [ 2778.311532][ T2298] 8021q: adding VLAN 0 to HW filter on device team0 [ 2778.353034][ T2347] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2778.373504][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2778.381472][T27661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2778.391865][ T2406] team0: Port device team_slave_1 added [ 2778.432272][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2778.441392][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2778.451010][ T6685] bridge0: port 1(bridge_slave_0) entered blocking state [ 2778.458195][ T6685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2778.509452][ T2347] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2778.533930][ T2433] chnl_net:caif_netlink_parms(): no params data found [ 2778.637595][ T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2778.662730][ T5113] Bluetooth: hci2: command 0x0409 tx timeout [ 2778.705348][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2778.714296][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2778.729465][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2778.739926][T28162] bridge0: port 2(bridge_slave_1) entered blocking state [ 2778.747101][T28162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2778.760130][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2778.769862][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2778.778805][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2778.790423][ T2347] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2778.818630][ T2406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2778.832051][ T2406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2778.876380][ T2406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2778.921482][ T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2779.006651][ T2347] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2779.046846][ T2246] device veth0_vlan entered promiscuous mode [ 2779.064118][ T2406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2779.071199][ T2406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2779.162350][ T2406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2779.253348][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2779.262577][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2779.271117][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2779.279924][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2779.289330][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2779.313293][ T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2779.427036][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2779.443210][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2779.461534][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2779.468951][ T5113] Bluetooth: hci5: command 0x0409 tx timeout [ 2779.481907][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2779.490864][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2779.559347][ T2298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2779.604445][ T2298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2779.773299][ T48] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2779.884147][ T2246] device veth1_vlan entered promiscuous mode [ 2779.946279][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2779.955361][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2780.183986][ T2406] device hsr_slave_0 entered promiscuous mode [ 2780.212808][ T2406] device hsr_slave_1 entered promiscuous mode [ 2780.242585][ T2406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2780.250198][ T2406] Cannot create hsr debugfs directory [ 2780.342733][ T5113] Bluetooth: hci1: command 0x040f tx timeout [ 2780.537183][ T2447] chnl_net:caif_netlink_parms(): no params data found [ 2780.614498][ T2433] bridge0: port 1(bridge_slave_0) entered blocking state [ 2780.621649][ T2433] bridge0: port 1(bridge_slave_0) entered disabled state [ 2780.643672][ T2433] device bridge_slave_0 entered promiscuous mode [ 2780.742941][ T5113] Bluetooth: hci2: command 0x041b tx timeout [ 2780.806870][ T2433] bridge0: port 2(bridge_slave_1) entered blocking state [ 2780.833433][ T2433] bridge0: port 2(bridge_slave_1) entered disabled state [ 2780.862504][ T2433] device bridge_slave_1 entered promiscuous mode [ 2780.989260][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2781.003316][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2781.012027][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2781.020349][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2781.029142][ T2246] device veth0_macvtap entered promiscuous mode [ 2781.054200][ T2347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2781.164803][ T2246] device veth1_macvtap entered promiscuous mode [ 2781.294105][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2781.341349][ T2433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2781.381222][ T2347] 8021q: adding VLAN 0 to HW filter on device team0 [ 2781.417893][ T2298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2781.446215][ T2246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2781.475029][ T2246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2781.499399][ T2246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2781.522443][ T2246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2781.542961][ T5113] Bluetooth: hci5: command 0x041b tx timeout [ 2781.549681][ T2246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2781.572506][ T2246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2781.594895][ T2246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2781.642359][ T2246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2781.652233][ T2246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2781.680435][ T2246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2781.692073][ T2246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2781.780276][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2781.796908][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2781.815142][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2781.823247][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2781.831189][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2781.863194][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2781.871744][T27660] bridge0: port 1(bridge_slave_0) entered blocking state [ 2781.878948][T27660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2781.902785][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2781.922789][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2781.933932][ T2433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2781.988168][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2782.074870][ T2246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2782.088838][ T2246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2782.122430][ T2246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2782.152348][ T2246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2782.169388][ T2246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2782.195258][ T2246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2782.212407][ T2246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2782.238880][ T2246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2782.267457][ T2246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2782.292593][ T2246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2782.314465][ T2246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2782.323674][ T2447] bridge0: port 1(bridge_slave_0) entered blocking state [ 2782.330886][ T2447] bridge0: port 1(bridge_slave_0) entered disabled state [ 2782.340722][ T2447] device bridge_slave_0 entered promiscuous mode [ 2782.370242][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2782.378936][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2782.388390][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2782.398078][ T1584] bridge0: port 2(bridge_slave_1) entered blocking state [ 2782.405240][ T1584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2782.414153][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2782.423552][ T5113] Bluetooth: hci1: command 0x0419 tx timeout [ 2782.430790][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2782.440343][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2782.449528][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2782.505058][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2782.544927][ T2246] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2782.565347][ T2246] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2782.582896][ T2246] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2782.591648][ T2246] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2782.629172][ T2447] bridge0: port 2(bridge_slave_1) entered blocking state [ 2782.637524][ T2447] bridge0: port 2(bridge_slave_1) entered disabled state [ 2782.659655][ T2447] device bridge_slave_1 entered promiscuous mode [ 2782.697171][ T2433] team0: Port device team_slave_0 added [ 2782.714560][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2782.724213][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2782.733601][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2782.742228][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2782.823804][ T5113] Bluetooth: hci2: command 0x040f tx timeout [ 2782.853366][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2782.960087][ T2433] team0: Port device team_slave_1 added [ 2783.041920][ T2447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2783.065802][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2783.084828][ T2433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2783.091817][ T2433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2783.162510][ T2433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2783.273657][ T2406] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2783.301001][ T2447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2783.369251][ T2433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2783.383281][ T2433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2783.431323][ T2433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2783.523353][ T2406] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2783.567042][ T2447] team0: Port device team_slave_0 added [ 2783.622789][ T5113] Bluetooth: hci5: command 0x040f tx timeout [ 2783.630948][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2783.643911][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2783.654069][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2783.672921][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2783.681390][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2783.690099][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2783.699416][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2783.707601][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2783.721467][ T2347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2783.754885][ T2298] device veth0_vlan entered promiscuous mode [ 2783.823478][ T2406] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2783.855017][ T2447] team0: Port device team_slave_1 added [ 2784.195101][ T2406] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2784.256018][ T2298] device veth1_vlan entered promiscuous mode [ 2784.296003][ T2433] device hsr_slave_0 entered promiscuous mode [ 2784.313374][ T2433] device hsr_slave_1 entered promiscuous mode [ 2784.323235][ T2433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2784.330829][ T2433] Cannot create hsr debugfs directory [ 2784.358566][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2784.420482][ T2447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2784.427766][ T2447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2784.480720][ T2447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2784.547664][ T2447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2784.555371][ T2447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2784.612655][ T2447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2784.651234][ T2298] device veth0_macvtap entered promiscuous mode [ 2784.727252][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2784.745597][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2784.763253][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2784.784042][ T2298] device veth1_macvtap entered promiscuous mode [ 2784.902681][ T5113] Bluetooth: hci2: command 0x0419 tx timeout [ 2784.943639][ T8036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2784.951762][ T8036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2785.010995][ T2447] device hsr_slave_0 entered promiscuous mode [ 2785.035297][ T2447] device hsr_slave_1 entered promiscuous mode [ 2785.052640][ T2447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2785.060256][ T2447] Cannot create hsr debugfs directory [ 2785.133129][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2785.153372][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2785.173021][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2785.180602][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2785.267153][ T2298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2785.288905][ T2298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2785.312520][ T2298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2785.332371][ T2298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2785.342236][ T2298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2785.383099][ T2298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2785.412403][ T2298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2785.432571][ T2298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2785.452386][ T2298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2785.472384][ T2298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2785.492641][ T2298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2785.512412][ T2298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2785.534121][ T2298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2785.702672][ T5113] Bluetooth: hci5: command 0x0419 tx timeout [ 2785.764393][ T8036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2785.775186][ T2347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2785.786440][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2785.792722][ T8036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2785.796824][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2785.840750][ T2298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2785.872508][ T2298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2785.911510][ T2298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2785.952369][ T2298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2785.962451][ T2298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2785.992598][ T2298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2786.024070][ T2298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2786.062356][ T2298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2786.072223][ T2298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2786.097529][ T2298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2786.122440][ T2298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2786.149516][ T2298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2786.167748][ T2298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2786.190425][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2786.200456][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2786.210887][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2786.271373][ T2298] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2786.282249][ T2298] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2786.291040][ T2298] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2786.300124][ T2298] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2786.434428][ T2406] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2786.605460][ T2406] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2786.640536][ T2568] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2786.666376][ T2568] CPU: 0 PID: 2568 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2786.676775][ T2568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2786.686860][ T2568] Call Trace: [ 2786.690157][ T2568] [ 2786.693107][ T2568] dump_stack_lvl+0xd1/0x138 [ 2786.697735][ T2568] dump_header+0x10b/0x85f [ 2786.702199][ T2568] oom_kill_process.cold+0x10/0x15 [ 2786.707355][ T2568] out_of_memory+0x35c/0x14a0 [ 2786.712093][ T2568] ? oom_killer_disable+0x280/0x280 [ 2786.717341][ T2568] mem_cgroup_out_of_memory+0x206/0x270 [ 2786.722932][ T2568] ? mem_cgroup_margin+0x130/0x130 [ 2786.728194][ T2568] memory_max_write+0x2f9/0x3c0 [ 2786.733079][ T2568] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2786.739178][ T2568] ? lock_release+0x810/0x810 [ 2786.743891][ T2568] cgroup_file_write+0x1e2/0x770 [ 2786.748862][ T2568] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2786.754968][ T2568] ? kill_css+0x370/0x370 [ 2786.759329][ T2568] ? __virt_addr_valid+0x61/0x2e0 [ 2786.764403][ T2568] ? kill_css+0x370/0x370 [ 2786.768763][ T2568] kernfs_fop_write_iter+0x3f1/0x600 [ 2786.774098][ T2568] vfs_write+0x9ed/0xdd0 [ 2786.778373][ T2568] ? kernel_write+0x630/0x630 [ 2786.783110][ T2568] ? __fget_files+0x26a/0x440 [ 2786.787844][ T2568] ksys_write+0x12b/0x250 [ 2786.792205][ T2568] ? __ia32_sys_read+0xb0/0xb0 [ 2786.797002][ T2568] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2786.803027][ T2568] do_syscall_64+0x39/0xb0 [ 2786.807488][ T2568] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2786.813413][ T2568] RIP: 0033:0x7fbad888c0c9 [ 2786.817890][ T2568] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2786.837551][ T2568] RSP: 002b:00007fbad9539168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2786.846015][ T2568] RAX: ffffffffffffffda RBX: 00007fbad89abf80 RCX: 00007fbad888c0c9 [ 2786.854010][ T2568] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 2786.862003][ T2568] RBP: 00007fbad88e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2786.870185][ T2568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2786.878192][ T2568] R13: 00007fffab730ccf R14: 00007fbad9539300 R15: 0000000000022000 [ 2786.886220][ T2568] [ 2786.910489][ T2568] memory: usage 8556kB, limit 0kB, failcnt 2442 [ 2786.933564][ T2568] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2786.940752][ T2406] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2786.958332][ T2568] Memory cgroup stats for /syz5: [ 2786.960728][ T2568] anon 114688 [ 2786.960728][ T2568] file 8347648 [ 2786.960728][ T2568] kernel 282624 [ 2786.960728][ T2568] kernel_stack 65536 [ 2786.960728][ T2568] pagetables 77824 [ 2786.960728][ T2568] sec_pagetables 0 [ 2786.960728][ T2568] percpu 64 [ 2786.960728][ T2568] sock 0 [ 2786.960728][ T2568] vmalloc 0 [ 2786.960728][ T2568] shmem 8347648 [ 2786.960728][ T2568] zswap 0 [ 2786.960728][ T2568] zswapped 0 [ 2786.960728][ T2568] file_mapped 221184 [ 2786.960728][ T2568] file_dirty 0 [ 2786.960728][ T2568] file_writeback 0 [ 2786.960728][ T2568] swapcached 0 [ 2786.960728][ T2568] anon_thp 0 [ 2786.960728][ T2568] file_thp 0 [ 2786.960728][ T2568] shmem_thp 0 [ 2786.960728][ T2568] inactive_anon 4030464 [ 2786.960728][ T2568] active_anon 4415488 [ 2786.960728][ T2568] inactive_file 0 [ 2786.960728][ T2568] active_file 0 [ 2786.960728][ T2568] unevictable 0 [ 2786.960728][ T2568] slab_reclaimable 38120 [ 2786.960728][ T2568] slab_unreclaimable 76560 [ 2786.960728][ T2568] slab 114680 [ 2787.290783][ T2568] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2567,uid=0 10:15:57 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2787.332720][ T2568] Memory cgroup out of memory: Killed process 2568 (syz-executor.5) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2787.362942][ T2406] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2787.496473][ T2246] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 2787.532599][ T2246] CPU: 0 PID: 2246 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2787.542993][ T2246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2787.553069][ T2246] Call Trace: [ 2787.556374][ T2246] [ 2787.559323][ T2246] dump_stack_lvl+0xd1/0x138 [ 2787.563955][ T2246] dump_header+0x10b/0x85f [ 2787.568413][ T2246] oom_kill_process.cold+0x10/0x15 [ 2787.573566][ T2246] out_of_memory+0x35c/0x14a0 [ 2787.578289][ T2246] ? find_held_lock+0x2d/0x110 [ 2787.583090][ T2246] ? oom_killer_disable+0x280/0x280 [ 2787.588332][ T2246] ? find_held_lock+0x2d/0x110 [ 2787.593132][ T2246] mem_cgroup_out_of_memory+0x206/0x270 [ 2787.598720][ T2246] ? mem_cgroup_margin+0x130/0x130 [ 2787.603876][ T2246] ? lock_downgrade+0x6e0/0x6e0 [ 2787.608785][ T2246] try_charge_memcg+0xefb/0x12f0 [ 2787.613761][ T2246] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2787.619775][ T2246] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2787.625542][ T2246] ? lock_downgrade+0x6e0/0x6e0 [ 2787.630428][ T2246] ? lock_downgrade+0x6e0/0x6e0 [ 2787.635323][ T2246] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2787.640912][ T2246] __alloc_pages+0x1f3/0x5b0 [ 2787.645560][ T2246] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2787.652357][ T2246] ? find_held_lock+0x2d/0x110 [ 2787.657170][ T2246] ? lock_downgrade+0x6e0/0x6e0 [ 2787.662041][ T2246] ? do_raw_spin_lock+0x124/0x2b0 [ 2787.667097][ T2246] alloc_pages+0x1aa/0x270 [ 2787.671547][ T2246] __pmd_alloc+0x3f/0x5d0 [ 2787.675903][ T2246] ? __pud_alloc+0xe4/0x180 [ 2787.680439][ T2246] copy_page_range+0x2829/0x3b40 [ 2787.685555][ T2246] ? mas_store+0x206/0x2e0 [ 2787.689998][ T2246] ? handle_mm_fault+0x850/0x850 [ 2787.694989][ T2246] ? anon_vma_fork+0xba/0x630 [ 2787.699710][ T2246] dup_mmap+0xc10/0x10b0 [ 2787.703994][ T2246] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2787.709301][ T2246] ? lock_downgrade+0x6e0/0x6e0 [ 2787.714187][ T2246] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2787.720044][ T2246] ? mm_init+0x8e0/0xc10 [ 2787.724318][ T2246] copy_process+0x440f/0x7520 [ 2787.729020][ T2246] ? _raw_spin_unlock+0x28/0x40 [ 2787.733898][ T2246] ? wp_page_reuse+0x197/0x570 [ 2787.738715][ T2246] ? __cleanup_sighand+0xb0/0xb0 [ 2787.743676][ T2246] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2787.749092][ T2246] ? rwlock_bug.part.0+0x90/0x90 [ 2787.754404][ T2246] ? lock_chain_count+0x20/0x20 [ 2787.759288][ T2246] kernel_clone+0xeb/0x990 [ 2787.763912][ T2246] ? create_io_thread+0xf0/0xf0 [ 2787.768797][ T2246] ? find_held_lock+0x2d/0x110 [ 2787.773609][ T2246] __do_sys_clone+0xba/0x100 [ 2787.778223][ T2246] ? kernel_clone+0x990/0x990 [ 2787.782954][ T2246] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2787.788883][ T2246] do_syscall_64+0x39/0xb0 [ 2787.793333][ T2246] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2787.800387][ T2246] RIP: 0033:0x7fbad8889dfb [ 2787.804827][ T2246] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2787.824461][ T2246] RSP: 002b:00007fffab730f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2787.832899][ T2246] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbad8889dfb [ 2787.840886][ T2246] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2787.848883][ T2246] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556d1e400 [ 2787.856885][ T2246] R10: 0000555556d1e6d0 R11: 0000000000000246 R12: 0000000000000001 [ 2787.864873][ T2246] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffab730ff0 [ 2787.872895][ T2246] [ 2787.882817][ T2246] memory: usage 8348kB, limit 0kB, failcnt 2468 [ 2787.889112][ T2246] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2787.946095][ T2246] Memory cgroup stats for /syz5: [ 2787.946304][ T2246] anon 40960 [ 2787.946304][ T2246] file 8347648 [ 2787.946304][ T2246] kernel 159744 [ 2787.946304][ T2246] kernel_stack 32768 [ 2787.946304][ T2246] pagetables 8192 [ 2787.946304][ T2246] sec_pagetables 0 [ 2787.946304][ T2246] percpu 128 [ 2787.946304][ T2246] sock 0 [ 2787.946304][ T2246] vmalloc 0 [ 2787.946304][ T2246] shmem 8347648 [ 2787.946304][ T2246] zswap 0 [ 2787.946304][ T2246] zswapped 0 [ 2787.946304][ T2246] file_mapped 221184 [ 2787.946304][ T2246] file_dirty 0 [ 2787.946304][ T2246] file_writeback 0 [ 2787.946304][ T2246] swapcached 0 [ 2787.946304][ T2246] anon_thp 0 [ 2787.946304][ T2246] file_thp 0 [ 2787.946304][ T2246] shmem_thp 0 [ 2787.946304][ T2246] inactive_anon 3973120 [ 2787.946304][ T2246] active_anon 4415488 [ 2787.946304][ T2246] inactive_file 0 [ 2787.946304][ T2246] active_file 0 [ 2787.946304][ T2246] unevictable 0 [ 2787.946304][ T2246] slab_reclaimable 32024 [ 2787.946304][ T2246] slab_unreclaimable 65648 [ 2787.946304][ T2246] slab 97672 [ 2788.110341][ T1744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2788.120611][ T1744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2788.252566][ T2246] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2246,uid=0 [ 2788.329100][ T2246] Memory cgroup out of memory: Killed process 2246 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2788.444885][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2788.485424][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2788.560664][ T2347] device veth0_vlan entered promiscuous mode [ 2788.600093][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2788.608427][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2788.617519][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2788.627423][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2788.635428][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2788.734552][ T2347] device veth1_vlan entered promiscuous mode 10:15:58 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2788.805330][ T2406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2788.984426][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2789.014828][ T2406] 8021q: adding VLAN 0 to HW filter on device team0 [ 2789.032699][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2789.152668][ T2347] device veth0_macvtap entered promiscuous mode [ 2789.160467][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2789.173591][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2789.193599][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2789.213154][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2789.224536][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2789.242961][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2789.261875][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2789.328967][ T2347] device veth1_macvtap entered promiscuous mode [ 2789.344450][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2789.363271][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2789.391857][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2789.423212][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2789.452533][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 2789.459681][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2789.496002][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2789.502975][ T2598] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2789.525615][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2789.532479][ T2598] CPU: 1 PID: 2598 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2789.543968][ T2598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2789.553016][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 2789.554021][ T2598] Call Trace: [ 2789.554033][ T2598] [ 2789.554044][ T2598] dump_stack_lvl+0xd1/0x138 [ 2789.561145][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2789.564334][ T2598] dump_header+0x10b/0x85f [ 2789.564378][ T2598] oom_kill_process.cold+0x10/0x15 [ 2789.599019][ T2598] out_of_memory+0x35c/0x14a0 [ 2789.603054][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2789.604800][ T2598] ? oom_killer_disable+0x280/0x280 [ 2789.619813][ T2598] mem_cgroup_out_of_memory+0x206/0x270 [ 2789.626572][ T2598] ? mem_cgroup_margin+0x130/0x130 [ 2789.632345][ T2598] memory_max_write+0x2f9/0x3c0 [ 2789.637213][ T2598] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2789.643350][ T2598] ? lock_release+0x810/0x810 [ 2789.648086][ T2598] cgroup_file_write+0x1e2/0x770 [ 2789.653135][ T2598] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2789.659247][ T2598] ? kill_css+0x370/0x370 [ 2789.663690][ T2598] ? __virt_addr_valid+0x61/0x2e0 [ 2789.669552][ T2598] ? kill_css+0x370/0x370 [ 2789.673919][ T2598] kernfs_fop_write_iter+0x3f1/0x600 [ 2789.679247][ T2598] vfs_write+0x9ed/0xdd0 [ 2789.683524][ T2598] ? kernel_write+0x630/0x630 [ 2789.688770][ T2598] ? __fget_files+0x26a/0x440 [ 2789.693484][ T2598] ksys_write+0x12b/0x250 [ 2789.697846][ T2598] ? __ia32_sys_read+0xb0/0xb0 [ 2789.702632][ T2598] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2789.708550][ T2598] do_syscall_64+0x39/0xb0 [ 2789.712988][ T2598] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2789.718897][ T2598] RIP: 0033:0x7f38dc48c0c9 [ 2789.723318][ T2598] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2789.742934][ T2598] RSP: 002b:00007f38dd12e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2789.751364][ T2598] RAX: ffffffffffffffda RBX: 00007f38dc5abf80 RCX: 00007f38dc48c0c9 [ 2789.759341][ T2598] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 2789.767318][ T2598] RBP: 00007f38dc4e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2789.775295][ T2598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2789.783271][ T2598] R13: 00007ffefbfb9ddf R14: 00007f38dd12e300 R15: 0000000000022000 [ 2789.791268][ T2598] [ 2789.932070][ T2433] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2789.956615][ T1744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2789.970628][ T1744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2789.988587][ T1744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2790.013168][ T1744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2790.034850][ T1744] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2790.058498][ T2406] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2790.063108][ T2598] memory: usage 600kB, limit 0kB, failcnt 2432 [ 2790.104377][ T2598] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2790.122719][ T2406] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2790.142460][ T2598] Memory cgroup stats for /syz0: [ 2790.142694][ T2598] anon 114688 [ 2790.142694][ T2598] file 184320 [ 2790.142694][ T2598] kernel 299008 [ 2790.142694][ T2598] kernel_stack 65536 [ 2790.142694][ T2598] pagetables 77824 [ 2790.142694][ T2598] sec_pagetables 0 [ 2790.142694][ T2598] percpu 208 [ 2790.142694][ T2598] sock 0 [ 2790.142694][ T2598] vmalloc 4096 [ 2790.142694][ T2598] shmem 184320 [ 2790.142694][ T2598] zswap 0 [ 2790.142694][ T2598] zswapped 0 [ 2790.142694][ T2598] file_mapped 184320 [ 2790.142694][ T2598] file_dirty 0 [ 2790.142694][ T2598] file_writeback 0 [ 2790.142694][ T2598] swapcached 0 [ 2790.142694][ T2598] anon_thp 0 [ 2790.142694][ T2598] file_thp 0 [ 2790.142694][ T2598] shmem_thp 0 [ 2790.142694][ T2598] inactive_anon 159744 [ 2790.142694][ T2598] active_anon 122880 [ 2790.142694][ T2598] inactive_file 0 [ 2790.142694][ T2598] active_file 0 [ 2790.142694][ T2598] unevictable 0 [ 2790.142694][ T2598] slab_reclaimable 17792 [ 2790.142694][ T2598] slab_unreclaimable 104568 [ 2790.142694][ T2598] slab 122360 [ 2790.274296][ T2598] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=2597,uid=0 [ 2790.301462][ T2347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2790.328633][ T2347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2790.332483][ T2598] Memory cgroup out of memory: Killed process 2597 (syz-executor.0) total-vm:54540kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2790.363036][ T2347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 10:16:00 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2790.388069][ T2347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2790.406616][ T2347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2790.426621][ T2347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2790.468154][ T2347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2790.482425][ T2347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2790.484850][ T2298] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2790.492245][ T2347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2790.515412][ T2347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2790.525343][ T2347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2790.535863][ T2347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2790.545816][ T2298] CPU: 1 PID: 2298 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2790.556166][ T2298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2790.566229][ T2298] Call Trace: [ 2790.569506][ T2298] [ 2790.572439][ T2298] dump_stack_lvl+0xd1/0x138 [ 2790.577048][ T2298] dump_header+0x10b/0x85f [ 2790.581502][ T2298] oom_kill_process.cold+0x10/0x15 [ 2790.586632][ T2298] out_of_memory+0x35c/0x14a0 [ 2790.591332][ T2298] ? find_held_lock+0x2d/0x110 [ 2790.596114][ T2298] ? oom_killer_disable+0x280/0x280 [ 2790.601333][ T2298] ? find_held_lock+0x2d/0x110 [ 2790.606115][ T2298] mem_cgroup_out_of_memory+0x206/0x270 [ 2790.611681][ T2298] ? mem_cgroup_margin+0x130/0x130 [ 2790.616825][ T2298] ? lock_downgrade+0x6e0/0x6e0 [ 2790.621711][ T2298] try_charge_memcg+0xefb/0x12f0 [ 2790.626667][ T2298] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2790.632654][ T2298] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2790.638393][ T2298] ? lock_downgrade+0x6e0/0x6e0 [ 2790.643250][ T2298] ? lock_downgrade+0x6e0/0x6e0 [ 2790.648105][ T2298] ? rcu_read_unlock+0x9/0x60 [ 2790.652839][ T2298] obj_cgroup_charge+0x2af/0x5e0 [ 2790.657787][ T2298] ? sk_prot_alloc+0x5f/0x290 [ 2790.662470][ T2298] kmem_cache_alloc+0xb5/0x430 [ 2790.667238][ T2298] ? inet_create+0x324/0xea0 [ 2790.671837][ T2298] sk_prot_alloc+0x5f/0x290 [ 2790.676349][ T2298] sk_alloc+0x3a/0x7a0 [ 2790.680515][ T2298] inet_create+0x399/0xea0 [ 2790.684943][ T2298] __sock_create+0x359/0x790 [ 2790.689551][ T2298] __sys_socket+0x133/0x250 [ 2790.694070][ T2298] ? __sys_socket_file+0x1f0/0x1f0 [ 2790.699202][ T2298] __x64_sys_socket+0x73/0xb0 [ 2790.703891][ T2298] do_syscall_64+0x39/0xb0 [ 2790.708323][ T2298] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2790.714314][ T2298] RIP: 0033:0x7f38dc48d747 [ 2790.718731][ T2298] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2790.738346][ T2298] RSP: 002b:00007ffefbfb9958 EFLAGS: 00000206 ORIG_RAX: 0000000000000029 [ 2790.746767][ T2298] RAX: ffffffffffffffda RBX: 00007ffefbfba0c0 RCX: 00007f38dc48d747 [ 2790.754758][ T2298] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 2790.762728][ T2298] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffefbfb9ed0 [ 2790.770703][ T2298] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000032 [ 2790.778684][ T2298] R13: 00000000002a93a1 R14: 0000000000000009 R15: 00007ffefbfba100 [ 2790.786762][ T2298] [ 2790.792024][ T2347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2790.812365][ T2347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2790.834127][ T2347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2790.841521][ T2433] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2790.850918][ T2298] memory: usage 364kB, limit 0kB, failcnt 2451 [ 2790.876454][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2790.886076][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2790.895329][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2790.902634][ T2298] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2790.904481][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2790.910078][ T2298] Memory cgroup stats for /syz0: [ 2790.920694][ T2298] anon 40960 [ 2790.920694][ T2298] file 184320 [ 2790.920694][ T2298] kernel 114688 [ 2790.920694][ T2298] kernel_stack 0 [ 2790.920694][ T2298] pagetables 8192 [ 2790.920694][ T2298] sec_pagetables 0 [ 2790.920694][ T2298] percpu 208 [ 2790.920694][ T2298] sock 0 [ 2790.920694][ T2298] vmalloc 4096 [ 2790.920694][ T2298] shmem 184320 [ 2790.920694][ T2298] zswap 0 [ 2790.920694][ T2298] zswapped 0 [ 2790.920694][ T2298] file_mapped 184320 [ 2790.920694][ T2298] file_dirty 0 [ 2790.920694][ T2298] file_writeback 0 [ 2790.920694][ T2298] swapcached 0 [ 2790.920694][ T2298] anon_thp 0 [ 2790.920694][ T2298] file_thp 0 [ 2790.920694][ T2298] shmem_thp 0 [ 2790.920694][ T2298] inactive_anon 102400 [ 2790.920694][ T2298] active_anon 122880 [ 2790.920694][ T2298] inactive_file 0 [ 2790.920694][ T2298] active_file 0 [ 2790.920694][ T2298] unevictable 0 [ 2790.920694][ T2298] slab_reclaimable 15048 [ 2790.920694][ T2298] slab_unreclaimable 77168 [ 2790.920694][ T2298] slab 92216 [ 2790.938383][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2791.016594][ T2298] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=2298,uid=0 [ 2791.041408][ T2298] Memory cgroup out of memory: Killed process 2298 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2791.042247][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2791.110292][ T2433] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2791.183296][ T2347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2791.212499][ T2347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2791.232465][ T2347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2791.252363][ T2347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2791.282373][ T2347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2791.314677][ T2347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2791.352368][ T2347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2791.382938][ T2347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2791.413082][ T2347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2791.428210][ T2347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2791.448709][ T2347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2791.468474][ T2347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2791.489190][ T2347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2791.506749][ T2347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2791.527686][ T2347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2791.554876][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2791.566500][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2791.575411][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2791.593477][T29331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2791.602793][T29331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2791.610662][T29331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2791.663411][T29331] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2791.672813][ T5108] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2791.680084][ T5108] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 10:16:01 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2791.772881][ T2433] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2791.807507][ T2347] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2791.832394][ T2347] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2791.862776][ T2347] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2791.871545][ T2347] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 10:16:02 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2792.413313][ T9586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2792.436151][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2792.454207][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2792.463623][ T9586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2792.506741][ T2433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2792.696277][ T2406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2792.728653][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2792.844377][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2792.855242][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2792.882283][ T2433] 8021q: adding VLAN 0 to HW filter on device team0 [ 2792.926101][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2792.937121][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2793.002777][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2793.010919][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2793.024755][ T2447] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2793.076016][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2793.107072][ T2447] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2793.134971][ T2447] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2793.161540][ T2406] device veth0_vlan entered promiscuous mode [ 2793.302910][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2793.354029][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2793.395659][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2793.414983][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2793.434169][ T9945] bridge0: port 1(bridge_slave_0) entered blocking state [ 2793.441338][ T9945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2793.481822][ T2447] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2793.506229][ T2622] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2793.516481][ T2406] device veth1_vlan entered promiscuous mode [ 2793.528290][ T2622] CPU: 0 PID: 2622 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2793.538748][ T2622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2793.548831][ T2622] Call Trace: [ 2793.552137][ T2622] [ 2793.555090][ T2622] dump_stack_lvl+0xd1/0x138 [ 2793.559730][ T2622] dump_header+0x10b/0x85f [ 2793.564206][ T2622] oom_kill_process.cold+0x10/0x15 [ 2793.569374][ T2622] out_of_memory+0x35c/0x14a0 [ 2793.574104][ T2622] ? oom_killer_disable+0x280/0x280 [ 2793.579345][ T2622] ? mark_held_locks+0x9f/0xe0 [ 2793.584149][ T2622] mem_cgroup_out_of_memory+0x206/0x270 [ 2793.589812][ T2622] ? mem_cgroup_margin+0x130/0x130 [ 2793.594953][ T2622] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 2793.600786][ T2622] memory_max_write+0x2f9/0x3c0 [ 2793.605650][ T2622] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2793.611736][ T2622] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2793.617915][ T2622] cgroup_file_write+0x1e2/0x770 [ 2793.622870][ T2622] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2793.628948][ T2622] ? kill_css+0x370/0x370 [ 2793.633302][ T2622] ? kill_css+0x370/0x370 [ 2793.637644][ T2622] kernfs_fop_write_iter+0x3f1/0x600 [ 2793.642956][ T2622] vfs_write+0x9ed/0xdd0 [ 2793.647216][ T2622] ? kernel_write+0x630/0x630 [ 2793.651910][ T2622] ? __fget_files+0x26a/0x440 [ 2793.656608][ T2622] ksys_write+0x12b/0x250 [ 2793.660948][ T2622] ? __ia32_sys_read+0xb0/0xb0 [ 2793.665724][ T2622] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2793.671644][ T2622] do_syscall_64+0x39/0xb0 [ 2793.676082][ T2622] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2793.681986][ T2622] RIP: 0033:0x7fe1ea88c0c9 [ 2793.686408][ T2622] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2793.706021][ T2622] RSP: 002b:00007fe1eb569168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2793.714444][ T2622] RAX: ffffffffffffffda RBX: 00007fe1ea9abf80 RCX: 00007fe1ea88c0c9 [ 2793.722418][ T2622] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000008 [ 2793.730390][ T2622] RBP: 00007fe1ea8e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2793.738367][ T2622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2793.746341][ T2622] R13: 00007ffdb3b34e0f R14: 00007fe1eb569300 R15: 0000000000022000 [ 2793.754335][ T2622] [ 2793.780842][ T5113] Bluetooth: hci0: command 0x0409 tx timeout [ 2793.780892][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2793.781556][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2793.824788][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2793.843974][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2793.860827][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2793.877181][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2793.886603][ T2622] memory: usage 528kB, limit 0kB, failcnt 2413 [ 2793.896079][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2793.906404][ T2622] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2793.914849][T30143] bridge0: port 2(bridge_slave_1) entered blocking state [ 2793.921954][T30143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2793.930051][ T2622] Memory cgroup stats for /syz4: [ 2793.931688][ T2622] anon 114688 [ 2793.931688][ T2622] file 122880 [ 2793.931688][ T2622] kernel 290816 [ 2793.931688][ T2622] kernel_stack 65536 [ 2793.931688][ T2622] pagetables 77824 [ 2793.931688][ T2622] sec_pagetables 0 [ 2793.931688][ T2622] percpu 64 [ 2793.931688][ T2622] sock 0 [ 2793.931688][ T2622] vmalloc 0 [ 2793.931688][ T2622] shmem 122880 [ 2793.931688][ T2622] zswap 0 [ 2793.931688][ T2622] zswapped 0 [ 2793.931688][ T2622] file_mapped 110592 [ 2793.931688][ T2622] file_dirty 0 [ 2793.931688][ T2622] file_writeback 0 [ 2793.931688][ T2622] swapcached 0 [ 2793.931688][ T2622] anon_thp 0 [ 2793.931688][ T2622] file_thp 0 [ 2793.931688][ T2622] shmem_thp 0 [ 2793.931688][ T2622] inactive_anon 126976 [ 2793.931688][ T2622] active_anon 110592 [ 2793.931688][ T2622] inactive_file 0 [ 2793.931688][ T2622] active_file 0 [ 2793.931688][ T2622] unevictable 0 [ 2793.931688][ T2622] slab_reclaimable 19984 [ 2793.931688][ T2622] slab_unreclaimable 101760 [ 2793.931688][ T2622] slab 121744 [ 2794.031799][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2794.040914][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2794.050700][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2794.114774][ T2622] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2621,uid=0 [ 2794.115999][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2794.141288][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2794.150763][ T2622] Memory cgroup out of memory: Killed process 2622 (syz-executor.4) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2794.180018][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2794.199256][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 10:16:04 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x7, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x100, 0x0, 0x100, 0x10000000, 0x9, 0x0, 0x1f}, r0, 0xb, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_int(r2, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='cgroup\x00') r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, r1, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00'}, 0x10) write$cgroup_int(r3, &(0x7f0000000600), 0x12) [ 2794.208366][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2794.225211][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2794.301950][ T2433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2794.330527][ T2602] chnl_net:caif_netlink_parms(): no params data found [ 2794.365640][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2794.374070][ T2347] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2794.384494][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2794.399353][ T2347] CPU: 0 PID: 2347 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2794.409722][ T2347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2794.419971][ T2347] Call Trace: [ 2794.423261][ T2347] [ 2794.426211][ T2347] dump_stack_lvl+0xd1/0x138 [ 2794.430838][ T2347] dump_header+0x10b/0x85f [ 2794.435294][ T2347] oom_kill_process.cold+0x10/0x15 [ 2794.440446][ T2347] out_of_memory+0x35c/0x14a0 [ 2794.445178][ T2347] ? find_held_lock+0x2d/0x110 [ 2794.449980][ T2347] ? oom_killer_disable+0x280/0x280 [ 2794.455224][ T2347] ? find_held_lock+0x2d/0x110 [ 2794.460029][ T2347] mem_cgroup_out_of_memory+0x206/0x270 [ 2794.465616][ T2347] ? mem_cgroup_margin+0x130/0x130 [ 2794.470759][ T2347] ? lock_downgrade+0x6e0/0x6e0 [ 2794.475737][ T2347] try_charge_memcg+0xefb/0x12f0 [ 2794.480713][ T2347] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2794.486809][ T2347] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2794.492566][ T2347] ? lock_downgrade+0x6e0/0x6e0 [ 2794.497443][ T2347] ? lock_downgrade+0x6e0/0x6e0 [ 2794.502329][ T2347] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2794.507907][ T2347] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2794.514091][ T2347] copy_process+0x4e3/0x7520 [ 2794.518704][ T2347] ? _raw_spin_unlock+0x28/0x40 [ 2794.523585][ T2347] ? wp_page_reuse+0x197/0x570 [ 2794.528382][ T2347] ? do_wp_page+0x844/0x3370 [ 2794.533010][ T2347] ? __cleanup_sighand+0xb0/0xb0 [ 2794.537979][ T2347] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2794.543397][ T2347] ? rwlock_bug.part.0+0x90/0x90 [ 2794.548359][ T2347] ? lock_chain_count+0x20/0x20 [ 2794.553221][ T2347] kernel_clone+0xeb/0x990 [ 2794.557648][ T2347] ? create_io_thread+0xf0/0xf0 [ 2794.562513][ T2347] ? find_held_lock+0x2d/0x110 [ 2794.567309][ T2347] __do_sys_clone+0xba/0x100 [ 2794.571906][ T2347] ? kernel_clone+0x990/0x990 [ 2794.576953][ T2347] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2794.582859][ T2347] do_syscall_64+0x39/0xb0 [ 2794.587292][ T2347] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2794.593196][ T2347] RIP: 0033:0x7fe1ea889dfb [ 2794.597622][ T2347] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2794.617228][ T2347] RSP: 002b:00007ffdb3b35050 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2794.625644][ T2347] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe1ea889dfb [ 2794.633616][ T2347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2794.641586][ T2347] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555bc3400 [ 2794.649557][ T2347] R10: 0000555555bc36d0 R11: 0000000000000246 R12: 0000000000000001 [ 2794.657528][ T2347] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffdb3b35130 [ 2794.665605][ T2347] [ 2794.677445][ T2347] memory: usage 284kB, limit 0kB, failcnt 2462 [ 2794.687508][ T5113] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2794.692340][ T2347] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2794.704374][ T5113] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2794.713416][ T2347] Memory cgroup stats for /syz4: [ 2794.713603][ T2347] anon 45056 [ 2794.713603][ T2347] file 122880 [ 2794.713603][ T2347] kernel 122880 [ 2794.713603][ T2347] kernel_stack 0 [ 2794.713603][ T2347] pagetables 8192 [ 2794.713603][ T2347] sec_pagetables 0 [ 2794.713603][ T2347] percpu 64 [ 2794.713603][ T2347] sock 0 [ 2794.713603][ T2347] vmalloc 0 [ 2794.713603][ T2347] shmem 122880 [ 2794.713603][ T2347] zswap 0 [ 2794.713603][ T2347] zswapped 0 [ 2794.713603][ T2347] file_mapped 110592 [ 2794.713603][ T2347] file_dirty 0 [ 2794.713603][ T2347] file_writeback 0 [ 2794.713603][ T2347] swapcached 0 [ 2794.713603][ T2347] anon_thp 0 [ 2794.713603][ T2347] file_thp 0 [ 2794.713603][ T2347] shmem_thp 0 [ 2794.713603][ T2347] inactive_anon 57344 [ 2794.713603][ T2347] active_anon 110592 [ 2794.713603][ T2347] inactive_file 0 [ 2794.713603][ T2347] active_file 0 [ 2794.713603][ T2347] unevictable 0 [ 2794.713603][ T2347] slab_reclaimable 10160 [ 2794.713603][ T2347] slab_unreclaimable 78288 [ 2794.713603][ T2347] slab 88448 [ 2794.810511][ T5113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2794.824107][ T5113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2794.825608][ T2406] device veth0_macvtap entered promiscuous mode [ 2794.839160][ T5113] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2794.846752][ T5113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2794.900420][ T2347] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2347,uid=0 [ 2794.900791][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2794.918347][ T2347] Memory cgroup out of memory: Killed process 2347 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2795.019452][ T2406] device veth1_macvtap entered promiscuous mode [ 2795.257397][ T2406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2795.282416][ T2406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2795.292274][ T2406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2795.311496][ T2406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2795.339066][ T2406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2795.362831][ T2406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2795.383821][ T2406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2795.402543][ T2406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2795.428340][ T2406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2795.438999][ T2406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2795.450364][ T2406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2795.461058][ T2406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2795.471589][ T2406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2795.482280][ T2406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2795.492239][ T2406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2795.502986][ T2406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2795.514858][ T2406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2795.553713][ T48] device hsr_slave_0 left promiscuous mode [ 2795.582873][ T48] device hsr_slave_1 left promiscuous mode [ 2795.593829][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2795.601385][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2795.635084][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2795.652420][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2795.669982][ T48] device bridge_slave_1 left promiscuous mode 10:16:05 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x7, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x100, 0x0, 0x100, 0x10000000, 0x9, 0x0, 0x1f}, r0, 0xb, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_int(r3, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='cgroup\x00') r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, r2, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 2795.687646][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2795.740310][ T48] device bridge_slave_0 left promiscuous mode [ 2795.752811][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2795.788591][ T48] device hsr_slave_0 left promiscuous mode [ 2795.821777][ T48] device hsr_slave_1 left promiscuous mode [ 2795.842675][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2795.854511][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2795.863654][ T5113] Bluetooth: hci0: command 0x041b tx timeout [ 2795.884722][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 10:16:05 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x7, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x100, 0x0, 0x100, 0x10000000, 0x9, 0x0, 0x1f}, r0, 0xb, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_int(r3, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='cgroup\x00') r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, r2, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000600), 0x12) [ 2795.892180][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2795.903768][ T48] device bridge_slave_1 left promiscuous mode [ 2795.910038][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2795.934074][ T48] device bridge_slave_0 left promiscuous mode [ 2795.940754][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2795.993563][ T48] device hsr_slave_0 left promiscuous mode [ 2796.028934][ T48] device hsr_slave_1 left promiscuous mode [ 2796.045481][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2796.062417][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2796.080015][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2796.100245][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2796.120709][ T48] device bridge_slave_1 left promiscuous mode [ 2796.127075][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2796.156896][ T48] device bridge_slave_0 left promiscuous mode [ 2796.166482][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2796.191910][ T48] device hsr_slave_0 left promiscuous mode [ 2796.209712][ T48] device hsr_slave_1 left promiscuous mode [ 2796.219967][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2796.239652][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2796.262003][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2796.281984][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2796.294236][ T48] device bridge_slave_1 left promiscuous mode [ 2796.300449][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2796.330835][ T48] device bridge_slave_0 left promiscuous mode [ 2796.349002][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2796.395698][ T48] device hsr_slave_0 left promiscuous mode [ 2796.413006][ T48] device hsr_slave_1 left promiscuous mode [ 2796.419521][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2796.437615][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2796.453567][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2796.461104][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2796.472268][ T48] device bridge_slave_1 left promiscuous mode [ 2796.479188][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2796.489225][ T48] device bridge_slave_0 left promiscuous mode [ 2796.495878][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2796.521806][ T48] device veth1_macvtap left promiscuous mode [ 2796.528085][ T48] device veth0_macvtap left promiscuous mode [ 2796.534670][ T48] device veth1_vlan left promiscuous mode [ 2796.540455][ T48] device veth0_vlan left promiscuous mode [ 2796.548770][ T48] device veth1_macvtap left promiscuous mode [ 2796.555357][ T48] device veth0_macvtap left promiscuous mode [ 2796.561433][ T48] device veth1_vlan left promiscuous mode [ 2796.567854][ T48] device veth0_vlan left promiscuous mode [ 2796.576682][ T48] device veth1_macvtap left promiscuous mode [ 2796.583480][ T48] device veth0_macvtap left promiscuous mode [ 2796.589686][ T48] device veth1_vlan left promiscuous mode [ 2796.595848][ T48] device veth0_vlan left promiscuous mode [ 2796.603864][ T48] device veth1_macvtap left promiscuous mode [ 2796.609916][ T48] device veth0_macvtap left promiscuous mode [ 2796.616737][ T48] device veth1_vlan left promiscuous mode [ 2796.622699][ T48] device veth0_vlan left promiscuous mode [ 2796.630422][ T48] device veth1_macvtap left promiscuous mode [ 2796.637345][ T48] device veth0_macvtap left promiscuous mode [ 2796.643722][ T48] device veth1_vlan left promiscuous mode [ 2796.649572][ T48] device veth0_vlan left promiscuous mode [ 2796.912905][ T5113] Bluetooth: hci3: command 0x0409 tx timeout [ 2797.310523][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2797.330724][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2797.346104][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2797.361762][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2797.450951][ T48] bond0 (unregistering): Released all slaves [ 2797.719778][ T5108] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2797.730480][ T5108] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2797.738543][ T5108] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2797.748282][ T5108] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2797.755851][ T5108] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2797.756867][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2797.793834][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2797.811340][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2797.829395][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2797.921190][ T48] bond0 (unregistering): Released all slaves [ 2797.942692][ T5113] Bluetooth: hci0: command 0x040f tx timeout [ 2798.091364][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2798.108437][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2798.129917][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2798.146606][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2798.223828][ T48] bond0 (unregistering): Released all slaves [ 2798.391934][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2798.414343][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2798.427810][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2798.445117][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2798.531467][ T48] bond0 (unregistering): Released all slaves [ 2798.698438][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2798.712414][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2798.732255][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2798.756347][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2798.853305][ T48] bond0 (unregistering): Released all slaves [ 2798.931363][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2798.948225][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2798.974434][ T2406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2798.984895][ T5113] Bluetooth: hci3: command 0x041b tx timeout [ 2798.996829][ T2406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2799.007065][ T2406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2799.018271][ T2406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2799.028448][ T2406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2799.039270][ T2406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2799.054100][ T2406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2799.092883][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2799.103544][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2799.120610][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2799.129748][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2799.185260][ T2406] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2799.194590][ T2406] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2799.203728][ T2406] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2799.212903][ T2406] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2799.249481][ T2602] bridge0: port 1(bridge_slave_0) entered blocking state [ 2799.257695][ T2602] bridge0: port 1(bridge_slave_0) entered disabled state [ 2799.266554][ T2602] device bridge_slave_0 entered promiscuous mode [ 2799.281375][ T2447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2799.334081][ T2433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2799.343269][ T2602] bridge0: port 2(bridge_slave_1) entered blocking state [ 2799.350387][ T2602] bridge0: port 2(bridge_slave_1) entered disabled state [ 2799.359608][ T2602] device bridge_slave_1 entered promiscuous mode [ 2799.440234][ T2602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2799.470322][ T2602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2799.481256][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2799.494664][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2799.516128][ T2447] 8021q: adding VLAN 0 to HW filter on device team0 [ 2799.566850][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2799.576254][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2799.638946][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2799.648055][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2799.657265][ T1584] bridge0: port 1(bridge_slave_0) entered blocking state [ 2799.664448][ T1584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2799.673057][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2799.681986][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2799.690673][ T1584] bridge0: port 2(bridge_slave_1) entered blocking state [ 2799.697847][ T1584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2799.706024][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2799.720726][ T2433] device veth0_vlan entered promiscuous mode [ 2799.774302][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2799.775881][ T2602] team0: Port device team_slave_0 added [ 2799.790484][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2799.792717][ T5108] Bluetooth: hci4: command 0x0409 tx timeout [ 2799.809242][ T2602] team0: Port device team_slave_1 added [ 2799.825529][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2799.840583][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2799.850035][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2799.859050][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2799.868597][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2799.880711][ T2433] device veth1_vlan entered promiscuous mode [ 2799.948821][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2799.960314][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2799.992045][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2800.021264][ T2662] chnl_net:caif_netlink_parms(): no params data found [ 2800.028622][ T5108] Bluetooth: hci0: command 0x0419 tx timeout [ 2800.090997][ T2602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2800.109031][ T2602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2800.135521][ T2602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2800.150639][ T2602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2800.167028][ T2602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2800.195080][ T2602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2800.206771][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2800.216675][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2800.226417][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2800.235304][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2800.250626][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2800.318045][ T2447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2800.318551][ T9586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2800.338058][ T2447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2800.347099][ T9586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2800.366582][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2800.383385][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2800.403269][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2800.421736][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2800.431476][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2800.513619][ T2433] device veth0_macvtap entered promiscuous mode [ 2800.528292][ T2636] chnl_net:caif_netlink_parms(): no params data found [ 2800.577572][ T2602] device hsr_slave_0 entered promiscuous mode [ 2800.603830][ T2602] device hsr_slave_1 entered promiscuous mode [ 2800.623410][ T2433] device veth1_macvtap entered promiscuous mode [ 2800.719967][ T2433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2800.770279][ T2433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2800.783579][ T2433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2800.794476][ T2433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2800.804816][ T2433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2800.815973][ T2433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2800.827348][ T2433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2800.838630][ T2433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2800.865522][ T2433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2800.920796][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2800.932886][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2801.021432][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2801.030421][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2801.048805][ T2433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2801.063201][ T5108] Bluetooth: hci3: command 0x040f tx timeout [ 2801.071206][ T2433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2801.094898][ T2433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2801.119251][ T2433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2801.135619][ T2678] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2801.140462][ T2433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2801.148160][ T2678] CPU: 1 PID: 2678 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2801.167045][ T2678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2801.175934][ T2433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2801.177106][ T2678] Call Trace: [ 2801.177118][ T2678] [ 2801.177129][ T2678] dump_stack_lvl+0xd1/0x138 [ 2801.197771][ T2678] dump_header+0x10b/0x85f [ 2801.199240][ T2433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2801.202217][ T2678] oom_kill_process.cold+0x10/0x15 [ 2801.217788][ T2678] out_of_memory+0x35c/0x14a0 [ 2801.222519][ T2678] ? oom_killer_disable+0x280/0x280 [ 2801.227760][ T2678] ? mark_held_locks+0x9f/0xe0 [ 2801.231538][ T2433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2801.232547][ T2678] mem_cgroup_out_of_memory+0x206/0x270 [ 2801.232588][ T2678] ? mem_cgroup_margin+0x130/0x130 [ 2801.232645][ T2678] memory_max_write+0x2f9/0x3c0 [ 2801.232675][ T2678] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2801.232710][ T2678] ? cgroup_file_write+0x1ce/0x770 [ 2801.232751][ T2678] cgroup_file_write+0x1e2/0x770 [ 2801.232783][ T2678] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2801.259508][ T2433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2801.264137][ T2678] ? kill_css+0x370/0x370 [ 2801.264186][ T2678] ? kill_css+0x370/0x370 [ 2801.264214][ T2678] kernfs_fop_write_iter+0x3f1/0x600 [ 2801.264258][ T2678] vfs_write+0x9ed/0xdd0 [ 2801.264297][ T2678] ? kernel_write+0x630/0x630 [ 2801.264330][ T2678] ? __fget_files+0x26a/0x440 [ 2801.264375][ T2678] ksys_write+0x12b/0x250 [ 2801.264403][ T2678] ? __ia32_sys_read+0xb0/0xb0 [ 2801.264436][ T2678] ? syscall_enter_from_user_mode+0x30/0xb0 [ 2801.264472][ T2678] do_syscall_64+0x39/0xb0 [ 2801.264510][ T2678] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2801.264538][ T2678] RIP: 0033:0x7ffa21e8c0c9 [ 2801.264562][ T2678] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2801.264585][ T2678] RSP: 002b:00007ffa22b44168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2801.264612][ T2678] RAX: ffffffffffffffda RBX: 00007ffa21fabf80 RCX: 00007ffa21e8c0c9 [ 2801.264631][ T2678] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 2801.264646][ T2678] RBP: 00007ffa21ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2801.264663][ T2678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2801.264679][ T2678] R13: 00007fffcf98d16f R14: 00007ffa22b44300 R15: 0000000000022000 [ 2801.264722][ T2678] [ 2801.280429][ T2678] memory: usage 528kB, limit 0kB, failcnt 2616 [ 2801.431784][ T2678] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2801.439542][ T2678] Memory cgroup stats for /syz2: [ 2801.442860][ T2678] anon 114688 [ 2801.442860][ T2678] file 131072 [ 2801.442860][ T2678] kernel 282624 [ 2801.442860][ T2678] kernel_stack 65536 [ 2801.442860][ T2678] pagetables 77824 [ 2801.442860][ T2678] sec_pagetables 0 [ 2801.442860][ T2678] percpu 64 [ 2801.442860][ T2678] sock 0 [ 2801.442860][ T2678] vmalloc 0 [ 2801.442860][ T2678] shmem 126976 [ 2801.442860][ T2678] zswap 0 [ 2801.442860][ T2678] zswapped 0 [ 2801.442860][ T2678] file_mapped 126976 [ 2801.442860][ T2678] file_dirty 4096 [ 2801.442860][ T2678] file_writeback 0 [ 2801.442860][ T2678] swapcached 0 [ 2801.442860][ T2678] anon_thp 0 [ 2801.442860][ T2678] file_thp 0 [ 2801.442860][ T2678] shmem_thp 0 [ 2801.442860][ T2678] inactive_anon 126976 [ 2801.442860][ T2678] active_anon 114688 [ 2801.442860][ T2678] inactive_file 4096 [ 2801.442860][ T2678] active_file 0 [ 2801.442860][ T2678] unevictable 0 [ 2801.442860][ T2678] slab_reclaimable 14152 [ 2801.442860][ T2678] slab_unreclaimable 99168 [ 2801.442860][ T2678] slab 113320 [ 2801.541307][ T2678] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=2406,uid=0 [ 2801.559444][ T2678] Memory cgroup out of memory: Killed process 2406 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2801.589051][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2801.599126][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2801.608637][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2801.616689][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2801.627725][ T2433] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2801.638030][ T2433] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2801.647222][ T2433] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2801.657774][ T2433] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2801.673103][ T2662] bridge0: port 1(bridge_slave_0) entered blocking state [ 2801.680228][ T2662] bridge0: port 1(bridge_slave_0) entered disabled state [ 2801.689518][ T2662] device bridge_slave_0 entered promiscuous mode [ 2801.747247][ T2447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2801.762820][ T2662] bridge0: port 2(bridge_slave_1) entered blocking state [ 2801.770030][ T2662] bridge0: port 2(bridge_slave_1) entered disabled state [ 2801.788193][ T2662] device bridge_slave_1 entered promiscuous mode [ 2801.862845][ T5108] Bluetooth: hci4: command 0x041b tx timeout [ 2801.871754][ T2636] bridge0: port 1(bridge_slave_0) entered blocking state [ 2801.888726][ T2636] bridge0: port 1(bridge_slave_0) entered disabled state [ 2801.898295][ T2636] device bridge_slave_0 entered promiscuous mode [ 2801.909002][ T2636] bridge0: port 2(bridge_slave_1) entered blocking state [ 2801.925621][ T2636] bridge0: port 2(bridge_slave_1) entered disabled state [ 2801.933772][ T2636] device bridge_slave_1 entered promiscuous mode 10:16:12 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2802.056417][ T2662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2802.119398][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2802.128520][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2802.152787][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2802.161313][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2802.175532][ T2636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2802.188017][ T2662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2802.235894][ T2447] device veth0_vlan entered promiscuous mode [ 2802.244452][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2802.252102][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2802.262864][ T2636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2802.304354][ T2662] team0: Port device team_slave_0 added [ 2802.332708][ T8036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2802.341612][ T8036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2802.392292][ T2602] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2802.415458][ T2447] device veth1_vlan entered promiscuous mode [ 2802.428618][ T2662] team0: Port device team_slave_1 added [ 2802.446289][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2802.475337][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2802.498186][ T2636] team0: Port device team_slave_0 added [ 2802.584581][ T2602] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2802.624126][ T2636] team0: Port device team_slave_1 added [ 2802.631784][ T8036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2802.660855][ T8036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2802.676693][ T2662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2802.689288][ T2662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2802.735268][ T2662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2802.754549][ T2662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2802.761613][ T2662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2802.800945][ T2662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2802.829926][ T2602] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2802.863046][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2802.876220][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2802.944301][ T2636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2802.951296][ T2636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2803.012387][ T2636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2803.041140][ T2447] device veth0_macvtap entered promiscuous mode [ 2803.109738][ T2602] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2803.142758][ T5108] Bluetooth: hci3: command 0x0419 tx timeout [ 2803.181080][ T2685] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2803.191479][ T2685] CPU: 1 PID: 2685 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2803.201843][ T2685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2803.212003][ T2685] Call Trace: [ 2803.215289][ T2685] [ 2803.218230][ T2685] dump_stack_lvl+0xd1/0x138 [ 2803.222845][ T2685] dump_header+0x10b/0x85f [ 2803.227289][ T2685] oom_kill_process.cold+0x10/0x15 [ 2803.232427][ T2685] out_of_memory+0x35c/0x14a0 [ 2803.237137][ T2685] ? oom_killer_disable+0x280/0x280 [ 2803.242368][ T2685] mem_cgroup_out_of_memory+0x206/0x270 [ 2803.247935][ T2685] ? mem_cgroup_margin+0x130/0x130 [ 2803.253086][ T2685] memory_max_write+0x2f9/0x3c0 [ 2803.257967][ T2685] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2803.264059][ T2685] ? lock_release+0x810/0x810 [ 2803.268759][ T2685] cgroup_file_write+0x1e2/0x770 [ 2803.273713][ T2685] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2803.279789][ T2685] ? kill_css+0x370/0x370 [ 2803.284134][ T2685] ? __virt_addr_valid+0x61/0x2e0 [ 2803.289183][ T2685] ? kill_css+0x370/0x370 [ 2803.293525][ T2685] kernfs_fop_write_iter+0x3f1/0x600 [ 2803.298835][ T2685] vfs_write+0x9ed/0xdd0 [ 2803.303100][ T2685] ? kernel_write+0x630/0x630 [ 2803.307880][ T2685] ? __fget_files+0x26a/0x440 [ 2803.312582][ T2685] ksys_write+0x12b/0x250 [ 2803.316923][ T2685] ? __ia32_sys_read+0xb0/0xb0 [ 2803.321700][ T2685] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2803.327612][ T2685] do_syscall_64+0x39/0xb0 [ 2803.332046][ T2685] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2803.337952][ T2685] RIP: 0033:0x7fcd0948c0c9 [ 2803.342379][ T2685] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2803.361992][ T2685] RSP: 002b:00007fcd0a174168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2803.370417][ T2685] RAX: ffffffffffffffda RBX: 00007fcd095abf80 RCX: 00007fcd0948c0c9 [ 2803.378393][ T2685] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 2803.386369][ T2685] RBP: 00007fcd094e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2803.394342][ T2685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2803.402406][ T2685] R13: 00007ffd8a2ef45f R14: 00007fcd0a174300 R15: 0000000000022000 [ 2803.410405][ T2685] [ 2803.454517][ T2636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2803.461504][ T2636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2803.502569][ T2685] memory: usage 8600kB, limit 0kB, failcnt 2205 [ 2803.509012][ T2685] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2803.521685][ T2685] Memory cgroup stats for /syz3: [ 2803.521896][ T2685] anon 114688 [ 2803.521896][ T2685] file 8347648 [ 2803.521896][ T2685] kernel 315392 [ 2803.521896][ T2685] kernel_stack 65536 [ 2803.521896][ T2685] pagetables 77824 [ 2803.521896][ T2685] sec_pagetables 0 [ 2803.521896][ T2685] percpu 208 [ 2803.521896][ T2685] sock 0 [ 2803.521896][ T2685] vmalloc 4096 [ 2803.521896][ T2685] shmem 8347648 [ 2803.521896][ T2685] zswap 0 [ 2803.521896][ T2685] zswapped 0 [ 2803.521896][ T2685] file_mapped 151552 [ 2803.521896][ T2685] file_dirty 0 [ 2803.521896][ T2685] file_writeback 0 [ 2803.521896][ T2685] swapcached 0 [ 2803.521896][ T2685] anon_thp 0 [ 2803.521896][ T2685] file_thp 0 [ 2803.521896][ T2685] shmem_thp 0 [ 2803.521896][ T2685] inactive_anon 114688 [ 2803.521896][ T2685] active_anon 8347648 [ 2803.521896][ T2685] inactive_file 0 [ 2803.521896][ T2685] active_file 0 [ 2803.521896][ T2685] unevictable 0 [ 2803.521896][ T2685] slab_reclaimable 37080 [ 2803.521896][ T2685] slab_unreclaimable 105216 [ 2803.521896][ T2685] slab 142296 [ 2803.583280][ T2636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2803.752470][ T2685] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=2684,uid=0 [ 2803.783615][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2803.792289][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2803.943729][ T5108] Bluetooth: hci4: command 0x040f tx timeout [ 2803.950019][ T2685] Memory cgroup out of memory: Killed process 2684 (syz-executor.3) total-vm:56588kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2804.024880][ T2447] device veth1_macvtap entered promiscuous mode [ 2804.034119][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2804.046495][ T2662] device hsr_slave_0 entered promiscuous mode [ 2804.063358][ T2662] device hsr_slave_1 entered promiscuous mode 10:16:14 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:16:14 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2804.092850][ T2662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2804.100469][ T2662] Cannot create hsr debugfs directory [ 2804.159195][ T2636] device hsr_slave_0 entered promiscuous mode [ 2804.200138][ T2433] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 2804.222859][ T2636] device hsr_slave_1 entered promiscuous mode [ 2804.224705][ T2433] CPU: 0 PID: 2433 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2804.239309][ T2433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2804.249396][ T2433] Call Trace: [ 2804.252871][ T2433] [ 2804.255822][ T2433] dump_stack_lvl+0xd1/0x138 [ 2804.260449][ T2433] dump_header+0x10b/0x85f [ 2804.264911][ T2433] oom_kill_process.cold+0x10/0x15 [ 2804.270067][ T2433] out_of_memory+0x35c/0x14a0 [ 2804.274791][ T2433] ? find_held_lock+0x2d/0x110 [ 2804.279607][ T2433] ? oom_killer_disable+0x280/0x280 [ 2804.287023][ T2433] ? find_held_lock+0x2d/0x110 [ 2804.291832][ T2433] mem_cgroup_out_of_memory+0x206/0x270 [ 2804.297418][ T2433] ? mem_cgroup_margin+0x130/0x130 [ 2804.302557][ T2433] ? lock_downgrade+0x6e0/0x6e0 [ 2804.307455][ T2433] try_charge_memcg+0xefb/0x12f0 [ 2804.312441][ T2433] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2804.318458][ T2433] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2804.324227][ T2433] ? lock_downgrade+0x6e0/0x6e0 [ 2804.329111][ T2433] ? lock_downgrade+0x6e0/0x6e0 [ 2804.334009][ T2433] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2804.339593][ T2433] __alloc_pages+0x1f3/0x5b0 [ 2804.344228][ T2433] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2804.351024][ T2433] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2804.357059][ T2433] alloc_pages+0x1aa/0x270 [ 2804.361513][ T2433] pte_alloc_one+0x1a/0x230 [ 2804.366067][ T2433] __pte_alloc+0x6d/0x260 [ 2804.370440][ T2433] ? pmd_install+0x160/0x160 [ 2804.375074][ T2433] copy_page_range+0x17a8/0x3b40 [ 2804.380090][ T2433] ? mas_store+0x206/0x2e0 [ 2804.384548][ T2433] ? handle_mm_fault+0x850/0x850 [ 2804.389539][ T2433] ? up_write+0x1b0/0x520 [ 2804.393909][ T2433] dup_mmap+0xc10/0x10b0 [ 2804.398191][ T2433] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2804.403505][ T2433] ? lock_downgrade+0x6e0/0x6e0 [ 2804.408393][ T2433] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2804.414246][ T2433] ? mm_init+0x8e0/0xc10 [ 2804.418518][ T2433] copy_process+0x440f/0x7520 [ 2804.423221][ T2433] ? _raw_spin_unlock+0x28/0x40 [ 2804.428103][ T2433] ? wp_page_reuse+0x197/0x570 [ 2804.432921][ T2433] ? __cleanup_sighand+0xb0/0xb0 [ 2804.437886][ T2433] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2804.443302][ T2433] ? rwlock_bug.part.0+0x90/0x90 [ 2804.448270][ T2433] ? lock_chain_count+0x20/0x20 [ 2804.453152][ T2433] kernel_clone+0xeb/0x990 [ 2804.457598][ T2433] ? create_io_thread+0xf0/0xf0 [ 2804.462656][ T2433] ? find_held_lock+0x2d/0x110 [ 2804.467468][ T2433] __do_sys_clone+0xba/0x100 [ 2804.472091][ T2433] ? kernel_clone+0x990/0x990 [ 2804.476821][ T2433] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2804.482749][ T2433] do_syscall_64+0x39/0xb0 [ 2804.487204][ T2433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2804.493119][ T2433] RIP: 0033:0x7fcd09489dfb [ 2804.497564][ T2433] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2804.517202][ T2433] RSP: 002b:00007ffd8a2ef6a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2804.525651][ T2433] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcd09489dfb [ 2804.533740][ T2433] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2804.541734][ T2433] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555617400 [ 2804.549732][ T2433] R10: 00005555556176d0 R11: 0000000000000246 R12: 0000000000000001 [ 2804.557730][ T2433] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd8a2ef780 [ 2804.565756][ T2433] [ 2804.582446][ T2636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2804.590598][ T2636] Cannot create hsr debugfs directory [ 2804.591013][ T2433] memory: usage 8416kB, limit 0kB, failcnt 2241 [ 2804.603285][ T2433] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2804.610170][ T2433] Memory cgroup stats for /syz3: [ 2804.610366][ T2433] anon 45056 [ 2804.610366][ T2433] file 8347648 [ 2804.610366][ T2433] kernel 225280 [ 2804.610366][ T2433] kernel_stack 32768 [ 2804.610366][ T2433] pagetables 40960 [ 2804.610366][ T2433] sec_pagetables 0 [ 2804.610366][ T2433] percpu 128 [ 2804.610366][ T2433] sock 0 [ 2804.610366][ T2433] vmalloc 0 [ 2804.610366][ T2433] shmem 8347648 [ 2804.610366][ T2433] zswap 0 [ 2804.610366][ T2433] zswapped 0 [ 2804.610366][ T2433] file_mapped 122880 [ 2804.610366][ T2433] file_dirty 0 [ 2804.610366][ T2433] file_writeback 0 [ 2804.610366][ T2433] swapcached 0 [ 2804.610366][ T2433] anon_thp 0 [ 2804.610366][ T2433] file_thp 0 [ 2804.610366][ T2433] shmem_thp 0 [ 2804.610366][ T2433] inactive_anon 45056 [ 2804.610366][ T2433] active_anon 8347648 [ 2804.610366][ T2433] inactive_file 0 [ 2804.610366][ T2433] active_file 0 [ 2804.610366][ T2433] unevictable 0 [ 2804.610366][ T2433] slab_reclaimable 29448 [ 2804.610366][ T2433] slab_unreclaimable 96072 [ 2804.610366][ T2433] slab 125520 [ 2804.670593][ T2447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2804.823044][ T2447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2804.842456][ T2447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2804.862497][ T2447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2804.882536][ T2447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2804.903382][ T2433] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=2433,uid=0 [ 2804.939584][ T2447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2804.971857][ T2433] Memory cgroup out of memory: Killed process 2433 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2804.989195][ T2447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2805.010135][ T2447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2805.050852][ T2447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2805.084724][ T2447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2805.139766][ T2447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2805.244746][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2805.273130][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2805.383992][ T2447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2805.402476][ T2447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2805.427080][ T2447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2805.448031][ T2447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2805.471270][ T2447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2805.492380][ T2447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2805.502243][ T2447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2805.528054][ T2447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2805.552064][ T2447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2805.572744][ T2447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2805.595938][ T2447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2805.625929][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2805.653910][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2805.777240][ T2447] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2805.794606][ T2447] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2805.812360][ T2447] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2805.821187][ T2447] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2805.954382][ T2602] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2806.004250][ T2602] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2806.024074][ T5108] Bluetooth: hci4: command 0x0419 tx timeout [ 2806.102374][ T2602] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2806.113667][ T2602] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2806.179013][ T2636] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2806.264853][ T8036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2806.292394][ T8036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2806.374504][ T2636] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2806.426315][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2806.476196][ T2636] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2806.572993][ T8036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2806.581102][ T8036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2806.620643][ T2636] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2806.673503][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2806.759031][ T5113] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2806.768353][ T5113] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2806.777898][ T5113] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2806.787843][ T5113] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2806.797014][ T5113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2806.888624][ T2717] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2806.906953][ T2717] CPU: 0 PID: 2717 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2806.917343][ T2717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2806.927437][ T2717] Call Trace: [ 2806.930742][ T2717] [ 2806.933699][ T2717] dump_stack_lvl+0xd1/0x138 [ 2806.938335][ T2717] dump_header+0x10b/0x85f [ 2806.942807][ T2717] oom_kill_process.cold+0x10/0x15 [ 2806.947970][ T2717] out_of_memory+0x35c/0x14a0 [ 2806.952689][ T2717] ? oom_killer_disable+0x280/0x280 [ 2806.957900][ T2717] ? mark_held_locks+0x9f/0xe0 [ 2806.962679][ T2717] mem_cgroup_out_of_memory+0x206/0x270 [ 2806.968261][ T2717] ? mem_cgroup_margin+0x130/0x130 [ 2806.973417][ T2717] memory_max_write+0x2f9/0x3c0 [ 2806.978291][ T2717] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2806.984371][ T2717] ? lock_release+0x810/0x810 [ 2806.989064][ T2717] cgroup_file_write+0x1e2/0x770 [ 2806.994021][ T2717] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2807.000103][ T2717] ? kill_css+0x370/0x370 [ 2807.004452][ T2717] ? __virt_addr_valid+0x61/0x2e0 [ 2807.009522][ T2717] ? kill_css+0x370/0x370 [ 2807.013879][ T2717] kernfs_fop_write_iter+0x3f1/0x600 [ 2807.019207][ T2717] vfs_write+0x9ed/0xdd0 [ 2807.023485][ T2717] ? kernel_write+0x630/0x630 [ 2807.028204][ T2717] ? __fget_files+0x26a/0x440 [ 2807.032917][ T2717] ksys_write+0x12b/0x250 [ 2807.037375][ T2717] ? __ia32_sys_read+0xb0/0xb0 [ 2807.042171][ T2717] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2807.048101][ T2717] do_syscall_64+0x39/0xb0 [ 2807.052552][ T2717] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2807.058473][ T2717] RIP: 0033:0x7fca2088c0c9 [ 2807.062898][ T2717] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2807.082517][ T2717] RSP: 002b:00007fca215fc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2807.090944][ T2717] RAX: ffffffffffffffda RBX: 00007fca209abf80 RCX: 00007fca2088c0c9 [ 2807.098922][ T2717] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 2807.106897][ T2717] RBP: 00007fca208e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2807.114885][ T2717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2807.122859][ T2717] R13: 00007ffd7742ba3f R14: 00007fca215fc300 R15: 0000000000022000 [ 2807.130949][ T2717] [ 2807.163598][ T2717] memory: usage 536kB, limit 0kB, failcnt 2095 [ 2807.182573][ T2717] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2807.192877][ T2717] Memory cgroup stats for /syz1: [ 2807.193108][ T2717] anon 110592 [ 2807.193108][ T2717] file 180224 [ 2807.193108][ T2717] kernel 258048 [ 2807.193108][ T2717] kernel_stack 65536 [ 2807.193108][ T2717] pagetables 77824 [ 2807.193108][ T2717] sec_pagetables 0 [ 2807.193108][ T2717] percpu 64 [ 2807.193108][ T2717] sock 0 [ 2807.193108][ T2717] vmalloc 0 [ 2807.193108][ T2717] shmem 180224 [ 2807.193108][ T2717] zswap 0 [ 2807.193108][ T2717] zswapped 0 [ 2807.193108][ T2717] file_mapped 180224 [ 2807.193108][ T2717] file_dirty 0 [ 2807.193108][ T2717] file_writeback 0 [ 2807.193108][ T2717] swapcached 0 [ 2807.193108][ T2717] anon_thp 0 [ 2807.193108][ T2717] file_thp 0 [ 2807.193108][ T2717] shmem_thp 0 [ 2807.193108][ T2717] inactive_anon 135168 [ 2807.193108][ T2717] active_anon 110592 [ 2807.193108][ T2717] inactive_file 0 [ 2807.193108][ T2717] active_file 0 [ 2807.193108][ T2717] unevictable 0 [ 2807.193108][ T2717] slab_reclaimable 17288 [ 2807.193108][ T2717] slab_unreclaimable 72456 [ 2807.193108][ T2717] slab 89744 [ 2807.293515][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2807.402596][ T2717] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=2716,uid=0 [ 2807.453293][ T2717] Memory cgroup out of memory: Killed process 2716 (syz-executor.1) total-vm:54540kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2807.670819][ T2602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2807.765197][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2807.854178][ T2602] 8021q: adding VLAN 0 to HW filter on device team0 [ 2807.861240][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2807.869927][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 10:16:18 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:16:18 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2807.946379][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2808.010517][ T2447] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 2808.060899][ T2636] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2808.092858][ T2447] CPU: 1 PID: 2447 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2808.103258][ T2447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2808.113333][ T2447] Call Trace: [ 2808.116625][ T2447] [ 2808.119579][ T2447] dump_stack_lvl+0xd1/0x138 [ 2808.124217][ T2447] dump_header+0x10b/0x85f [ 2808.128686][ T2447] oom_kill_process.cold+0x10/0x15 [ 2808.134027][ T2447] out_of_memory+0x35c/0x14a0 [ 2808.138757][ T2447] ? find_held_lock+0x2d/0x110 [ 2808.143564][ T2447] ? oom_killer_disable+0x280/0x280 [ 2808.148812][ T2447] ? find_held_lock+0x2d/0x110 [ 2808.153626][ T2447] mem_cgroup_out_of_memory+0x206/0x270 [ 2808.159213][ T2447] ? mem_cgroup_margin+0x130/0x130 [ 2808.164356][ T2447] ? lock_downgrade+0x6e0/0x6e0 [ 2808.169255][ T2447] try_charge_memcg+0xefb/0x12f0 [ 2808.174227][ T2447] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2808.180248][ T2447] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2808.186016][ T2447] ? lock_downgrade+0x6e0/0x6e0 [ 2808.190901][ T2447] ? lock_downgrade+0x6e0/0x6e0 [ 2808.195802][ T2447] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2808.201391][ T2447] __alloc_pages+0x1f3/0x5b0 [ 2808.206014][ T2447] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2808.212809][ T2447] ? find_held_lock+0x2d/0x110 [ 2808.217618][ T2447] ? lock_downgrade+0x6e0/0x6e0 [ 2808.222491][ T2447] ? do_raw_spin_lock+0x124/0x2b0 [ 2808.227571][ T2447] alloc_pages+0x1aa/0x270 [ 2808.232023][ T2447] __pmd_alloc+0x3f/0x5d0 [ 2808.236382][ T2447] ? __pud_alloc+0xe4/0x180 [ 2808.240919][ T2447] copy_page_range+0x2829/0x3b40 [ 2808.245942][ T2447] ? mas_store+0x206/0x2e0 [ 2808.250388][ T2447] ? handle_mm_fault+0x850/0x850 [ 2808.255377][ T2447] ? anon_vma_fork+0xba/0x630 [ 2808.260095][ T2447] dup_mmap+0xc10/0x10b0 [ 2808.264375][ T2447] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2808.269691][ T2447] ? lock_downgrade+0x6e0/0x6e0 [ 2808.274579][ T2447] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2808.280444][ T2447] ? mm_init+0x8e0/0xc10 [ 2808.284719][ T2447] copy_process+0x440f/0x7520 [ 2808.289428][ T2447] ? _raw_spin_unlock+0x28/0x40 [ 2808.294305][ T2447] ? wp_page_reuse+0x197/0x570 [ 2808.299209][ T2447] ? __cleanup_sighand+0xb0/0xb0 [ 2808.304179][ T2447] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2808.309599][ T2447] ? rwlock_bug.part.0+0x90/0x90 [ 2808.314569][ T2447] ? lock_chain_count+0x20/0x20 [ 2808.319471][ T2447] kernel_clone+0xeb/0x990 [ 2808.323930][ T2447] ? create_io_thread+0xf0/0xf0 [ 2808.328833][ T2447] ? find_held_lock+0x2d/0x110 [ 2808.333651][ T2447] __do_sys_clone+0xba/0x100 [ 2808.338275][ T2447] ? kernel_clone+0x990/0x990 [ 2808.343004][ T2447] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2808.348935][ T2447] do_syscall_64+0x39/0xb0 [ 2808.353387][ T2447] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2808.359309][ T2447] RIP: 0033:0x7fca20889dfb [ 2808.363751][ T2447] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2808.383411][ T2447] RSP: 002b:00007ffd7742bc80 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2808.391861][ T2447] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fca20889dfb [ 2808.399862][ T2447] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2808.407864][ T2447] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555a42400 [ 2808.415864][ T2447] R10: 0000555555a426d0 R11: 0000000000000246 R12: 0000000000000001 [ 2808.423863][ T2447] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd7742bd60 [ 2808.431887][ T2447] [ 2808.456055][ T2447] memory: usage 380kB, limit 0kB, failcnt 2124 [ 2808.462272][ T2447] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2808.470185][ T2447] Memory cgroup stats for /syz1: [ 2808.470368][ T2447] anon 40960 [ 2808.470368][ T2447] file 180224 [ 2808.470368][ T2447] kernel 139264 [ 2808.470368][ T2447] kernel_stack 32768 [ 2808.470368][ T2447] pagetables 8192 [ 2808.470368][ T2447] sec_pagetables 0 [ 2808.470368][ T2447] percpu 128 [ 2808.470368][ T2447] sock 0 [ 2808.470368][ T2447] vmalloc 0 [ 2808.470368][ T2447] shmem 180224 [ 2808.470368][ T2447] zswap 0 [ 2808.470368][ T2447] zswapped 0 [ 2808.470368][ T2447] file_mapped 180224 [ 2808.470368][ T2447] file_dirty 0 [ 2808.470368][ T2447] file_writeback 0 [ 2808.470368][ T2447] swapcached 0 [ 2808.470368][ T2447] anon_thp 0 [ 2808.470368][ T2447] file_thp 0 [ 2808.470368][ T2447] shmem_thp 0 [ 2808.470368][ T2447] inactive_anon 110592 [ 2808.470368][ T2447] active_anon 110592 [ 2808.470368][ T2447] inactive_file 0 [ 2808.470368][ T2447] active_file 0 [ 2808.470368][ T2447] unevictable 0 [ 2808.470368][ T2447] slab_reclaimable 11192 [ 2808.470368][ T2447] slab_unreclaimable 65648 [ 2808.470368][ T2447] slab 76840 [ 2808.576587][ T2447] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=2447,uid=0 [ 2808.610940][ T2447] Memory cgroup out of memory: Killed process 2447 (syz-executor.1) total-vm:50568kB, anon-rss:356kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2808.665533][ T2662] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2808.773615][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2808.817314][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2808.822611][ T5108] Bluetooth: hci1: command 0x0409 tx timeout [ 2808.836631][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2808.873048][T22493] bridge0: port 1(bridge_slave_0) entered blocking state [ 2808.880258][T22493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2808.939110][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2808.980176][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2809.009267][T22493] bridge0: port 2(bridge_slave_1) entered blocking state [ 2809.016475][T22493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2809.040146][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2809.051176][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2809.068134][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2809.080096][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2809.088946][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2809.097412][ T2636] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2809.125208][ T2636] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2809.223164][ T2662] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2809.266063][ T2636] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2809.281167][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2809.297449][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2809.317952][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2809.327147][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2809.336754][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2809.352708][ T2602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2809.405636][ T2662] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2809.606999][ T2662] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2809.793234][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2809.855791][ T2714] chnl_net:caif_netlink_parms(): no params data found [ 2810.007615][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2810.065182][ T2636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2810.161624][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2810.243136][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2810.263085][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2810.291210][ T2636] 8021q: adding VLAN 0 to HW filter on device team0 [ 2810.363200][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2810.433134][ T2602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2810.493073][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2810.500824][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2810.624518][ T2714] bridge0: port 1(bridge_slave_0) entered blocking state [ 2810.631670][ T2714] bridge0: port 1(bridge_slave_0) entered disabled state [ 2810.672561][ T2714] device bridge_slave_0 entered promiscuous mode [ 2810.681369][ T2714] bridge0: port 2(bridge_slave_1) entered blocking state [ 2810.722955][ T2714] bridge0: port 2(bridge_slave_1) entered disabled state [ 2810.751916][ T2714] device bridge_slave_1 entered promiscuous mode [ 2810.773695][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2810.803094][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2810.803118][ T5113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2810.820924][ T5113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2810.828527][ T9945] bridge0: port 1(bridge_slave_0) entered blocking state [ 2810.828882][ T5113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2810.835653][ T9945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2810.851611][ T5113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2810.860054][ T5113] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2810.867511][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2810.876457][ T5113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2810.902545][ T5108] Bluetooth: hci1: command 0x041b tx timeout [ 2810.913540][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2810.933175][ T9945] bridge0: port 2(bridge_slave_1) entered blocking state [ 2810.940317][ T9945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2810.985110][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2811.003536][ T2662] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2811.094680][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2811.113305][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2811.133325][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2811.153124][ T2662] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2811.227738][ T2714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2811.252054][ T2714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2811.272556][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2811.280698][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2811.303904][ T2662] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2811.335932][ T2662] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2811.422724][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2811.431472][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2811.463352][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2811.482947][T28162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2811.504830][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2811.608371][ T2714] team0: Port device team_slave_0 added [ 2811.711811][ T2714] team0: Port device team_slave_1 added [ 2811.823040][ T2714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2811.830041][ T2714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2811.930652][ T2714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2811.979558][ T2714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2811.992350][ T2714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2812.021880][ T2714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2812.044132][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2812.063157][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2812.362845][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2812.371335][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2812.426259][ T2602] device veth0_vlan entered promiscuous mode [ 2812.465585][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2812.476939][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2812.502094][ T2636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2812.513597][ T2714] device hsr_slave_0 entered promiscuous mode [ 2812.520619][ T2714] device hsr_slave_1 entered promiscuous mode [ 2812.529923][ T2714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2812.538595][ T2714] Cannot create hsr debugfs directory [ 2812.558568][ T2602] device veth1_vlan entered promiscuous mode [ 2812.569022][ T2662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2812.581566][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2812.590196][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2812.598499][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2812.694305][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2812.705521][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2812.713528][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2812.744946][ T2662] 8021q: adding VLAN 0 to HW filter on device team0 [ 2812.821556][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2812.838277][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2812.902816][ T5108] Bluetooth: hci2: command 0x0409 tx timeout [ 2812.954476][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2812.972734][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2812.981055][T22493] bridge0: port 1(bridge_slave_0) entered blocking state [ 2812.982671][ T5108] Bluetooth: hci1: command 0x040f tx timeout [ 2812.988172][T22493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2813.009277][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2813.018312][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2813.033780][T22493] bridge0: port 2(bridge_slave_1) entered blocking state [ 2813.040863][T22493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2813.049857][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2813.059068][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2813.068582][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2813.077630][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2813.086647][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2813.095336][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2813.106912][ T2602] device veth0_macvtap entered promiscuous mode [ 2813.124665][ T2636] device veth0_vlan entered promiscuous mode [ 2813.193047][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2813.201224][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2813.217507][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2813.226482][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2813.234832][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2813.257099][ T2602] device veth1_macvtap entered promiscuous mode [ 2813.278308][ T2636] device veth1_vlan entered promiscuous mode [ 2813.325390][ T2732] chnl_net:caif_netlink_parms(): no params data found [ 2813.335557][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2813.343803][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2813.352875][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2813.360615][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2813.371265][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2813.380392][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2813.440052][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2813.450383][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2813.495876][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2813.606658][ T2602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2813.635464][ T2602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2813.649123][ T2602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2813.672343][ T2602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2813.682194][ T2602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2813.694164][ T2602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2813.704693][ T2602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2813.715980][ T2602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2813.728199][ T2602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2813.741402][ T2602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2813.751649][ T2602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2813.764464][ T2602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2813.793713][ T2602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2813.916624][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2813.933174][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2813.942092][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2813.970643][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2813.999828][ T2602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2814.028911][ T2602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2814.039549][ T2602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2814.050482][ T2602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2814.060880][ T2602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2814.087423][ T2602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2814.125507][ T2602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2814.152471][ T2602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2814.172352][ T2602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2814.202507][ T2602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2814.222369][ T2602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2814.242379][ T2602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2814.264704][ T2602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2814.310386][ T2636] device veth0_macvtap entered promiscuous mode [ 2814.350785][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2814.370530][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2814.409740][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2814.445881][ T2602] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2814.462454][ T2602] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2814.492460][ T2602] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2814.501217][ T2602] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2814.634832][ T2636] device veth1_macvtap entered promiscuous mode [ 2814.754131][ T2732] bridge0: port 1(bridge_slave_0) entered blocking state [ 2814.761258][ T2732] bridge0: port 1(bridge_slave_0) entered disabled state [ 2814.769578][ T2732] device bridge_slave_0 entered promiscuous mode [ 2814.797700][ T2662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2814.962643][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2814.970185][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2814.982454][ T5108] Bluetooth: hci2: command 0x041b tx timeout [ 2815.002874][ T2732] bridge0: port 2(bridge_slave_1) entered blocking state [ 2815.009990][ T2732] bridge0: port 2(bridge_slave_1) entered disabled state [ 2815.019306][ T2732] device bridge_slave_1 entered promiscuous mode [ 2815.063466][ T5108] Bluetooth: hci1: command 0x0419 tx timeout [ 2815.247185][ T2636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2815.272389][ T2636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2815.282238][ T2636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2815.296369][ T2636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2815.306692][ T2636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2815.317455][ T2636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2815.327612][ T2636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2815.338367][ T2636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2815.348572][ T2636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2815.372389][ T2636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2815.382222][ T2636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2815.411404][ T2636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2815.433006][ T2636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2815.452378][ T2636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2815.467381][ T2636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2815.530757][ T2732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2815.553609][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2815.563503][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2815.575246][ T2636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2815.602339][ T2636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2815.612189][ T2636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2815.642349][ T2636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2815.652203][ T2636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2815.682418][ T2636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2815.692265][ T2636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2815.742355][ T2636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2815.752218][ T2636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2815.782336][ T2636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2815.792180][ T2636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2815.811118][ T2636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2815.833394][ T2636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2815.852384][ T2636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2815.882261][ T2636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2815.903600][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2815.914794][ T2636] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2815.924810][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2815.929692][ T2636] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2815.943391][ T2636] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2815.952875][ T2636] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2815.976652][ T2732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2815.995457][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2816.004428][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2816.014576][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2816.099818][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2816.111709][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2816.167308][ T5190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2816.179330][ T5190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2816.209815][ T2732] team0: Port device team_slave_0 added [ 2816.249171][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2816.283560][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2816.291988][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2816.353532][ T2662] device veth0_vlan entered promiscuous mode [ 2816.375820][ T2732] team0: Port device team_slave_1 added [ 2816.496532][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2816.543179][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2816.686659][ T2732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2816.700726][ T2732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2816.765007][ T2732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2816.788768][ T2662] device veth1_vlan entered promiscuous mode [ 2816.803760][ T2714] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2816.821938][ T2805] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2816.828304][ T2422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2816.841831][ T2422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2816.851371][ T2805] CPU: 0 PID: 2805 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2816.861746][ T2805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2816.871828][ T2805] Call Trace: [ 2816.875129][ T2805] [ 2816.878084][ T2805] dump_stack_lvl+0xd1/0x138 [ 2816.882724][ T2805] dump_header+0x10b/0x85f [ 2816.887231][ T2805] oom_kill_process.cold+0x10/0x15 [ 2816.892590][ T2805] out_of_memory+0x35c/0x14a0 [ 2816.897419][ T2805] ? oom_killer_disable+0x280/0x280 [ 2816.902692][ T2805] mem_cgroup_out_of_memory+0x206/0x270 [ 2816.908288][ T2805] ? mem_cgroup_margin+0x130/0x130 [ 2816.913468][ T2805] memory_max_write+0x2f9/0x3c0 [ 2816.918357][ T2805] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2816.924551][ T2805] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2816.930750][ T2805] cgroup_file_write+0x1e2/0x770 [ 2816.935730][ T2805] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2816.941830][ T2805] ? kill_css+0x370/0x370 [ 2816.946213][ T2805] ? kill_css+0x370/0x370 [ 2816.950578][ T2805] kernfs_fop_write_iter+0x3f1/0x600 [ 2816.955932][ T2805] vfs_write+0x9ed/0xdd0 [ 2816.960216][ T2805] ? kernel_write+0x630/0x630 [ 2816.964933][ T2805] ? __fget_files+0x26a/0x440 [ 2816.969673][ T2805] ksys_write+0x12b/0x250 [ 2816.974039][ T2805] ? __ia32_sys_read+0xb0/0xb0 [ 2816.978845][ T2805] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2816.984788][ T2805] do_syscall_64+0x39/0xb0 [ 2816.989249][ T2805] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2816.995174][ T2805] RIP: 0033:0x7fdea9e8c0c9 [ 2816.999600][ T2805] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2817.019231][ T2805] RSP: 002b:00007fdeaac17168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2817.027664][ T2805] RAX: ffffffffffffffda RBX: 00007fdea9fabf80 RCX: 00007fdea9e8c0c9 [ 2817.035654][ T2805] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 2817.043633][ T2805] RBP: 00007fdea9ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2817.051618][ T2805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2817.059622][ T2805] R13: 00007ffd3a6b774f R14: 00007fdeaac17300 R15: 0000000000022000 [ 2817.067628][ T2805] [ 2817.077303][ T5108] Bluetooth: hci2: command 0x040f tx timeout [ 2817.085997][ T2805] memory: usage 8588kB, limit 0kB, failcnt 2485 [ 2817.101075][ T2805] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2817.119034][ T2805] Memory cgroup stats for /syz5: [ 2817.123463][ T2805] anon 114688 [ 2817.123463][ T2805] file 8347648 [ 2817.123463][ T2805] kernel 311296 [ 2817.123463][ T2805] kernel_stack 65536 [ 2817.123463][ T2805] pagetables 81920 [ 2817.123463][ T2805] sec_pagetables 0 [ 2817.123463][ T2805] percpu 64 [ 2817.123463][ T2805] sock 0 [ 2817.123463][ T2805] vmalloc 0 [ 2817.123463][ T2805] shmem 8347648 [ 2817.123463][ T2805] zswap 0 [ 2817.123463][ T2805] zswapped 0 [ 2817.123463][ T2805] file_mapped 221184 [ 2817.123463][ T2805] file_dirty 0 [ 2817.123463][ T2805] file_writeback 0 [ 2817.123463][ T2805] swapcached 0 [ 2817.123463][ T2805] anon_thp 0 [ 2817.123463][ T2805] file_thp 0 [ 2817.123463][ T2805] shmem_thp 0 [ 2817.123463][ T2805] inactive_anon 4046848 [ 2817.123463][ T2805] active_anon 4415488 [ 2817.123463][ T2805] inactive_file 0 [ 2817.123463][ T2805] active_file 0 [ 2817.123463][ T2805] unevictable 0 [ 2817.123463][ T2805] slab_reclaimable 38120 [ 2817.123463][ T2805] slab_unreclaimable 103272 [ 2817.123463][ T2805] slab 141392 [ 2817.227974][ T2732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2817.240412][ T2732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2817.266208][ T2805] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2804,uid=0 [ 2817.300187][ T2732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2817.329589][ T2714] netdevsim netdevsim2 netdevsim1: renamed from eth1 10:16:27 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:16:27 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2817.342516][ T2805] Memory cgroup out of memory: Killed process 2805 (syz-executor.5) total-vm:54540kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2817.362136][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2817.393273][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2817.410264][ T2602] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2817.443073][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2817.450872][ T2602] CPU: 0 PID: 2602 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2817.461231][ T2602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2817.471305][ T2602] Call Trace: [ 2817.474604][ T2602] [ 2817.477552][ T2602] dump_stack_lvl+0xd1/0x138 [ 2817.482178][ T2602] dump_header+0x10b/0x85f [ 2817.486633][ T2602] oom_kill_process.cold+0x10/0x15 [ 2817.491785][ T2602] out_of_memory+0x35c/0x14a0 [ 2817.496506][ T2602] ? find_held_lock+0x2d/0x110 [ 2817.501309][ T2602] ? oom_killer_disable+0x280/0x280 [ 2817.506567][ T2602] ? find_held_lock+0x2d/0x110 [ 2817.511372][ T2602] mem_cgroup_out_of_memory+0x206/0x270 [ 2817.516957][ T2602] ? mem_cgroup_margin+0x130/0x130 [ 2817.522107][ T2602] ? lock_downgrade+0x6e0/0x6e0 [ 2817.526999][ T2602] try_charge_memcg+0xefb/0x12f0 [ 2817.531977][ T2602] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2817.537987][ T2602] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2817.543744][ T2602] ? lock_downgrade+0x6e0/0x6e0 [ 2817.548624][ T2602] ? lock_downgrade+0x6e0/0x6e0 [ 2817.553499][ T2602] ? rcu_read_unlock+0x9/0x60 [ 2817.558212][ T2602] obj_cgroup_charge+0x2af/0x5e0 [ 2817.563161][ T2602] ? sk_prot_alloc+0x5f/0x290 [ 2817.567842][ T2602] kmem_cache_alloc+0xb5/0x430 [ 2817.572610][ T2602] ? inet_create+0x324/0xea0 [ 2817.577210][ T2602] sk_prot_alloc+0x5f/0x290 [ 2817.581724][ T2602] sk_alloc+0x3a/0x7a0 [ 2817.585804][ T2602] inet_create+0x399/0xea0 [ 2817.590236][ T2602] __sock_create+0x359/0x790 [ 2817.594847][ T2602] __sys_socket+0x133/0x250 [ 2817.599370][ T2602] ? __sys_socket_file+0x1f0/0x1f0 [ 2817.604501][ T2602] __x64_sys_socket+0x73/0xb0 [ 2817.609198][ T2602] do_syscall_64+0x39/0xb0 [ 2817.613631][ T2602] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2817.619529][ T2602] RIP: 0033:0x7fdea9e8d747 [ 2817.623949][ T2602] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2817.643558][ T2602] RSP: 002b:00007ffd3a6b72c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 2817.651977][ T2602] RAX: ffffffffffffffda RBX: 00007ffd3a6b7a30 RCX: 00007fdea9e8d747 [ 2817.659954][ T2602] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 2817.667923][ T2602] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffd3a6b7840 [ 2817.675892][ T2602] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 2817.683862][ T2602] R13: 00000000002afd01 R14: 000000000000000a R15: 00007ffd3a6b7a70 [ 2817.691849][ T2602] [ 2817.716812][ T2714] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2817.778359][ T2714] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2817.819429][ T2662] device veth0_macvtap entered promiscuous mode [ 2817.861267][ T5190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2817.871785][ T5190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2817.897230][T22355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2817.914984][T22355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2817.933109][T22355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2818.005666][ T2662] device veth1_macvtap entered promiscuous mode [ 2818.035892][ T2732] device hsr_slave_0 entered promiscuous mode [ 2818.062926][ T2732] device hsr_slave_1 entered promiscuous mode [ 2818.085873][ T2732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2818.108774][ T2732] Cannot create hsr debugfs directory [ 2818.152651][ T2602] memory: usage 8312kB, limit 0kB, failcnt 2504 [ 2818.158961][ T2602] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2818.168465][T22355] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2818.193386][T22355] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2818.205248][ T2602] Memory cgroup stats for /syz5: [ 2818.205416][ T2602] anon 36864 [ 2818.205416][ T2602] file 8347648 [ 2818.205416][ T2602] kernel 126976 [ 2818.205416][ T2602] kernel_stack 0 [ 2818.205416][ T2602] pagetables 8192 [ 2818.205416][ T2602] sec_pagetables 0 [ 2818.205416][ T2602] percpu 64 [ 2818.205416][ T2602] sock 0 [ 2818.205416][ T2602] vmalloc 0 [ 2818.205416][ T2602] shmem 8347648 [ 2818.205416][ T2602] zswap 0 [ 2818.205416][ T2602] zswapped 0 [ 2818.205416][ T2602] file_mapped 221184 [ 2818.205416][ T2602] file_dirty 0 [ 2818.205416][ T2602] file_writeback 0 [ 2818.205416][ T2602] swapcached 0 [ 2818.205416][ T2602] anon_thp 0 [ 2818.205416][ T2602] file_thp 0 [ 2818.205416][ T2602] shmem_thp 0 [ 2818.205416][ T2602] inactive_anon 3969024 [ 2818.205416][ T2602] active_anon 4415488 [ 2818.205416][ T2602] inactive_file 0 [ 2818.205416][ T2602] active_file 0 [ 2818.205416][ T2602] unevictable 0 [ 2818.205416][ T2602] slab_reclaimable 33568 [ 2818.205416][ T2602] slab_unreclaimable 71440 [ 2818.205416][ T2602] slab 105008 [ 2818.444597][ T2602] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2602,uid=0 [ 2818.461779][ T2602] Memory cgroup out of memory: Killed process 2602 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 10:16:28 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2818.490507][ T2662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2818.502796][ T2662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2818.516431][ T2662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2818.558527][ T2662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2818.576059][ T2662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2818.587154][ T2662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2818.597322][ T2662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2818.610810][ T2662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2818.620888][ T2662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2818.631618][ T2662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2818.641686][ T2662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2818.655292][ T2662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2818.666896][ T2662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2818.678633][ T2662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2818.688849][ T2662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2818.699546][ T2662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2818.711528][ T2662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2818.721949][ T2662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2818.732808][ T2662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2818.749989][ T2662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2818.761216][ T2662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2818.771477][ T2662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2818.782860][ T2662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2818.795629][ T2662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 10:16:28 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2818.806511][ T2662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2818.816951][ T2662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2818.847748][ T2662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2818.859698][ T2662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2818.870581][ T2662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2818.882656][ T2662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2818.893506][ T2662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2818.905510][ T2662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2818.916462][ T2662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2818.929230][ T2662] batman_adv: batadv0: Interface activated: batadv_slave_1 10:16:29 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2818.992688][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2819.003804][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2819.024663][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 10:16:29 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2819.035352][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2819.048050][ T2662] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2819.060998][ T2662] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2819.070631][ T2662] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2819.081495][ T2662] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2819.142465][ T5108] Bluetooth: hci2: command 0x0419 tx timeout [ 2819.439093][ T48] device hsr_slave_0 left promiscuous mode [ 2819.451335][ T48] device hsr_slave_1 left promiscuous mode [ 2819.458503][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2819.467325][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2819.484807][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2819.502833][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2819.524679][ T48] device bridge_slave_1 left promiscuous mode [ 2819.530915][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2819.553991][ T48] device bridge_slave_0 left promiscuous mode [ 2819.560246][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2819.628803][ T48] device hsr_slave_0 left promiscuous mode [ 2819.643264][ T48] device hsr_slave_1 left promiscuous mode [ 2819.662726][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2819.670183][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2819.695941][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2819.712452][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2819.721993][ T48] device bridge_slave_1 left promiscuous mode [ 2819.742465][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2819.753304][ T48] device bridge_slave_0 left promiscuous mode [ 2819.759523][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2819.794895][ T48] device hsr_slave_0 left promiscuous mode [ 2819.812990][ T48] device hsr_slave_1 left promiscuous mode [ 2819.822806][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2819.830252][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2819.852840][ T5113] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2819.862183][ T5113] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2819.863132][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2819.882793][ T5113] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2819.890430][ T5113] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2819.898350][ T5113] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2819.900279][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2819.933168][ T48] device bridge_slave_1 left promiscuous mode [ 2819.939420][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2819.974170][ T48] device bridge_slave_0 left promiscuous mode [ 2819.980489][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2820.024093][ T48] device hsr_slave_0 left promiscuous mode [ 2820.038132][ T48] device hsr_slave_1 left promiscuous mode [ 2820.057345][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2820.075180][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2820.094860][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2820.112442][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2820.129892][ T48] device bridge_slave_1 left promiscuous mode [ 2820.146665][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2820.155744][ T48] device bridge_slave_0 left promiscuous mode [ 2820.161950][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2820.176137][ T48] device hsr_slave_0 left promiscuous mode [ 2820.183876][ T48] device hsr_slave_1 left promiscuous mode [ 2820.192210][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2820.221916][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2820.241043][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2820.248673][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2820.259093][ T48] device bridge_slave_1 left promiscuous mode [ 2820.265873][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2820.275180][ T48] device bridge_slave_0 left promiscuous mode [ 2820.281391][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2820.311859][ T48] device veth1_macvtap left promiscuous mode [ 2820.319548][ T48] device veth0_macvtap left promiscuous mode [ 2820.326985][ T48] device veth1_vlan left promiscuous mode [ 2820.332918][ T48] device veth0_vlan left promiscuous mode [ 2820.340675][ T48] device veth1_macvtap left promiscuous mode [ 2820.347833][ T48] device veth0_macvtap left promiscuous mode [ 2820.354074][ T48] device veth1_vlan left promiscuous mode [ 2820.359923][ T48] device veth0_vlan left promiscuous mode [ 2820.369068][ T48] device veth1_macvtap left promiscuous mode [ 2820.382612][ T48] device veth0_macvtap left promiscuous mode [ 2820.388752][ T48] device veth1_vlan left promiscuous mode [ 2820.402731][ T48] device veth0_vlan left promiscuous mode [ 2820.418017][ T48] device veth1_macvtap left promiscuous mode [ 2820.427655][ T48] device veth0_macvtap left promiscuous mode [ 2820.434461][ T48] device veth1_vlan left promiscuous mode [ 2820.440290][ T48] device veth0_vlan left promiscuous mode [ 2820.448644][ T48] device veth1_macvtap left promiscuous mode [ 2820.455115][ T48] device veth0_macvtap left promiscuous mode [ 2820.461271][ T48] device veth1_vlan left promiscuous mode [ 2820.467601][ T48] device veth0_vlan left promiscuous mode [ 2821.743704][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2821.781564][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2821.801644][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2821.835239][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2821.942455][ T5108] Bluetooth: hci0: command 0x0409 tx timeout [ 2821.994615][ T48] bond0 (unregistering): Released all slaves [ 2822.248697][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2822.280701][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2822.310722][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2822.348653][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2822.471657][ T48] bond0 (unregistering): Released all slaves [ 2822.714060][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2822.738326][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2822.754671][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2822.774498][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2822.907136][ T48] bond0 (unregistering): Released all slaves [ 2823.216467][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2823.233274][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2823.249492][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2823.275479][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2823.436002][ T48] bond0 (unregistering): Released all slaves [ 2823.670831][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2823.686404][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2823.719010][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2823.756336][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2823.858317][ T48] bond0 (unregistering): Released all slaves [ 2824.022558][ T5108] Bluetooth: hci0: command 0x041b tx timeout [ 2824.042876][ T5190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2824.090681][ T5190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2824.319298][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2824.337190][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2824.358033][ T2714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2824.365931][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2824.535140][ T2714] 8021q: adding VLAN 0 to HW filter on device team0 [ 2824.545321][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2824.553385][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2824.561379][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2824.852930][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2824.867430][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2824.896198][ T9945] bridge0: port 1(bridge_slave_0) entered blocking state [ 2824.903399][ T9945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2825.002894][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2825.011724][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2825.030150][ T2852] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2825.053286][ T9945] bridge0: port 2(bridge_slave_1) entered blocking state [ 2825.060389][ T9945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2825.082466][ T2852] CPU: 1 PID: 2852 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2825.092835][ T2852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2825.102897][ T2852] Call Trace: [ 2825.106179][ T2852] [ 2825.109114][ T2852] dump_stack_lvl+0xd1/0x138 [ 2825.113725][ T2852] dump_header+0x10b/0x85f [ 2825.118166][ T2852] oom_kill_process.cold+0x10/0x15 [ 2825.123307][ T2852] out_of_memory+0x35c/0x14a0 [ 2825.128014][ T2852] ? oom_killer_disable+0x280/0x280 [ 2825.133248][ T2852] ? kasan_check_range+0xcc/0x190 [ 2825.138291][ T2852] mem_cgroup_out_of_memory+0x206/0x270 [ 2825.143854][ T2852] ? mem_cgroup_margin+0x130/0x130 [ 2825.148994][ T2852] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2825.154823][ T2852] memory_max_write+0x2f9/0x3c0 [ 2825.159688][ T2852] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2825.165776][ T2852] ? lock_release+0x810/0x810 [ 2825.170466][ T2852] cgroup_file_write+0x1e2/0x770 [ 2825.175417][ T2852] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2825.181493][ T2852] ? kill_css+0x370/0x370 [ 2825.185833][ T2852] ? __virt_addr_valid+0x61/0x2e0 [ 2825.190886][ T2852] ? kill_css+0x370/0x370 [ 2825.195226][ T2852] kernfs_fop_write_iter+0x3f1/0x600 [ 2825.200536][ T2852] vfs_write+0x9ed/0xdd0 [ 2825.204794][ T2852] ? kernel_write+0x630/0x630 [ 2825.209494][ T2852] ? __fget_files+0x26a/0x440 [ 2825.214193][ T2852] ksys_write+0x12b/0x250 [ 2825.218532][ T2852] ? __ia32_sys_read+0xb0/0xb0 [ 2825.223308][ T2852] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2825.229217][ T2852] do_syscall_64+0x39/0xb0 [ 2825.233647][ T2852] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2825.239550][ T2852] RIP: 0033:0x7ff0d348c0c9 [ 2825.243970][ T2852] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2825.263580][ T2852] RSP: 002b:00007ff0d4177168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2825.272001][ T2852] RAX: ffffffffffffffda RBX: 00007ff0d35abf80 RCX: 00007ff0d348c0c9 [ 2825.279981][ T2852] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000007 [ 2825.287956][ T2852] RBP: 00007ff0d34e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2825.295927][ T2852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2825.303900][ T2852] R13: 00007ffc3876e35f R14: 00007ff0d4177300 R15: 0000000000022000 [ 2825.311893][ T2852] [ 2825.332707][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2825.393682][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2825.403219][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2825.423366][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2825.522760][ T2852] memory: usage 528kB, limit 0kB, failcnt 2479 [ 2825.532004][ T2852] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2825.550150][ T2852] Memory cgroup stats for /syz4: [ 2825.552513][ T2852] anon 114688 [ 2825.552513][ T2852] file 122880 [ 2825.552513][ T2852] kernel 290816 [ 2825.552513][ T2852] kernel_stack 65536 [ 2825.552513][ T2852] pagetables 77824 [ 2825.552513][ T2852] sec_pagetables 0 [ 2825.552513][ T2852] percpu 64 [ 2825.552513][ T2852] sock 0 [ 2825.552513][ T2852] vmalloc 0 [ 2825.552513][ T2852] shmem 122880 [ 2825.552513][ T2852] zswap 0 [ 2825.552513][ T2852] zswapped 0 [ 2825.552513][ T2852] file_mapped 110592 [ 2825.552513][ T2852] file_dirty 0 [ 2825.552513][ T2852] file_writeback 0 [ 2825.552513][ T2852] swapcached 0 [ 2825.552513][ T2852] anon_thp 0 [ 2825.552513][ T2852] file_thp 0 [ 2825.552513][ T2852] shmem_thp 0 [ 2825.552513][ T2852] inactive_anon 126976 [ 2825.552513][ T2852] active_anon 110592 [ 2825.552513][ T2852] inactive_file 0 [ 2825.552513][ T2852] active_file 0 [ 2825.552513][ T2852] unevictable 0 [ 2825.552513][ T2852] slab_reclaimable 19984 [ 2825.552513][ T2852] slab_unreclaimable 101112 [ 2825.552513][ T2852] slab 121096 [ 2825.649566][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2825.658165][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2825.690120][ T2714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2825.730164][ T2852] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2662,uid=0 [ 2825.735671][ T2714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2825.748074][ T2852] Memory cgroup out of memory: Killed process 2662 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2825.824389][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2825.834084][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2825.853545][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2825.872889][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2825.894149][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2826.047500][ T2838] chnl_net:caif_netlink_parms(): no params data found [ 2826.111700][ T5108] Bluetooth: hci0: command 0x040f tx timeout 10:16:36 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x7, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x100, 0x0, 0x100, 0x10000000, 0x9, 0x0, 0x1f}, r0, 0xb, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_int(r3, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='cgroup\x00') r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, r2, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00'}, 0x10) write$cgroup_int(r4, &(0x7f0000000600), 0x12) 10:16:36 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:16:36 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2826.215233][ T2732] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2826.318694][ T2732] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2826.379005][ T2732] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2826.500095][ T2732] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2826.660449][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2826.672720][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2826.680300][ T2838] bridge0: port 1(bridge_slave_0) entered blocking state [ 2826.692627][ T2838] bridge0: port 1(bridge_slave_0) entered disabled state [ 2826.713700][ T2838] device bridge_slave_0 entered promiscuous mode [ 2826.735891][ T2838] bridge0: port 2(bridge_slave_1) entered blocking state [ 2826.752422][ T2838] bridge0: port 2(bridge_slave_1) entered disabled state [ 2826.763960][ T2838] device bridge_slave_1 entered promiscuous mode [ 2826.799866][ T2714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2826.906568][ T2838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2826.954813][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2826.982169][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2827.001813][ T2838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2827.061497][ T2838] team0: Port device team_slave_0 added [ 2827.080090][ T2838] team0: Port device team_slave_1 added [ 2827.166808][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2827.183251][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2827.203234][ T2714] device veth0_vlan entered promiscuous mode [ 2827.233602][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2827.241575][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2827.283731][ T2732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2827.291764][ T2838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2827.299703][ T2838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2827.346940][ T2838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2827.371537][ T2714] device veth1_vlan entered promiscuous mode [ 2827.397377][ T2838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2827.404476][ T2838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2827.432051][ T2838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2827.474020][ T2732] 8021q: adding VLAN 0 to HW filter on device team0 [ 2827.497168][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2827.506553][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2827.515005][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2827.522889][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2827.541325][ T2714] device veth0_macvtap entered promiscuous mode [ 2827.609788][ T2838] device hsr_slave_0 entered promiscuous mode [ 2827.629707][ T2838] device hsr_slave_1 entered promiscuous mode [ 2827.640999][ T2838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2827.649704][ T2838] Cannot create hsr debugfs directory [ 2827.659164][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2827.678810][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2827.691165][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2827.700626][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2827.709598][T27660] bridge0: port 1(bridge_slave_0) entered blocking state [ 2827.716768][T27660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2827.724764][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2827.733251][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2827.800911][ T2714] device veth1_macvtap entered promiscuous mode [ 2827.813681][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2827.821803][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2827.831273][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2827.840435][T22744] bridge0: port 2(bridge_slave_1) entered blocking state [ 2827.847619][T22744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2827.856121][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2827.865441][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2827.874806][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2827.901532][ T2732] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2827.912894][ T2732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2827.972743][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2827.981286][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2828.003667][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2828.012172][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2828.021463][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2828.044488][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2828.077024][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2828.156682][ T2714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2828.191965][ T5108] Bluetooth: hci0: command 0x0419 tx timeout [ 2828.202858][ T2714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2828.222404][ T2714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2828.233671][ T2714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2828.244696][ T2714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2828.255515][ T2714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2828.267238][ T2714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2828.278112][ T2714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2828.293296][ T2714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2828.332814][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2828.353058][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2828.373712][ T2714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2828.400751][ T2714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2828.411178][ T2714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2828.421997][ T2714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2828.432458][ T2714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2828.454933][ T2714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2828.465321][ T2714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2828.476153][ T2714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2828.487989][ T2714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2828.509786][ T2714] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2828.533081][ T2714] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2828.541830][ T2714] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2828.582368][ T2714] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2828.603604][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2828.622041][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2828.633652][ T5113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2828.642798][ T5113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2828.652198][ T5113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2828.660218][ T5113] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2828.668558][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2828.756726][ T2838] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2828.889807][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2828.910840][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2829.023375][ T2838] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2829.076472][ T2732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2829.153635][ T2838] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2829.213065][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2829.221720][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2829.320706][ T2838] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2829.362700][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2829.371635][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2829.390180][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2829.475601][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2829.515039][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2829.527095][ T2732] device veth0_vlan entered promiscuous mode [ 2829.561182][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2829.583264][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2829.591619][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2829.663174][ T2732] device veth1_vlan entered promiscuous mode [ 2829.687583][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2829.696279][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2829.729554][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2829.740805][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2830.060197][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2830.109610][ T2924] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2830.121410][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2830.133206][ T2732] device veth0_macvtap entered promiscuous mode [ 2830.167985][ T2924] CPU: 1 PID: 2924 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2830.178378][ T2924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2830.188461][ T2924] Call Trace: [ 2830.191762][ T2924] [ 2830.194713][ T2924] dump_stack_lvl+0xd1/0x138 [ 2830.199359][ T2924] dump_header+0x10b/0x85f [ 2830.203826][ T2924] oom_kill_process.cold+0x10/0x15 [ 2830.208987][ T2924] out_of_memory+0x35c/0x14a0 [ 2830.213720][ T2924] ? oom_killer_disable+0x280/0x280 [ 2830.218969][ T2924] ? find_held_lock+0x2d/0x110 [ 2830.223775][ T2924] mem_cgroup_out_of_memory+0x206/0x270 [ 2830.229392][ T2924] ? mem_cgroup_margin+0x130/0x130 [ 2830.234568][ T2924] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2830.240461][ T2924] memory_max_write+0x2f9/0x3c0 [ 2830.245347][ T2924] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2830.247798][ T2732] device veth1_macvtap entered promiscuous mode [ 2830.251446][ T2924] cgroup_file_write+0x1e2/0x770 [ 2830.262659][ T2924] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2830.268761][ T2924] ? kill_css+0x370/0x370 [ 2830.273146][ T2924] ? kill_css+0x370/0x370 [ 2830.277509][ T2924] kernfs_fop_write_iter+0x3f1/0x600 [ 2830.282848][ T2924] vfs_write+0x9ed/0xdd0 [ 2830.287130][ T2924] ? kernel_write+0x630/0x630 [ 2830.291841][ T2924] ? __fget_files+0x26a/0x440 [ 2830.296573][ T2924] ksys_write+0x12b/0x250 [ 2830.300942][ T2924] ? __ia32_sys_read+0xb0/0xb0 [ 2830.305736][ T2924] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2830.308423][ T2838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2830.311641][ T2924] do_syscall_64+0x39/0xb0 [ 2830.322764][ T2924] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2830.328690][ T2924] RIP: 0033:0x7f6f0cc8c0c9 [ 2830.333128][ T2924] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2830.352765][ T2924] RSP: 002b:00007f6f0d9e1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2830.361304][ T2924] RAX: ffffffffffffffda RBX: 00007f6f0cdabf80 RCX: 00007f6f0cc8c0c9 [ 2830.369308][ T2924] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 2830.377310][ T2924] RBP: 00007f6f0cce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2830.385311][ T2924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2830.393312][ T2924] R13: 00007ffdd27951ff R14: 00007f6f0d9e1300 R15: 0000000000022000 [ 2830.401336][ T2924] [ 2830.426125][ T2907] chnl_net:caif_netlink_parms(): no params data found [ 2830.474902][ T2838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2830.496772][ T2732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2830.520244][ T2732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2830.541480][ T2732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2830.565127][ T2732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2830.575937][ T2924] memory: usage 536kB, limit 0kB, failcnt 2616 [ 2830.593090][ T2924] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2830.597016][ T2732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2830.604137][ T2924] Memory cgroup stats for /syz2: [ 2830.611566][ T2924] anon 114688 [ 2830.611566][ T2924] file 131072 [ 2830.611566][ T2924] kernel 286720 [ 2830.611566][ T2924] kernel_stack 65536 [ 2830.611566][ T2924] pagetables 77824 [ 2830.611566][ T2924] sec_pagetables 0 [ 2830.611566][ T2924] percpu 64 [ 2830.611566][ T2924] sock 0 [ 2830.611566][ T2924] vmalloc 0 [ 2830.611566][ T2924] shmem 126976 [ 2830.611566][ T2924] zswap 0 [ 2830.611566][ T2924] zswapped 0 [ 2830.611566][ T2924] file_mapped 126976 [ 2830.611566][ T2924] file_dirty 4096 [ 2830.611566][ T2924] file_writeback 0 [ 2830.611566][ T2924] swapcached 0 [ 2830.611566][ T2924] anon_thp 0 [ 2830.611566][ T2924] file_thp 0 [ 2830.611566][ T2924] shmem_thp 0 [ 2830.611566][ T2924] inactive_anon 126976 [ 2830.611566][ T2924] active_anon 114688 [ 2830.611566][ T2924] inactive_file 0 [ 2830.611566][ T2924] active_file 4096 [ 2830.611566][ T2924] unevictable 0 [ 2830.611566][ T2924] slab_reclaimable 14152 [ 2830.611566][ T2924] slab_unreclaimable 99816 [ 2830.611566][ T2924] slab 113968 [ 2830.637247][ T2732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2830.743053][ T5108] Bluetooth: hci4: command 0x0409 tx timeout 10:16:40 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:16:40 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2830.794604][ T2924] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=2923,uid=0 [ 2830.810752][ T2924] Memory cgroup out of memory: Killed process 2924 (syz-executor.2) total-vm:54540kB, anon-rss:356kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2830.901427][ T2714] syz-executor.2 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=0 [ 2830.907603][ T2732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2830.937009][ T2714] CPU: 0 PID: 2714 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2830.947391][ T2714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2830.957560][ T2714] Call Trace: [ 2830.958652][ T2732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2830.960836][ T2714] [ 2830.973679][ T2714] dump_stack_lvl+0xd1/0x138 [ 2830.978301][ T2714] dump_header+0x10b/0x85f [ 2830.982756][ T2714] oom_kill_process.cold+0x10/0x15 [ 2830.987904][ T2714] out_of_memory+0x35c/0x14a0 [ 2830.992613][ T2714] ? find_held_lock+0x2d/0x110 [ 2830.997394][ T2714] ? oom_killer_disable+0x280/0x280 [ 2831.002613][ T2714] ? find_held_lock+0x2d/0x110 [ 2831.007397][ T2714] mem_cgroup_out_of_memory+0x206/0x270 [ 2831.012970][ T2714] ? mem_cgroup_margin+0x130/0x130 [ 2831.018094][ T2714] ? lock_downgrade+0x6e0/0x6e0 [ 2831.022982][ T2714] try_charge_memcg+0xefb/0x12f0 [ 2831.027946][ T2714] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2831.033942][ T2714] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2831.039699][ T2714] ? lock_downgrade+0x6e0/0x6e0 [ 2831.044573][ T2714] ? lock_downgrade+0x6e0/0x6e0 [ 2831.049433][ T2714] ? rcu_read_unlock+0x9/0x60 [ 2831.054137][ T2714] obj_cgroup_charge+0x2af/0x5e0 [ 2831.059087][ T2714] ? __alloc_file+0x21/0x270 [ 2831.064048][ T2714] kmem_cache_alloc+0xb5/0x430 [ 2831.068834][ T2714] __alloc_file+0x21/0x270 [ 2831.073274][ T2714] alloc_empty_file+0x71/0x170 [ 2831.078054][ T2714] path_openat+0xe1/0x2a50 [ 2831.082576][ T2714] ? path_lookupat+0x840/0x840 [ 2831.087381][ T2714] do_filp_open+0x1ba/0x410 [ 2831.091910][ T2714] ? may_open_dev+0xf0/0xf0 [ 2831.096427][ T2714] ? find_held_lock+0x2d/0x110 [ 2831.101223][ T2714] ? do_raw_spin_lock+0x124/0x2b0 [ 2831.106257][ T2714] ? rwlock_bug.part.0+0x90/0x90 [ 2831.111219][ T2714] ? _raw_spin_unlock+0x28/0x40 [ 2831.116088][ T2714] ? alloc_fd+0x2d8/0x6d0 [ 2831.120448][ T2714] do_sys_openat2+0x16d/0x4c0 [ 2831.125224][ T2714] ? path_umount+0x6b8/0x10b0 [ 2831.129914][ T2714] ? putname+0x102/0x140 [ 2831.134191][ T2714] ? build_open_flags+0x6f0/0x6f0 [ 2831.139242][ T2714] ? may_mount+0xa0/0xa0 [ 2831.143511][ T2714] __x64_sys_openat+0x143/0x1f0 [ 2831.148394][ T2714] ? __ia32_sys_open+0x1c0/0x1c0 [ 2831.153356][ T2714] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2831.159290][ T2714] do_syscall_64+0x39/0xb0 [ 2831.163727][ T2714] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2831.169632][ T2714] RIP: 0033:0x7f6f0cc8bc38 [ 2831.174057][ T2714] Code: 24 18 31 c0 41 83 e2 40 75 40 89 f0 25 00 00 41 00 3d 00 00 41 00 74 32 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 40 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 2831.193677][ T2714] RSP: 002b:00007ffdd27942f0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 2831.202105][ T2714] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f6f0cc8bc38 [ 2831.210080][ T2714] RDX: 0000000000090800 RSI: 00007ffdd27954e0 RDI: 00000000ffffff9c [ 2831.218052][ T2714] RBP: 00007ffdd27954bc R08: 0000000000090800 R09: 00007ffdd27954e0 [ 2831.226028][ T2714] R10: 0000000000000000 R11: 0000000000000287 R12: 00007f6f0cce6b24 [ 2831.233998][ T2714] R13: 00007ffdd27954e0 R14: 0000000000000009 R15: 00007ffdd2795520 [ 2831.241988][ T2714] [ 2831.254282][ T2732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2831.282413][ T2732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2831.292456][ T2714] memory: usage 280kB, limit 0kB, failcnt 2635 [ 2831.298641][ T2714] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2831.313141][ T2732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2831.316428][ T2714] Memory cgroup stats for /syz2: [ 2831.320506][ T2714] anon 36864 [ 2831.320506][ T2714] file 131072 [ 2831.320506][ T2714] kernel 118784 [ 2831.320506][ T2714] kernel_stack 0 [ 2831.320506][ T2714] pagetables 8192 [ 2831.320506][ T2714] sec_pagetables 0 [ 2831.320506][ T2714] percpu 64 [ 2831.320506][ T2714] sock 0 [ 2831.320506][ T2714] vmalloc 0 [ 2831.320506][ T2714] shmem 126976 [ 2831.320506][ T2714] zswap 0 [ 2831.320506][ T2714] zswapped 0 [ 2831.320506][ T2714] file_mapped 126976 [ 2831.320506][ T2714] file_dirty 4096 [ 2831.320506][ T2714] file_writeback 0 [ 2831.320506][ T2714] swapcached 0 [ 2831.320506][ T2714] anon_thp 0 [ 2831.320506][ T2714] file_thp 0 [ 2831.320506][ T2714] shmem_thp 0 [ 2831.320506][ T2714] inactive_anon 49152 [ 2831.320506][ T2714] active_anon 114688 [ 2831.320506][ T2714] inactive_file 0 [ 2831.320506][ T2714] active_file 4096 [ 2831.320506][ T2714] unevictable 0 [ 2831.320506][ T2714] slab_reclaimable 13768 [ 2831.320506][ T2714] slab_unreclaimable 80888 [ 2831.320506][ T2714] slab 94656 [ 2831.422644][ T2838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2831.446193][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2831.446305][ T2714] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=2714,uid=0 [ 2831.455487][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2831.473589][ T2714] Memory cgroup out of memory: Killed process 2714 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2831.494837][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2831.513314][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2831.524559][ T2732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2831.542432][ T2732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2831.552278][ T2732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2831.587129][ T2732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2831.602230][ T2732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2831.622925][ T2732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2831.642429][ T2732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2831.662407][ T2732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2831.672268][ T2732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2831.695821][ T2732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2831.729665][ T2732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2831.775150][ T2838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2831.807299][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2831.823324][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2831.887136][ T2732] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2831.902744][ T2732] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2831.911490][ T2732] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2831.931965][ T2732] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2832.073685][ T2907] bridge0: port 1(bridge_slave_0) entered blocking state [ 2832.080901][ T2907] bridge0: port 1(bridge_slave_0) entered disabled state [ 2832.106385][ T2907] device bridge_slave_0 entered promiscuous mode [ 2832.122472][ T2907] bridge0: port 2(bridge_slave_1) entered blocking state [ 2832.129593][ T2907] bridge0: port 2(bridge_slave_1) entered disabled state [ 2832.137916][ T2907] device bridge_slave_1 entered promiscuous mode [ 2832.238364][ T2907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2832.298323][ T2907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2832.447965][ T2907] team0: Port device team_slave_0 added [ 2832.468477][ T2907] team0: Port device team_slave_1 added [ 2832.501438][ T5190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2832.516428][ T5190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2832.536771][ T2838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2832.560523][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2832.601634][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2832.604802][ T2907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2832.623761][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2832.642680][ T2907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2832.683189][ T2907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2832.725155][ T2907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2832.752422][ T2907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2832.811762][ T2907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2832.832019][ T5108] Bluetooth: hci4: command 0x041b tx timeout [ 2832.905936][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2832.929083][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2832.962792][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2832.970778][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2833.142144][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 10:16:43 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:16:43 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x7, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x100, 0x0, 0x100, 0x10000000, 0x9, 0x0, 0x1f}, r0, 0xb, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='cgroup\x00') r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, r2, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00'}, 0x10) write$cgroup_int(r3, &(0x7f0000000600), 0x12) [ 2833.254145][ T2838] 8021q: adding VLAN 0 to HW filter on device team0 [ 2833.339636][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2833.416622][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2833.433198][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2833.482588][T28161] bridge0: port 1(bridge_slave_0) entered blocking state [ 2833.489715][T28161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2833.545495][ T2972] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2833.552796][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2833.572609][ T2972] CPU: 1 PID: 2972 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2833.582998][ T2972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2833.593064][ T2972] Call Trace: [ 2833.596349][ T2972] [ 2833.599287][ T2972] dump_stack_lvl+0xd1/0x138 [ 2833.603901][ T2972] dump_header+0x10b/0x85f [ 2833.608343][ T2972] oom_kill_process.cold+0x10/0x15 [ 2833.613751][ T2972] out_of_memory+0x35c/0x14a0 [ 2833.618479][ T2972] ? lockdep_hardirqs_on+0x7d/0x100 [ 2833.623702][ T2972] ? oom_killer_disable+0x280/0x280 [ 2833.628935][ T2972] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 2833.634600][ T2972] mem_cgroup_out_of_memory+0x206/0x270 [ 2833.640173][ T2972] ? mem_cgroup_margin+0x130/0x130 [ 2833.645313][ T2972] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2833.651143][ T2972] memory_max_write+0x2f9/0x3c0 [ 2833.656009][ T2972] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2833.662089][ T2972] ? lock_release+0x810/0x810 [ 2833.666779][ T2972] cgroup_file_write+0x1e2/0x770 [ 2833.671737][ T2972] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2833.677823][ T2972] ? kill_css+0x370/0x370 [ 2833.682254][ T2972] ? __virt_addr_valid+0x61/0x2e0 [ 2833.687569][ T2972] ? kill_css+0x370/0x370 [ 2833.691926][ T2972] kernfs_fop_write_iter+0x3f1/0x600 [ 2833.697242][ T2972] vfs_write+0x9ed/0xdd0 [ 2833.701501][ T2972] ? kernel_write+0x630/0x630 [ 2833.706194][ T2972] ? __fget_files+0x26a/0x440 [ 2833.710909][ T2972] ksys_write+0x12b/0x250 [ 2833.715255][ T2972] ? __ia32_sys_read+0xb0/0xb0 [ 2833.720029][ T2972] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2833.725943][ T2972] do_syscall_64+0x39/0xb0 [ 2833.730383][ T2972] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2833.736288][ T2972] RIP: 0033:0x7fc4b9e8c0c9 [ 2833.740710][ T2972] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2833.760586][ T2972] RSP: 002b:00007fc4bab2d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2833.769017][ T2972] RAX: ffffffffffffffda RBX: 00007fc4b9fabf80 RCX: 00007fc4b9e8c0c9 [ 2833.777000][ T2972] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 2833.784974][ T2972] RBP: 00007fc4b9ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2833.792951][ T2972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2833.800926][ T2972] R13: 00007fff9fc6b16f R14: 00007fc4bab2d300 R15: 0000000000022000 [ 2833.808927][ T2972] [ 2833.853290][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2833.863686][T28161] bridge0: port 2(bridge_slave_1) entered blocking state [ 2833.870809][T28161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2833.878581][ T2972] memory: usage 8576kB, limit 0kB, failcnt 2258 [ 2833.892519][ T2972] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2833.921065][ T2972] Memory cgroup stats for /syz3: [ 2833.921802][ T2972] anon 139264 [ 2833.921802][ T2972] file 8347648 [ 2833.921802][ T2972] kernel 274432 [ 2833.921802][ T2972] kernel_stack 65536 [ 2833.921802][ T2972] pagetables 77824 [ 2833.921802][ T2972] sec_pagetables 0 [ 2833.921802][ T2972] percpu 64 [ 2833.921802][ T2972] sock 0 [ 2833.921802][ T2972] vmalloc 0 [ 2833.921802][ T2972] shmem 8347648 [ 2833.921802][ T2972] zswap 0 [ 2833.921802][ T2972] zswapped 0 [ 2833.921802][ T2972] file_mapped 151552 [ 2833.921802][ T2972] file_dirty 0 [ 2833.921802][ T2972] file_writeback 0 [ 2833.921802][ T2972] swapcached 0 [ 2833.921802][ T2972] anon_thp 0 [ 2833.921802][ T2972] file_thp 0 [ 2833.921802][ T2972] shmem_thp 0 [ 2833.921802][ T2972] inactive_anon 139264 [ 2833.921802][ T2972] active_anon 8347648 [ 2833.921802][ T2972] inactive_file 0 [ 2833.921802][ T2972] active_file 0 [ 2833.921802][ T2972] unevictable 0 [ 2833.921802][ T2972] slab_reclaimable 33736 [ 2833.921802][ T2972] slab_unreclaimable 72456 [ 2833.921802][ T2972] slab 106192 [ 2834.048161][ T2907] device hsr_slave_0 entered promiscuous mode [ 2834.055348][ T2907] device hsr_slave_1 entered promiscuous mode [ 2834.082479][ T2907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2834.102750][ T2907] Cannot create hsr debugfs directory [ 2834.118061][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2834.190052][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2834.210603][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2834.313350][ T2972] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=2971,uid=0 [ 2834.335489][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2834.346119][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2834.364536][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2834.374703][ T2972] Memory cgroup out of memory: Killed process 2972 (syz-executor.3) total-vm:56588kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2834.404574][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2834.420726][ T2838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2834.479513][ T2838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2834.523267][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2834.531796][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2834.553436][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2834.561900][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2834.594384][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2834.870750][ T48] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2834.904059][ T5108] Bluetooth: hci4: command 0x040f tx timeout [ 2834.953439][ T2907] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2835.067686][ T48] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2835.154026][ T2907] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2835.228028][ T48] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2835.403234][ T2907] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2835.476955][ T48] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2835.518720][ T2907] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2835.582244][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2835.596091][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2835.617300][ T2838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2835.732718][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2835.741484][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2835.790896][ T2838] device veth0_vlan entered promiscuous mode [ 2835.821310][ T2838] device veth1_vlan entered promiscuous mode [ 2835.857460][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2835.883283][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2835.891974][T12303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2835.944818][ T1201] ieee802154 phy0 wpan0: encryption failed: -22 [ 2835.946589][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2835.951127][ T1201] ieee802154 phy1 wpan1: encryption failed: -22 [ 2835.962992][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2835.973887][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2836.008829][ T2838] device veth0_macvtap entered promiscuous mode [ 2836.070771][ T5113] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2836.096465][ T5113] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2836.107673][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2836.117210][T29331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2836.125583][T29331] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2836.133201][T29331] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2836.143998][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2836.156042][ T2838] device veth1_macvtap entered promiscuous mode [ 2836.175468][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2836.185326][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2836.297462][ T2838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2836.312651][ T2838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2836.332429][ T2838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2836.356367][ T2838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2836.377144][ T2838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2836.400292][ T2838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2836.421295][ T2838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2836.442664][ T2838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2836.462430][ T2838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2836.482421][ T2838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2836.493896][ T2838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2836.512609][ T2838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2836.534464][ T2838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2836.543235][ T2907] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2836.558484][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2836.572072][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2836.629278][ T2907] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2836.640544][ T2838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2836.651942][ T2838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2836.661887][ T2838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2836.673325][ T2838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2836.683256][ T2838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2836.694888][ T2838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2836.714076][ T2838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2836.732245][ T2838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2836.752437][ T2838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2836.772393][ T2838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2836.782227][ T2838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2836.793006][ T2838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2836.805240][ T2838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2836.817996][ T2907] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2836.829337][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2836.838387][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2836.909249][ T2838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2836.920615][ T2838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2836.932600][ T2838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2836.941310][ T2838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2836.952583][ T2907] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2836.982616][T29331] Bluetooth: hci4: command 0x0419 tx timeout [ 2837.370563][ T2422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2837.379301][ T2422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2837.399452][ T2907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2837.420473][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2837.515562][ T2907] 8021q: adding VLAN 0 to HW filter on device team0 [ 2837.588263][ T2995] chnl_net:caif_netlink_parms(): no params data found [ 2837.599423][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2837.608134][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2837.683628][ T5190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2837.684208][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2837.691688][ T5190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2837.711735][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2837.725133][T13562] bridge0: port 1(bridge_slave_0) entered blocking state [ 2837.732280][T13562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2837.741955][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2837.751001][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2837.760223][T13562] bridge0: port 2(bridge_slave_1) entered blocking state [ 2837.767393][T13562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2837.775742][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2837.789928][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2837.810947][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2837.823800][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2837.831822][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2837.840632][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2837.978887][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2838.019127][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2838.044535][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2838.054092][ T3038] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2838.062278][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2838.066060][ T3038] CPU: 1 PID: 3038 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2838.082514][ T3038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2838.092585][ T3038] Call Trace: [ 2838.095928][ T3038] [ 2838.098864][ T3038] dump_stack_lvl+0xd1/0x138 [ 2838.103481][ T3038] dump_header+0x10b/0x85f [ 2838.107932][ T3038] oom_kill_process.cold+0x10/0x15 [ 2838.113684][ T3038] out_of_memory+0x35c/0x14a0 [ 2838.118394][ T3038] ? oom_killer_disable+0x280/0x280 [ 2838.123629][ T3038] mem_cgroup_out_of_memory+0x206/0x270 [ 2838.129199][ T3038] ? mem_cgroup_margin+0x130/0x130 [ 2838.134350][ T3038] memory_max_write+0x2f9/0x3c0 [ 2838.139219][ T3038] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2838.145306][ T3038] ? lock_release+0x810/0x810 [ 2838.149999][ T3038] cgroup_file_write+0x1e2/0x770 [ 2838.155129][ T3038] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2838.161210][ T3038] ? kill_css+0x370/0x370 [ 2838.165557][ T3038] ? __virt_addr_valid+0x61/0x2e0 [ 2838.170619][ T3038] ? kill_css+0x370/0x370 [ 2838.174961][ T3038] kernfs_fop_write_iter+0x3f1/0x600 [ 2838.180279][ T3038] vfs_write+0x9ed/0xdd0 [ 2838.184538][ T3038] ? kernel_write+0x630/0x630 [ 2838.189231][ T3038] ? __fget_files+0x26a/0x440 [ 2838.194022][ T3038] ksys_write+0x12b/0x250 [ 2838.198365][ T3038] ? __ia32_sys_read+0xb0/0xb0 [ 2838.203142][ T3038] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2838.209053][ T3038] do_syscall_64+0x39/0xb0 [ 2838.213496][ T3038] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2838.219410][ T3038] RIP: 0033:0x7fc355a8c0c9 [ 2838.223833][ T3038] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2838.243712][ T3038] RSP: 002b:00007fc35686c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2838.252134][ T3038] RAX: ffffffffffffffda RBX: 00007fc355babf80 RCX: 00007fc355a8c0c9 [ 2838.260198][ T3038] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 2838.268175][ T3038] RBP: 00007fc355ae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2838.276159][ T3038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2838.284135][ T3038] R13: 00007ffd3e97aa2f R14: 00007fc35686c300 R15: 0000000000022000 [ 2838.292132][ T3038] [ 2838.301233][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2838.302424][T29331] Bluetooth: hci1: command 0x0409 tx timeout [ 2838.316122][ T3038] memory: usage 588kB, limit 0kB, failcnt 2141 [ 2838.331898][ T3038] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2838.341895][ T3038] Memory cgroup stats for /syz1: [ 2838.342090][ T3038] anon 110592 [ 2838.342090][ T3038] file 180224 [ 2838.342090][ T3038] kernel 294912 [ 2838.342090][ T3038] kernel_stack 65536 [ 2838.342090][ T3038] pagetables 81920 [ 2838.342090][ T3038] sec_pagetables 0 [ 2838.342090][ T3038] percpu 64 [ 2838.342090][ T3038] sock 0 [ 2838.342090][ T3038] vmalloc 0 [ 2838.342090][ T3038] shmem 180224 [ 2838.342090][ T3038] zswap 0 [ 2838.342090][ T3038] zswapped 0 [ 2838.342090][ T3038] file_mapped 180224 [ 2838.342090][ T3038] file_dirty 0 [ 2838.342090][ T3038] file_writeback 0 [ 2838.342090][ T3038] swapcached 0 [ 2838.342090][ T3038] anon_thp 0 [ 2838.342090][ T3038] file_thp 0 [ 2838.342090][ T3038] shmem_thp 0 [ 2838.342090][ T3038] inactive_anon 147456 [ 2838.342090][ T3038] active_anon 110592 [ 2838.342090][ T3038] inactive_file 0 [ 2838.342090][ T3038] active_file 0 [ 2838.342090][ T3038] unevictable 0 [ 2838.342090][ T3038] slab_reclaimable 17288 [ 2838.342090][ T3038] slab_unreclaimable 102408 [ 2838.342090][ T3038] slab 119696 [ 2838.443365][ T3038] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3037,uid=0 10:16:48 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:16:48 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:16:48 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:16:48 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2838.458986][ T3038] Memory cgroup out of memory: Killed process 3037 (syz-executor.1) total-vm:54540kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2838.487563][ T2907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2838.524902][ T2732] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 2838.565828][ T2732] CPU: 0 PID: 2732 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2838.576216][ T2732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2838.586302][ T2732] Call Trace: [ 2838.589607][ T2732] [ 2838.592556][ T2732] dump_stack_lvl+0xd1/0x138 [ 2838.597180][ T2732] dump_header+0x10b/0x85f [ 2838.601637][ T2732] oom_kill_process.cold+0x10/0x15 [ 2838.606795][ T2732] out_of_memory+0x35c/0x14a0 [ 2838.611512][ T2732] ? find_held_lock+0x2d/0x110 [ 2838.616317][ T2732] ? oom_killer_disable+0x280/0x280 [ 2838.621558][ T2732] ? find_held_lock+0x2d/0x110 [ 2838.626363][ T2732] mem_cgroup_out_of_memory+0x206/0x270 [ 2838.634208][ T2732] ? mem_cgroup_margin+0x130/0x130 [ 2838.639364][ T2732] ? lock_downgrade+0x6e0/0x6e0 [ 2838.644264][ T2732] try_charge_memcg+0xefb/0x12f0 [ 2838.649238][ T2732] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2838.655249][ T2732] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2838.661007][ T2732] ? lock_downgrade+0x6e0/0x6e0 [ 2838.665885][ T2732] ? lock_downgrade+0x6e0/0x6e0 [ 2838.670764][ T2732] ? rcu_read_unlock+0x9/0x60 [ 2838.675550][ T2732] obj_cgroup_charge+0x2af/0x5e0 [ 2838.680526][ T2732] ? copy_process+0x3aa/0x7520 [ 2838.685315][ T2732] kmem_cache_alloc_node+0xb7/0x460 [ 2838.690547][ T2732] copy_process+0x3aa/0x7520 [ 2838.695160][ T2732] ? _raw_spin_unlock+0x28/0x40 [ 2838.700037][ T2732] ? wp_page_reuse+0x197/0x570 [ 2838.704840][ T2732] ? do_wp_page+0x844/0x3370 [ 2838.709467][ T2732] ? __cleanup_sighand+0xb0/0xb0 [ 2838.714437][ T2732] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2838.719848][ T2732] ? rwlock_bug.part.0+0x90/0x90 [ 2838.724820][ T2732] ? lock_chain_count+0x20/0x20 [ 2838.729698][ T2732] kernel_clone+0xeb/0x990 [ 2838.734144][ T2732] ? create_io_thread+0xf0/0xf0 [ 2838.739029][ T2732] ? find_held_lock+0x2d/0x110 [ 2838.743839][ T2732] __do_sys_clone+0xba/0x100 [ 2838.748454][ T2732] ? kernel_clone+0x990/0x990 [ 2838.753178][ T2732] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2838.759117][ T2732] do_syscall_64+0x39/0xb0 [ 2838.763564][ T2732] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2838.769484][ T2732] RIP: 0033:0x7fc4b9e89dfb [ 2838.773924][ T2732] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2838.793642][ T2732] RSP: 002b:00007fff9fc6b3b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2838.802090][ T2732] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc4b9e89dfb [ 2838.810252][ T2732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2838.818622][ T2732] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555557226400 [ 2838.826609][ T2732] R10: 00005555572266d0 R11: 0000000000000246 R12: 0000000000000001 [ 2838.834687][ T2732] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff9fc6b490 [ 2838.842698][ T2732] [ 2838.879499][ T2732] memory: usage 8276kB, limit 0kB, failcnt 2277 [ 2838.903999][ T2732] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2838.928488][ T2732] Memory cgroup stats for /syz3: [ 2838.928661][ T2732] anon 45056 [ 2838.928661][ T2732] file 8347648 [ 2838.928661][ T2732] kernel 81920 [ 2838.928661][ T2732] kernel_stack 0 [ 2838.928661][ T2732] pagetables 8192 [ 2838.928661][ T2732] sec_pagetables 0 [ 2838.928661][ T2732] percpu 0 [ 2838.928661][ T2732] sock 0 [ 2838.928661][ T2732] vmalloc 0 [ 2838.928661][ T2732] shmem 8347648 [ 2838.928661][ T2732] zswap 0 [ 2838.928661][ T2732] zswapped 0 [ 2838.928661][ T2732] file_mapped 122880 [ 2838.928661][ T2732] file_dirty 0 10:16:49 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2838.928661][ T2732] file_writeback 0 [ 2838.928661][ T2732] swapcached 0 [ 2838.928661][ T2732] anon_thp 0 [ 2838.928661][ T2732] file_thp 0 [ 2838.928661][ T2732] shmem_thp 0 [ 2838.928661][ T2732] inactive_anon 45056 [ 2838.928661][ T2732] active_anon 8347648 [ 2838.928661][ T2732] inactive_file 0 [ 2838.928661][ T2732] active_file 0 [ 2838.928661][ T2732] unevictable 0 [ 2838.928661][ T2732] slab_reclaimable 29448 [ 2838.928661][ T2732] slab_unreclaimable 32296 [ 2838.928661][ T2732] slab 61744 10:16:49 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r1}, 0x10) write$cgroup_int(r0, &(0x7f0000000600), 0x12) [ 2839.186796][ T2995] bridge0: port 1(bridge_slave_0) entered blocking state [ 2839.210918][ T2995] bridge0: port 1(bridge_slave_0) entered disabled state [ 2839.239968][ T2995] device bridge_slave_0 entered promiscuous mode [ 2839.301464][ T2995] bridge0: port 2(bridge_slave_1) entered blocking state [ 2839.353657][ T2995] bridge0: port 2(bridge_slave_1) entered disabled state 10:16:49 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r1}, 0x10) write$cgroup_int(r0, &(0x7f0000000600), 0x12) [ 2839.403068][ T2995] device bridge_slave_1 entered promiscuous mode [ 2839.537989][ T2732] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=2732,uid=0 [ 2839.553873][ T2732] Memory cgroup out of memory: Killed process 2732 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2839.601948][ T2838] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 2839.644590][ T2838] CPU: 0 PID: 2838 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2839.655091][ T2838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2839.665348][ T2838] Call Trace: [ 2839.668656][ T2838] [ 2839.671605][ T2838] dump_stack_lvl+0xd1/0x138 [ 2839.676238][ T2838] dump_header+0x10b/0x85f [ 2839.680703][ T2838] oom_kill_process.cold+0x10/0x15 [ 2839.686038][ T2838] out_of_memory+0x35c/0x14a0 [ 2839.690765][ T2838] ? oom_killer_disable+0x280/0x280 [ 2839.696018][ T2838] ? find_held_lock+0x2d/0x110 [ 2839.700834][ T2838] mem_cgroup_out_of_memory+0x206/0x270 [ 2839.706428][ T2838] ? mem_cgroup_margin+0x130/0x130 [ 2839.711578][ T2838] ? lock_downgrade+0x6e0/0x6e0 [ 2839.716484][ T2838] try_charge_memcg+0xefb/0x12f0 [ 2839.721467][ T2838] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2839.727481][ T2838] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2839.733268][ T2838] ? lock_downgrade+0x6e0/0x6e0 [ 2839.738153][ T2838] ? lock_downgrade+0x6e0/0x6e0 [ 2839.743050][ T2838] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2839.748630][ T2838] __alloc_pages+0x1f3/0x5b0 [ 2839.753261][ T2838] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2839.760077][ T2838] ? memcg_slab_post_alloc_hook+0x249/0x480 [ 2839.766026][ T2838] alloc_pages+0x1aa/0x270 [ 2839.770670][ T2838] __get_free_pages+0xc/0x40 [ 2839.775465][ T2838] pgd_alloc+0x29/0x260 [ 2839.779662][ T2838] mm_init+0x63b/0xc10 [ 2839.783768][ T2838] copy_process+0x43f6/0x7520 [ 2839.788476][ T2838] ? _raw_spin_unlock+0x28/0x40 [ 2839.793615][ T2838] ? wp_page_reuse+0x197/0x570 [ 2839.798434][ T2838] ? __cleanup_sighand+0xb0/0xb0 [ 2839.803401][ T2838] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2839.808906][ T2838] ? rwlock_bug.part.0+0x90/0x90 [ 2839.813880][ T2838] ? lock_chain_count+0x20/0x20 [ 2839.818764][ T2838] kernel_clone+0xeb/0x990 [ 2839.823219][ T2838] ? create_io_thread+0xf0/0xf0 [ 2839.828373][ T2838] ? find_held_lock+0x2d/0x110 [ 2839.833279][ T2838] __do_sys_clone+0xba/0x100 [ 2839.837897][ T2838] ? kernel_clone+0x990/0x990 [ 2839.842626][ T2838] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2839.848650][ T2838] do_syscall_64+0x39/0xb0 [ 2839.853118][ T2838] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2839.859047][ T2838] RIP: 0033:0x7fc355a89dfb [ 2839.863492][ T2838] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 2839.883137][ T2838] RSP: 002b:00007ffd3e97ac70 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2839.891594][ T2838] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc355a89dfb [ 2839.899596][ T2838] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2839.907600][ T2838] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555b7e400 [ 2839.915775][ T2838] R10: 0000555555b7e6d0 R11: 0000000000000246 R12: 0000000000000001 [ 2839.923776][ T2838] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd3e97ad50 [ 2839.931809][ T2838] [ 2839.955428][ T2995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2840.044640][ T2838] memory: usage 368kB, limit 0kB, failcnt 2173 [ 2840.062691][ T2838] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2840.069609][ T2838] Memory cgroup stats for /syz1: [ 2840.069790][ T2838] anon 40960 [ 2840.069790][ T2838] file 180224 [ 2840.069790][ T2838] kernel 155648 [ 2840.069790][ T2838] kernel_stack 32768 [ 2840.069790][ T2838] pagetables 8192 [ 2840.069790][ T2838] sec_pagetables 0 [ 2840.069790][ T2838] percpu 64 [ 2840.069790][ T2838] sock 0 [ 2840.069790][ T2838] vmalloc 0 [ 2840.069790][ T2838] shmem 180224 [ 2840.069790][ T2838] zswap 0 [ 2840.069790][ T2838] zswapped 0 [ 2840.069790][ T2838] file_mapped 180224 [ 2840.069790][ T2838] file_dirty 0 [ 2840.069790][ T2838] file_writeback 0 [ 2840.069790][ T2838] swapcached 0 [ 2840.069790][ T2838] anon_thp 0 [ 2840.069790][ T2838] file_thp 0 [ 2840.069790][ T2838] shmem_thp 0 [ 2840.069790][ T2838] inactive_anon 110592 [ 2840.069790][ T2838] active_anon 110592 [ 2840.069790][ T2838] inactive_file 0 [ 2840.069790][ T2838] active_file 0 [ 2840.069790][ T2838] unevictable 0 [ 2840.069790][ T2838] slab_reclaimable 10424 [ 2840.069790][ T2838] slab_unreclaimable 90560 [ 2840.069790][ T2838] slab 100984 [ 2840.211097][ T2838] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=2838,uid=0 [ 2840.241251][ T2838] Memory cgroup out of memory: Killed process 2838 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2840.287951][ T2995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2840.339915][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2840.347535][ T5108] Bluetooth: hci1: command 0x041b tx timeout [ 2840.372726][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2840.473368][ T2907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2840.511606][ T2995] team0: Port device team_slave_0 added [ 2840.575069][ T2995] team0: Port device team_slave_1 added [ 2840.649377][ T2995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2840.682363][ T2995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2840.732384][ T2995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2840.757709][ T2995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2840.782644][ T2995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2840.872434][ T2995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2841.031638][ T2995] device hsr_slave_0 entered promiscuous mode [ 2841.038940][ T2995] device hsr_slave_1 entered promiscuous mode [ 2841.053155][ T2995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2841.060762][ T2995] Cannot create hsr debugfs directory [ 2841.663864][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2841.673516][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2841.710727][ T5108] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2841.720734][ T5108] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2841.729026][ T5108] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2841.751687][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2841.759629][ T5108] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2841.767762][ T5108] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2841.777342][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2841.786343][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2841.794700][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2841.804938][ T2907] device veth0_vlan entered promiscuous mode [ 2842.087323][ T2907] device veth1_vlan entered promiscuous mode [ 2842.187945][ T48] device hsr_slave_0 left promiscuous mode [ 2842.196517][ T48] device hsr_slave_1 left promiscuous mode [ 2842.203528][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2842.210968][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2842.220991][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2842.229311][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2842.250817][ T48] device bridge_slave_1 left promiscuous mode [ 2842.257552][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2842.275500][ T48] device bridge_slave_0 left promiscuous mode [ 2842.281968][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2842.293500][ T48] device hsr_slave_0 left promiscuous mode [ 2842.299958][ T48] device hsr_slave_1 left promiscuous mode [ 2842.306881][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2842.314399][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2842.324581][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2842.332032][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2842.340762][ T48] device bridge_slave_1 left promiscuous mode [ 2842.351349][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2842.359823][ T48] device bridge_slave_0 left promiscuous mode [ 2842.366439][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2842.380179][ T48] device hsr_slave_0 left promiscuous mode [ 2842.390003][ T48] device hsr_slave_1 left promiscuous mode [ 2842.396952][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2842.404720][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2842.414233][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2842.421649][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2842.422579][ T5108] Bluetooth: hci1: command 0x040f tx timeout [ 2842.438428][ T48] device bridge_slave_1 left promiscuous mode [ 2842.444713][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2842.453636][ T48] device bridge_slave_0 left promiscuous mode [ 2842.459851][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2842.470820][ T48] device hsr_slave_0 left promiscuous mode [ 2842.483640][ T48] device hsr_slave_1 left promiscuous mode [ 2842.489878][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2842.497443][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2842.507474][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2842.515992][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2842.526130][ T48] device bridge_slave_1 left promiscuous mode [ 2842.533013][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2842.541151][ T48] device bridge_slave_0 left promiscuous mode [ 2842.547899][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2842.567187][ T48] device veth1_macvtap left promiscuous mode [ 2842.573460][ T48] device veth0_macvtap left promiscuous mode [ 2842.579616][ T48] device veth1_vlan left promiscuous mode [ 2842.585857][ T48] device veth0_vlan left promiscuous mode [ 2842.594106][ T48] device veth1_macvtap left promiscuous mode [ 2842.600144][ T48] device veth0_macvtap left promiscuous mode [ 2842.606695][ T48] device veth1_vlan left promiscuous mode [ 2842.613136][ T48] device veth0_vlan left promiscuous mode [ 2842.620489][ T48] device veth1_macvtap left promiscuous mode [ 2842.627134][ T48] device veth0_macvtap left promiscuous mode [ 2842.633668][ T48] device veth1_vlan left promiscuous mode [ 2842.639460][ T48] device veth0_vlan left promiscuous mode [ 2842.647855][ T48] device veth1_macvtap left promiscuous mode [ 2842.654169][ T48] device veth0_macvtap left promiscuous mode [ 2842.660212][ T48] device veth1_vlan left promiscuous mode [ 2842.666816][ T48] device veth0_vlan left promiscuous mode [ 2843.138023][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2843.158115][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2843.170655][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2843.189280][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2843.268767][ T48] bond0 (unregistering): Released all slaves [ 2843.389554][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2843.404135][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2843.422206][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2843.441607][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2843.515590][ T48] bond0 (unregistering): Released all slaves [ 2843.661288][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2843.674547][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2843.688517][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2843.705281][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2843.782631][ T5108] Bluetooth: hci0: command 0x0409 tx timeout [ 2843.791842][ T48] bond0 (unregistering): Released all slaves [ 2843.942479][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2843.959098][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2843.974403][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2843.992263][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2844.067029][ T48] bond0 (unregistering): Released all slaves [ 2844.145260][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2844.153644][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2844.261550][ T2907] device veth0_macvtap entered promiscuous mode [ 2844.305817][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2844.314755][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2844.352735][ T2907] device veth1_macvtap entered promiscuous mode [ 2844.363858][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2844.376904][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2844.445346][ T2907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2844.492472][ T2907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.502500][ T5108] Bluetooth: hci1: command 0x0419 tx timeout [ 2844.552583][ T2907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2844.583125][ T2907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.612843][ T2907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2844.642455][ T2907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.674026][ T2907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2844.775035][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2844.793182][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2844.804079][ T2907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2844.843593][ T2907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.864629][ T2907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2844.882398][ T2907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.906432][ T2907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2844.928143][ T2907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.944845][ T2907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2844.982610][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2844.991942][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2845.018889][ T2907] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2845.031301][ T2907] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2845.040333][ T2907] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2845.049985][ T2907] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2845.269252][ T3090] chnl_net:caif_netlink_parms(): no params data found [ 2845.322725][ T8036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2845.330873][ T8036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2845.368823][ T2995] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2845.389840][ T2995] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2845.431913][ T2995] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2845.456430][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2845.489743][ T2995] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2845.489774][ T8036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2845.517375][ T8036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2845.581913][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2845.646481][ T3090] bridge0: port 1(bridge_slave_0) entered blocking state [ 2845.678399][ T3090] bridge0: port 1(bridge_slave_0) entered disabled state [ 2845.698591][ T3090] device bridge_slave_0 entered promiscuous mode [ 2845.757919][ T3090] bridge0: port 2(bridge_slave_1) entered blocking state [ 2845.780209][ T3090] bridge0: port 2(bridge_slave_1) entered disabled state [ 2845.807166][ T3090] device bridge_slave_1 entered promiscuous mode [ 2845.872533][T29331] Bluetooth: hci0: command 0x041b tx timeout [ 2845.934468][ T3122] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2845.947419][ T3122] CPU: 1 PID: 3122 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2845.957793][ T3122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2845.967854][ T3122] Call Trace: [ 2845.971140][ T3122] [ 2845.974076][ T3122] dump_stack_lvl+0xd1/0x138 [ 2845.978683][ T3122] dump_header+0x10b/0x85f [ 2845.983126][ T3122] oom_kill_process.cold+0x10/0x15 [ 2845.988258][ T3122] out_of_memory+0x35c/0x14a0 [ 2845.992958][ T3122] ? oom_killer_disable+0x280/0x280 [ 2845.998174][ T3122] ? mark_held_locks+0x9f/0xe0 [ 2846.002949][ T3122] mem_cgroup_out_of_memory+0x206/0x270 [ 2846.008514][ T3122] ? mem_cgroup_margin+0x130/0x130 [ 2846.013658][ T3122] memory_max_write+0x2f9/0x3c0 [ 2846.018521][ T3122] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2846.024600][ T3122] ? lock_release+0x810/0x810 [ 2846.029285][ T3122] cgroup_file_write+0x1e2/0x770 [ 2846.034236][ T3122] ? mem_cgroup_force_empty_write+0x160/0x160 [ 2846.040310][ T3122] ? kill_css+0x370/0x370 [ 2846.044660][ T3122] ? kill_css+0x370/0x370 [ 2846.049005][ T3122] kernfs_fop_write_iter+0x3f1/0x600 [ 2846.054328][ T3122] vfs_write+0x9ed/0xdd0 [ 2846.058586][ T3122] ? kernel_write+0x630/0x630 [ 2846.063286][ T3122] ? __fget_files+0x26a/0x440 [ 2846.068001][ T3122] ksys_write+0x12b/0x250 [ 2846.072353][ T3122] ? __ia32_sys_read+0xb0/0xb0 [ 2846.077143][ T3122] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2846.083058][ T3122] do_syscall_64+0x39/0xb0 [ 2846.087494][ T3122] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2846.093398][ T3122] RIP: 0033:0x7f969a48c0c9 [ 2846.097819][ T3122] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2846.117688][ T3122] RSP: 002b:00007f969b16a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2846.126105][ T3122] RAX: ffffffffffffffda RBX: 00007f969a5abf80 RCX: 00007f969a48c0c9 [ 2846.134080][ T3122] RDX: 0000000000000012 RSI: 0000000020000600 RDI: 0000000000000005 [ 2846.142228][ T3122] RBP: 00007f969a4e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2846.150198][ T3122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2846.158169][ T3122] R13: 00007ffc3e71456f R14: 00007f969b16a300 R15: 0000000000022000 [ 2846.166159][ T3122] [ 2846.193042][ T3122] memory: usage 8572kB, limit 0kB, failcnt 2521 [ 2846.200442][ T3122] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2846.212240][ T3090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2846.213086][ T3122] Memory cgroup stats for /syz5: [ 2846.228149][ T3122] anon 114688 [ 2846.228149][ T3122] file 8347648 [ 2846.228149][ T3122] kernel 307200 [ 2846.228149][ T3122] kernel_stack 65536 [ 2846.228149][ T3122] pagetables 77824 [ 2846.228149][ T3122] sec_pagetables 0 [ 2846.228149][ T3122] percpu 64 [ 2846.228149][ T3122] sock 0 [ 2846.228149][ T3122] vmalloc 0 [ 2846.228149][ T3122] shmem 8347648 [ 2846.228149][ T3122] zswap 0 [ 2846.228149][ T3122] zswapped 0 [ 2846.228149][ T3122] file_mapped 221184 [ 2846.228149][ T3122] file_dirty 0 [ 2846.228149][ T3122] file_writeback 0 [ 2846.228149][ T3122] swapcached 0 [ 2846.228149][ T3122] anon_thp 0 [ 2846.228149][ T3122] file_thp 0 [ 2846.228149][ T3122] shmem_thp 0 [ 2846.228149][ T3122] inactive_anon 4046848 [ 2846.228149][ T3122] active_anon 4415488 [ 2846.228149][ T3122] inactive_file 0 [ 2846.228149][ T3122] active_file 0 [ 2846.228149][ T3122] unevictable 0 [ 2846.228149][ T3122] slab_reclaimable 38120 [ 2846.228149][ T3122] slab_unreclaimable 99168 [ 2846.228149][ T3122] slab 137288 [ 2846.334761][ T3090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2846.352065][ T3122] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 2846.356655][ T2995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2846.361718][ T3122] ,cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=3121,uid=0 [ 2846.393213][ T3122] Memory cgroup out of memory: Killed process 3121 (syz-executor.5) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2846.443291][ T2995] 8021q: adding VLAN 0 to HW filter on device team0 [ 2846.460510][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2846.469255][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2846.562118][ T3090] team0: Port device team_slave_0 added [ 2846.589759][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 10:16:56 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:16:56 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000780)='\\\x00'}, 0x30) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000401000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r1}, 0x10) write$cgroup_int(r0, &(0x7f0000000600), 0x12) 10:16:56 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 10:16:56 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffd40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000600), 0x12) [ 2846.612778][T22744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2846.642268][T22744] bridge0: port 1(bridge_slave_0) entered blocking state [ 2846.649476][T22744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2846.691863][ T2907] syz-executor.5 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 2846.722510][ T2907] CPU: 0 PID: 2907 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2846.732910][ T2907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2846.742994][ T2907] Call Trace: [ 2846.746287][ T2907] [ 2846.749234][ T2907] dump_stack_lvl+0xd1/0x138 [ 2846.753863][ T2907] dump_header+0x10b/0x85f [ 2846.758321][ T2907] oom_kill_process.cold+0x10/0x15 [ 2846.763479][ T2907] out_of_memory+0x35c/0x14a0 [ 2846.768199][ T2907] ? find_held_lock+0x2d/0x110 [ 2846.772995][ T2907] ? oom_killer_disable+0x280/0x280 [ 2846.778234][ T2907] ? find_held_lock+0x2d/0x110 [ 2846.783033][ T2907] mem_cgroup_out_of_memory+0x206/0x270 [ 2846.788612][ T2907] ? mem_cgroup_margin+0x130/0x130 [ 2846.793754][ T2907] ? lock_downgrade+0x6e0/0x6e0 [ 2846.798644][ T2907] try_charge_memcg+0xefb/0x12f0 [ 2846.803615][ T2907] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2846.809614][ T2907] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2846.815391][ T2907] ? lock_downgrade+0x6e0/0x6e0 [ 2846.820288][ T2907] obj_cgroup_charge+0x2af/0x5e0 [ 2846.825255][ T2907] kmem_cache_alloc_lru+0x145/0x760 [ 2846.830471][ T2907] ? ext4_alloc_inode+0x28/0x680 [ 2846.835438][ T2907] ? tomoyo_path_number_perm+0x242/0x570 [ 2846.841111][ T2907] ? ext4_free_in_core_inode+0x70/0x70 [ 2846.846596][ T2907] ext4_alloc_inode+0x28/0x680 [ 2846.851389][ T2907] ? ext4_free_in_core_inode+0x70/0x70 [ 2846.856872][ T2907] alloc_inode+0x61/0x230 [ 2846.861239][ T2907] new_inode+0x2b/0x280 [ 2846.865434][ T2907] __ext4_new_inode+0x399/0x57d0 [ 2846.870399][ T2907] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2846.876257][ T2907] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 2846.881863][ T2907] ext4_mkdir+0x33e/0xb20 [ 2846.886235][ T2907] ? ext4_init_new_dir+0x4c0/0x4c0 [ 2846.891370][ T2907] ? bpf_lsm_inode_permission+0x9/0x10 [ 2846.896876][ T2907] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 2846.901943][ T2907] vfs_mkdir+0x48d/0x740 [ 2846.906225][ T2907] do_mkdirat+0x27b/0x2f0 [ 2846.910602][ T2907] ? __ia32_sys_mknod+0xb0/0xb0 [ 2846.915493][ T2907] ? getname_flags.part.0+0x1dd/0x4f0 [ 2846.920900][ T2907] __x64_sys_mkdirat+0x119/0x170 [ 2846.925872][ T2907] do_syscall_64+0x39/0xb0 [ 2846.930323][ T2907] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2846.936240][ T2907] RIP: 0033:0x7f969a48b0e7 [ 2846.940683][ T2907] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2846.960315][ T2907] RSP: 002b:00007ffc3e7147c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000102 [ 2846.968749][ T2907] RAX: ffffffffffffffda RBX: 00007ffc3e714850 RCX: 00007f969a48b0e7 [ 2846.976738][ T2907] RDX: 00000000000001ff RSI: 00007ffc3e714850 RDI: 00000000ffffff9c [ 2846.984727][ T2907] RBP: 00007ffc3e71482c R08: 0000000000000000 R09: 0000000000000003 [ 2846.992712][ T2907] R10: 00007ffc3e714567 R11: 0000000000000202 R12: 0000000000000032 [ 2847.000698][ T2907] R13: 00000000002b6bd8 R14: 0000000000000009 R15: 00007ffc3e714890 [ 2847.008712][ T2907] [ 2847.029171][ T3090] team0: Port device team_slave_1 added [ 2847.044785][ T2907] memory: usage 8328kB, limit 0kB, failcnt 2540 [ 2847.051093][ T2907] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2847.058059][ T2907] Memory cgroup stats for /syz5: [ 2847.058253][ T2907] anon 45056 [ 2847.058253][ T2907] file 8347648 [ 2847.058253][ T2907] kernel 126976 [ 2847.058253][ T2907] kernel_stack 0 [ 2847.058253][ T2907] pagetables 8192 [ 2847.058253][ T2907] sec_pagetables 0 [ 2847.058253][ T2907] percpu 64 [ 2847.058253][ T2907] sock 0 [ 2847.058253][ T2907] vmalloc 0 [ 2847.058253][ T2907] shmem 8347648 [ 2847.058253][ T2907] zswap 0 [ 2847.058253][ T2907] zswapped 0 [ 2847.058253][ T2907] file_mapped 221184 [ 2847.058253][ T2907] file_dirty 0 [ 2847.058253][ T2907] file_writeback 0 [ 2847.058253][ T2907] swapcached 0 [ 2847.058253][ T2907] anon_thp 0 [ 2847.058253][ T2907] file_thp 0 [ 2847.058253][ T2907] shmem_thp 0 [ 2847.058253][ T2907] inactive_anon 3977216 [ 2847.058253][ T2907] active_anon 4415488 [ 2847.058253][ T2907] inactive_file 0 [ 2847.058253][ T2907] active_file 0 [ 2847.058253][ T2907] unevictable 0 [ 2847.058253][ T2907] slab_reclaimable 29448 [ 2847.058253][ T2907] slab_unreclaimable 70792 [ 2847.058253][ T2907] slab 100240 [ 2847.158931][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2847.173199][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2847.193543][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2847.202004][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 2847.209168][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2847.240393][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2847.312833][T22355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2847.321705][T22355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2847.363398][T22355] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2847.389975][ T3090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2847.403708][ T3090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2847.483676][ T2907] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2907,uid=0 [ 2847.490606][ T3090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2847.522978][ T2907] Memory cgroup out of memory: Killed process 2907 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2847.549326][ T3090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2847.579138][ T3090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2847.666928][ T3090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2847.699697][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2847.728281][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2847.747434][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2847.842138][ T2995] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2847.880128][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2847.890040][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2847.906759][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2847.942543][T29331] Bluetooth: hci0: command 0x040f tx timeout [ 2848.034819][ T3090] device hsr_slave_0 entered promiscuous mode [ 2848.142815][ T3090] device hsr_slave_1 entered promiscuous mode [ 2849.121858][ T2995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2849.170691][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2849.178428][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2849.436023][ T5108] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2849.444108][ T5108] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2849.451917][ T5108] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2849.460086][ T5108] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2849.467578][ T5108] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2849.549772][ T3090] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2849.563095][ T3090] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2849.609362][ T3090] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2849.652969][ T3090] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2849.980702][ T3090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2850.023351][T29331] Bluetooth: hci0: command 0x0419 tx timeout [ 2850.073591][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2850.081520][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2850.126734][ T3090] 8021q: adding VLAN 0 to HW filter on device team0 [ 2850.167107][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2850.186944][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2850.206774][ T5108] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2850.222809][ T5108] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2850.240442][ T5108] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2850.248373][ T5108] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2850.256282][T22493] bridge0: port 1(bridge_slave_0) entered blocking state [ 2850.263412][T22493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2850.271319][ T5108] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2850.286259][ T3155] chnl_net:caif_netlink_parms(): no params data found [ 2850.308915][T22355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2850.317992][T22355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2850.326990][T22355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2850.335990][T22355] bridge0: port 2(bridge_slave_1) entered blocking state [ 2850.343145][T22355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2850.416863][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2850.433361][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2850.442215][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2850.484992][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2850.583763][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2850.593989][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2850.613095][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2850.637543][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2850.648626][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2850.660473][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2850.694359][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2850.713589][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2850.874102][ T3155] bridge0: port 1(bridge_slave_0) entered blocking state [ 2850.881343][ T3155] bridge0: port 1(bridge_slave_0) entered disabled state [ 2850.894211][ T3155] device bridge_slave_0 entered promiscuous mode [ 2850.902564][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2850.911054][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2850.956389][ T2995] device veth0_vlan entered promiscuous mode [ 2850.974846][ T3155] bridge0: port 2(bridge_slave_1) entered blocking state [ 2850.981974][ T3155] bridge0: port 2(bridge_slave_1) entered disabled state [ 2851.007647][ T3155] device bridge_slave_1 entered promiscuous mode [ 2851.072965][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2851.080943][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2851.139300][ T2995] device veth1_vlan entered promiscuous mode [ 2851.206577][ T3155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2851.286123][ T3155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2851.363760][ T2995] device veth0_macvtap entered promiscuous mode [ 2851.404325][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2851.413524][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2851.433750][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2851.452080][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2851.515988][ T3090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2851.536657][ T3155] team0: Port device team_slave_0 added [ 2851.542771][T29331] Bluetooth: hci2: command 0x0409 tx timeout [ 2851.580259][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2851.593306][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2851.600818][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2851.617468][ T2995] device veth1_macvtap entered promiscuous mode [ 2851.673755][ T3155] team0: Port device team_slave_1 added [ 2851.731763][ T3155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2851.738929][ T3155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2851.766106][ T3155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2851.780105][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2851.790623][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2851.815907][ T3155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2851.825526][ T3155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2851.887806][ T3155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2851.901665][ T3090] device veth0_vlan entered promiscuous mode [ 2851.909794][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2851.918422][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2851.927809][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2851.936027][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2851.955848][ T3170] chnl_net:caif_netlink_parms(): no params data found [ 2851.976845][ T3090] device veth1_vlan entered promiscuous mode [ 2851.986181][ T2995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2851.998475][ T2995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2852.008768][ T2995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2852.020398][ T2995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2852.030606][ T2995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2852.041208][ T2995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2852.051169][ T2995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2852.062229][ T2995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2852.074227][ T2995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2852.128069][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2852.136932][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2852.145952][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2852.156043][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2852.174946][ T2995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2852.198522][ T2995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2852.219075][ T2995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2852.232284][ T2995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2852.261619][ T2995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2852.282500][ T2995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2852.302562][ T2995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2852.322410][ T2995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2852.343527][ T5113] Bluetooth: hci4: command 0x0409 tx timeout [ 2852.351781][ T2995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2852.423764][ T48] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2852.453273][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2852.473774][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2852.492810][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2852.502115][T27665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2852.556360][ T2995] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2852.566708][ T2995] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2852.592569][ T2995] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2852.601312][ T2995] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2852.632009][ T3155] device hsr_slave_0 entered promiscuous mode [ 2852.651131][ T3155] device hsr_slave_1 entered promiscuous mode [ 2852.661130][ T3155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2852.682897][ T3155] Cannot create hsr debugfs directory [ 2852.723566][ T48] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2852.794245][ T3090] device veth0_macvtap entered promiscuous mode [ 2852.873292][ T48] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2852.947490][ T3090] device veth1_macvtap entered promiscuous mode [ 2853.017771][ T48] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2853.124352][ T3090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2853.151494][ T3090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2853.172387][ T3090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2853.192517][ T3090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2853.213657][ T3090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2853.237321][ T3090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2853.258899][ T3090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2853.281689][ T3090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2853.302905][ T3090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2853.324490][ T3090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2853.347358][ T3090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2853.383289][ T3170] bridge0: port 1(bridge_slave_0) entered blocking state [ 2853.390430][ T3170] bridge0: port 1(bridge_slave_0) entered disabled state [ 2853.415082][ T3170] device bridge_slave_0 entered promiscuous mode [ 2853.425250][ T3170] bridge0: port 2(bridge_slave_1) entered blocking state [ 2853.432774][ T3170] bridge0: port 2(bridge_slave_1) entered disabled state [ 2853.441020][ T3170] device bridge_slave_1 entered promiscuous mode [ 2853.457402][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2853.467051][T12800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2853.486659][ T3090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2853.498716][ T3090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2853.509351][ T3090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2853.520227][ T3090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2853.531408][ T3090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2853.542224][ T3090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2853.562556][ T3090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2853.573325][ T3090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2853.583600][ T3090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2853.601736][ T3090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2853.622629][ T5113] Bluetooth: hci2: command 0x041b tx timeout [ 2853.624346][ T3090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2853.683848][ T3170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2853.694878][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2853.704132][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2853.718021][ T3090] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2853.726945][ T3090] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2853.737715][ T3090] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2853.746634][ T3090] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2853.772973][ T3170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2853.809710][ T3170] team0: Port device team_slave_0 added [ 2853.819050][ T3170] team0: Port device team_slave_1 added [ 2853.819338][ T9586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2853.843453][ T9586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2853.890120][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2854.053746][ T3155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2854.128539][ T3170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2854.138107][ T3170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2854.222395][ T3170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2854.244792][ T5190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2854.268343][ T3155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2854.282636][ T5190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2854.360605][ T3170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2854.372679][ T3170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2854.422629][ T5113] Bluetooth: hci4: command 0x041b tx timeout [ 2854.430348][ T3170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2854.453596][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2854.544275][ T3155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2854.603293][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2854.611446][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2854.690279][ T3155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2854.764288][T28161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2854.801277][ T3170] device hsr_slave_0 entered promiscuous mode [ 2854.825960][ T3170] device hsr_slave_1 entered promiscuous mode [ 2854.850020][ T3170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2854.871383][ T3170] Cannot create hsr debugfs directory [ 2854.927447][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2854.956098][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2854.969328][ T3231] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2854.980587][ T48] ------------[ cut here ]------------ [ 2854.986058][ T48] DEBUG_LOCKS_WARN_ON(1) [ 2854.986120][ T48] WARNING: CPU: 0 PID: 48 at kernel/locking/lockdep.c:231 __lock_acquire+0xecf/0x56d0 [ 2854.999980][ T48] Modules linked in: [ 2855.003873][ T48] CPU: 0 PID: 48 Comm: kworker/u4:3 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2855.013841][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2855.023886][ T48] Workqueue: netns cleanup_net [ 2855.028653][ T48] RIP: 0010:__lock_acquire+0xecf/0x56d0 [ 2855.034192][ T48] Code: 28 14 73 8e e8 02 bb 6b 00 8b 05 94 78 0f 0d 85 c0 0f 85 79 f8 ff ff 48 c7 c6 40 51 4c 8a 48 c7 c7 a0 4a 4c 8a e8 51 d6 5b 08 <0f> 0b 31 c0 e9 73 f7 ff ff 48 63 5c 24 18 be 08 00 00 00 48 89 d8 [ 2855.053788][ T48] RSP: 0018:ffffc90000b97518 EFLAGS: 00010082 [ 2855.059845][ T48] RAX: 0000000000000000 RBX: 00000000000008d2 RCX: 0000000000000000 [ 2855.067831][ T48] RDX: ffff888017c30000 RSI: ffffffff8166724c RDI: fffff52000172e95 [ 2855.075792][ T48] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 2855.083764][ T48] R10: 0000000080000002 R11: 0000000000000001 R12: 0000000000000003 [ 2855.091726][ T48] R13: ffff888017c30000 R14: ffff888017c30a38 R15: dffffc0000000000 [ 2855.099703][ T48] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 2855.108646][ T48] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2855.115223][ T48] CR2: 00007ff038c09378 CR3: 000000000c48e000 CR4: 00000000003506f0 [ 2855.123190][ T48] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2855.131153][ T48] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2855.139203][ T48] Call Trace: [ 2855.142487][ T48] [ 2855.145419][ T48] ? __lock_acquire+0x2567/0x56d0 [ 2855.150442][ T48] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2855.156432][ T48] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2855.162408][ T48] lock_acquire+0x1e3/0x630 [ 2855.166904][ T48] ? __perf_event_task_sched_in+0xb0/0x6c0 [ 2855.172709][ T48] ? find_held_lock+0x2d/0x110 [ 2855.177479][ T48] ? lock_release+0x810/0x810 [ 2855.182151][ T48] ? psi_task_switch+0x2de/0x930 [ 2855.187086][ T48] ? lock_downgrade+0x6e0/0x6e0 [ 2855.191934][ T48] __perf_event_task_sched_in+0xe2/0x6c0 [ 2855.197562][ T48] ? __perf_event_task_sched_in+0xb0/0x6c0 [ 2855.203363][ T48] ? ctx_sched_in+0x850/0x850 [ 2855.208036][ T48] ? __schedule+0xb02/0x5450 [ 2855.212630][ T48] ? lock_downgrade+0x6e0/0x6e0 [ 2855.217476][ T48] finish_task_switch.isra.0+0x5e5/0xc80 [ 2855.223113][ T48] ? __switch_to+0x5d0/0x10a0 [ 2855.227785][ T48] ? __switch_to_asm+0x3e/0x60 [ 2855.232561][ T48] __schedule+0xb92/0x5450 [ 2855.237092][ T48] ? lockdep_hardirqs_on+0x7d/0x100 [ 2855.242284][ T48] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2855.247921][ T48] ? io_schedule_timeout+0x150/0x150 [ 2855.253217][ T48] ? __mutex_lock+0xa43/0x1360 [ 2855.258062][ T48] schedule+0xde/0x1b0 [ 2855.262133][ T48] schedule_preempt_disabled+0x13/0x20 [ 2855.267595][ T48] __mutex_lock+0xa48/0x1360 [ 2855.272179][ T48] ? devlink_pernet_pre_exit+0x10a/0x220 [ 2855.277894][ T48] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 2855.283435][ T48] ? lock_downgrade+0x6e0/0x6e0 [ 2855.288277][ T48] ? devlink_try_get+0x15d/0x1e0 [ 2855.293219][ T48] devlink_pernet_pre_exit+0x10a/0x220 [ 2855.298678][ T48] ? devlinks_xa_find_get+0x220/0x220 [ 2855.304140][ T48] ? cttimeout_net_pre_exit+0x10d/0x500 [ 2855.309724][ T48] ? devlinks_xa_find_get+0x220/0x220 [ 2855.315097][ T48] cleanup_net+0x455/0xb10 [ 2855.319510][ T48] ? unregister_pernet_device+0x80/0x80 [ 2855.325056][ T48] process_one_work+0x9bf/0x1710 [ 2855.329993][ T48] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 2855.335625][ T48] ? rwlock_bug.part.0+0x90/0x90 [ 2855.340555][ T48] ? _raw_spin_lock_irq+0x45/0x50 [ 2855.345583][ T48] worker_thread+0x669/0x1090 [ 2855.350259][ T48] ? process_one_work+0x1710/0x1710 [ 2855.355456][ T48] kthread+0x2e8/0x3a0 [ 2855.359518][ T48] ? kthread_complete_and_exit+0x40/0x40 [ 2855.365145][ T48] ret_from_fork+0x1f/0x30 [ 2855.369574][ T48] [ 2855.372675][ T48] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2855.379944][ T48] CPU: 0 PID: 48 Comm: kworker/u4:3 Not tainted 6.2.0-rc2-syzkaller-00304-gaf0e26beaa69 #0 [ 2855.389911][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2855.399957][ T48] Workqueue: netns cleanup_net [ 2855.404719][ T48] Call Trace: [ 2855.407989][ T48] [ 2855.410921][ T48] dump_stack_lvl+0xd1/0x138 [ 2855.415529][ T48] panic+0x2cc/0x626 [ 2855.419442][ T48] ? panic_print_sys_info.part.0+0x110/0x110 [ 2855.425429][ T48] ? __lock_acquire+0xecf/0x56d0 [ 2855.430533][ T48] check_panic_on_warn.cold+0x19/0x35 [ 2855.435993][ T48] __warn+0xf2/0x1a0 [ 2855.439890][ T48] ? __lock_acquire+0xecf/0x56d0 [ 2855.444908][ T48] report_bug+0x1c0/0x210 [ 2855.449237][ T48] handle_bug+0x3c/0x70 [ 2855.453482][ T48] exc_invalid_op+0x18/0x50 [ 2855.457985][ T48] asm_exc_invalid_op+0x1a/0x20 [ 2855.462833][ T48] RIP: 0010:__lock_acquire+0xecf/0x56d0 [ 2855.468463][ T48] Code: 28 14 73 8e e8 02 bb 6b 00 8b 05 94 78 0f 0d 85 c0 0f 85 79 f8 ff ff 48 c7 c6 40 51 4c 8a 48 c7 c7 a0 4a 4c 8a e8 51 d6 5b 08 <0f> 0b 31 c0 e9 73 f7 ff ff 48 63 5c 24 18 be 08 00 00 00 48 89 d8 [ 2855.488150][ T48] RSP: 0018:ffffc90000b97518 EFLAGS: 00010082 [ 2855.494212][ T48] RAX: 0000000000000000 RBX: 00000000000008d2 RCX: 0000000000000000 [ 2855.502181][ T48] RDX: ffff888017c30000 RSI: ffffffff8166724c RDI: fffff52000172e95 [ 2855.510145][ T48] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 2855.518284][ T48] R10: 0000000080000002 R11: 0000000000000001 R12: 0000000000000003 [ 2855.526248][ T48] R13: ffff888017c30000 R14: ffff888017c30a38 R15: dffffc0000000000 [ 2855.534214][ T48] ? vprintk+0x8c/0xa0 [ 2855.538308][ T48] ? __lock_acquire+0xecf/0x56d0 [ 2855.543242][ T48] ? __lock_acquire+0x2567/0x56d0 [ 2855.548259][ T48] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2855.554232][ T48] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2855.560207][ T48] lock_acquire+0x1e3/0x630 [ 2855.564791][ T48] ? __perf_event_task_sched_in+0xb0/0x6c0 [ 2855.570593][ T48] ? find_held_lock+0x2d/0x110 [ 2855.575356][ T48] ? lock_release+0x810/0x810 [ 2855.580029][ T48] ? psi_task_switch+0x2de/0x930 [ 2855.584962][ T48] ? lock_downgrade+0x6e0/0x6e0 [ 2855.589805][ T48] __perf_event_task_sched_in+0xe2/0x6c0 [ 2855.595432][ T48] ? __perf_event_task_sched_in+0xb0/0x6c0 [ 2855.601230][ T48] ? ctx_sched_in+0x850/0x850 [ 2855.605901][ T48] ? __schedule+0xb02/0x5450 [ 2855.610493][ T48] ? lock_downgrade+0x6e0/0x6e0 [ 2855.615340][ T48] finish_task_switch.isra.0+0x5e5/0xc80 [ 2855.620975][ T48] ? __switch_to+0x5d0/0x10a0 [ 2855.625648][ T48] ? __switch_to_asm+0x3e/0x60 [ 2855.630430][ T48] __schedule+0xb92/0x5450 [ 2855.634847][ T48] ? lockdep_hardirqs_on+0x7d/0x100 [ 2855.640045][ T48] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2855.645681][ T48] ? io_schedule_timeout+0x150/0x150 [ 2855.650967][ T48] ? __mutex_lock+0xa43/0x1360 [ 2855.655729][ T48] schedule+0xde/0x1b0 [ 2855.659797][ T48] schedule_preempt_disabled+0x13/0x20 [ 2855.665257][ T48] __mutex_lock+0xa48/0x1360 [ 2855.669838][ T48] ? devlink_pernet_pre_exit+0x10a/0x220 [ 2855.675471][ T48] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 2855.681008][ T48] ? lock_downgrade+0x6e0/0x6e0 [ 2855.685848][ T48] ? devlink_try_get+0x15d/0x1e0 [ 2855.690787][ T48] devlink_pernet_pre_exit+0x10a/0x220 [ 2855.696244][ T48] ? devlinks_xa_find_get+0x220/0x220 [ 2855.701616][ T48] ? cttimeout_net_pre_exit+0x10d/0x500 [ 2855.707161][ T48] ? devlinks_xa_find_get+0x220/0x220 [ 2855.712532][ T48] cleanup_net+0x455/0xb10 [ 2855.716945][ T48] ? unregister_pernet_device+0x80/0x80 [ 2855.722491][ T48] process_one_work+0x9bf/0x1710 [ 2855.727428][ T48] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 2855.732796][ T48] ? rwlock_bug.part.0+0x90/0x90 [ 2855.737727][ T48] ? _raw_spin_lock_irq+0x45/0x50 [ 2855.742753][ T48] worker_thread+0x669/0x1090 [ 2855.747433][ T48] ? process_one_work+0x1710/0x1710 [ 2855.752628][ T48] kthread+0x2e8/0x3a0 [ 2855.756696][ T48] ? kthread_complete_and_exit+0x40/0x40 [ 2855.762326][ T48] ret_from_fork+0x1f/0x30 [ 2855.766743][ T48] [ 2856.848633][ T48] Shutting down cpus with NMI [ 2856.853527][ T48] Kernel Offset: disabled [ 2856.857850][ T48] Rebooting in 86400 seconds..